CLI quick reference

Every ReadyLinks OS command used in the networking basics guides, grouped by task, with the mode each one runs in.

This page collects the GL-series switch commands used across the networking basics guides so you can find them without re-reading the explanations. Each entry says which mode the command runs in. The dashboard equivalents are under switch settings and switchport.

#Using the CLI

Reach the CLI through the proxy terminal in ReadyView, over SSH to the switch's management address, or on the serial console at 115200 8-N-1; see local management. A few conventions differ from other vendors and are worth knowing before you type anything:

Three levels. The top-level prompt ends in #. configure terminal enters config mode ((config)#). From there, interface ethernet RJ45/G1, vlan 20, interface vlan 20 and dot1x enter sub-modes whose prompt shows where you are, such as (RJ45/G1)# or (vlan20)#.
end goes up one level. exit goes straight back to the top. This is the reverse of what Cisco users expect.
show, ping and traceroute only work at the top level. There is no do prefix for running them from config mode.
write saves the running configuration and works from any mode. There is no write memory or copy running-config startup-config.
? lists what you can type next, and any unique abbreviation works (conf t, sh int status).
page disable in config mode turns the pager off for long output such as the MAC table. page enable restores it.
A rejected command stays in the line buffer. If you see Incomplete command or Too many parameters, press Ctrl-U to clear the line before typing the next command, or the two get joined together.
Port names are RJ45/G1 to RJ45/G24, Fiber/G1 and Fiber/G2, MGMT, and Ghn1 upward on coax models. Interface mode takes one port at a time; VLAN-mode membership commands accept ethernet RJ45/G1 to ethernet RJ45/G8.
reboot is a config-mode command.

markup

GL-24xT-P600D# configure terminal
GL-24xT-P600D(config)# page disable
GL-24xT-P600D(config)# interface ethernet RJ45/G1
GL-24xT-P600D(RJ45/G1)# description Front desk PC
GL-24xT-P600D(RJ45/G1)# end
GL-24xT-P600D(config)# write
GL-24xT-P600D(config)# exit
GL-24xT-P600D# show running-config

#Getting around

Command	Mode	Does
`?`	any	Lists valid next words
`configure terminal`	top	Enters config mode
`interface ethernet RJ45/G1`	config	Enters interface mode for one port
`interface vlan 20`	config	Enters the Layer 3 interface for a VLAN
`vlan 20`	config	Creates VLAN 20 if needed and enters VLAN mode
`end`	any	Up one level
`exit`	any	Straight back to the top level
`write`	any	Saves the running configuration
`page disable` / `page enable`	config	Turns the pager off and on
`show running-config` / `show startup-config`	top	Current and saved configuration
`snmp-server name <name>`	config	Sets the hostname shown in the prompt
`reboot`	config	Restarts the switch

#Looking at things

All show commands, ping and traceroute run at the top level only.

Command	Shows
`show interface status`	Link, negotiation, speed, duplex, learning, isolation, rate limits, MAC limit per port
`show interface ethernet RJ45/G1`	One port's settings
`show interface counters [ethernet RJ45/G1]`	Good and bad packets, collisions, drops
`show interface switchport ethernet RJ45/G1`	PVID and link type
`show mac-address-table`	The whole MAC table
`show mac-address interface ethernet RJ45/G1`	MAC table for one port
`show mac-address vlan 20`	MAC table for one VLAN
`show mac-address address 0013.ba0a.99e2`	Where one MAC was learned
`show mac-address count` / `aging-time`	Table size and ageing timer
`show arp`	The switch's ARP table
`show vlan all` / `show vlan 20`	VLAN membership
`show vlan interface`	The switch's own IP addresses
`show ip routing-table`	Routing table
`show dns` / `show sntp`	DNS and time settings
`show ip dhcp server`	Built-in DHCP pool and leases
`show ip dhcp snooping status` / `group`	Trusted ports and the binding table
`show ip dhcp rate-limit`	DHCP rate limit per port
`show arp-inspection status` / `statistic`	ARP inspection state and drop counts
`show arp rate-limit`	ARP rate limit per port
`show ip-check-source status` / `show ip-binding`	IP source guard state and static bindings
`show ip igmp snooping configuration` / `group [vlan 20]` / `vlan 20`	Multicast snooping settings and groups
`show loop-detection`	Loop detection state per port
`show spanning-tree [ethernet Fiber/G1]`	Spanning-tree state
`show storm-control`	Storm thresholds
`show link-aggregation summary` / `verbose 1`	LAG membership and state
`show lldp neighbor_information`	Devices seen on each port
`show lldp statistics ethernet Fiber/G1`	LLDP frame counters
`show power`	PoE draw and budget
`show dot1x status` / `interface ethernet RJ45/G1` / `radius-server`	802.1X state
`show dos-protection`	DoS filters in effect
`show logging`	System log
`show readyview connection all`	Cloud connection state
`ping 10.0.20.1`	Reachability; IP address only
`ping 8.8.8.8 count 10 length 56`	Repeated ping; count and length go together
`traceroute 8.8.8.8`	Path; gives up after six seconds

#Ports

Interface mode, one port at a time. Each takes no in front to undo.

Command	Does
`description <text>`	Labels the port
`shutdown` / `no shutdown`	Disables and enables the port
`speed 10 \| 100 \| 1000 \| auto`	Forces or negotiates speed
`duplex half \| full \| auto`	Forces or negotiates duplex
`switchport link-type access \| hybrid \| trunk`	Sets how the port treats tags
`switchport link-type trunk permit vlan all`	Trunk carrying every VLAN
`switchport pvid 20`	VLAN for untagged frames arriving on the port
`switchport admit-frame all \| only-tag`	Whether untagged frames are accepted
`switchport ingress-filtering`	Drops tagged frames for VLANs the port isn't in
`switchport protected`	Port isolation
`learning` / `no learning`	Whether the port learns MAC addresses
`port-security maximum <1-1024>`	Caps MAC addresses learned on the port
`line-rate ingress \| egress rate <64k-9000m>`	Bandwidth cap
`storm-control <1-7> level pps <n>`	Storm threshold; 1 broadcast, 2 multicast, 3 unknown unicast, 7 all
`lldp` / `lldp admin-status rx \| tx \| rxtx \| disable`	LLDP on the port
`power inline poe-mode poe \| poe-plus \| poe-plus-plus \| force_power`	PoE class
`power inline priority low \| high \| critical`	Which ports keep power when the budget runs out
`no power inline poe-mode`	PoE off

#VLANs

Command	Mode	Does
`vlan 20` / `vlan 20 to vlan 29`	config	Creates VLANs
`no vlan 20`	config	Deletes a VLAN
`name <text>`	vlan	Names the VLAN
`switchport untagged ethernet RJ45/G1 [to ethernet RJ45/G8]`	vlan	Untagged membership
`switchport tagged ethernet Fiber/G1 [to ethernet Fiber/G2]`	vlan	Tagged membership
`switchport forbidden ethernet RJ45/G24`	vlan	Keeps a port out of the VLAN
`no switchport tagged ethernet Fiber/G1`	vlan	Removes a port
`ip address 10.0.20.1 255.255.255.0 [10.0.20.254]`	interface vlan	Address, mask, optional default gateway
`ip address dhcp`	interface vlan	Takes an address from DHCP
`ip route 10.50.0.0 255.255.0.0 10.0.10.254 [metric <n>]`	config	Static route
`dns nameserver1 <ip> [nameserver2 <ip>]`	config	DNS servers
`sntp client server-ip <ip> response-time <1-59> zone-offset GMT-5 time-offset <0-59>`	config	Time source; every argument required

#Spanning tree and LAGs

Command	Mode	Does
`spanning-tree`	config	Enables spanning tree
`spanning-tree mode stp \| rstp \| mstp`	config	Protocol variant
`spanning-tree priority <n>`	config	Bridge priority
`spanning-tree bpdu-guard`	config	Shuts any port that receives a BPDU (global)
`spanning-tree` / `spanning-tree edge` / `spanning-tree root-guard`	interface	Per-port enable, edge port, root guard
`lacp`	config	Enables LACP
`link-aggregation group <1-13> mode manual \| static`	config	Creates a group; `static` uses LACP
`link-aggregation group <1-13> description <text>`	config	Labels the group
`link-aggregation group <1-13>`	interface	Adds the port to a group
`lacp mode active \| passive`	interface	LACP role

#DHCP

Command	Mode	Does
`ip dhcp server vlan 20`	config	VLAN the built-in server answers on
`ip dhcp server start-ip <ip> end-ip <ip> netmask <mask> gateway <ip>`	config	The pool
`ip dhcp server dns <ip>`	config	DNS handed to clients
`ip dhcp server lease day <n> [hour <n> [minute <n>]]`	config	Lease time
`ip dhcp server`	config	Turns the server on
`ip dhcp snooping`	config	Enables DHCP snooping
`ip dhcp snooping interface ethernet Fiber/G1 trust`	config	Trusts a port
`no ip dhcp snooping ethernet Fiber/G1 trust`	config	Removes trust
`ip dhcp snooping information option`	config	Option 82
`ip dhcp protective-down recover [interval <10-86400>]`	config	Auto-recovers ports shut by the rate limit
`ip dhcp rate-limit [rate <10-150>]`	interface	DHCP packets per second allowed

#ARP inspection and IP source guard

Command	Mode	Does
`arp-inspection`	vlan	Enables ARP inspection on the VLAN
`arp-inspection restrict-forward`	vlan	Also drops ARP whose Ethernet source doesn't match the ARP payload
`arp-inspection trust`	interface	Trusts a port
`arp rate-limit [rate <10-1024>]`	interface	ARP packets per second allowed
`arp protective-down recover [interval <10-86400>]`	config	Auto-recovers ports shut by the rate limit
`ip-check-source`	interface	IP source guard on the port
`ip ip-binding` then `user-bind mac-addr <mac> ip-addr <ip> ethernet RJ45/G5`	config, then ip-binding	Static binding for a fixed-address device

#Multicast

Command	Mode	Does
`ip igmp snooping`	config	Enables snooping
`ip igmp snooping querier`	config	Switch sends queries
`ip igmp snooping query-interval <1-255>`	config	Seconds between queries
`ip igmp snooping max-response-time <1-25>`	config	How long hosts have to answer
`ip igmp snooping host-aging-time <20-1000>`	config	Membership timeout
`ip igmp snooping router-aging-time <1-1000>`	config	Router port timeout
`ip igmp snooping immediate-leave`	config	Fast leave (global)
`ip igmp snooping leave-wait <1-250>`	config	Wait after a Leave before pruning
`ip igmp snooping version v2 \| v3`	vlan	IGMP version on the VLAN
`multicast static-router-port ethernet Fiber/G1`	vlan	Always forward groups to this port

#Loops, storms and DoS

Command	Mode	Does
`loop-detection`	config	Enables loop detection on the switch
`loop-detection interval-time <5-300>`	config	Probe interval
`loop-detection`	interface	Detect mode: probe the port, alert on a loop, leave the port up
`loop-detection control`	interface	Control mode: also shut the port when a loop is found
`no loop-detection control`	interface	Back to detect mode
`storm-control type <1-7> level pps <n>`	config	Switch-wide default threshold
`dos-protection land \| tcp-null-scan \| tcp-syn-fin-scan \| tcp-xmas-scan`	config	Drops the named malformed packets

Command	Mode	Does
`dot1x`	config	Enters 802.1X settings
`radius-server authentication host <ip> auth-port <n> key <secret>`	dot1x	RADIUS server
`system-auth-control`	dot1x	Enables 802.1X globally
`guest-vlan <id>`	dot1x	VLAN for devices that fail
`dot1_x port-control auto \| forceauthorized \| forceunauthorized`	interface	Per-port behaviour
`dot1_x re-authentication`	interface	Periodic re-authentication
`no dot1x`	interface	Disables 802.1X on the port
`aaa authentication login console \| ssh \| telnet \| http \| netconf local \| tacacs \| radius`	config	Where each service checks logins
`management mode disable \| port-based \| readyview \| vlan`	config	Which addresses may manage the switch

Edit this page on GitLab

Last updated October 5, 2026