Page 381 / 757 Scroll up to view Page 376 - 380
xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
377
config ip_tunnel isatap
Purpose
Used to configure an IPv6 ISATAP tunnel.
Syntax
config ip_tunnel isatap <tunnel_name 12> {ipv6address <ipv6networkaddr> | source
<ipaddr>}(1)
Description
The config ip_tunnel isatap command is used to configure an existing IPv6 tunnel as an IPv6
ISATAP tunnel on the switch. If this tunnel has previously been configured in another mode,
the tunnel’s information will still exist in the database. However, whether the tunnel’s former
information is invalid or not will depend on the current mode. IPv6 ISATAP tunnels are point-
to-multipoint tunnels that can be used to connect systems within a site. An IPv6 ISATAP
address is a well-defined unicast address that includes a 64-bit unicast IPv6 prefix (it can be
link local or global prefixes), a 32-bit value 0000:5EFE and a 32-bit tunnel source IPv4
address.
Parameters
<tunnel_name 12>
- IPv6 Tunnel interface name, maximum of 12 characters.
ipv6address <ipv6networkaddr>
- The IPv6 address assigned to this IPv6 tunnel interface.
IPv6 processing would be enabled on this IPv6 tunnel interface when an IPv6 address is
configured. The last 32 bits of the IPv6 ISATAP address correspond to an IPv4 address
assigned to the tunnel source.
source <ipaddr>
- The source IPv4 address of this IPv6 tunnel interface. It is used as the
source address for packets in this IPv6 tunnel. The tunnel destination IPv4 address is
extracted from the last 32 bits of the remote tunnel endpoint’s IPv6 ISATAP address.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To configure an IPv6 ISATAP tunnel (Tunnel name is “tn2”, Tunnel source IPv4 address is 10.0.0.1, Tunnel IPv6 address
is 2001::5efe:a00:1/64):
DGS-3627:admin#
config ip_tunnel isatap tn2 source 10.0.0.1
Command: config ip_tunnel isatap tn2 source 10.0.0.1
Success.
DGS-3627:admin# config ip_tunnel isatap tn2 ipv6address 2001::5efe:a00:1/64
Command: config ip_tunnel isatap tn2 ipv6address 2001::5efe:a00:1/64
Success.
DGS-3627:admin#
show ip_tunnel
Purpose
Used to show one or all IPv6 tunnel interfaces’ information.
Syntax
show ip_tunnel {<tunnel_name 12>}
Description
The show ip_tunnel command is used to show one or all IPv6 tunnel interfaces’ information.
Parameters
<tunnel_name 12>
- IPv6 Tunnel interface name, maximum of 12 characters.
If no tunnel is specified, all tunnels on the Switch will be displayed.
Restrictions
None.
Example usage:
To show an IPv6 tunnel interface’s information (Tunnel name is “tn2”):
Page 382 / 757
xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
378
DGS-3627:admin# show ip_tunnel tn2
Command: show ip_tunnel tn2
Tunnel Interface
: tn2
Interface Admin State
: Enabled
Tunnel Mode
: Manual
IPv6 Address
: 2000::1/64
Tunnel Source
: 1.0.0.1
Tunnel Destination
: 1.0.0.2
Success.
DGS-3627:admin#
enable ip_tunnel
Purpose
Used to enable an IPv6 tunnel interface or all IPv6 tunnel interfaces.
Syntax
enable ip_tunnel {<tunnel_name 12>}
Description
The enable ip_tunnel command is used to enable an IPv6 tunnel or all IPv6 tunnels on the
switch.
Parameters
<tunnel_name 12>
- IPv6 Tunnel interface name, maximum of 12 characters.
If no tunnel is specified, all tunnels on the Switch will be enabled.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To enable an IPv6 tunnel interface (Tunnel name is “tn2”.):
DGS-3627:admin# enable ipif tunnel tn2
Command: enable ipif tunnel tn2
Success.
DGS-3627:admin#
disable ip_tunnel
Purpose
Used to disable an IPv6 tunnel interface or all tunnel interfaces.
Syntax
disable ip_tunnel {<tunnel_name 12>}
Description
The disable ip_tunnel command is used to disable an IPv6 tunnel or all IPv6 tunnels on the
switch.
Parameters
<tunnel_name 12>
- IPv6 Tunnel interface name, maximum of 12 characters.
If no tunnel is specified, all tunnels on the Switch will be disabled.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To disable an IPv6 tunnel interface (Tunnel name is “tn2”):
Page 383 / 757
xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
379
DGS-3627:admin# disable ip_tunnel tn2
Command: disable ip_tunnel tn2
Success.
DGS-3627:admin#
Page 384 / 757
xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
380
50
JAPANESE WEB-BASED ACCESS CONTROL (JWAC)
COMMANDS
The Japanese Web-based Access Control (JWAC) commands in the Command Line Interface (CLI) are listed (along with
the appropriate parameters) in the following table.
Command
Parameters
enable jwac
disable jwac
enable jwac redirect
disable jwac redirect
enable jwac forcible_logout
disable jwac forcible_logout
enable jwac udp_filtering
disable jwac udp_filtering
enable jwac
quarantine_server_monitor
disable jwac
quarantine_server_monitor
config jwac
quarantine_server_error_timeout
<sec 5-300>
config jwac redirect
{destination [quarantine_server | jwac_login_page] | delay_time <sec 0-10>} (1)
config jwac virtual_ip
<ipaddr> {url [<string 128> | clear]}
config jwac quarantine_server_url
<string 128>
config jwac
clear_quarantine_server_url
config jwac update_server
[add | delete] ipaddress <network_address> {[tcp_port < port_number 1-65535>
| udp_port < port_number 1-65535>]}
config jwac switch_http_port
<tcp_port_number 1-65535> {[http | https]}
config jwac ports
[<portlist> | all] {state [enable | disable] | max_authenticating_host <value 0-50> |
aging_time [infinite | <min 1-1440>] | idle_time [infinite | <min 1-1440>] |
block_time [<sec 0-300>] | auth_mode [host _based | port_based]} (1)
config jwac radius_protocol
[local | pap | chap | ms_chap | ms_chapv2 | eap_md5]
create jwac user
<username 15> {vlan <vlanid 1-4094>}
config jwac user
<username 15> {vlan <vlanid 1-4094>}
delete jwac
[user <username 15> | all_users]
show jwac user
clear jwac auth_state
[ports [all | <portlist>] { authenticated | authenticating | blocked } | mac_addr
<macaddr>]
config jwac authorization attributes
{radius [enable| disable] | local [enable | disable]} (1)
Page 385 / 757
xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
381
Command
Parameters
show jwac
show jwac update_server
show jwac auth_state ports
{<portlist>}
show jwac ports
{<portlist>}
config jwac authentication_page
element
[japanese | english] [default | page_title <desc 128> | login_window_title < desc
32> | user_name_title < desc 16> | password_title < desc 16> |
logout_window_title < desc 32> | notification_line <line value 1-5> <desc 128>]
show jwac authenticate_page
config jwac authenticate_page
[japanese | english]
Each command is listed, in detail, in the following sections.
enable jwac
Purpose
Used to enable JWAC function.
Syntax
enable jwac
Description
The enable jwac command enables JWAC function.
JWAC and WAC are mutual exclusive function. That is, they can not be enabled at the same
time.
Parameters
None.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To enable JWAC function:
DGS-3627:admin# enable jwac
Command: enable jwac
Success.
DGS-3627:admin#
disable jwac
Purpose
Used to disable JWAC function.
Syntax
disable jwac
Description
The disable jwac command disables JWAC function; all authentication entries related to
JWAC will be deleted.
Parameters
None.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To disable JWAC function:

Rate

4.5 / 5 based on 2 votes.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top