TP-LINK ER8411 User guide

CLI Reference Guide

 

CONTENTS 
Preface ..................................................................................................................................................................... 6 
Chapter 1 Using the CLI ....................................................................................................................................... 8 
Accessing the CLI ................................................................................................................................................................ 8 
1.1 Logon by a console port ............................................................................................................................................ 8 
1.2 Logon by SSH ................................................................................................................................................................ 8 
CLI Command Modes...................................................................................................................................................... 10 
Conventions ........................................................................................................................................................................ 12 
1.1 Format Conventions ................................................................................................................................................. 12 
1.2 Special Characters ................................................................................................................................................... 12 
1.3 Parameter Format ..................................................................................................................................................... 12 
Chapter 2 Public Commands ............................................................................................................................ 13 
1 help ..................................................................................................................................................................................... 13 
2 exit ....................................................................................................................................................................................... 13 
3 enable ................................................................................................................................................................................ 14 
4 disable ............................................................................................................................................................................... 14 
5 config ................................................................................................................................................................................. 14 
6 show history .................................................................................................................................................................... 15 
7 clear history ..................................................................................................................................................................... 15 
8 reboot ................................................................................................................................................................................ 16 
9 show system-info .......................................................................................................................................................... 16 
10 ping ................................................................................................................................................................................... 17 
11 tracert .............................................................................................................................................................................. 17 
Chapter 3 User Management Commands ..................................................................................................... 19 
1 local-user username password ............................................................................................................................... 19 
Chapter 4 DHCP Commands ............................................................................................................................ 20 
1 service dhcp server ...................................................................................................................................................... 20 
2 ip dhcp server pool ....................................................................................................................................................... 20 
3 ip-mask .............................................................................................................................................................................. 21 
4 vlan-id ................................................................................................................................................................................ 22 
5 lease ................................................................................................................................................................................... 22 
6 default-gateway ............................................................................................................................................................. 23 
7 domain-name .................................................................................................................................................................. 23 
8 dns-server ........................................................................................................................................................................ 24 
9 option ................................................................................................................................................................................. 25 

 

10 ip dhcp relay helper-address ................................................................................................................................. 26 
11 show dhcp relay .......................................................................................................................................................... 26 
12 show ip dhcp server pool ........................................................................................................................................ 27 
13 show ip dhcp server status ..................................................................................................................................... 27 
14 show dhcp server client-list ................................................................................................................................... 28 
15 show dhcp server ....................................................................................................................................................... 28 
Chapter 5 Port Mirroring Commands ............................................................................................................ 29 
1 monitor session enable .............................................................................................................................................. 29 
2 monitor session port .................................................................................................................................................... 29 
3 monitor session source port .................................................................................................................................... 30 
4 monitor session mode ................................................................................................................................................ 31 
5 show monitor session ................................................................................................................................................. 31 
Chapter 6 IEEE 802.1Q VLAN Commands ..................................................................................................... 33 
1 vlan ...................................................................................................................................................................................... 33 
2 router vlan ........................................................................................................................................................................ 34 
3 name ................................................................................................................................................................................... 34 
4 router port ........................................................................................................................................................................ 35 
5 switchport acceptable frame ................................................................................................................................... 35 
6 interface ............................................................................................................................................................................ 36 
7 description ....................................................................................................................................................................... 36 
8 switchport pvid ............................................................................................................................................................... 37 
9 show interface ................................................................................................................................................................ 37 
10 show vlan summary ................................................................................................................................................... 38 
11 show vlan ....................................................................................................................................................................... 38 
12 show interface status ............................................................................................................................................... 39 
Chapter 7 NAT Commands ................................................................................................................................ 40 
1 show nat one-to-one ................................................................................................................................................... 40 
2 show nat virtual-server ............................................................................................................................................... 40 
3 show nat alg ..................................................................................................................................................................... 41 
4 nat one-to-one ............................................................................................................................................................... 41 
5 interface one-to-one ................................................................................................................................................... 42 
6 original-ip .......................................................................................................................................................................... 42 
7 translated-ip .................................................................................................................................................................... 43 
8 dmz forwarding .............................................................................................................................................................. 44 
9 description-one ............................................................................................................................................................. 44 
10 nat virtual-server ......................................................................................................................................................... 45 
11 interface virtual-server ............................................................................................................................................. 45 

 

12 external port ................................................................................................................................................................. 46 
13 internal port ................................................................................................................................................................... 47 
14 internal server-ip ......................................................................................................................................................... 47 
15 protocol .......................................................................................................................................................................... 48 
16 nat alg .............................................................................................................................................................................. 48 
Chapter 8 Static Routing Commands ............................................................................................................ 50 
1 show ip route static ...................................................................................................................................................... 50 
2 ip route............................................................................................................................................................................... 50 
3 no ip route ........................................................................................................................................................................ 51 
Chapter 9 RIP Commands ................................................................................................................................. 52 
1 router rip ........................................................................................................................................................................... 52 
2 rip version ......................................................................................................................................................................... 52 
3 rip distance ...................................................................................................................................................................... 53 
4 auto-summary ................................................................................................................................................................ 53 
5 timers basic update ...................................................................................................................................................... 54 
6 timers basic timeout .................................................................................................................................................... 54 
7 timers basic garbage-collect ................................................................................................................................... 55 
8 no timers basic ............................................................................................................................................................... 55 
9 rip network ....................................................................................................................................................................... 56 
10 ip rip send version ...................................................................................................................................................... 56 
11 ip rip receive version ................................................................................................................................................. 57 
12 ip rip split-horizon ....................................................................................................................................................... 58 
13 ip rip poison-reverse ................................................................................................................................................. 58 
14 ip rip authentication-mode ..................................................................................................................................... 59 
15 show ip rip ...................................................................................................................................................................... 59 
Chapter 10 OSPF Commands ........................................................................................................................... 61 
1 router ospf ..................................................................................................................................................................... 61 
2 router-id ......................................................................................................................................................................... 61 
3 area-id ............................................................................................................................................................................. 62 
4 compatible rfc1583 ................................................................................................................................................... 62 
5 ospf-network ................................................................................................................................................................ 63 
6 ospf-distance ............................................................................................................................................................... 63 
7 timers throttle spf ....................................................................................................................................................... 64 
8 maximum-paths .......................................................................................................................................................... 65 
9 passive-interface default ........................................................................................................................................ 65 
10 ip ospf priority ........................................................................................................................................................... 66 
11 ip ospf hello-interval ............................................................................................................................................... 66 

 

12 ip ospf dead-interval ............................................................................................................................................... 67 
13 ip ospf transmit-delay ............................................................................................................................................ 67 
14 ip ospf retransmit-interval .................................................................................................................................... 68 
15 ip ospf cost ................................................................................................................................................................. 68 
16 ip ospf passive .......................................................................................................................................................... 69 
17 ip ospf mtu-ignore ................................................................................................................................................... 69 
18 ip ospf authentication ............................................................................................................................................ 70 
19 ip ospf network ......................................................................................................................................................... 71 
20 show ip ospf database ........................................................................................................................................... 71 
21 show ip ospf neighbor ............................................................................................................................................ 72 
22 show ip ospf interface ............................................................................................................................................ 72 
23 show ip ospf ............................................................................................................................................................... 73 
24 show network ............................................................................................................................................................ 73 
Chapter 11 IPSec Commands .......................................................................................................................... 74 
1 crypto policy ................................................................................................................................................................. 74 
2 hash .................................................................................................................................................................................. 74 
3 encryption ..................................................................................................................................................................... 75 
4 group ............................................................................................................................................................................... 76 
5 exchange-mode .......................................................................................................................................................... 76 
6 ike-lifetime ..................................................................................................................................................................... 77 
7 crypto isakmp key ...................................................................................................................................................... 77 
8 dpd ................................................................................................................................................................................... 78 
9 dpd-interval ................................................................................................................................................................... 79 
10 crypto ipsec transform-set .................................................................................................................................. 79 
11 lifetime .......................................................................................................................................................................... 80 
12 encapsulation-mode .............................................................................................................................................. 81 
13 pfs .................................................................................................................................................................................. 81 
14 crypto map ................................................................................................................................................................. 82 
15 set peer ........................................................................................................................................................................ 82 
16 set transform-set ..................................................................................................................................................... 83 
17 localsubnet ................................................................................................................................................................. 84 
18 remotesubnet ............................................................................................................................................................ 84 
19 negotiation-mode .................................................................................................................................................... 85 
20 ipsec map .................................................................................................................................................................... 85 
21 show policy ................................................................................................................................................................. 86 
22 show transform-set ................................................................................................................................................ 87 
23 show crypto map ..................................................................................................................................................... 87 
24 show crypto ipsec sa .............................................................................................................................................. 88 

 

Chapter 12 ACL Commands ............................................................................................................................. 89 
1 show access-list ......................................................................................................................................................... 89 
2 access-list ip ................................................................................................................................................................ 89 
Chapter 13 SSH Commands ............................................................................................................................. 92 
1 show ssh configuration ............................................................................................................................................ 92 
2 ssh server ...................................................................................................................................................................... 92 
Chapter 14 SNMP Commands .......................................................................................................................... 94 
1 snmp-server v3 ........................................................................................................................................................... 94 
2 snmp-server v1-v2c .................................................................................................................................................. 94 
3 snmp-server v1-v2c host ........................................................................................................................................ 95 
4 snmp-server v1-v2c contact ................................................................................................................................. 96 
5 snmp-server v1-v2c device-name ...................................................................................................................... 96 
6 snmp-server v1-v2c community .......................................................................................................................... 97 
7 snmp-server v1-v2c location ................................................................................................................................ 97 
8 show snmp-server ..................................................................................................................................................... 98 
Chapter 15 HTTP and HTTPS Commands ..................................................................................................... 99 
1 ip http port ..................................................................................................................................................................... 99 
2 ip http server redirect-to-https ............................................................................................................................. 99 
3 ip http secure-port ................................................................................................................................................... 100 
4 ip http secure-server .............................................................................................................................................. 100 
5 ip http session timeout ........................................................................................................................................... 101 
6 show ip http configuration .................................................................................................................................... 101 
Chapter 16 Time Management Commands ............................................................................................... 103 
1 show time-range ....................................................................................................................................................... 103 
2 time-range week- date time-slice ...................................................................................................................... 103 
3 show system-time .................................................................................................................................................... 104 
4 system-time manual ................................................................................................................................................ 105 
5 system-time ntp timezone server ...................................................................................................................... 105 
Chapter 17 ARP Commands .......................................................................................................................... 108 
1 show arp ....................................................................................................................................................................... 108 
 

6

Preface

This Guide is intended for network administrator to provide referenced information about CLI

(Command Line Interface). The device mentioned in this Guide stands for Omada Business

Router that supports the CLI function without any explanation. Some models featured in this

guide may be unavailable in your country or region. For local sales information, visit

https://www.tp-link.com.

Overview of this Guide

Chapter 1: Using the CLI

About how to use the CLI, CLI Command Modes, and some Conventions.

Chapter 2: Public Commands

About the commands relating to general operations, such as viewing the available commands,

rebooting the device, and testing the network connectivity.

Chapter 3: User Management Commands

About the commands used for user management.

Chapter 4: DHCP Commands

About the commands used for DHCP settings.

Chapter 5: Port Mirroring Commands

About the commands used for configuring the Port Mirror function.

Chapter 6: IEEE 802.1Q VLAN Commands

About the commands used for configuring IEEE 802.1Q VLAN.

Chapter 7: NAT Commands

About the commands used for configuring the NAT.

Chapter 8: Static Routing Commands

About the commands used for configuring the static routing rules.

Chapter 9: RIP Commands

About the commands used for configuring the RIP function.

Chapter 10: OSPF Commands

About the commands used for configuring the OSPF function.

Chapter 11: IPSec Commands

About the commands used for configuring the IPSec settings.

Chapter 12: ACL Commands

About the commands used for configuring the ACL.

7

Chapter 13: SSH Commands

About the commands used for configuring the SSH settings.

Chapter 14: SNMP Commands

About the commands used for configuring the SNMP settings.

Chapter 15: HTTP and HTTPS Commands

About the commands used for configuring the HTTP and HTTPS logon.

Chapter 16: Time Management Commands

About the commands used for the rime-range settings, and the system time settings.

Chapter 17: ARP Commands

About the commands used for the ARP function.

8

Chapter 1 Using the CLI

1 Accessing the CLI

You can log on to the router and access the CLI by the following two methods.

1 Logon Via the Console Port (Only for certain models).

2 Logon By SSH.

1.1.1 Logon by a console port

Note: Console port is only available on certain devices.

■ Console Port

Some models are equipped with an RJ-45 console port. Take the following steps to log on to

the device via the console port.

1. Connect the Console port of the router to the management PC using an RJ45 console

cable.

2. Start the terminal emulation program (such as the HyperTerminal) on the PC and configure

the terminal emulation program as follows:

■ Baud rate: 115200 bps

■ Data bits: 8

■ Parity: none

■ Stop bits: 1

■ Flow control: none

3. In the Hyper Terminal main window, press Enter and “>” will appear, indicating that you

have successfully logged in to the router and you can use the CLI now.

Note: The username “admin” in the figure above is for demonstration only. Please enter

the username and password according to the real situation.

1.1.2 Logon by SSH

To log on by SSH, you are recommended to use the software PuTTY via password

authentication. You need to first prepare the username and password you set for logging in to

the router’s web management page.

9

Note:

Before SSH login, you should enable Remote Assistance for the router. Follow the steps:

1. Go to the router’s management page.

2. Go to System Tools > Diagnostics > Remote Assistance

3. In Remote Assistance section, enable Remote Assistance, and click Save.

10

1. Open the software to log on to the interface of PuTTY. Enter the IP address of the router

into Host Name field; keep the default value 22 in the Port field; select SSH as the

Connection type.

2. Click the Open button in the above figure to log on to the router. Enter the login user name

and password to log on the router, and then enter enable to go to Public Mode, so you can

continue to configure the router.

2 CLI Command Modes

The CLI is divided into three main modes: User EXEC Mode, Public Mode, and Global

Configuration Mode. Global Configuration Mode is further divided into various subsidiary

modes including Config DHCP Mode, Config VLAN Mode, Interface Mode Config NAT OTO

Mode, Config NAT VS Mode, Config RIP Mode, OSPF Mode, IPSEC_ISAKMP Mode,

IPSEC_TRANSFORM Mode, and IPSEC_MAP Mode.

11

For the main modes, the accessing path, prompt, and ways to log out or access the next mode

are presented below:

Mode

Accessing path

Prompt

Logout or access the

subsidiary mode

User EXEC

Mode

Primary mode once

you log in to the CLI

interface.

>

No exit.

Use the enable command to go

to Public Mode.

Public Mode

Use the enable

command to enter

this mode from User

EXEC Mode.

#

Enter the disable or the exit

command to return to User EXEC

Mode.

Enter configure command to

access Global Configuration

Mode.

Global

Configuration

Mode

Use the config

command to enter

this mode from

Public Mode.

(config)#

Use the exit command or press

Ctrl+Z to return to Public Mode.

To go to the subsidiary modes,

refer to specific commands:

4.2 ip dhcp server pool

6.2 router vlan

6.4 router port

6.6 interface

7.4 nat one-to-one

7.10 nat virtual-server

9.1 router rip

10.1 router ospf

11.1 crypto policy

11.10 crypto ipsec transform-set

11.14 crypto map

Note:

1. The user is automatically in User EXEC Mode after the connection between the PC and the

router is established by an SSH connection.

2. Each command mode has its own set of specific commands. To configure some

commands, you should access the corresponding command mode firstly.

3. Some commands can be performed in all modes.

12

3 Conventions

3.1.1 Format Conventions

The following conventions are used in this Guide:

• Items in square brackets [ ] are optional

• Items in braces { } are required

• Alternative items are grouped in braces and separated by vertical bars. For example:

speed {10 | 100 | 1000 }

• Bold indicates an unalterable keyword. For example: show logging

• Normal Font indicates a constant (several options are enumerated and only one can be

selected). For example: mode {dynamic | static | permanent}

• Italic Font indicates a variable (an actual value must be assigned). For example: bridge

aging-time

3.1.2 Special Characters

• These six characters ” < > , \ & cannot be input.

• Special characters in this guide are the space and the question mark. Typing a space

means you are about to enter the next parameter or command. Enter a question mark in

the position of a parameter, and a tip will appear, indicating what you are supposed to type

in. You can’t use the space and the question mark as a username or password.

3.1.3 Parameter Format

Some parameters must be entered in special formats which are shown as follows:

• MAC address must be enter in the format of xx:xx:xx:xx:xx:xx.

• One or several values can be typed for a port-list or a vlan-list using comma to separate.

Use a hyphen to designate a range of values. For example: (config)#monitor session 1

source port 2, 3-5

13

Chapter 2 Public Commands

2.1 help

Description

The help command is used to view all the available commands of the current

mode.

Syntax

help

Command Mode

All

Example

View the available commands of the Global Configuration Mode:

>enable

#config

(config)#help

2.2 exit

Description

The exit command is used to return to the previous mode from the current

mode.

Syntax

exit

Command Mode

All

Example

Return to Public Mode from Global Configuration Mode:

(config)#exit

14

2.3 enable

Description

The enable command is used to access Public mode from User EXEC mode.

Syntax

enable

Command Mode

User EXEC Mode

Example

Go to Public Mode from User EXEC Mode:

>enable

2.4 disable

Description

The disable command is used to return to the User EXEC mode from Public

mode.

Syntax

disable

Command Mode

Public Mode

Example

Return to the User EXEC Mode from Public Mode :

#disable

2.5 config

Description

The config command is used to enter the Global Configuration mode from

the Public mode.

Syntax

config

15

Command Mode

Public Mode

Example

Enter the Global Configuration Mode from the Public Mode:

#config

2.6 show history

Description

The show history command is used to display the latest 20 commands you

have entered.

Syntax

show history

Command Mode

All

Example

In Public Mode, view the history command you have entered:

>enable

#show history

2.7 clear history

Description

The clear history command is used to clear the commands history.

Therefore, these commands will not appear next time you use the show

history command.

Syntax

clear history

Command Mode

All

16

Example

In Public Mode, clear the commands you have entered:

>enable

#clear history

2.8 reboot

Description

The reboot command is used to reboot your router. To avoid damage, please

don’t turn off the device while rebooting.

Syntax

reboot

Command Mode

Public Mode

Example

To reboot your device:

>enable

#reboot

This will reboot device. Continue? (Y/N): Y

2.9 show system-info

Description

The show system-info command is used to display System Description,

System Name, Contact Information, Hardware Version, Firmware Version,

Mac Address, System Time, Running Time, etc.

Syntax

show system-info

Command Mode

All

17

Example

View the system information of your router:

(config)#show system-info

2.10 ping

Description

The ping command is used to test the connectivity between the router and

the tested host and measure the round-trip time. Only IPv4 addresses are

supported.

Syntax

ping

address

Parameter

address

—— Enter the IPv4 address of the tested host.

Command Mode

Public Mode

Example

To test the connectivity between the router and a tested host (e.g.,

192.168.0.100) through the ping command:

>enable

#ping 192.168.0.100

2.11 tracert

Description

The tracert command is used to display the route (path) your router has

passed to reach the tested host and measure transit delays of packets

across an Internet Protocol network. Only the IPv4 addresses are supported.

Syntax

tracert

address

Parameter

address

—— Enter the IPv4 address of the tested host.

18

Command Mode

Public Mode

Example

To test the connectivity between the router and a tested host (e.g.,

192.168.0.100) through the tracert command:

>enable

# tracert 192.168.0.100

19

Chapter 3 User Management Commands

3.1 local-user username password

Description

The local-user username password command is used to set a new

username or password for you to log in to the router. Using this command will

make the SSH to reload.

Syntax

local-user username

username

password

Parameter

username

—— Specify a username for the local user account (1-64 letters,

digits or special characters).

password

—— Specify a password for the local user account (6-64 letters,

digits or special characters).

Command Mode

Global Configuration Mode

Example

Set the username as “admin”, and the password as “12345678”:

(config)#local-user username admin password 12345678

Page is loading ...

TP-LINK ER8411 User guide

This manual is also suitable for

TP-LINK ER8411 User guide