3Com OfficeConnect 3CP4144 Cli User'S Manual Download

Page: 3 / 144

ONTENTS

CCESSING

THE

ONFIGURATION

NTERFACE

Establishing Communications with the OfficeConnect Remote 812

Local Connection

IBM-PC Compatible Computers

Macintosh Computers

UNIX-Based Computers

Remote Connection

CLI C

OMMAND

ONVENTIONS

AND

ERMINOLOGY

Command Structure

Format

Parameters

Values

Names or Strings

Network Address Formats

Abbreviation and Command Completion

Control Characters

Help

Conventions

Command Language Terminology

ONFIGURATION

ETHODS

Quick Setup Instructions

QuickVC Setup Instructions

Manual Setup Instructions

UICK

ETUP

CLI Quick Setup Script

Introduction

Summary of Contents for OfficeConnect 3CP4144

Page 1: ...http www 3com com OfficeConnectTM Remote 812 ADSL Router CLI User s Guide Release 1 1 ...

Page 2: ... are provided in 3Com s standard commercial license for the Software Technical data is provided with limited rights only as provided in DFAR 252 227 7015 Nov 1995 or FAR 52 227 14 June 1987 whichever is applicable You agree not to remove or deface any portion of any legend provided on any licensed program or documentation contained in or delivered to you in conjunction with this User s Guide Unles...

Page 3: ...2 2 CLI COMMAND CONVENTIONS AND TERMINOLOGY Command Structure 1 Format 1 Parameters 1 Values 1 Names or Strings 2 Network Address Formats 2 Abbreviation and Command Completion 2 Control Characters 2 Help 2 Conventions 3 Conventions 3 Command Language Terminology 3 3 CONFIGURATION METHODS Quick Setup Instructions 1 QuickVC Setup Instructions 1 Manual Setup Instructions 2 4 QUICK SETUP CLI Quick Set...

Page 4: ... Script 1 Introduction 1 Instructions 1 Starting QuickVC Setup 1 ATM Parameters 1 Network Service 2 PPP Parameters 2 IP Configuration Network Service PPP 2 IP Configuration Network Service RFC1483 3 IPX Routing Network Service PPP 4 IPX Routing Network Service RFC 1483 4 Bridging 4 Review 4 Sample Identification Information 4 Sample Output Display as Quick Setup Executes 5 6 MANUAL SETUP Configura...

Page 5: ...onfiguring the DHCP Relay 13 Monitoring the DHCP Relay 13 DNS 13 Configuring DNS 14 DNS Host Entries 14 Managing the DNS Proxy 14 IPX Routing 15 Enabling IPX Routing 16 Configuring IPX for the LAN 16 Configuring IPX for Remote Site Connections 16 Configuring IPX Static and Framed Routes 17 Configuring IPX Static and Framed Services 18 Configuring IPX RIP and SAP 19 Bridging 19 Configuring Bridging...

Page 6: ...lying the Rules Using CLI 32 IP Source and Destination Network Filtering Using CLI 32 IP Source and Destination Port Filtering Using CLI 32 IP Protocol Filtering Using CLI 32 IP RIP Packet Filtering Using CLI 33 IPX Source and Destination Network Filtering Using CLI 33 IPX Source and Destination Host Filtering Using CLI 33 IPX Source and Destination Socket Number Filtering Using CLI 33 IPX RIP Pac...

Page 7: ... A OFFICECONNECT REMOTE 812 SAMPLE CONFIGURATION Global Configuration A 2 LAN IP Network Configuration A 2 DHCP and DNS Configuration A 2 LAN IPX Network Configuration A 3 Bridge Configuration A 3 Remote Site Internet A 3 Remote Site Corporate Access A 4 B CLI COMMAND DESCRIPTION CLI Commands B 1 ADD B 1 add access B 1 add auto_filter eth_blk_dst B 1 add auto_filter vc_blk_netbios B 1 add bridge n...

Page 8: ... B 10 delete bridge network network_name B 10 delete configuration B 10 delete dns host host_name B 11 delete dns server domain_name B 11 delete filter filter_name B 11 delete file file_name B 11 delete framed route vc B 11 delete ip network network_name B 11 delete ip route IP_address B 11 delete ipx network name B 11 delete ipx route ipx_net_address B 11 delete ipx service service_name B 11 dele...

Page 9: ...me B 13 disable security_option snmp user_access B 13 disable security_option remote_user administration B 14 disable snmp authentication traps B 14 disable telnet escape B 14 disable user user_name B 14 disable vc user_name B 14 DO B 14 do command_inputfile output outputfile B 14 ENABLE B 14 enable access B 14 enable bridge network network_name B 14 enable bridge spanning_tree B 14 enable interfa...

Page 10: ...HISTORY B 16 history B 16 KILL B 17 kill process name B 17 LIST B 17 list access B 17 list active interfaces B 17 list bridge forwarding B 17 list call events B 17 list call log B 17 list critical events B 18 list dns hosts B 18 list dns servers B 18 list facilities B 18 list filters B 18 list files B 18 list interfaces B 18 list ip addresses B 18 list ip arp B 18 list ip interface_block B 19 list...

Page 11: ...2 ping ip_name_or_addr B 22 QUICKVC B 22 REBOOT B 23 RENAME B 23 rename file input_file output_file B 23 RESOLVE B 23 resolve name IP_host_name B 23 SAVE B 23 save all B 23 SET B 23 set adsl reset B 23 set adsl wire pair B 23 set bridge B 23 set bridge firewall firewall_mode B 24 set command B 24 set date date B 24 set dhcp mode mode B 24 set dhcp relay server1 B 24 set dhcp relay server2 B 25 set...

Page 12: ...B 32 set vc vc_name atm B 35 SHOW B 36 show access B 36 show atm status B 36 show adsl statistics B 36 show adsl performance B 36 show adsl transceiver_status B 37 show adsl version B 37 show bridge network name B 37 show bridge settings B 37 show call_log B 38 show command B 38 show configuration B 38 show critical_event settings B 38 show date B 39 show dhcp client vc name status B 39 show dhcp ...

Page 13: ...me counters B 47 show ppp on vc vc_name settings B 47 show ppp on interface name counters B 47 show ppp on interface name settings B 48 show ppp settings B 50 show security_option settings B 50 show snmp counters B 50 show snmp settings B 51 show system B 51 show telnet B 51 show tcp counters B 51 show tcp settings B 52 show udp B 52 show user name settings B 52 show vc vc_name settings B 52 TELNE...

Page 14: ...t B 54 Command Features B 54 Command Retrieval B 54 Positional Help B 54 Command Completion B 54 Output Pause B 54 Command Kill B 54 Comments B 55 3COM CORPORATION LIMITED WARRANTY FCC CLASS A VERIFICATION STATEMENT FCC CLASS B STATEMENT FCC DECLARATION OF CONFORMITY ...

Page 15: ...riate for your computer See the following subsections for various emulation options No matter which emulator you use configure your settings to 9600 baud 8 data bits no parity 1 stop bit direct connect IBM PC Compatible Computers Windows Terminal included with Microsoft Windows and ProComm Plus are popular communications packages which support VT100 terminal emulation for IBM PC compatible compute...

Page 16: ...ss and administrative login profile are automatically created when the unit is initially configured using the IP Wizard or in DHCP Smart Mode The default username is root and the default password is root Refer to the OfficeConnect Remote 812 ADSL Router Install Guide for information on the IP Wizard or DHCP Smart Mode initialization Alternatively the IP address and administrative login profile can...

Page 17: ...you must provide interface is only required if you want to override the default value which is eth 1 Parameters are order independent parameters enclosed by curly braces are required and are provided with default values You do not need to specify these parameters unless you wish to override the default Values required values for a command or parameter are enclosed by arrows range of values followi...

Page 18: ...u just by pressing the key It s handy when you re in a hurry or uncertain about a command For example if you type add ip n ESC it will spell out the keyword network without losing your place in the command syntax Control Characters Commands can be retrieved by typing ctrl p p for previous and ctrl n n for next Command retrieval consults the history of previous fully entered commands defaulting at ...

Page 19: ...cal and remote networks network connections hosts and routers VC A table of parameters that describes connection parameters associated with a remote site These parameters are used when establishing a network connection over the WAN User A table of parameters that describes connection parameters associated with Telnet users that wish to attach and remotely manage the unit Filter can be applied to i...

Page 20: ...2 4 CHAPTER 2 CLI COMMAND CONVENTIONS AND TERMINOLOGY ...

Page 21: ...t nearly the full text of what Quick Setup would query if you were to use every service available as configured on the CLI If you are using partial service just IP configuration for example Quick Setup will skip the Bridging section Default values are enclosed in brackets If at any time you decide to quit Quick Setup you can type ctrl c c throughout the program QuickVC Setup Instructions The Quick...

Page 22: ... might find it more efficient to manage the OfficeConnect Remote 812 manually Manual configuration is most versatile in that you only enter commands that need to effectively change from the current configuration Also many of the advanced features can only be accessed through manual configuration such as filtering ...

Page 23: ...ured state by ensuring that all DIP switches are in the OFF position and by deleting the configuration by performing one of the following 1 Press the Configuration reset button on the back of the unit while powering on 2 Issue the delete configuration command from the CLI 3 Use the browser based OfficeConnect Remote 812 Manager to delete the configuration For more information on the OfficeConnect ...

Page 24: ... Quick Setup Identification information Quick Setup Management Information An SNMP community names a group of systems that can manage your system via SNMP It is a rudimentary form of security Question Default Your System Do you want the CLI to be password protected no What is the console login password no more than 8 characters Question Default Your System Network management yes IP yes IPX no Brid...

Page 25: ...etwork for future managment commands The IP mask can be specified either as a class A B or C the number of one bits in the mask or as an address in the format 255 x x x Question Default Your System What is the IP address of the station for this community 0 0 0 0 Question Default Your System Can this community change management information yes Question Default Your System Do you want to allow comma...

Page 26: ...ed or allow access to all systems IP setup is completed Quick Setup IPX information The network name is used by the OfficeConnect Remote 812 to identify your IPX network Question Default Your System What should the the mask be set to C Question Default Your System What is the framing for the IP network ethernet_ii Question Default Your System Do you want to run RIP yes Choose the version of RIP to...

Page 27: ...e spanning tree algorithm in the OfficeConnect Remote 812 if you have multiple 812s linking your network to another network or if you think that there might be loops in your network Would you like to review your current settings before executing yes Sample Identification Information This section contains a sample of possible settings Question Default Your System Enter the name of your network ipx ...

Page 28: ...e ip IP Network Address 192 168 200 254 IP Mask C IP Frame Type ethernet_ii IP RIP v2 DHCP Server Enabled DHCP Pool Start IP Address 192 168 200 1 DHCP Pool End IP Address 192 168 200 40 TFTP Server Information TFTP Access Any system IPX Information IPX Network Name ipx IPX Network Number 12345661 IPX Frame Type ethernet_ii Bridge Information Bridge Network Name bridge Spanning Tree no Do you want...

Page 29: ... 0 0 mask 255 255 255 0 OCR DSL add dns host ocrdsl 3com com addr 192 168 200 254 OCR DSL enable dns OCR DSL add tftp client 0 0 0 0 OCR DSL set ip network test routing ripv2 OCR DSL enable ip network test OCR DSL enable ip forwarding OCR DSL add ipx network ipx address 12345661 interface eth 1 frame ethernet_ii OCR DSL disable bridge spanning_tree OCR DSL add bridge network bridge OCR DSL save al...

Page 30: ...4 8 CHAPTER 4 QUICK SETUP ...

Page 31: ...he QuickVc script will prompt you for the appropriate parameters Instructions This section contains the CLI QuickVC Setup script for all possible OfficeConnect Remote 812 Virtual Channel VC configurations You will be required to enter information concerning network configurations Questions in the CLI QuickVC Setup script are presented here in tables Write the appropriate information for your desir...

Page 32: ...llows a single WAN side IP address to be shared by multiple LAN side devices Local and remote IP adresses can be configured in two different ways Specified the IP adress is always a specific address Learned the IP address is learned when the PPP connection is established One active VC profile can have its remote router installed as the default router in the OfficeConnect Remote 812 s IP route tabl...

Page 33: ...uting Information Protocol RIP to exchange routing information with other routers on the network The IP mask can be specified either as a class A B or C the number of one bits in the mask or as an address in the format 255 x x x The IP configuration for VC name is now complete Is the local IP address S pecified or L earned L Enter the local ip address for the WAN connection specified only Do you w...

Page 34: ...ype PPP ATM information VPI VCI 0 33 Question Default Your System Is IPX traffic going to be routed over VC name no Is the IPX WAN interface S pecified or L earned L Is the IPX WAN interface U nnumbered or N umbered N Enter the IPX network number for the WAN Do you want IPX routing RIP to run over the WAN yes Question Default Your System Is IPX traffic going to be routed over VC name no Is the IPX...

Page 35: ... set vc name atm vpi 0 vci 0 category_of_service unspecified pcr 0 OCR DSL set vc name ip enable OCR DSL set vc name remote_ip_address 0 0 0 0 C OCR DSL set vc name local_ip_address 0 0 0 0 OCR DSL set vc name ip_routing listen rip ripv2 OCR DSL set vc name nat_option enable OCR DSL set vc name ipx enable OCR DSL set vc name ipx_enable ipx_address 00000000 ipx_routing all OCR DSL set vc name bridg...

Page 36: ...5 6 CHAPTER 5 QUICK VC SETUP ...

Page 37: ...etwork IP IPX and or Bridge information Configure the network s over the LAN Add the network information to the remote site profile s Turn RIP IP and IPX and SAP IPX on or off as needed for your configuration Add static and framed routes IP and IPX or services IPX if needed 3 Optionally set up DHCP and DNS information 4 Optionally perform system administration tasks such as setting the date and ti...

Page 38: ...12 so that your changes will be written to permanent FLASH memory Managing a Remote Site You can obtain a list of all currently configured VC profiles using the command list vcs You can view the contents of a particular profile using the command show vc vc name The OfficeConnect Remote 812 always has a default profile Any value that is not set in a profile that you create will assume the values th...

Page 39: ...profile for RFC 1483 you simply configure the Network Service using the command set vc vc name network_service rfc_1483 When the Network Service is set to RFC1483 the profile s IP WAN addresses can be dynamically learned with the DHCP protocol To enable DHCP on the Remote Site profile use the following command set vc vc name dynamic_ip_addressing dhcp_client Configuring ATM Information The ATM par...

Page 40: ...eam transmission rates for the particular Category of Service PCR the Peak Cell Rate is the maximum number of cells second transmitted over this connection The Peak Cell Rate is optional for UBR and required for CBR To configure the profile for UBR use set vc vc name atm category_of_service unspecifed pcr cell rate To configure the profile for CBR set vc vc name atm category_of_service constant pc...

Page 41: ...from one interface to another It does not affect communicating to the OfficeConnect Remote 812 itself Even when IP Forwarding is disabled you can perform non routing functions such as use a Web browser to manage the unit and use PING In addition to IP forwarding there is a global RIP setting If RIP is globally disabled it is disabled for all LAN and WAN networks If RIP is globally enabled it can t...

Page 42: ...k using the following command disable ip network network name You can delete a disabled network using the command delete ip network network name The reconfigure ip network command can be used to modify an existing IP network s address or frame type Configuring IP RIP on the LAN IP RIP is configurable on each LAN IP network The OfficeConnect Remote 812 supports two versions of RIP V1 or V2 You can ...

Page 43: ...d set vc vc name local_ip_address ip address To specify that the local IP address should be learned you must enter 255 255 255 255 for the ip address parameter To specify that the interface is Unnumbered you must enter 0 0 0 0 for the ip address parameter See Appendix B of the OfficeConnect Remote 812 ADSL Router User s Guide for a discussion of Unnumbered interfaces Optionally you can specify tha...

Page 44: ... LAN network and therefore do not want to be broadcasting information to other routers The OfficeConnect Remote 812 will not allow a profile using address translation to be enabled if ip_routing is set to BOTH or SEND To configure the RIP version for the remote site connection use set vc vc name rip RIPV1 RIPV2 Configuring Static and Framed IP Routes A Static route is a configured route that will ...

Page 45: ...ress space and the growth of the Internet public addresses are becoming more scarce One solution to this problem is to use private addresses on small LANs and to use Address Translation when accessing devices on the public network Address Translation changes an IP frame s private address to a public address at the gateway of a public network i e the OfficeConnect Remote 812 router The router maint...

Page 46: ...rkstation default address Use the following command to set this field set vc vc name nat_default_address ip address Static port configurations map a public port to a private IP address port Both TCP and UDP static ports can be defined Remote sites can have multiple static ports defined If static ports and the Workstation Default Address are defined the static ports take precedence Static ports are...

Page 47: ...S Servers The assignment of an IP address to the workstation is for a specified period of time referred to as the lease period Before the lease is set to expire the workstation will send a request to the server to extend the lease period The server maintains a list of assigned IP addresses and the duration period of the leases When a lease expires the IP address can be reassigned to another workst...

Page 48: ...etwork subnet IP address mask set dhcp server start_address ip address end_address ip address set dhcp server mask ip address The final set of DHCP Server commands configure the Lease period and IP addresses of the Default gateway WINS Servers and DNS Servers There can be up to two WINS and DNS Servers specified If this functionality is to be disabled an IP address of 0 0 0 0 is entered If the Off...

Page 49: ... DNS Proxy receives requests and attempts to find an entry in its local tables and if one is not found forwards the request to a remote server The remote DNS Server can be learned dynamically through PPP or can be statically assigned The OfficeConnect Remote 812 s DNS Proxy enables you to configure remote DNS Servers for specific Domains For instance assume you have two remote sites configured one...

Page 50: ...ies To add a DNS Host entry to the DNS Static Host table use the command add dns host host name address ip address To view the contents of the Static Host table use the command list dns hosts To delete a specific Host entry use the command delete dns host host name Managing the DNS Proxy When resolving a DNS name the OfficeConnect Remote 812 first searches for a match in the Static Host table If a...

Page 51: ...o display the access list list access In addition to adding subnets to the list you can enable access to all hosts on the local LAN To enable LAN access enable lan access To enable the Access List functionality enable access To show the status of the Access List functionality show access IPX Routing The OfficeConnect Remote 812 can be configured as an IPX router to forward IPX packets between the ...

Page 52: ...ress ipx network address frame DSAP ETHERNET_II NOVELL SNAP You can obtain a list of all configured networks using the command list networks To only list IPX networks use list ipx networks By default the network is enabled when it is created You can disable the network using the following command disable ipx network network name You can delete a disabled network using the command delete ipx networ...

Page 53: ...site connection Also while a Static route is active when the LAN is connected a Framed route is active only when the connection to the associated remote site is active If you wish to set up a route to a network on the other side of a remote site use a Framed route If you wish to set up a route to a network through the LAN use a Static route Only use Static and Framed routes for networks not learne...

Page 54: ... Service is a manually configured Service accessible from the WAN A Framed Service is active only when the connection to the associated remote site is active Use Static and Framed Services for servers not learned using SAP To add a Static IPX Service over the LAN use the command add ipx service service name gateway network node address ipx_net server network address metric number node server node ...

Page 55: ...ipx network network name sap BOTH DISABLE LISTEN RESPOND_ONLY SEND Other permutations of the set ipx network command can be used to configure advanced RIP features and policies IPX RIP and SAP can be enabled or disabled for each remote site connection You cannot individually enable or disable RIP or SAP they are enabled or disabled together for each remote site connection You can configure whether...

Page 56: ... bridging on the OfficeConnect Remote 812 you must Configure bridging for the LAN Configure bridging for the remote site connection You may also want to Set up to bridge IP traffic Modify advanced bridging options Details are provided in the following sections Remember to save your configuration using the save all command before rebooting your OfficeConnect Remote 812 so that your changes will be ...

Page 57: ...mand disable ip forwarding Advanced Bridging Options The advanced bridging configuration options include Aging Time Forward Delay Spanning Tree and Spanning Tree Priority To see the current settings for these options use the command show bridge settings Except for enabling Spanning Tree most users do not need to change the advanced parameters from their default settings The Aging Time is the time ...

Page 58: ...uting MAC Encapsulated Routing is specified on a per VC basis When MAC Encapsulated Routing is enabled in a VC profile packets for the routed protocols configured by the profile i e IP and or IPX will be sent using the appropriate bridged encapsulation If the configured network service is RFC 1483 then the packets will be encapsulated in a bridged 1483 format If the configured service is PPP the p...

Page 59: ..._unicast_only 3 Forward Broadcast Unicast Packets Unicast packets for a configured protocol received from the LAN that are not addressed to the MAC address of the OfficeConnect Remote 812 are bridged Received broadcasts e g DHCP are bridged To configure the Bridge Firewall for this mode use the command set bridge firewall fwd_bc_and_unicast Packets received from the WAN do not pass through the Bri...

Page 60: ...Identification The system name location and contact information is useful when monitoring the OfficeConnect Remote 812 remotely You should choose a name location and contact that is appropriate for the unit You can view the settings using the command show system To set these parameters use the command set system name name location location contact contact The name location and contact can be up to...

Page 61: ...her the host name or the IP address of the workstation running the TFTP client An address of 0 0 0 0 allows all TFTP clients unrestricted access To remove a TFTP client from the list use the command delete tftp client host name or IP address or 0 0 0 0 Setting Password Protection The OfficeConnect Remote 812 provides the capability to password protect access to the CLI When the password protection...

Page 62: ...dded security or filters can be added to reduce network traffic and improve overall performance Packet filters control inter network data transmission by accepting or rejecting the passage of specific packets through network interfaces based on packet header information When data packets are received by a network interface such as an Ethernet LAN or WAN port a packet filter analyzes the packet inf...

Page 63: ...et can initiate an outgoing call Route filtering can filter source and destination addresses in packets that exchange routing table information Established session filtering A packet filter can permit users to connect with a remote network without letting remote users have access to the local network or vice versa Filter Classes The OfficeConnect Remote 812 supports three filter classes Input data...

Page 64: ...nt filters are used to restrict information in outgoing or incoming advertisement packets i e IP RIP IPX RIP and IPX SAP packets IP Controls network access based on the protocol and source destination address IP filter rules allow filtering based on the source address destination address protocol type source port and port designation of the IP packet IPX Controls network access based on the protoc...

Page 65: ...ts in CLI You define the filtering rules used by the router within filter files Filter files are text files that are stored in the unit s FLASH memory You can create and modify filter files using an off line text editor then TFTPing the finished file on to the unit To be valid a filter file must always have the following file descriptor on the first line filter Be sure that no blank space precedes...

Page 66: ...curs during filtering The following table describes each field used in the rule syntax The OR operation can be implemented by successive rules For example to accept a packet if the source address is xxx or the destination address is yyy the IPX SAP IPX SAP advertising filter section BR ETH Bridge protocol data filter Table 6 3 Protocol Rules Field Description line Each rule must have a unique line...

Page 67: ...the packet contents before comparing with the value hex Table 6 4 Protocol Keywords Protocol Section Keyword Operators Description and Value Range IP src addr dst addr tcp src port tcp dst port udp src port udp dst port protocol generic all all all all Source IP Address ddd ddd ddd ddd mask Destination IP Address ddd ddd ddd ddd mask TCP source port 1 65535 TCP destination port 1 65535 UDP source ...

Page 68: ...atch is found the packet is forwarded rules containing accept or discarded rules containing reject The following rule example allows forwarding of only IP packets with source addresses that match the first 16 bits of the given IP address addresses beginning with 192 77 IP 1 ACCEPT src addr 192 77 200 203 16 999 DENY The following rule example rejects IP packets with a source address 144 133 20 1 I...

Page 69: ...our routing tables If you are listening for RIP messages on a given interface you may wish to consider filtering out RIP updates from untrusted networks IPX Source and Destination Network Filtering Using CLI IPX network numbers must be specified as an network number no greater than 8 digits in hexadecimal format The following rule example rejects IPX packets with a source address 00 03 42 BF IPX 1...

Page 70: ...d to identify the services and addresses of servers attached to the network The responses are used to update a table in the router known as the Server Information Table You define IPX SAP packet filtering rules in the IPX SAP protocol section of the filter file You can filter SAP packets by network node server service type and socket The following rule example accepts SAP services from the server ...

Page 71: ...uidelines Begin each rule with a unique line number ranging from 1 10 Arrange rules in increasing line number order within each protocol section Arrange rules so that the rules you expect to be matched most frequently are toward the top of the list Delimit each rule with a semi colon Example IP 1 ACCEPT src addr 128 100 33 1 2 ACCEPT dst addr 200 135 38 9 999 DENY 5 Continue to define protocol rul...

Page 72: ...ons Assigning Filters discusses how to decide where to apply a filter and Applying Filters explains the appropriate CLI commands to use Assigning Filters Once a filter has been added to router s list of managed filters you can assign it to the unit s Interfaces VC Remote Site Profile Interface Filters You can configure interface filters for any interface Interface filters control access to all net...

Page 73: ...t Remote 812 is rebooted Do not apply a filter to more than one interface or VC remote site profile Also do not apply an input and an output filter to more than one Ethernet interface Applying a Filter to an Interface Using CLI To configure an input or output filter on an interface use the following CLI commands set interface interface name input_filter filter name set interface interface name out...

Page 74: ...g CLI To display the list of managed filters use the following command list filters filter_name The resulting display might look like this Adding Filters to the Managed List Using CLI The add filter command verifies filter syntax prior to adding the filter to the managed list If the syntax is valid no message is generated and the command prompt returns If syntax errors exist error messages are gen...

Page 75: ...r Using CLI To delete a specific packet filter removing the filter file permanently from the FLASH memory use the CLI command delete filter filter_name Verifying Filter File Syntax Using CLI The verify filter command must be used if you make changes to a filter file that has already been added to the managed list and re TFTP it back to the router s FLASH memory using the same filename The verify f...

Page 76: ...6 40 CHAPTER 6 MANUAL SETUP ...

Page 77: ... as the DHCP Server dynamically assigning IP addresses and configuration information to each locally connected workstation Two Remote Sites are defined one to an ISP for Internet access and another to the main Corporate office IP routing is enabled for the Internet site and both IP and IPX routing as well as bridging is enabled for the Corporate site Our sample network is configured in 6 steps Glo...

Page 78: ... ip network ip address 192 168 200 254 C frame ethernet_ii enable yes add tftp client 0 0 0 0 enable ip forwarding DHCP and DNS Configuration The OfficeConnect Remote 812 s DHCP and DNS functionality is enabled to simplify configuration of the workstation on the LAN A DHCP Server is defined with an address pool and the default router and the DNS Server addresses are set to the OfficeConnect Remote...

Page 79: ...ocal IPX Network is defined with a Network Number of 10 and an identifying name of ipx Routes and Services will be dynamically learned using RIP and SAP once the Remote Site to MyCorp is established The following commands are executed add ipx network ipx address 10 frame ethernet_ii enable yes set ipx net ipx rip both sap both Bridge Configuration A Bridge network is configured for the LAN With ou...

Page 80: ...IPX are both routed over this remote site and all other protocols are bridged The configured network service is RFC 1483 and the remote router address is specified 192 168 1 254 The WAN IPX interface is Unnumbered Network Address Translation is disabled on this Remote Site Profile The ATM virtual channel is VPI 0 and VCI 33 and the Peak Cell Rate is set to the default access rate This remote site ...

Page 81: ...Mask IP netmask of the subnet to be blocked add auto_filter vc_blk_netbios Automatically adds and enables an input filter on the specified VC The filter DP ports 137 and 138 and TCP ports 139 and 143 VC Specificed VC profile name add bridge network network_name enabled yes Defines a bridge network connection so your LAN users can bridge to other LANs across the WAN bridging is supported over the W...

Page 82: ...ondary addresses will be learned add filter filter_name Adds a filter file name to the filter table The filter table is a managed list of filter names used by SNMP A filter file is a text file stored in the FLASH file system that you load using TFTP Add filter also verifies the syntax of the filter file If syntax verification fails you ll receive an error message and the filter will still be added...

Page 83: ...ic Integer representing how far away the route is in hops from other routers Values are 1 through 15 Parameters Description IP_address IP Address of the gateway router metric Integer representing how far away the default router is in hops through other routers Values 1 15 Parameters Description network_name Name of IP network consisting of up to 32 unique ASCII characters space must be surrounded ...

Page 84: ...its in the mask If you do not specify a mask the system will generate it from the network address gateway IP address of gateway used to reach this remote network metric An integer representing how far away the route is in hops through other routers Values are 1 15 Parameters Description network_name Name of IPX network A unique ASCII string of up to 32 characters space must be surrounded by double...

Page 85: ...ber for the IPX service on which this service resides Gateway Address of the router you defined as the gateway metric An integer representing how far away the default router is in hops through other routers Values 1 15 node The internal MAC address of the server on which the service resides This is typically 00 00 00 00 00 01 type Type of service hex number referring to file server print server et...

Page 86: ...xxxxxxx form Metric An integer representing how far away the route is in hops through other routers Values are 1 15 ticks Estimated interval in ticks it takes to deliver a packet to the remote network There are approximately 18 ticks per second Parameters Description name The name of the user for the IPX route Petitioned IPX address of the route in IPX xxxxxxxx form Hops An integer representing ho...

Page 87: ...e in which they differ 0A job queue 21 NAS SNA gateway 2E dynamic SAP 47 advertising print server 4B Btrieve VAP 5 0 4C SQL VAP 7A TES NetWare VMS 98 NetWare access server 9A Named Pipes server 9E PortableNetWare UNIX 107 NetWare 386 111 Test server 166 NetWare management 26A NetWare management 26B Time synchronization 278 NetWare Directory server Parameters Description vc_name VC profile name pri...

Page 88: ...er for file transfers TELNETD TELNET server to the CLI socket Indicates which socket the server listens on For TFTP and TELNET it is the TCP or UDP port enabled This indicates whether the network service is enabled Enter YES or NO data Ancillary Data This field contains server specific configuration data See the table on the next page for settable ancillary data parameters for TELNET close_active_...

Page 89: ... tftp access add user name password password enabled yes Parameters Description community_name Group name that authorizes SNMP requests address IP address of the SNMP manager in the form nnn nnn nnn nnn access Determines what type of access to SNMP MIBs the added user will have Options Read Only RO and Read Write RW Parameters Description name Group name defining who can receive SNMP traps address...

Page 90: ... commands remove anything you previously added delete access ip subnet address The access list defines which Remote IP Subnets are allowed to access the Management services of the OCR812 Use this command to remove an entry in the list delete bridge network network_name Deletes the previously added bridge network Make sure you have disabled the bridge network using the disable bridge network comman...

Page 91: ...able ip network before deleting it delete ip route IP_address Deletes an IP address from the IP routing table that you previously added with add ip route Deleting this route will cause IP packets destined for this network to use the default route which you can see using list ip routes See add defaultroute gateway to find out how to add a default route delete ipx network name Deletes an IPX network...

Page 92: ... allowed addresses delete user name Deletes a user you previously added to the local user table Use list users to see the currently defined user and show user to see the attributes you assigned to that user using the add user or set user command delete vc name Deletes a virtual channel profile Use list vc to see the currently defined VCs and show vc to see the attributes of a specific VC A VC must...

Page 93: ...remote routes on all IP networks that you previously defined using add ip route You can list the current IP routes using list ip routes disable ipx network network_name Disables the specified IPX network Use list ipx networks to see which IPX networks are defined and their current status disable lan access When the access list is enabled this command disables access to Hosts on the local LAN inter...

Page 94: ...access temporarily DO do command_inputfile output outputfile Runs a script file that is stored in FLASH memory which contains a series of CLI commands ENABLE enable access Enables the Access List feature When enables onlly Remote Hosts in the access list are permitted access to the Router s management services enable bridge network network_name Enables bridging over the specified network You must ...

Page 95: ...ist feature is enabled this command enables access to all hosts on the local LAN interface When enabled all frames received on the LAN interface bypass the access list check enable link_traps interface interface_name This command tells SNMP to send linkup and linkdown traps for the specified interface You can see if the interface is currently enabled for traps using the show interface settings com...

Page 96: ...the CLI The CLI password must be entered in order to access the CLI again HANGUP hangup interface interface_name Causes the connection on the specified interface to hangup drop hangup vc vc_name Causes the connection for the specified VC to drop You can see which VCs have active connections using list vcs Also see disable vc which causes a VC s session to drop and prevents new sessions which use t...

Page 97: ...tatically defined and in use mgmt unknown but filtering information exists RxPkt Number of packets received from this MAC station RxOctets No of bytes octets received from this MAC station Fltr Number of packets received from this MAC station that were filtered out discarded Fwd Number of packets received from this MAC station that were forwarded TxPkt Number of packets forwarded to this MAC stati...

Page 98: ...the protocols the file applies to For example Filter Name Status Protocols easyfilter fil NORMAL IP IP RIP list files Displays the files currently stored in the FLASH file system You can remove files using delete file but you can add them using TFTP only list interfaces Displays the installed interfaces along with their operational status administration status and interface index If an interface i...

Page 99: ...twork Network Address address of the IP network list ip routes Displays all the statically defined IP routes that you previously defined using the add ip route command It lists Destination IP address that the route resolves to Prot LOCAL or RIP NextHop address of the gateway used to reach this route Metric number of router hops away this route is from the system If interface that the route uses li...

Page 100: ...e displayed list networks Displays all defined networks running any protocol The command lists Name designation of the network that you defined with add network Prot protocol of the network IP or Bridging Int interface the network is running on State ENABLED or DISABLED network Type STATIC or DYNAMIC network Network Address address of the network list processes Displays all processes running on th...

Page 101: ...and shows Syslog IP address to which syslog entries will be sent Log Level reporting level of entries to send Msg Count current number of messages sent since system bootup Also see list facilities and set facilities commands which let you view and change log reporting levels for each system facility list tcp connections Displays information about all TCP connections Connection status is defined in...

Page 102: ...umeric printable characters inclusive PAUSED COMMANDS PING ping ip_name_or_addr output output_filename count count interval interval timeout timeout_value Sends an ICMP echo request to a remote IP host A reply from the pinged address indicates success QUICKVC Runs the QuickVC Setup program to easily configure a virtual channel connection remote site profile See Chapter 5 for a complete description...

Page 103: ...ll changes you have made during your session with the CLI It is a good idea to save your changes frequently just as you should with any type of editor SET set adsl reset Resets the ADSL interface set adsl wire pair Overrides the auto direction of inner and outer pair wiring on the RJ 11 connector inner inner pair outer outer pair set bridge aging_time seconds forward_delay seconds spanning_tree_pr...

Page 104: ...p mode mode Sets the DHCP mode for the unit set dhcp relay server1 address IP_address enabled YES NO max_hops number Defines the address and characteristics of the primary DHCP Server over the WAN that should receive our relayed DHCP requests Parameters Description history numerical range Sets the depth of the buffer holding the command history Use the history command to see the current depth and ...

Page 105: ...e allowed to accrue without the request being dropped Parameters Description address IP address of the secondary DHCP server over the WAN port where DHCP resolution requests should be forwarded enabled Whether or not this server is active for relay max_hops maximum number of hops the redirected requests are allowed to accrue without the request being dropped Parameters Description DNS1 IP address ...

Page 106: ...name Sets filter parameters for the specified protocol on the specified interface You can see the available filter files using list filters view the contents of a filter file using show filter and add filter files to FLASH memory using TFTP mask IP network mask that applies to the pool of IP addresses being administered router IP address that the workstations should use as their default gateway st...

Page 107: ...terface Accept Default disabled by default Determines whether router accepts default route advertisements Split Horizon enabled by default Records the interface over which it received a particular route and does not propagate its information about that route back over the same interface This prevents route broadcasts from looping between routers Poison Reverse enabled by default Routes that were e...

Page 108: ...size number metric_maximum_entries number Parameters Description network_name Designation of the IP network for which you want to set parameters broadcast_algorithm Algorithm determines which address is used in broadcasts to represent the entire network Choices are 1 the IETF standard nnn nnn nnn 255 default 0 the BSD standard nnn nnn nnn 000 reassembly_ maximum_size Maximum size IP datagram that ...

Page 109: ...specified IPX network Parameters Description autonomous_system_number Autonomous system number table_maximum_size Maximum number of IP routes system can hold in its table Default 1000 metric_maximum_entries Most next hop entries the system table can maintain rip_flags Flags indicate at which level a RIP instance is disabled or configured Choices are METRICS Specifies how to increment metrics using...

Page 110: ...his IPX network will support rip Sets the RIP mode rip_age_multiplier Number to multiply the rip_update_interval by to obtain the value for the aging out the entries in the RIP database rip_packet_size Size of RIP packets rip_update_interval How often RIP should send periodic updates sap Sets the SAP mode sap_age_multiplier Number to multiply the sap_update_interval by to obtain the value for agin...

Page 111: ...em name name location location contact contact info server_type Type of network service you wish to assign to this administration name Currently available services are TELNETD TELNET server HTML for gathering statistics SNMPD SNMP agent TFTPD server for file transfers socket Indicates which socket the server listens on For TFTP and TELNET it is the TCP or UDP port number data TELNET Ancillary Data...

Page 112: ...a routing update message DEBUG for debugging only set time time Sets the system time and leaves the date unchanged Use show date to see what the current settings are The format is hh mm ss The seconds field is optional set user user_name message message password password session_timeout seconds tcp_port tcp_port terminal_type Modifies user parameters set vc vc_name address_selection negotiate assi...

Page 113: ...e disable MTU number NAT_option disable enable NAT_default_address ip_addr network_service ppp PPPLLC RFC_1483 output_filter filter_name password password remote_ip_address ip_addr rip ripv1 ripv2 rip_authentication string rip_policies_update rip_policies send_name send_password text string type ONDEMAND CONTINUOUS MANUAL Specifies parameters for VCs Parameters Description vc_name VC profile name ...

Page 114: ...work will be dropped ipx This controls whether to enable or disable IPX for the virtual circuit The choices are ENABLE DISABLE ipx_address This sets the IPX address for the virtual circuit ipx_routing This sets the routing type RIP packets accepted on this connection Options are ALL listens sends and responds RIP packets LISTEN detects packets destined for the system s network NONE ignores all rou...

Page 115: ... text on the preceding page for description of keywords A keyword with a NO_ in front is used to disable the policy Default is indicated by D SEND_DEFAULT NO_SEND_DEFAULT D SEND_ROUTES D NO_SEND_ROUTES SEND_SUBNETS NO_SEND_SUBNETS D ACCEPT_DEFAULT NO_ACCEPT_ DEFAULT D SPLIT_HORIZON D NO_SPLIT_HORIZON POISON_REVERSE D NO_POISON_ REVERSE FLASH_UPDATE D NO_FLASH_UPDATE SEND_COMPAT D NO_SEND_COMPAT RI...

Page 116: ...a cells sent over the WAN TX Idle Cells Number of ATM idle cells sent over the WAN RX Good Cells Number of well formed and correctly addressed ATM data cells received from the WAN RX Idle Cells Number of well formed and correctly addressed ATM idle cells received from the WAN RX No Pkt Avail Number of times a packet was reassembled but could not be delivered over the LAN because of lack of packet ...

Page 117: ...rames Transmit Frames Discarded settings Interface Network Address Frame Type Status User Name Spanning Tree Enabled show bridge settings Displays the settings for all bridge networks Use set bridge to modify these values Base Aging Time time to age out a known MAC address default 300 Parameters Description counters Displays information about the specified bridge network It lists Received Frames p...

Page 118: ...and Bridge status current status of each network layer Configured protocol is configured for this VC and the call is being initiated Not configured The protocol is disabled on this VC Established Protocol was negoitated successfully and is currently active on this VC Failure Protocol was configured but there was a failure in the PPP negotiation while attempting to initiate the network layer show c...

Page 119: ...for an ACK response from the Server Established The DHCP Client has successfully been assigned an IP configuration from the Server IP configuration learned assigned by the DHCP Server IP Address IP Mask Gateway Address Primary DNS Address Secondary DNS Address Lease Time Statistics Number of Discovers transmitted Number of Requests transmitted Number of Declines transmitted Number of Offers receiv...

Page 120: ...ddress in the pool of IP addresses that will be handed out through DHCP IP Mask IP network mask that applies to the pool of IP addresses being administered IP Router IP address that the workstations should use as their default gateway Lease The number of seconds that an IP address will be allocated to a workstation without having to be renewed Host Name DNS host name of this unit Domain Name Name ...

Page 121: ...ettings Displays settings for all DNS servers You can modify using set DNS Administration Status This controls whether the DNS server has administration status Options are Enabled or Disabled Number Retries per Server number of times the resolve name request will be sent to each Name Server if the server fails to respond to a request before the timeout period Timeout Period in Seconds number of se...

Page 122: ... Timestamps sum of ICMP request messages received seeking time from another machine for clock synchronization and estimated transit time purposes Timestamp Replies sum of ICMP timestamp reply messages Address Masks sum of ICMP Address Mask Reply messages Address Mask Replies sum of ICMP request messages concerning a host s ability to gather network information OUTPUT COUNTERS Messages total of ICM...

Page 123: ...ltiCast multicast packets transmitted Discards Number of outbound packets which were chosen to be discarded even though no errors had been detected to prevent their being transmitted One possible reason for discarding such a packet could be to free up buffer space Errors For packet oriented interfaces the number of outbound packets that could not be transmitted because of errors For character orie...

Page 124: ... Address Pool Size size of IP address range IP System Host Address IP address of the system IP Forwarding ENABLE or DISABLE forwarding of IP packets show ip network network_name settings Displays parameter settings for the specified IP network See the set ip network command on page 29 for additional details Interface interface this IP network runs on Network Address network address of this IP netw...

Page 125: ...kets discarded due to compression errors OUTPUT COUNTERS Total Packets Transmitted sum of IPX packets transmitted Forwarded Packets sum of IPX packets forwarded Local Transmits sum of IPX packets transmitted to local hosts Local Malformed Transmits Discarded sum of outgoing packets discarded Filtered Out sum of packets filtered out before transmission Compression Errors sum of outgoing packets dis...

Page 126: ...m RIP RIP status RIP Update sec number of seconds to wait before aging out RIP entries RIP Age Multiplier number to multiply the rip_update_interval by to obtain the value for aging out the entries in the RIP database RIP Max Packet Size largest allowable size of a RIP packet SAP SAP state SAP Update sec number of seconds to wait before aging out SAP entries SAP Age Multiplier number to multiply t...

Page 127: ...ed settings for the specified network The display varies depending on the type of network specified Some of the settings displayed are Interfaces Network Address Frame Type Status User Name and Spawning Tree Enabled show network name counters Displays the statistical counters for the specified network The display varies depending on the type of network specified Some of the counters are Received F...

Page 128: ...eld COUNTERS for PPP LINK 1 5 Operational Status not opened or opened Received Packets too long Transmit Frames sum of frames received from the PPP application for transmission over this link Bytes from Upper Layer sum of bytes handed down from an upper layer application for this link Bytes to Lower Layer sum of bytes received from a lower layer application for this link Received Frames sum of fra...

Page 129: ...entity default is 1514 Local to Peer ACC Map value of the ACC Map used for sending packets from the local PPP entity to the remote PPP entity Peer to Local ACC Map ACC Map used by the remote PPP entity when transmitting packets to the local PPP entity Local To Remote Protocol Compression Indicates whether the local PPP entity will use Protocol Compression when sending packets to the remote PPP ent...

Page 130: ...ackets received Bad Versions SNMP messages for an unsupported SNMP version Bad Community Names SNMP messages which used an unknown SNMP community name Bad Community Uses SNMP messages which represented an SNMP operation not allowed by the SNMP community named in the message ASN 1 Parse Errors sum of ASN 1 or BER errors Too Big Errors SNMP PDUs for which the value of the error status field is tooBi...

Page 131: ...um of SNMP Set Request PDUs sent from SNMP Get Response PDUs sum of SNMP Get Response PDUs from SNMP Trap PDUs sum of SNMP Trap PDUs sent from SNMP show snmp settings Displays SNMP settings which you can modify using enable or disable snmp authentication traps commands Authentication Traps ENABLED default or DISABLED show system Displays system information System Descriptor for example 3Com Office...

Page 132: ...itted octets Retransmitted Segments sum of segments retransmitted show tcp settings Displays system wide TCP settings TCP SETTINGS Retransmission Algorithm for example Van Jacobson Minimum Timeout minimum retransmission timeout interval Maximum Timeout maximum retransmission timeout interval Maximum Connections sum of TCP connections allowed If maximum number of connections is dynamic the value is...

Page 133: ...ilter filter_name Verifies the syntax of a filter file which has been previously added to the table If you update a filter file and TFTP it to the FLASH file system and the file already exists in the filter table then you use this command to verify the files syntax You can use list filters to see which files are currently in the filter file table and what the status of each is TELNET Commands The ...

Page 134: ...an change the number of commands kept in the command history buffer using the set command history command Positional Help Positional help displays the list of possible parameters when you type after any command or parameter It then redisplays the line you typed without the so you can enter the parameter you wish to use This helps you find the parameter you need and add it to your command without h...

Page 135: ...Command Features B 55 Comments Nothing following the semicolon will be processed This is useful when you are writing CLI script files The do command runs a CLI script ...

Page 136: ...B 56 APPENDIX B CLI COMMAND DESCRIPTION ...

Page 137: ...rk B 1 delete bridge network B 10 disable bridge spanning_tree B 12 show bridge settings B 36 Managing disable bridge network B 12 enable bridge network B 13 Statistics show bridge network counters B 36 Bridging 1 Advanced 20 IP 20 LAN 20 Overview 19 Remote Site 20 bridging 5 C Call filtering 26 CLI Conventions and Terminology 1 A 1 B 1 CLI help 2 CLI abbreviation 2 CLI control characters 2 CLI na...

Page 138: ...st B 1 add DNS server B 2 delete DNS host B 10 delete DNS server B 10 list DNS hosts B 16 list DNS servers B 16 set DNS B 25 show dns settings B 39 Configuring 14 Diagnostics resolve name B 22 Host Entry 14 Overview 13 Proxy 14 Statistics show dns counters B 39 Domain Name Service DNS 3 E Embedded bypass filters 27 Established session filtering 26 F Filter Classes 26 Filter File Components in CLI ...

Page 139: ...ip forwarding B 12 disable ip rip B 12 disable ip routing B 12 disable ip static_remote_routes B 12 enable ip forwarding B 14 enable ip rip B 14 enable ip routing B 14 Enabling 5 LAN 6 list ip routes B 18 Overview 4 Remote Site 7 RIP 6 8 Services add network service B 7 delete network service B 11 enable network service B 14 list services B 19 set network service B 29 Statistics list ip interface_...

Page 140: ... network counters B 43 IPX RIP Packet Filtering 33 IPX Routing Framed Routes 16 Framed Services 17 LAN 15 Overview 15 Remote Site 16 RIP 18 SAP 18 Static Routes 16 Static Services 17 IPX SAP Packet Filtering Using CLI 34 IPX Source and Destination Host Filtering Using CLI 33 IPX Source and Destination Network Filtering Using CLI 33 IPX Source and Destination Socket Number Filtering 33 L List comma...

Page 141: ...Setup 1 2 3 4 5 Quick Setup script instructions 1 7 R Remote Site Management 2 RIP enable ip rip B 14 show ipx RIP settings B 44 Route filtering 26 Routing Information Protocol RIP packets 32 S Sample Configuration A 1 Scripts CLI do run CLI script B 13 Security CLI Access disable security_option remote_user administration B 13 enable security_option remote_user administration B 14 Dial in disable...

Page 142: ...e framed route vc B 10 delete syslog B 11 do run a script file B 13 help B 15 history B 15 kill B 15 list facilities B 17 list files B 17 list processes B 19 quickvc B 21 reboot B 21 rename file B 21 show configuration B 37 System ID 23 T TELNET access 24 TFTP access 24 Time 23 U Users delete user B 11 show user settings B 51 show vc settings B 51 V VC delete vc B 11 set vc B 32 VC Remote Site Fil...

Page 143: ...ES NOT OPERATE AS WARRANTED ABOVE CUSTOMER S SOLE REMEDY FOR BREACH OF THAT WARRANTY SHALL BE REPAIR REPLACEMENT OR REFUND OF THE PURCHASE PRICE PAID AT THE OPTION OF 3COM TO THE FULL EXTENT ALLOWED BY LAW THE FOREGOING WARRANTIES AND REMEDIES ARE EXCLUSIVE AND ARE IN LIEU OF ALL OTHER WARRANTIES TERMS OR CONDITIONS EXPRESS OR IMPLIED EITHER IN FACT OR BY OPERATION OF LAW STATUTORY OR OTHERWISE IN...

Page 144: ...nterference by one or more of the following measures Reorient or relocate the receiving antenna Increase the separation between the equipment and receiver Connect the equipment into an outlet on a circuit different from the one which the receiver is connected to Consult the dealer or an experienced radio TV technician for help The user may find the following booklet prepared by the Federal Communi...

Search results

Summary of Contents for OfficeConnect 3CP4144

Reviews:

Related manuals for OfficeConnect 3CP4144

Brands by name

Popular brands

3Com OfficeConnect 3CP4144, Cli User'S Manual

Search results

Summary of Contents for OfficeConnect 3CP4144

Reviews:

Related manuals for OfficeConnect 3CP4144

Brands by name

Popular brands