Page tree

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Include Page
_IW Academy
_IW Academy

Hide_comments
The switch can operate in one of the following modes: "isolate" or "transparent".

In "isolate" mode, packet switching is based on the port isolation rules. External ports are isolated from each other and traffic from each of them is redirected to the internal ports according to the port isolation rules, so that any direct traffic between the external ports is impossible. This is the basic mode, used by default, including situations when there are no any VLAN settings any VLAN settings or 802.1Q-support is disabled in "transparent" mode.

In "transparent" mode, direct traffic transmission between external ports (without involving the internal ones) is possible, packet switching is performed according to the VLANthe VLAN-tags and internal “port “port - VLAN VLAN-tag” tag” correspondence table, if it exists.

...

  • By default the switch operates in "isolate" mode, i.e. all the ports are isolated from each other, even if they are located in the same VLAN
  • All the ports operate in "trunk" mode with "native VLAN 1" for untagged traffic
  • Radio radio interface is up and operates within the switch as a regular port
  • DHCP-client is enabled on the management interface "MGMTmgmt".

"port" command

Use this command for the built-in switch management.

...

#1> port [arguments]

Code Block
languagejava
themeDJango
port [-scheme=SCHEME] [-mgmt=PORT_SET] [-radio=PORT_SET]
port -d1q[=[disable|enable]]
port -vlan={RANGELISTRANgeLIST} [{-priority=PRIO|-nopriority}]
port -vlan={RANGELISTRANgeLIST} [-stp] [-nostp] [{-spriority=STPPRIO|-nospriority}] [-sforward[=enable|disable]]
port -vlan={RANGELISTRANgeLIST} -remove={RANGELISTRANgeLIST}
port [PORT_SET] [-access=TAG] [-native=TAG] [-mode={access|trunk}]

port [PORT_SET] [-allow={RANGELISTRANgeLIST}] [-disallow={RANGELISTRANgeLIST}]
port [PORT_SET] [-limit={RATE_LIMIT}] [-nolimit] [-qosmode={wrr|st3|st23|strict}]
port [PORT_SET] stat|clear|vtt|stt [VID]|fdb-show|dump

RANGELISTRANgeLIST: RANGERANge[,RANGERANge...]
      RANGERANge: {TAG[-TAG]|all}
      PRIO: {0..7}    - DOT1P frame priority
RATE_LIMIT: {0..1000} - port egress rate limit in Mbit/sec
    STPPRIO: {0..15} | {0,4096,8192...61440}
   Port set <PORT_SET>:
           enumeration of {[ge]0..[ge]1,s[fp],m,r}|*, for example 0,ge1,m
   Adjacency scheme <SCHEME>:
           {isolate, transparent}

Command arguments description is given in the table below:

Center
Scroll Title
titleTable - "port" arguments description
CommandDescription
port [-scheme=SCHEME]
  • Select one of the switch modes:
    • isolate
    • transparent
port [-mgmt=PORT_SET] [-radio=PORT_SET]
  • Configure the port isolation rules for traffic redirection from external physical interfaces "
GE0
  • ge0", "
GE1
  • ge1" and/or "
SFP
  • sfp" to the interfaces "
RADIO
  • radio" or "
MGMT
  • mgmt"
port -d1q[=[disable|enable]]
  • Disable/enable the switching rules based on VLAN-tags of the 802.1Q standard
  • In order to enable switching based on the port isolation rules even if the "transparent" mode is selected, disable the switching rules based on VLAN-tags of the 802.1Q standard
port -vlan={
RANGELIST
RANgeLIST}
  • Add
VLANs
  • VLANs to the system with numbers from 1 to 4094

Example,

Code Block
languagejava
themeDJango
port -vlan=50,52,60-64
adds VLANs

adds VLANs 50, 52, 60, 61, 62, 63, 64

port -remove={
RANGELIST
RANgeLIST}
  • Remove any previously
created VLANs
  • created VLANs from the system
port -vlan={
RANGELIST
RANgeLIST} {-priority=PRIO}
  • Set for the
selected VLANs
  • selected VLANs the priority according to 802.1p ranging from 0 to 7, where 0 - the lowest priority level, 7 - the highest

Example,

Code Block
languagejava
themeDJango
port -vlan=50 -priority 7

sets the priority 7 (Network control) to

the VLAN 50

the VLAN 50

port -vlan={
RANGELIST
RANgeLIST} {-nopriority}
  • Remove the previously set priority for the selected VLAN
port -vlan={
RANGELIST
RANgeLIST} [-stp]
Enable STP support
  • Enable STP support for the
selected VLANs
  • selected VLANs
  • Enable on the switch the support of PVST+ (Per-VLAN Spanning Tree Plus) protocol – the special version
of STP
  • of STP, which allows creating a separate spanning tree for each VLAN
port -vlan={
RANGELIST
RANgeLIST} [-nostp]
Disable STP support
  • Disable STP support for the
selected VLANs
  • selected VLANs
port -vlan={
RANGELIST
RANgeLIST} {-spriority=STPPRIO}
  • Set the bridge priority
for STP in the selected VLAN ranging
  • for STP in the selected VLAN ranging from 0 to 61440 in increments of 4096 (or from 0 to 16 in increments of 1)

Example,

Code Block
languagejava
themeDJango
port -vlan=50 -spriority=4096

sets the bridge priority 4096 for VLAN 50

port -vlan={
RANGELIST
RANgeLIST} {-nospriority}
  • Remove the bridge priority
for STP in
  • for STP in the selected VLAN
port -vlan={
RANGELIST
RANgeLIST} [-sforward[=enable|disable]]
  • Enable/disable the forwarding
of STP packets
  • of STP packets in the selected VLAN
port [PORT_SET] [-mode={access|trunk}]
  • Select operation mode for the port:
    • "access" mode - allows untagged traffic only
    • "trunk" mode - allows tagged traffic only. If you need to allow both tagged and untagged traffic through the port, you can configure the "native VLAN" option that defines the
only VLAN for
    • only VLAN for receiving of all incoming untagged traffic in "trunk" mode ("
VLAN 1
    • VLAN 1" is configured as a "native VLAN" for all the ports of the switch by default)
port [PORT_SET] [-access=TAG]
 Define VLANs
  •  Define VLANs for the port operation in "access" mode

Example,

Code Block
languagejava
themeDJango
port 0 -access=50 -mode=access

sets the "access" mode for the port "

GE0

ge0" and

defines VLAN 50

defines VLAN 50 for this port operation

 port [PORT_SET] [-allow={
RANGELIST
RANgeLIST}]
Define VLANs
  • Define VLANs for the port operation in "trunk" mode

Example,

Code Block
languagejava
themeDJango
port 1 -allow=50-55 -mode=trunk

sets the "trunk" mode for the port "

GE1

ge1" and allows operations

with VLAN 50

with VLAN 50, 51, 52, 53, 54, 55

port [PORT_SET] [-native=TAG]
Set VLAN for
  • Set VLAN for operation as a "
native VLAN
  • native VLAN" for the port in "trunk" mode
port [PORT_SET] [-disallow={
RANGELIST
RANgeLIST}]
  • Remove the
selected VLANs
  • selected VLANs from the port
port [PORT_SET] [-limit={RATE_LIMIT}]
  • Set on the selected port the limit for outgoing traffic (traffic shaper) in Mbps, ranging from 1 to 100 in increments of 1 or from 100 to 1000 in increments of 10

Example,

 


Code Block
languagejava
themeDJango
port 0,1 -limit=120 

sets the limit of 120 Mbps on the ports "

GE0

ge0" and "

GE1

ge1"

port [PORT_SET] [-nolimit]
  • Remove the limits of throughput on the port
port [PORT_SET] [-qosmode={wrr|st3|st23|strict}]
  • Select
the QoS policy
  • the QoS policy for the port (
WRR is
  • WRR is used by default):
    • wrr - use weighted round robin for all queues.
    • st3 - use strict priority for queue 3 and weighted round robin for queues 2, 1 and 0.
    • st23 - use strict priority for queue 3 and 2, and weighted round robin for queues 1 and 0.
    • strict - use strict priority for all queues.
port [PORT_SET] stat
  • Display statistics for the port
port [PORT_SET] clear
  • Reset statistics for the port
port vtt
  • View
the VLAN
  • the VLAN-based switching matrix,
 STP status and VLAN priorities
  •  STP status and VLAN priorities
port stt [VID]
  • View the information about operation
of STP in the selected VLAN and
  • of STP in the selected VLAN and on each of the associated ports

Example,

Code Block
languagejava
themeDJango
#1> port stt 30
STP state of VID 30:
ID:       100000043507A2A5 Priority: 4096  ID ext:-1
ROOT:     100000043507A2A5 Priority: 4096  ID ext: 0
Ports:
 Name  Prio   Cost       PVer    Role     State
====== ====  ========== ==== ========== ==========
ge1    128           55 RSTP DISABLED   DISCARDING
sfp    128           55 RSTP DISABLED   DISCARDING
port [PORT_SET] fdb-show
View MAC
  • View MAC-addresses in the switching matrix (fdb) of the selected port

Example,

Code Block
languagejava
themeDJango
 #1> port 0 fdb-show
FDB total entries: 10
         VID  Destination    Port    Status  T-left
        ===== ============ ========= ======= ======
        v30   0016c8822d60         0 dynamic    330
        v30   001b21c5a964         0 dynamic    330
        v30   00043507a434         0 dynamic    282
        v30   00045f94b74a         0 dynamic    188
        v30   002170f485a5         0 dynamic     94
        v30   382c4ab2d932         0 dynamic     94
port [PORT_SET] dump
  • View general information about the port operation (traffic shaper limits,
 QoS policy
  •  QoS policy, port status, and data transfer rate)

Example,

Code Block
languagejava
themeDJango
#1> port dump
        Port R-limit QOS Mode Link   Speed
        ==== ======= ======== ==== =========
          0  ------- wrr        UP 1000 Mbps
          1  ------- wrr        UP 1000 Mbps
          s  ------- wrr        UP 1000 Mbps
          r      420 strict     UP   21 Mbps
          m  ------- strict   ---- ---------

Configuration examples

Configure the switch for operation in "isolate" mode. It is the default mode. If you need to switch from "transparent" mode, use the command:

  • port -scheme= isolate

Configure the port isolation rules for traffic redirection from external physical interfaces "GE0ge0", "GE1ge1" and/or "SFPsfp" to the interfaces "RADIOradio" or "MGMTmgmt":

Assign access to the management interface through the "GE0ge0" port:

  • port -mgmt=0

Assign the port "GE1ge1" for data transfer to the port "RADIOradio":

  • port -radio=1

Configure the switch for operation in "transparent" mode.

See VLAN-based switching matrix with default settings below:

Code Block
languagejava
themeDJango
port vtt
        VID  0 1 2 r m STP Prio
        ==== = = = = = === ====
           1 N N N N N  - ----

In order to switch to "transparent" mode, execute the command:

  • port -scheme=transparent

Configuring of the switch starts with adding VLANsVLANs, which are necessary for data transfer and device management:

Code Block
languagejava
themeDJango
port -vlan=30,100
port vtt
        VID  0 1 2 r m STP Prio
        ==== = = = = = === ====
           1 N N N N N  -  ----
          30 t t t t t  -  ----
         100 t t t t t  -  ----

Set the parameters of processing of tagged or/and untagged traffic for each port.

Set access of untagged packets to VLAN 30 VLAN 30 on the management interface "MGMTmgmt":

Code Block
languagejava
themeDJango
port m -access=30 -mode=access
port vtt
        VID  0 1 2 r m STP Prio
        ==== = = = = = === ====
           1 N N N N -  -  ----
          30 t t t t A  -  ----
         100 t t t t -  -  ----

Set access of untagged packets only to VLAN 30 VLAN 30 on the port "GE0ge0":

Code Block
languagejava
themeDJango
port 0 -access=30 -mode=access
port vtt
        VID  0 1 s r m STP Prio
        ==== = = = = = === ====
           1 - N N N -  -  ----
          30 A t t t A  -  ----
         100 - t t t -  -  ----

Set the "GE1ge1" port for processing of tagged packets of the VLAN 30 VLAN 30 only ("trunk" mode):

Code Block
languagejava
themeDJango
port 1 -allow=30 -mode=trunk
port vtt
        VID  0 1 s r m STP Prio
        ==== = = = = = === ====
           1 - - N N -  -  ----
          30 A t t t A  -  ----
         100 - - t t -  -  ----

Set the port "SFPsfp" for processing of tagged packets of the VLAN 100 VLAN 100 only ("trunk" mode):

Code Block
languagejava
themeDJango
port s -allow=100 -mode=trunk
port vtt
        VID  0 1 s r m STP Prio
        ==== = = = = = === ====
           1 - - - N -  -  ----
          30 A t - t A  -  ----
         100 - - t t -  -  ----

Set the port "RADIOradio" for processing of tagged packets of the VLAN 30 VLAN 30 and VLAN 100 ("trunk" mode):

Code Block
languagejava
themeDJango
portr -allow=30,100 -mode=trunk
port vtt
        VID  0 1 s r m STP Prio
        ==== = = = = = === ====
          30 A t - t A  -  ----
         100 - - t t -  -  ----