xStack

®

DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual

42

To create a VLAN named “guestVLAN” as 802.1X guest VLAN:

DGS-3627:admin#

create 802.1x guest_vlan guestVLAN

Command: create 802.1x guest_vlan guestVLAN

Success.

DGS-3627:admin#

delete 802.1x guest_vlan

Purpose

Used to delete guest VLAN configuration.

Syntax

delete 802.1x guest_vlan { < vlan_name 32 > }

Description

The delete 802.1x guest_vlan command will delete guest VLAN setting, but not delete the

static VLAN. All ports which enabled guest VLAN will remove to original VLAN after deleted

guest VLAN.

Parameters

<vlan_name 32>

- Specify the static VLAN to be guest VLAN.

Restrictions

Only Administrator and Operator-level users can issue this command.

Example usage:

To delete the guest VLAN named “guestVLAN”:

DGS-3627:admin#

delete 802.1x guest_vlan guestVLAN

Command: delete 802.1x guest_vlan guestVLAN

Success.

DGS-3627:admin#

config 802.1x guest_vlan

Purpose

Used to configure guest VLAN settings.

Syntax

config 802.1x guest_vlan ports [ < portlist > | all ] state [ enable | disable ]

Description

The config 802.1x guest_vlan command configures guest VLAN setting.

If the specific port state is changed from enabled state to disable state, this port will move to

its original VLAN.

Parameters

ports

- A range of ports enable or disable guest VLAN function.

state

- Specify the guest VLAN port state of the configured ports.

enable

- join the guest VLAN.

disable

- remove from guest VLAN.

Restrictions

Only Administrator and Operator-level users can issue this command.

Example usage:

Enable on port 1 – 8 to configure 802.1X guest VLAN:

xStack

®

DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual

43

DGS-3627:admin# config 802.1x guest_vlan ports 1-8 state enable

Command: config 802.1x guest_vlan ports 1-8 state enable

Warning! GVRP of the ports were disabled!

Success.

DGS-3627:admin#

show 802.1x guest_vlan

Purpose

Used to show guest VLAN setting.

Syntax

show 802.1x guest_vlan

Description

The show guest_vlan command allows you to show the information of guest VLANs.

Parameters

None.

Restrictions

None.

Example usage:

To show 802.1X guest VLAN on the switch:

DGS-3627:admin# show 802.1x guest_vlan

Command: show 802.1x guest_vlan

Guest VLAN Setting

-----------------------------------------------------------

Guest VLAN : guest

Enable Guest VLAN Ports

: 1-10

DGS-3627:admin#

config radius add

Purpose

Use to add a new RADIUS server. The server with lower index has higher authenticative

priority.

Syntax

config radius add < server_index 1-3 > [ < server_ip > | < ipv6addr > ] key < passwd 32

> [ default | { auth_port < udp_port_number 1-65535 > | acct_port < udp_port_number

1-65535 > | timeout < int 1-255 > | retransmit < int 1-20 > } (1)]

Description

The “config radius add” command adds a new RADIUS server.

Parameters

server_index

- RADIUS server index.

server_ip

- The IP address of the RADIUS server.

ipv6addr

- The IPv6 address of the RADIUS server.

passwd

- The key pre-negotiated between switch and the RADIUS server. It is used to

encrypt user’s authentication data before being transmitted over internet. The maximum

length of the key is 32.

default

- Sets the authentication UDP port number to 1812 accounting UDP port number to

1813, timeout to 5 seconds and retransmit to 2.

auth_port

- Specifies the UDP port number which is used to transmit RADIUS authentication

data between the switch and the RADIUS server. The range is 1 to 65535.

acct_port

- Specifies the UDP port number which is used to transmit RADIUS accounting

statistics between the switch and the RADIUS server. The range is 1 to 65535.

timeout

- The time in second for waiting server reply. Default value is 5 seconds.

retransmit

- The count for re-transmitting. Default value is 2.

xStack

®

DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual

44

config radius add

Restrictions

Only Administrator and Operator-level users can issue this command.

Example usage:

To add a new RADIUS server:

DGS-3627:admin# config radius add 1 10.48.74.121 key dlink default

Command: config radius add 1 10.48.74.121 key dlink default

Success.

DGS-3627:admin#

config radius delete

Purpose

Used to delete a RADIUS server.

Syntax

config radius delete < server_index 1-3 >

Description

The config radius delete command delete a RADIUS server.

Parameters

server_index

- RADIUS server index.

Restrictions

Only Administrator and Operator-level users can issue this command.

Example usage:

To delete a radius server:

DGS-3627:admin# config radius delete 1

Command: config radius delete 1

Success.

DGS-3627:admin#

config radius

Purpose

Used to configure a RADIUS server.

Syntax

config radius <server_index 1-3> { ipaddress [ <server_ip> | <ipv6addr> ] | key

<passwd 32> | auth_port [<udp_port_number>| default ] | acct_port [

<udp_port_number> | default ] | timeout [ <int 1-255> | default ] | retransmit [ <int 1-20>

| default ]} (1)

Description

The config radius command configures a RADIUS server.

Parameters

server_index

- RADIUS server index.

server_ip

- The IP address of the RADIUS server.

ipv6addr

- The IPv6 address of the RADIUS server

passwd

- The key pre-negotiated between switch and RADIUS server. It is used to encrypt

user’s authentication data before being transmitted over internet. The maximum length of the

key is 32.

auth_port

- Specifies the UDP port number which is used to transmit RADIUS authentication

data between the switch and the RADIUS server. The range is 1 to 65535. Default value is

1812.

acct_port

- Specifies the UDP port number which is used to transmit RADIUS accounting

statistics between the switch and the RADIUS server. The range is 1 to 65535. Default value

xStack

®

DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual

45

config radius

is 1813.

timeout

- The time in second for waiting server reply. Default value is 5 seconds.

retransmit

- The count for re-transmitting. Default value is 2.

Restrictions

Only Administrator and Operator-level users can issue this command.

Example usage:

To configure a radius server:

DGS-3627:admin# config radius server 1 auth_port 60

Command: config radius server 1 auth_port 60

Success.

DGS-3627:admin#

show radius

Purpose

Used to display RADIUS server configurations.

Syntax

show radius

Description

The show radius command displays RADIUS server configurations.

Parameters

None.

Restrictions

None.

Example usage:

To display RADIUS server configurations:

xStack

®

DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual

46

DGS-3627:admin#

show radius

Command: show radius

Time Out

: 5 seconds

Retransmit

: 2

Server 1

IP Address

: fe80:fec0:56ab:34b0:20b2:6aff:fecf:7ec6

Auth-Port

: 1812

Acct-Port

: 5

Timeout

: 2

Retransmit

: 3

Key

: adfdslkfjefiefdkgjdassdwtgjk6y1w

Server 2

IP Address

: 172.18.211.71

Auth-Port

: 1812

Acct-Port

: 1813

Retransmit

: 2

Key

: 1234567

Server 3

IP Address

: 172.18.211.108

Auth-Port

: 1812

Acct-Port

: 1813

Retransmit

: 2

Key

: adfdslkfjefiefdkgjdassdwtgjk6y1w

The total entries: 3

DGS-3627:admin#

show auth_statistics

Purpose

Use to display information of authenticator statistics.

Syntax

show auth_statistics {ports [<portlist> | all]}

Description

The show auth_statistics command displays information of authenticator statistics.

Parameters

portlist

- Specifies a range of ports to be displayed.

all

– Specifies all ports.

Restrictions

None.

Example usage:

To display authenticator statistics information for port 1: