Syntax: 

#1> port [arguments]

port [-scheme=SCHEME] [-mgmt=PORT_SET] [-radio=PORT_SET]
port -d1q[=[disabled|enabled]]
port -vlan={RANGELIST} [{-priority=PRIO|-nopriority}]
port -vlan={RANGELIST} [-stp] [-nostp] [{-spriority=STPPRIO|-nospriority}] [-sforward[=enable|disable]]
port -vlan={RANGELIST} -remove={RANGELIST}
port [PORT_SET] [-access=TAG] [-native=TAG] [-mode={access|trunk}]

port [PORT_SET] [-allow={RANGELIST}] [-disallow={RANGELIST}]
port [PORT_SET] [-limit={RATE_LIMIT}] [-nolimit] [-qosmode={wrr|st3|st23|strict}]
port [PORT_SET] stat|clear|vtt|stt [VID]|fdb-show|dump

RANGELIST: RANGE[,RANGE...]
      RANGE: {TAG[-TAG]|all}
      PRIO: {0..7}    - DOT1P frame priority
RATE_LIMIT: {0..1000} - port egress rate limit in Mbit/sec
    STPPRIO: {0..15} | {0,4096,8192...61440}
   Port set <PORT_SET>:
           enumeration of {[ge]0..[ge]1,s[fp],m,r}|*, for example 0,ge1,m
   Adjacency scheme <SCHEME>:
           {isolate, transparent}

The switch can operate in one of the following modes: isolate or transparent.

In isolate mode, packet switching is based on the port isolation rules. External ports are isolated from each other and traffic from each of them is redirected to the internal ports according to the port isolation rules, so that any direct traffic between the external ports is impossible. This is the basic mode, used by default, including situations when there are no any VLAN settings or 802.1Q-support is disabled in transparent mode.

In transparent mode, direct traffic transmission between external ports (without involving the internal ones) is possible; packet switching is performed according to the VLAN-tags and internal “port - VLAN-tag” correspondence table, if it exists.

The following command allows you to select one of the switch modes - isolate or transparent:

• port [-scheme=SCHEME]

If you need to configure the port isolation rules for traffic redirection from external physical interfaces GE0, GE1 and/or SFP to the interfaces RADIO or MGMT, use the following command:

• port [-mgmt=PORT_SET] [-radio=PORT_SET]

If you need to disable the switching rules based on 802.1Q-tags, even if the transparent mode is selected (and to enable switching based on the port isolation rules), use the command:

• port -d1q=disabled

In order to add to the system the VLANs with the numbers from 1 to 4094, use the command:

• port -vlan={RANGELIST}.

Example:

port -vlan=50,52,60-64

adds VLANs 50,52,60,61,62,63,64.

If you want to remove any previously created VLANs from the system, use the command:

• port -remove={RANGELIST}

If you need to set for the selected VLANs the priority according to 802.1p ranging from 0 to 7, use the command:

• port -vlan={RANGELIST} {-priority=PRIO}

Example:

port -vlan=50 -priority 7

sets the priority 7 (Network control) to the VLAN 50.

In order to remove the priority of the selected VLANs, perform the command:

• port -vlan={RANGELIST} {-nopriority}

You can enable on the switch the support of PVST+ (Per-VLAN Spanning Tree Plus) protocol – the special version of STP, which allows creating a separate spanning tree for each VLAN.
In order to enable STP support for the selected VLANs, use the command:

• port -vlan={RANGELIST} [-stp]

In order to disable STP support for the selected VLANs, use the command:

• port -vlan={RANGELIST} [-nostp]

In order to set the bridge priority for STP in the selected VLAN ranging from 0 to 61440 in increments of 4096 (or from 0 to 16 in increments of 1), use the command:

• port -vlan={RANGELIST} {-spriority=STPPRIO}

Example:

port -vlan=50 -spriority=4096 

sets the bridge priority 4096 for VLANN 50.

In order to remove the bridge priority for STP in the selected VLAN, use the command:

• port -vlan={RANGELIST} {-nospriority}

If you need to enable/disable the forwarding of STP packets in the selected VLAN, use the corresponding command:

• port -vlan={RANGELIST} [-sforward[=enable|disable]]

Ports of the switch can operate in one of the two operation modes:

• access mode (allows untagged traffic only) and
• trunk mode (allows tagged traffic only). If you need to allow both tagged and untagged traffic through the port, you can configure the native VLAN option that defines the only VLAN for receiving of all incoming untagged traffic in trunk mode (VLAN 1 is configured as a Native VLAN for all the ports of the switch by default).

In order to select access or trunk mode for the port, use the command:

• port [PORT_SET] [-mode={access|trunk}]

If you want to define VLANs for the port operation in access mode, use the command:

• port [PORT_SET] [-access=TAG]

Example:

port 0 -access=50 -mode=access

sets the access mode for the port GE0 and defines VLAN 50 for operation of this port.

If you want to define VLANs for the port operation in trunk mode, use the command:

• port [PORT_SET] [-allow={RANGELIST}]

Example:

port 1 -allow=50-55 -mode=trunk

sets the trunk mode for the port GE1 and allows operations with VLAN 50,51,52,53,54,55.

If you need to set VLAN for operation as a Native VLAN for the port in trunk mode, use the command:

• port [PORT_SET] [-native=TAG]

In order to remove the selected VLANs from the port, use the command:

• port [PORT_SET] [-disallow={RANGELIST}]

If you need to set on the selected port the limit for outgoing traffic (traffic shaper) in Mbps, ranging from 1 to 100 in increments of 1 or from 100 to 1000 in increments of 10, use the command:

• port [PORT_SET] [-limit={RATE_LIMIT}]

Example:

port 0,1 -limit=120 

sets the limit of 120 Mbps on the ports GE0 and GE1.

In order to remove the limits of throughput on the port, use the command:

• port [PORT_SET] [-nolimit]

In order to select the QoS policy for the port (WRR is used by default), use the following command:

• port [PORT_SET] [-qosmode={wrr|st3|st23|strict}]

Use these commands to get statistics data and information about current parameters of the device operation:

• port [PORT_SET] stat|clear|vtt|stt [VID]|fdb-show|dump

In order to display statistics for the port, use the command:

• port [PORT_SET] stat

In order to clear statistics for the port, use the command:

• port [PORT_SET] clear

If you want to view the VLAN-based switching matrix, STP status and VLAN priorities, use the command:

• port vtt

If you want to view the information about operation of STP in the selected VLAN and on each of the associated ports, use the command:

• port stt [VID]

Example:

#1> port stt 30
STP state of VID 30:
ID:       100000043507A2A5 Priority: 4096  ID ext: -1
ROOT:     100000043507A2A5 Priority: 4096  ID ext: 0
Ports:
 Name  Prio   Cost       PVer    Role     State
====== ====  ========== ==== ========== ==========
ge1    128           55 RSTP DISABLED   DISCARDING
sfp    128           55 RSTP DISABLED   DISCARDING

If you want to view MAC-addresses in the switching matrix (FDB) of the selected port, use the command:

• port [PORT_SET] fdb-show

In order to view general information about the port operation: traffic shaper limits, QoS policy, port status, and data transfer rate, use the command:

• port [PORT_SET] dump

Example:

#console>port dump
 Port R-limit QOS Mode Link   Speed
 ==== ======= ======== ==== =========
   0  ------- wrr        UP 100 Mbps
   1  ------- wrr      down
   s  ------- wrr      down
   r      140 wrr        UP  26 Mbps
   m  ------- wrr      ---- ---------

Configuration examples

Configure the switch for operation in isolate mode. It is the default mode. If you need to switch from transparent mode, use the command:

• port -scheme= isolate

Configure the port isolation rules for traffic redirection from external physical interfaces GE0, GE1 and/or SFP to the interfaces RADIO or MGMT:

Assign access to the management interface through the GE0 port:

• port -mgmt=0

Assign the port GE1 for data transfer to the port RADIO:

• port -radio=1

Configure the switch for operation in transparent mode.

See VLAN-based switching matrix with default settings below:

port vtt
        VID  0 1 2 r m STP Prio
        ==== = = = = = === ====
           1 N N N N N  - ----

In order to switch to transparent mode, execute the command:

• port -scheme=transparent

Configuring of the switch starts with adding VLANs, which are necessary for data transfer and device management:

port -vlan=30,100
port vtt
        VID  0 1 2 r m STP Prio
        ==== = = = = = === ====
           1 N N N N N  -  ----
          30 t t t t t  -  ----
         100 t t t t t  -  ----

Set the parameters of processing of tagged or/and untagged traffic for each port.

Set access of untagged packets to VLAN 30 on the management interface MGMT:

port m -access=30 -mode=access
port vtt
        VID  0 1 2 r m STP Prio
        ==== = = = = = === ====
           1 N N N N -  -  ----
          30 t t t t A  -  ----
         100 t t t t -  -  ----

Set access of untagged packets only to VLAN 30 on the port GE0:

port 0 -access=30 -mode=access
port vtt
        VID  0 1 s r m STP Prio
        ==== = = = = = === ====
           1 - N N N -  -  ----
          30 A t t t A  -  ----
         100 - t t t -  -  ----

Set the GE1 port for processing of tagged packets of the VLAN 30 only (trunk mode):

port 1 -allow=30 -mode=trunk
port vtt
        VID  0 1 s r m STP Prio
        ==== = = = = = === ====
           1 - - N N -  -  ----
          30 A t t t A  -  ----
         100 - - t t -  -  ----

Set the port SFP for processing of tagged packets of the VLAN 100 only (trunk mode):

port s -allow=100 -mode=trunk
port vtt
        VID  0 1 s r m STP Prio
        ==== = = = = = === ====
           1 - - - N -  -  ----
          30 A t - t A  -  ----
         100 - - t t -  -  ----

Set the port RADIO for processing of tagged packets of the VLANs 30 and 100 (trunk mode):

portr -allow=30,100 -mode=trunk
port vtt
        VID  0 1 s r m STP Prio
        ==== = = = = = === ====
          30 A t - t A  -  ----
         100 - - t t -  -  ----