background image

H3C MSR 20/30/50 Series Routers

Command Reference Manual 

(v1.00)

MSR 20 Series Routers
MSR 30 Series Routers
MSR 50 Series Routers

www.3Com.com

Part Number: 10016323 Rev. AA
August 2007

Summary of Contents for MSR 20-20

Page 1: ...H3C MSR 20 30 50 Series Routers Command Reference Manual v1 00 MSR 20 Series Routers MSR 30 Series Routers MSR 50 Series Routers www 3Com com Part Number 10016323 Rev AA August 2007...

Page 2: ...as provided in DFAR 252 227 7015 Nov 1995 or FAR 52 227 14 June 1987 whichever is applicable You agree not to remove or deface any portion of any legend provided on any licensed program or documentat...

Page 3: ...ferential delay 115 display interface ima group 115 frame format 116 frame length 117 ima ima group 117 ima clock 118 ima standard 119 ima test 119 interface ima group 120 loopback 120 min active link...

Page 4: ...l status 147 display dsl version 148 7 POS INTERFACE CONFIGURATION COMMANDS clock 151 crc 151 display interface pos 152 display ip interface pos 154 display ipv6 interface pos 154 flag 155 frame forma...

Page 5: ...CONFIGURATION COMMANDS FOR ETHERNET INTERFACES IN ROUTE MODE mtu 187 timer hold 187 11 FUNDAMENTAL SERIAL INTERFACE CONFIGURATION COMMANDS async mode 189 baudrate 189 clock serial interface view 190...

Page 6: ...1 PRI interface view 215 clock CT1 PRI interface view 216 code CT1 PRI interface view 217 controller t1 217 crc 218 data coding CT1 PRI interface view 218 display controller t1 219 error diffusion res...

Page 7: ...254 crc 255 display controller e3 255 e1 bert 257 e1 channel set 258 e1 set clock 258 e1 set frame format 259 e1 set loopback 260 e1 shutdown 260 e1 unframed 261 fe3 261 loopback CE3 interface view 26...

Page 8: ...isplay atm class 293 display atm interface 294 display atm map info 295 display atm pvc group 296 display atm pvc info 297 encapsulation 298 interface atm 299 ip precedence 299 map bridge 300 map ip 3...

Page 9: ...ce dialer 332 interface dialer 333 ppp callback 334 ppp callback ntstring 334 21 BASIC DLSW CONFIGURATION COMMANDS code nrzi 337 display dlsw circuits 337 display dlsw information 338 display dlsw rem...

Page 10: ...dlc timer ack 368 sdlc timer lifetime 368 sdlc timer poll 369 sdlc window 369 sdlc xid 370 22 FRAME RELAY CONFIGURATION COMMANDS annexg 371 display fr compress 371 display fr dlci switch 372 display f...

Page 11: ...mer hello 406 mfr window size 406 shutdown 407 reset fr inarp 407 reset fr pvc 408 timer hold 408 x25 template 409 x25 template 409 23 GARP CONFIGURATION COMMANDS display garp statistics 411 display g...

Page 12: ...translate x25 440 x25 alias policy 441 x25 call facility 442 x25 cug service 443 x25 default protocol 444 x25 hunt group 445 x25 ignore called address 446 x25 ignore calling address 446 x25 local cug...

Page 13: ...LINK AGGREGATION DEBUGGING COMMANDS debugging lacp packet 483 debugging lacp state 487 debugging link aggregation error 488 debugging link aggregation event 489 29 MODEM CONFIGURATION COMMANDS modem 4...

Page 14: ...play ppp compression iphc rtp 525 display ppp compression iphc tcp 525 display ppp compression stac lzs 526 ip tcp vjcompress 526 ppp compression iphc 527 ppp compression iphc rtp connections 528 ppp...

Page 15: ...560 reset bridge address table 561 reset bridge traffic 561 x25 map bridge 562 37 ISDN CONFIGURATION COMMANDS dialer isdn leased ISDN BRI interface view 563 display isdn active channel 564 display isd...

Page 16: ...port 601 display stp history 601 display stp region configuration 602 display stp root 603 display stp tc 604 instance 605 region name 605 reset stp 606 revision level 607 stp 607 stp bpdu protection...

Page 17: ...id vlan 641 port link type 642 port trunk permit vlan 642 port trunk pvid vlan 643 41 VOICE VLAN CONFIGURATION COMMANDS display voice vlan oui 645 display voice vlan state 646 voice vlan 646 voice vla...

Page 18: ...ck 671 controller cpos 671 crc 672 display controller cpos 672 display controller cpos e1 674 display controller cpos t1 675 e1 channel set 677 e1 set clock 678 e1 set frame format 678 e1 set loopback...

Page 19: ...p 704 display local proxy arp 704 51 DHCP SERVER CONFIGURATION COMMANDS bims server 705 bootfile name 706 dhcp enable 706 dhcp select server global pool 707 dhcp server detect 707 dhcp server forbidde...

Page 20: ...rver detect 734 dhcp relay server group 734 dhcp relay server select 735 dhcp select relay 736 dhcp update arp 736 display dhcp relay 737 display dhcp relay security 737 display dhcp relay security st...

Page 21: ...bound packets 776 ip count interior threshold 777 ip count outbound packets 778 ip count rule 778 ip count timeout 779 reset ip count 779 59 IP ADDRESSING CONFIGURATION COMMANDS display ip interface 7...

Page 22: ...y based route statistics 812 display policy based route 813 if match acl 813 if match packet length 814 ip local policy based route 814 ip policy based route 815 policy based route 815 reset policy ba...

Page 23: ...dress flag 850 ipv6 nd autoconfig other flag 850 ipv6 nd dad attempts 851 ipv6 nd hop limit 851 ipv6 nd ns retrans timer 852 ipv6 nd nud reachable time 852 ipv6 nd ra halt 853 ipv6 nd ra interval 854...

Page 24: ...ONFIGURATION COMMANDS destination 881 display interface tunnel 882 display ipv6 interface tunnel 883 encapsulation limit 884 interface tunnel 884 mtu 885 source 886 tunnel protocol 887 69 IPV6 UNICAST...

Page 25: ...rta rtc server listen port 914 rta server enable 915 rta source ip 915 rta template 916 rta terminal 916 sendbuf bufsize 917 sendbuf threshold 918 tcp 918 testkey 919 update changed config 920 vty des...

Page 26: ...VPN instance view 956 bestroute med confederation BGP BGP VPN instance view 956 bgp 957 compare different as med BGP BGP VPN instance view 957 confederation id 958 confederation nonstandard 959 confe...

Page 27: ...w 991 peer enable BGP view 992 peer fake as BGP BGP VPN instance view 992 peer filter policy BGP BGP VPN instance view 993 peer group BGP BGP VPN instance view 994 peer ignore BGP BGP VPN instance vie...

Page 28: ...1039 cost style 1040 default route advertise IS IS view 1041 display isis brief 1042 display isis debug switches 1043 display isis graceful restart status 1043 display isis interface 1044 display isis...

Page 29: ...ew 1078 network entity 1079 preference IS IS view 1079 reset isis all 1080 reset isis peer 1081 set overload 1081 spf slice size 1082 summary IS IS view 1083 timer isp generation 1084 timer lsp max ag...

Page 30: ...restart interval OSPF view 1135 host advertise 1135 import route OSPF view 1136 log peer change 1137 lsa arrival interval 1138 lsa generation interval 1139 lsdb overflow limit 1139 maximum load balanc...

Page 31: ...network 1171 peer 1172 preference 1172 reset rip statistics 1173 rip 1173 rip authentication mode 1174 rip input 1175 rip metricin 1176 rip metricout 1176 rip mib binding 1177 rip output 1177 rip pois...

Page 32: ...ING POLICY CONFIGURATION COMMANDS apply ip address next hop 1207 display ip ip prefix 1207 if match acl 1208 if match ip 1209 if match ip prefix 1209 ip ip prefix 1210 reset ip ip prefix 1211 80 IPV6...

Page 33: ...ess family view 1240 import route IPv6 address family view 1240 ipv6 family 1241 network IPv6 address family view 1241 peer advertise community IPv6 address family view 1242 peer advertise ext communi...

Page 34: ...y export 1272 ipv6 filter policy import 1273 ipv6 import route 1274 ipv6 import route isisv6 level 2 into level 1 1275 ipv6 maximum load balancing 1276 ipv6 preference 1276 ipv6 summary 1277 isis ipv6...

Page 35: ...isplay ripng interface 1312 display ripng route 1313 filter policy export 1314 filter policy import RIPng view 1314 import route 1315 maximum load balancing RIPng view 1316 preference 1316 ripng 1317...

Page 36: ...51 igmp group policy 1351 igmp last member query interval 1352 igmp max response time 1352 igmp require router alert 1353 igmp robust count 1354 igmp send router alert 1354 igmp static group 1355 igmp...

Page 37: ...erval PIM view 1388 c bsr priority PIM view 1388 c rp PIM view 1389 c rp advertisement interval PIM view 1390 c rp holdtime PIM view 1391 crp policy PIM view 1391 display pim bsr info 1392 display pim...

Page 38: ...ew 1423 ssm policy PIM view 1425 state refresh interval PIM view 1425 state refresh rate limit PIM view 1426 state refresh ttl PIM view 1426 static rp PIM view 1427 timer hello PIM view 1428 timer joi...

Page 39: ...58 timer other querier present MLD view 1458 timer query MLD view 1459 version MLD view 1460 93 IPV6 PIM CONFIGURATION COMMANDS bsr policy IPv6 PIM view 1461 c bsr IPv6 PIM view 1461 c bsr hash length...

Page 40: ...riggered hello delay 1492 probe interval IPv6 PIM view 1493 register policy IPv6 PIM view 1493 register suppression timeout IPv6 PIM view 1494 register whole checksum IPv6 PIM view 1495 reset pim ipv6...

Page 41: ...s lsp 1536 du readvertise 1538 du readvertise timer 1538 graceful restart MPLS LDP view 1539 graceful restart mpls ldp 1539 graceful restart timer neighbor liveness 1540 graceful restart timer reconne...

Page 42: ...mpls rsvp te reservation 1580 display mpls rsvp te rsb content 1581 display mpls rsvp te sender 1583 display mpls rsvp te statistics 1584 display mpls static cr lsp 1586 display mpls te cspf tedb 1587...

Page 43: ...etric 1624 mpls te igp shortcut 1624 mpls te link administrative group 1625 mpls te loop detection 1625 mpls te max link bandwidth 1626 mpls te max reservable bandwidth 1626 mpls te metric 1627 mpls t...

Page 44: ...LS L3VPN CONFIGURATION COMMANDS apply access vpn vpn instance 1671 default local preference BGP VPNv4 subaddress family view 1671 default med BGP VPNv4 subaddress family view 1672 description VPN inst...

Page 45: ...1706 policy vpn target 1707 reflect between clients 1708 reflector culster id 1708 refresh bgp vpn instance 1709 refresh bgp vpnv4 1710 reset bgp vpn instance 1710 reset bgp vpn instance dampening 171...

Page 46: ...1743 dvpn session dumb time 1744 dvpn session idle time 1745 ipsec profile tunnel interface view 1745 keepalive 1746 reset dvpn session 1747 tunnel protocol dvpn udp 1747 vam client 1748 103 GRE CONFI...

Page 47: ...erface 1775 qos gts 1776 107 LINE RATE CONFIGURATION COMMANDS display qos lr interface 1779 qos lr interface view 1780 qos lr layer 2 interface view or port group view 1780 108 DEFINING CLASS COMMANDS...

Page 48: ...3 CQ CONFIGURATION COMMANDS display qos cq interface 1817 display qos cql 1817 qos cq 1818 qos cql default queue 1819 qos cql inbound interface 1819 qos cql protocol 1820 qos cql queue 1821 qos cql qu...

Page 49: ...qos wred weighting constant 1850 122 WRED TABLE CONFIGURATION COMMANDS display qos wred table 1853 qos wred queue table 1854 qos wred apply 1854 queue 1855 123 MPLS QOS CONFIGURATION COMMANDS if match...

Page 50: ...bound interface 1888 fr del protocol 1889 fr pvc pq 1890 fr traffic policing 1891 fr traffic shaping 1891 fragment 1892 fr class 1892 pq 1893 pvc pq 1893 rtpq 1894 traffic shaping adaptation 1895 wfq...

Page 51: ...ip 1930 cut connection 1931 display connection 1932 display domain 1933 display local user 1935 domain 1936 domain default 1937 idle cut 1938 ip pool 1938 level 1939 local user 1940 local user passwor...

Page 52: ...75 display stop accounting buffer 1977 hwtacacs nas ip 1977 hwtacacs scheme 1978 key HWTACACS scheme view 1979 nas ip HWTACACS scheme view 1979 primary accounting HWTACACS scheme view 1980 primary aut...

Page 53: ...MANDS display mac authentication 2009 mac authentication 2010 mac authentication domain 2011 mac authentication timer 2012 mac authentication user name format 2013 reset mac authentication statistics...

Page 54: ...2045 certificate request mode 2046 certificate request polling 2046 certificate request url 2047 common name 2048 country 2048 crl check 2049 crl update period 2049 crl url 2050 display pki certificat...

Page 55: ...server method 2078 reset portal connection statistics 2078 reset portal server statistics 2079 reset portal tcp cheat statistics 2079 136 RSH CONFIGURATION COMMANDS rsh 2081 137 COMMON CONFIGURATION...

Page 56: ...encapsulation mode 2130 encrypt card fast switch 2130 esp authentication algorithm 2131 esp encryption algorithm 2131 ike peer IPSec policy view IPSec policy template view 2132 ipsec binding policy 2...

Page 57: ...rval 2166 interval time 2166 local 2167 local address 2167 nat traversal 2168 peer 2168 pre shared key 2169 remote address 2169 remote name 2170 reset ike sa 2170 sa duration 2171 time out 2172 142 SS...

Page 58: ...ssh server enable 2194 ssh server rekey interval 2194 ssh user 2195 ssh2 2196 ssh2 ipv6 2197 143 SFTP CONFIGURATION COMMANDS bye 2201 cd 2201 cdup 2202 delete 2202 dir 2202 exit 2203 get 2203 help 22...

Page 59: ...timer advertise 2233 vrrp vrid track 2233 vrrp vrid track interface 2234 vrrp vrid virtual ip 2235 147 VRRP CONFIGURATION COMMANDS FOR IPV6 display vrrp ipv6 2237 display vrrp ipv6 statistics 2238 res...

Page 60: ...8 filename 2271 frequency 2271 history records 2272 http version 2273 next hop 2273 nqa 2274 nqa agent enable 2274 nqa agent max concurrent 2275 nqa schedule 2275 operation FTP test type view 2276 ope...

Page 61: ...301 display ntp service status 2302 display ntp service trace 2303 ntp service access 2304 ntp service authentication enable 2305 ntp service authentication keyid 2305 ntp service broadcast client 230...

Page 62: ...p agent group 2338 snmp agent local switch fabricid 2339 snmp agent log 2339 snmp agent mib view 2340 snmp agent packet max size 2341 snmp agent sys info 2341 snmp agent target host 2342 snmp agent tr...

Page 63: ...user 2370 ftp server enable 2370 ftp timeout 2371 ftp update 2371 158 FTP CLIENT CONFIGURATION COMMANDS ascii 2373 binary 2373 bye 2374 cd 2374 cdup 2374 close 2375 debugging 2375 delete 2376 dir 237...

Page 64: ...ount 2410 display clipboard 2410 display clock 2411 display configure user 2411 display current configuration 2412 display diagnostic information 2414 display history command 2415 display hotkey 2415...

Page 65: ...t trapbuffer 2445 terminal debugging 2445 terminal logging 2446 terminal monitor 2447 terminal trapping 2447 164 USER INTERFACE CONFIGURATION COMMANDS acl 2449 activation key 2450 auto execute command...

Page 66: ...address timer 2483 166 POE CONFIGURATION COMMANDS apply poe profile 2485 display poe device 2486 display poe interface 2486 display poe interface power 2489 display poe power usage 2490 display poe p...

Page 67: ...able 2523 acsei client debug enable 2523 acsei client debug show 2524 chkconfig acseid off 2524 chkconfig acseid on 2525 service acseid condrestart 2525 service acseid reload 2526 service acseid resta...

Page 68: ...stics protocol 2551 173 VOIP CONFIGURATION COMMANDS address 2553 area 2554 area id 2554 busytone t th 2555 cid display 2556 cid receive 2556 cid send 2557 cid type 2557 cng on 2558 compression 2559 cp...

Page 69: ...nlp on 2601 outband 2602 payload size 2602 plc mode 2603 receive gain 2604 register number 2605 reset voice cmc statistic 2605 reset voice ipp statistic 2606 reset voice iva statistic 2606 rtp payloa...

Page 70: ...2634 select rule rule order 2638 select rule search stop 2639 select rule type first 2640 select stop 2641 send number 2642 substitute subscriber line view voice entity view 2643 substitute voice dia...

Page 71: ...2680 fax baudrate 2683 fax ecm 2684 fax level 2685 fax local train threshold 2685 fax nsf on 2686 fax protocol 2687 fax train mode 2688 reset voice fax statistics 2689 voip h323 conf tcs t38 2689 177...

Page 72: ...ice bandwidth 2717 vofr 2717 vofr frf11 timer 2719 180 VOICE RADIUS CONFIGURATION COMMANDS aaa client 2721 accounting 2721 accounting did 2722 acct method 2723 authentication 2724 authentication did 2...

Page 73: ...ut this guide Table 2 lists text conventions that are used throughout this guide Table 1 Notice Icons Icon Notice Type Description n Information note Information that describes important features or i...

Page 74: ...interface cards and modules available with the router LMR Series Routers Cable Manual Describes the pinouts of the cables available for LMR series routers Release Notes Contains the latest informatio...

Page 75: ...hop 1565 address 2553 address 2711 adsl standard 144 adsl tx attenuation 144 aggregate 953 aging time 1999 ah authentication algorithm 2119 alarm CT3 interface view 265 alarm threshold 213 allow l2tp...

Page 76: ...9 auto execute command 2451 auto link 899 auto rp enable 1383 backup startup configuration 2361 balance BGP BGP VPN instance view 954 balance IPv6 address family view 1221 bandwidth based sharing 929...

Page 77: ...view 215 check region configuration 597 checkzero 1161 checkzero 1309 chkconfig acseid off 2524 chkconfig acseid on 2525 cid display 2556 cid receive 2556 cid select mode 2712 cid send 2557 cid type 2...

Page 78: ...data send delay 902 databits 2453 data coding CT1 PRI interface view 218 data fill 2265 data flow format HWTACACS scheme view 1975 data flow format RADIUS scheme view 1951 data size 2266 debugging 237...

Page 79: ...n 631 destination 1749 destination 881 destination ip 2267 destination port 2267 detect 193 detect 2000 detect ais 204 dh 2154 dhcp enable 706 dhcp enable 729 dhcp relay address check 729 dhcp relay i...

Page 80: ...ble dampening parameter 1234 display bgp ipv6 routing table different origin as 1234 display bgp ipv6 routing table flap info 1235 display bgp ipv6 routing table label 1236 display bgp ipv6 routing ta...

Page 81: ...iagnostic information 2414 display dialer 331 display dlsw circuits 337 display dlsw information 338 display dlsw reachable cache 340 display dlsw remote 339 display dns domain 765 display dns dynamic...

Page 82: ...2294 display ip policy based route 810 display ip policy based route setup 811 display ip policy based route statistics 812 display ip relay route 941 display ip relay tunnel 941 display ip routing ta...

Page 83: ...ry 475 display link aggregation verbose 476 display llc2 341 display load sharing ip address 942 display local proxy arp 704 display local user 1935 display logbuffer 2428 display logbuffer summary 24...

Page 84: ...log 2023 display nat outbound 2024 display nat server 2025 display nat session 2025 display nat statistics 2026 display natpt address group 863 display natpt address mapping 863 display natpt aging ti...

Page 85: ...533 display proxy arp 704 display public key local 2173 display public key peer 2174 display qos car interface 1769 display qos carl 1770 display qos cbq interface 1825 display qos cq interface 1817...

Page 86: ...ce call history record 2732 display voice call info 2576 display voice cmc 2577 display voice default all 2579 display voice entity 2581 display voice fax 2680 display voice gateway 2691 display voice...

Page 87: ...enable log 1130 enable out of band resynchronization 1131 enable snmp trap updown 2335 enable traffic adjustment 1603 enable traffic adjustment advertise 1603 encap data enable 1371 encapsulation 298...

Page 88: ...rewall fragments inspect 1994 firewall ipv6 fragments inspect 1995 firewall packet filter 1996 firewall packet filter ipv6 1997 first rule 2629 fixdisk 2354 flag 155 flag 681 flash flood 1057 flow con...

Page 89: ...sending enable 697 gre checksum 1752 gre key 1753 group BGP BGP VPN instance view 980 group IPv6 address family view 1240 group b enable 2656 group member 178 gts 1793 gvrp 416 gvrp registration 417 g...

Page 90: ...2165 ike sa nat keepalive timer interval 2166 ike peer IPSec policy view IPSec policy template view 2132 ima ima group 117 ima clock 118 ima standard 119 ima test 119 impedance 2598 import 1840 impor...

Page 91: ...eout active 2299 ip netstream timeout inactive 2300 ip policy based route 815 ip pool 1938 ip redirects enable 798 ip route static 1217 ip route static default preference 1220 ip rpf route static 1334...

Page 92: ...select way 570 isdn caller number 570 isdn calling 571 isdn check called number 571 isdn check time 572 isdn crlength 573 isdn ignore connect ack 573 isdn ignore hlc 574 isdn ignore llc 575 isdn igno...

Page 93: ...x transmission 353 llc2 modulo 354 llc2 receive window 354 llc2 timer ack 355 llc2 timer ack delay 355 llc2 timer busy 356 llc2 timer detect 356 llc2 timer poll 357 llc2 timer reject 358 load bandwidt...

Page 94: ...mfr stateup respond addlink 404 mfr timer ack 405 mfr timer hello 406 mfr window size 406 min active links 121 mirroring group 497 mirroring group mirroring port 498 mirroring group monitor port 499 m...

Page 95: ...n user view 1630 mpls te resv style 1631 mpls te retry 1631 mpls te route pinning 1632 mpls te signal protocol 1633 mpls te tie breaking 1633 mpls te timer auto bandwidth 1634 mpls te timer fast rerou...

Page 96: ...r 2306 ntp service in interface disable 2307 ntp service max dynamic sessions 2308 ntp service multicast client 2308 ntp service multicast server 2309 ntp service refclock master 2309 ntp service reli...

Page 97: ...er connect interface 1373 peer default route advertise BGP BGP VPN instance view 989 peer default route advertise 1247 peer default route advertise vpn instance 1699 peer description BGP BGP VPN insta...

Page 98: ...GP BGP VPN instance view 1004 peer substitute as IPv6 address family view 1259 peer timer BGP BGP VPN instance view 1005 peer timer IPv6 address family view 1260 peer upe 1706 peer public key end 2179...

Page 99: ...aggregation 481 port isolate enable 653 port mapping 2006 power source 594 ppp account statistics enable 509 ppp authentication mode 510 ppp callback 334 ppp callback ntstring 334 ppp chap password 51...

Page 100: ...q 1893 pvp limit 309 pwd 2206 pwd 2358 pwd 2386 qos apply policy interface view 1804 qos apply policy layer 2 interface view or port group view 1805 qos car 1770 qos carl 1772 qos cq 1818 qos cql defa...

Page 101: ...d 1799 remote address 523 remote address 2169 remotehelp 2386 remote ip 1556 remote name 2170 remove 2207 remove 2260 rename 2207 rename 2358 renew 2664 require router alert IGMP view 1358 require rou...

Page 102: ...342 reset multicast ipv6 forwarding table 1441 reset multicast IPv6 routing table 1441 reset multicast routing table 1343 reset nat session 2039 reset natpt dynamic mappings 875 reset natpt statistics...

Page 103: ...bypass route 2282 route policy 1205 router id 1010 router id 1265 router id 1305 route tag 1713 routing table limit 1714 rr filter 1715 rsh 2081 rta bind 913 rta rtc server listen port 914 rta server...

Page 104: ...estart 2526 service acseid start 2527 service acseid status 2527 service acseid stop 2528 service cbr 310 service modem callback 495 service ubr 311 service vbr nrt 311 service vbr rt 312 service type...

Page 105: ...ew 1498 ssm policy PIM view 1425 standby bandwidth 2219 standby interface 2220 standby routing group 655 standby routing rule 655 standby threshold 2221 standby timer delay 2222 standby timer flow che...

Page 106: ...k 283 t1 set loopback 686 t1 show 284 t1 shutdown 285 t1 shutdown 686 t1 unframed 286 t1 unframed 687 tcp 918 tcp anti naptha enable 800 tcp ipv6 timer fin timeout 861 tcp ipv6 timer syn timeout 861 t...

Page 107: ...439 translate x25 440 transmit gain 2614 transmit priority 314 trip retransmit count 1183 trip retransmit timer 1184 trunk direction 2676 trunk id 2716 ts 2677 ttl 2285 ttl expiration 1563 ttl propag...

Page 108: ...n mode 2242 vrrp ipv6 vrid preempt mode 2242 vrrp ipv6 vrid priority 2243 vrrp ipv6 vrid timer advertise 2244 vrrp ipv6 vrid track 2245 vrrp ipv6 vrid virtual ip 2246 vrrp method 2229 vrrp ping enable...

Page 109: ...409 x25 timer hold 464 x25 timer idle 464 x25 timer tx0 465 x25 timer tx1 466 x25 timer tx2 466 x25 timer tx3 467 x25 vc per map 468 x25 vc range 468 x25 window size 469 x25 x121 address 470 x25 xot p...

Page 110: ......

Page 111: ...nd state information about interface ATM 2 0 Sysname display interface atm 2 0 Atm2 0 current state DOWN Line protocol current state DOWN Description Atm2 0 Interface The Maximum Transmit Unit is 1500...

Page 112: ...TM interface Description Use the reset atm interface command to clear the statistics on the PVCs created on an ATM interface or all the ATM interfaces Note that If you execute this command with an ATM...

Page 113: ...o restore the default By default long haul mode applies allowing of cable length mode adaptation In this case the long haul mode is adopted first If the cable is of short haul mode the system switches...

Page 114: ...face 5 0 to master Sysname system view Sysname interface atm 5 0 Sysname Atm5 0 clock master code Syntax In ATM E1 interface view code ami hdb3 In ATM T1 interface view code ami b8zs undo code View AT...

Page 115: ...le Set the maximum differential delay for the member links in IMA group 1 to 25 milliseconds Sysname system view Sysname interface atm 5 0 Sysname Atm5 0 ima ima group 1 Sysname Atm5 0 interface ima g...

Page 116: ..._UP Ima Link state IMA Link Number 1 First Link 0 Test Status Disabled Last 300 seconds input rate 0 00 bytes sec 0 00 packets sec Last 300 seconds output rate 0 00 bytes sec 0 00 packets sec Input 0...

Page 117: ...umber of ATM cells in an IMA frame Description Use the frame length command to configure the number of ATM cells in an IMA frame Use the undo frame length command to restore the default that is 128 AT...

Page 118: ...nfiguration In this mode all links in the IMA group share the same clock source which can be an external clock or the one extracted from a member link link number number Number of the E1 T1 link that...

Page 119: ...group interface Use the undo ima standard command to restore the default By default V1 1 standard is adopted Example Configure to adopt V1 1 standard Sysname system view Sysname interface atm 5 0 Sys...

Page 120: ...re bidirectional This command tests only the connectivity of a link in its transmit direction to the other links in the IMA group in their receive direction Example Send test mode 0xAB over link 0 in...

Page 121: ...1 T1 interface 5 0 Sysname system view Sysname interface atm 5 0 Sysname Atm5 0 loopback payload min active links Syntax min active links number undo min active links View IMA group interface view Par...

Page 122: ...rambling on the ATM E1 T1 interface This however does not affect cell headers Use the undo scramble command to disable payload scrambling By default payload scrambling is enabled on an ATM E1 T1 inter...

Page 123: ...to configure the cable length of the ATM T3 interface Use the undo cable command to restore the default By default short haul mode applies Example Set the cable length of ATM T3 interface 5 0 to long...

Page 124: ...ADM g751 plcp Sets the framing format of ATM E3 to G 751 physical layer convergence protocol G 751 PLCP g832 adm Sets the framing format of ATM E3 to G 832 ADM cbit adm Sets the framing format of ATM...

Page 125: ...Description Use the loopback command to configure the loopback mode on the ATM E3 T3 interface Use the undo loopback command to disable loopback By default loopback is disabled Example Enable external...

Page 126: ...126 CHAPTER 3 ATM E3 T3 INTERFACE CONFIGURATION COMMANDS Example Disable payload scrambling on ATM E3 T3 interface 5 0 Sysname system view Sysname interface atm 5 0 Sysname Atm5 0 undo scramble...

Page 127: ...E set its clock mode to master When the interface is operating as DTE set its clock mode to slave When the ATM interfaces on two routers are connected directly through a fiber optic cable set the cloc...

Page 128: ...e atm 5 0 Sysname Atm5 0 frame format sdh loopback Syntax loopback cell local remote undo loopback View ATM OC 3c interface view STM 1 interface view Parameter cell Enables internal cell loopback loca...

Page 129: ...on the ATM OC 3c STM 1 interface This however does not affect cell headers Use the undo scramble command to disable payload scrambling By default payload scrambling is enabled on the ATM OC 3c STM 1...

Page 130: ...130 CHAPTER 4 ATM OC 3C STM 1 INTERFACE CONFIGURATION COMMANDS...

Page 131: ...attempt to reach an agreement If the training succeeds a communication connection is set up between the two parties Contrary to activation deactivation tears down the communication connection between...

Page 132: ...ke Status 00 0002 0000 0000 0000 0000 0000 0000 0000 0000 0000 10 0000 0008 0000 0000 0000 0000 0000 0000 0008 0000 20 0000 0000 0002 0002 0004 0010 Local Handshake Status 00 0002 0001 0000 0000 0000...

Page 133: ...nce last activation CRC 0 LOSW Defect 0 ES 0 SES 0 UAS 0 TX EOC 0 RX EOC 0 Line A status Xcvr Op State Data Mode Last Fail Op State 0x00 Frame Sync in sync Line Rate Kbps 2312 Wire Type 2 SNR Margin d...

Page 134: ...us Xcvr Op State Data Mode Last Fail Op State 0x00 Frame Sync in sync Line Rate Kbps 2312 Wire Type 4 SNR Margin dB 13 30 Loop Attenuation dB 0 00 RecvGain dB 5 86 TxPower dBm 9 50 Power Backoff enabl...

Page 135: ...SES Severely error second count of severe errors per second UAS Unavailable second count of one second intervals for which the G SHDSL line is unavailable TX EOC Count of transmitted EOC cells RX EOC...

Page 136: ...Version 0 0 CPLD Version 0 0 Driver Version 2 0 Hardware Version 1 0 ITU G991 2 ANNEX A Supported ITU G991 2 ANNEX B Supported Rmt Provider Code Remote code of the chip provider Rmt Vendor Data Remot...

Page 137: ...e your network is located When ATU C and ATU R use different standards G SHDSL cannot set up connection Example Configure G SHDSL interface ATM 5 0 to support annex A Sysname system view Sysname inter...

Page 138: ...wer per unit density of frequency spectral as a function of the frequency PSD describes how the power of a time series is distributed with frequency Description Use the shdsl psd command to set PSD of...

Page 139: ...G SHDSL interface is set to auto negotiation mode the single pair interface rate of four wire G SHDSL interface is set to 2 312 kbps four wire G SHDSL interface rate is 4 624 kbps Example Configure AT...

Page 140: ...n four wire enhanced mode the local end uses the four wire standard mode for negotiation When four wire auto switch mode is adopted the remote end can be set to operate in four wire enhanced mode or f...

Page 141: ...141 Sysname system view Sysname interface atm 5 0 Sysname Atm5 0 shdsl wire 4 auto enhanced...

Page 142: ...142 CHAPTER 5 G SHDSL INTERFACE CONFIGURATION COMMANDS...

Page 143: ...the training succeeds a communication connection is set up between the two parties for service transmission Contrary to activation deactivation tears down the communication connection between the two...

Page 144: ...command to restore the default that is auto negotiation Note that ADSL I module does not support G Lite G992 2 standard and T1 413 standard To bring the standard configured by the adsl standard comman...

Page 145: ...is argument The maximum slot number differs with device models subslot subslot no list List of sub slot numbers representing multiple sub cards The argument subslot no list appears in the form of subs...

Page 146: ...e Y N y Board 2 upgrading BOOTROM please wait Sysname system view Sysname interface atm 2 0 Sysname Atm2 0 undo shutdown display dsl configuration Syntax display dsl configuration interface atm interf...

Page 147: ...erface to view the status information about Description Use the display dsl status command to display the status information of a specified DSL interface Example Display the status information of the...

Page 148: ...rror concerning signal Loss Of Power indicating an error concerning power supply Loss Of Signal Quality indicating an error concerning signal quality Unknown indicating an unknown error Training Statu...

Page 149: ...ReAdsl2 ITU G992 5 Adsl2p Table 6 Description on the fields of the display adsl version command Field Description Adsl board chipset and version info The components of the interface board and the ver...

Page 150: ...150 CHAPTER 6 ADSL INTERFACE CONFIGURATION COMMANDS...

Page 151: ...ternal clock signal Slave which uses line clock signal Similar to the DTE DCE model of synchronous serial interfaces POS interfaces need to choose a clock mode When a POS interface on the router is di...

Page 152: ...Line protocol current state UP Description Pos0 0 0 Interface The Maximum Transmit Unit is 1500 Hold timer is 10 sec Internet Address is 13 13 13 14 8 Primary Link layer protocol is PPP LCP opened IP...

Page 153: ...e OOF LOF and LOS Line layer alarms which could be AIS and RDI Path layer alarms which could be LOP AIS and RDI Received and transmitted C2 bytes C2 is the signal flag byte Received and transmitted J0...

Page 154: ...13 13 13 8 Primary Broadcast address 13 255 255 255 The Maximum Transmit Unit 1500 bytes ip fast forwarding incoming packets state is Enabled ip fast forwarding outgoing packets state is Enabled input...

Page 155: ...er order path overhead byte used to indicate the multiplex structure of virtual container VC frames and property of payload It is a hexadecimal number in the range 0 to FF j0 flag value Regeneration s...

Page 156: ...ings of a sending POS interface and the receiving POS interface causes alarms Related command display interface pos Example Set the SDH overhead byte J0 of POS1 0 interface Sysname system view Sysname...

Page 157: ...col of the interface ppp Specifies PPP as the link layer protocol of the interface Description Use the link protocol command to set the link layer protocol of the interface By default PPP is used Exam...

Page 158: ...f the POS interface Use the undo mtu command to restore the default The MTU setting of the POS interface can affect the assembly and fragmentation of IP packets on it In QoS the length of queues is li...

Page 159: ...face view Parameter value Integer in the range 3 to 9 Description Use the threshold command to set the SD signal degrade threshold or SF signal fail threshold for a POS interface Use the undo threshol...

Page 160: ...160 CHAPTER 7 POS INTERFACE CONFIGURATION COMMANDS Example Set the SD threshold to 10e 4 for POS 1 0 Sysname system view Sysname interface pos 1 0 Sysname Pos1 0 threshold sd 4...

Page 161: ...port is enabled the other will be automatically disabled By default the electrical port is enabled Related command display port combo and shutdown Example Specify to enable the electrical port of Giga...

Page 162: ...n begin Displays all the configuration information in the line that contains the specified string and all the lines after this line include Displays information that contains the specified string excl...

Page 163: ...nterface Link Speed Duplex Link type PVID Eth4 0 DOWN auto auto access 1 Eth4 1 DOWN auto auto access 1 Eth4 2 DOWN auto auto access 1 Eth4 3 DOWN auto auto access 1 Eth4 4 DOWN auto auto access 1 Eth...

Page 164: ...fied interface and related information If neither interface type nor interface number is specified all interface information will be displayed Table 9 Description on the fields of the display brief in...

Page 165: ...put rate 0 00 bytes sec 0 bits sec 0 00 packets sec Last 300 seconds output rate 0 00 bytes sec 0 bits sec 0 00 packets sec Input 0 packets 0 bytes 0 buffers 0 broadcasts 0 multicasts 0 pauses 0 error...

Page 166: ...input errors 0 runts 0 giants 0 throttles 0 CRC 0 frame overruns 0 aborts ignored parity errors Output total 1395522 packets 183608303 bytes 13 broadcasts 1273860 multicasts 0 pauses Output normal 139...

Page 167: ...link type Interface link type which could be access trunk and hybrid Tagged VLAN ID Identify the VLANs that need Tag markers Untagged VLAN ID Identify the VLANs that do not need Tag markers Last 300 s...

Page 168: ...the duplex mode for an Ethernet interface to the default By default the duplex mode for an Ethernet interface is auto Related command speed Example Configure the interface Ethernet 1 0 to work in full...

Page 169: ...0 flow control interface Syntax interface interface type interface number View System view Parameter interface type interface number Interface type and interface number n Interface is identified by s...

Page 170: ...ce loopback testing will work in a full duplex mode The interface will return to its original state upon completion of the loopback testing Example Configure to enable loopback testing on Ethernet 1 0...

Page 171: ...terface Ethernet1 0 port link mode bridge return n Use the display this command to display the current configurations reset counters interface Syntax reset counters interface interface type interface...

Page 172: ...o shut down the relative interface to make the modification work Example Shut down the interface Ethernet 1 0 Sysname system view Sysname interface ethernet 1 0 Sysname Ethernet1 0 shutdown Turn on th...

Page 173: ...peer Ethernet interfaces Note that the following The Combo port does not support the speed command The speed 1000 command is only applicable to Gigabit Ethernet interface Related command duplex Examp...

Page 174: ...174 CHAPTER 8 GENERAL ETHERNET INTERFACE CONFIGURATION COMMANDS...

Page 175: ...the default broadcast storm suppression ratio By default all broadcast traffic is allowed to go through an Ethernet interface that is broadcast traffic is not suppressed If you execute this command i...

Page 176: ...isplay port Syntax display port hybrid trunk View Any view Parameter hybrid Displays the current Hybrid port s trunk Displays the current Trunk port s Description Use the display port command to displ...

Page 177: ...ual port group including its name and the Ethernet interfaces included If you provide the all keyword this command displays the details of all the manual port groups including their names and the Ethe...

Page 178: ...scription Use the flow interval command to configure the time interval for collecting interface statistics Use the undo flow interval command to restore the default interval Example Set the time inter...

Page 179: ...control enable command to restore the default By default loopback detection for a Trunk port or Hybrid port is disabled When the loopback detection is enabled if a port has been detected with loopbac...

Page 180: ...ck a Trunk message will be sent to the terminal They will be shutdown if the loopback testing function is enabled on them In addition a Trap message will be sent to the terminal and the corresponding...

Page 181: ...face view Parameter None Description Use the loopback detection per vlan enable command to enable loopback detection in all VLANs with Trunk ports or Hybrid ports Use the undo loopback detection per v...

Page 182: ...mbo port does not support this command Example Configure the interface Ethernet 1 0 to use cross over cable Sysname system view Sysname interface ethernet 1 0 Sysname Ethernet1 0 mdi across multicast...

Page 183: ...owed on Ethernet 1 0 to 5952 PPS Sysname system view Sysname interface ethernet 1 0 Sysname GigabitEthernet1 0 multicast suppression pps 5952 port group Syntax port group manual port group name aggreg...

Page 184: ...unicast suppression ratio By default all unicast traffic is allowed to go through an Ethernet interface that is unicast traffic is not suppressed If you execute this command in Ethernet interface view...

Page 185: ...tal cable length When the cable is not functioning properly the cable length in the test result represents the length from the current interface to the failed position n The optical interface of a Com...

Page 186: ...186 CHAPTER 9 CONFIGURATION COMMANDS FOR ETHERNET INTERFACES IN BRIDGE MODE...

Page 187: ...TU value Use the undo mtu command to restore MTU value n Limited to the QoS queue length for example the default length of an FIFO queue is 75 too small an MTU will result in too many fragments which...

Page 188: ...t suppression time By default Layer 3 Ethernet link layer state change suppression time is set to 10 seconds Peer Ethernet interfaces have the same suppression time If both sides set their suppression...

Page 189: ...achine interaction protocol Protocol mode In this mode the interface uses configured link layer protocol parameters to set up link with the remote end after its physical link is set up Description Use...

Page 190: ...us serial interfaces depends on the applied physical electric specifications For V 24 DTE DCE the baud rate available ranges from 1 200 bps to 64 000 bps For V 35 DCE DCE X 21 DTE DCE EIA TIA 449 DTE...

Page 191: ...of a DTE device can be either the transmitting or receiving clock of the DCE device so is the transmitting clock Therefore four clock options are available for a DTE device See Figure 1 Figure 1 Sele...

Page 192: ...ce view Parameter area name Area name which can be australia austria belgium brazil bulgaria canada china czechoslovakia denmark finland france germany greece hongkong hungary india ireland israel ita...

Page 193: ...default By default 16 bit CRC is adopted These two commands are not available to sub serial interfaces and synchronous asynchronous serial interfaces operating as asynchronous interfaces Example Confi...

Page 194: ...detects the DSR signal in addition to the external cable The interface is regarded up only when the detected DSR signal is valid Otherwise it is regarded down When determining whether a synchronous se...

Page 195: ...idle mark undo idle mark View Synchronous serial interface view Parameter None Description Use the idle mark command to set the line idle code of the synchronous serial interface to 0xFF Use the undo...

Page 196: ...iew Sysname interface serial 2 0 Sysname Serial1 0 invert receive clock invert transmit clock Syntax invert transmit clock undo invert transmit clock View Serial interface view Parameter None Descript...

Page 197: ...X interface view AM interface view USB interface view Parameter size Maximum transmission unit MTU to be set for a serial interface in the range 128 to 1 500 in bytes Description Use the mtu command t...

Page 198: ...e By default synchronous asynchronous serial interfaces are operating in synchronous mode Example Set synchronous asynchronous serial interface 2 0 to operate in asynchronous mode Sysname system view...

Page 199: ...mmand to restore the default By default RTS signal reverse is disabled This command is used in hardware flow control where the remote is not allowed to send data when the local end is doing that Examp...

Page 200: ...as DTE the serial interface determines its baud rate through negotiation with the DCE side The virtualbaudrate command however allows you to configure DTE side baudrate manually but the configured va...

Page 201: ...rface E1 2 0 to short Sysname system view Sysname controller e1 2 0 Sysname E1 2 0 cable short channel set CE1 PRI interface view Syntax channel set set number timeslot list list undo channel set set...

Page 202: ...and set number is the number of the channel set Only one timeslot bundling mode can be supported on a CE1 PRI interface at a time In other words this command cannot be used together with the pri set...

Page 203: ...bipolar 3 HDB3 line code format Description Use the code command to set the line code format for the CE1 PRI interface Use the undo code command to restore the default that is HDB3 Keep the line code...

Page 204: ...that is 16 bit CRC Example Apply 32 bit CRC to a serial interface formed on interface CE1 interface 2 0 in unchannelized mode Sysname system view Sysname controller e1 2 0 Sysname E1 2 0 using e1 Sysn...

Page 205: ...framed Cable type is 75 Ohm unbalanced Frame format is no crc4 Line code is hdb3 Source clock is slave Idle code is 7e Itf type is 7e Itf number is 4 Loop back is not set Alarm State Receiver alarm st...

Page 206: ...600 seconds and the error packet ratio threshold is 20 The setting of renew timer must be at least four times that of the error packet detect timer If the total number of the packets received during d...

Page 207: ...nd to disable this function By default error packets diffusion restraint is enabled n The support of these two commands varies with device model These two commands apply to CT1 PRI interfaces and CE1...

Page 208: ...Description Use the frame format command to set the framing format on the CE1 interface Use the undo frame format command to restore the default that is no CRC4 A CE1 PRI interface in CE1 mode suppor...

Page 209: ...0xFF by specifying the ff keyword Description Use the itf command to set the type of and the number of interframe filling tags on the CE1 PRI interface Two types of interframe filling tag are availab...

Page 210: ...RI interface to form a serial interface and encapsulate it with PPP After you enable loopback on this serial interface it is normal that the state of the link layer protocol is reported down Example S...

Page 211: ...e CE1 PRI interface where the serial interface is created Because a channel set and a PRI set cannot coexist on a CE1 PRI interface your PRI set creation attempt will fail if the channel set command i...

Page 212: ...work in either E1 mode non channelized mode or CE1 PRI mode channelized mode In E1 mode the interface equals a 2 Mbps interface without timeslot division Its logical features are the same like those o...

Page 213: ...the loss of frame align LFA alarm threshold which can be level 1 level 2 level 3 and level 4 The level 1 keyword specifies to generate an LFA alarm when two of four frame alignment bits are lost The l...

Page 214: ...ERT pattern which could be 2 15 or 2 20 2 15 Two to the fifteenth power length of transmitted BERT pattern in bits 2 20 Two to the twentieth power length of transmitted BERT pattern in bits time minut...

Page 215: ...655 feet The options for this parameter include 133ft 266ft 399ft 533ft and 655ft The length parameter is selected depending on the actual transmission distance Description Use the cable command to se...

Page 216: ...1 PRI interface is physically divided into 24 timeslots numbered 1 through 24 In actual applications all the timeslots can be bundled into multiple channel sets For each channel set the system automat...

Page 217: ...line code format b8zs Adopts bipolar with 8 zero substitution B8ZS line code format Description Use the code command to set the line code format for the CT1 PRI interface Use the undo code command to...

Page 218: ...CRC Example Apply 32 bit CRC to a serial interface formed on interface CT1 interface 2 0 Sysname system view Sysname controller t1 2 0 Sysname T1 2 0 channel set 1 timeslot list 2 6 Sysname T1 2 0 qu...

Page 219: ...stem view Sysname controller t1 2 0 Sysname T1 2 0 data coding inverted display controller t1 Syntax display controller t1 interface number View Any view Parameter interface number Interface number In...

Page 220: ...lations 0 Ais Alarm Secs 901 Los Alarm Secs 22 Slip Secs 901 Fr Loss Secs 0 Line Err Secs 0 Degraded Mins 0 Errored Secs 0 Bursty Err Secs 0 Severely Err Secs 901 Unavail Secs Data in Interval 2 0 Lin...

Page 221: ...mber of detected synchronizations Time 0 minute s Time past 0 minute s The duration of the BERT test and the time that has elapsed Bit Errors since test started Number of bit errors received since the...

Page 222: ...atistical items are the same as those provided by the statistics spanning the current interval Data in Interval 2 0 Line Code Violations 0 Path Code Violations 0 Ais Alarm Secs 900 Los Alarm Secs 23 S...

Page 223: ...CT1 PRI interfaces and CE1 PRI interfaces only Example Set the error packet detect timer to 100 seconds the renew timer to 2400 seconds and the error packet ratio threshold to 15 Sysname system view S...

Page 224: ...model This command applies to CT1 PRI interfaces and CE1 PRI interfaces only Example Bring up channel Serial 2 0 0 assuming that the channel is shut down by the error packet diffusion restraint funct...

Page 225: ...tiple frames can share the same FSC and signaling information so that more significant bits are available for transmitting user data The use of ESF allows you to test the system without affecting the...

Page 226: ...ff keyword On CT1 PRI interfaces the default interframe filling tag is 0x7E Description Use the itf command to set the type and the number of interframe filling tags on the CT1 PRI interface Two types...

Page 227: ...PP After you enable loopback on this serial interface it is normal that the state of the link layer protocol is reported down Example Enabled remote loopback on interface T1 2 0 Sysname system view Sy...

Page 228: ...here number is the number of the CT1 PRI interface on which the serial interface is created Because a channel set and a PRI set cannot coexist on a CT1 PRI interface your PRI set creation attempt will...

Page 229: ...and llb down Sends in band LLB deactivation request code compliant with the ANSI or AT T implementation to remove loopback inband llb up Sends in band line loopback LLB activation request code complia...

Page 230: ...OMMANDS The sending of remote loopback control code lasts five minutes without affecting the operation of other interfaces Example Send in band LLB activation request code Sysname system view Sysname...

Page 231: ...tem view Sysname interface serial 2 0 Sysname Serial2 0 crc 32 display fe1 Syntax display fe1 serial interface number View Any view Parameter serial interface number Specifies a serial interface If no...

Page 232: ...ports long haul cables short Supports short haul cables Description Use the cable command to set the cable length for an E1 F interface Use the undo cable command to restore the default By default the...

Page 233: ...ource on E1 F interface Serial 2 0 Sysname system view Sysname interface serial 2 0 Sysname Serial2 0 fe1 clock master fe1 code Syntax fe1 code ami hdb3 undo fe1 code View E1 F interface view Paramete...

Page 234: ...fe1 frame format View E1 F interface view Parameter crc4 Sets framing format to CRC4 no crc4 Sets framing format to no CRC4 Description Use the fe1 frame format command to configure the framing forma...

Page 235: ...w Sysname interface serial 2 0 Sysname Serial2 0 fe1 loopback local fe1 timeslot list Syntax fe1 timeslot list list undo fe1 timeslot list View E1 F interface view Parameter list Specifies timeslots t...

Page 236: ...8 on E1 F interface Serial 2 0 Sysname system view Sysname interface serial 2 0 Sysname Serial2 0 fe1 timeslot list 1 2 5 10 15 18 fe1 idlecode Syntax fe1 idlecode 7e ff undo fe1 idlecode View E1 F in...

Page 237: ...of interframe filling tags is 4 Interframe filling tags are sent when no service data is sent on the timeslots bundled into the logical channel on the E1 F interface Example Set the type of interframe...

Page 238: ...gically equivalent to a synchronous serial interface When it works in framed mode it is physically divided into 32 timeslots numbered 0 through 31 where timeslot 0 is used for synchronization Related...

Page 239: ...me system view Sysname interface serial 2 0 Sysname Serial2 0 crc 32 display ft1 Syntax display ft1 serial interface number View Any view Parameter serial interface number Specifies a serial interface...

Page 240: ...l Statistics Last clearing of counters Never Data in current interval 285 seconds elapsed 0 Line Code Violations 0 Path Code Violations 0 Ais Alarm Secs 286 Los Alarm Secs 7 Slip Secs 286 Fr Loss Secs...

Page 241: ...lb up 0 times fdl ansi plb down 0 times History of loopback code sending to the far end including the number of transmissions for each type of code and the type of the last sent code See ft1 sendloopc...

Page 242: ...Alarm Secs 901 Los Alarm Secs 22 Slip Secs 901 Fr Loss Secs 0 Line Err Secs 0 Degraded Mins 0 Errored Secs 0 Bursty Err Secs 0 Severely Err Secs 901 Unavail Secs Statistics spanning the first interva...

Page 243: ...here on the line for example from the far end interface by placing the interface in a far end loopback You may view the state and result of the BERT test with the display ft1 serial command Example Ru...

Page 244: ...re the clock source for the T1 F interface Use the undo ft1 clock command to restore the default that is line clock When the T1 F interface is working as DCE choose the internal clock for it When it i...

Page 245: ...ing normal command to disable user data inversion for a T1 F interface Use the ft1 data coding inverted command to enable user data inversion for a T1 F interface Use the undo ft1 data coding command...

Page 246: ...overhead channel within the ESF format for transmitting performance statistics or loopback code You can however change the setting depending on the setting at the far end Example Implement ANSI T1 40...

Page 247: ...to 0x7E ff Sets the line idle code to 0xFF Description Use the ft1 idlecode command to set the line idle code on the T1 F interface Two types of line idle code are available 0x7E and 0xFF Use the und...

Page 248: ...e ff command if both the ft1 code ami command and the ft1 data coding inverted command are configured so that the T1 F interface can function normally Example Set the interframe filling tag to 0xFF on...

Page 249: ...e bundled into an N 56 kbps bundle If 64k the default applies timeslots are bundled into an N 64 kbps bundle Description Use the ft1 timeslot list command to bundle timeslots on a T1 F interface Use t...

Page 250: ...rd specifies to generate an LFA alarm when two of five frame alignment bits are lost The level 3 keyword specifies to generate an LFA alarm when two of six frame alignment bits are lost The level 4 ke...

Page 251: ...k fdl ansi plb up Sends ANSI compliant payload loopback PLB activation request code in the FDL to start remote loopback fdl att plb down Sends AT T complaint PLB deactivation request code in the FDL t...

Page 252: ...dwidth slots 1 through 24 In ESF framing both LLB code and PLB code are sent received in the FDL in ESF frames You can use this command only when the far end CT1 PRI interface can automatically detect...

Page 253: ...amed Sets the overhead bits of the padding frames for BERT test Description Use the bert command to enable BERT test Use the undo bert command to disable BERT test Multiple BERT test modes exist as de...

Page 254: ...o restore the default that is line clock The clock source is selected depending on the connected remote device If connected to a transmission device the local end uses the line clock If connected to a...

Page 255: ...amed using CT3 interface view Example Apply 32 bit CRC to a serial interface formed on interface E3 2 0 in unchannelized mode Sysname system view Sysname controller e3 2 0 Sysname E3 2 0 using e3 Sysn...

Page 256: ...not set E3 0 CE1 2 is up Frame format NO CRC4 clock slave loopback local E3 0 CE1 3 is up Frame format NO CRC4 clock slave loopback remote E3 0 CE1 4 is up Frame format CRC4 clock slave loopback not...

Page 257: ...g frames for BERT test Description Use the e1 bert command to enable BERT test for an E1 channel created on a CE3 interface Use the undo e1 bert command to disable BERT test Multiple BERT test modes e...

Page 258: ...nd to bundle timeslots on an E1 line Use the undo e1 channel set command to remove a timeslot bundle By default no timeslots are bundled into channel sets A CE3 interface can be channelized into 64 kb...

Page 259: ...terface E3 2 0 Sysname system view Sysname controller e3 2 0 Sysname E3 2 0 e1 1 set clock slave e1 set frame format Syntax e1 line number set frame format crc4 no crc4 undo e1 line number set frame f...

Page 260: ...an E1 line in a loopback mode on the E3 interface Use the undo e1 set loopback command to restore the default By default loopback is disabled on E1 lines If an E1 line encapsulated with PPP is in loo...

Page 261: ...the range 1 to 16 Description Use the e1 unframed command to set an E1 line on the CE3 interface to work in unframed mode E1 mode Use the undo e1 unframed command to restore the default By default an...

Page 262: ...ing varies with vendors You can use the fe3 command to make the device to be compatible with devices of other vendors operating in specific FE3 DSU modes Note that These two commands are only applicab...

Page 263: ...erface Loopback is intended for test use Disable it otherwise If a CE3 interface encapsulated with PPP is placed in a loopback it is normal that the state of the link layer protocol is reported down E...

Page 264: ...ed mode Description Use the using command to configure the operating mode of the CE3 interface Use the undo using command to restore the default that is channelized mode Only when the CE3 interface is...

Page 265: ...ignal detection sending setting At the startup of your device periodical alarm signal detection is enabled on the CT3 interface When detecting LOS LOF or AIS signals the interface sends RAI signals to...

Page 266: ...his pattern the presence of 14 consecutive zeros is not allowed time number Sets the duration of a BERT test in the range 1 to 1440 minutes unframed Sets the test pattern to cover the overhead bits of...

Page 267: ...le Set the cable length to 50 feet 15 2 meters on interface T3 2 0 Sysname system view Sysname interface t3 2 0 Sysname T3 2 0 cable 50 clock CT3 interface view Syntax clock master slave undo clock Vi...

Page 268: ...er t3 Example Enter the view of interface T3 2 0 Sysname system view Sysname controller t3 2 0 Sysname T3 2 0 crc Syntax crc 16 32 none undo crc View Synchronous serial interface view Parameter 16 Ado...

Page 269: ...conjunction with the t3 keyword it specifies a CT3 interface Description Use the display controller t3 command to display state information about one specified or all CT3 interfaces In addition to th...

Page 270: ...sing inband signal last sent BERT state stopped not completed Test pattern 2 11 Status Not Sync Sync Detected 0 Time 0 minute s Time past 0 minute s Bit errors since test started 0 bits Bits received...

Page 271: ...tivate Periodical detection is enabled no code received now Periodical detection of FEAC is enabled This is the default applied at the startup of the router No FEAC signal is received now DS3 Line Loo...

Page 272: ...mation about the T1 line Framing format ESF or SF Clock source slave for the line clock and master for the internal clock Loopback Local remote payload or not set FDL Performance Report is disabled Tr...

Page 273: ...remove the current FEAC settings FEAC is a channel formed by using the third C bit in the first subframe in C bit framing It is used to transmit alarm state signals for line test purpose or to transm...

Page 274: ...2 0 Sysname T3 2 0 feac generate loopback ds3 line frame format CT3 interface view Syntax frame format c bit m23 undo frame format View CT3 interface view Parameter c bit Sets the framing format to C...

Page 275: ...onfigure a CT3 interface to operate in the FT3 mode and set the DSU mode or the subrate Use the undo ft3 command to restore the default By default DSU mode 0 the Digital Link mode is adopted and the s...

Page 276: ...configure the loopback mode for a CT3 interface Use the undo loopback command to disable loopback By default loopback is disabled on CT3 interfaces Loopback is intended for test use Disable it otherw...

Page 277: ...mber a string of 1 to 38 characters The default generator number is line generate Sends specified information with MDL messages which can be path idle signal and or test signal regularly Description U...

Page 278: ...nd to enable the specified T1 line on the CT3 interface to detect send alarm signals Use the undo t1 alarm command to remove the alarm signal detection sending setting At the startup of the router per...

Page 279: ...ieth power length of the transmitted BERT pattern in bits 2 23 Two to the twenty third power length of the transmitted BERT pattern in bits qrss Two to the twentieth power length of the transmitted BE...

Page 280: ...es from 0 to 23 timeslot list list Specifies timeslots to be bundled The list argument is timeslot numbers in the range of 1 to 24 You may specify a single timeslot by specifying a number a range of t...

Page 281: ...inband line up Sends in band LLB activation request code compliant with the ANSI and AT T implementation to start remote loopback Description Use the t1 sendloopcode command to set the loopback mode...

Page 282: ...undo t1 set clock command to restore the default that is line clock When a CT3 interface is working in channelized mode its T1 lines may use separate clocks Example Use the internal clock as the cloc...

Page 283: ...ck mode remote Sets the T1 line in external loopback mode remote Sets the T1 line in payload loopback mode Description Use the t1 set loopback command to set the loopback mode of a T1 line on the T3 i...

Page 284: ...riodical performance report PPR statistics or loopback code According to ANSI T1 403 the format of PPR is LAPD and the format of loopback code is BOP The t1 set fdl command only starts PPR transmissio...

Page 285: ...state or mode local remote payload or not set FDL Performance Report is disabled Transmission of PPR in the FDL is disabled You may enable that with the t1 set fdl ansi command Transmitter is sending...

Page 286: ...0 t1 1 shutdown t1 unframed Syntax t1 line number unframed undo t1 line number unframed View CT3 interface view Parameter line number T1 line number in the range 1 to 28 Description Use the t1 unframe...

Page 287: ...undo using command to restore the default that is channelized mode You can configure T1 lines on CT3 interfaces operating in channelized mode only When a CT3 interface operates in unchannelized mode...

Page 288: ...288 CHAPTER 17 FUNDAMENTAL CT3 INTERFACE CONFIGURATION COMMANDS...

Page 289: ...th channels on the ISDN BRI interface in external loopback This can send data from a line back to the line Use the undo loopback command to restore the default By default loopback is disabled on ISDN...

Page 290: ...290 CHAPTER 18 ISDN BRI INTERFACE CONFIGURATION COMMANDS...

Page 291: ...up of predefined parameters that can be used for ATM interface or PVC Related command atm class Example Create an ATM class named main and enter ATM class view Sysname system view Sysname atm class ma...

Page 292: ...n otherwise goes up when the physical interface is up and a PVC is configured on the sub interface Use the undo atm link check command to restore the default By default the protocol of the ATM P2P sub...

Page 293: ...o adopt the signal of the internal transmission clock Sysname system view Sysname interface atm 1 0 Sysname Atm1 0 clock master display atm class Syntax display atm class atm class name View Any view...

Page 294: ...VCs 1024 PVCs 5 MAPs 1 input pkts 11603 input bytes 426476 input pkt errors 37092 output pkts 14053 output bytes 519106 output pkt errors 0 Main interface Information PVCs 4 MAPs 1 input pkts 11603 i...

Page 295: ...ew the map information on an ATM interface Note that Without an interface specified the system displays the map information for all ATM interfaces Without specifying the PVC name or the VPI VCI value...

Page 296: ...ge refer to Table 28 Description Use the display atm pvc group command to view the information about PVC Group Note that If no interface is specified the system displays PVC Group information on all A...

Page 297: ...mmand to view the information about PVC Note that Without an interface specified the system displays PVC information on all ATM interfaces Without a PVC name or a VPI VCI value pair specified the syst...

Page 298: ...encapsulation supports InARP If InARP is enabled you need to disable it before change AAL5 encapsulation to aal5mux or aal5nlpid An ATM PVC can carry multiple protocols simultaneously but certain typ...

Page 299: ...is p2mp n Two types of connections are available on ATM sub interface p2mp and p2p In p2mp connection you can create multiple PVCs on the sub interface In p2p connection you can create just one PVC on...

Page 300: ...mitted over the primary PVC the one used when the PVC group is created in the PVC group If this command is configured and the default keyword is used which means the current PVC is set as the default...

Page 301: ...VE interface Sysname Virtual Ethernet1 ip address 10 1 1 1 255 255 0 0 Sysname Virtual Ethernet1 quit Create PVC 1 102 on the ATM interface Atm2 0 Sysname interface atm 2 0 Sysname Atm2 0 pvc 1 102 E...

Page 302: ...ackets must be sent for example to allow PIM multicast to create neighbor relationship with the router connected using the ATM interface Description Use the map ip command to create IPoA mapping for P...

Page 303: ...e interface atm 1 0 Sysname Atm1 0 pvc 1 101 Create a PPPoA map using the VT interface created Sysname atm pvc Atm1 0 1 101 map ppp virtual template 10 mtu Syntax mtu mtu number undo mtu View Interfac...

Page 304: ...alarm cells received reaches the number specified by this argument The value range of this argument varies with device model Description Use the oam ais rdi command to modify the parameters related to...

Page 305: ...is 5 retry frequency Interval in seconds to send OAM F5 Loopback cell in retransmission detection before PVC status changes This argument ranges from 1 to 1 000 The system default is 1 Description Use...

Page 306: ...secutively in the range 1 to 1 000 The system default is 5 timeout OAM response timeout period in seconds in the range 1 to 30 The system default is 2 Description Use the oamping interface command to...

Page 307: ...PVC view on ATM interface or to add the specified PVC into PVC Group Use the undo pvc command to delete the specified PVC By default no PVC is created If you specified the pvc name argument when crea...

Page 308: ...pe of ATM interface on page 307 Description Use the pvc group command to create a PVC group or enter PVC group view Use the undo pvc group command to delete the specified PVC Group In creating a PVC G...

Page 309: ...nterface view Example Configure Atm 1 0 interface to support up to 1 024 PVCs Sysname system view Sysname interface atm 1 0 Sysname Atm1 0 pvc max number 1024 pvp limit Syntax pvp limit vpi output scr...

Page 310: ...000 and the default is 500 s This argument cannot be configured in ATM Class view Description Use the service cbr command to specify PVC service type as constant bit rate CBR By default the service ty...

Page 311: ...y the service type of PVC as unspecified bit rate UBR and specify the related rate parameters By default the service type is UBR after creating a PVC You can use this command as well as the service vb...

Page 312: ...verwrites the existing one Related command service ubr service vbr rt and service cbr Example Create a PVC named aa with the VPI VCI value of 1 101 Sysname system view Sysname interface atm 1 0 Sysnam...

Page 313: ...med aa with the VPI VCI value of 1 101 Sysname system view Sysname interface atm 1 0 Sysname Atm1 0 pvc aa 1 101 Specify the service type of the PVC as VBR RT and set the peak cell rate of ATM to 100...

Page 314: ...on priority for an ATM PVC associated with the UBR VBR T or VBR NRT service At the time of bandwidth allocation the PVCs with higher priorities take precedence over those with lower priorities Use the...

Page 315: ...the undo dialer bundle command to remove the association By default dialer interfaces are not associated with any dialer bundle in RS DCC This command applies only to dialer interfaces In addition a d...

Page 316: ...er bundle member 1 priority 50 Sysname Bri1 0 dialer bundle member 2 priority 50 dialer callback center Syntax dialer callback center user dial number undo dialer callback center View Dial interface p...

Page 317: ...me system view Sysname local user usera Sysname luser usera password simple usera Sysname luser usera service type ppp Sysname luser usera service type ppp callback number 8810048 Sysname luser usera...

Page 318: ...o dialer circular group View Dial interface physical view Parameter number Number of dialer circular group same as the one defined in the interface dialer command It ranges from 0 to 1023 Description...

Page 319: ...enable circular View Dial interface physical or dialer view Parameter None Description Use the dialer enable circular command to enable circular dial control center C DCC Use the undo dialer enable ci...

Page 320: ...Use the undo dialer flow interval command to restore the default By default the traffic statistics interval for DCC is 20 seconds This command is only useful for traffic triggered dial in DCC For exam...

Page 321: ...r number Syntax dialer number dial number undo dialer number View Dial interface physical or dialer view Parameter dial number Dial string for calling a remote end a string of 1 to 30 characters Descr...

Page 322: ...Use the undo dialer priority command to restore the default By default the priority of a physical interface in its dialer circular group is 1 This command sets the order in which the available physic...

Page 323: ...er protocol Network protocol At present it can be ip only next hop address IP address of dialed destination mask network mask length Optional mask length of the IP address of the dialed destination in...

Page 324: ...ust be configured You may configure multiple dialer routes on a dial interface or for a destination address for the backup purpose n If the dialer group command is not configured DCC will not dial Exa...

Page 325: ...bution on DCC links On the contrary when the percentage of the traffic on N which is an integer greater than 2 links to the bandwidth of N 1 links decreases under the defined traffic threshold the sys...

Page 326: ...dialer timer autodial 60 dialer timer compete Syntax dialer timer compete seconds undo dialer timer compete View Dial interface physical or dialer view Parameter seconds Idle interval when contention...

Page 327: ...enough time for a server to call back the interval between two calls on the client need to be at least 10 seconds longer than that of the server It is recommended that the interval on the server be se...

Page 328: ...r call setup This argument ranges from 0 to 65 535 in seconds Description Use the dialer timer wait carrier command to set the wait carrier timer Use the undo dialer timer wait carrier command to rest...

Page 329: ...C DCC configurations on the interface Performing the undo dialer user command on a dialer interface can clear all configurations on it Related command ppp pap local user on page 522 and ppp chap user...

Page 330: ...ACL number The acl number argument ranges from 2000 to 3999 An ACL number in the range 2000 to 2999 identifies a basic ACL an ACL number in the range 3000 to 3999 identifies an advanced ACL name acl...

Page 331: ...e interface number View Any view Parameter interface interface type interface number Specifies an interface by its type and number Description Use the display dialer command to display information abo...

Page 332: ...ue FIFO queuing Size Length Discards 0 75 0 Last 300 seconds input 0 bytes sec 0 packets sec Last 300 seconds output 0 bytes sec 0 packets sec 0 packets input 0 bytes 0 drops 0 packets output 0 bytes...

Page 333: ...ltiple dialer interfaces at the same time Therefore authentication must be configured on these physical interfaces so as to use the username of a dial in party to locate the corresponding dialer inter...

Page 334: ...to specify the interface as the server or client to send or accept PPP callback requests Use the undo ppp callback command to disable the interface as the PPP callback server or client By default call...

Page 335: ...alls to your router Use the undo ppp callback ntstring command to remove the dial string By default no callback dial string is configured for any Windows NT server When your router is functioning as a...

Page 336: ...336 CHAPTER 20 DCC CONFIGURATION COMMANDS...

Page 337: ...rial interface The NRZ encoding scheme is generally used for synchronous serial interfaces of routers The serial interfaces of some SNA devices however use NRZI encoding Therefore the encoding scheme...

Page 338: ...he output information of the command helps the user to understand the condition of a DLSw virtual circuit Example Display DLSw capabilities exchange information DLSw Capabilities of local 1 1 1 1 Vend...

Page 339: ...mmand displays the information all remote DLSw peers Example Display information about all the current remote peers Sysname display dlsw remote Remote peer type D Learning Dynamic C Configured by user...

Page 340: ...f the remote peer D the remote peer was dynamically learned C the remote peer was manually configured Total peers number Total number of remote peers IP address Remote peer IP address if preceded by a...

Page 341: ...l peer Status Status of the reachability information Interface The interface through which information destined to the MAC address will be sent Remain time Remaining aging time REMOTE MAC addresses in...

Page 342: ...ection the local bridge set needs to be mapped to DLSw through this command This command can be used repeated to map multiple bridge sets to DLSw For details about bridge set configuration refer to Br...

Page 343: ...number Layer 2 ACL number in the range of 4000 to 4999 inbound Specifies to apply the ACL for inbound traffic outbound Specifies to apply the ACL for outbound traffic Description Use the dlsw ethernet...

Page 344: ...default is 50 frames permit dynamic Permits non peer routers to initiate connections to establish peering relationships dynamically with this router It is not required to configure a remote peer for...

Page 345: ...es of the router in the form of saps list saps value 1 120 where saps value must be an even number in the range of 0x10 to 0xFE and 1 120 means that you can specify up to 120 SAP addresses or SAP addr...

Page 346: ...nformation from the reachable cache By default no remote reachability information is configured This configuration allows the router to send frames to a remote peer without first polling it When chang...

Page 347: ...range of 1 to 5 The default is 3 Description Use the dlsw remote command to create a remote DLSw peer Use the undo dlsw remote command to remove a remote peer After a local peer is created a remote DL...

Page 348: ...f the remote SNA device uses an SDLC link specify a compound MAC address in which the first five bytes are from the virtual MAC address configured in the sdlc mac map local command on the remote route...

Page 349: ...nsmission 10 dlsw multicast Syntax dlsw multicast multicast ip address interface interface type interface number undo dlsw multicast View System view Parameter multicast ip address Multicast IP addres...

Page 350: ...default is 30 seconds local pending seconds Local pending time in seconds The effective range is 1 to 65 535 and effective the default is 30 seconds remote pending seconds Remote pending time in seco...

Page 351: ...chronous serial interface is connected with an AS 400 device you need to change the idle time encoding scheme by using this command to improve the speed of polling the AS 400 device Example Configure...

Page 352: ...ge of 1 to 127 Description Use the llc2 max ack command to configure namely the maximum number of information frames the device can receive before it must send an acknowledgment to the peer router Use...

Page 353: ...the undo llc2 max send queue command to restore the default setting By default the length of the LLC2 output queue is 50 Example Set the length of the LLC2 output queue to 30 on Ethernet 1 0 Sysname s...

Page 354: ...command to restore the default modulus of LLC2 By default the modulus of LLC2 is 128 LLC2 like X 25 uses modulus to number frames All frames sent are numbered incrementally and await an acknowledgmen...

Page 355: ...Ethernet 1 0 Sysname system view Sysname interface ethernet 1 0 Sysname Ethernet1 0 llc2 receive window 10 llc2 timer ack Syntax llc2 timer ack mseconds undo llc2 timer ack View Ethernet interface vie...

Page 356: ...net 1 0 Sysname system view Sysname interface ethernet 1 0 Sysname Ethernet1 0 llc2 timer ack delay 200 llc2 timer busy Syntax llc2 timer busy mseconds undo llc2 timer busy View Ethernet interface vie...

Page 357: ...imer poll View Ethernet interface view Parameter mseconds LLC2 P F waiting time in milliseconds The effective range is 1 to 60 000 Description Use the llc2 timer poll command to configure the LLC2 P F...

Page 358: ...ime is 500 milliseconds Example Set the LLC2 REJ time to 2 000 milliseconds on Ethernet 1 0 Sysname system view Sysname interface ethernet 1 0 Sysname Ethernet1 0 llc2 timer reject 2000 reset dlsw cir...

Page 359: ...new TCP connection request to establish new TCP connection In the case of a remote peer dynamically learned this command disconnects the current TCP connection and deletes the remote peer Example Res...

Page 360: ...cannot be connected with one another Therefore the communication between the primary station and each secondary station can be guaranteed as long as each secondary device is identified with an SDLC a...

Page 361: ...enabled on the serial interface Before enabling DLSw forwarding on the serial interface enable SDLC as the link layer protocol on the interface With DLSw forwarding enabled on the SDLC interface all...

Page 362: ...Serial2 0 sdlc mac map local 0000 e81c b600 sdlc mac map remote Syntax sdlc mac map remote mac addr sdlc addr undo sdlc mac map remote mac addr sdlc addr View Synchronous serial interface view Parame...

Page 363: ...1 to 17 600 Description Use the sdlc max pdu command to configure the maximum SDLC PDU size namely the maximum size in bytes of a frame that the router can send not including the frame check sequence...

Page 364: ...Maximum number of SDLC transmission retries in the range of 1 to 255 times Description Use the sdlc max transmission command to configure the maximum number of SDLC transmission retries namely the num...

Page 365: ...Serial2 0 undo sdlc modulo sdlc sap map local Syntax sdlc sap map local lsap sdlc addr undo sdlc sap map local lsap sdlc addr View Synchronous serial interface view Parameter lsap SAP address in the r...

Page 366: ...ormat conversion Use the undo sdlc sap map remote command to restore the system default By default the SAP address of the remote DLSw device used in SDLC to LLC2 frame format conversion is 0x04 When a...

Page 367: ...undo sdlc role command to remove the configured SDLC role By default the device has no role SDLC is an unbalanced link layer protocol That is the end systems across a TCP connection are not equal in...

Page 368: ...rom the receiving secondary station after sending an information frame Use the undo sdlc timer ack command to restore the default setting By default the primary station acknowledgment waiting time is...

Page 369: ...e SDLC polling interval namely the amount of time the primary station waits between polling two secondary stations Use the undo sdlc timer poll command to restore the default setting By default SDLC p...

Page 370: ...a 4 byte integer in the range of 1 to 0xFFFFFFFF The first 12 bits indicate the network address and the last 20 bits indicate the node number Description Use the sdlc xid command to configure the XID...

Page 371: ...17 Annex G defines the way to transmit X 25 packets using FR virtual circuits Similar to normal X 25 interface an Annex G interface transmits receives X 25 PVC and X 25 SVC packets and can operate as...

Page 372: ...tch command to display the information about the configured FR switching to check if the frame relay switching of a user is correctly configured The interface specified by interface type interface num...

Page 373: ...rial2 0 DTE In ARP request Out ARP reply Out ARP request In ARP reply 0 0 1 1 display fr interface Syntax display fr interface interface type interface number interface number subnumber View Any view...

Page 374: ...nterface interface type interface number Specifies an interface by its type and number Description Use the display fr lmi info command to display the statistics of LMI protocol frame The LMI protocol...

Page 375: ...mmand Field Description Frame relay LMI statistics for interface Serial2 1 DTE Q933 Terminal type and LMI protocol type for the frame relay interface T391DTE 10 hold timer 10 DTE side T 391 setting N3...

Page 376: ...address mappings or the one for the specified interface This command displays whether the static address map entries are correct and whether dynamic address mapping operates normally Related command...

Page 377: ...nge 0 to 1023 Description Use the display fr map info pppofr command to display current PPP over frame relay PPPoFR mappings and their states for the specified or all interfaces Example Display inform...

Page 378: ...specified the displayed information covers all PVCs if with an interface a main interface or subinterface specified the displayed information covers only the PVCs on the interface and if with a DLCI...

Page 379: ...ription on the fields of the display fr pvc info command Field Description PVC statistics for interface Serial2 0 DTE physical UP Display information about PVCs on the frame relay interface Serial 2 0...

Page 380: ...um Transmit Unit is 1500 Hold timer is 10 sec Internet Address is 12 12 12 2 16 Primary Link layer protocol is FR IETF LMI DLCI is 0 LMI type is Q 933a frame relay DTE LMI status enquiry sent 435 LMI...

Page 381: ...up Link name Serial2 0 LMI status enquiry sent 435 LMI status received 435 Transmitted and received LMI status enquiry messages LMI status timeout 0 LMI message discarded 0 LMI timeout messages and dr...

Page 382: ...s in up state the bundle is flagged as up Moreover all bundle links should be tagged as down before the bundle is down fragment disabled Indicates whether the fragment is disabled disabled in this sam...

Page 383: ...mitted and received Add_link reject messages Add_link_rej messages are sent notifying reject of the Add_link messages Remove_link TX RX Number of transmitted and received Remove_link messages Remove_l...

Page 384: ...d settings X121 address X 121 address Modulo Window modulo which defaults to 8 Timers Idle Maximum idle period of SVCs T10 T20 Delay of the re start re transmission timer T11 T21 Delay of the call req...

Page 385: ...nt and point to multipoint Frame relay FRF 9 compression configuration differs depends on different types of interfaces For a point to point frame relay subinterface just use the fr compression frf9 c...

Page 386: ...ion succeeds The negotiation fails if the number of FRF 20 control messages sent exceeds In this case compression configuration cannot take effect This command is only valid for RTP messages and TCP A...

Page 387: ...the packets received on the interface in the range 16 to 1007 interface interface type interface number Specifies an interface by its type and number dlci out dlci DLCI in the sent packets It is in t...

Page 388: ...he frame relay sends data over the interface it is necessary to map the network address to the DLCI numbers Such a map can be specified manually or can be completed via the function of automatic inver...

Page 389: ...y default the frame relay interface type is DTE In frame relay there are two communicating parties namely the user side and network side The user side is called Data Terminal Equipment DTE and the net...

Page 390: ...p include Includes TCP header compression when performing RTP compression Description Use the fr iphc command to enable IP header compression function including RTP TCP header compression Use the undo...

Page 391: ...2dce Syntax fr lmi n392dce n392 value undo fr lmi n392dce View Interface view Parameter n392 value The Error threshold which ranges from 1 to 10 Description Use the fr lmi n392dce command to set N392...

Page 392: ...et the DCE will immediately send a Status Response packet If the DTE does not receive the response packet in the specified time it will record the error by adding 1 to the error count If the errors ex...

Page 393: ...hreshold N393 defines the event number observed and N392 defines the error threshold of that number N393 That is if the number of errors that occur to the DCE reaches N392 in N393 events DCE will cons...

Page 394: ...error count had exceeded the threshold and declare the physical channels and all DLCIs to be unavailable N392 at DTE side should be less than N393 at DTE side Example Set the operation of frame relay...

Page 395: ...o restore the default By default the LMI protocol type is q933a LMI protocol is used to maintain frame relay protocol PVC table including notifying PVC increasing detecting PVC deleting monitoring PVC...

Page 396: ...ly FRF9 and IPHC can be adopted PVC groups does not support compression compression Enables frame relay compression frf9 Adopts payload compression iphc Adopts IP UDP or RTP header compression Descrip...

Page 397: ...r Use the undo map ppp command to cancel this map and thus eliminates this PPPoFR link Related command interface virtual template on page 1759 Example Map DLCI 100 to PPP and establish PPPoFR link on...

Page 398: ...us be realized In frame relay switching view the shutdown undo shutdown operation can be executed on a PVC Before you can enter frame relay switching view the PVC must have existed Example Create a PV...

Page 399: ...no multilink frame relay interface or subinterface Before an MFR subinterface is created the MFR interface must be created first Before using the undo interface mfr command to delete an MFR interface...

Page 400: ...sulate interface link layer protocol as frame relay By default the link layer protocol encapsulated on the interface is PPP The frame relay encapsulation can be either ietf or nonstandard IETF encapsu...

Page 401: ...command to apply a link layer protocol of non frame relay MFR to the interface After a physical interface is encapsulated as MFR format the interface belongs to MFR and is not allowed to be configured...

Page 402: ...mmand on the interface to validate the new BID Example Set the frame relay link MFR4 BID to bundle1 Sysname system view Sysname interface mfr 4 Sysname MFR4 mfr bundle name bundle1 mfr fragment Syntax...

Page 403: ...link Serial 2 0 to be 70 bytes Sysname system view Sysname interface serial 2 0 Sysname Serial2 0 mfr fragment size 70 mfr link name Syntax mfr link name name undo mfr link name name View Frame relay...

Page 404: ...default the maximum times that a frame relay bundle link can resend hello message is twice The bundle link sustains link status by periodically sending hello message to the peer end If the times that...

Page 405: ...relay interface view Parameter seconds Time in seconds of waiting for hello acknowledgment message before resending hello message in the range 1 to 10 Description Use the mfr timer ack command to set...

Page 406: ...rotocol fr mfr command is used to associate a frame relay bundle link interface with a frame relay bundle can this command be configured Example Set the bundle link Serial 2 0 to send hello message on...

Page 407: ...from the DLCI 100 of Serial 2 0 to the DLCI 200 of Serial 2 1 and disable the current switching PVC Sysname system view Sysname fr switching Sysname fr switch pvc1 interface serial 2 0 dlci 100 inter...

Page 408: ...Serial 2 0 Sysname reset fr pvc interface serial 2 0 timer hold Syntax timer hold seconds undo timer hold View Interface view Parameter seconds Value of T391 parameter at DTE side which ranges from 0...

Page 409: ...view Example Apply the X 25 template named vofr to DLCI 100 Sysname system view Sysname interface serial 2 0 Sysname Serial2 0 fr dlci 100 Sysname fr dlci Serial2 0 100 x25 template vofr x25 template...

Page 410: ...410 CHAPTER 22 FRAME RELAY CONFIGURATION COMMANDS Sysname system view Sysname x25 template vofr Sysname x25 vofr...

Page 411: ...ord argument combination is not specified this command displays the GARP statistics of all the ports If the interface interface list keyword argument combination is specified this command displays the...

Page 412: ...rp Join Time 20 centiseconds Garp Leave Time 60 centiseconds Garp LeaveAll Time 1000 centiseconds Garp Hold Time 10 centiseconds garp timer Syntax garp timer hold join leave timer value undo garp time...

Page 413: ...of the leaveall timer must be a multiple of 5 and must be greater than the leave timer settings of all the ports Description Use the garp timer leaveall command to set the leaveall timer of GARP Use t...

Page 414: ...ace interface list Specifies an Ethernet port list in the format of interface type interface number to interface type interface number 1 10 where 1 10 indicates that you can specify up to 10 port rang...

Page 415: ...cs of all trunk ports will be displayed Otherwise only the GVRP statistics of all the specified trunk port will be displayed Example Display statistics about GVRP for trunk port Ethernet 1 0 Sysname d...

Page 416: ...the gvrp command to enable GVRP Use the undo gvrp command to disable GVRP Disabling GVRP globally also disables it on all ports By default GVRP is disabled Configured in system view the setting is glo...

Page 417: ...register VLANs and to propagate both dynamic and static VLAN information Fixed Disables the port to dynamically register and deregister VLANs or propagate information about dynamic VLANs but allows th...

Page 418: ...418 CHAPTER 24 GVRP CONFIGURATION COMMANDS...

Page 419: ...an interface Related command timer hold Example Configure HDLC encapsulation on interface Serial 2 0 Sysname system view Sysname interface serial 2 0 Sysname Serial2 0 link protocol hdlc timer hold S...

Page 420: ...polling interval on both the local and remote devices Setting it to zero disables link status check Example Set the link status polling interval to 100 seconds on interface Serial 2 0 Sysname system...

Page 421: ...an X 25 interface Annex G DLCI or XOT channel to the current hunt group Use the undo channel command to remove the specified interface Annex G DLCI or XOT channel from the current hunt group Related c...

Page 422: ...t 128 output 128 Channels Incoming only 0 0 Two way 1 1024 Outgoing only 0 0 Timers T10 60 T11 180 T12 60 T13 60 Idle_Timer 0 seconds New configuration will be effective after restart modulo 8 window...

Page 423: ...are 0 this section is disabled Timers T20 180 T21 200 T22 180 T23 180 T28 300 Idle_Timer 0 seconds Delay values of various timers of this X 25 interface in seconds New Configuration New configuration...

Page 424: ...his interface LAPB format received quantity sent quantity invalid ns Error statistics of this interface LAPB including total of received information frames carrying erroneous sequence numbers invalid...

Page 425: ...ports Example Display the CUG configuration on the router ports Sysname display x25 cug local cug X 25 Serial2 0 2 CUGs subscribed with no public access local cug 1 network cug 4 no incoming local cu...

Page 426: ...iption Use the display x25 map command to display the X 25 address mapping table The X 25 address mapping can be configured in two methods using the x25 map command or using the x25 pvc command The di...

Page 427: ...D connection information Sysname display x25 pad UI INDEX130 From remote 22 connected to local 11 State Normal X 3Parameters In 1 1 2 0 3 2 4 1 5 0 6 0 7 21 8 0 9 0 10 0 11 14 12 0 13 0 14 0 15 0 16 1...

Page 428: ...Normal Connection of local X 121 address to remote X 121 address and the current connection state of the PAD Connection states Normal Connection is normal Closing Connection is being closed Exception...

Page 429: ...rial2 0 2 22 I Serial2 1 0 3 131 H hg1 4 132 T 123 123 123 123 5 133 T 123 123 123 123 6 111 222 333 T 4 4 4 4 Total of static svc is 6 The item type of SwitchTo meaning I interface H hunt group T xot...

Page 430: ...erial2 0 SVC 1 State P4 transmit Map ip 10 1 1 2 to 130 Window size input 2 output 2 Packet Size input 128 output 128 Local PS 5 Local PR 5 Remote PS 5 Remote PR 4 Local Busy FALSE Reset times 0 Input...

Page 431: ...transmit SVC state P4 transmission state Map ip 10 1 1 2 to 130 Address mapping XOT PVC Serial2 0 PVC 1 connected PVC from XOT to serial2 0 already established PVC XOT Serial2 0 1 1 1 1 PVC 1 connect...

Page 432: ...ial1 0 SVC 1024 20 1 1 1 102 2 NULL Serial1 0 PVC 1 20 1 1 1 104 2 display x25 xot Syntax display x25 xot View Any view Parameter None Description Use the display x25 xot command to display XOT X 25 o...

Page 433: ...calculated according to the MTU upper layer protocol and modulo as shows below The default value of N1 varies with MTU and modulo For example upon system initialization the upper layer protocol is IP...

Page 434: ...1 Sequence numbers will cycle within the range Modulo 8 is the basic mode It is sufficient for most links Related command lapb window size Example Set the LAPB frame numbering mode on Serial2 0 to mo...

Page 435: ...o restore their default values T1 is the retransmission timer When T1 expires DTE DCE will start retransmission The value of T1 shall be greater than the maximum time between the sending of a frame an...

Page 436: ...Serial2 0 lapb window size 5 link protocol lapb Syntax link protocol lapb dce dte ip multi protocol View Interface view Parameter dce Specifies DCE mode of LAPB dte Specifies DTE mode of LAPB ip Speci...

Page 437: ...capsulate X 25 protocol on the specified interface By default the link layer protocol for the interface is PPP When the interface uses X 25 protocol it works in DTE IETF mode by default Note that When...

Page 438: ...iew Parameter local ip address Local IP address of the XOT connection local port Local port number of the XOT connection remote ip address Remote IP address of the XOT connection remote port Remote po...

Page 439: ...erface view Parameter None Description Use the reset lapb statistics command to clear LAPB statistics Example Clear the LAPB statistics on Serial 2 0 Sysname system view Sysname interface serial 2 0 S...

Page 440: ...oute to forward the packets that the local device receives at 10 1 1 1 102 to the X 121 address 111 Sysname system view Sysname translate ip 10 1 1 1 port 102 x25 111 Configure an X2T forwarding route...

Page 441: ...type of the alias There are 9 optional match types free Free match free ext Extended free match left Left alignment match left ext Extended left alignment match right Right alignment match right ext E...

Page 442: ...tion on the user facility option Option Description closed user group group number Specifies a closed user group CUG number for the X 25 interface The facility enables DTE to belong to one or more CUG...

Page 443: ...al 2 0 Sysname system view Sysname interface serial 2 0 Sysname Serial2 0 x25 call facility packet size 512 512 Sysname Serial2 0 x25 call facility window size 5 5 x25 cug service Syntax x25 cug servi...

Page 444: ...es allowing them to pass and lets the outgoing calls without CUG facilities pass through If the suppress all parameter is chosen the system removes CUG facilities for the incoming calls with CUG facil...

Page 445: ...robin vc number undo x25 hunt group hunt group name View System view Parameter hunt group name Name of a hunt group a string of 1 to 30 characters round robin Selects call channel using cyclic selecti...

Page 446: ...e calling request packet must carry the address However on some occasions the X 25 calling request does not have to carry the called calling DTE address in a specific network environment or as is requ...

Page 447: ...l request packet from the X 25 interface Serial 2 0 not to carry the calling DTE address Sysname system view Sysname interface serial 2 0 Sysname Serial2 0 x25 ignore calling address x25 local cug Syn...

Page 448: ...sed at DCE side use the link protocol x25 dce command to set the interface as DCE Example Define the rule on the serial interface Serial2 0 the incoming calls with 100 local CUGs or 200 network CUGs a...

Page 449: ...from the address mapping packet size input size output size Carries out maximum packet size negotiation when initiating calls from the mapping It needs two parameters maximum input packet size and ma...

Page 450: ...Sysname interface serial2 0 Sysname Serial2 0 x25 map ip 20 30 4 1 x121 address 25112451 window size 4 4 broadcast Sysname Serial2 0 x25 map ip 20 30 4 8 x121 address 25112450 no callin x25 modulo Sy...

Page 451: ...ut packet length in bytes its value ranges from 16 inclusive to 4096 inclusive and must be the integer power of 2 Description Use the x25 packet size command to set the maximum input and output packet...

Page 452: ...tcp indicating that the upper layer network protocol is IP protocol and supports TCP head compressing protocol address Network protocol address of the peer end of the PVC x121 address x 121 address X...

Page 453: ...rial 2 0 as X 25 enable PVC channel range and set two PVCs Sysname system view Sysname interface serial 2 0 Sysname Serial2 0 link protocol x25 Sysname Serial2 0 x25 vc range bi channel 8 1024 Sysname...

Page 454: ...received before acknowledgement in the range 0 to input window size If it is set to 0 or the input window size this function will be disabled If it is set to 1 X 25 of the device will send an acknowl...

Page 455: ...cify whether the packet carries the called DTE address Related command x25 response calling address x25 ignore called address x25 ignore calling address Example Specify that the call receiving packet...

Page 456: ...ter None Description Use the x25 reverse charge accept command to enable this interface to accept the call with the reverse charging request user facility Use the undo x25 reverse charge accept comman...

Page 457: ...it by its name in the commands x25 call facility or x25 map Related command x25 call facility x25 map Example Define two ROA lists and apply them to the interfaces Serial 2 0 and Serial 2 1 respective...

Page 458: ...ch When PVC switching is configured the link layer protocol on the input and output interfaces must be X 25 Moreover the specified PVCs on the two interfaces are effective After configuring the PVC sw...

Page 459: ...tch svc Syntax x25 switch svc number x 121 address sub dest destination address sub source source address interface interface type interface number dlci dlci number undo x25 switch svc x 121 address s...

Page 460: ...o delete the SVC route A device with X 25 switching configured can act as a simple X 25 switch The output interface of the SVC switching can be an X 25 interface or FR interface Annex G DLCI The link...

Page 461: ...a pattern matching string with 1 to 15 numeric characters For the specific description of pattern matching see Table 69 and Table 70 If no wildcard is used the X 121 address is must be exactly matche...

Page 462: ...ss with 8888 Sysname system view Sysname x25 switch svc 111 sub dest 9999 sub source 8888 hunt group hg1 x25 switch svc xot Syntax x25 switch svc x 121 address sub dest destination address sub source...

Page 463: ...rameter None Description Use the x25 switching command to enable the X 25 switching function Use the undo x25 switching command to disable this function which will not affect the established VC switch...

Page 464: ...ciency of the device Using this function can avoid this problem to a certain extent If the previous call failed at one destination the X 25 would not send calls to such a destination again within the...

Page 465: ...maximum idle time of the SVC on the interface Serial 2 0 to 10 minutes Sysname system view Sysname interface serial 2 0 Sysname Serial2 0 x25 timer idle 10 x25 timer tx0 Syntax x25 timer tx0 seconds u...

Page 466: ...e on a DTE is 200 seconds and that on a DCE is 180 seconds According to X 25 a timer should be started when the DTE sends a call request or the DCE sends a call indication If no peer acknowledgement i...

Page 467: ...0 x25 timer tx3 Syntax x25 timer tx3 seconds undo x25 timer tx3 View Interface view Parameter seconds Time of the clear request indication sending timer in seconds ranging from 1 to 1000 Description U...

Page 468: ...25 vc range bi channel ltc htc out channel loc hoc in channel lic hic bi channel ltc htc out channel loc hoc out channel loc hoc undo x25 vc range View Interface view Parameter bi channel ltc htc Lowe...

Page 469: ...5 window size View Interface view Parameter input window size Size of input window When X 25 window modulo is 8 its value ranges from 1 to 7 When X 25 window modulo is 128 its value ranges from 1 to 1...

Page 470: ...rk the ISP must assign a valid X 121 address to it If two devices are only directly connected back to back you can randomly specify the valid X 121 address If you only want the device to work in switc...

Page 471: ...xot pvc command to add a PVC route of XOT Use the undo x25 pvc command to delete the specified PVC route of XOT By default no PVC route of XOT is configured XOT X 25 Over TCP is a protocol to load X...

Page 472: ...procedure Description Use the x29 timer inviteclear time command to set the delay waiting for response after the PAD clear procedure is initiated Upon expiration of this timer the server aborts the c...

Page 473: ...link aggregation interface Syntax display link aggregation interface interface type interface number to interface type interface number View Any view Parameter interface interface type interface numb...

Page 474: ...emote System ID 0x0 0000 0000 0000 Port Number 0 Port Priority 0 Oper key 0 Flag Display detailed information about link aggregation for port Ethernet 1 2 in a static aggregation group Sysname display...

Page 475: ...the sending end considers that collection of incoming frames is enabled on the link 1 for true and 0 for false F indicates whether the sending system considers that distribution of outgoing frames is...

Page 476: ...the display link aggregation verbose command to display detailed information about the specified or all link aggregation groups You may find that information about the remote system for a manual link...

Page 477: ...768 2 ACDEF Remote Actor Partner Priority Oper Key SystemID Flag GE1 2 161 32768 1 0x8000 00e0 fc00 12b0 ACDEF GE1 3 164 32768 1 0x8000 00e0 fc00 12b0 ACDEF Aggregation ID 2 AggregationType Static Loa...

Page 478: ...considers that distribution of outgoing frames is enabled on the link 1 for true and 0 for false G indicates whether the receive state machine of the sending system is using default operational partne...

Page 479: ...P priority in the range 0 to 65535 Description Use the lacp system priority command to assign an LACP priority to the local system Use the undo lacp system priority command to restore the default By d...

Page 480: ...ange 1 to 144 manual Creates a manual link aggregation group static Creates a static LACP link aggregation group Description Use the link aggregation group mode command to create a link aggregation gr...

Page 481: ...enter aggregation port group view Instead of being created administratively an aggregation port group is created automatically upon creation of a link aggregation group and assigned the ID of the link...

Page 482: ...OMMANDS Description Use the reset lacp statistics command to clear statistics about LACP on a specified port or ports Related command display link aggregation interface Example Clear statistics about...

Page 483: ...e type interface number argument pairs around this keyword Description Use the debugging lacp packet command to enable debugging for LACP protocol packets on the specified port s Use the undo debuggin...

Page 484: ...following fields tlv A value of 2 indicates that the information is about the peer port len The length of the Partner information sys pri The LACP priority of the system where the peer port resides s...

Page 485: ...address 00e0 fc02 0300 port operation key 0x1 port LACP priority 0x8000 port number 0x2 current LACP state flag of the port 0x45 Partner tlv 2 len 20 sys pri 0x0 sys mac 0000 0000 0000 key 0x0 pri 0x...

Page 486: ...tion key 0x1 port LACP priority 0x8000 port number 0x6 current LACP state flag of the port 0x3d Partner tlv 2 len 20 sys pri 0x8000 sys mac 00e0 fc02 0300 key 0x1 pri 0x8000 p 0x1 state 0xd The peer p...

Page 487: ...or Partner churn state machine ptx Debugging for PTX state machine rx Debugging for RX state machine all Debugging for all the state machines Description Use the debugging lacp state command to enable...

Page 488: ...stimulation Lacp_Enabled RX state machine transited from the PORT_DISABLED state to the EXPIRED state The event that triggered the transition was the enabling of LACP Lacp_Enabled 0 1360862 Sysname L...

Page 489: ...one Description Use the debugging link aggregation event command to enable debugging for link aggregation events Use the undo debugging link aggregation event command to disable debugging for link agg...

Page 490: ...f AL AL Partner ID Select Unselect Share Master ID Type Ports Ports Type Port 10 M none 1 0 NonS Ethernet1 1 Aggregation group 10 existed It contained Ethernet 1 1 Remove aggregation group 10 Sysname...

Page 491: ...nterface Use the undo modem command to disable modem call in or call out By default both modem call in and call out are disabled on the interface Example Enable receiving incoming Modem calls on User...

Page 492: ...nt with the current answer state of the connected modem anomalies may occur You are not encouraged to configure this command Example Set the answer mode of the modem connected to the asynchronous seri...

Page 493: ...displayed as well n To accept AT commands from the modem you must first put the modem in AT command mode So sending commands in transmitting mode is invalid The sendat command can issue only one AT c...

Page 494: ...0 hangs up a modem which is a default setting H1 disconnects a modem through off hook In Inquiries to display the modem product ID ROM checksum or ROM checksum status The n argument can be 0 3 1 2 4 5...

Page 495: ...again after you switch to the command mode by executing the Escape Code command Qn Enables modem to send result codes The n argument can be 0 or 1 Q0 enables output result codes which is a default se...

Page 496: ...function of modems By default the callback function of modems is disabled When a modem line is active that is when the modem detects the carrier or data is being received you may enable callback As t...

Page 497: ...p type and is organized by mirroring group numbers Example Display the information about all the port mirroring groups Sysname display mirroring group local mirroring group 3 type local status active...

Page 498: ...ort mirroring port list both inbound outbound View System view Parameter groupid Port mirroring group number The value range is 1 to 5 for MSR 20 and BSR 30 series routers and 1 to 10 for MSR 50 serie...

Page 499: ...roup 1 Sysname undo mirroring group 1 mirroring port ethernet 1 1 to ethe rnet 1 10 both Sysname undo mirroring group 1 mirroring port pos 5 1 to pos 5 2 both Sysname undo mirroring group 1 mirroring...

Page 500: ...s the inbound packets only outbound Mirrors the outbound packets only Description Use the mirroring port command to add the current port to a port mirroring group as a source mirroring port Use the un...

Page 501: ...nd to add the current port to a port mirroring group as the destination mirroring port Use the undo monitor port command to remove the configuration If you do not specify the mirroring group groupid k...

Page 502: ...502 CHAPTER 30 PORT MIRRORING CONFIGURATION COMMANDS...

Page 503: ...is 10 sec Internet protocol processing disabled Link layer protocol is PPP LCP initial Physical is MP Output queue Urgent queue Size Length Discards 0 50 0 Output queue Protocol queue Size Length Disc...

Page 504: ...Protocol queue Size Length Discards 0 500 0 Output queue FIFO queuing Size Length Discards 0 75 0 Last 300 seconds input 0 bytes sec 0 packets sec Last 300 seconds output 0 bytes sec 0 packets sec 0...

Page 505: ...2005 03 13 19 54 23 60 Serial1 1 17 Up Time 2005 03 13 19 54 23 60 Serial1 1 18 Up Time 2005 03 13 19 54 23 60 Serial1 1 19 Up Time 2005 03 13 19 54 23 60 Serial1 1 20 Up Time 2005 03 13 19 54 23 60...

Page 506: ...splay virtual access va number dialer dialer number peer peer address user user name vt vt number View Any view Parameter va number VA interface number in the range 0 to 128 dial dialer number Specifi...

Page 507: ...udrate 64000 Output queue Urgent queue Size Length Discards 0 50 0 Output queue Protocol queue Size Length Discards 0 500 0 Output queue FIFO queuing Size Length Discards 0 75 0 Last 300 seconds input...

Page 508: ...the VT is not being used Example Create VT 10 interface Sysname system view Sysname interface virtual template 10 Sysname Virtual Template10 ip address ppp negotiate Syntax ip address ppp negotiate u...

Page 509: ...ew Sysname interface serial 1 0 Sysname Serial1 0 link protocol ppp ppp account statistics enable Syntax ppp account statistics enable undo ppp account statistics enable View Interface view Parameters...

Page 510: ...ess pool in the specified domain If the username received includes a domain name this domain name will be used for authentication if the name does not exist authentication is denied Otherwise the doma...

Page 511: ...w Parameter cipher Indicates to display the password in ciphertext simple Indicates to display the password in plain text password Default CHAP password a string of 1 to 16 characters When the simple...

Page 512: ...local username as Root when performing CHAP authentication Sysname system view Sysname interface serial 1 0 Sysname Serial1 0 ppp chap user Root ppp ipcp dns Syntax ppp ipcp dns primary dns address se...

Page 513: ...e ppp ipcp dns admit any command to configure the device to passively accept the DNS server address assigned by the peer even without sending a DNS request Use the undo ppp ipcp dns admit any command...

Page 514: ...vice to request its peer for the DNS server address actively through Serial 2 0 interface Sysname system view Sysname interface serial 2 0 Sysname Serial2 0 ppp ipcp dns request ppp ipcp remote addres...

Page 515: ...the link will go up The value ranges from 0 to 100 Description Use the ppp lqc command to enable PPP link quality control LQC Use the undo ppp lqc command to disable PPP link quality control By defau...

Page 516: ...not until there are data to transmit will DDC brings the dial up line up again and LQC resumes to work Example Enable LQC on interface Serial 1 0 setting close percentage to 90 and resume percentage...

Page 517: ...ptor received when performing LCP negotiation Based on the username or endpoint descriptor the system can locate the specified VT interface and create a MP binding according to the configuration on th...

Page 518: ...Set the maximum number of binding links to 12 Sysname system view Sysname interface virtual template 0 Sysname Virtual Template0 ppp mp max bind 12 ppp mp min bind Syntax ppp mp min bind min bind num...

Page 519: ...ppp mp min fragment command to set the minimum size of MP outgoing packet to be fragmented Use the undo ppp mp min fragment command to restore the default that is 128 bytes If you do not want small pa...

Page 520: ...an MP group Logical interfaces such as Tunnel interfaces do not support this command Example Add interface Serial 3 0 to MP group 3 Sysname system view Sysname interface serial 3 0 Sysname Serial3 0...

Page 521: ...e command to configure the VT interface number to be bound on the interface enabling the interface to work in MP mode Use the undo ppp mp command to remove MP binding of the interface making the inter...

Page 522: ...e aabbcc The ciphertext has a fixed length of 24 characters like _ TT8F Y5SQ Q MAF4 1 Description Use the ppp pap local user command to configure the username and password sent by the local device whe...

Page 523: ...ument ranges from 0 to 99 and defaults to 0 Description Use the remote address command to allocate IP address for the peer device Use undo remote address to remove the IP address allocated for the pee...

Page 524: ...restore the default value or 10 seconds If the timer is set to 0 seconds this means keepalive packets will not be sent out On slow links the seconds argument must not be too small As a slow link takes...

Page 525: ...se you can check the compression information on MP templates such as VT or Dialer When IPHC RTP header compression is applied on a normal PPP link the compression is performed on the physical link In...

Page 526: ...e type interface number Specifies an interface by its type and number Description Use the display ppp compression stac lzs command to view statistics about STAC LZS compression Note that When STAC LZS...

Page 527: ...ndard Nonstandard encapsulation mode Description Use the ppp compression iphc command to enable IP header TCP header and RTP header mainly compression on the interface Use the undo ppp compression iph...

Page 528: ...ections allowed on an interface Use the undo ppp compression iphc rtp connections command to restore the default value which is 16 RTP is connection oriented the number of RTP connections that a link...

Page 529: ...ng headers To restrict the memory load generated by compression you can use the ppp compression iphc tcp connections command to limit the number of compression enabled TCP connections to three for exa...

Page 530: ...u disable outbound fast forwarding before execute the ppp compression stac lzs command Note that If the configuration is applied on VT and Dialer interfaces ISDN and asynchronous dialer interfaces the...

Page 531: ...e or 10 ms Example Set the maximum time delay of LFI fragment of Virtual Template1 to 20 ms Sysname system view Sysname interface virtual template 1 Sysname Virtual Template1 ppp mp lfi delay per frag...

Page 532: ...532 CHAPTER 32 PPP LINK EFFICIENCY MECHANISM CONFIGURATION COMMANDS...

Page 533: ...Intf State OIntf RemMAC LocMAC 2 Virtual Template1 0 UP Ethernet1 0 0050 ba22 7369 00e0 fc08 f4de View the statistics of PPPoE session Sysname display pppoe server session packet SID RemMAC LocMAC InP...

Page 534: ...rtual Template1 with interface Ethernet 1 0 Sysname system view Sysname interface ethernet 1 0 Sysname Ethernet1 0 pppoe server bind virtual template 1 pppoe server log information off Syntax pppoe se...

Page 535: ...Maximum number of sessions that can be established at a local MAC address in the range 1 to 4069 Description Use the pppoe server max sessions local mac command to set the maximum number of PPPoE sess...

Page 536: ...ndo pppoe server max sessions total View System view Parameter number Maximum number of PPPoE sessions that the system can establish which ranges from 1 to 65535 Description Use the pppoe server max s...

Page 537: ...mplate interface Description Use the reset pppoe server command to terminate a PPPoE session on the server side Example Terminate the session established on virtual template interface 1 on the server...

Page 538: ...538 CHAPTER 33 PPPOE SERVER CONFIGURATION COMMANDS...

Page 539: ...Example Display the summary of PPPoE session Sysname display pppoe client session summary There are 2 sessions in total ID Bundle Dialer Intf Client MAC Server MAC State 1 1 1 Eth1 0 00e0fc0254f3 0004...

Page 540: ...0 Only after idle timeout is configured will the parameter be enabled By default packets is 10 Description Use the pppoe client command to establish a PPPoE session and specify the dialer bundle corre...

Page 541: ...on No matter a PPPoE session works in permanent on line mode or in packet triggering mode it will be deleted permanently by the undo pppoe client command If it is necessary to recreate a PPPoE session...

Page 542: ...e reset pppoe client command and the undo pppoe client command lies in the former only temporarily terminates a PPPoE session while the latter permanently deletes a PPPoE session Example Clear all PPP...

Page 543: ...rface type interface number ccp chap compression iphc rtp tcp core event interface interface type interface number ip packet interface interface type interface number ipcp ipv6 ipv6cp ipx ipxcp lcp lq...

Page 544: ...or PPP error debugging event PPP event debugging packet PPP packet debugging state PPP state debugging interface type interface number Specifies an interface by its type and number Description Use the...

Page 545: ...ceive Terminate Ack RTA A Terminate Ack packet was received from the peer Receive Unknown Code RUC An unknown packet was received from the peer Receive Code Reject Receive Protocol Reject RXJ RXJ A Co...

Page 546: ...Packet Serial2 0 Output LCP c021 Pkt Len 35 State reqsent code ConfReq 01 id 2a len 31 MRU 1 len 4 val 05dc AuthProto 3 len 4 PAP c023 MagicNumber 5 len 6 val 31180c00 MRRU 11 len 4 val 05dc Discri 13...

Page 547: ...547 the TLV length is four bytes and the desired MRRU is 05dc and the endpoint discriminator of MP the TLV length is 9 bytes and the value is 01fa4d432c8451...

Page 548: ...548 CHAPTER 35 PPP DEBUGGING COMMANDS...

Page 549: ...nds Example Set the aging time of dynamic bridge table entries to 500 seconds Sysname system view Sysname bridge aging time 500 bridge bridge set enable Syntax bridge bridge set enable undo bridge bri...

Page 550: ...Use the bridge bridging command to enable bridging of the specified network layer protocol s on the specified bridge set Use the undo bridge bridging command to disable bridging of the specified netwo...

Page 551: ...the bridge learning command to enable dynamic address learning to allow the specified bridge set to add dynamic address entries into the bridge table Use the undo bridge learning command to disable dy...

Page 552: ...d frames with a destination MAC address of 0000 0000 0111 Sysname system view Sysname bridge 1 mac address 0000 0000 0111 permit interface ethernet 1 0 bridge routing Syntax bridge bridge set routing...

Page 553: ...bridge set bridge set undo bridge set bridge set View Interface view Parameters bridge set Bridge set number an integer in the range of 1 to 255 Description Use the bridge set command to add the curre...

Page 554: ...MAC address in the format of H H H dynamic Displays the information about dynamically learned addresses in the bridge table static Displays the information about manually configured about addresses i...

Page 555: ...g interface total 2 interface s in the set Ethernet1 0 up Ethernet1 1 up Bridge set 2 configure bridge 2 enable bridging ip undo bridging ipx bridging others undo routing ip undo routing ipx bridge 2...

Page 556: ...s provided this command displays the statistics about all the bridged traffic on the device Example View the statistics information about bridged traffic that has passed Ethernet1 0 Sysname display br...

Page 557: ...tally 10 frames were received on this interface including one BPDU and two unicast packets Output Indicates what kinds of and how many frames were sent out on this interface Send way Indicates how fra...

Page 558: ...State of the bridge template interface Line protocol current state State of the data link layer protocol UP DOWN Description Bridge template1 Interface Descriptive string of the interface The Maximum...

Page 559: ...r interface type dce Sysname Serial2 0 fr dlci 50 Sysname Serial2 0 bridge set 1 Sysname Serial2 0 fr map bridge 50 broadcast interface bridge template Syntax interface bridge template bridge set undo...

Page 560: ...ernet interface If the bridge set contains no Ethernet interfaces its bridge template interface will use the system default MAC address Related command interface bridge template n Different models of...

Page 561: ...ule interface type interface number Clears MAC address entry of the specified interface Description Use the reset bridge address table command to remove one or more dynamic bridge table entries Exampl...

Page 562: ...Enables bridging of broadcasts to the X 25 destination Description Use the x25 map bridge command to create an X 25 to bridging mapping Use the undo x25 map bridge command to remove an X25 to bridgin...

Page 563: ...aler isdn leased number command to configure 64 kbps leased line connection Use the undo dialer isdn leased number command to remove 64 kbps leased line connection By default no ISDN leased line conne...

Page 564: ...perty Digital Call Type Out Calling Number Calling Subaddress Called Number 6688164 Called Subaddress UserName IP Address Start Time 05 04 30 14 27 52 Time Used 00 04 34 display isdn call info Syntax...

Page 565: ...State TEI_UNASSIGNED Link Layer 8 TEI NONE State TEI_UNASSIGNED Network Layer 1 connection s Connection 1 CCIndex 0x0055 State Active CES 1 Channel 0x00000001 TEI 65 Calling_Num Sub Called_Num Sub 66...

Page 566: ...call record Call Calling Called Start Stop Seconds Type Number Number Time Time Used In 10660016 10660016 03 07 05 11 23 09 0 In 10660022 10660022 03 07 05 11 23 09 0 CCIndex Index of the call at the...

Page 567: ...he durations of system timers and frame size If only ISDN protocol is specified the system will display the default system parameters of ISDN Example Display the system parameters of the ISDN protocol...

Page 568: ...RI 1 0 Sysname display isdn spid interface bri 1 0 Interface Bri1 0 SPID Type AUTO SPID B1 SPID Num Neg State SPID_UNASSIGNED Init State INIT_NULL SPID B2 SPID Num Neg State SPID_UNASSIGNED Init State...

Page 569: ...in most cases despite the ISDN module can provide the channel management function as well Configured with isdn bch local manage command the router operates in local B channel management mode to selec...

Page 570: ...m view Sysname interface bri 2 0 Sysname Bri2 0 isdn bch local manage isdn bch select way Syntax isdn bch select way ascending descending View ISDN interface view Parameter ascending Selects B channel...

Page 571: ...alling number Description Use the isdn calling command to have the messages from a calling party to a called party carry the calling number This command mainly applies on BRI interfaces If a calling p...

Page 572: ...oming digital call if the calling party sends a wrong subaddress or does not send at all Example Check whether the called number carried by incoming digital calls is 66668888 on the interface BRI 1 0...

Page 573: ...rom a remote device it can automatically identify the length of the call reference However some devices on the network do not have such capability In the event that the router is required to place cal...

Page 574: ...to configure this command on an ISDN interface if there is still a call on it This command can take effect only if it is configured when there is no call on the interface Alternatively you can manuall...

Page 575: ...sdn ignore hlc isdn ignore llc Syntax isdn ignore llc undo isdn ignore llc View ISDN interface view Parameter None Description Use the isdn ignore llc command to disable ISDN to carry the Lower Layer...

Page 576: ...As for the data exchange performed between a router and an ISDN switch the default is as follows For an incoming call the router checks the received Setup messages for the Sending Complete Information...

Page 577: ...rmation Element in the transmitted SETUP messages Sysname Bri1 0 isdn ignore sending complete outgoing isdn L3 timer Syntax isdn L3 timer timer name time interval undo isdn L3 timer all timer name Vie...

Page 578: ...o configure a BRI interface to operate in the point to point mode Use the undo isdn link mode command to restore the default BRI interface operating mode By default a BRI interface operates in the poi...

Page 579: ...0 1 International number 0 1 0 National number 1 0 0 Subscriber number 0 0 0 0 Unknown 0 0 0 1 ISDN telephony numbering loan Recommendation E 164 E 163 1 0 0 1 Private numbering plan DSS1 0 0 0 Unkno...

Page 580: ...SDN numbering plan Rec E 164 1 1 0 1 0 0 1 Abbreviated number in private numbering plan NTT 0 0 0 Unknown 0 1 0 National number 0 1 1 Network specific number 1 0 0 Subscriber number 0 0 0 0 Unknown 0...

Page 581: ...how to set number type and code scheme 0 0 1 1 0 0 1 Level 2 regional number in private numbering plan 0 1 0 1 0 0 1 Level 1 regional number in private numbering plan 0 1 1 1 0 0 1 PISN specific numb...

Page 582: ...er property calling Remove the number type and code scheme for the calling numbers in incoming and outgoing calls undo isdn number property calling Set a number type and code scheme for the called num...

Page 583: ...no call on the interface Alternatively you can manually disable the interface by executing the shutdown command configure the command and then enable the interface by executing the undo shutdown comma...

Page 584: ...nd to set the protocol mode for an ISDN interface Use the undo isdn protocol mode command to restore the default protocol mode By default an ISDN interface operates in the user side mode Example Set t...

Page 585: ...he command and then enable the interface by executing the undo shutdown command The operations however will lead to the disconnection of the call existing on the interface Example Apply ISDN ETSI on i...

Page 586: ...ESTART messages to the remote end before maintaining B channels Example Enable the PRI interface to send RESTART messages before maintaining B channels Sysname system view Sysname isdn send restart is...

Page 587: ...disable the NIT mode on the BRI interface By default NIT mode does not apply on BRI interfaces Instead static SPID or dynamic SPID negotiation is applied On an NI compliant BRI interface calls can be...

Page 588: ...You can use this command to modify the duration of TSPID This command applies only on NI compliant BRI interfaces Example Set the duration of TSPID on the interface BRI 1 0 to 50 seconds Sysname syste...

Page 589: ...e the isdn spid resend command to set the number of INFORMATION message retransmission attempts for SPID negotiation or initialization on an NI compliant BRI interface Use the undo isdn spid resend co...

Page 590: ...to place calls normally In addition when the router works with an ISDN NI compliant switch the DMS100 for example in North America you must use this command to configure a unique SPID and LDN for each...

Page 591: ...mand to configure a unique SPID and LDN for each B channel to ensure a successful MP channel call Otherwise only one B channel can be brought up Also note that both SPID and LDN are provided by your s...

Page 592: ...atistics in the form of flow Use the isdn statistics stop command to stop making statistics Use the isdn statistics clear to clear the statistic information Example Start counting incoming and outgoin...

Page 593: ...up and calling for MP fails By default all the B channels on the BRI interface use one TEI value Example Configure the router to request the connected switch for a new TEI value before calling to brin...

Page 594: ...he isdn q921 permanent command triggers the ISDN BRI interface to establish Q 921 links n The support for these two commands varies with device models Example Specify BRI 2 0 interface to be in perman...

Page 595: ...ce view Parameters None Description Use the shutdown command to shut down an ISDN interface Use the undo shutdown command to bring up an ISDN interface By default an ISDN interface is up Examples Shut...

Page 596: ...596 CHAPTER 37 ISDN CONFIGURATION COMMANDS...

Page 597: ...dulo and check region configuration Examples Activate MST region configuration manually Sysname system view Sysname stp region configuration Sysname mst region active region configuration check region...

Page 598: ...ny view Parameters instance instance id Displays the spanning tree information of a particular MST instance The minimum value of instance id is 0 representing the common internal spanning tree CIST an...

Page 599: ...IST common root regional root the internal path cost from the device to the regional root CIST root port of the device and status of the BPDU guard function enabled or disabled CIST port parameters Po...

Page 600: ...port command to view the information about abnormally blocked ports Any of the following reasons may cause a port to be abnormally blocked Root guard action Loop guard action MSTP BPDU format compati...

Page 601: ...nstance instance id history View Any view Table 104 Description on the fields of the display stp abnormal port command Field Description MSTID MST instance ID Blocked Port Name of blocked port which c...

Page 602: ...spanning tree instance ID this command will display the historic port role calculation information of only this specified spanning instance in the timing of port role calculation Examples View the hi...

Page 603: ...ameters None Description Use the display stp root command to view the root bridge information of all MSTP instances Examples View the root bridge information of all MSTP instances Sysname display stp...

Page 604: ...sequenced by instance ID and by port name in each spanning tree instance If you specify a spanning tree instance ID this command will display the statistics of TC BPDUs received and sent by all ports...

Page 605: ...e specified VLAN s from the specified MST instance and map the removed VLAN s to the CIST MST instance 0 By default all VLANs are mapped to the CIST Notice that If you specify no VLAN in the undo inst...

Page 606: ...s the spanning tree statistics information on one or multiple ports You can provide up to 10 port lists by each of which you can specify an individual port in the form of interface type interface numb...

Page 607: ...commands instance region name check region configuration vlan mapping modulo and active region configuration Examples Set the MSTP revision level of the MST region to 5 Sysname system view Sysname stp...

Page 608: ...enabled MSTP dynamically maintains spanning tree status of the corresponding VLANs based the received configuration BPDUs After being disabled it stops maintaining the spanning tree status Refer to Li...

Page 609: ...ers are related to the network size You can set these three timers indirectly by setting the network diameter Based on the network diameter you configured MSTP automatically sets an optimal hello time...

Page 610: ...iant BPDUs and sends when needed compatible format or 802 1s compliant BPDUs If the mode is set to legacy or dot1s on a port the port can only receive and send BPDUs of the specified format If the por...

Page 611: ...w Sysname stp config digest snooping Enable Digest Snooping on Ethernet 1 1 Sysname system view Sysname interface ethernet 1 1 Sysname Ethernet1 1 stp config digest snooping stp cost Syntax stp instan...

Page 612: ...yntax stp edged port enable disable undo stp edged port View Ethernet interface view port group view Parameters enable Configures the current port to be an edge port disable Configures the current por...

Page 613: ...oup view Parameters None Description Use the stp loop protection command to enable the loop guard function for a port or a group of ports Use the undo stp loop protection command to restore default lo...

Page 614: ...device becomes the network diameter of that spanning tree and restricts the size of that spanning tree in the current MST region Devices other than the root bridge in an MST region use the maximum hop...

Page 615: ...onfigure the MSTP work mode of the device Use the undo stp mode command to restore the MSTP work mode to the default setting By default an MSTP compliant device works in MSTP mode Related commands stp...

Page 616: ...he default path cost for ports based on a private standard Description Use the stp pathcost standard command to specify a standard for the device to use when calculating the default path cost of the l...

Page 617: ...e to calculate the default path cost for ports based on IEEE 802 1t Sysname system view Sysname stp pathcost standard dot1t stp point to point Syntax stp point to point auto force false force true und...

Page 618: ...he port group When connecting to a non point to point link a port is incapable of rapid state transition If the current port is the master port of aggregated ports or if it works in full duplex mode t...

Page 619: ...2006 Sysname MSTP 3 PFWD Instance 2 s Ethernet 1 2 has been set to forwarding state The information mentioned above shows that in instance 2 that state of both Ethernet 1 1 and Ethernet 1 2 has chang...

Page 620: ...priority priority undo stp instance instance id priority View System view Parameters instance instance id Sets the priority of the current port s in a particular spanning tree instance The minimum val...

Page 621: ...iew you can configure the parameters related the MST region including the region name VLAN to instance mapping and revision level Examples Enter MST region view Sysname system view Sysname stp region...

Page 622: ...in the range of 0 to 15 MST instance 0 represents the CIST Description Use the stp root secondary command to specify the current device as a secondary root bridge of the specified MST instance Use th...

Page 623: ...t group view the setting is effective on all the ports in the port group Examples Enable the root guard function for port Ethernet 1 1 Sysname system view Sysname interface Ethernet 1 1 Sysname Ethern...

Page 624: ...d of time immediately after it receives TC BPDUs to 6 times Examples Set the maximum number of times the device deletes forwarding address entries within a certain period of time immediately after it...

Page 625: ...k in the stp bridge diameter bridge number command and let MSTP automatically calculate an optimal setting of these three timers Related commands stp timer hello stp timer max age and stp bridge diame...

Page 626: ...imer max age Syntax stp timer max age centi seconds undo stp timer max age View System view Parameters centi seconds Max age in the range 600 to 4 000 in centiseconds This argument must be a multiple...

Page 627: ...imer factor command to configure the timeout time of the device by setting the timeout factor Timeout time timeout factor 3 hello time Use the undo stp timer factor command to restore the timeout fact...

Page 628: ...maximum transmission rate of all ports of the device is 10 Note that Configured in Ethernet interface view the setting is effective on the current port only configured in port group view the setting...

Page 629: ...ng modulo command you can quickly specify a VLAN for each MST instance This command maps each VLAN to the MST instance whose ID is VLAN ID 1 modulo 1 where VLAN ID 1 modulo is the modulo operation for...

Page 630: ...630 CHAPTER 38 MSTP CONFIGURATION COMMANDS...

Page 631: ...he undo description command to restore the default By default the descriptive string for a VLAN is the VLAN ID for example VLAN 0001 for a VLAN interface is name of the current VLAN interface for exam...

Page 632: ...put 0 bytes sec 0 packets sec 0 packets input 0 bytes 0 drops 0 packets output 0 bytes 0 drops Table 111 Description on the fields of the display interface vlan interface command Field Description Vla...

Page 633: ...and interface number in which interface number is the main interface number whereas subnumber is the sub interface number ranging from 1 to 4 094 reserved Displays information of the reserved VLANs P...

Page 634: ...annot be created Related command display interface vlan interface Example Create VLAN interface 2 Sysname system view Sysname vlan 2 Sysname vlan2 quit Sysname interface vlan interface 2 Sysname Vlan...

Page 635: ...imum of 32 IP addresses can be configured on a VLAN interface in which one is the primary IP address and all the rest are secondary IP addresses The total number of IP addresses on a VLAN interface va...

Page 636: ...e interface will resume Shutting down bringing up a VLAN interface does not affect any Ethernet ports in the VLAN The state of an Ethernet port does not change with the VLAN interface state Example Sh...

Page 637: ...ot create remove reserved VLANs that are reserved for specific function implementation Dynamic VLANs cannot be removed using the undo vlan command A VLAN associated with QoS policies cannot be removed...

Page 638: ...638 CHAPTER 39 VLAN CONFIGURATION COMMANDS...

Page 639: ...rt command to remove one Access port or a group of Access ports from a VLAN Note This command is only applicable to Access ports All ports have their default link type configured as Access however use...

Page 640: ...an 3 port hybrid pvid vlan Syntax port hybrid pvid vlan vlan id undo port hybrid pvid View Ethernet interface view port group view Parameter vlan id VLAN ID in the range 1 to 4094 Description Use the...

Page 641: ...rent Hybrid port to the specified VLAN s Use the undo port hybrid vlan command to remove the current Hybrid port from the specified VLAN s A hybrid port can belong to multiple VLANs and thus can allow...

Page 642: ...rts in the port group Refer to Link Aggregation Configuration Commands on page 473 for information about port groups By default a port is an Access port Example Configure Ethernet 1 0 to be a Trunk po...

Page 643: ...ame vlan all Please wait Done Sysname interface ethernet 1 0 Sysname Ethernet1 0 port link type trunk Sysname Ethernet1 0 port trunk permit vlan 2 4 50 to 100 Please wait Done port trunk pvid vlan Syn...

Page 644: ...default VLAN ID for the Trunk port of both the local device and remote device Otherwise the packets cannot be transmitted correctly Related command port link type Example Configure the default VLAN ID...

Page 645: ...d command voice vlan voice vlan enable n As the first 24 bits of a MAC address in binary format an OUI address is a globally unique identifier assigned to a vendor by IEEE Example Display the OUI addr...

Page 646: ...4 MANUAL Ethernet1 5 AUTO voice vlan Syntax voice vlan vlan id enable Description Description of the OUI addresses that are allowed to pass Table 113 Description on the fields of the display voice vl...

Page 647: ...voice vlan state Example Enable the voice VLAN feature on VLAN 2 assuming that VLAN 2 already exists Sysname system view Sysname voice vlan 2 enable voice vlan aging Syntax voice vlan aging minutes un...

Page 648: ...utomatic mode only The Trunk or Hybrid port can be configured with the voice VLAN feature The Access port cannot be configured with this feature Before enabling the voice VLAN feature on a port ensure...

Page 649: ...m default OUI addresses which can be removed or then added are illustrated in the following table Related command display voice vlan oui Example Configure the OUI address as 1234 1234 1234 the mask as...

Page 650: ...o voice vlan mode auto command to configure the voice VLAN working mode on a port to be manual By default the voice VLAN working mode is automatic The voice VLAN working mode of a port is independent...

Page 651: ...lt the security mode of voice VLAN is enabled n The voice vlan security enable and undo voice vlan security enable commands take effect only after the voice VLAN attribute is enabled globally Example...

Page 652: ...652 CHAPTER 41 VOICE VLAN CONFIGURATION COMMANDS...

Page 653: ...solate group information Uplink port support NO Group ID 1 Ethernet1 1 Ethernet1 2 port isolate enable Syntax port isolate enable undo port isolate enable View Ethernet interface view port group view...

Page 654: ...Configured in Ethernet interface view the setting is effective on the current port only configured in port group view the setting is effective on all ports in the port group Refer to Link Aggregation...

Page 655: ...undo standby routing group command to disable the dynamic route backup function By default the dynamic route backup function is disabled n Before enabling the dynamic route backup function on a dialup...

Page 656: ...ic route backup group 1 to monitor routes to the network segments 20 0 0 0 8 and 30 0 0 0 8 Sysname system view Sysname standby routing rule 1 ip 20 0 0 1 255 0 0 0 Sysname standby routing rule 1 ip 3...

Page 657: ...s or broadcast packets cannot be sent Description Use the broadcast limit link command to set the maximum number of links that can send multicast or broadcast packets in a VT Use the undo broadcast li...

Page 658: ...seconds output 0 bytes sec 0 packets sec 0 packets input 0 bytes 0 drops 0 packets output 0 bytes 0 drops display interface mfr Syntax display interface mfr mfr number View Any view Parameter mfr numb...

Page 659: ...0 0 Output queue FIFO queuing Size Length Discards 0 75 0 Last 300 seconds input 0 bytes sec 0 packets sec Last 300 seconds output 0 bytes sec 0 packets sec 0 packets input 0 bytes 0 drops 0 packets o...

Page 660: ...group12 Interface The Maximum Transmit Unit is 1500 Hold timer is 10 sec Internet protocol processing disabled Link layer protocol is PPP LCP initial Physical is MP Output queue Urgent queue Size Len...

Page 661: ...0 Sysname display interface null 0 NULL0 current state UP Line protocol current state UP spoofing Description NULL0 Interface The Maximum Transmit Unit is 1500 Internet protocol processing disabled Ph...

Page 662: ...ate command to view the state information about the existing VTs If you do not provide a VT number this command will display the state information about all the existing VTs Related command interface...

Page 663: ...iew Parameter interface type interface number Interface type and interface number verbose Displays the detailed statistics Description Use the display mfr command to display the configuration informat...

Page 664: ...ually VA interfaces will be removed due to underlying layer disconnection or user intervention Example View the state information about all the VA interfaces Sysname display virtual access vt 1 Virtua...

Page 665: ...interface interface type interface number subnumber p2mp p2p command to create a WAN sub interface and enter WAN sub interface view Use the undo interface command to remove the specified sub interfac...

Page 666: ...096 sub interfaces Example Create a sub interface on Ethernet 1 0 Sysname system view Sysname interface ethernet 1 0 1 Sysname Ethernet1 0 1 interface loopback Syntax interface loopback number undo i...

Page 667: ...w Sysname interface mfr 3 Sysname MFR3 interface mp group Syntax interface mp group mp number undo interface mp group mp number View System view Parameter mp number MP group interface number ranging f...

Page 668: ...System view Parameter number VE interface number ranging from 0 to 1023 Description Use the interface virtual ethernet command to create a VE interface and enter the specified VE interface view Use th...

Page 669: ...remove the specified VT Before removing a VT make sure that all the relevant VA interfaces are removed and this virtual interface is not being used Example Create VT 10 Sysname system view Sysname in...

Page 670: ...670 CHAPTER 44 LOGICAL INTERFACE CONFIGURATION COMMANDS...

Page 671: ...tore the default that is slave When connected to a SONET SDH device the CPOS interface must use the slave clock because the SONET SDH network clock is more precise When the interface is directly conne...

Page 672: ...CRC word length for a synchronizing serial interface formed by CPOS interfaces Use the undo crc command to restore the default The CRC word length for a synchronizing serial interface formed by CPOS i...

Page 673: ...larm none Error 0 BIP 0 SEF Multiplex section Alarm none Error 0 BIP 0 REI Higher order path VC 3 1 Alarm none Error 0 BIP 0 REI Higher order path VC 3 2 Alarm none Error 0 BIP 0 REI Higher order path...

Page 674: ...at SDH multiplex AU 3 clock master loopback not set Physical layer information of the CPOS interface the framing format is set to SDH AU 3 path is adopted master clock internal clock signal is used an...

Page 675: ...r path VC 4 1 Alarm none Error 0 BIP 0 REI Lower order path Alarm none Error 0 BIP 0 REI Cpos2 0 CE1 1 is up Frame format NO CRC4 clock slave loopback not set E1 framer 1 1 1 1 Alarm none Error 0 FERR...

Page 676: ...on Cpos4 0 current state The current physical state of the CPOS interface Frame format SDH multiplex AU 3 clock master loopback not set Physical layer information of the CPOS interface the framing for...

Page 677: ...document By default timeslot bundling is disabled on E1 channels When the E1 channel is channelized its timeslot 0 is used for synchronization and the other 31 timeslots can be bundled to form one or...

Page 678: ...clock modes depending on connected devices For example when connected to a SONET SDH device an E1 channel should use the slave clock mode and when directly connected to another device with fiber optic...

Page 679: ...1 channel remote Enables external loopback on the E1 channel Description Use the e1 set loopback command to configure the loopback mode of the E1 channel Use the undo e1 set loopback command to remove...

Page 680: ...tdown e1 unframed Syntax e1 e1 number unframed undo e1 e1 number unframed View CPOS interface view Parameter e1 number Number of an E1 channel on the CPOS interface in the range 1 to 63 Description Us...

Page 681: ...system default is NetEngine c2 c2 value Specifies the path signal label byte The c2 value argument is a hexadecimal number in the range 0 to FF The system default is 0x02 Description Use the flag com...

Page 682: ...ck local remote undo loopback View CPOS interface view Parameter local Internal loopback used for testing the physical interface itself remote External loopback used for testing the cable connected to...

Page 683: ...ose to multiplex AUG to AU 4 or AU 3 by using the multiplex mode command When the CPOS interface is operating in SONET mode AUG can be multiplexed only to AU 3 and the multiplex mode command is invali...

Page 684: ...r1 number2 or multiple timeslots in the form of number1 number2 number3 speed 56k 64k Specifies how timeslots are bundled If the 56k keyword applies timeslots form an N 56 kbps bundle If 64k applies t...

Page 685: ...ck mode and when directly connected to another device with fiber optic it can use either mode so long as the mode is different from the one used at the opposite end Note that different T1 channels of...

Page 686: ...es internal loopback payload Enables external payload loopback remote Enables external loopback Description Use the t1 set loopback command to configure the loopback mode of the T1 channel Use the und...

Page 687: ...e in the range 1 to 84 Description Use the t1 unframed command to set a T1 channel on the CPOS interface to operate in unframed mode Use the undo t1 unframed command to restore the default that is cha...

Page 688: ...688 CHAPTER 45 CPOS INTERFACE CONFIGURATION COMMANDS...

Page 689: ...formation Use the undo arp check enable command to disable the function allowing the device to learn multicast MAC addresses After the ARP entry check is disabled the device can learn the ARP entry wi...

Page 690: ...e range 1 to 4094 interface type interface number Interface type and interface number vpn instance vpn instance name Name of a VLAN instance a case sensitive string of 1 to 31 characters Description U...

Page 691: ...mer aging command to set aging time for dynamic ARP entries Use the undo arp timer aging command to restore the default By default the aging time for dynamic ARP entries is 20 minutes Related command...

Page 692: ...arp static reset arp Example Display the detailed information of all ARP entries Sysname display arp all verbose Type S Static D Dynamic IP Address MAC Address VLAN ID Interface Aging Type Vpn instan...

Page 693: ...string for matching consisting of 1 to 256 characters Description Use the display arp ip address command to display the ARP entry for a specified IP address Related command arp static and reset arp E...

Page 694: ...hat contain the specified string string A case sensitive string for matching consisting of 1 to 256 characters count Displays the number of ARP entries Description Use the display arp vpn instance com...

Page 695: ...ars all ARP entries dynamic Clears all dynamic ARP entries static Clears all static ARP entries interface interface type interface number Clears the ARP entries for the interface specified by the argu...

Page 696: ...696 CHAPTER 46 ARP CONFIGURATION COMMANDS...

Page 697: ...nd to restore the default By default a device cannot send gratuitous ARP packets when receiving ARP requests from another network segment Example Disable a device from sending gratuitous ARP packets S...

Page 698: ...CHAPTER 47 GRATUITOUS ARP CONFIGURATION COMMANDS By default the function is disabled Example Enable the gratuitous ARP packet learning function Sysname system view Sysname gratuitous arp learning ena...

Page 699: ...e ARP source suppression function is disabled Related command display arp source suppression Example Enable the ARP source suppression function Sysname system view System View return to User View with...

Page 700: ...p source suppression Syntax display arp source suppression View Any view Parameter None Description Use the display arp source suppression command to display information about the current ARP source s...

Page 701: ...led from learning dynamic ARP entries Use the undo arp authorized enable command to disable authorized ARP on the interface which at the same time is enabled to learn dynamic ARP entries By default au...

Page 702: ...time for authorized ARP entries Use the undo arp authorized time out command to restore the default By default the aging time for authorized ARP entries is 1200 seconds Example Configure the aging tim...

Page 703: ...lt proxy ARP is disabled Related command display proxy arp Example Enable proxy ARP on Ethernet 1 0 Sysname system view Sysname interface ethernet 1 0 Sysname Ethernet1 0 proxy arp enable local proxy...

Page 704: ...isplay the proxy ARP status Related command proxy arp enable Example Display the proxy ARP status on Ethernet 1 0 Sysname display proxy arp interface ethernet 1 0 Interface Ethernet 1 0 Proxy ARP stat...

Page 705: ...to 65534 sharekey key Specifies a shared key for the BIMS server which is a string of 1 to 16 characters Description Use the bims server command to specify the IP address port number and shared key of...

Page 706: ...otfile name is specified If you execute the bootfile name command repeatedly the latest configuration will overwrite the previous one Example Specify the bootfile name aaa in DHCP address pool 0 Sysna...

Page 707: ...DHCP client the DHCP server will allocate an IP address from the address pool Use the undo dhcp select server global pool subaddress command to cancel the support for subaddress allocation By default...

Page 708: ...esses of the DHCP server interfaces Note that When you use the dhcp server forbidden ip command to exclude an IP address that is bound to a user from dynamic assignment the address can be still assign...

Page 709: ...ip pool 0 Sysname dhcp pool 0 dhcp server ping packets Syntax dhcp server ping packets number undo dhcp server ping packets View System view Parameter number Number of ping packets in the range of 0 t...

Page 710: ...response timeout time as 1000ms Sysname system view Sysname dhcp server ping timeout 1000 dhcp server relay information enable Syntax dhcp server relay information enable undo dhcp server relay inform...

Page 711: ...flicts ip address Displays conflict information for the IP address Description Use the display dhcp server conflict command to display information about IP address conflicts Related command reset dhcp...

Page 712: ...re address 4 4 4 6 3030 3066 2e65 3230 Apr 25 2007 17 10 47 Release 302e 3130 3234 2d45 7468 6572 6e65 7430 2f31 total 1 entry display dhcp server free ip Syntax display dhcp server free ip View Any v...

Page 713: ...on of a specified address pool The pool name is a string of 1 to 35 characters If no pool name is specified the binding information of all address pools is displayed Description Use the display dhcp s...

Page 714: ...LINE 0 DHCPRELEASE 3 DHCPINFORM 0 BOOTPREQUEST 0 BOOTP Reply 9 DHCPOFFER 3 DHCPACK 6 DHCPNAK 0 BOOTPREPLY 0 Bad Messages 0 Type Binding types including Manual Auto OFFERED and Auto COMMITTED Manual St...

Page 715: ...all DHCP address pools Sysname display dhcp server tree all Global pool Pool name 0 network 20 1 1 0 mask 255 255 255 0 Sibling node 1 option 2 ip address 1 1 1 1 expired 1 0 0 Pool name 1 static bind...

Page 716: ...of the display dhcp server tree command Field Description Global pool Information of a address pool Pool name Address pool name network Network segment for address allocation static bind ip address 1...

Page 717: ...mand to remove the domain name suffix from a DHCP address pool The domain name suffix is not specified by default Related command dhcp server ip pool Example Specify the client domain name suffix as m...

Page 718: ...2 minute 3 gateway list Syntax gateway list ip address 1 8 undo gateway list ip address all View DHCP address pool view Parameter ip address 1 8 Gateway IP address 1 8 means you can specify up to eig...

Page 719: ...mmand repeatedly the latest configuration will overwrite the previous one Related command dhcp server ip pool and netbios type Example Specify WINS server address 10 12 1 99 in DHCP address pool 0 Sys...

Page 720: ...ified by default Related command dhcp server ip pool and nbns list Example Specify the NetBIOS node type as b node in DHCP address pool 0 Sysname system view Sysname dhcp server ip pool 0 Sysname dhcp...

Page 721: ...icates you can specify up to 16 hex digit strings separated by spaces Each string contains 2 4 6 or 8 hex digits ip address ip address 1 8 Specifies IP addresses 1 8 indicates you can specify up to ei...

Page 722: ...all ip ip address pool pool name View User view Parameter all Clears the IP address dynamic binding information of all DHCP address pools ip ip address Clears the dynamic binding information of a spec...

Page 723: ...specify the client ID of a static binding in a DHCP address pool Use the undo static bind client identifier command to remove the client ID of a static binding from a DHCP address pool By default no...

Page 724: ...mmand to remove the IP address of a static binding from a DHCP address pool By default no IP address of a static binding in a DHCP address pool is specified Note that Use the static bind ip address co...

Page 725: ...the static bind mac address or static bind client identifier command repeatedly the latest configuration will overwrite the previous one Relate command dhcp server ip pool static bind client identifie...

Page 726: ...ip address TFTP server IP address Description Use the tftp server ip address command to specify the TFTP server IP address in a DHCP address pool Use the undo tftp server ip address command to remove...

Page 727: ...e config command to configure specified Option 184 contents in a DHCP address pool Use the undo voice config command to remove specified option 184 contents from a DHCP address pool By default no Opti...

Page 728: ...728 CHAPTER 51 DHCP SERVER CONFIGURATION COMMANDS...

Page 729: ...one Description Use the dhcp enable command to enable DHCP Use the undo dhcp enable command to disable DHCP By default DHCP is disabled n For both DHCP server and relay agent configuration enabling DH...

Page 730: ...ddress check enable dhcp relay information enable Syntax dhcp relay information enable undo dhcp relay information enable View Interface view Parameter None Description Use the dhcp relay information...

Page 731: ...s the default normal padding format or with the keyword verbose node identifier restores the mac mode of the verbose padding format If configuring the handling strategy of the DHCP relay agent as repl...

Page 732: ...thernet1 0 dhcp relay information enable Sysname Ethernet1 0 dhcp relay information strategy keep dhcp relay release ip Syntax dhcp relay release ip client ip View System view Parameter client ip DHCP...

Page 733: ...command to bind an interface to a static binding entry make sure that the interface is configured as a DHCP relay agent otherwise address entry conflicts may occur Related command display dhcp relay...

Page 734: ...the dhcp relay server detect command to enable pseudo DHCP server detection Use the undo dhcp relay server detect command to disable pseudo DHCP server detection By default pseudo DHCP server detectio...

Page 735: ...yntax dhcp relay server select group id undo dhcp relay server select View Interface view Parameter group id Specifies a DHCP group number to be correlated in the range of 0 to 19 The specified group...

Page 736: ...ess pool to the client When the working mode of the interface is changed from DHCP server to DHCP relay agent neither the IP address leases nor the authorized ARP entries will be deleted However these...

Page 737: ...rmation about DHCP server groups correlated to all interfaces Sysname display dhcp relay all Interface name Server group Ethernet1 1 2 display dhcp relay security Syntax display dhcp relay security ip...

Page 738: ...tatic Items 1 Dynamic Items 0 Temporary Items 0 All Items 1 display dhcp relay security tracker Syntax display dhcp relay security tracker View Any view Parameter None Table 132 Description on fields...

Page 739: ...ption Use the display dhcp relay server group command to display the configuration information of a specified or all DHCP server groups Example Display IP addresses of DHCP servers in DHCP server grou...

Page 740: ...ECLINE packets received 0 BOOTPREQUEST packets 0 DHCP packets received from servers 20 DHCPOFFER packets received 10 DHCPACK packets received 10 DHCPNAK packets received 0 BOOTPREPLY packets 0 DHCP pa...

Page 741: ...to 19 about which to remove statistics from the relay agent Description Use the reset dhcp relay statistics command to remove statistics from the relay agent If no server group is specified all stati...

Page 742: ...742 CHAPTER 52 DHCP RELAY AGENT CONFIGURATION COMMANDS...

Page 743: ...face type interface number Specifies an interface of which to display DHCP client information Description Use the display dhcp client command to display DHCP client information If no interface interfa...

Page 744: ...cp client command Field Description Vlan interface1 DHCP client information Information of the interface acting as the DHCP client Current machine state DHCP client current machine state Allocated IP...

Page 745: ...t1 0 ip address dhcp alloc n The DHCP snooping is supported only on the Layer 2 Ethernet interface DHCP Snooping supports no link aggregation If a Layer 2 Ethernet interface is added into an aggregati...

Page 746: ...746 CHAPTER 53 DHCP CLIENT CONFIGURATION COMMANDS...

Page 747: ...DHCP servers and does not record binding information about MAC addresses of DHCP clients and the obtained IP addresses By default DHCP snooping is disabled Related command display dhcp snooping Exampl...

Page 748: ...both in the DHCP ACK and DHCP REQUEST messages Example Display DHCP snooping address binding information Sysname display dhcp snooping DHCP Snooping is enabled The client binding table for all untrust...

Page 749: ...elated command dhcp snooping trust Example Display information about trusted ports Sysname display dhcp snooping trust DHCP Snooping is enabled DHCP Snooping trust becomes active Interface Trusted Eth...

Page 750: ...750 CHAPTER 54 DHCP SNOOPING CONFIGURATION COMMANDS...

Page 751: ...nt Syntax display bootp client interface interface type interface number View Any view Parameter interface interface type interface number Displays the BOOTP client information of the interface Descri...

Page 752: ...BOOTP Sysname system view Sysname interface ethernet 1 0 Sysname Ethernet1 0 ip address bootp alloc Table 137 Description on fields of the display bootp client command Field Description Ethernet1 0 BO...

Page 753: ...debugging is disabled Table 138 Description on the fields of the debugging dhcp server packet command Field Description Rx Tx Receiving sending operation Interface InterfaceName Receiving interface Me...

Page 754: ...essfully A static binding entry is found Assign Lease Type Lease from global pool Assign a lease from the global address pool The lease type can be Used Free and Timeout Reclaim conflicted IP Address...

Page 755: ...PS 7 DHCPS_DEBUG_COMMON DHCPServer Sending ICMP ECHOREQUEST to target IP 22 0 0 1 0 278312 Sysname DHCPS 7 DHCPS_DEBUG_COMMON DHCPServer Assign Free Lease from global pool Checking whether the IP addr...

Page 756: ...address 0 0 0 0 Relay agent IP address 22 0 0 1 Client hardware address 00e0 fc14 1601 Server host name Not Configured Boot file name Not Configured DHCP message type DHCP Offer A DHCP OFFER message...

Page 757: ...el Parameters all All types of debugging for DHCP relay agent error DHCP relay agent error debugging event DHCP relay agent event debugging packet DHCP relay agent packet debugging client mac mac addr...

Page 758: ...PAddress IP address that the DHCP server assigns to the client DHCP message type DHCPmessagetype DHCP message type which can be DHCP Discover DHCP Offer DHCP Request DHCP Decline DHCP ACK DHCP NAK DHC...

Page 759: ...ver group 0 The DHCP relay agent received a DHCP OFFER message and then broadcast it 0 230969 Sysname DHCPR 7 DHCPR_DEBUG_EVENT Begin to deal with DHCP Request packet 0 230969 Sysname DHCPR 7 DHCPR_DE...

Page 760: ...view Default Level 1 Monitor level Parameters all All types of debugging for DHCP BOOTP clients error Error debugging or debugging for unknown packets of DHCP BOOTP clients event DHCP BOOTP client ev...

Page 761: ...o CPU for processing Notify route to add the default gateway ip address Notifies the routing module to add a default route Notify BIMS to connect BIMS server ip ip address port port sharekey sharekey...

Page 762: ...02 04 80 3C 10 00 00 00 00 20 B8 C4 B1 E4 B5 B1 C7 B0 C2 B7 BE 3D 20 00 30 30 65 30 2E 66 63 31 34 2E 31 36 30 31 2D 56 6C 61 6E 2D 69 6E 74 65 72 66 61 63 65 32 32 FF Warning Deleting the interface...

Page 763: ...fc14 1601 Options 63 82 53 63 35 01 03 0C 06 63 6C 69 65 6E 74 32 04 16 00 00 02 36 04 0B 00 00 01 37 04 01 03 06 0F 39 02 04 80 3C 10 00 00 00 00 44 65 63 00 4E 6F 76 00 4F 63 74 00 3D 20 00 30 30 6...

Page 764: ...421 Sysname DHCPC 7 DHCP_Client Vlan interface2 Move to BOUND state in 1 seconds if no arp reply is received If no ARP reply is received the state of the DHCP client will be changed to BOUND state aft...

Page 765: ...the display dns domain command to display the domain name suffixes Related command dns domain Example Display domain name suffixes Sysname display dns domain Type D Dynamic S Static No Type Domain nam...

Page 766: ...isplay dns proxy table View Any view Parameters None Description Use the display dns proxy table command to display the DNS proxy table Examples Display the DNS proxy table Sysname display dns proxy t...

Page 767: ...rameter None Description Use the display ip host command to display the host names and corresponding IP addresses in the static DNS database Example Display the host names and corresponding IP address...

Page 768: ...omain name suffix with a domain name suffix specified or all domain name suffixes with no domain name suffix specified No domain name suffix is configured by default You can configure a maximum of 10...

Page 769: ...nd to enable dynamic domain name resolution Use the undo dns resolve command to disable dynamic domain name resolution Dynamic domain name resolution is disabled by default Example Enable dynamic doma...

Page 770: ...dots The host name must include at least one letter ip address IP address of the specified host in dotted decimal notation Description Use the ip host command to create a mapping between host name and...

Page 771: ...reset dns dynamic host command to clear the information in the dynamic domain name cache Related command display dns dynamic host Example Clear the information in the dynamic domain name cache Sysname...

Page 772: ...772 CHAPTER 57 DNS CONFIGURATION COMMANDS...

Page 773: ...the interface packets refer to all incoming and outgoing IP packets If a firewall is configured only those valid packets can pass the firewall Description Use the display ip count command to display t...

Page 774: ...s ip count enable Syntax ip count enable undo ip count enable View System view Parameter None Description Use the ip count enable command to enable IP accounting Use the undo ip count enable command t...

Page 775: ...the exterior table is 0 Rule incompliant packets are not to be counted IP packets are sorted as follows If a firewall is configured on an interface and incoming and outgoing IP packets are denied by...

Page 776: ...Sysname system view Sysname interface ethernet 1 0 Sysname Ethernet1 0 ip count firewall denied outbound packets Specify not to count the outbound IP packets denied by the firewall on Ethernet1 0 Sys...

Page 777: ...onfigure maximum number of accounting entries in the interior table Use the undo ip count interior threshold command to restore the default When doing this you are prompted to clear the table first if...

Page 778: ...counting rules Example Count outgoing IP packets on Ethernet1 0 Sysname system view Sysname interface ethernet 1 0 Sysname Ethernet1 0 ip count outbound packets ip count rule Syntax ip count rule ip a...

Page 779: ...P accounting rule Sysname system view Sysname ip count rule 169 254 10 1 255 255 0 0 ip count timeout Syntax ip count timeout minutes undo ip count timeout View System view Parameter minutes Aging tim...

Page 780: ...ars the statistics from the firewall denied table exterior Clears the statistics from the exterior table interior Clears the statistics from the interior table Description Use the reset ip count comma...

Page 781: ...col current state DOWN Internet Address is 1 1 1 1 8 Primary Broadcast address 1 255 255 255 The Maximum Transmit Unit 1500 bytes ip fast forwarding incoming packets state is Disable ip fast forwardin...

Page 782: ...packets received on an interface Unicast packets bytes and multicast packets sent on an interface ARP packet input number 0 Request packet 0 Reply packet 0 Unknown packet 0 Total number of ARP packet...

Page 783: ...hannel D channel instead of the ones used by the user channels B channels For details about CE1 PRI and CT1 PRI interfaces refer to Fundamental CE1 PRI Interface Configuration Commands on page 201 and...

Page 784: ...Use the undo ip address ip address mask mask length command to remove the primary IP address Use the undo ip address ip address mask mask length sub command to remove a secondary IP address By defaul...

Page 785: ...s 202 38 160 1 255 255 255 0 sub ip address unnumbered Syntax ip address unnumbered interface interface type interface number undo ip address unnumbered View Interface view Parameter interface interfa...

Page 786: ...786 CHAPTER 59 IP ADDRESSING CONFIGURATION COMMANDS...

Page 787: ...g containing 1 to 256 characters acl acl number Displays FIB information passing a specified ACL numbered from 2000 to 2999 ip prefix ip prefix name Displays FIB information passing a specified IP pre...

Page 788: ...R Reject L Generated by ARP or ESIS Destination Mask Nexthop Flag TimeStamp Interface Token 10 2 1 1 32 127 0 0 1 HU t 1150900568 InLoop0 invalid 127 0 0 0 8 127 0 0 1 U t 1150623094 InLoop0 invalid...

Page 789: ...al to the mask that a user enters If no masks are specified FIB entries that match the natural network address and have the masks longer than or equal to the natural mask will be displayed Description...

Page 790: ...0 timestamp 0 information request 0 mask requests 0 mask replies 0 time exceeded 0 Output echo 10 destination unreachable 0 source quench 0 redirects 0 echo reply 5 parameter problem 0 timestamp 0 inf...

Page 791: ...3 17 56 1161 sndbuf 8192 rcvbuf 8192 sb_cc 0 rb_cc 0 socket option SO_KEEPALIVE SO_OOBINLINE SO_SENDVPNID SO_SETKEEPALIVE socket state SS_ISCONNECTED SS_PRIV SS_ASYNC Task VTYD 18 socketid 3 Proto 6 L...

Page 792: ...0 0 0 FA 0 0 0 0 sndbuf 4194304 rcvbuf 4194304 sb_cc 0 rb_cc 0 socket option 0 socket state SS_PRIV SS_NBIO SS_ASYNC display ip statistics Syntax display ip statistics View Any view Parameter None Ta...

Page 793: ...of packets with destination being local bad protocol Total number of unknown protocol packets bad format Total number of packets with incorrect format bad checksum Total number of packets with incorr...

Page 794: ...packets of data after window 0 0 bytes packets received after close 0 ACK packets 481 8776 bytes duplicate ACK packets 7 too much ACK packets 0 Sent packets Total 665 urgent packets 0 control packets...

Page 795: ...nsent Sent packets Total Total number of packets sent urgent packets Number of urgent packets sent control packets Number of control packets sent window probe packets Number of window probe packets se...

Page 796: ...ne Description Use the display udp statistics command to display statistics of UDP packets Related command reset udp statistics Packets dropped with MD5 authentication Number of packets dropped with M...

Page 797: ...oadcasts Use the undo ip forward broadcast command to disable an interface from forwarding directed broadcasts By default an interface is disabled from forwarding directed broadcasts Table 163 Descrip...

Page 798: ...ct packets This feature is enabled by default Example Disable sending ICMP redirection packets Sysname system view Sysname undo ip redirects ip ttl expires enable Syntax ip ttl expires enable undo ip...

Page 799: ...ed the device will not send network unreachable and source route failure ICMP packets but still send other destination unreachable ICMP packets Example Disable sending ICMP destination unreachable pac...

Page 800: ...le Display statistics of UDP traffic Sysname reset udp statistics tcp anti naptha enable Syntax tcp anti naptha enable undo tcp anti naptha enable View System view Parameter None Description Use the t...

Page 801: ...and IP packet head so the recommended maximum size of TCP packets is about 1200 bytes Example Set the maximum size of TCP packets to 300 bytes on Ethernet1 0 Sysname system view Sysname interface eth...

Page 802: ...error will be prompted You can respectively configure the maximum number of TCP connections in each state If the maximum number of TCP connections in a state is 0 the aging of TCP connections in this...

Page 803: ...nnection state check interval is 30 seconds The device periodically checks the number of TCP connections in each state If it detects that the number of TCP connections in a state exceeds the maximum n...

Page 804: ...he synwait timer Related command tcp timer syn timeout and tcp window Example Set the length of the TCP finwait timer to 800 seconds Sysname system view Sysname tcp timer fin timeout 800 tcp timer syn...

Page 805: ...tion Use the tcp window command to configure the receiving sending buffer size of TCP connection Use the undo tcp window command to restore the default The TCP receiving sending buffer is 8 KB by defa...

Page 806: ...806 CHAPTER 60 IP PERFORMANCE CONFIGURATION COMMANDS...

Page 807: ...set the default outgoing interface for matched packets Use the undo apply default output interface command to remove the configuration Using this command can set two outgoing interfaces at most for lo...

Page 808: ...ault next hop to 1 1 1 1 for matched packets Sysname system view Sysname policy based route aa permit node 11 Sysname policy based route apply ip address default next hop 1 1 1 1 track 1 apply ip addr...

Page 809: ...The precedences are listed in the following table Description Use the apply ip precedence command to set a precedence for matched packets Use the undo apply ip precedence command to remove the settin...

Page 810: ...configuration This command is used to specify interfaces two interfaces at most to send the matched IP packets Note that Two outgoing interfaces at most can be specified for matched IP packets For non...

Page 811: ...cy routing Description Use the display ip policy based route setup command to display the configuration of enabled policy routing Examples Display the configuration of policy routing enabled on interf...

Page 812: ...net 1 0 Denied 0 Forwarded 0 Total denied 0 forwarded 0 policy based route pr01 The referenced policy name is pr01 permit node 1 The match mode is permit and the policy consists of only node 1 if matc...

Page 813: ...mber in the range of 2000 to 3999 The number of a basic ACL ranges from 2000 to 2999 and that of an advanced ACL ranges from 3000 to 3999 Description Use the if match acl command to define an ACL matc...

Page 814: ...Examples Permit the packets with a length from 100 to 200 bytes Sysname system view Sysname policy based route aa permit node 11 Sysname policy based route if match packet length 100 200 ip local pol...

Page 815: ...mmand to enable policy routing and reference a policy on the interface Use the undo ip policy based route command to disable interface policy routing Interface policy routing is disabled by default No...

Page 816: ...A policy consists of several nodes and a node consists of if match clauses and apply clauses The if match clauses define the match rules for the node and the apply clauses define the actions that sho...

Page 817: ...817 If no policy name is specified this command clears all the policy routing statistics Examples Clear all the policy routing statistics Sysname reset policy based route statistics...

Page 818: ...818 CHAPTER 61 IP UNICAST POLICY ROUTING CONFIGURATION COMMANDS...

Page 819: ...warded UDP packets on all interfaces Example Display the information of forwarded UDP packets on the interface Ethernet1 0 Sysname display udp helper server interface ethernet 1 0 Interface name Serve...

Page 820: ...port port number dns netbios ds netbios ns tacacs tftp time View System view Parameter port number UDP port number with which packets need to be forwarded in the range of 1 to 65535 except 67 and 68 d...

Page 821: ...ndo udp helper server ip address View Interface view Parameter ip address IP address of the destination server in dotted decimal notation Description Use the udp helper server command to specify the d...

Page 822: ...822 CHAPTER 62 UDP HELPER CONFIGURATION COMMANDS...

Page 823: ...n advanced ACL the value ranges from 3000 to 3999 Description Use the ip urpf command to enable URPF check on the interface Use the undo ip urpf command to disable this function By default URPF check...

Page 824: ...824 CHAPTER 63 URPF CONFIGURATION COMMANDS...

Page 825: ...8 8 0 0 1 67 17 Eth1 0 Eth1 1 7 484 0 8 0 0 1 67 7 0 0 13 68 17 Eth1 1 Eth1 0 7 819 0 8 0 0 1 8 7 0 0 13 0 1 Eth1 2 Eth1 0 7 ip fast forwarding Syntax ip fast forwarding inbound outbound undo ip fast...

Page 826: ...pression enabled PPP links c CAUTION In the case of load balancing using fast forwarding fast forwarding must be disabled in the corresponding direction of the interface The interface on which fast fo...

Page 827: ...orwarding cache View User view Parameter None Description Use the reset ip fast forwarding cache command to clear the information in the fast forwarding cache Example Clear the information in the fast...

Page 828: ...828 CHAPTER 64 FAST FORWARDING COMMANDS...

Page 829: ...mic host command no more than 21 characters can be displayed If the domain name exceeds the maximum length the first 21 characters will be displayed display dns ipv6 server Syntax display dns ipv6 ser...

Page 830: ...tic Destination 1 PrefixLength 128 NextHop 1 Flag HU Label NULL Tunnel ID 0 TimeStamp Date 12 5 2004 Time 9 15 18 Interface InLoopBack0 Table 171 Description on the fields of the display dns ipv6 serv...

Page 831: ...Any view Parameter None Description Use the display ipv6 host command to display the mappings between host names and IPv6 addresses in the static DNS database Example Display the mappings between host...

Page 832: ...ified interface is displayed Note that If you have configured the time slots of a CE1 PRI or CT1 PRI interface as an ISDN PRI group using the pri set command then executing the display ip interface br...

Page 833: ...layer state of the interface IPv6 is enabled IPv6 packet forwarding state of the interface IPv6 packet forwarding is enabled in the example link local address Link local address configured for the int...

Page 834: ...m the first one containing the specified character string include Displays the neighbor entries containing the specified character string exclude Displays the neighbor entries without the specified ch...

Page 835: ...tal number of neighbor entries acquired dynamically Table 176 Description on fields of the display ipv6 neighbors command Field Description IPv6 Address IPv6 address of a neighbor Link layer Link laye...

Page 836: ...ess ZoneID PathMTU Age Type fe80 12 0 1300 40 Dynamic 2222 3 0 1280 Static display ipv6 socket Syntax display ipv6 socket socktype socket type task id socket id View Any view Parameter socktype socket...

Page 837: ...EPORT SO_SENDVPNID socket state SS_PRIV SS_ASYNC SOCK_DGRAM SOCK_RAW display ipv6 statistics Syntax display ipv6 statistics View Any view Parameter None Table 178 Description on fields of the display...

Page 838: ...0 ICMPv6 protocol Sent packets Total 0 unreached 0 too big 0 hopcount exceeded 0 reassembly timeout 0 parameter problem 0 echo request 0 echo replied 0 neighbor solicit 0 neighbor advert 0 router soli...

Page 839: ...reassembled packets Number of packets failing to be reassembled Number of packets whose reassembly times out ICMPv6 protocol Statistics of ICMPv6 packets Sent packets Total 0 unreached 0 too big 0 hop...

Page 840: ...ering 0 unknown info type 0 Deliver failed bad length 0 ratelimited 0 Statistics of received ICMPv6 packets including Total number of received packets Number of packets with checksum errors Number of...

Page 841: ...in sequence 0 0 bytes window probe packets 0 window update packets 0 checksum error 0 offset error 0 short error 0 duplicate packets 0 0 bytes partially duplicate packets 0 0 bytes out of order packet...

Page 842: ...update packets 6 Number of data packets 7 Number of retransmitted packets 8 Number of ACK packets Retransmitted timeout Number of packets whose retransmission times out connections dropped in retransm...

Page 843: ...delivered input socket full 0 input packets missing pcb cache 0 Sent packets Total 0 Table 181 Description on fields of the display tcp ipv6 status command Field Description TCP6CB IPv6 address of th...

Page 844: ...s 2002 1 for a DNS server Sysname system view Sysname dns server ipv6 2002 1 ipv6 Syntax ipv6 undo ipv6 View System view Parameter None shorter than header Total number of UDP packets whose total leng...

Page 845: ...n Use the ipv6 address command to configure an IPv6 site local address or aggregatable global unicast address for an interface Use the undo ipv6 address command to remove the IPv6 address from the int...

Page 846: ...length eui 64 undo ipv6 address ipv6 prefix prefix length eui 64 View Interface view Parameter ipv6 prefix prefix length IPv6 address prefix and prefix length They together specify the prefix of an I...

Page 847: ...interface ethernet 1 0 Sysname Ethernet1 0 ipv6 address fe80 1 link local ipv6 fibcache Syntax ipv6 fibcache undo ipv6 fibcache View System view Parameter None Description Use the ipv6 fibcache comma...

Page 848: ...hash based ipv6 host Syntax ipv6 host hostname ipv6 address undo ipv6 host hostname ipv6 address View System view Parameter hostname Host name a string of up to 20 characters The character string can...

Page 849: ...iseconds Example Set the capacity of the token bucket to 50 and the update period to 100 milliseconds Sysname system view Sysname ipv6 icmp error bucket 50 ratelimit 100 ipv6 icmpv6 multicast echo rep...

Page 850: ...lag View Interface view Parameter None Description Use the ipv6 nd autoconfig managed address flag command to set the managed address configuration M flag to 1 so that the host can acquire an IPv6 add...

Page 851: ...thernet1 0 undo ipv6 nd autoconfig other flag ipv6 nd dad attempts Syntax ipv6 nd dad attempts value undo ipv6 nd dad attempts View Interface view Parameter value Number of attempts to send an NS mess...

Page 852: ...View Interface view Parameter value Interval for sending NS messages in milliseconds in the range of 1 000 to 3 600 000 Description Use the ipv6 nd ns retrans timer command to set the interval for se...

Page 853: ...specified by the device By default the neighbor reachable time on the local interface is 30 000 milliseconds and the Reachable Timer field in RA messages is 0 Example Set the neighbor reachable time...

Page 854: ...e between the maximum interval and the minimum interval Use the undo ipv6 nd ra interval command to restore the default By default the maximum interval between RA messages is 600 seconds and the minim...

Page 855: ...RA messages Use the undo ipv6 nd ra prefix command to remove the prefix information from RA messages By default no prefix information is configured in RA messages and the IPv6 address of the interface...

Page 856: ...d number of a Layer 3 interface in a static neighbor entry Description Use the ipv6 neighbor command to configure a static neighbor entry Use the undo ipv6 neighbor command to remove a static neighbor...

Page 857: ...learned on a specified interface Use the undo ipv6 neighbors max learning num command to restore the default Example Set the maximum number of neighbors that can be dynamically learned on Ethernet1 0...

Page 858: ...dynamic PMTU Use the undo ipv6 pathmtu age command to restore the default By default the aging time is 10 minutes Note that the aging time is invalid for a static PMTU Related command display ipv6 pa...

Page 859: ...ation on all interfaces dynamic Clears the dynamic neighbor information on all interfaces interface interface type interface number Clears dynamic neighbor information on a specified interface static...

Page 860: ...6 packets Example Clear the statistics of IPv6 packets and ICMPv6 packets Sysname reset ipv6 statistics reset tcp ipv6 statistics Syntax reset tcp ipv6 statistics View User view Parameter None Descrip...

Page 861: ...f the finwait timer is 675 seconds Example Set the finwait timer length of TCP connections to 800 seconds Sysname system view Sysname tcp ipv6 timer fin timeout 800 tcp ipv6 timer syn timeout Syntax t...

Page 862: ...ze of the TCP sending receiving buffer in KB kilobyte in the range of 1 to 32 Description Use the tcp ipv6 window command to set the size of the TCP sending receiving buffer Use the undo tcp ipv6 wind...

Page 863: ...om 1 1 1 1 to 1 1 1 4 display natpt address mapping Syntax display natpt address mapping View Any view Parameter None Description Use the display natpt address mapping command to display the static an...

Page 864: ...ue is 240 seconds finrst aging time value is 5 seconds frag aging time value is 5 seconds Table 184 Description on fields of the display natpt address mapping command Field Description NATPT address m...

Page 865: ...ormation No Dynamic V6 Address Records Present NATPT Prefix Info Prefix Interface NextHop 2001 NATPT aging time value information tcp aging time value is 86400 seconds udp aging time value is 40 secon...

Page 866: ...ons Syntax display natpt frag sessions View Any view Parameter None Description Use the display natpt frag sessions command to display the NAT PT fragment session information Example Display the NAT P...

Page 867: ...ion Info No IPV6Source IPV4Source Pro IPV6Destination IPV4Destination No Sessions Present display natpt statistics Syntax display natpt statistics View Any view Parameter None Description Use the disp...

Page 868: ...Description Use the natpt address group command to configure a NAT PT address pool Use the undo natpt address group command to remove a specified NAT PT address pool Table 188 Description on fields o...

Page 869: ...aging time default dns finrst frag icmp syn frag tcp udp time value View System view Parameter default Restores the default NAT PT session timeout time dns Specifies the DNS packet timeout time in se...

Page 870: ...time icmp 45 natpt enable Syntax natpt enable undo natpt enable View Interface view Parameter None Description Use the natpt enable command to enable the NAT PT feature on an interface Use the undo n...

Page 871: ...x of the destination address of the packet complies with the format of the natpt prefix argument during a dynamic mapping on the IPv6 network side ipv4 address IPv4 address of the specified next hop t...

Page 872: ...lated from an IPv6 packet to 0 Sysname system view Sysname natpt turn off tos natpt turn off traffic class Syntax natpt turn off traffic class undo natpt turn off traffic class View System view Parame...

Page 873: ...c command must be specified by the natpt prefix command in advance Example Use ACL 2000 to identify the source address of an IPv4 packet and add the NAT PT prefix 2001 to translate the source address...

Page 874: ...e different from the NAT PT prefix but it is recommended to be the same as the NAT PT prefix Example Configure the static mapping from the source IPv4 address 2 3 4 9 to the destination IPv6 address 2...

Page 875: ...tatic ipv6 address ipv4 address View System view Parameter ipv6 address Source IPv6 address to be mapped ipv4 address IPv4 address to which an IPv6 address is mapped Description Use the natpt v6bound...

Page 876: ...mic mappings reset natpt statistics Syntax reset natpt statistics View User view Parameter None Description Use the reset natpt statistics command to clear all NAT PT statistics information Example Cl...

Page 877: ...6 ipv6 address Syntax ipv6 address ipv6 address prefix length ipv6 address prefix length undo ipv6 address ipv6 address prefix length ipv6 address prefix length View Interface view Parameter ipv6 addr...

Page 878: ...nd to enable the device to automatically create a link local address for an interface Use the undo ipv6 address auto link local command to remove the automatically created link local address By defaul...

Page 879: ...nk local undo ipv6 address ipv6 address link local View Interface view Parameter ipv6 address IPv6 link local address The high order ten bits of an IPv6 link local address must be 1111111010 binary th...

Page 880: ...880 CHAPTER 67 DUAL STACK CONFIGURATION COMMANDS...

Page 881: ...ss By default no destination address is configured for the tunnel interface Note that The destination address of a tunnel interface is the address of the peer interface receiving packets and is usuall...

Page 882: ...ption Tunnel0 Interface The Maximum Transmit Unit is 64000 Internet Address is 10 1 2 1 24 Primary Encapsulation is TUNNEL aggregation ID not set Tunnel source 192 13 2 1 destination 192 13 2 2 Tunnel...

Page 883: ...figured in tunnel interface view is displayed If device does not support aggregation ID not set is displayed Tunnel source Source address of a tunnel destination Destination address of a tunnel Tunnel...

Page 884: ...nnel 2 Sysname Tunnel2 tunnel protocol ipv6 ipv6 Sysname Tunnel2 encapsulation limit 3 interface tunnel Syntax interface tunnel number Table 190 Description on fields of the display interface tunnel c...

Page 885: ...created you must create it before entering tunnel interface view A tunnel interface number has only local significance and therefore the same interface number or different interface numbers can be set...

Page 886: ...the undo source command to remove the configured source IP address By default no source address is configured for a tunnel interface Note that The source address of a tunnel interface is the address o...

Page 887: ...6 over IPv6 tunnel mpls te Sets the tunnel to an MPLS TE tunnel Description Use the tunnel protocol command to configure the tunnel type Use the undo tunnel protocol to restore the tunnel type to the...

Page 888: ...888 CHAPTER 68 TUNNELING CONFIGURATION COMMANDS...

Page 889: ...efault outgoing interface This command only applies to packets not finding a match in the routing table You can specify up to five default outgoing interfaces implementing load balancing based on data...

Page 890: ...ipv6 address undo apply ipv6 address default next hop ipv6 address View IPv6 policy based route view Parameter ipv6 address Default next hop Description Use the apply ipv6 address default next hop co...

Page 891: ...ply default output interface and apply ipv6 address default next hop Example Set a next hop of 1 1 for matched IPv6 packets Sysname system view Sysname ipv6 policy based route aa permit node 11 Sysnam...

Page 892: ...e interface type interface number View IPv6 policy based route view Parameter interface type interface number Specifies an interface Description Use the apply output interface command to set an outgoi...

Page 893: ...ased route IPv6 Policy based routing configuration information ipv6 policy based route abc Node 1 permit apply output interface Ethernet1 0 display ipv6 policy based route Syntax display ipv6 policy b...

Page 894: ...routing configuration information Sysname display ipv6 policy based route setup local Local policy based routing configuration information ipv6 policy based route test Node 6 permit if match acl6 200...

Page 895: ...denied 0 forwarded 0 if match acl6 Syntax if match acl6 acl6 number undo if match acl6 View IPv6 policy based route view Parameter acl6 number IPv6 ACL number in the range 2000 to 3999 The number of...

Page 896: ...et length match rule Use the undo if match packet length command to remove the match rule Related command if match acl6 Example Match the IPv6 packets with a length from 100 to 200 bytes Sysname syste...

Page 897: ...able IPv6 policy routing and reference a policy on the interface Use the undo ipv6 policy based route command to disable interface policy routing IPv6 interface policy routing is disabled by default R...

Page 898: ...es The if match clauses define the match rules for the node and the apply clauses define the actions that should be taken for matched packets Note that There is an AND relationship between the if matc...

Page 899: ...configure the teardown time in terminal template view With this function enabled if a terminal is disconnected from the router the terminal enters the state of DOWN and the router will automatically...

Page 900: ...ablishment time to 10 seconds Sysname system view Sysname rta template abc Sysname rta template abc auto link 10 bind vpn instance Syntax bind vpn instance vpn name undo bind vpn instance View Termina...

Page 901: ...router and the FEP The supported encryption algorithm is AES advanced encryption standard and the supported key length is 128 bit Example Enable the data encryption between the router and the FEP Sysn...

Page 902: ...delay A router configured with data send delay begins to send the data received from a terminal to an FEP after the configured data send delay time expires Example Set the data send delay time to 50 m...

Page 903: ...nt or RTC server APP Name Application name It defaults to null APP State Application state Kept Linking Linked Disconnect meaning respectively not connected being connected connected disconnected Remo...

Page 904: ...1 TTY indicates the terminal access type and 1 the terminal number Interface Used Physical interface corresponding to the terminal number Current State Current terminal state Down OK and Menu respect...

Page 905: ...remote data Receive Buffer Head Receive buffer head Receive Buffer Tail Receive buffer tail VTY APP Type State VTY list configured on the terminal VTY represents VTY number APP represents application...

Page 906: ...stablished Terminal receive buffer is the buffer used on a router to store terminal data Example Configure not to clear the terminal receive buffer after the TCP connection is established Sysname syst...

Page 907: ...e timeout Syntax idle timeout seconds undo idle timeout View Terminal template view Parameters seconds Connection idle timeout time in seconds ranging 10 to 3 600 Description Use the idle timeout comm...

Page 908: ...n Note The ASCII value of the hotkey must be different from that of any other hotkey configured on the device Otherwise hotkey conflicts will occur For example the hotkey value cannot be set to 17 or...

Page 909: ...r example Start terminals support E 8Q E 9Q E 10Q E 11Q E 12Q and E 13Q Example Configure a menu screencode of E 10Q Sysname system view Sysname rta template abc Sysname rta template abc menu screenco...

Page 910: ...acters on the terminal Use the undo print information command to disable the router from printing characters on the terminal By default the router can print characters on the terminal You can use this...

Page 911: ...l template view Parameters chinese Prints prompt information in Chinese english Prints prompt information in English Description Use the print language command to set the language of the printed promp...

Page 912: ...of any other hotkey configured on the device Otherwise hotkey conflicts will occur For example the hotkey value cannot be set to 17 or 19 because these two values are used for the hotkeys of flow cont...

Page 913: ...hotkey is configured After you press the terminal reset hotkey when a terminal fault occurs the router tears down and then reestablishes the TCP connection with the FEP Note that the ASCII value of th...

Page 914: ...ction is established otherwise no connection can be established between the router and the FEP n Only a MAC address or a character string can be configured at a time and the latest configured one take...

Page 915: ...command to disable terminal access By default terminal access is disabled on the router Note that after terminal access is disabled the settings of template terminal and VTY will be kept Example Enabl...

Page 916: ...blished for this address to take effect Example Set the global TCP connection source IP address to 1 1 1 1 Sysname system view Sysname rta source ip 1 1 1 1 rta template Syntax rta template template n...

Page 917: ...nterfaces This command can be configured on a synchronous asynchronous serial interface only when the interface operates in the asynchronous mode Example Apply the terminal template abc with the termi...

Page 918: ...eshold specifies the maximum data in bytes that the send buffer can store Example Set the terminal send buffer threshold to 1 000 bytes Sysname system view Sysname rta template abc Sysname rta templat...

Page 919: ...stem view Sysname rta template abc Sysname rta template abc tcp recvbuf size 512 Set the TCP send buffer size to 512 bytes Sysname system view Sysname rta template abc Sysname rta template abc tcp sen...

Page 920: ...ivity test hotkey as Alt A namely 1 96 13 Sysname system view Sysname rta template abc Sysname rta template abc testkey 1 96 13 update changed config Syntax update changed config View Terminal templat...

Page 921: ...ion information of VTY 1 to chuxu Sysname system view Sysname rta template abc Sysname rta template abc vty 1 description chuxu vty hotkey Syntax vty vty number hotkey ascii code 1 3 undo vty vty numb...

Page 922: ...abc Sysname rta template abc vty 1 hotkey 1 vty password Syntax vty vty number password simple cipher string undo vty vty number password View Terminal template view Parameters vty number VTY number r...

Page 923: ...cified VTY Note that after this configuration no more Telnet VTYs TTY VTYs or RTC server VTYs can be configured in the template of the VTY Related command rta rtc server listen port and vty rtc server...

Page 924: ...string Terminal screen code a string of 1 to 15 characters Description Use the vty screencode command to set the screen code for triggering screen saving Use the undo vty screencode command to cancel...

Page 925: ...remote command to create a VTY for Telnet terminal access Use the undo vty command to remove the specified VTY Note that after this configuration no more RTC client VTYs or RTC server VTYs can be conf...

Page 926: ...ty switch priority command to configure the RTC server to perform VTY switching based on priority Use the undo vty switch priority command to restore the default setting By default the VTY switching i...

Page 927: ...switching is performed Note that this command takes effect only in RTC client terminal access After this configuration when an RTC client needs to initiate a connection to an RTC server it first init...

Page 928: ...928 CHAPTER 70 TERMINAL ACCESS CONFIGURATION COMMANDS...

Page 929: ...When bandwidth based load sharing is disabled the packets are forwarded through all these interfaces in turn When bandwidth based load sharing is enabled the device calculates the packet forwarding p...

Page 930: ...the routing table Use the display ip routing table verbose command to display detailed information about all routes in the routing table Examples Display brief information about active routes in the r...

Page 931: ...D 0x0 Label NULL State Active Adv Age 00h00m30s Tag 0 Destination 10 1 1 1 32 Protocol Direct Process ID 0 Preference 0 Cost 0 NextHop 127 0 0 1 Interface InLoopBack0 RelyNextHop 0 0 0 0 Neighbour 0 0...

Page 932: ...le acl acl number verbose View Any view Parameters acl number Basic ACL number in the range of 2000 to 2999 Table 203 Description on the fields of the display ip routing table verbose command Field De...

Page 933: ...c 2000 rule deny source any Display brief information about active routes permitted by basic ACL 2000 Sysname acl basic 2000 display ip routing table acl 2000 Routes Matched by Access list 2000 Summar...

Page 934: ...0x0 Label NULL State Active NoAdv Age 00h05m42s Tag 0 Destination 10 1 3 0 24 Protocol Direct Process ID 0 Preference 0 Cost 0 NextHop 10 1 3 1 Interface Eth1 1 RelyNextHop 0 0 0 0 Neighbour 0 0 0 0 T...

Page 935: ...stination is found For details refer to IS IS Configuration Commands on page 1037 and Multicast Routing and Forwarding Configuration Commands on page 1327 Int The route was discovered by an Internal G...

Page 936: ...table ip address mask The system ANDs the input destination IP address with the input subnet mask and ANDs the destination IP address in each route entry with the input subnet mask If the two operati...

Page 937: ...Count 1 Destination Mask Proto Pre Cost NextHop Interface 11 1 1 0 24 Static 60 0 0 0 0 0 NULL0 Display route entries by specifying a destination IP address and mask Sysname display ip routing table...

Page 938: ...for the follow up display of routing policies If the specified prefix list is not configured detailed information about all routes with the verbose keyword or brief information about all active routes...

Page 939: ...isis ospf rip or static inactive Displays only inactive routes With this argument absent the command displays information about both active and inactive routes verbose Displays detailed routing inform...

Page 940: ...or a VPN instance The VPN instance name is a string of 1 to 31 characters Description Use the display ip routing table statistics command to display statistics about the public network routing table o...

Page 941: ...p relay tunnel Syntax display ip relay tunnel View Any view Parameters None Description Use the display ip relay tunnel command to display recursive tunnel information deleted Number of routes marked...

Page 942: ...me destination network Nexthop Packet s Bandwidth KB Flow s Interface 10 1 1 2 763851 100000 0 Ethernet0 0 0 10 1 2 2 1193501 155000 0 Atm1 0 0 10 1 3 2 15914 2048 0 Serial2 0 0 display ipv6 routing t...

Page 943: ...iew Parameters acl6 number Basic IPv6 ACL number in the range 2000 to 2999 Verbose Displays both active and inactive verbose routing information permitted by the ACL Without this keyword only brief ac...

Page 944: ...e specified destination IPv6 address Executing the command with different parameters yields different output display ipv6 routing table ipv6 address prefix length The system ANDs the input destination...

Page 945: ...y ipv6 routing table ipv6 address1 ipv6 address2 Syntax display ipv6 routing table ipv6 address1 prefix length1 ipv6 address2 prefix length2 verbose View Any view Parameters ipv6 address1 ipv6 address...

Page 946: ...itted by the IPv6 prefix list abc2 Sysname display ipv6 routing table ipv6 prefix abc2 Routes Matched by Prefix list abc Summary Count 1 Destination 100 64 Protocol Static NextHop Preference 60 Interf...

Page 947: ...ics command to display routing statistics including total route number added route number and deleted route number Examples Display routing statistics Sysname display ipv6 routing table statistics Pro...

Page 948: ...RelayNextHop Tag 0H Neighbour ProcessID 0 Interface InLoopBack0 Protocol Direct State Active NoAdv Cost 0 Tunnel ID 0x0 Label NULL Age 22161sec display ipv6 relay route Syntax display ipv6 relay route...

Page 949: ...fields of the display ipv6 relay route command Field Description Total Number of Relay route Total number of recursive routes Dest Mask Destination address mask of the recursive route Related instance...

Page 950: ...address mask mask length reset load sharing statistics all View User view Parameters ip address Destination IP address in dotted decimal notation mask IP address mask in dotted decimal notation mask...

Page 951: ...the routing statistics of the specified routing protocol in the IPv6 routing table At present this argument can be bgp direct is is ospf rip or static Description Use the reset ip routing table statis...

Page 952: ...952 CHAPTER 71 IP ROUTING TABLE COMMANDS Examples Clear the routing statistics of all the routing protocols in the routing table Sysname reset ipv6 routing table statistics protocol all...

Page 953: ...te policy name Sets the attributes of the summary route according to the routing policy the name of which is a string of 1 to 19 characters detail suppressed Only advertises the summary route suppress...

Page 954: ...d balancing in the range 1 to 8 When it is set to 1 no load balancing is available Description Use the balance command to configure the number of BGP routes for load balancing Use the undo balance com...

Page 955: ...BGP VPN instance view Syntax bestroute as path neglect undo bestroute as path neglect View BGP view BGP VPN instance view Parameters None Description Use the bestroute as path neglect command to conf...

Page 956: ...Sysname bgp 100 Sysname bgp bestroute compare med In BGP VPN instance view enable the comparison of MED for paths from each AS when selecting the best route The VPN has been created Sysname system vie...

Page 957: ...been created Sysname system view Sysname bgp 100 Sysname bgp ipv4 family vpn instance vpn1 Sysname bgp vpn1 bestroute med confederation bgp Syntax bgp as number undo bgp as number View System view Pa...

Page 958: ...stem view Sysname bgp 100 Sysname bgp ipv4 family vpn instance vpn1 Sysname bgp vpn1 compare different as med confederation id Syntax confederation id as number undo confederation id View BGP view Par...

Page 959: ...ration nonstandard undo confederation nonstandard View BGP view Parameters None Description Use the confederation nonstandard command to make the router compatible with routers not compliant with RFC3...

Page 960: ...as number list argument is used all confederation peer sub ASs are removed Related commands confederation nonstandard and confederation id Examples Specify confederation peer sub ASs 2000 and 2001 Sys...

Page 961: ...mmand to disable route dampening By default no route dampening is configured The command dampens only EBGP routes rather than IBGP routes Related commands reset bgp dampening reset bgp flap info displ...

Page 962: ...7295 The larger the value is the higher the preference is Description Use the default local preference command to configure the default local preference Use the undo default local preference command t...

Page 963: ...same the system first selects the route with the smallest MED as the best external route Examples In BGP view configure the default MED as 25 Sysname system view Sysname bgp 100 Sysname bgp default me...

Page 964: ...to 47 characters Description Use the display bgp group command to display the information of the peer group Examples Display the information of the peer group aaa Sysname display bgp group aaa BGP pee...

Page 965: ...Value Preferred value of the routes from the peer No routing policy is configured No routing policy is configured for the peer Members Detailed information of the members in the peer group Peer IPv4 a...

Page 966: ...sk Mask Route policy Routing policy Short cut Short cut route Table 216 Description on the fields of the display bgp network command Field Description Table 217 Description on the fields of the displa...

Page 967: ...sh capability Address family IPv4 Unicast advertised and received Received Total 5 messages Update messages 1 Sent Total 4 messages Update messages 0 Maximum allowed prefix number 4294967295 Threshold...

Page 968: ...l Path Ogn 40 40 40 0 24 20 20 20 1 0 200 300i Peer optional capabilities Optional capabilities supported by the peer including BGP multiple extension and routing refresh Address family IPv4 Unicast R...

Page 969: ...learned through EGP incomplete learned by other means Network Destination network address Next Hop Next hop IP address MED MULTI_EXIT_DISC attribute LocPrf Local preference value PrefVal Preferred va...

Page 970: ...1 BGP Local router ID is 2 2 2 2 Status codes valid best d damped h history i internal s suppressed S Stale Origin i IGP e EGP incomplete Network NextHop MED LocPrf PrefVal Path Ogn 10 1 5 0 24 10 1...

Page 971: ...splays the exactly matched routes Description Use the display bgp routing community command to display BGP routing information with the specified BGP community Examples Display routing information wit...

Page 972: ...3 3 3 0 30 1 2 3 4 0 4 4 0 0 20 1 2 3 4 0 4 5 6 0 26 1 2 3 4 0 BGP Local router ID is 30 30 30 1 Status codes valid best d damped h history i internal s suppressed S Stale Origin i IGP e EGP incomple...

Page 973: ...euse Value 750 HalfLife Time in second 900 Suppress Limit 2000 display bgp routing table different origin as Syntax display bgp routing table different origin as View Any view Parameters None Table 22...

Page 974: ...ask length longer match View Any view Parameters as regular expression Displays route flap information that matches the AS path regular expression as path acl number Displays route flap information ma...

Page 975: ...lay bgp routing table peer command to display BGP routing information advertised to or received from the specified BGP peer Related commands display bgp peer Examples Display BGP routing information a...

Page 976: ...codes valid best d damped h history i internal s suppressed S Stale Origin i IGP e EGP incomplete Network NextHop MED LocPrf PrefVal Path Ogn 40 40 40 0 24 30 30 30 1 0 0 300i Refer to Table 219 for...

Page 977: ...family vpn instance vpn1 Sysname bgp vpn1 ebgp interface sensitive filter policy export BGP BGP VPN instance view Syntax filter policy acl number ip prefix ip prefix name export direct isis process i...

Page 978: ...Sysname bgp 100 Sysname bgp filter policy 2000 export In BGP VPN instance view reference ACL 2000 to filter all outgoing redistributed routes the VPN has been created Sysname system view Sysname bgp 1...

Page 979: ...BGP Graceful Restart capability Use the undo graceful restart command to disable BGP Graceful Restart capability By default BGP Graceful Restart capability is disabled n When a GR capable BGP speaker...

Page 980: ...ew Parameters timer Time to wait for the End of RIB marker in the range 3 to 300 seconds Description Use the graceful restart timer wait for rib command to configure the time to wait for the End of RI...

Page 981: ...number 200 and add EBGP peers 10 1 1 1 and 10 1 2 1 into the group the VPN has been created Sysname system view Sysname bgp 100 Sysname bgp ipv4 family vpn instance vpn1 Sysname bgp vpn1 group test e...

Page 982: ...d is incomplete Examples In BGP view redistribute routes from RIP Sysname system view Sysname bgp 100 Sysname bgp import route rip In BGP VPN instance view redistribute routes from RIP the VPN has bee...

Page 983: ...cy applied to the route The name is a string of 1 to 19 characters Description Use the network command to inject a network to the local BGP routing table Use the undo network command to remove a netwo...

Page 984: ...munity list if match community apply community Examples In BGP view advertise the community attribute to peer group test Sysname system view Sysname bgp 100 Sysname bgp peer test advertise community I...

Page 985: ...BGP BGP VPN instance view Syntax peer group name ip address allow as loop number undo peer group name ip address allow as loop View BGP view BGP VPN instance view Parameters group name Name of a peer...

Page 986: ...er of the peer or peer group in the range 1 to 65535 Description Use the peer as number command to specify the AS number for a peer peer group Use the undo peer as number command to delete the AS numb...

Page 987: ...ng is configured Related commands ip as path acl if match as path and apply as path Examples In BGP view reference the AS path ACL 1 to filter routes outgoing to the peer group test Sysname system vie...

Page 988: ...r group name ip address capability advertise route refresh View BGP view BGP VPN instance view Parameters group name Name of a peer group a string of 1 to 47 characters ip address IP address of a peer...

Page 989: ...e BGP connections to another BGP router you need to specify on the local router the respective source interfaces for establishing TCP connections to the peers on the peering BGP router because the loc...

Page 990: ...s available in the routing table Examples In BGP view advertise a default route to peer group test Sysname system view Sysname bgp 100 Sysname bgp peer test default route advertise In BGP VPN instance...

Page 991: ...eer test description ISP1 peer ebgp max hop BGP BGP VPN instance view Syntax peer group name ip address ebgp max hop hop count undo peer group name ip address ebgp max hop View BGP view BGP VPN instan...

Page 992: ...ption Use the peer enable command to enable the specified peer Use the undo peer enable command to disable the specified peer By default the BGP peer is enabled If a peer is disabled the router will n...

Page 993: ...eer test fake as 200 peer filter policy BGP BGP VPN instance view Syntax peer group name ip address filter policy acl number export import undo peer group name ip address filter policy acl number expo...

Page 994: ...s group name Name of a peer group a string of 1 to 47 characters ip address IP address of a peer as number AS number of the peer in the range 1 to 65535 Description Use the peer group command to add a...

Page 995: ...related routing information For a peer group this means all sessions with the peer group will be tore down Examples In BGP view disable session establishment with peer 10 10 10 10 Sysname system view...

Page 996: ...up test the VPN has been created Sysname system view Sysname bgp 100 Sysname bgp ipv4 family vpn instance vpn1 Sysname bgp vpn1 peer test ip prefix list1 export peer keep all routes BGP BGP VPN instan...

Page 997: ...and to enable the logging of session state and event information for a specified peer or peer group Use the undo peer log change command to remove the configuration The logging is enabled by default E...

Page 998: ...r group test to the router itself the VPN has been created Sysname system view Sysname bgp 100 Sysname bgp ipv4 family vpn instance vpn1 Sysname bgp vpn1 peer test next hop local peer password Syntax...

Page 999: ...ssword simple aabbcc In BGP VPN instance view perform MD5 authentication on the TCP connection set up between the local router 10 1 100 1 and the peer router 10 1 100 2 the VPN has been created Sysnam...

Page 1000: ...ied in the routing policy is zero the routes matching it will also use the value set with the command For information about using a routing policy to set a preferred value refer to peer group BGP BGP...

Page 1001: ...em view Sysname bgp 100 Sysname bgp ipv4 family vpn instance vpn1 Sysname bgp vpn1 peer test public as only peer reflect client BGP BGP VPN instance view Syntax peer group name ip address reflect clie...

Page 1002: ...outes that can be received from a peer peer group Use the undo peer route limit command to restore the default The number is unlimited by default Examples In BGP view set the number of routes that can...

Page 1003: ...policy Refer to route policy on page 1205 and if match interface on page 1200 Examples In BGP view apply routing policy test policy to routes outgoing to peer group test Sysname system view Sysname bg...

Page 1004: ...ysname bgp ipv4 family vpn instance vpn1 Sysname bgp vpn1 peer test as number 100 Sysname bgp vpn1 peer test route update interval 10 peer substitute as BGP BGP VPN instance view Syntax peer group nam...

Page 1005: ...peer or peer group Use the undo peer timer command to restore the default By default the keepalive and holdtime are 60s and 180s respectively Note that The timer configured with this command is prefer...

Page 1006: ...out the default value applies Description Use the preference command to configure preferences for external internal and local routes Use the undo preference command to restore the default For external...

Page 1007: ...luster id cluster id undo reflector cluster id View BGP view Parameters cluster id Cluster ID of the route reflector an integer from 1 to 4294967295 the integer is translated into an IP address by the...

Page 1008: ...the refresh bgp command to perform soft reset on specified BGP connections Using this function can refresh the BGP routing table without tearing down BGP connections and apply a newly configured routi...

Page 1009: ...ew Parameters ip address Destination IP address of a route mask Mask in dotted decimal notation mask length Mask length in the range 0 to 32 Description Use the reset bgp dampening command to clear ro...

Page 1010: ...tistics of all routes matching AS path ACL 10 Sysname reset bgp flap info as path acl 10 reset bgp ipv4 all Syntax reset bgp ipv4 all View User view Parameters None Description Use the reset bgp ipv4...

Page 1011: ...mmary automatic Syntax summary automatic undo summary automatic View BGP view BGP VPN instance view Parameters None Description Use the summary automatic command to enable automatic summarization for...

Page 1012: ...e AS know the latest routing information When a BGP router receives an IBGP route it checks only whether the next hop is reachable by default If the synchronization is enabled the IBGP route is synchr...

Page 1013: ...l the BGP peers while it becomes valid only after the corresponding BGP connections are reset Related commands peer timer BGP BGP VPN instance view Examples Configure keepalive interval and holdtime i...

Page 1014: ...1014 CHAPTER 72 BGP CONFIGURATION COMMANDS...

Page 1015: ...nd to disable all BGP debugging By default all BGP debugging is disabled Note the following This command enables all BGP debugging which may cause heavy traffic and affect system performance therefore...

Page 1016: ...CAP Type 1 Multiprotocol CAP Len 4 IPv4 UNC 1 1 CAP Type 2 RouteRefresh CAP Len 0 Total CAPB Len 8 Total OPT Len 10 Total Message Len 39 Aug 24 15 32 02 630 2006 Sysname RM 6 RMDEBUG BGP 10 1 1 2 Stat...

Page 1017: ...Use the debugging bgp detail command to enable detailed debugging for BGP Use the undo debugging bgp detail command to disable detailed debugging for BGP Enabling debugging may affect system performa...

Page 1018: ...eters ipv4 address IPv4 address of a peer ipv6 address IPv6 address of a peer Description Use the debugging bgp event command to enable event debugging for BGP Use the undo debugging bgp event command...

Page 1019: ...State is changed from CONNECT to ACTIVE Aug 24 14 12 13 706 2006 Sysname RM 6 RMDEBUG BGP 10 1 1 2 State is changed from ACTIVE to OPENSENT Aug 24 14 12 13 706 2006 Sysname RM 6 RMDEBUG BGP 10 1 1 2 C...

Page 1020: ...debugging once the debugging operation is complete By default this debugging is disabled Examples Enable BGP GR event debugging on the BGP GR Helper when the neighbor performs an active standby switch...

Page 1021: ...bugging route refresh Enables BGP Route Refresh message debugging receive Enables the debugging for received BGP packets send Enables the debugging for sent BGP packets verbose Displays detailed debug...

Page 1022: ...n 8 Total OPT Len 10 Total Message Len 39 Information about the sent BGP Open message 0 2683500 4945 RM 6 RMDEBUG BGP 11 1 1 2 Recv OPEN Length 39 Version 4 Local AS 200 HoldTime 180 BGP ID 192 168 74...

Page 1023: ...th following destinations Update message length 53 MED 0 Origin Incomplete AS Path 200 Next Hop 11 1 1 2 222 1 1 1 32 Information about the received BGP Update of a redistributed static route Device A...

Page 1024: ...command only when necessary and disable debugging once the debugging operation is complete Examples Configure BGP on Device A and specify BGP peer 2 2 2 2 Device B On Device B which is connected to De...

Page 1025: ...ebugging for received BGP packets send Enables the debugging for sent BGP packets verbose Displays detailed debugging information Description Use the debugging bgp update command to enable debugging f...

Page 1026: ...Enables disables debugging for sent BGP updates verbose Displays detailed debugging information Description Use the debugging bgp update ipv4 command to enable debugging for BGP Update messages Use th...

Page 1027: ...ate message length 56 Local Pref 100 MED 0 Origin Incomplete AS Path Next Hop 11 1 1 2 2 2 2 2 32 Sep 4 16 08 37 304 2006 Sysname RM 6 RMDEBUG BGP Recv UPDATE from 11 1 1 2 with following destinations...

Page 1028: ...ystem performance therefore use this command only when necessary and disable debugging once the debugging operation is complete By default this debugging is disabled Examples Device A and Device B hav...

Page 1029: ...t Level 1 Monitor level Parameters peer ipv4 address group name Enables disables BGP L2VPN Update message debugging for the specified peer peer group receive Enables disables the debugging for receive...

Page 1030: ...et 0 label base 8192 Update messages in an L2VPN environment debugging bgp update label route Syntax debugging bgp update label route peer ipv4 address group name acl acl number ip prefix ip prefix na...

Page 1031: ...n enabled on the connected interfaces Enable debugging for BGP labeled route update messages Sysname debugging bgp update route label Sep 4 16 14 32 16 2006 Sysname RM 6 RMDEBUG BGP Send UPDATE to pee...

Page 1032: ...lters the output message debugging information with the specified IP prefix list receive Enables disables the debugging for the received BGP packets send Enables disables the debugging for the sent BG...

Page 1033: ...ndo debugging bgp update vpls command to disable debugging for BGP VPLS Update messages By default this debugging is disabled Enabling debugging may affect system performance therefore use this comman...

Page 1034: ...l Parameters vpn instance name Enables disables the BGP update message debugging for the specified VPN instance ip prefix ip prefix name Filters the output message debugging information with the speci...

Page 1035: ...command to enable debugging for BGP VPNv4 Update messages Use the undo debugging bgp update vpnv4 command to disable debugging for BGP VPNv4 Update messages By default this debugging is disabled Enabl...

Page 1036: ...with following destinations Update message length 92 Local Pref 100 MED 0 Ext Community 1 1 Origin Incomplete AS Path Next Hop 2 2 2 2 111 2 2 2 32 RD 100 2 Label 1024 Sep 4 16 14 33 164 2006 Sysname...

Page 1037: ...cifies the system to check the configuration for the corresponding field of OSI in LSP n Whether a password should use ip or osi is not affected by the actual network environment Description Use the a...

Page 1038: ...preference of interface cost set by the auto cost command is lower than that set by the circuit cost command The preference from high to low is the cost set by the isis cost command the global cost se...

Page 1039: ...nterface bandwidth is in the range of 1 M to 10 M the interface cost is 60 if the interface bandwidth is in the range of 11 M to 100 M the interface cost is 50 if the interface bandwidth is in the ran...

Page 1040: ...wide wide compatible compatible narrow compatible relax spf limit undo cost style View IS IS view Parameters narrow Specifies to receive and send only packets of narrow cost style The narrow cost rang...

Page 1041: ...2 Specifies the level of the default route as Level 2 level 1 2 Specifies the level of the default route as Level 1 2 n If no level is specified a Level 2 default route is generated Description Use t...

Page 1042: ...isplay isis brief ISIS 1 Protocol Brief Information network entity 10 0000 0000 0001 00 is level level 1 2 cost style narrow preference 15 Lsp length receive 1497 Lsp length originate level 1 1497 lev...

Page 1043: ...sis graceful restart status level 1 level 2 process id vpn instance vpn instance name View Any view Parameters level 1 Displays the IS IS Level 1 Graceful Restart state level 2 Displays the IS IS Leve...

Page 1044: ...mation verbose Displays IS IS interface detail information tunnel Displays IS IS tunnel information process id IS IS process ID in the range of 1 to 65535 vpn instance name VPN instance name a string...

Page 1045: ...ddress 0000 5e19 6d00 IP Address 192 168 0 1 Secondary IP Address es IPV6 Link Local Address IPV6 Global Address es Csnp Timer Value L1 10 L2 10 Hello Timer Value L1 40 L2 10 Hello Multiplier Value L1...

Page 1046: ...Resource 1 1024 500 0 Max Paths Resource 1 6 3 0 Max IPv4 Rt Resource 400000 400000 400000 0 Max IPv6 Rt Resource 400000 400000 400000 0 ISIS Core License Values ________________________ Feature Name...

Page 1047: ...instance name a string of 1 to 31 characters Table 236 Description on the fields of the display isis license command Field Description ISIS Shell License Values License values of ISIS shell Feature Na...

Page 1048: ...nstance vpn instance name View Any view Parameters process id Specifies an IS IS process ID in the range of 1 to 65535 vpn instance name Specifies a VPN instance name in the range of 1 to 31 character...

Page 1049: ...les Configure a name for the local IS IS system Sysname system view Sysname isis Sysname isis 1 is name RUTA Configure a static mapping for the remote IS IS system 0000 0000 0041 Sysname isis 1 is nam...

Page 1050: ...s IP address Examples Display detailed IS IS neighbor information Sysname display isis peer verbose Peer information for ISIS 1 System Id 0000 0000 0003 Interface Ethernet1 0 Circuit Id 0000 0000 0003...

Page 1051: ...SIS 1 ISIS 1 IPv4 Level 1 Forwarding Table IPV4 Destination IntCost ExtCost ExitInterface NextHop Flags 12 12 12 0 24 10 NULL Eth0 1 0 Direct D L 24 24 24 0 24 20 NULL Eth0 1 0 12 12 12 2 R L 2 2 2 2...

Page 1052: ...0 L1 IS_SPFTRIG_PERIODIC 2 0 13 55 43 L2 IS_SPFTRIG_PERIODIC 2 0 13 55 43 L1 IS_SPFTRIG_PERIODIC 2 0 11 54 12 L2 IS_SPFTRIG_PERIODIC 2 0 11 54 12 L1 IS_SPFTRIG_PERIODIC 2 0 12 7 24 L2 IS_SPFTRIG_PERIO...

Page 1053: ...process including the number of routes learned from other IS IS routers the number of routes redistributed from other protocols and the number of LSP generated locally Examples Display IS IS statisti...

Page 1054: ...such as user918 A cipher password must be a string of 24 characters such as _ TT8F Y5SQ Q MAF4 1 ip Specifies to check the IP related fields in a LSP Table 242 Description on the fields of the displa...

Page 1055: ...ng packets Sysname system view Sysname isis Sysname isis 1 domain authentication mode simple 123456 filter policy export IS IS view Syntax filter policy acl number ip prefix ip prefix name route polic...

Page 1056: ...y redistributed routing information satisfying certain conditions can be advertised You can use the filter policy command to reference filtering conditions Related commands filter policy import IS IS...

Page 1057: ...View IS IS view Parameters flood count flooding count Specifies the maximum number of LSPs to be sent in the fast flooding process ranging from 1 to 15 The default is 5 max timer interval flooding in...

Page 1058: ...By default IS IS Graceful Restart capability is disabled Examples Enable the Graceful Restart capability for IS IS process 1 Sysname system view Sysname isis 1 Sysname isis 1 graceful restart gracefu...

Page 1059: ...in the network Copies of LSPs in the LSP databases in other routers which may look newer than LSPs generated by the restarting router after it initializes LSP fragment sequence numbers This may resul...

Page 1060: ...area the external type indicates the cost of routes between areas The type is external by default The keywords are valid only when the cost type is narrow narrow compatible or compatible level 1 Redis...

Page 1061: ...er redistributed routes a string of 1 to 19 characters route policy route policy name Specifies the name of a routing policy that is used to filter redistributed routes a string of 1 to 19 characters...

Page 1062: ...on each interface that needs to run the IS IS process Related commands isis enable network entity Examples Enable IS IS routing process 1 with the system ID being 0000 0000 0002 and area ID being 01 0...

Page 1063: ...r the password applies to both Level 1 and Level 2 and the system checks the OSI related fields in a LSP Related commands area authentication mode domain authentication mode n The level 1 and level 2...

Page 1064: ...2 0 is connected to a non backbone router in the same area Configure the link adjacency level of serial 2 0 as Level 1 to prevent sending and receiving Level 2 Hello packets Sysname system view Sysna...

Page 1065: ...se the isis cost command to set the link cost of an interface for SPF calculation Use the undo isis cost command to restore the default No cost is configured by default If neither level 1 nor level 2...

Page 1066: ...level 1 level 2 undo isis dis priority level 1 level 2 View Interface view Parameters value Specifies a priority for DIS selection from 0 to 127 The default is 64 level 1 Applies the DIS selection pri...

Page 1067: ...on each interface that needs to run the IS IS process Related commands isis network entity Examples Create IS IS routing process 1 and enable it on the Serial2 0 interface Sysname system view Sysname...

Page 1068: ...ew Examples Add the frame relay subinterface Serial2 1 1 to the mesh group 3 Sysname system view Sysname interface serial 2 1 Sysname Serial2 1 link protocol fr Sysname Serial2 1 quit Sysname interfac...

Page 1069: ...ello packets n The feature is not supported on the loopback interface Examples Disable Serial 2 0 from sending and receiving hello packets Sysname system view Sysname interface serial 2 0 Sysname Seri...

Page 1070: ...he interval for sending CSNP packets over broadcast network Use the undo isis timer csnp command to restore the default The default CSNP interval is 10 seconds n If no level is specified the CSNP inte...

Page 1071: ...ctively The point to point link however does not distinguish so you need not specify intervals respectively As the shorter the interval is the more system resources will be occupied you should configu...

Page 1072: ...djust the Holddown time by changing either the hello interval or the number of Hello intervals on an interface Related commands isis timer hello Examples Configure the number of Level 2 Hello interval...

Page 1073: ...imer retransmit command to configure the interval for retransmitting LSP packets over point to point link Use the undo isis timer retransmit command to restore the default of 5s You need not use this...

Page 1074: ...r Level 1 or Level 2 if there is only one area because there is no need for all routers to maintain two identical databases at the same time In this case you are recommended to configure all the route...

Page 1075: ...to remove the configuration By default no name is configured for a remote IS Examples Map the name RUTB to the remote IS 0000 0000 0041 Sysname system view Sysname isis Sysname isis 1 is name map 0000...

Page 1076: ...jacency state changes Sysname system view Sysname isis Sysname isis 1 log peer change lsp fragments extend Syntax lsp fragments extend level 1 level 2 level 1 2 mode 1 mode 2 undo lsp fragments extend...

Page 1077: ...isis Sysname isis 1 lsp fragments extend mode 1 level 2 lsp length originate Syntax lsp length originate size level 1 level 2 undo lsp length originate level 1 level 2 View IS IS view Parameters size...

Page 1078: ...iew Sysname isis Sysname isis 1 lsp length receive 1024 maximum load balancing IS IS view Syntax maximum load balancing number undo maximum load balancing View IS IS view Parameters number Maximum num...

Page 1079: ...The second part is the router s 6 byte system ID which is unique within the whole area and backbone area The third part is the 1 byte SEL that must be 00 Generally a router needs one NET In the case...

Page 1080: ...eference of IS IS protocol as 25 Sysname system view Sysname isis Sysname isis 1 preference 25 reset isis all Syntax reset isis all process id vpn instance vpn instance name View User view Parameters...

Page 1081: ...set overload on startup start from nbr system id timeout nbr timeout allow interlevel external undo set overload View IS IS view Parameters on startup Specifies to start the overload tag timeout timer...

Page 1082: ...ing Examples Set overload flag on the current router Sysname system view Sysname isis Sysname isis 1 set overload spf slice size Syntax spf slice size duration time undo spf slice size View IS IS view...

Page 1083: ...to summarize only the routes redistributed to Level 1 area level 1 2 Specifies to summarize all the routes redistributed to the Level 1 and Level 2 areas level 2 Specifies to summarize only the routes...

Page 1084: ...ration command to restore the default By default the LSP generation interval is 2 seconds n If only the maximum interval is specified this maximum interval is the LSP generation interval If both the m...

Page 1085: ...5535 Description Use the timer lsp max age command to set the LSP maximum aging time for the current router Use the undo timer lsp max age command to restore the default The default is 1200 seconds A...

Page 1086: ...er spf View IS IS view Parameters maximum interval Specifies the maximum interval in seconds for SPF calculations ranging from 1 to 120 minimum interval Specifies the minimum interval in milliseconds...

Page 1087: ...tual system id undo virtual system virtual system id View IS IS view Parameters virtual system id Virtual system ID of the IS IS process Description Use the virtual system command to configure a virtu...

Page 1088: ...1088 CHAPTER 74 IS IS CONFIGURATION COMMANDS...

Page 1089: ...al error graceful restart ha events interface information memory allocating miscellaneous errors receiving packet content self originate update sending packet content snp packet spf event spf summary...

Page 1090: ...tion summary spf timer Enables debugging for IS IS route calculation triggers task error Enables debugging for IS IS task errors timer Enables IS IS timer debugging traffic eng Enables debugging for I...

Page 1091: ...rc Type circuitType The received hello packet was rejected because the interface type point to point is wrong circuitName Interface name circuitType Interface type which can be L1 L2 or L12 helloType...

Page 1092: ...nterface name helloType Level Mismatch Local Level circuitLevel Packet type mismatch helloType Hello packet type LAN L1 LAN L2 or P2P circuitLevelI Current level of the link It can be L1 L2 or L12 hel...

Page 1093: ...interface IP of the IS ISv6 enabled interface is down CIRC Circ Up not processed Circuit already up The interface is already UP therefore no more interface UP requests are processed CIRC Circ Down no...

Page 1094: ...d Description UPDT PDU length mismatch in SNP RecLen d EncodeLen d SNP packet length mismatch RECV PDU length mismatch in Hello PDU RecLen d EncodeLen d Hello packet length mismatch PROT ERR Wrong P2P...

Page 1095: ...moothing HSB SMOOTH Failed to start Max LspGen timer Starting the maximum LSP generation interval timer failed in the smoothing HSB SMOOTH LSP Expired Purging LSP LSP expired in the smoothing therefor...

Page 1096: ...it IPv4 IPv6 Up circName Local interface is up IPv4 IPv6 circName Interface name UPDT Circuit IPv4 IPv6 Down circName Local interface is down IPv4 IPv6 circName Interface name UPDT Circuit Cost change...

Page 1097: ...pId End LSP ID Rxed pduType From sourceId circuitName PDUs were received pduType PDU type which can be PSNP or CSNP sourceId Source NSAP address of the packet circuitName Name of the receiving interfa...

Page 1098: ...root node nexthopNum Number of nexthops of the node nbrNum Number of neighbors of the node parentNum Number of parent nodes ISPF NODE L sysLevel MT topoType Create NODE sourceId Dist distanceValue Nex...

Page 1099: ...vel MT topoType Adding Bcast ADJ sourceId A broadcast network adjacency is being added sysLevel system level topoType topology type sourceId source system ID ISPF LINK L sysLevel MT topoType Create Ne...

Page 1100: ...distanceValue Nexthops nexthopNum Nbrs nbrNum Parents parentNum RmtNbr Tree Tent Direct Overload Del Isolated For the link of the local node the two way check was ignored distanceValue Cost to the ro...

Page 1101: ...on FWDB LIMIT Need to Process ISIS MaxRouteLimit Resume Restore the maximum routes in the route table in the case that the route table is not full Table 259 Description on the fields of the debugging...

Page 1102: ...cause overload bit is set UPDT LSDB Enters Normal Over Load State The LSDB enters the overloaded state UPDT update process recovered from Normal Oload The LSDB leaves the overloaded state UPDT Rx IP c...

Page 1103: ...00 Old DIS null New DIS 0000 0000 0001 01 An L1 L2 neighbor relationship was established between Router A and Router B and a DIS election was performed VLAN interface 100 on Router A is connected to V...

Page 1104: ...lan interface100 undo isis enable ISIS 1 UPDT Deleting from the LSP Neighbour option TLV 2 ISIS 1 UPDT Circuit Down Vlan100 ISIS 1 UPDT Deleting Address 100 1 1 0 from L1 LSPs TLV 128 ISIS 1 UPDT Dele...

Page 1105: ...EVE Adding To PATHS 0000 0000 0001 00 Cost 10 Number of next ho ps1 Preference 7 ISIS 1 SPF EVE Processing LSPs of System 0000 0000 0001 00 ISIS 1 SPF EVE Processing LSPs of Virtual System 0000 0000 0...

Page 1106: ...1106 CHAPTER 75 IS IS DEBUGGING COMMANDS...

Page 1107: ...tises or not to advertise the summary route By default the summary route is advertised cost cost Specifies the cost of the summary route in the range 1 to 16777215 The default cost is to the biggest c...

Page 1108: ...at by the system or an IP address Description Use the area command to create an area and enter area view Use the undo area command to remove a specified area No OSPF area is created by default Example...

Page 1109: ...single route If the ASBR resides in an NSSA area it advertises the summary route in a Type 7 LSA into the area With the asbr summary command configured on an NSSA ABR it summarizes routes in Type 5 L...

Page 1110: ...width reference OSPF view Syntax bandwidth reference value undo bandwidth reference View OSPF view Parameters value Specifies a bandwidth reference value for link cost calculation in the range 1 to 21...

Page 1111: ...tag and the upper limit are 1 2 1 and 1000 by default Related commands import route OSPF view Examples Configure default parameters cost as 10 upper limit as 20000 tag as 100 and type as 2 for redistr...

Page 1112: ...ent only if the router has the default route configured cost cost Specifies the cost for the default route in the range 0 to 16777214 The default is 1 type type Specifies the ASE LSA type 1 or 2 which...

Page 1113: ...Parameters description Describes OSPF process in OSPF view or describes OSPF area in OSPF area view description is a string of up to 80 characters Description Use the description command to describe a...

Page 1114: ...sbr summary ip address mask mask length View Any view Parameters process id OSPF process ID in the range 1 to 65535 ip address Matched IP address in dotted decimal format mask IP address mask in dotte...

Page 1115: ...spf brief command to display OSPF brief information If no OSPF process is specified brief information of all OSPF processes is displayed Examples Display OSPF brief information Table 263 Description o...

Page 1116: ...8 1 1 Timers Hello 10 Dead 40 Poll 40 Retransmit 5 Transmit Del ay 1 Table 264 Description on the fields of the display ospf brief command Field Description RouterID Router ID of this router Border Ro...

Page 1117: ...by this router Router 4 Network 0 Sum Net 0 Area Area ID in the IP address format Authtype Authentication type of the area Non authentication simple authentication or MD5 authentication Area flag The...

Page 1118: ...Type OSPF packet type Input Packets received Output Packets sent Hello Hell packet DB Description Database Description packet Link State Req Link State Request packet Link State Update Link State Upd...

Page 1119: ...ter ID confusion Packets with duplicate route ID OSPF bad packet Packets illegal OSPF bad version Packets with wrong version OSPF bad checksum Packets with wrong checksum OSPF bad area ID Packets with...

Page 1120: ...0 0 0 0 0 0 0 0 Area 0 0 0 1 IP Address Type State Cost Pri DR BDR 172 16 0 1 Broadcast DR 1 1 172 16 0 1 0 0 0 0 LS ACK Unknown LSA type LSAck packets with unknown LSA type LS REQ Empty request LSR...

Page 1121: ...splays Type9 LSA Opaque link LSA information in the LSDB opaque area Displays Type10 LSA Opaque area LSA information in the LSDB opaque as Displays Type11 LSA Opaque AS LSA information in the LSDB lin...

Page 1122: ...he LSDB Sysname display ospf 1 lsdb network OSPF Process 1 with Router ID 192 168 1 1 Area 0 0 0 0 Link State Database Type Network LS ID 192 168 0 2 Adv Rtr 192 168 2 1 LS Age 922 Len 32 Options E Se...

Page 1123: ...2 1 192 168 0 1 Ethernet1 0 192 168 1 1 1 192 168 1 1 Ethernet1 1 Table 269 Description on the fields of the display ospf 1 lsdb network command Field Description Type LSA type LS ID DR IP address Adv...

Page 1124: ...tailed information about the neighbor is displayed If neither interface nor neighbor ID is specified brief information about neighbors of the specified OSPF process or all OSPF process is displayed Ex...

Page 1125: ...y Router priority DR The DR on the interface s network segment BDR The BDR on the interface s network segment MTU Interface MTU Dead timer due in 33 sec Dead timer times out in 33 seconds Neighbor is...

Page 1126: ...isplay ospf peer statistics command Field Description Area ID Area ID Down Under this state neighbor initial state the router has not received any information from a neighboring router for a period of...

Page 1127: ...erface number Specifies an interface neighbor id Neighbor s router ID Description Use the display ospf retrans queue command to display retransmit list information If no OSPF process is specified retr...

Page 1128: ...p Description Use the display ospf routing command to display routing table information If no OSPF process is specified routing table information of all OSPF processes is displayed Examples Display OS...

Page 1129: ...t Area 0 0 0 1 Timers Hello 10 Dead 40 Retransmit 5 Transmit Delay 1 Table 276 Description on the fields of the display ospf routing command Field Description Destination Destination network Cost Cost...

Page 1130: ...cess 1 Sysname system view Sysname ospf 1 Sysname ospf 1 enable link local signaling enable log Syntax enable log config error state undo enable log config error state View OSPF view Parameters config...

Page 1131: ...chronization OOB Resynch capability Use the undo enable out of band resynchronization command to disable the OSPF out of band resynchronization capability By default the capability is disabled Example...

Page 1132: ...otocol process id undo filter policy export protocol process id View OSPF view Parameters acl number Number of the basic or advanced ACL used to filter routing information by destination address in th...

Page 1133: ...utes a string of up to 19 characters gateway ip prefix name Name of an IP address prefix list used to filter routes received from the specified neighbors a string of up to 19 characters Description Us...

Page 1134: ...he enable out of band resynchronization command If the keywords nonstandard and ietf are not specified when OSPF GR is enabled nonstandard is the default Related commands enable link local signaling e...

Page 1135: ...arameters interval value Specifies the Graceful Restart interval in the range 40 to 1 800 seconds Description Use the graceful restart interval command to configure the Graceful Restart interval Use t...

Page 1136: ...Parameters protocol Redistributes routes from the specified protocol which can be bgp direct isis ospf rip or static process id Process ID in the range 1 to 65535 The default is 1 It is available only...

Page 1137: ...e 2 external route is an EGP route which has low credibility so OSPF considers the cost from ASBR to a Type 2 external route is much bigger than the cost from the ASBR to an OSPF internal router There...

Page 1138: ...dentical LSAs in milliseconds in the range 0 to 60000 Description Use the lsa arrival interval command to specify the minimum interval between two identical received LSAs Use the undo lsa arrival inte...

Page 1139: ...ion interval command to restore the default The LSA generation interval defaults to 5 seconds With this command configured when network changes are not frequent an LSA is generated at the initial inte...

Page 1140: ...d balanced routes in the range 1 to 8 A maximum of 1 means no load balancing is enabled Description Use the maximum load balancing command to specify the maximum number of load balanced routes Use the...

Page 1141: ...55 255 Description Use the network command to enable OSPF on the interface attached to the specified network in the area Use the undo network command to disable OSPF on an interface By default an inte...

Page 1142: ...e in a Type 3 summary LSA into the NSSA area In this way all the other summary LSAs are not advertised into the area Such an area is known as an NSSA totally stub area Description Use the nssa command...

Page 1143: ...ption Use the ospf command to enable an OSPF process Use the undo ospf command to disable an OSPF process No OSPF process is enabled by default You can enable multiple OSPF processes on a router and s...

Page 1144: ...ng of up to 8 characters For cipher type password a plain password is a string of up to 8 characters and a cipher password is a string of up to 24 characters MD5 HMAC MD5 authentication For plain type...

Page 1145: ...Sysname interface serial 2 0 Sysname Serial2 0 ospf authentication mode simple cipher abc ospf cost Syntax ospf cost value undo ospf cost View Interface view Parameters value Value of OSPF cost in th...

Page 1146: ...is 1 The bigger the value is the higher the priority This configuration is not supported on the NULL interface Examples Set the DR priority on the current interface to 8 Sysname system view Sysname i...

Page 1147: ...DD packets that is no real MTU is added Note that After a virtual link is established via a Virtual Template or Tunnel two devices on the link from different vendors may have different MTU values To...

Page 1148: ...rk type as NBMA If an NBMA network is fully meshed you can configure the network type for interfaces as NBMA If not you need to configure the network type as P2MP for two routers having no direct link...

Page 1149: ...conds Sysname system view Sysname interface serial2 0 Sysname Serial2 0 ospf timer dead 60 ospf timer hello Syntax ospf timer hello seconds undo ospf timer hello View Interface view Parameters seconds...

Page 1150: ...nterface finds its neighbor is dead it will send hello packets at the poll interval Note that The poll interval is at least four times the hello interval This configuration is not supported on the NUL...

Page 1151: ...econds undo ospf trans delay View Interface view Parameters seconds LSA transmit delay time in seconds in the range 1 to 3600 Description Use the ospf trans delay command to set the LSA transmit delay...

Page 1152: ...need to specify neighbors and neighbor DR priorities on the routers After startup a router sends a hello packet to neighbors with DR priorities higher than 0 When the DR and BDR are elected the DR wil...

Page 1153: ...eral routing protocols find routes to the same destination the router uses the route found by the protocol with the highest priority Examples Set a priority of 150 for OSPF internal routes Sysname sys...

Page 1154: ...The system prompts whether to reset OSPF process upon execution of this command Examples Reset all OSPF processes Sysname reset ospf process reset ospf redistribution Syntax reset ospf process id red...

Page 1155: ...scription Use the silent interface command to disable specified interfaces from sending any OSPF packet Use the undo silent interface command to restore the default By default an interface sends OSPF...

Page 1156: ...axagelsa LSA max age information nbrstatechange Neighbor state change information originatelsa Information about LSAs originated locally vifauthfail Virtual interface authentication failure informatio...

Page 1157: ...erval command to restore the default The interval defaults to 5 seconds Based on its LSDB an OSPF router calculates the shortest path tree with itself being the root and uses it to determine the next...

Page 1158: ...igure area1 as a stub area Sysname system view Sysname ospf 100 Sysname ospf 100 area 1 Sysname ospf 100 area 0 0 0 1 stub stub router Syntax stub router undo stub router View OSPF view Parameters Non...

Page 1159: ...the value on its virtual link neighbor The dead interval is at least four times the hello interval md5 MD5 authentication hmac md5 HMAC MD5 authentication simple Simple authentication key id Key ID fo...

Page 1160: ...ources are consumed A so small retransmission interval will lead to unnecessary retransmissions A big value is appropriate for a low speed link You need to specify an appropriate transmission delay wi...

Page 1161: ...ero fields are non zero If all messages are trusty you can disable this feature to spare the processing time of the CPU Examples Disable the zero field check on RIP 1 messages for RIP process 100 Sysn...

Page 1162: ...RIP view Parameters value Cost of the default route in the range of 1 to 15 Description Use the default route originate cost command to advertise a default route with the specified metric to RIP neigh...

Page 1163: ...80 sec s Suppress time 120 sec s Garbage collect time 120 sec s TRIP retransmit time 5 sec s TRIP response packets retransmit count 36 Silent interfaces None Default routes Disabled Verify source Enab...

Page 1164: ...ansmit count Maximum retransmit times for update requests and responses Silent interfaces Number of silent interfaces which do not periodically send updates Default routes Indicates whether a default...

Page 1165: ...isplay rip route Syntax display rip process id route statistics ip address mask mask length peer ip address View Any view Parameters process id RIP process number in the range of 1 to 65535 Table 280...

Page 1166: ...2 34 0 0 0 8 21 0 0 23 1 0 RA 23 Peer 21 0 0 12 on Ethernet1 0 Destination Mask NextHop Cost Tag Flags Sec 56 0 0 0 8 21 0 0 12 1 0 RA 34 12 0 0 0 8 21 0 0 12 1 0 RA 12 Display routing information for...

Page 1167: ...never expires A The route is aging S The route is suppressed G The route is in Garbage collect state Peer 21 0 0 23 on Ethernet1 0 Routing information learned on a RIP interface from the specified nei...

Page 1168: ...only the routes redistributed from the specified routing protocol Otherwise RIP filters all routes to be advertised If interface type interface number is specified RIP filters only the routes advertis...

Page 1169: ...ysname system view Sysname rip 1 Sysname rip 1 filter policy 2000 import Reference IP prefix list abc on Ethernet1 1 to filter all received RIP routes Sysname rip 1 filter policy ip prefix abc import...

Page 1170: ...f 0 to 65 535 The default is 0 route policy route policy name Specifies a routing policy with 1 to 19 characters allow ibgp When the protocol argument is set to bgp allow ibgp is an optional keyword T...

Page 1171: ...load balancing command to specify the maximum number of load balanced routes Use the undo maximum load balancing command to restore the default Examples Specify the maximum number of load balanced rou...

Page 1172: ...P view Parameters ip address RIP peer IP address in dotted decimal format Description Use the peer command to specify a neighbor in the non broadcast multi access NBMA network With this command used r...

Page 1173: ...s to these routes The priority of other routes is the one set by the preference command If no priority is set for matched routes in the routing policy the priority of all routes is the one set by the...

Page 1174: ...not apply to interface parameters The configured interface parameters become invalid after you disable the RIP process Examples Create a RIP process and enter rip process view Sysname system view Sys...

Page 1175: ...mples Configure MD5 authentication on Ethernet1 0 with the key string being rose in the format defined in RFC 2453 Sysname system view Sysname interface ethernet 1 0 Sysname Ethernet1 0 rip version 2...

Page 1176: ...interface is increased Related commands rip metricout Examples Configure an additional metric for routes received on Ethernet1 0 Sysname system view Sysname interface ethernet1 0 Sysname Ethernet1 0 r...

Page 1177: ...RIP process Use the undo rip mib binding command to restore the default By default MIB operations are bound to the RIP process with the smallest process ID Examples Configure RIP 100 to accept SNMP r...

Page 1178: ...e function By default the poison reverse function is disabled Examples Enable the poison reverse function for RIP routing updates on Serial 2 0 Sysname system view Sysname interface serial 2 0 Sysname...

Page 1179: ...nterface ethernet1 0 Sysname Ethernet1 0 rip split horizon rip summary address Syntax rip summary address ip address mask mask length undo rip summary address ip address mask mask length View Interfac...

Page 1180: ...View Interface view Parameters 1 RIP version 1 2 RIP version 2 broadcast Sends RIP 2 messages in broadcast mode multicast Sends RIP 2 messages in multicast mode Description Use the rip version command...

Page 1181: ...ernet1 0 to broadcast RIP 2 messages Sysname system view Sysname interface ethernet1 0 Sysname Ethernet1 0 rip version 2 broadcast silent interface RIP view Syntax silent interface all interface type...

Page 1182: ...ll subnet routes can be broadcasted By default automatic RIP 2 summarization is enabled Enabling automatic RIP 2 summarization can reduce the size of the routing table to enhance the scalability and e...

Page 1183: ...essed state only routes which come from the same neighbor and whose metric is less than 16 will be received by the router to replace unreachable routes The garbage collect timer defines the interval f...

Page 1184: ...ax trip retransmit timer retransmit time value undo trip retransmit timer View RIP view Parameters retransmit time value Interval in seconds for retransmitting an Update Request or Update Response in...

Page 1185: ...not recommended Examples Enable the source IP address validation on incoming messages Sysname system view Sysname rip rip 100 Sysname rip 100 validate source address version Syntax version 1 2 undo v...

Page 1186: ...view On a ComwareV3 device you can only perform such configuration in interface view To enable a ComwareV5 device in the RIP 1 mode to interoperate with a ComwareV3 device in the RIP 2 broadcast mode...

Page 1187: ...h command to remove the clause configuration No AS_PATH attribute is set by default With the replace keyword using the apply as path command replaces the original AS_PATH attribute with specified AS n...

Page 1188: ...sname route policy if match as path 1 Sysname route policy apply comm list 1 delete apply community Syntax apply community none additive community number 1 16 aa nn 1 16 internet no export subconfed n...

Page 1189: ...for BGP routes passing AS path ACL 8 Sysname system view Sysname route policy setcommunity permit node 16 Sysname route policy if match as path 8 Sysname route policy apply community no export apply...

Page 1190: ...No cost type is set for routing information by default Examples Create routing policy policy1 with node 10 matching mode as permit If a route matches tag 8 set the cost type for the route to IS IS in...

Page 1191: ...vel 1 level 1 2 level 2 undo apply isis View Routing policy view Parameters level 1 Redistributes routes into IS IS level 1 area level 2 Redistributes routes into IS IS level 2 area level 1 2 Redistri...

Page 1192: ...node 10 matching mode as permit If a route matches AS path ACL 1 set the local preference for the route to 130 Sysname system view Sysname route policy policy1 permit node 10 Sysname route policy if...

Page 1193: ...BGP routes Use the undo apply origin command to remove the clause configuration No origin attribute is set for routing information by default Related commands if match interface if match acl if match...

Page 1194: ...system view Sysname route policy policy1 permit node 10 Sysname route policy if match route type external type1or2 Sysname route policy apply preference 90 apply preferred value Syntax apply preferre...

Page 1195: ...the route to 100 Sysname system view Sysname route policy policy1 permit node 10 Sysname route policy if match route type external type1 Sysname route policy apply tag 100 display ip as path Syntax d...

Page 1196: ...ty list if match community and apply community Examples Display the information of the BGP community list 1 Sysname display ip community list 1 Community List Number 1 permit 1 1 1 2 2 2 display ip ex...

Page 1197: ...as path as path number 1 16 undo if match as path as path number 1 16 View Routing policy view Parameters as path number AS path ACL number in the range of 1 to 256 1 16 Indicates the argument before...

Page 1198: ...f match community basic community list number adv community list number 1 16 View Routing policy view Parameters basic community list number Basic community list number in the range of 1 to 99 adv com...

Page 1199: ...emove the match criterion The match criterion is not configured by default This command is one of the if match clauses of routing policy used for matching routes with the specified route cost Related...

Page 1200: ...16 undo if match interface interface type interface number 1 16 View Routing policy view Parameters interface type Interface type interface number Interface number 1 16 Indicates the argument before...

Page 1201: ...e type Syntax if match route type internal external type1 external type2 external type1or2 is is level 1 is is level 2 nssa external type1 nssa external type2 nssa external type1or2 undo if match rout...

Page 1202: ...eters value Specifies a tag value ranging from 0 to 4294967295 Description Use the if match tag command to specify a tag for matching against the tag field of the routes Use the undo if match tag comm...

Page 1203: ...ate an AS path ACL Use the undo ip as path command to remove an AS path ACL No AS path ACL is created by default Examples Create an AS path ACL numbered 1 permitting routing information whose AS_PATH...

Page 1204: ...nternet Routes with this attribute can be advertised to all the BGP peers By default all routes have this attribute no advertise Routes with this attribute will not be advertised to other BGP peers no...

Page 1205: ...re it can be entered up to 16 times Description Use the ip extcommunity list to define an extended community list entry Use the undo ip extcommunity list command to remove an extended community list N...

Page 1206: ...icy routing It contains several nodes and each node comprises some if match and apply clauses The if match clauses define the matching criteria of the node and the apply clauses define the actions per...

Page 1207: ...ess next hop command to set a next hop when redistributing routes Related commands if match interface if match acl if match ip prefix if match ip next hop if match cost if match tag route policy apply...

Page 1208: ...riterion No ACL match criterion is configured by default Related commands if match interface if match ip next hop if match cost if match tag route policy apply ip address next hop apply cost apply loc...

Page 1209: ...atch criterion The match criterion is not configured by default Related commands route policy Examples Create routing policy policy1 with node 10 matching mode as permit Define an if match clause to p...

Page 1210: ...efix list as permit that is when a route to be filtered is in the range of the IPv4 prefix list the route passes the IPv4 prefix list without needing to enter the next item for testing If the route to...

Page 1211: ...s specified as 0 0 0 0 0 then only the default routes will be matched To match all the routes use 0 0 0 0 0 less equal 32 Examples Create a routing policy named policy1 with node 10 matching mode as p...

Page 1212: ...1212 CHAPTER 79 IPV4 ROUTING POLICY CONFIGURATION COMMANDS...

Page 1213: ...ting routes does not take effect Examples Create routing policy policy1 with node 10 matching mode permit If a route matches AS path ACL 1 set next hop 3ff3 506 1 for it Sysname system view Sysname ro...

Page 1214: ...ix name Specifies the name of a IPv6 prefix list for filtering a string of 1 to 19 characters Description Use the if match ipv6 command to configure a destination next hop or source address based matc...

Page 1215: ...ing mode for the IPv6 prefix list as deny that is if a route matches the IPv6 prefix list the route neither passes the filter nor enters the next node for test If not the route will enter the next ite...

Page 1216: ...l the routes configure it as 0 less equal 128 Examples Permit the IPv6 addresses with mask length between 32 bits and 64 bits Sysname system view Sysname ip ipv6 prefix abc permit 0 greater equal 32 l...

Page 1217: ...tes and their configurations you must reconf igure all static routes Are you sure Y N Y ip route static Syntax ip route static dest address mask mask length gateway address track track entry number in...

Page 1218: ...nterface the next hop address must be specified vpn instance d vpn instance name Name of the destination VPN instance case sensitive If a destination VPN instance name is specified the router will sea...

Page 1219: ...ress through PPP negotiation In this case you need only specify the output interface For NBMA and P2MP interfaces which support point to multipoint networks the IP address to link layer address mappin...

Page 1220: ...default preference default preference value undo ip route static default preference View System view Parameters default preference value Default preference for static routes which is in the range of...

Page 1221: ...ance command to restore the default The feature is not available by default Unlike IGP BGP has no explicit metric for making load balancing decision Instead it implements load balancing by defining it...

Page 1222: ...as path neglect bestroute compare med IPv6 address family view Syntax bestroute compare med undo bestroute compare med View IPv6 address family view Parameters None Description Use the bestroute compa...

Page 1223: ...f ipv6 bestroute med confederation compare different as med IPv6 address family view Syntax compare different as med undo compare different as med View IPv6 address family view Parameters None Descrip...

Page 1224: ...he threshold are suppressed By default it is 2000 ceiling Specifies a ceiling penalty value from 1001 to 20000 The value must be bigger than the suppress value By default the value is 16000 route poli...

Page 1225: ...making the route passing B preferred Sysname system view Sysname bgp 100 Sysname bgp ipv6 family Sysname bgp af ipv6 default local preference 180 default med IPv6 address family view Syntax default me...

Page 1226: ...rs None Description Use the default route imported command to enable the redistribution of default route into the IPv6 BGP routing table Use the undo default route imported command to disable the redi...

Page 1227: ...and Field Description BGP peer group Name of the peer group remote AS AS number of the peer group Type Type of the peer group Maximum allowed prefix number Maximum allowed prefix number Threshold Thre...

Page 1228: ...to display IPv6 BGP path information If no parameter is specified all path information will be displayed Examples Display IPv6 BGP path information Sysname display bgp ipv6 paths Address Hash Refcount...

Page 1229: ...ipv6 peer BGP Local router ID 20 0 0 1 local AS number 100 Total number of peers 1 Peers in established state 1 Peer V AS MsgRcvd MsgSent OutQ PrefRcv Up Down State 20 21 4 200 17 19 0 3 00 09 59 Esta...

Page 1230: ...tory i internal s suppressed S Stale Origin i IGP e EGP incomplete Network 30 30 PrefixLen 64 NextHop 30 30 30 1 LocPrf PrefVal 0 Label NULL MED 0 Path Ogn i Network 40 40 PrefixLen 64 NextHop 40 40 4...

Page 1231: ...address PrefixLen Prefix length NextHop Next Hop MED MULTI_EXIT_DISC attribute LocPrf Local preference value Path AS_PATH attribute recording the ASs the packet has passed to avoid routing loops Pref...

Page 1232: ...13 times no advertise Displays routes not advertised to any peer no export Displays routes advertised outside the AS if there is a confederation it displays routes not advertised outside the confedera...

Page 1233: ...iew the routing information matching the specified IPv6 BGP community list Examples Display the routing information matching the specified IPv6 BGP community list Sysname display bgp ipv6 routing tabl...

Page 1234: ...ommands dampening IPv6 address family view Examples Display IPv6 BGP routing dampening parameters Sysname display bgp ipv6 routing table dampening parameter Maximum Suppress Time in second 3069 Ceilin...

Page 1235: ...ULL MED 0 Path Ogn 300 i Refer to Table 291 for description on the fields above display bgp ipv6 routing table flap info Syntax display bgp ipv6 routing table flap info regular expression as regular e...

Page 1236: ...ers None Description Use the display bgp ipv6 routing table label command to display IPv6 BGP label routing information Examples Display IPv6 BGP label routing information Sysname display bgp ipv6 rou...

Page 1237: ...routing table peer command to display the routing information advertised to or received from the specified IPv4 or IPv6 BGP peer Examples Display the routing information advertised to the specified BG...

Page 1238: ...abel NULL MED 0 Path Ogn 100 i Refer to Table 291 for description on the fields above display bgp ipv6 routing table statistic Syntax display bgp ipv6 routing table statistic View Any view Parameters...

Page 1239: ...the specified protocol are filtered If no protocol is specified all redistributed routes will be filtered Examples Reference ACL6 2001 to filter all outbound IPv6 BGP routes Sysname system view Sysnam...

Page 1240: ...scription Use the group command to create a peer group Use the undo group command to delete a peer group An IBGP peer group will be created if neither internal nor external is selected Examples Create...

Page 1241: ...s redistributed using the import route command has the incomplete origin attribute Examples Redistribute routes from RIPng 1 Sysname system view Sysname bgp 100 Sysname bgp ipv6 family Sysname bgp af...

Page 1242: ...vertised must exist in the local IP routing table and using a routing policy makes route management more flexible The route advertised to the BGP routing table using the network command has the IGP or...

Page 1243: ...ers ipv4 address IPv4 address of a peer ipv6 address IPv6 address of a peer Description Use the peer advertise ext community command to advertise the extended community attribute to a peer peer group...

Page 1244: ...ber allowed in the AS PATH of routes from peer 1 1 as 2 Sysname system view Sysname bgp 100 Sysname bgp ipv6 family Sysname bgp af ipv6 peer 1 1 allow as loop 2 peer as number IPv6 address family view...

Page 1245: ...S path ACL in the range 1 to 256 import Filters incoming routes export Filters outgoing routes Description Use the peer as path acl command to specify an AS path ACL to filter routes incoming from or...

Page 1246: ...amily view Parameters ipv6 group name Name of a peer group a string of 1 to 47 characters ipv6 address IPv6 address of a peer interface type interface number Specifies the type and name of the interfa...

Page 1247: ...vertise a default route to a peer peer group Use the undo peer default route advertise command to disable advertising a default route By default no default route is advertised to a peer peer group Usi...

Page 1248: ...up test external Sysname bgp af ipv6 peer test description ISP1 peer ebgp max hop IPv6 address family view Syntax peer ipv6 group name ipv6 address ebgp max hop hop count undo peer ipv6 group name ipv...

Page 1249: ...peer or peer group Use the undo peer enable command to disable an IPv4 peer or peer group By default no IPv4 peer or peer group is enabled If an IPv4 peer or peer group is disabled the router will no...

Page 1250: ...y view Parameters group name Name of an IPv4 or IPv6 peer group a string of 1 to 47 characters ipv4 address IPv4 address of a peer ipv6 address IPv6 address of a peer acl6 number IPv6 ACL number in th...

Page 1251: ...does not belong to any peer group Examples Create a peer group named test and add the peer 1 2 3 4 to the peer group Sysname system view Sysname bgp 100 Sysname bgp ipv6 family Sysname bgp af ipv6 gr...

Page 1252: ...IPv4 or IPv6 peer group a string of 1 to 47 characters ipv4 address IPv4 address of a peer ipv6 address IPv6 address of a peer ipv6 prefix name IPv6 prefix list name a string of 1 to 19 characters imp...

Page 1253: ...s command to disable this function By default the function is not enabled Examples Save routing information from peer 1 2 3 4 Sysname system view Sysname bgp 100 Sysname bgp ipv6 family Sysname bgp af...

Page 1254: ...up Use the undo peer log change command to remove the configuration The logging is enabled by default Examples Enable the logging of session state and event information of peer 1 2 3 4 Sysname system...

Page 1255: ...roup Use the undo peer preferred value command to restore the default By default routes received from a peer or peer group have a preferred value of 0 Routes learned from peers each have an initial pr...

Page 1256: ...d to allow IPv6 BGP updates to a peer peer group to carry private AS numbers By default BGP updates carry the private AS number The command does not take effect if the BGP update has both the public A...

Page 1257: ...ndo peer group name ipv4 address ipv6 address route limit View IPv6 address family view Parameters group name Name of an IPv4 or IPv6 peer group a string of 1 to 47 characters ipv4 address IPv4 addres...

Page 1258: ...tes to the peer group Description Use the peer route policy command to apply a routing policy to routes incoming from or outgoing to a peer or peer group Use the undo peer route policy command to remo...

Page 1259: ...o the peer 1 2 3 4 as 10 seconds Sysname system view Sysname bgp 100 Sysname bgp ipv6 family Sysname bgp af ipv6 peer 1 2 3 4 as number 100 Sysname bgp af ipv6 peer 1 2 3 4 route update interval 10 pe...

Page 1260: ...dtime interval for a peer or peer group Use the undo peer timer command to restore the default keepalive interval defaults to 60 seconds and holdtime interval defaults to 180 seconds Note that The tim...

Page 1261: ...er the preference is The default values of external preference internal preference and local preference are 255 255 and 130 respectively Examples Configure preferences for EBGP IBGP and local routes a...

Page 1262: ...ctor Use the undo reflector cluster id command to remove the configured cluster ID By default a route reflector uses its router ID as the cluster ID Usually there is only one route reflector in a clus...

Page 1263: ...ons To perform IPv4 IPv6 BGP soft reset all routers in the network should support route refresh If a router not supporting route refresh exists in the network you need to use the peer keep all routes...

Page 1264: ...formation will be cleared Examples Clear the damping information of routes to 2345 64 and release suppressed routes Sysname reset bgp ipv6 dampening 2345 64 reset bgp ipv6 flap info Syntax reset bgp i...

Page 1265: ...If not the system will select a router ID automatically from the current interfaces IPv4 addresses The selection sequence is the highest IPv4 address of Loopback interfaces addresses then the highest...

Page 1266: ...Enable the route synchronization between IPv6 BGP and IGP Sysname system view Sysname bgp 100 Sysname bgp ipv6 family Sysname bgp af ipv6 synchronization timer IPv6 address family view Syntax timer ke...

Page 1267: ...er timer IPv6 address family view Examples Configure keepalive interval and holdtime interval as 60 and 180 seconds Sysname system view Sysname bgp 100 Sysname bgp ipv6 family Sysname bgp af ipv6 time...

Page 1268: ...1268 CHAPTER 82 IPV6 BGP CONFIGURATION COMMANDS...

Page 1269: ...2 Displays Level 2 IPv6 IS IS routes only n If no level is specified both Level 1 and Level 2 namely Level 1 2 routing information will be displayed Description Use the display isis route ipv6 comman...

Page 1270: ...sed in LSPs U Up Down Bit Set Table 296 Description on the fields of the display isis route ipv6 command Field Description Destination IPv6 destination address prefix PrefixLen Length of the prefix Fl...

Page 1271: ...ting a default route No IPv6 IS IS default route is generated by default With a routing policy you can configure IPv6 IS IS to generate the default route that must match the routing policy You can use...

Page 1272: ...isis 1 Sysname isis 1 network entity 10 0001 1010 1020 1030 00 Sysname isis 1 ipv6 enable ipv6 filter policy export Syntax ipv6 filter policy acl6 number ipv6 prefix ipv6 prefix name route policy rout...

Page 1273: ...be advertised You can configure the filtering conditions using the ipv6 filter policy command You can use the ipv6 filter policy export command which filters redistributed routes only when they are a...

Page 1274: ...lter the received routes Sysname system view Sysname isis Sysname isis 1 ipv6 filter policy 2003 import ipv6 import route Syntax ipv6 import route protocol process id allow ibgp cost cost level 1 leve...

Page 1275: ...use routing loops Therefore be cautious with this command Examples Configure IPv6 IS IS to redistribute static routes and sets the cost 15 for them Sysname system view Sysname isis Sysname isis 1 ipv6...

Page 1276: ...el 1 ipv6 maximum load balancing Syntax ipv6 maximum load balancing number undo ipv6 maximum load balancing View IS IS view Parameters number Maximum number of equivalent load balanced routes Descript...

Page 1277: ...mary ipv6 prefix prefix length avoid feedback generate_null0_route level 1 level 1 2 level 2 tag tag undo ipv6 summary ipv6 prefix prefix length level 1 level 1 2 level 2 View IS IS view Parameters ip...

Page 1278: ...d undo isis ipv6 enable View Interface view Parameters process id IS IS process ID ranging from 1 to 65535 The default is 1 Description Use the isis ipv6 enable command to enable IPv6 for the specifie...

Page 1279: ...ary command to configure an IPv6 summary route on an area border router Use the undo abr summary command to remove an IPv6 summary route Then the summarized routes are advertised By default no route s...

Page 1280: ...cost Syntax default cost value undo default cost View OSPFv3 view Parameters value Specifies a default cost for redistributed routes in the range of 1 to 16777214 Description Use the default cost com...

Page 1281: ...a to configure the area as stub If multiple OSPFv3 processes are running use of this command takes effect only for the current process Related commands stub OSPFv3 area view Examples Configure Area1 a...

Page 1282: ...area is 1 SPF algorithm executed 1 times Number of LSA 2 These LSAs checksum Sum 0x20C8 Number of Unknown LSA 0 Table 298 Description on the fields of the display isofv3 command Field Description Rou...

Page 1283: ...No backup designated router on this link Timer interval configured Hello 10 Dead 40 Wait 40 Retransmit 5 Hello due in 00 00 02 Neighbor Count is 1 Adjacent neighbor count is 1 These LSAs checksum Sum...

Page 1284: ...LSAs link state id Link state ID an IPv4 address originate router router id The ID of the advertising router total Specifies to display all information in the LSDB Description Use the display ospfv3...

Page 1285: ...Type Link LSA Link State ID 0 0 2 6 Originating Router 2 2 2 2 LS Seq Number 0x80000002 Checksum 0xEFFA Length 56 Priority 1 Options 0x000013 R E V6 Link Local Address FE80 1441 0 E213 1 Number of Pre...

Page 1286: ...Router Originating Router LS Seq Number LSA Sequence Number Checksum LSA Checksum Length LSA Length Priority Router Priority Options Options Link Local Address Link Local Address Number of Prefixes Nu...

Page 1287: ...e type interface number verbose peer router id View Any view Parameters process id Specifies the ID of an OSPFv3 process ranging from 1 to 65535 area Specifies to display neighbor information of the s...

Page 1288: ...er due in 00 00 29 Neighbor is up for 00 06 28 Database Summary List 0 Link State Request List 0 Link State Retransmission List 0 Table 304 Description on the fields of the display isofv3 peer command...

Page 1289: ...06 Description on the fields of the display ospfv3 peer statistic command Field Description Area ID Area ID Down In this state neighbor initial state the router has not received any information from a...

Page 1290: ...the statistics of OSPFv3 link state request list Sysname display ospfv3 request list statistics OSPFv3 Router with ID 1 1 1 1 Process 1 Interface Neighbor LSA Count Eth1 0 2 2 2 2 0 display ospfv3 re...

Page 1291: ...ay the statistics of OSPFv3 link state retransmission list Sysname display ospfv3 retrans list statistics OSPFv3 Router with ID 3 3 3 3 Process 1 Interface Neighbor LSA Count Eth1 0 1 1 1 1 0 display...

Page 1292: ...e 1 external route IA Inter area route I Intra area route E2 Type 2 external route Selected route OSPFv3 Router with ID 1 1 1 1 Process 1 Destination 2001 64 Type I Cost 1 NextHop directly connected I...

Page 1293: ...topology Syntax display ospfv3 process id topology area area id View Any view Parameters process id Specifies the ID of an OSPFv3 process of which to display topology information ranging from 1 to 655...

Page 1294: ...Eth1 0 display ospfv3 vlink Syntax display ospfv3 process id vlink View Any view Parameters process id Specifies the ID of an OSPFv3 process ranging from 1 to 65535 Description Use the display ospfv3...

Page 1295: ...cess id Specifies to filter the routes of a RIPng process which in the range of 1 to 65535 bgp4 Specifies to filter BGP4 routes direct Specifies to filter direct routes static Specifies to filter stat...

Page 1296: ...00 quit Sysname ospfv3 Sysname ospfv3 1 filter policy 2001 export filter policy import OSPFv3 view Syntax filter policy acl6 number ipv6 prefix ipv6 prefix name import undo filter policy import View O...

Page 1297: ...edistribute direct routes static Specifies to redistributes static routes cost value Specifies the cost for redistributed routes ranging from 1 to 16777214 It defaults to 1 type type Specifies the typ...

Page 1298: ...changes of the current OSPFv3 process will display on the configuration terminal Examples Disable the logging on neighbor state changes of OSPFv3 process 100 Sysname system view Sysname ospfv3 100 Sys...

Page 1299: ...configured in OSPFv3 view Otherwise you can find the process but which cannot generate any LSA Examples Enable the OSPFv3 process with process ID as 120 and configure the Router ID as 1 1 1 1 Sysname...

Page 1300: ...id View Interface view Parameters value OSPFv3 cost of the interface in the range 1 to 65535 instance id The instance ID of an interface in the range of 0 to 255 which defaults to 0 Description Use t...

Page 1301: ...ew Sysname interface ethernet 1 0 Sysname Ethernet1 0 ospfv3 dr priority 8 instance 1 ospfv3 mtu ignore Syntax ospfv3 mtu ignore instance instance id undo ospfv3 mtu ignore instance instance id View I...

Page 1302: ...four times the Hello seconds value and must be identical on interfaces attached to the same network segment Related commands ospfv3 timer hello Examples Configure the OSPFv3 neighbor dead time as 80...

Page 1303: ...transmit command to configure the LSA retransmission interval for an interface of an instance Use the undo ospfv3 timer retransmit command to restore the default The interval defaults to 5 seconds Whe...

Page 1304: ...delay 3 instance 1 preference Syntax preference ase route policy route policy name preference undo preference ase View OSPFv3 view Parameters ase Applies the preference to OSPFv3 external routes If t...

Page 1305: ...fferent processes have different Router IDs Related commands ospfv3 n By configuring different router IDs for different processes you can run multiple OSPFv3 processes on a router Examples Configure t...

Page 1306: ...spf timers View OSPFv3 view Parameters delay interval The interval in seconds between when OSPFv3 receives a topology change and when it starts SPF calculation in the range 1 to 65535 hold interval Th...

Page 1307: ...as a stub area Sysname system view Sysname ospfv3 1 Sysname ospfv3 1 area 1 Sysname ospfv3 1 area 0 0 0 1 stub vlink peer OSPFv3 area view Syntax vlink peer router id hello seconds retransmit seconds...

Page 1308: ...Use the undo vlink peer command to remove a virtual link For a non backbone area without direct connection with the backbone area or for a backbone area that cannot maintain connectivity you can use t...

Page 1309: ...an enable the zero field check on RIPng packet headers If any such field contains a non zero value the RIPng packet will be discarded Examples Disable the zero field check on RIPng packet headers of R...

Page 1310: ...Display the running status and configuration information of all configured RIPng processes Sysname display ripng RIPng process 1 Preference 100 Checkzero Enabled Default Cost 0 Maximum number of bala...

Page 1311: ...ost 2 3FFE C00 C18 1 64 via FE80 200 5EFF FE04 B602 cost 2 3FFE C00 C18 1 64 via FE80 200 5EFF FE04 B601 cost 2 3FFE C00 C18 2 64 via FE80 200 5EFF FE04 B602 cost 2 3FFE C00 C18 3 64 via FE80 200 5EFF...

Page 1312: ...he fields of the display ripng interface command Field Description Interface name Name of an interface running RIPng Link Local Address Link local address of an interface running RIPng Split horizon I...

Page 1313: ...Dest 3FFE C00 C18 1 64 via FE80 200 5EFF FE04 B601 cost 2 tag 0 A 13 Sec Dest 3FFE C00 C18 3 64 via FE80 200 5EFF FE04 B601 cost 2 tag 0 A 13 Sec Peer FE80 200 5EFF FE04 3302 on Ethernet1 2 Dest 100 3...

Page 1314: ...ing protocol is rip ospf or isis Description Use the filter policy export command to define an outbound route filtering policy Only routes passing the filter can be advertised in the update messages U...

Page 1315: ...from which to redistribute routes Currently it can be bgp4 direct isisv6 ospfv3 ripng or static process id Process ID in the range of 1 to 65535 The default is 1 This argument is available only when...

Page 1316: ...er of equal cost load balanced routes in the range 1 to 8 Description Use the maximum load balancing command to specify the maximum number of equal cost routes for load balancing Use the undo maximum...

Page 1317: ...routing policy the one set by the preference command applies to all routes Examples Set the RIPng route priority to 120 Sysname system view Sysname ripng 100 Sysname ripng 100 preference 120 Restore t...

Page 1318: ...Use the undo ripng default route command to stop advertising and forwarding the default route By default a RIP process does not advertise any default route After you execute this command the generate...

Page 1319: ...n value undo ripng metricin View Interface view Parameters value Additional metric to received routes in the range of 0 to 16 Description Use the ripng metricin command to specify an additional metric...

Page 1320: ...Sysname interface ethernet 1 0 Sysname Ethernet1 0 ripng metricout 12 ripng poison reverse Syntax ripng poison reverse undo ripng poison reverse View Interface view Parameters None Description Use th...

Page 1321: ...371 and LAPB and X 25 Configuration Commands on page 421 Examples Enable the split horizon function on Ethernet1 0 Sysname system view Sysname interface ethernet 1 0 Sysname Ethernet1 0 ripng split h...

Page 1322: ...configure RIPng timers Use the undo timers command to restore the default By default the garbage collect timer is 120 seconds the suppress timer 120 seconds the timeout timer 180 seconds and the upda...

Page 1323: ...stances The lengths of these timers must be kept consistent on all routers and access servers in the network Examples Configure the update timeout suppress and garbage collect timers as 5s 15s 15s and...

Page 1324: ...1324 CHAPTER 85 IPV6 RIPNG CONFIGURATION COMMANDS...

Page 1325: ...es Sysname system view Sysname delete ipv6 static routes all This will erase all ipv6 static routes and their configurations you must reconfigure all static routes Are you sure Y N Y ipv6 route static...

Page 1326: ...default IPv6 route If the destination address of an IPv6 packet does not match any entry in the routing table this default route will be used to forward the packet While configuring static routes you...

Page 1327: ...address in the range of 4 to 32 The system default is 32 interface type interface number Specifies an interface by its type and number Description Use the display multicast boundary command to view th...

Page 1328: ...ce address For a multicast group address this argument has an effective value range of 4 to 32 for a multicast source address this argument has an effective value range of 0 to 32 The system default i...

Page 1329: ...to indicate different states of S G entries Major values of this field are described in Table 322 Uptime Length of time for which the S G entry has been up in hours minutes seconds Timeout in Length...

Page 1330: ...pecified interface or all interfaces Related command multicast minimum ttl Example View the minimum TTL required for a multicast packet to be forwarded on all interfaces of the public instance Sysname...

Page 1331: ...ctive value range of 4 to 32 for a multicast source address this argument has an effective value range of 0 to 32 The system default is 32 in both cases incoming interface Displays multicast routing e...

Page 1332: ...k length Mask length of the multicast source address in the range of 0 to 32 Description Use the display multicast routing table static command to view the information of multicast static routes Examp...

Page 1333: ...urce address group address Multicast group address in the range of 224 0 1 0 to 239 255 255 255 Description Use the display multicast rpf info command to view the RPF information of a multicast source...

Page 1334: ...stance name a case sensitive string of up to 31 characters source address Multicast source address mask Mask of the multicast source address mask length Mask length of the multicast source address in...

Page 1335: ...ng table By default no multicast static route is configured Note that The arguments source address mask mask length protocol and policy name are critical elements in multicast static route configurati...

Page 1336: ...ommand to trace the path down which the multicast traffic from a given multicast source flows to the last hop router Note that if the last hop router address argument is given in the command to trace...

Page 1337: ...d Field Description last hop router Last hop router 6 6 6 6 225 2 1 1 The S G multicast stream for which the forwarding path is being traced 1 5 5 5 8 The S G outgoing interface address of each hop st...

Page 1338: ...moved Related command display multicast boundary Example Configure Ethernet 1 0 to be the forwarding boundary of multicast group 239 2 0 0 16 Sysname system view Sysname interface ethernet 1 0 Sysname...

Page 1339: ...st forwarding table The value ranges from 0 to 900 Description Use the multicast forwarding table route limit command to configure the maximum number of route entries in the multicast forwarding table...

Page 1340: ...fic is disabled Example Enable per source load splitting of multicast traffic in the public instance Sysname system view Sysname multicast load splitting source Enable per source load splitting of mul...

Page 1341: ...on Use the multicast minimum ttl command to configure the minimum TTL required for a multicast packet to be forwarded on the interface Use the undo multicast minimum ttl command to restore the system...

Page 1342: ...ysname vpn instance mvpn multicast routing enable reset multicast forwarding table Syntax reset multicast vpn instance vpn instance name all instance forwarding table source address mask mask mask len...

Page 1343: ...ng table of the public instance Sysname reset multicast forwarding table 225 5 4 3 Clear the multicast forwarding entries related to multicast group 226 1 2 3 from the multicast forwarding table of VP...

Page 1344: ...ting table command to clear multicast routing entries from the multicast routing table When a route entry is deleted from the multicast routing table the corresponding forwarding entry is also deleted...

Page 1345: ...ays the detailed information of IGMP multicast groups Description Use the display igmp group command to view IGMP multicast group information Note that If you do not specify group address this command...

Page 1346: ...haracters all instance Specifies all VPN instances interface type interface number Specifies an interface to display the IGMP configuration and operation information about If no interface is specified...

Page 1347: ...ion Version of IGMP currently running on the interface Value of query interval for IGMP in seconds IGMP query interval in seconds Value of other querier present interval for IGMP in seconds Other quer...

Page 1348: ...ment has an effective value range of 0 to 32 for a multicast group address this argument has an effective value range of 4 to 32 The system default is 32 in both cases Description Use the display igmp...

Page 1349: ...the upstream Related command igmp fast leave last member query interval n This command takes effect on all Layer 3 interfaces when executed in IGMP view Example Enable the fast leave function globally...

Page 1350: ...outing enable Sysname vpn instance mvpn quit Sysname igmp vpn instance mvpn Sysname igmp mvpn igmp enable Syntax igmp enable undo igmp enable View Interface view Parameter None Description Use the igm...

Page 1351: ...ending a Leave notification directly to the upstream Related command fast leave IGMP view and igmp last member query interval Example Enable fast leave for multicast group members on Ethernet 1 0 Sysn...

Page 1352: ...terval Syntax igmp last member query interval interval undo igmp last member query interval View Interface view Parameter interval IGMP last member query interval in seconds with an effective range of...

Page 1353: ...Sysname system view Sysname interface ethernet 1 0 Sysname Ethernet1 0 igmp max response time 8 igmp require router alert Syntax igmp require router alert undo igmp require router alert View Interface...

Page 1354: ...variable is 2 Related command robust count IGMP view igmp timer query igmp last member query interval igmp timer other querier present display igmp interface Example Set the IGMP querier robustness va...

Page 1355: ...ified multicast group Use the undo igmp static group command to remove the current interface as a statically connected member of the specified multicast group By default an interface is not a static m...

Page 1356: ...meters in the above mentioned formula default to 60 seconds 2 times and 10 seconds respectively so the default other querier present interval 60 2 10 2 125 seconds Related command timer other querier...

Page 1357: ...he IGMP version on the current interface Use the undo igmp version command to restore the IGMP version to the system default The default IGMP version is version 2 Related command version IGMP view Exa...

Page 1358: ...rval undo igmp max response time View Public instance IGMP view VPN instance IGMP view Parameter interval Maximum response time for IGMP general queries in seconds with an effective range of 1 to 25 D...

Page 1359: ...Sysname igmp require router alert reset igmp group Syntax reset igmp vpn instance vpn instance name all instance group all interface interface type interface number all group address mask mask mask le...

Page 1360: ...ries for multicast group 225 0 0 1 on Ethernet 1 0 in the public instance Sysname reset igmp group interface ethernet 1 0 225 0 0 1 Clear the IGMP forwarding entries for multicast groups in the 225 1...

Page 1361: ...d router alert command to globally disable the insertion of the Router Alert option into IGMP messages to be sent By default an IGMP message carries the Router Alert option Related command igmp send r...

Page 1362: ...her querier present interval to 200 seconds in the public instance Sysname system view Sysname igmp Sysname igmp timer other querier present 200 timer query IGMP view Syntax timer query interval undo...

Page 1363: ...ange of 1 to 3 Description Use the version command to configure the global IGMP version Use the undo version command to restore the global IGMP version to the system default The default IGMP version i...

Page 1364: ...1364 CHAPTER 88 IGMP CONFIGURATION COMMANDS...

Page 1365: ...the SA message cache mechanism in the public instance Sysname system view Sysname msdp Sysname msdp cache sa enable display msdp brief Syntax display msdp vpn instance vpn instance name all instance b...

Page 1366: ...View Any view Parameter vpn instance name VPN instance name a case sensitive string of up to 31 characters all instance Specifies all VPN instances peer address Specifies an MSDP peer to view the det...

Page 1367: ...rt policy none Information about SA Requests Policy to accept SA Request messages none Sending SA Requests status disable Minimum TTL to forward SA with encapsulated data 0 SAs learned from this peer...

Page 1368: ...es Filtering rule for receiving or forwarding SA messages from the specified MSDP peer Sending SA Requests status Whether enabled to send an SA request message to the designated MSDP peer upon receivi...

Page 1369: ...mation of S G entries in the MSDP cache in the public instance Sysname display msdp sa cache MSDP Source Active Cache Information of VPN Instance public net MSDP Total Source Active Cache 5 entries MS...

Page 1370: ...ache in the public instance Sysname display msdp sa count MSDP Source Active Count Information of VPN Instance public net Number of cached Source Active entries counted by Peer Peer s Address Number o...

Page 1371: ...acl acl number undo import source View Public instance MSDP view VPN instance MSDP view Parameter acl number Basic or advanced ACL number in the range of 2000 to 3999 A basic ACL is used to filter th...

Page 1372: ...name undo msdp vpn instance vpn instance name View System view Parameter vpn instance name VPN instance name a case sensitive string of up to 31 characters Description Use the msdp command to enable M...

Page 1373: ...rface as the RP address of SA messages Use the undo originating rp command to restore the system default Be default the PIM RP address is used as the RP address of SA messages Example Specify the IP a...

Page 1374: ...s description text undo peer peer address description View Public instance MSDP view VPN instance MSDP view Parameter peer address MSDP peer address text Descriptive text a string of 1 to 80 character...

Page 1375: ...up Grp1 peer minimum ttl Syntax peer peer address minimum ttl ttl value undo peer peer address minimum ttl View Public instance MSDP view VPN instance MSDP view Parameter peer address MSDP peer addres...

Page 1376: ...age is sent Note that before you can enable the device to send SA requests you must disable the SA message cache mechanism Related command cache sa enable Example Disable the SA message cache mechanis...

Page 1377: ...s from the specified MSDP peer export Specifies to filter SA messages forwarded to the specified MSDP peer peer address MSDP peer address acl number Advanced ACL number in the range of 3000 to 3999 If...

Page 1378: ...other SA requests will be ignored if you do not provide this argument all SA requests will be ignored Description Use the peer sa request policy command to configure a filtering rule for SA request m...

Page 1379: ...er Sysname reset msdp peer 125 10 7 6 reset msdp sa cache Syntax reset msdp vpn instance vpn instance name all instance sa cache group address View User view Parameter vpn instance name VPN instance n...

Page 1380: ...nformation of the specified MSDP peer or all MSDP peers without resetting the MSDP peer s Example Clear the statistics information of the MSDP peer 125 10 7 6 in the public instance Sysname reset msdp...

Page 1381: ...RP addresses pass the filtering will be accepted If multiple static RPF peers use the same filtering policy at the same time when a peer receives an SA message it will forward the SA message to the o...

Page 1382: ...nge is 1 to 60 Description Use the timer retry command to configure the interval between MSDP peer connection retries Use the undo timer retry command to restore the default setting By default the int...

Page 1383: ...atic rp PIM view Example Enable auto RP in the public instance Sysname system view Sysname pim Sysname pim auto rp enable bsr policy PIM view Syntax bsr policy acl number undo bsr policy View Public i...

Page 1384: ...face number Specifies an interface by its type and number This configuration can take effect only if PIM SM is enabled on the interface hash length Hash mask length for RP selection calculation in the...

Page 1385: ...scope c bsr global Syntax c bsr global hash length hash length priority priority undo c bsr global View Public instance PIM view VPN instance PIM view Parameter hash length Hash mask length for RP se...

Page 1386: ...cified multicast group in the range of 0 to 32 If you do not include this keyword in your command the corresponding global setting will be used priority Priority of the C BSR in the BSR admin scope re...

Page 1387: ...length for RP selection calculation is 30 Related command c bsr PIM view c bsr global and c bsr group Example Set the global Hash mask length for RP selection calculation to 16 in the public instance...

Page 1388: ...rameter interval Bootstrap interval in seconds with an effective range of 1 to 2 147 483 647 Description Use the c bsr interval command to configure the bootstrap interval namely the interval at which...

Page 1389: ...es an interface the IP address of which will be advertised as a C RP address acl number Basic ACL number in the range of 2000 to 2999 This ACL defines a range of multicast groups the C RP is going to...

Page 1390: ...2000 rule permit source 225 1 0 0 0 0 255 255 Sysname acl basic 2000 rule permit source 226 2 0 0 0 0 255 255 Sysname acl basic 2000 quit Sysname pim Sysname pim c rp ethernet 1 0 group policy 2000 p...

Page 1391: ...he interval at which the BSR sends bootstrap messages The recommended C RP timeout setting is 2 5 times the bootstrap interval or longer Related command c rp PIM view and c bsr interval PIM view Examp...

Page 1392: ...adv 3000 quit Sysname pim Sysname pim crp policy 3000 display pim bsr info Syntax display pim vpn instance vpn instance name all instance bsr info View Any view Parameter vpn instance name VPN instan...

Page 1393: ...icast source If you do not provide this argument this command will display the information about all unicast routes used by PIM Table 335 Description on the fields of the display pim bsr info command...

Page 1394: ...ace number message type assert bsr crp graft graft ack hello join prune state refresh View Any view Parameter vpn instance name VPN instance name a case sensitive string of up to 31 characters all ins...

Page 1395: ...public net PIM global control message counters Received Sent Invalid Register 20 37 2 Register Stop 25 20 1 Probe 10 5 0 PIM control message counters for interface Ethernet1 0 Received Sent Invalid A...

Page 1396: ...0 00 24 00 00 02 display pim interface Syntax display pim vpn instance vpn instance name all instance interface interface type interface number verbose View Any view Parameter vpn instance name VPN in...

Page 1397: ...2 PIM DR Priority configured 1 PIM neighbor count 1 PIM hello interval 30 s PIM LAN delay negotiated 500 ms PIM LAN delay configured 500 ms PIM override interval negotiated 2500 ms PIM override inter...

Page 1398: ...interval PIM neighbor tracking negotiated Negotiated neighbor tracking status enabled disabled PIM neighbor tracking configured Configured neighbor tracking status enabled disabled PIM generation ID...

Page 1399: ...detailed information of join prune messages to send Description Use the display pim join prune command to view the information about the join prune messages to send Example View the information of joi...

Page 1400: ...42 1 View the PIM neighbor information on Ethernet 1 0 of the public instance Sysname display pim neighbor interface ethernet 1 0 Total Number of Neighbors on this interface 3 Neighbor Interface Upti...

Page 1401: ...s all VPN instances group address Multicast group address in the range of 224 0 0 0 to 239 255 255 255 source address Multicast source address mask Mask of the multicast group source address 255 255 2...

Page 1402: ...ifies multicast routing entries on routers directly connecting to the same subnet with the multicast source msdp Specifies routing entries learned from MSDP SA messages niif Specifies multicast routin...

Page 1403: ...G and G entries in the PIM routing table 172 168 0 2 227 0 0 1 An S G entry in the PIM routing table Protocol PIM mode PIM SM or PIM DM Flag Flag of the S G or G entry in the PIM routing table Uptime...

Page 1404: ...the RP the system will delete it Example View the RP information corresponding to the multicast group 224 0 1 1 in the public instance Sysname display pim rp info 224 0 1 1 Vpn instance public net BS...

Page 1405: ...Set the router priority for DR election to 3 in the public instance Sysname system view Sysname pim Sysname pim hello option dr priority 3 hello option holdtime PIM view Syntax hello option holdtime...

Page 1406: ...th of time the device must wait upon receiving a prune message from downstream before taking the prune action Within this period of time if the device receives a prune override message from that downs...

Page 1407: ...ide interval interval undo hello option override interval View Public instance PIM view VPN instance PIM view Parameter interval Prune override interval in milliseconds with an effective range of 1 to...

Page 1408: ...nd PIM SM Related command holdtime join prune PIM view pim holdtime join prune and pim holdtime assert Example Set the global value of the assert timeout time to 100 seconds in the public instance Sys...

Page 1409: ...e range of 100 to 8 100 Description Use the jp pkt size command to configure the maximum size of join prune messages Use the undo jp pkt size command to restore the default setting By default the maxi...

Page 1410: ...l queue size the outgoing interface of the corresponding entry may have been pruned due to timeout before the last join prune message in a queue reaches the upstream device Related commands jp pkt siz...

Page 1411: ...stance mvpn Sysname pim mvpn pim bsr boundary Syntax pim bsr boundary undo pim bsr boundary View Interface view Parameter None Description Use the pim bsr boundary command to configure a BSR admin sco...

Page 1412: ...priority priority undo pim hello option dr priority View Interface view Parameter priority Router priority for DR election in the range of 0 to 4294967295 A larger value of this argument means a high...

Page 1413: ...0 seconds on Ethernet1 0 Sysname system view Sysname interface ethernet 1 0 Sysname Ethernet1 0 pim hello option holdtime 120 pim hello option lan delay Syntax pim hello option lan delay interval undo...

Page 1414: ...amely neighbor tracking is disabled Related command hello option neighbor tracking PIM view Example Disable join suppression on Ethernet 1 0 Sysname system view Sysname interface ethernet 1 0 Sysname...

Page 1415: ...to configure the assert timeout time on the current interface Use the undo pim holdtime assert command to restore the default setting By default the assert timeout time is 180 seconds Related command...

Page 1416: ...e 280 pim require genid Syntax pim require genid undo pim require genid View Interface view Parameter None Description Use the pim require genid command enable rejection of hello messages without Gene...

Page 1417: ...fresh feature on the interface Use the undo pim state refresh capable command to disable the state fresh feature By default the state refresh feature is enabled Related command state refresh interval...

Page 1418: ...ello interval in seconds with an effective range of 1 to 2 147 483 647 Description Use the pim timer hello command to configure on the current interface the interval at which hello messages are sent U...

Page 1419: ...View Interface view Parameter interval Maximum delay in seconds between hello messages with an effective range of 1 to 5 Description Use the pim triggered hello delay command to configure the maximum...

Page 1420: ...he permit statement of the ACL can be accepted by the RP Description Use the register policy command to configure an ACL rule to filter register messages Use the undo register policy command to remove...

Page 1421: ...stem view Sysname pim Sysname pim register suppression timeout 70 register whole checksum PIM view Syntax register whole checksum undo register whole checksum View Public instance PIM view VPN instanc...

Page 1422: ...ntrol message counters command to reset PIM control message counters Example Reset PIM control message counters on all interfaces in the public instance Sysname reset pim control message counters sour...

Page 1423: ...source and group addresses and discards packets that fail the match If this command is executed repeatedly the last configuration will take effect Example In the public instance configure the router t...

Page 1424: ...witches to the SPT immediately after it receives the first multicast packet from the RPT Note that To adjust the order of an existing ACL in the group policy list you can use the acl number argument t...

Page 1425: ...ange to be 232 1 0 0 16 in the public instance Sysname system view Sysname acl number 2000 Sysname acl basic 2000 rule permit source 232 1 0 0 0 0 255 255 Sysname acl basic 2000 quit Sysname pim Sysna...

Page 1426: ...ate refresh rate limit command to restore the default setting By default the device waits 30 seconds before receiving a new state refresh message Related command pim state refresh capable state refres...

Page 1427: ...system group 224 0 0 0 4 preferred Specifies to give priority to the static RP if the static RP conflicts with the dynamic RP If you do not include the preferred keyword in your command the dynamic R...

Page 1428: ...Parameter interval Hello interval in seconds with an effective range of 1 to 2 147 483 647 Description Use the timer hello command to configure the hello interval globally Use the undo timer hello co...

Page 1429: ...cription Use the timer spt switch command to configure the interval between checks of the traffic rate threshold before RPT to SPT switchover Use the undo timer spt switch command to restore the defau...

Page 1430: ...1430 CHAPTER 90 PIM CONFIGURATION COMMANDS...

Page 1431: ...on the specified interface or all interfaces Related command multicast ipv6 boundary Example Display the IPv6 multicast boundary information configured on all interfaces Sysname display multicast ipv...

Page 1432: ...se outgoing interface is the specified ones exclude Displays the routing entries whose outgoing interface list OIL excludes the specified interface include Displays the routing entries whose OIL inclu...

Page 1433: ...ing interface outgoing interface type and number Matched 146754 packets 10272780 bytes Wrong If 0 packets Number of matched packets number of bytes number of packets with incoming interface errors For...

Page 1434: ...h ipv6 group address prefix length incoming interface interface type interface number register outgoing interface exclude include match interface type interface number register View Any view Parameter...

Page 1435: ...wnstream interface 1 Ethernet1 1 display multicast ipv6 rpf info Syntax display multicast ipv6 rpf info ipv6 source address ipv6 group address View Any view Parameter ipv6 source address IPv6 multicas...

Page 1436: ...ngth Prefix length of the IPv6 multicast group address in the range of 8 to 128 all Deletes all IPv6 multicast boundaries configured on the interface Description Use the multicast ipv6 boundary comman...

Page 1437: ...ured the previously configured B will be removed Related command display multicast ipv6 boundary Example Configure Ethernet 1 0 to be the forwarding boundary of the IPv6 multicast group FF03 101 16 Sy...

Page 1438: ...o configure the maximum number of routing entries in the IPv6 multicast forwarding table Use the undo multicast ipv6 forwarding table route limit command to restore the maximum number of routing entri...

Page 1439: ...multicast ipv6 longest match View System view Parameter None Description Use the multicast ipv6 longest match command to configure route selection based on the longest match namely based on the prefix...

Page 1440: ...sname system view Sysname interface ethernet 1 0 Sysname Ethernet1 0 multicast ipv6 minimum hoplimit 8 multicast ipv6 routing enable Syntax multicast ipv6 routing enable undo multicast ipv6 routing en...

Page 1441: ...e number Interface type and interface number register Specifies the register interface all Clears all forwarding entries from the IPv6 multicast forwarding table Description Use the reset multicast ip...

Page 1442: ...he specified one interface type interface number Interface type and interface number register Specifies a registration interface all Clears all routing entries from the IPv6 multicast routing table De...

Page 1443: ...roups Description Use the display mld group command to view information of MLD multicast groups Note that If you do not specify an IPv6 multicast group address this command will display the MLD inform...

Page 1444: ...lue of query interval for MLD in seconds 125 Value of other querier present interval for MLD in seconds 255 Value of maximum query response time for MLD in seconds 10 Value of startup query interval i...

Page 1445: ...ersion running on the interface MLD group policy MLD group policy Value of query interval for MLD in seconds MLD query interval in seconds Value of other querier present interval for MLD in seconds ML...

Page 1446: ...he fast leave feature globally By default the fast leave feature is disabled that is the MLD querier sends a multicast address specific query upon receiving an MLD done message from a host instead of...

Page 1447: ...nd display mld interface Example Globally set the last listener query interval to 3 seconds Sysname system view Sysname mld Sysname mld last listener query interval 3 max response time MLD view Syntax...

Page 1448: ...ew This command can take effect only after IPv6 multicast routing is enabled on the device Related command mld enable and multicast ipv6 routing enable on page 1440 Example Enter MLD view Sysname syst...

Page 1449: ...the mld fast leave command to enable the fast leave function on the current interface for IPv6 multicast group members Use the undo mld fast leave command to disable the fast leave function on the cu...

Page 1450: ...d in the MLDv2 report message instead of the source address in the IPv6 message Example Configure an IPv6 ACL so that hosts on the subnet attached to Ethernet 1 0 can join the IPv6 multicast group FF0...

Page 1451: ...on the interface Use the undo mld max response time command to restore the default configuration By default the maximum response delay for MLD general query messages is 10 seconds The maximum respons...

Page 1452: ...obust count robust value undo mld robust count View Interface view Parameter robust value MLD querier robustness variable with an effective range of 2 to 5 The MLD robustness variable determines the n...

Page 1453: ...rnet 1 0 Sysname Ethernet1 0 undo mld send router alert mld static group Syntax mld static group ipv6 group address source ipv6 source address undo mld static group all ipv6 group address source ipv6...

Page 1454: ...er other querier present View Interface view Parameter interval MLD other querier present interval in seconds in the range of 60 to 300 Description Use the mld timer other querier present command to c...

Page 1455: ...tore the default configuration By default the query interval is 125 seconds Related command mld timer query mld timer other querier present and display mld interface Example Set the query interval to...

Page 1456: ...to the upper layer protocol for processing Related command mld require router alert and send router alert MLD view Example Globally configure the device to discard MLD messages without the Router Aler...

Page 1457: ...entries on Ethernet 1 0 Sysname reset mld group interface ethernet 1 0 all Clear all MLD forwarding entries for the IPv6 multicast group FF03 101 10 on Ethernet 1 0 Sysname reset mld group interface...

Page 1458: ...ble the insertion of the Router Alert option into MLD messages to be sent Use the undo send router alert command to globally disable the insertion of the Router Alert option into MLD messages to be se...

Page 1459: ...esent timer query MLD view robust count MLD view max response time MLD view and display mld interface Example Set the MLD other querier present interval for non queriers to 200 seconds globally Sysnam...

Page 1460: ...number MLD version number 1 or 2 Description Use the version command to configure the MLD version globally Use the undo version command to restore the default MLD version By default the MLD version is...

Page 1461: ...command to remove the restriction of the BSR address range By default there are no restrictions on the BSR address range namely all the received BSR messages are regarded to be valid Example Configure...

Page 1462: ...6 PIM view c bsr priority IPv6 PIM view and c rp IPv6 PIM view Example Configure the interface with an IPv6 address of 1101 1 as a C BSR Sysname system view Sysname pim ipv6 Sysname pim6 c bsr 1101 1...

Page 1463: ...s 60 seconds so the default bootstrap timeout 60 2 10 130 seconds Related command c bsr IPv6 PIM view and c bsr interval IPv6 PIM view Example Set the bootstrap timeout time to 150 seconds Sysname sys...

Page 1464: ...tion Use the c bsr priority command to configure the global C BSR priority Use the undo c bsr priority command to restore the default setting By default the C BSR priority is 0 Related command c bsr I...

Page 1465: ...and to remove the related C RP configuration No C RPs are configured by default Note that If you do not specify an IPv6 multicast group range for the C RP the C RP will serve all IPv6 multicast groups...

Page 1466: ...terval C RP timeout in seconds with an effective range of 1 to 65 535 Description Use the c rp holdtime command to configure the global C RP timeout time namely the length of time the BSR waits for a...

Page 1467: ...st groups By default there are no restrictions on C RP address ranges and the address ranges of served groups namely all received C RP messages are assumed to be legal Example Configure a C RP address...

Page 1468: ...l 60 Next advertisement scheduled at 00 00 48 display pim ipv6 claimed route Syntax display pim ipv6 claimed route ipv6 source address View Any view Table 354 Description on the fields of the display...

Page 1469: ...rs Syntax display pim ipv6 control message counters message type probe register register stop interface interface type interface number message type assert bsr crp graft graft ack hello join prune sta...

Page 1470: ...ge counters PIM global control message counters Received Sent Invalid Register 20 37 2 Register Stop 25 20 1 Probe 10 5 0 PIM control message counters for interface Ethernet1 0 Received Sent Invalid A...

Page 1471: ...ar interface verbose Displays the detailed PIM information Description Use the display pim ipv6 interface command to view the IPv6 PIM information on the specified interface or all interfaces Example...

Page 1472: ...ption on the fields of the display pim ipv6 interface command Field Description Interface Interface name and its IPv6 address PIM version IPv6 PIM version PIM mode IPv6 PIM mode dense or sparse PIM DR...

Page 1473: ...ghbor verbose Displays the detailed information of join prune messages to send Description Use the display pim join prune command to view the information about the join prune messages to send Example...

Page 1474: ...ors 2 Neighbor Interface Uptime Expires Dr Priority FE80 A01 101 1 Eth1 0 02 50 49 00 01 31 1 FE80 A01 102 1 Eth1 1 02 49 39 00 01 42 1 Table 359 Description on the fields of the display pim join prun...

Page 1475: ...ays routing entries that contain the specified interface as the incoming interface interface type interface number Specifies an interface by its type and number register Specifies the register interfa...

Page 1476: ...state machine FSM Description Use the display pim ipv6 routing table command to view IPv6 PIM routing table information Related command display multicast ipv6 routing table on page 1434 Example View...

Page 1477: ...ts for the next bootstrap message from the BSR if the bootstrap message does not contain information of the RP the system will delete it Example View the RP information corresponding to the IPv6 multi...

Page 1478: ...cl6 number the embedded RP feature will be enabled for all the IPv6 multicast groups in the default embedded RP address scopes if you specify acl6 number the embedded RP feature will be enabled for on...

Page 1479: ...e of the router priority for DR election Use the undo hello option dr priority command to restore the default setting By default the router priority for DR election is 1 Related command pim ipv6 hello...

Page 1480: ...e namely the length of time the device must wait upon receiving a prune message from downstream before taking the prune action Within this period of time if the device receives a prune override messag...

Page 1481: ...tion override interval View IPv6 PIM view Parameter interval Prune override interval in milliseconds with an effective range of 1 to 65 535 Description Use the hello option override interval command t...

Page 1482: ...sname system view Sysname pim ipv6 Sysname pim6 holdtime assert 100 holdtime join prune IPv6 PIM view Syntax holdtime join prune interval undo holdtime join prune View IPv6 PIM view Parameter interval...

Page 1483: ...ipv6 Sysname pim6 jp pkt size 1500 jp queue size IPv6 PIM view Syntax jp queue size queue size undo jp queue size View IPv6 PIM view Parameter queue size Maximum number of S G entries in a join prune...

Page 1484: ...Configure a join prune messages to contain a maximum of 2 000 S G entries Sysname system view Sysname pim ipv6 Sysname pim6 jp queue size 2000 pim ipv6 Syntax pim ipv6 undo pim ipv6 View System view P...

Page 1485: ...oundary of the BSR admin scope region Sysname system view Sysname interface ethernet 1 0 Sysname Ethernet1 0 pim ipv6 bsr boundary pim ipv6 dm Syntax pim ipv6 dm undo pim ipv6 dm View Interface view P...

Page 1486: ...on is 1 Related command hello option dr priority IPv6 PIM view Example Set the router priority for DR election to 3 on Ethernet 1 0 Sysname system view Sysname interface ethernet 1 0 Sysname Ethernet1...

Page 1487: ...une delay to 500 milliseconds Related command pim ipv6 hello option override interval hello option override interval IPv6 PIM view and hello option lan delay IPv6 PIM view Example Set the prune delay...

Page 1488: ...l on the current interface Use the undo pim ipv6 hello option override interval command to restore the default setting By default the prune override interval is 2 500 milliseconds Related command pim...

Page 1489: ...view Parameter interval Join prune timeout time in seconds with an effective range of 1 to 65 535 Description Use the pim ipv6 holdtime join prune command to configure the join prune timeout time on...

Page 1490: ...w Sysname interface ethernet 1 0 Sysname Ethernet1 0 pim ipv6 require genid pim ipv6 sm Syntax pim ipv6 sm undo pim ipv6 sm View Interface view Parameter None Description Use the pim ipv6 sm command t...

Page 1491: ...pim ipv6 timer graft retry interval undo pim ipv6 timer graft retry View Interface view Parameter interval Graft retry period in seconds with an effective range of 1 to 65 535 Description Use the pim...

Page 1492: ...ne interval undo pim ipv6 timer join prune View Interface view Parameter interval Join prune interval in seconds with an effective range of 1 to 2 147 483 647 Description Use the pim ipv6 timer join p...

Page 1493: ...sname Ethernet1 0 pim ipv6 trigged hello delay 3 probe interval IPv6 PIM view Syntax probe interval interval undo probe interval View IPv6 PIM view Parameter interval Register probe time in seconds wi...

Page 1494: ...3 64 Sysname system view Sysname acl ipv6 number 3000 Sysname acl6 adv 3000 rule permit ipv6 source 3 1 64 destination ff0e 13 64 Sysname acl6 adv 3000 quit Sysname pim ipv6 Sysname pim6 register poli...

Page 1495: ...ter to calculate the checksum based on the entire register message Sysname system view Sysname pim ipv6 Sysname pim6 register whole checksum reset pim ipv6 control message counters Syntax reset pim ip...

Page 1496: ...iew Example Set the IPv6 multicast source lifetime to 200 seconds Sysname system view Sysname pim ipv6 Sysname pim6 source lifetime 200 source policy IPv6 PIM view Syntax source policy acl6 number und...

Page 1497: ...e is 1 to 4 194 304 This argument is not supported on a switch infinity Disables RPT to SPT switchover group policy acl6 number Uses this threshold for IPv6 multicast groups that match the specified I...

Page 1498: ...st traffic rate configuration matched in sequence will take effect For a switch once an IPv6 multicast forwarding entry is created subsequent IPv6 multicast data will not be encapsulated in register m...

Page 1499: ...efresh hoplimit hoplimit value undo state refresh hoplimit View IPv6 PIM view Parameter hoplimit value Hop limit value of state refresh messages in the range of 1 to 255 Description Use the state refr...

Page 1500: ...refresh rate limit interval undo state refresh rate limit View IPv6 PIM view Parameter interval Time to wait before receiving a new refresh message in seconds and with an effective range of 1 to 6553...

Page 1501: ...the undo static rp command to configure a static RP By default no static RP is configured Note that IPv6 PIM SM or IPv6 PIM DM cannot be enabled on an interface that serves as a static RP When the IP...

Page 1502: ...Sysname pim6 timer hello 40 timer join prune IPv6 PIM view Syntax timer join prune interval undo timer join prune View IPv6 PIM view Parameter interval Join prune interval in seconds with an effectiv...

Page 1503: ...t setting By default the traffic rate threshold is checked at an interval of 15 seconds before RPT to SPT switchover Before using this command be sure to use the spt switch threshold command to config...

Page 1504: ...1504 CHAPTER 93 IPV6 PIM CONFIGURATION COMMANDS...

Page 1505: ...roup information for VPN Instance mvpn Share group 225 2 2 2 MTunnel address 1 1 1 1 display multicast domain vpn instance switch group receive Syntax display multicast domain vpn instance vpn instanc...

Page 1506: ...multicast domain vpn instance mvpn switch group receive MD switch group information received by VPN Instance mvpn Total 2 switch groups for 8 entries Total 2 switch groups for 8 entries matched switch...

Page 1507: ...d multicast source group address in the range of 0 to 32 the system default is 32 vpn group address VPN multicast group address in the range of 224 0 1 0 to 239 255 255 255 Description Use the display...

Page 1508: ...ups for 3 entries Total 2 switch groups for 3 entries matched 226 1 1 0 reuse_count 1 226 1 1 1 reuse_count 1 226 1 1 2 reuse_count 1 multicast domain holddown time Syntax multicast domain holddown ti...

Page 1509: ...mmand to enable the switch group reuse log function Use the undo multicast domain log switch group reuse command to disable the switch group reuse log function By default the switch group reuse log fu...

Page 1510: ...instance view To configure a new group address and MTI for a VPN instance you must remove the existing configuration The undo multicast domain share group command removes the configured MTI and the c...

Page 1511: ...The start address of the switch group pool in the range of 224 0 1 0 to 239 255 255 255 mask Mask for addresses in the switch group pool in the range of 255 255 255 0 to 255 255 255 255 meaning the sw...

Page 1512: ...overlap with that for any other VPN instance A new configuration with this command in the same VPN instance supersedes the existing configuration The threshold threshold value command option is not su...

Page 1513: ...asic Configuration Commands on page 2405 and Information Center Configuration Commands on page 2425 display mpls fast forwarding cache Syntax display mpls fast forwarding cache verbose View Any view P...

Page 1514: ...and to display information about the ILM table With no incoming label specified the command displays the ILM entries of all incoming labels Examples Display the ILM entry with a specified incoming lab...

Page 1515: ...Sysname display mpls interface Interface Status TE Attr LSP Count CRLSP Count Eth1 0 Up En 0 0 Eth1 1 Up En 0 0 Display detailed information about MPLS enabled interface Ethernet 1 0 Sysname display...

Page 1516: ...label command to display the status of one or more specified or all labels Example Display the status of a specified label Sysname display mpls label 1280 Label alloc state means not used means used D...

Page 1517: ...will display all LDP information in detail Related command mpls ldp system view mpls ldp interface view Example Display all LDP information in detail Sysname display mpls ldp all verbose LDP Global In...

Page 1518: ...R neighbor Keepalive timer Graceful Restart Whether GR is enabled FT Reconnect Timer FT reconnection timer of GR Recovery Timer Restore timer of GR MTU Signaling Whether MTU signaling is supported LDP...

Page 1519: ...l vpn instance vpn instance name interface type interface number verbose begin exclude include regular expression display mpls ldp interface all verbose begin exclude include regular expression View A...

Page 1520: ...faces Sysname display mpls ldp interface verbose LDP Interface Information in Public Network Interface Name Ethernet1 0 LDP ID 172 17 1 1 0 Transport Address 172 17 1 1 Entity Status Active Interface...

Page 1521: ...specified string regular expression Regular expression a string of 1 to 80 characters No blank space is acceptable Description Use the display mpls ldp lsp command to display information about LSPs e...

Page 1522: ...Parameter vpn instance name Name of the VPN instance a case sensitive string of 1 to 31 characters peer id LSR ID of the peer verbose Displays detailed information Filters the output information begi...

Page 1523: ...f Peer Keepalive Timer 45 Sec Recovery Timer Reconnect Timer Peer Label Advertisement Mode Downstream Unsolicited Peer Discovery Source Ethernet1 0 Peer LDP ID 168 1 1 1 0 Peer Max PDU Length 4096 Pee...

Page 1524: ...e ip Example Display information about remote peer BJI LDP Remote Entity Information Remote Peer Name BJI Remote Peer IP 3 3 3 3 LDP ID 1 1 1 1 0 Transport Address 1 1 1 1 Configured Keepalive Timer 4...

Page 1525: ...ith the specified string include Includes the specified string exclude Excludes the specified string regular expression Regular expression a string of 1 to 80 characters No blank space is acceptable T...

Page 1526: ...t Rcvd 6 6 Message Count Label Advertisement Mode Downstream Unsolicited Label Resource Status Peer Local Available Available Peer Discovery Mechanism Extended Session existed time 000 00 01 DDD HH MM...

Page 1527: ...ent by the current LSR during the session Y Number of Keepalive messages received by the current LSR during the session Negotiated Keep Alive Timer Negotiated Keepalive timer Label Advertisement Mode...

Page 1528: ...60 Sec Graceful Restart Off FT Reconnect Timer 60 Sec MTU Signaling On Recovery Timer 60 Sec LDP Instance Information Instance ID 1 VPN Instance vpn1 Instance Status Active LSR ID 1 1 1 9 Hop Count L...

Page 1529: ...SPs rsvp te Displays information about CR LSPs established by RSVP TE static Displays information about static LSPs static cr Displays information about static CR LSPs egress Displays information abou...

Page 1530: ...Nexthop 127 0 0 1 In Label 3 Out Label NULL In Interface Serial2 0 Out Interface LspIndex 10241 Token 0 LsrType Egress Outgoing token 0 Label Operation POP Table 379 Description on the fields of the...

Page 1531: ...number Token Token the pubic network LsrType Role of the LSR for the LSP Outgoing Token Token inter AS VPN Table 380 Description on the fields of the display mpls lsp verbose command Field Description...

Page 1532: ...1 1024 1 Record s Found Display all NHLFE entries Sysname display mpls nhlfe Out Interface Token Oper Nexthop Deep Stack S2 0 2 PUSH 88 1 1 2 1 1024 1 Record s Found display mpls route state Syntax di...

Page 1533: ...se View Any view Parameter lsp name Name for the LSP a string of 1 to 15 characters exclude Excludes the specified FEC include Includes the specified FEC dest addr Destination IP address of the FEC ma...

Page 1534: ...ype interface number all View Any view Table 384 Description on the fields of the display mpls static lsp command Field Description Name Name of the LSP FEC Forwarding equivalence class I O Label Inco...

Page 1535: ...e all Statistics for Interface IN Incoming Interface Ethernet1 0 Octets 0 Packets 0 Errors 0 Disables 0 Failed Label Lookup 0 Start Time 2004 04 28 10 23 55 End Time 2004 04 28 10 23 55 Statistics for...

Page 1536: ...ing interface Octets Number of bytes received by the interface Packets Number of packets received by the interface Errors Number of inbound packet processing errors on the interface Disables Number of...

Page 1537: ...0 00 00 00 00 End Time 0000 00 00 00 00 00 Statistics for Lsp IN LSP Name LSP Index DynamicLsp 9218 InSegment Octets 0 Packets 0 Errors 0 Down 0 Start Time 0000 00 00 00 00 00 End Time 0000 00 00 00 0...

Page 1538: ...readvertise command to restore the default By default label readvertisement is enabled in DU mode Example Enable DU mode label readvertisement for the public network LDP Sysname system view Sysname m...

Page 1539: ...estart MPLS LDP view Syntax graceful restart undo graceful restart View MPLS LDP view Parameter None Description Use the graceful restart command to enable MPLS LDP Graceful Restart GR Use the undo gr...

Page 1540: ...ess time in the range 60 to 300 seconds Description Use the graceful restart timer neighbor liveness command to set the LDP neighbor liveness time Use the undo graceful restart timer neighbor liveness...

Page 1541: ...reestablished LSPs based on the sessions will be removed and need to be reestablished Example Set the FT reconnect time to 100 seconds Sysname system view Sysname mpls ldp Sysname mpls ldp graceful r...

Page 1542: ...count for loop detection Use the undo hops count command to restore the default By default the maximum hop count for loop detection is 32 Note that You must configure the command before enabling LDP...

Page 1543: ...he penultimate hop an implicit null label n The type of label for the egress to distribute depends on whether the penultimate hop supports PHP You must use the reset mpls ldp command to reset LDP sess...

Page 1544: ...ervative Works in conservative mode keeping only label to FEC bindings that are from its next hops for the FECs liberal Works in liberal mode keeping any received label to FEC binding regardless of wh...

Page 1545: ...work LDP Sysname system view Sysname mpls ldp Sysname mpls ldp loop detect Enable loop detection for LDP instance named vpn1 Sysname system view Sysname mpls ldp vpn instance vpn1 Sysname mpls ldp vpn...

Page 1546: ...st affects only static routes and IGP routes For information about IP address prefix list refer to IP Addressing Configuration Commands on page 781 Example Specify LDP to allow all static and IGP rout...

Page 1547: ...ion and set the password which must be the same as that configured on the peer Use the undo md5 password command to disable LDP MD5 authentication By default LDP MD5 authentication is disabled Changin...

Page 1548: ...lity You need to enable MPLS globally before enabling it for an interface You need to enter MPLS view to configure other MPLS commands Related command mpls lsr id Example Enable MPLS for the current n...

Page 1549: ...ame mpls ldp Enable LDP for VPN instance vpn1 Sysname System view Sysname mpls ldp vpn instance vpn1 Sysname mpls ldp vpn instance vpn1 mpls ldp interface view Syntax mpls ldp undo mpls ldp View Inter...

Page 1550: ...name Ethernet1 0 mpls ldp mpls ldp advertisement Syntax mpls ldp advertisement dod du undo mpls ldp advertisement View Interface view Parameter dod Works in downstream on demand DoD mode advertising a...

Page 1551: ...remote bji mpls ldp timer hello hold Syntax mpls ldp timer hello hold value undo mpls ldp timer hello hold View Interface view MPLS LDP remote peer view Parameter value Length of time for the Hello t...

Page 1552: ...ds Description Use the mpls ldp timer keepalive hold command to set the keepalive timers Use the undo mpls ldp timer keepalive hold command to restore the defaults In interface view you configure the...

Page 1553: ...transport address command to configure the LDP transport addresses Use the undo mpls ldp transport address command to restore the defaults By default the transport addresses are both the MPLS LSR ID I...

Page 1554: ...n the LSR as the ID Related command display mpls interface Example Set the LSR ID to 3 3 3 3 Sysname system view Sysname mpls lsr id 3 3 3 3 mtu signalling Syntax mtu signalling undo mtu signalling Vi...

Page 1555: ...LDP Sysname system view Sysname mpls ldp Sysname mpls ldp path vectors 3 Set the path vector maximum hop count to 3 for LDP instance named vpn1 Sysname system view Sysname mpls ldp vpn instance vpn1 S...

Page 1556: ...the mask The mask length argument ranges from 0 to 32 destination ip addr header Specifies the IP header destination address for the MPLS echo request message which can be any address on segment 127...

Page 1557: ...dp remote bji remote ip 3 3 3 3 reset mpls fast forwarding cache Syntax reset mpls fast forwarding cache View User view Parameter None Description Use the reset mpls fast forwarding cache command to c...

Page 1558: ...2 2 2 2 24 Reset the sessions with a specified peer Sysname reset mpls ldp peer 2 2 2 9 reset mpls statistics interface Syntax reset mpls statistics interface interface type interface number all View...

Page 1559: ...mp agent trap enable mpls View System view Parameter None Description Use the snmp agent trap enable mpls command to enable the MPLS trap function Use the undo snmp agent trap enable command to disabl...

Page 1560: ...type interface number out label out label undo static lsp ingress lsp name View System view Parameter lsp name Name for the LSP a string of 1 to 15 characters dest addr Destination IP address of the...

Page 1561: ...tring of 1 to 15 characters incoming interface interface type interface number Specifies an incoming interface by its type and number in label Incoming label value in the range 16 to 1023 next hop add...

Page 1562: ...nterval that is the interval for collecting statistics Use the undo statistics interval command to restore the default By default the interval is 0 Related command display mpls statistics interface di...

Page 1563: ...o locate an MPLS LSP error Example Locate an error along the LSP to 3 3 3 9 on host 1 1 1 1 Sysname tracert lsp ipv4 3 3 3 9 32 LSP Trace Route FEC LDP IPV4 PREFIX 3 3 3 9 32 press CTRL_C to break TTL...

Page 1564: ...S view Parameter public Enables MPLS IP TTL propagation for public network packets vpn Enables MPLS IP TTL propagation for VPN packets Description Use the ttl propagate command to enable MPLS IP TTL p...

Page 1565: ...ates that the next hop is a loose node which is not necessarily directly connected to the specified node strict Indicates that the next hop is a strict node which must be directly connected to the spe...

Page 1566: ...explicit path pathname View Any view Parameter pathname Specifies a path name a string of 1 to 31 characters Description Use the display explicit path command to display information about an explicit...

Page 1567: ...process ID in the range 1 to 65535 vpn instance vpn instance name Specifies a VPN instance The vpn instance name argument is a string of 1 to 31 characters For the default VPN instance you do not nee...

Page 1568: ...BW Unresrv 7 0 Bytes sec TE Cost 10 Bandwidth Constraint Model Russian Doll Bandwidth Constraints BC 0 6250 Bytes sec BC 1 0 Bytes sec Local Overbooking Multiplier LOM 0 100 LOM 1 100 NBR 0000 0000 0...

Page 1569: ...d bit OL NLPID Network protocol type AREA ADDR IS IS area address INTF ADDR Interface address Router ID Router ID NBR Neighbor COST Cost Admin Group Link administrative group attribute Interface IP Ad...

Page 1570: ...0000 0000 0003 00 0000 0000 0004 01 Type MULACC LinkID 30 1 1 2 0000 0000 0004 00 0000 0000 0004 01 Type MULACC LinkID 30 1 1 2 Total Number of TE Links in Level 2 Area 6 Num Active 6 display isis tra...

Page 1571: ...11 1111 1111 00 Link State 1 RouterId 89 2 2 2 Nbr 1111 1111 1113 00 Link State 1 Total Number of TE Networks in Level 2 Area 1 Num Active 1 display isis traffic eng statistics Syntax display isis tra...

Page 1572: ...c eng sub tlvs Syntax display isis traffic eng sub tlvs process id vpn instance vpn instance name View Any view Parameter process id IS IS process ID in the range 1 to 65535 vpn instance vpn instance...

Page 1573: ...Displays information that includes a defined regular expression exclude Displays information that excludes a defined regular expression regular expression Regular expression a string of 1 to 80 charac...

Page 1574: ...reservation message refresh interval in seconds Path and Resv message refresh retries count Number of Path and Resv message retransmissions Blockade Multiplier Blockade multiplier Graceful Restart St...

Page 1575: ...bally or for an interface Example Display RSVP TE information for interface Ethernet 1 0 Sysname display mpls rsvp te established interface ethernet 1 0 Interface Ethernet1 0 Token Bucket Rate 0 00 Pe...

Page 1576: ...es Example Display information about RSVP TE neighbors on all interfaces Sysname display mpls rsvp te peer Interface Ethernet1 0 Neighbor Addr 80 4 1 1 SrcInstance 841 NbrSrcInstance 928 PSB Count 0 R...

Page 1577: ...sname display mpls rsvp te psb content 19 19 19 19 1 0 29 29 29 29 The PSB Content Tunnel Dest 29 29 29 29 Session Tunnel ID 0 Tunnel ExtID 19 19 19 19 Ingress LSR ID 19 19 19 19 Local LSP ID 1 Previo...

Page 1578: ...ess in the format of X X X X Previous Hop Previous hop address in the format of X X X X In Label Incoming label Out Label Outgoing label Send message ID Instance of sent Message ID Resv Message ID Ins...

Page 1579: ...formation about RSVP TE requests on all interfaces Sysname display mpls rsvp te request Interface Ethernet1 0 Tunnel Dest 2 2 2 2 Ingress LSR ID 3 3 3 3 Local LSP ID 4 Session Tunnel ID 4 NextHopAddr...

Page 1580: ...faces Example Display information about RSVP TE reservations on interface Ethernet 1 0 Sysname display mpls rsvp te reservation interface ethernet 1 0 Interface Ethernet1 0 Tunnel Dest 29 29 29 29 Ing...

Page 1581: ...Displays information that excludes a defined regular expression regular expression Regular expression a string of 1 to 80 characters without spaces Description Use the display mpls rsvp te rsb content...

Page 1582: ...R ID in the format of X X X X Next Hop Next hop address in the format of X X X X Reservation Style Reservation style SE or FF Reservation Interface Reservation interface name Reserve Incoming Interfac...

Page 1583: ...tion on interface Ethernet 1 0 Sysname display mpls rsvp te sender interface ethernet 1 0 Interface Ethernet1 0 Tunnel Dest 29 29 29 29 Ingress LSR ID 19 19 19 19 LSP ID 1 Session Tunnel ID 1 Session...

Page 1584: ...lay global RSVP TE statistics Sysname display mpls rsvp te statistics global LSR ID 1 1 1 1 PSB Count 1 RSB Count 1 RFSB Count 0 TCSB Count 1 LSP Count 1 Total Statistics Information PSB CleanupTimeOu...

Page 1585: ...earCounter 0 RecResvTearCounter 0 SendSrefreshCounter 0 RecSrefreshCounter 0 SendAckMsgCounter 0 RecAckMsgCounter 0 SendErrMsgCounter 0 RecErrMsgCounter 0 RecReqFaultCounter 0 Table 403 Description on...

Page 1586: ...display mpls static cr lsp total statics cr lsp 1 RecAckCounter Number of received Ack messages SendPathErrCounter Number of transmitted PathErr messages RecPathErrCounter Number of received PathErr...

Page 1587: ...anges from 0 to 4294967295 for IS IS it takes the value of 1 or 2 Table 404 Description on the fields of the display mpls static cr lsp command Field Description Name Static CR LSP name FEC Forwarding...

Page 1588: ...command to display information about CSPF based TEDB by specified criteria Example Display TEDB information in network LSAs Sysname display mpls te cspf tedb network lsa Maximum Network LSA Supported...

Page 1589: ...ss IGP Process Id Area Neighbor 1 3 3 3 3 20 1 1 2 OSPF 100 1 2 2 2 2 3 3 3 3 2 3 3 3 3 20 1 1 2 ISIS 100 Level 1 3 3 3 3 2 2 2 2 Process Id IGP process ID Area Area to which the router belongs Neighb...

Page 1590: ...rved for Class type 1 0 10 kbps 1 10 kbps 2 10 kbps 3 10 kbps 4 10 kbps 5 10 kbps 6 10 kbps 7 10 kbps MPLS LSR Id 1 1 1 1 IGP Type ISIS Process Id 100 MPLS TE Link Count 2 Link 1 Interface IP Address...

Page 1591: ...for Class type 0 0 0 kbps 1 0 kbps 2 0 kbps 3 0 kbps 4 0 kbps 5 0 kbps Table 409 Description on the fields of the display mpls te cspf tedb node command Field Description MPLS LSR Id MPLS LSR ID of no...

Page 1592: ...links of all interfaces Sysname display mpls te link administration admission control LspID In Out IF S H Prio CT BW kbps Table 410 Description on the fields of display mpls te cspf tedb interface Fie...

Page 1593: ...s te link administration bandwidth allocation Link ID Ethernet1 0 Physical Bandwidth Type0 0 kbits sec Physical Bandwidth Type1 0 kbits sec Reservable Bandwidth Type0 0 kbits sec Reservable Bandwidth...

Page 1594: ...t Displays tunnels created taking current device as a transit node egress Displays tunnels created taking current device as the egress name name Displays the tunnel with a particular name This could b...

Page 1595: ...splay information about MPLS TE tunnels The output may vary by signaling protocol Sysname display mpls te tunnel LSP Id Destination In Out If Name 1 1 1 9 1024 3 3 3 9 Eth1 0 Tunnel0 1 1 1 9 2048 3 3...

Page 1596: ...ID 1 1 1 9 10 Hop information Hop 0 192 1 1 1 Hop 1 12 1 1 2 Hop 2 10 202 2 2 Table 414 Description on the fields of the display mpls te tunnel verbose command Field Description No Number LSP Id LSP...

Page 1597: ...s te tunnel interface command to display information about MPLS TE tunnel interfaces on this node Example Display information about MPLS TE tunnel interfaces on this node Sysname display mpls te tunne...

Page 1598: ...W Interfaces Protected VPN Bind Type NONE VPN Bind Value Car Policy Disabled Table 417 Description on the fields of display mpls te tunnel interface command Field Description Tunnel Name Tunnel name T...

Page 1599: ...LSA s of the database BackUpBW Flag Backup bandwidth flag BackUpBW Type Backup bandwidth type BackUpBW Backup bandwidth Route Pinning Route pinning function Retry Limit Maximum number of setup retries...

Page 1600: ...reserved BW 4 0 bytes sec Unreserved BW 5 0 bytes sec Unreserved BW 6 0 bytes sec Unreserved BW 7 0 bytes sec Bandwidth Constraints BC 0 bytes sec BC 1 bytes sec Local OverBooking Multipliers LOM 0 1...

Page 1601: ...face Address Remote interface address TE Metric TE metric Maximum bandwidth Maximum bandwidth Maximum reservable bandwidth Maximum reservable bandwidth Admin Group Administrative group attribute Globa...

Page 1602: ...splay tunnel info statistics Tunnel Allocation Method GLOBAL Avail Tunnel ID Value 262144 Total Tunnel ID Allocated 1 LSP 1 GRE 0 CRLSP 0 LOCAL IFNET 0 MPLS LOCAL IFNET 0 Type Approach to automatic ro...

Page 1603: ...F Sysname system view Sysname ospf 100 Sysname ospf 100 enable traffic adjustment Enable IGP shortcut when the IGP protocol is IS IS Sysname system view Sysname isis 1 Sysname isis 1 enable traffic ad...

Page 1604: ...nt advertise Enable forwarding adjacency when the IGP protocol is IS IS Sysname system view Sysname isis 1 Sysname isis 1 enable traffic adjustment advertise explicit path Syntax explicit path pathnam...

Page 1605: ...s specified by the ip address1 argument in the explicit path The specified IP addresses could be link IP addresses or router IDs of nodes include Includes the IP address specified by the ip address2 a...

Page 1606: ...pls mpls rsvp te Enable RSVP TE on interface Ethernet 1 0 Sysname system view Sysname interface ethernet 1 0 Sysname Ethernet1 0 mpls rsvp te mpls rsvp te authentication Syntax mpls rsvp te authentica...

Page 1607: ...Sysname system view Sysname interface ethernet 1 0 Sysname Ethernet1 0 mpls rsvp te authentication plain partner123 mpls rsvp te blockade multiplier Syntax mpls rsvp te blockade multiplier number undo...

Page 1608: ...ceful restart View MPLS view Parameters None Description Use the mpls rsvp te graceful restart command to enable the GR capability for MPLS RSVP TE Use the undo mpls rsvp te graceful restart command t...

Page 1609: ...pls rsvp te hello mpls rsvp te hello lost Syntax mpls rsvp te hello lost times undo mpls rsvp te hello lost View MPLS view Parameter times Maximum number of consecutive hello losses before an RSVP nei...

Page 1610: ...ultiplier command to configure the keep multiplier for the path state block PSB and reservation state block RSB Use the undo mpls rsvp te keep multiplier command to restore default The default keep mu...

Page 1611: ...mpls rsvp te resvconfirm Syntax mpls rsvp te resvconfirm undo mpls rsvp te resvconfirm View MPLS view Parameter None Description Use the mpls rsvp te resvconfirm command to enable reservation confirm...

Page 1612: ...yntax mpls rsvp te timer graceful restart recovery recovery time undo mpls rsvp te timer graceful restart recovery View MPLS view Parameters recovery time RSVP TE GR recovery interval in seconds in th...

Page 1613: ...ello Syntax mpls rsvp te timer hello timevalue undo mpls rsvp te timer hello View MPLS view Parameter timevalue Hello interval in the range 1 to 60 seconds Description Use the mpls rsvp te timer hello...

Page 1614: ...range 1 to 10 The default is 1 retransmit value retrans timer value Initial retransmission interval in the range 500 to 3000 milliseconds The default is 500 milliseconds Description Use the mpls rsvp...

Page 1615: ...and enables MPLS TE globally and its undo form disables MPLS TE and removes all CR LSPs When performed in interface view the mpls te command enables MPLS TE on an interface and its undo form disables...

Page 1616: ...Description Use the mpls te affinity property command to configure the link affinity attribute of the tunnel Use the undo mpls te affinity property command to restore the default The default affinity...

Page 1617: ...atic bandwidth adjustment and output rate collection are disabled If automatic bandwidth adjustment is enabled bandwidth tuning happens every 24 hours without upper and lower bandwidth limits n Suppor...

Page 1618: ...width View Tunnel interface view Parameter bandwidth Total bandwidth that the bypass tunnel also called the protection tunnel can protect in the range 1 to 32000000 kbps bc0 Indicates that only the LS...

Page 1619: ...BC0 bc1 Obtains bandwidth from BC1 bandwidth Bandwidth needed by the MPLS TE tunnel in the range 1 to 32000000 kbps Description Use the mpls te bandwidth command to assign bandwidth to the MPLS TE tu...

Page 1620: ...urces are increasing and decreasing Use the undo mpls te bandwidth change thresholds command to restore the default The default IGP flooding thresholds in both up and down directions are 10 Example On...

Page 1621: ...Example Enable CSPF Sysname system view Sysname mpls Sysname mpls mpls te cspf mpls te cspf timer failed link Syntax mpls te cspf timer failed link timer interval undo mpls te cspf timer failed link V...

Page 1622: ...and is not supported when the signaling protocol is CR LDP Fast reroute cannot be used together with the mpls te resv style ff command Example Reroute MPLS TE tunnel 0 to an available bypass tunnel in...

Page 1623: ...erface ethernet 1 0 Sysname Ethernet1 0 mpls te fast reroute bypass tunnel tunnel 0 mpls te igp advertise Syntax mpls te igp advertise hold time value undo mpls te igp advertise View Tunnel interface...

Page 1624: ...ign a metric to the MPLS TE tunnel Use the undo mpls te igp metric command to restore the default By default TE tunnels take their IGP metrics Example Assign MPLS TE tunnel 0 a relative metric of 1 fo...

Page 1625: ...tribute bits with the corresponding link affinity attribute bits of an MPLS TE tunnel MPLS TE identifies the properties of the links that the MPLS TE tunnel can use Description Use the mpls te link ad...

Page 1626: ...Parameter bandwidth value Maximum link bandwidth available for RSVP traffic in the range 1 to 32000000 kbps bc1 bc1 bandwidth Reservable bandwidth in kbps on the interface in the range 1 to bandwidth...

Page 1627: ...hernet 1 0 set maximum reservable bandwidth for MPLS TE to 1158 kbps and the reservable BC1 bandwidth to 200 kbps Sysname system view Sysname interface ethernet 1 0 Sysname Ethernet1 0 mpls te max res...

Page 1628: ...path1 mpls te path metric type Syntax mpls te path metric type igp te undo mpls te path metric type View MPLS view tunnel interface view Parameter igp Uses IGP metric for tunnel routing te Uses TE me...

Page 1629: ...d priority Holding priority of the tunnel in the range 0 to 7 A lower numerical number indicates a higher priority If not configured it is the same as the setup priority Description Use the mpls te pr...

Page 1630: ...el 0 Sysname system view Sysname interface tunnel 0 Sysname Tunnel0 mpls te record route mpls te reoptimization user view Syntax mpls te reoptimization View User view Parameter None Description Use th...

Page 1631: ...ax mpls te resv style ff se undo mpls te resv style View Tunnel interface view Parameter ff Sets the resource reservation style to fixed filter FF se Sets the resource reservation style to shared expl...

Page 1632: ...ted command mpls te timer retry Example Set the maximum number of tunnel setup retries to 10 Sysname system view Sysname interface tunnel 0 Sysname Tunnel0 mpls te retry 10 mpls te route pinning Synta...

Page 1633: ...the tunnel to use Example Adopt CR LDP as the signaling protocol for establishing MPLS TE tunnel 0 Sysname system view Sysname interface tunnel 0 Sysname Tunnel0 mpls te signal protocol crldp mpls te...

Page 1634: ...s configured with automatic bandwidth adjustment in the range 1 to 604800 seconds If it is not configured the default of 300 seconds applies You are recommended to use the default in normal cases Desc...

Page 1635: ...timer Use the undo mpls te timer fast reroute command to disable FRP polling The default FRR polling timer is 300 seconds n This command is not supported when the signaling protocol is CR LDP Example...

Page 1636: ...unnel and then reconfigure the tunnel giving it a new tunnel ID Examples Configure the tunnel ID as 100 Sysname system view Sysname interface tunnel 1 0 0 Sysname Tunnel1 0 0 mpls te tunnel id 100 mpl...

Page 1637: ...PF area view Parameter enable Enables the MPLS TE capability in the OSPF area Description Use the mpls te enable command to enable the MPLS TE capability in current OSPF area Use the undo mpls te comm...

Page 1638: ...a node on the explicit path By performing this command multiple times you may define all nodes that the explicit path must traverse in sequence By default next hops are strict hops on an explicit path...

Page 1639: ...reset mpls rsvp te statistics global reset mpls te auto bandwidth adjustment timers Syntax reset mpls te auto bandwidth adjustment timers View User view Parameter None Description Use the reset mpls t...

Page 1640: ...tem view Sysname static cr lsp egress tunnel34 incoming interface serial 1 0 in label 233 static cr lsp ingress Syntax static cr lsp ingress tunnel name destination dest addr nexthop next hop addr out...

Page 1641: ...transit tunnel name incoming interface interface type interface number in label in label value nexthop next hop addr outgoing interface interface type interface number out label out label value bandw...

Page 1642: ...straint Sets the bandwidth constraint sub TLV lo multiplier Sets the sub TLV of local overbooking multiplier LOM unreserved bw sub pool Sets the sub TLV of unreserved subpool bandwidth value Sub TLV i...

Page 1643: ...le IS IS TE Use the undo traffic eng command to restore the default By default IS IS TE is disabled n In order to enable IS IS TE you must use the cost style command to configure the cost style of the...

Page 1644: ...1644 CHAPTER 96 MPLS TE CONFIGURATION COMMANDS...

Page 1645: ...lue Incoming label in the range 16 to 1023 out label value Outgoing label in the range 16 to 1023 nexthop ip address Specifies the IP address of the next hop out interface interface type interface num...

Page 1646: ...interface Syntax ccc ccc connection name interface interface type interface number out interface interface type interface number undo ccc ccc connection name View System view Parameter ccc connection...

Page 1647: ...Create a CE named ce1 for a VPN Sysname system view Sysname mpls l2vpn vpn1 encapsulation ethernet Sysname mpls l2vpn vpn1 route distinguisher 100 1 Sysname mpls l2vpn vpn1 ce ce1 id 1 Sysname mpls l2...

Page 1648: ...pls l2vpn vpn1 Sysname mpls l2vpn vpn1 ce ce1 Sysname mpls l2vpn ce vpn1 ce1 connection ce offset 1 interface serial 2 0 display bgp l2vpn Syntax display bgp l2vpn all group group name peer ip address...

Page 1649: ...r Local AS number Origin codes Route origin codes which can be i IGP Indicates that the network layer reachability information is from within the AS e EGP Indicates that the network layer reachability...

Page 1650: ...ed No routing policy is configured MsgSent Number of messages sent OutQ Number of messages waiting to be sent to the peer PrefRcv Number of prefixes received Up Down Duration that the BGP session is i...

Page 1651: ...and that of received update messages Maximum allowed prefix number Maximum number of routes allowed Threshold Threshold value Routing policy configured Routing policy specified for the peer Table 424...

Page 1652: ...be i IGP Indicates that the network layer reachability information is from within the AS e EGP Indicates that the network layer reachability information is learned through EGP incomplete Indicates tha...

Page 1653: ...connections Example Display information about CCC connection c1 Sysname display ccc ccc name c1 Name c1 Type remote State down Intf Serial2 0 up In label 100 Out label 200 Nexthop 20 1 1 1 Display in...

Page 1654: ...the state of UP down Specifies CCC interfaces in the state of DOWN Description Use the display l2vpn ccc interface vc type command to display information about specified L2VPN VC interfaces Example Di...

Page 1655: ...nfo View Any view Parameter interface interface type interface number Specifies the interface connecting the CE by its type and number remote info Specifies Martini VCs from the remote peer Descriptio...

Page 1656: ...mote Remote C Remote Table 429 Description on the fields of the display mpls l2vc command Field Description total ldp vc Total number of Martini VCs Transport VC ID Remote VC ID Client Intf Interface...

Page 1657: ...configured on a PE If you do not specify a VPN the command displays information about all L2VPNs Example Display the L2VPN export route target list Sysname display mpls l2vpn export route target list...

Page 1658: ...Description on the fields of the display mpls l2vpn command Field Description VPN Number Number of created VPNs vpn name Name of the VPN encap type Encapsulation type route distinguisher RD mtu Maxim...

Page 1659: ...nformation about the connections that are up If you specify neither the down nor the up keyword the command displays detailed information about connections that are either up or down verbose Displays...

Page 1660: ...up 3 3 3 9 100 1 Serial2 0 For descriptions of the output fields of the command see Table 437 Display information about Kompella L2VPN connections on interface Serial 2 0 Sysname display mpls l2vpn co...

Page 1661: ...state encap Interface name interface status interface encapsulation type Peer id IP address of the peer Route distinguisher RD Local vc label Local VC label Remote vc label Remote VC label Tunnel poli...

Page 1662: ...a string of 1 to 80 characters that cannot contain any blank space Description Use the display mpls l2vpn forwarding info command to display MPLS L2VPN forwarding information Example Display MPLS L2V...

Page 1663: ...vpn label 400 Tunnel Policy policy1 Tunnel Type lsp Tunnel ID 0x226013 l2vpn family Syntax l2vpn family Table 441 Description on the fields of the display mpls static l2vc command Field Description to...

Page 1664: ...er PE vc id VC ID of the L2VPN connection in the range 1 to 4294967295 tunnel policy name Tunneling policy for the VC a string of 1 to 19 characters control word Enables the control word option no con...

Page 1665: ...configuring the other L2VPN commands Example Enable MPLS L2VPN Sysname system view Sysname mpls l2vpn mpls l2vpn vpn name Syntax mpls l2vpn vpn name encapsulation atm aal5 ethernet fr hdlc ppp vlan c...

Page 1666: ...pn2 and enter MPLS L2VPN view Sysname system view Sysname mpls l2vpn vpn1 encapsulation ppp Sysname mpls l2vpn vpn1 mpls l2vpn vpn2 encapsulation ethernet Sysname mpls l2vpn vpn2 mpls static l2vc dest...

Page 1667: ...the control word option Example Create a static VC between CEs connected to different PEs Sysname system view Sysname interface ethernet 1 0 Sysname Ethernet1 0 mpls static l2vc destination 1 1 1 1 tr...

Page 1668: ...of nn nn or IP address nn It can be a string of 3 to 21 characters An RD can be in either of the following formats 16 bit AS number 32 bit user defined number For example 101 3 32 bit IP address 16 bi...

Page 1669: ...le 192 168 122 15 1 both Specifies both the export and import VPN extended communities This is the default export extcommunity Specifies the export VPN extended community import extcommunity Specifies...

Page 1670: ...1670 CHAPTER 97 MPLS L2VPN CONFIGURATION COMMANDS...

Page 1671: ...d to remove one or more VPN instances from the policy node You can set up to six VPN instances for one node in a policy Packets matching the criteria are forwarded by the first valid VPN instance rout...

Page 1672: ...ng the route going through B to be preferred when more than one route is present Sysname system view Sysname bgp 100 Sysname ipv4 family vpnv4 Sysname bgp af vpnv4 default local preference 180 default...

Page 1673: ...idr community aa nn 1 13 no export subconfed no advertise no export whole match community list basic community list number whole match adv community list number 1 16 different origin as peer ip addres...

Page 1674: ...nity list number in the range 100 to 199 1 16 Specifies that the argument before it can be entered up to 16 times different origin as Displays information about routes with different AS origins peer i...

Page 1675: ...p vpnv4 all routing table Field Description BGP Local router ID Router ID of the local BGP router Status codes Route status codes Valid values include valid Valid route best Best route d damped Route...

Page 1676: ...w Any view Table 444 Description on the fields of the display bgp vpnv4 group command Field Description BGP peer group Name of the BGP peer group remote AS number Number of the remote AS Type Type of...

Page 1677: ...l VPNv4 peers vpn instance name Name of the VPN instance a string of 1 to 31 characters as regular expression Regular expression for filtering the AS path information to be displayed Description Use t...

Page 1678: ...information about BGP VPNv4 peers of VPN instance vpn1 Sysname display bgp vpnv4 vpn instance vpn1 peer BGP local router ID 2 2 2 2 Local AS number 100 Total number of peers 1 Peers in established sta...

Page 1679: ...efresh capability has been enabled Peer Preferred Value 99 Routing policy configured No routing policy is configured Peer IP address of the peer V Version of BGP that the peer runs AS AS number of the...

Page 1680: ...pability Received Total number of received messages and the number of received update messages Sent Total number of sent messages and the number of sent update messages Maximum allowed prefix number M...

Page 1681: ...uting policy is configured Table 450 Description on the fields of display bgp vpnv4 all peer verbose Field Description Peer IP address of the peer Local IP address of the local router Type BGP type BG...

Page 1682: ...PATH list The as path acl number argument ranges from 1 to 256 cidr Displays classless interdomain routing CIDR information community Displays routing information of the specified BGP community in the...

Page 1683: ...utes with different AS origins regular expression as regular expression Displays routing information matching the specified AS regular expression Description Use the display bgp vpnv4 route distinguis...

Page 1684: ...cal BGP router Status codes Route status codes For valid values see Table 443 Origin Route origin codes For valid values see Table 443 Network Network address NextHop Address of the next hop Label rec...

Page 1685: ...GP e EGP incomplete Route Distinguisher 100 1 Network NextHop In Out Label i 123 1 1 1 1 1 1 1 NULL 1024 Total routes of vpn instance vpn1 4 Network NextHop In Out Label 10 1 1 0 0 0 0 0 1025 NULL 20...

Page 1686: ...ss Network mask in the format of X X X X longer prefixes Specifies to match the longest prefix as path acl as path acl number Filters routing information using the specified AS_PATH list The as path a...

Page 1687: ...matching the specified AS regular expression statistic Displays BGP VPNv4 route statistics Description Use the display bgp vpnv4 vpn instance routing table command to display the BGP VPNv4 routing inf...

Page 1688: ...that includes the specified string The string argument is case sensitive and consists of 1 to 256 characters Description Use the display fib vpn instance command to display information about the forwa...

Page 1689: ...3 10 13 09 32 45 vpn2 33 3 2003 10 13 09 42 59 Display detailed information about a VPN instance Sysname display ip vpn instance instance name vpn1 VPN Instance Name and ID vpn1 1 Create time 2006 04...

Page 1690: ...ospf sham link OSPF Process 100 with Router ID 100 1 1 2 Sham Link Area RouterId Source IP Destination IP State Cost 0 0 0 1 100 1 1 2 3 3 3 3 5 5 5 5 P 2 P 10 Table 458 Description on the fields of d...

Page 1691: ...olicy tunnel select seq load balance number Example Display all tunneling policies Sysname display tunnel policy all Tunnel Policy Name Select Seq Load balance No RouterId Router ID of the sham link S...

Page 1692: ...mmand to configure an OSPF domain ID Use the undo domain id command to restore the default By default the OSPF domain ID is 0 With no parameter specified the undo domain id command deletes the primary...

Page 1693: ...default all VPN instance routes permitted by the export target attribute can be redistributed Example Apply export routing policy poly 1 to VPN instance vpn1 Sysname system view Sysname ip vpn instan...

Page 1694: ...es that survive the filtering are advertised by MP BGP Example In BGP VPNv4 subaddress family view specify to filter routes to be advertised by MP BGP using ACL 2555 Sysname system view Sysname bgp 10...

Page 1695: ...l provided by the extended community attributes is not enough An import routing policy may deny routes that are permitted by the import target attribute By default all routes permitted by the import t...

Page 1696: ...ance name undo ip vpn instance vpn instance name View System view Parameter vpn instance name Name for the VPN instance a case sensitive string of 1 to 31 characters Description Use the ip vpn instanc...

Page 1697: ...GP VPN instance view Sysname system view Sysname ip vpn instance vpn1 Sysname vpn instance vpn1 quit Sysname bgp 100 Sysname bgp ipv4 family vpn instance vpn1 Sysname bgp vpn1 peer advertise community...

Page 1698: ...te of a received route and to set the allowed maximum number of repetitions Use the undo peer allow as loop command to remove the configuration Example In BGP VPNv4 subaddress family view allow the lo...

Page 1699: ...by peer group test Sysname system view Sysname bgp 100 Sysname bgp ipv4 family vpnv4 Sysname bgp af vpnv4 peer test as path acl 3 export peer default route advertise vpn instance Syntax peer group na...

Page 1700: ...the peer enable command to enable a peer or peer group for an address family and enable the exchange of BGP routing information of the address family Use the undo peer enable command to disable the c...

Page 1701: ...ath acl BGP VPNv4 subaddress family view Example Apply a filtering policy to filter the received routes of a peer group Sysname system view Sysname bgp 100 Sysname bgp ipv4 family vpnv4 Sysname bgp af...

Page 1702: ...he peer prefix name Name of the IP prefix list a string of 1 to 19 characters export Filters the routes to be advertised import Filters the received routes Description Use the peer ip prefix command t...

Page 1703: ...me bgp 100 Sysname bgp peer 2 2 2 2 label route capability peer next hop invariable BGP VPNv4 subaddress family view Syntax peer group name ip address next hop invariable undo peer group name ip addre...

Page 1704: ...local command to remove the configuration Example In BGP VPNv4 subaddress family view configure the device to use the local address as the next hop of a route when advertising it to peer group test Sy...

Page 1705: ...address reflect client View BGP VPNv4 subaddress family view BGP L2VPN address family view Parameter group name Name of the peer group a string of 1 to 47 characters ip address IP address of the peer...

Page 1706: ...licy to a peer or peer group Use the undo peer route policy command to remove the application By default no routing policy is applied to a peer or peer group Example In BGP VPNv4 subaddress family vie...

Page 1707: ...utes Use the undo policy vpn target command to disable the filtering permitting all VPNv4 routes Only VPNv4 routes with export route target attributes matching the local import route target attributes...

Page 1708: ...address family view disable route reflection between clients Sysname system view Sysname bgp 100 Sysname bgp ipv4 family vpnv4 Sysname bgp af vpnv4 undo reflect between clients In BGP L2VPN address fa...

Page 1709: ...r id 50 refresh bgp vpn instance Syntax refresh bgp vpn instance vpn instance name ip address all external group group name export import View User view Parameter vpn instance name Name of the VPN ins...

Page 1710: ...orms a soft reset in the inbound direction Description Use the refresh bgp vpnv4 command to perform a soft reset of BGP VPNv4 connections Example Perform a soft reset of all BGP VPNv4 connections in t...

Page 1711: ...mask length Length of the network mask in the range 0 to 32 Description Use the reset bgp vpn instance dampening command to clear the route flap dampening information of a VPN instance Example Clear...

Page 1712: ...ntified by this number ip address Resets the VPNv4 connection with a BGP peer identified by this IP address group name Resets the VPNv4 connections with a BGP peer group identified by this name all Re...

Page 1713: ...value undo route tag View OSPF view Parameter tag value Tag for identifying injected VPN routes in the range 0 to 4294967295 Description Use the route tag command to configure the tag for identifying...

Page 1714: ...R20 and MSR30 series routers and 1 to 2048 for MSR50 series routers warn threshold Threshold for rejecting new routes It is expressed in the percentage of the specified maximum number of routes for th...

Page 1715: ...oute target extended community attribute Sysname system view Sysname bgp 100 Sysname bgp ipv4 family vpnv4 Sysname bgp af vpnv4 rr filter 10 In BGP L2VPN address family view create an RR group and con...

Page 1716: ...1 argument can be either a string of 1 to 8 characters in plain text or a string of 24 characters in cipher text md5 Uses MD5 algorithm for authentication hmac md5 Uses HMAC MD5 algorithm for authenti...

Page 1717: ...selecting tunnels from the VPN tunnel management module an application can use the tunneling policy as the criterion With no tunneling policy associated with a VPN instance the default tunneling polic...

Page 1718: ...load balancing in the range 1 to 8 Description Use the tunnel select seq load balance number command to configure the preference order for tunnel selection and the number of tunnels for load balancing...

Page 1719: ...PN instance CE Sysname system view Sysname ospf 100 vpn instance vpna Sysname ospf 100 vpn instance capability simple vpn target VPN instance view Syntax vpn target vpn target 1 8 both export extcommu...

Page 1720: ...rmation to the destination VPN extended community and import routing information from the destination VPN extended community Description Use the vpn target command to associate the current VPN instanc...

Page 1721: ...the undo authentication algorithm command to restore the default By default the authentication algorithm is SHA 1 Note that Priorities of authentication algorithms are decided by their configuration...

Page 1722: ...e clients using CHAP Sysname system view Sysname vam server vpn 1 Sysname vam server vpn 1 authentication method chap display vam server address map Syntax display vam server address map all vpn vpn n...

Page 1723: ...display vam server statistic Syntax display vam server statistic all vpn vpn name View Any view Parameter all Displays the statistics of all clients registered on the VAM server vpn vpn name Displays...

Page 1724: ...poke number 98 Registered hub number 2 Address resolution times 11 Succeeded resolution times 10 Failed resolution times 1 Table 463 Description on the fields of the display vam server statistic comma...

Page 1725: ...adopted with their priorities from the highest to the lowest being AES 128 3DES and DES Note that Priorities of encryption algorithms are decided by their configuration order Based on its encryption...

Page 1726: ...erver vpn 1 Sysname vam server vpn 1 hub private ip 10 1 1 1 public ip 123 0 0 1 keepalive interval Syntax keepalive interval time interval undo keepalive interval View VPN domain view Parameter time...

Page 1727: ...t regards that the connection is broken Use the undo keepalive retry command to restore to the default value By default the maximum number of attempts of sending keepalive message from VAM client is 3...

Page 1728: ...vam server vpn pre shared key VAM client view authentication algorithm encryption algorithm Example Configure the pre shared key for VAM server to 123 which is displayed in plain text Sysname system v...

Page 1729: ...the VAM server function of all VPN domains or a specific VPN domain By default VAM server function is disabled Related command vam server vpn server enable Example Enable the VAM server function of al...

Page 1730: ...Syntax vam server vpn vpn name undo vam server vpn vpn name View System view Parameter vpn name VPN domain name It is a case insensitive string containing 1 to 15 characters which can be A to Z a to...

Page 1731: ...n Use the undo client enable command to restore the default By default the VAM client function is disabled Related command vam client name and vam client enable Example Enable the VAM client function...

Page 1732: ...n of all VAM clients is displayed As for the arguments not specified or the information not obtained dynamically the corresponding information will not be displayed Example Display the status informat...

Page 1733: ...ge protocol packets Primary server Public IP address of the primary VAM server Current state Current authentication status of the VAM client Primary server IP address of the primary VAM server Holding...

Page 1734: ...d interval View VAM client view Parameter time interval Protocol packet retransmission interval in the range 3 to 30 seconds Description Use the resend interval command to configure the interval for t...

Page 1735: ...ver secondary ip address Example Specify public IP address 1 1 1 1 and port number 40000 for the primary VAM server Sysname system view Sysname vam client name abc Sysname vam client name abc server p...

Page 1736: ...cters excluding special characters and cipher Displays a password in the cipher text mode simple Displays a password in the plain text mode String Password of a VAM client a case sensitive string of 1...

Page 1737: ...d spoke Sysname system view Sysname vam client enable name spoke vam client name Syntax vam client name client name undo vam client name client name View System view Parameter client name Name of a VA...

Page 1738: ...ters A through Z a through z 0 through 9 hyphen and dot Description Use the vpn command to specify the VPN that a VAM client belongs to Use the undo vpn command to remove the configuration By default...

Page 1739: ...ote that if the profile name keyword is not specified this command will display information about all IPSec profiles Related command ipsec profile system view Example Display information about all IPS...

Page 1740: ...e a specified IPSec profile By Default no IPSec profile exists Note that Table 466 Description on the fields of the display ipsec profile command Field Description IPsec profile name Name of the IPSec...

Page 1741: ...ration of an IPSec policy Some parameters are set to the default values Due to the dynamics of DVPN addresses the setting by the remote address keyword for the IKE peer that an IPSec profile reference...

Page 1742: ...1742 CHAPTER 101 IPSEC PROFILE CONFIGURATION COMMANDS...

Page 1743: ...mber The interface must be of the type of tunnel private ip ip address Specifies the private IP address of the peer VAM client Description Use the display dvpn session to display information about the...

Page 1744: ...at the VAM client triggers the quiet timer only when the attempts for tunneling the Hub reach the maximum value Table 467 Description on the fields of the display dvpn session command Field Descriptio...

Page 1745: ...tically if no data flows are transferred through a Spoke Spoke type DVPN tunnel during the idle timeout time Use the undo dvpn session idle time command to restore the default By default the idle time...

Page 1746: ...interface tunnel on page 884 Example Specify to reference IPSec profile dvpnprofile on DVPN tunnel interface Tunnel0 to protect the DVPN tunnel Sysname system view Sysname interface tunnel 0 Sysname...

Page 1747: ...fies the DVPN tunnels on the interface The interface type argument can only be tunnel private ip ip address Specifies the private IP address of the peer client Description Use the reset dvpn session c...

Page 1748: ...ensitive string of 1 to 31 characters Description Use the vam client command to specify the VAM client to be referenced on a DVPN tunnel interface Use the undo vam client command to remove the VAM cli...

Page 1749: ...of the peer interface receiving packets It is usually set to the source address of the peer tunnel interface Two or more tunnel interfaces using the same encapsulation protocol must have different so...

Page 1750: ...palive disable Tunnel protocol transport GRE IP GRE key value is 123 Checksumming of GRE packets enabled Last 300 seconds input 0 bytes sec 0 packets sec Last 300 seconds output 0 bytes sec 0 packets...

Page 1751: ...nterface destination Destination address of the tunnel interface Tunnel keepalive Whether the GRE keepalive function is enabled Tunnel protocol transport Tunnel protocol transport protocol GRE key Sec...

Page 1752: ...undo gre checksum View Tunnel interface view Table 469 Description on the fields of the display ipv6 interface tunnel command Field Description Tunnel0 current state Status of the physical layer of t...

Page 1753: ...name2 Tunnel2 gre checksum gre key Syntax gre key key number undo gre key View Tunnel interface view Parameter key number Secret key for the GRE tunnel interface use in the range 0 to 4 294 967 295 De...

Page 1754: ...al significance Therefore both ends of a tunnel can have the same interface number or different interface numbers Related command source destination gre key gre checksum and tunnel protocol on page 88...

Page 1755: ...iew Sysname interface tunnel 0 Sysname Tunnel0 keepalive 20 5 source Syntax source ip address ipv6 address interface type interface number undo source View Tunnel interface view Parameter ip address S...

Page 1756: ...re command to set the GRE tunnel mode Use the undo tunnel protocol to restore the default By default the GRE tunnel mode is GRE over IPv4 Without the ipv6 keyword the command sets the GRE tunnel mode...

Page 1757: ...o allow command to remove the configuration By default an LNS denies all incoming calls Note that The domain domain name combination is required in L2TP multi instance applications The remote remote n...

Page 1758: ...ny peer and create a virtual access interface based on virtual template 1 Sysname system view Sysname l2tp group 1 Sysname l2tp1 allow l2tp virtual template 1 display l2tp session Syntax display l2tp...

Page 1759: ...te number Serial number for identifying the virtual interface template in the range of 0 to 1023 Description Use the interface virtual template command to create a virtual interface template and enter...

Page 1760: ...e1 l2tp enable Syntax l2tp enable undo l2tp enable View System view Parameter None Description Use the l2tp enable command to enable the L2TP function Use the undo l2tp enable command to disable the L...

Page 1761: ...am enable command to disable the L2TP multi instance function By default the L2TP multi instance function is disabled Note that this command is available for only LNSs Related command l2tp enable Exam...

Page 1762: ...the user Use the undo mandatory chap command to disable CHAP authentication on the LNS By default an LNS does not perform CHAP authentication of users An LNS authenticates the client in addition to t...

Page 1763: ...ent But the proxy authentication information of the NAS may be neglected Some PPP clients may not support LCP re negotiation In this case the LCP re negotiation will fail Related command mandatory cha...

Page 1764: ...tunneling requests to one or more IP addresses for one or more specified VPN users Use the undo start to remove the specified triggering condition Note that The start l2tp command is available for onl...

Page 1765: ...wn tunnel peers Example Disable L2TP tunnel authentication Sysname system view Sysname l2tp group 1 Sysname l2tp1 undo tunnel authentication tunnel avp hidden Syntax tunnel avp hidden undo tunnel avp...

Page 1766: ...flow control function is disabled Example Enable the L2TP tunnel flow control function Sysname system view Sysname l2tp group 1 Sysname l2tp1 tunnel flow control tunnel name Syntax tunnel name name un...

Page 1767: ...onsists of 24 characters for example _ TT8F Y5SQ Q MAF4 1 Description Use the tunnel password command to specify the password for tunnel authentication Use the undo tunnel password command to remove t...

Page 1768: ...l timer hello command to restore the default By default the interval is 60 seconds You can set different hello intervals for the LNS and LAC Example Set the hello interval to 99 seconds Sysname system...

Page 1769: ...nformation and running statistic information on each interface Sysname display qos car interface Ethernet1 0 Interface Ethernet1 0 Direction Inbound Rule s If match Any CIR 10 kbps CBS 2000 byte EBS 0...

Page 1770: ...action undo qos car inbound outbound any acl ipv6 acl number carl carl index View Interface view Parameters inbound Limits rate for the packets received by the interface CBS Committed Burst Size i e t...

Page 1771: ...taken on the packets when the traffic rate does not conform to CIR The default action is discard action Action taken on a packet which can be continue Has it to be dealt with by the next CAR policy d...

Page 1772: ...carl index precedence precedence value mac mac address dscp dscp list undo qos carl carl index View System view Parameters carl index CAR list number in the range 1 to 199 precedence value Precedence...

Page 1773: ...ecified for several times the system by default regards that only one DSCP value has been specified The DSCP values are related to one another in the way of OR Examples Configure CARL rule 1 with pack...

Page 1774: ...1774 CHAPTER 105 TRAFFIC POLICING TP CONFIGURATION COMMANDS...

Page 1775: ...et1 0 Rule s If match ACL 2001 CIR 200 kbps CBS 50000 byte EBS 0 byte Queue Length 100 Packet Queue Size 70 Packet Passed 0 0 Packets Bytes Discarded 0 0 Packets Bytes Delayed 0 0 Packets Bytes Table...

Page 1776: ...n bucket algorithm in the range 0 to 19375000 bytes It defaults to 0 that is only one token bucket is used for policing queue length queue length The maximum length of the buffer in the range 1 to 102...

Page 1777: ...CL rule 2001 at the Ethernet1 0 interface The normal traffic is 200 kbps The burst size twice of the normal traffic 50000 bytes is allowed at the first time Then packets are normally transmitted when...

Page 1778: ...1778 CHAPTER 106 TRAFFIC SHAPING CONFIGURATION COMMANDS...

Page 1779: ...s lr interface Interface Ethernet1 0 Direction Outbound CIR 10 kbps CBS 1875 byte EBS 0 byte Passed 0 0 Packets Bytes Delayed 0 0 Packets Bytes Active Shaping NO Direction Inbound CIR 10 kbps CBS 1875...

Page 1780: ...ed for policing Description Use the qos lr command to limit the transmitting or receiving rate of the interface Use the undo qos lr command to remove the limit Execute the command in interface view an...

Page 1781: ...t size configured by the user is not a specified one the system automatically selects the nearest one For a device which cannot be installed with an external interface module or when the number of the...

Page 1782: ...1782 CHAPTER 107 LINE RATE CONFIGURATION COMMANDS...

Page 1783: ...rmation for all system predefined classes or all user predefined classes Examples Display configuration information about the class Sysname display traffic classifier user defined User Defined Classif...

Page 1784: ...e dscp list is the list of DSCP values and up to eight DSCP values can be input The DSCP value is in the range 0 to 63 When it is displayed in characters its value can be af11 af12 af13 af21 af22 af23...

Page 1785: ...ple commands which cannot be overwritten The match rules of the destination MAC address are only meaningful for interfaces of Ethernet type 3 Define source MAC address matching rule For a class you ca...

Page 1786: ...alues in one command If multiple 802 1p priorities of the same value are specified the system regards them as one Relation between different 802 1p priority values is OR 7 Define inbound interface mat...

Page 1787: ...hich cannot be overwritten When the command is configured the vlan id values will be arranged automatically in ascending order Only when the specified VLAN ID values are identical with those in the ru...

Page 1788: ...h any Define match rule of class2 and class1 must be used Therefore class1 is configured first The match rule of class1 is the IP precedence is 5 Sysname system view Sysname traffic classifier class1...

Page 1789: ...ifier class1 Sysname classifier class1 if match qos local id 3 Change the ACL of class 1 used for traffic classification from ACL 2008 to ACL 2009 Sysname system view Sysname traffic classifier class1...

Page 1790: ...ault class ef af1 af2 af3 af4 ip prec0 ip prec1 ip prec2 ip prec3 ip prec4 ip prec5 ip prec6 ip prec7 mpls exp0 mpls exp1 mpls exp2 mpls exp3 mpls exp4 mpls exp5 mpls exp6 and mpls exp7 Related comman...

Page 1791: ...ess burst size Excessive burst size in the range 0 to 19375000 bytes It defaults to 0 green Action conducted to packets when traffic of packets conforms to the CIR By default the action of green is pa...

Page 1792: ...e rate exceeds 200 kbps the IP precedence of the packet turns to 0 and the packet is transmitted Sysname system view Sysname traffic behavior database Sysname behavior database car cir 200 cbs 50000 e...

Page 1793: ...delete the configuration Examples Configure the action of filtering discarded packets for traffic behavior Sysname system view Sysname traffic behavior database Sysname behavior database filter deny g...

Page 1794: ...irection of the interface Application of class based GTS policy including shape policy on an interface will cause the previously configured qos gts command ineffective If this command is frequently co...

Page 1795: ...for traffic behavior to the interface Ethernet1 0 Sysname system view Sysname traffic behavior database Sysname behavior database redirect interface ethernet1 0 remark atm clp Syntax remark atm clp at...

Page 1796: ...s marked Related commands qos policy traffic behavior classifier behavior Examples Set the 802 1p priority value of the remarked packet to 2 Sysname system view Sysname traffic behavior database Sysna...

Page 1797: ...alue undo remark fr de View Traffic behavior view Parameters fr de value Value of the DE flag bit in the FR packet 0 or 1 Description Use the remark fr de command to set the remarked DE bit of FR pack...

Page 1798: ...precedence remark is configured Related commands qos policy traffic behavior classifier behavior Examples Remark the IP precedence of the remarked IP packets to 6 Sysname system view Sysname traffic...

Page 1799: ...traffic behavior classifier behavior Examples Configure the qos local id value of remarked packet to 2 Sysname system view Sysname traffic behavior database Sysname behavior database remark qos local...

Page 1800: ...1800 CHAPTER 109 DEFINING TRAFFIC BEHAVIOR COMMANDS Examples Define a traffic behavior named behavior1 Sysname system view Sysname traffic behavior behavior1 Sysname behavior behavior1...

Page 1801: ...command to remove the application of the class in the policy Each class in the policy can only be associated with one behavior If the class and traffic behavior specified when configuring this command...

Page 1802: ...ned policy Sysname display qos policy user defined User Defined QoS Policy Information Policy test Classifier default class Behavior be none Classifier USER1 Behavior USER1 Marking Remark IP Precedenc...

Page 1803: ...he configuration and operating state about the policy on the interface Ethernet 1 0 and PVC Sysname display qos policy interface Ethernet 1 0 Interface Ethernet1 0 Direction Outbound Policy test Class...

Page 1804: ...d Forwarding Bandwidth 30 Kbps Matched 0 0 Packets Bytes Enqueued 0 0 Packets Bytes Discarded 0 0 Packets Bytes qos apply policy interface view Syntax qos apply policy policy name inbound outbound dyn...

Page 1805: ...d with traffic behaviors specified using queue af queue ef queue wfq or gts Applying the policy on interface following these rules The VT interface referenced by common physical port and MP can apply...

Page 1806: ...policy USER1 in the inbound direction of interface Ethernet1 0 Sysname system view Sysname interface Ethernet1 0 Sysname Ethernet1 0 qos apply policy USER1 inbound qos policy Syntax qos policy policy...

Page 1807: ...1807 Sysname system view Sysname qos policy user1 Sysname qospolicy user1...

Page 1808: ...1808 CHAPTER 110 DEFINING POLICY COMMANDS...

Page 1809: ...imit of a queue in the range 1 to 1024 By default the length is 75 Description Use the qos fifo queue length command to set the length limit of FIFO queue Use the undo qos fifo queue length command to...

Page 1810: ...1810 CHAPTER 111 FIFO QUEUING CONFIGURATION COMMANDS...

Page 1811: ...ed commands qos pq Examples Display the PQ configuration and statistics at interface Ethernet 1 0 Sysname display qos pq interface ethernet 1 0 Interface Ethernet1 0 Priority queueing PQL 1 Outbound q...

Page 1812: ...to 16 Description Use the qos pq command to apply a group of priority list to an interface Use the undo qos pq command to restore the congestion management policy at the interface to FIFO By default t...

Page 1813: ...ncel the configuration and restore the default value During traffic classification if a packet does not match any rule it will be put into the default priority queue For the same pql index repeated us...

Page 1814: ...Create rule 12 making packets from interface serial 2 0 to be put into the middle queue Sysname system view Sysname qos pql 12 inbound interface serial2 0 middle qos pql protocol Syntax qos pql pql in...

Page 1815: ...Sysname system view Sysname qos pql 1 protocol ip acl 3100 queue top qos pql queue Syntax qos pql pql index queue bottom middle normal top queue length queue length undo qos pql pql index queue bottom...

Page 1816: ...qos pql queue command to specify the maximum number of packets that can wait in each of the priority queues or the length of a PQ Use the undo qos pql queue command to restore to the default value of...

Page 1817: ...tion and statistics of all interfaces will be displayed Related commands qos cq Examples Display CQ configuration and statistics at the interface Ethernet 1 0 Sysname display qos cq interface 1 0 Inte...

Page 1818: ...ement policy at the interface to FIFO By default the congestion management policy at the interfaces is FIFO Except for interfaces encapsulated with X 25 all physical interfaces can use CQ One interfac...

Page 1819: ...any rule it will go to the default queue Related commands qos cql inbound interface qos cql protocol qos cql queue serving qos cql queue qos cq Examples Assign default queue 2 to CQL 5 Sysname system...

Page 1820: ...ueue queue number undo qos cql cql index protocol ip queue key key value View System view Parameters cql index CQL index in the range 1 to 16 queue number Queue number in the range 0 to 16 ip Protocol...

Page 1821: ...any IP packet that matches the ACL 3100 be put into queue 3 Sysname system view Sysname qos cql 5 protocol ip acl 3100 queue 3 qos cql queue Syntax qos cql cql index queue queue number queue length qu...

Page 1822: ...QL index in the range 1 to 16 queue number Queue number in the range 0 to 16 byte count Number of bytes in packets that the given queue sends in each poll in the range 1 to 16 777 215 bytes The defaul...

Page 1823: ...ace Sysname display qos wfq interface ethernet 1 0 Interface Ethernet1 0 Weighted Fair queueing Outbound queue Size Length Discards WFQ 0 100 0 Hashed by IP Precedence Hashed queues 0 0 128 Active Max...

Page 1824: ...s 256 Description Use the qos wfq command to apply WFQ to the interface or modify WFQ parameters on the interface Use the undo qos wfq command to restore the default congestion management mechanism FI...

Page 1825: ...qos cbq interface command to display CBQ configuration information and operating status of the specified PVC on specified ATM interface or on all interfaces Examples Display CBQ configuration informa...

Page 1826: ...may trigger CBQ reconstruction thus resulting in CBQ s reallocation of queue width The modification of the baudrate or speed of a physical interface however does not trigger this reconstruction proces...

Page 1827: ...ples Configure traffic behavior named database and configure the minimum bandwidth of the traffic behavior to 200 kbps Sysname system view Sysname traffic behavior database Sysname behavior database q...

Page 1828: ...atio ratio CBS Interface available bandwidth percentage ratio 100 1000 For the absolute value form queue ef bandwidth bandwidth cbs burst CBS burst or bandwidth 25 if burst is not specified Related co...

Page 1829: ...o queue length command to delete configuration By default tail drop is configured This command can be used only after the queue af or queue wfq command has been configured The queue length which has b...

Page 1830: ...t WRED and count discard rate with IP precedence Sysname system view Sysname traffic behavior database Sysname behavior database queue wfq Sysname behavior database wred wred dscp Syntax wred dscp dsc...

Page 1831: ...limit low limit high limit high limit discard probability discard prob undo wred ip precedence precedence View Traffic behavior view Parameters precedence IP precedence in the range 0 to 7 low limit l...

Page 1832: ...tant View Traffic behavior view Parameters exponent Exponential in the range 1 to 16 It is 9 by default Description Use the wred weighting constant command to set exponential for the calculation of av...

Page 1833: ...rity queue configuration and statistics on all interfaces Examples Display information of the current IP RTP Priority queue Sysname display qos rtpq interface Interface Ethernet1 0 Output queue RTP qu...

Page 1834: ...ed bandwidth allocated for RTP priority queue to 70 of the available bandwidth Sysname system view Sysname interface Serial1 0 Sysname Serial1 0 qos reserved bandwidth pct 70 qos rtpq Syntax qos rtpq...

Page 1835: ...to configure the bandwidth to be greater than 80 of the total bandwidth please first change the maximum reserved bandwidth via qos reserved bandwidth command In bandwidth allocation the bandwidth for...

Page 1836: ...1836 CHAPTER 116 RTP PRIORITY QUEUE CONFIGURATION COMMANDS...

Page 1837: ...oS queuing To resolve this problem the token transmission function of QoS was introduced This function provides a flow control mechanism at the underlying layer queuing level It can control the number...

Page 1838: ...1838 CHAPTER 117 QOS TOKEN CONFIGURATION COMMANDS...

Page 1839: ...information of all mapping tables will be displayed Related commands qos map table dot1p Ip Examples Display configuration information about the mapping table of 802 1p priority to local priority Sys...

Page 1840: ...mport import value list export export value undo import import value list all View Priority mapping table view Parameters import value list Maps input parameter list export value Maps export parameter...

Page 1841: ...02 1p priority to local priority The local priority corresponding to 802 1p priority 4 and 5 is local priority 1 Sysname system view Sysname qos map table dot1p lp Sysname maptbl dot1p lp import 4 5 e...

Page 1842: ...1842 CHAPTER 118 PRIORITY MAPPING TABLE CONFIGURATION COMMANDS...

Page 1843: ...f current port Use the undo qos priority command to restore to the default value Port group is supported if the number of the interfaces on a layer 2 module is 16 24 or 48 Execute the command in inter...

Page 1844: ...1844 CHAPTER 119 PORT PRIORITY CONFIGURATION COMMANDS...

Page 1845: ...interfaces will be displayed Examples Display the information about the port priority trust mode currently configured Sysname display qos trust interface ethernet 1 0 Interface Ethernet1 0 Port prior...

Page 1846: ...supported if the number of the interfaces on a layer 2 module is 16 24 or 48 Execute the command in interface view and the setting is valid on the current interface only Execute the command in interf...

Page 1847: ...interface Sysname display qos wred interface ethernet 1 0 Interface Ethernet1 0 Current WRED configuration Exponent 9 1 512 Precedence Low High Discard Random Tail Limit Limit Probability Discard Dis...

Page 1848: ...ault IP precedence is used for calculating drop probability Description Use the qos wred enable command to apply WRED at an interface Use the undo qos wred enable command to restore the default droppi...

Page 1849: ...limit Specifies the upper threshold in the range 1 to 1024 in terms of the number of packets The system default is 30 discard probability discard prob Specifies the denominator for drop probability in...

Page 1850: ...dence command to configure the lower threshold the higher threshold and the drop probability denominator for an IP precedence value Use the undo qos wred ip precedence command to restore the default W...

Page 1851: ...ghting constant command to restore the default Before you can configure WRED parameters on an interface you must apply WRED with the qos wred enable command on it Related commands qos wred enable disp...

Page 1852: ...1852 CHAPTER 121 WRED CONFIGURATION COMMANDS...

Page 1853: ...configuration information of WRED table1 which is the list for configured WRED parameters Sysname display qos wred table 1 Table Name 1 Table Type EXP based WRED Exponent 6 Precedence LowLimit HighLim...

Page 1854: ...table By default no global WRED table exists It is not allowed to delete the table being used The queue based WRED table can be applied only on Layer 2 port on which the queue based WRED table can be...

Page 1855: ...pply queue table1 queue Syntax queue queue value low limit low limit discard probability discard prob undo queue queue value all View WRED table view Parameters queue value Queue number which is appli...

Page 1856: ...1856 CHAPTER 122 WRED TABLE CONFIGURATION COMMANDS Sysname system view Sysname qos wred queue table queue table1 Sysname wred table queue table1 queue 1 low limit 10...

Page 1857: ...to delete the matching rule If this command is frequently configured under one class the last configuration will overwrite the previous ones Related commands traffic classifier Examples Define the ru...

Page 1858: ...the MPLS protocol CQL 10 and sets the queue 1 to correspond with EXP value 1 Sysname system view Sysname qos cql 10 protocol mpls exp 1 queue 1 qos pql protocol mpls exp Syntax qos pql pql index proto...

Page 1859: ...p remark mpls exp Syntax remark mpls exp exp value undo remark mpls exp View Traffic behavior view Parameters exp value EXP value of MPLS in the range 0 to 7 Description Use the remark mpls exp comman...

Page 1860: ...1860 CHAPTER 123 MPLS QOS CONFIGURATION COMMANDS...

Page 1861: ...h DAR which also impacts working of other modules To avoid the case users can limit the maximum number of connections that can be recognized by DAR in order to save system resources When the connectio...

Page 1862: ...number and port max for the minimum port number The difference value between the maximum number and minimum number shall be smaller than 1000 i e port max port min 1000 The port number of other appli...

Page 1863: ...re FTP TCP 990 Secure HTTP TCP 443 Secure IMAP TCP UDP 585 993 Secure IRC TCP UDP 994 Secure LDAP TCP UDP 636 Secure NNTP TCP UDP 563 Secure POP3 TCP UDP 995 Secure TELNET TCP 992 SIP TCP UDP 5060 Ski...

Page 1864: ...er defined protocol which are user defined01 user defined02 user defined10 user defined name New name of the user defined protocol in the length of 1 to 14 characters The new name cannot be the same w...

Page 1865: ...data streams By default the function is disabled Examples Enable DAR packet statistics function on the interface Ethernet1 0 and set the interval to 7 minutes Sysname system view Sysname interface Et...

Page 1866: ...al application layer protocols Examples Display information about all protocols Sysname display dar protocol all Protocol TCP UDP Port bgp tcp 179 udp 179 bittorrent tcp range 6881 6889 citrix tcp 149...

Page 1867: ...512 513 514 rip udp 520 rsvp udp 1698 1699 rtcp rtp rtsp tcp 554 secure ftp tcp 990 secure http tcp 443 secure imap tcp 585 993 udp 585 993 secure irc tcp 994 udp 994 secure ldap tcp 636 udp 636 secur...

Page 1868: ...ols Examples Display the rename information of user defined protocols Sysname display dar protocol rename Default Name User Defined Name user defined01 merry user defined02 user defined03 user defined...

Page 1869: ...is bi directional in Displays the traffic on the inbound direction out Displays the traffic on the outbound direction Description Use the display dar protocol statistic command to display DAR packet...

Page 1870: ...the new names will apply if the protocols user defined01 to user defined10 are renamed in which unknown tcp indicates the irrecognizable TCP packet unknown udp indicates the irrecognizable UDP packet...

Page 1871: ...to 32 characters See Table 498 for the matching rules of simple wildcard characters Description Use the if match protocol http command to configure HTTP matching rules Use the undo if match protocol h...

Page 1872: ...d with spaces Description Use the if match protocol rtp command to configure RTP matching rules Use the undo if match protocol rtp command to delete the rules If no payload type is specified it matche...

Page 1873: ...lete DAR protocol statistics information i e to restore the statistics to 0 Examples Delete FTP protocol statistics information of the interface Ethernet 1 0 Sysname reset dar protocol statistic proto...

Page 1874: ...1874 CHAPTER 124 DAR CONFIGURATION COMMANDS...

Page 1875: ...FIFO queuing is adopted Examples Define a classifier named class 1 Sysname system view Sysname traffic classifier class1 Sysname classifier class1 quit Define a traffic behavior named behavior 1 Sysn...

Page 1876: ...restore the default value If the packet direction is not specified in configuration the parameter will be set in both inbound and outbound directions The committed burst size is the packet traffic th...

Page 1877: ...r class test1 Sysname fr class test1 cir 32000 cir allow Syntax cir allow inbound outbound committed information rate undo cir allow inbound outbound View Frame relay class view Parameters inbound Set...

Page 1878: ...ircuit to the total queue length ranging from 1 to 100 By default it is 100 Description Use the congestion threshold command to enable congestion management function of FR virtual circuit Use the undo...

Page 1879: ...cql 10 display fr class map Syntax display fr class map fr class class name interface interface type interface number View Any view Parameters class name FR class name a string of 1 to 30 characters...

Page 1880: ...ion on the fields of the display fr class map command Field Description Serial1 0 FR interface The first fr class FR class on FR interface Serial1 0 1 Subinterface on the FR interface The second fr cl...

Page 1881: ...nt type Three options are available FRF 12 FRF 11 Annex C and Motorola fragment size Fragment size in out drop Number of received fragment packets number of sent fragment packets number of discarded f...

Page 1882: ...r switch Examples Display all FR PVC information Sysname display fr switch table all Switch Name Interface DLCI Interface DLCI State test MFR1 0 100 MFR1 1 101 UP display qos policy interface Syntax d...

Page 1883: ...xujin Matched 0 0 Packets Bytes Operator Logic AND Rule s if match acl 2001 Behavior Assured Forwarding Bandwidth 10 Kbps Matched 0 0 Packets Bytes Enqueued 0 0 Packets Bytes Discarded 0 0 Packets Byt...

Page 1884: ...ued Number of enqueued packets or bytes Discarded Number of discarded packets or bytes Discard Method Discard method Assured Forwarding Information of assured forwarding queue Bandwidth The minimum ba...

Page 1885: ...ccurs on the network this part of excess traffic will be first discarded When this command is used the set EBS value will be valid in both inbound and outbound directions if the parameters inbound and...

Page 1886: ...s command to create a FR class and enter FR class view Use the undo fr class command to delete a specified FR class By default no FR class is created Only after associating a FR class with an interfac...

Page 1887: ...FR interfaces while the congestion threshold command is applied to FR virtual circuit n The command can only be used for FR DCE interfaces or NNI interfaces Related commands congestion threshold Examp...

Page 1888: ...1 to 10 interface type interface number Specifies an interface by its type and number Description Use the fr del inbound interface command to configure an interface based DE rule list For the packet...

Page 1889: ...or the related port number udp ports IP packets whose source or destination UDP port number are ports in the range 0 to 65535 The value of ports can be a port name or the related port number If optio...

Page 1890: ...and to set the queue type of a FR interface as PVC PQ PVC Priority Queuing and set queue length i e the maximum number of packets that can be held by a queue for each queue Use the undo fr pvc pq comm...

Page 1891: ...as a FR switching by using the fr switching command Related commands fr class Examples Enable the traffic policing function on the interface Serial 1 0 Sysname system view Sysname interface Serial 1 0...

Page 1892: ...ction By default the fragmentation function on FR virtual circuit is disabled Related commands fr class Examples Configure fragment size as 128 in the FR class named test1 Sysname system view Sysname...

Page 1893: ...class Related commands fr class fr dlci Examples Associate the FR class named test1 with the FR virtual circuit whose DLCI is 200 Sysname system view Sysname interface Serial 1 0 Sysname Serial1 0 fr...

Page 1894: ...into the normal PVC PQ PVC PQ falls into four groups top middle normal and bottom PVC PQ is relative to DLCI After the queue of an interface is set as PVC PQ packets on each virtual circuit can enter...

Page 1895: ...priority queue on the FR class named test1 with a bandwidth of 20 kbps Sysname system view Sysname fr class test1 Sysname fr class test1 rtpq start port 16383 end port 16384 bandwidth 20 traffic shapi...

Page 1896: ...e maximum number of packets allowed in the queue Packets exceeding this limitation will be discarded The permitted value ranges from 1 to 1024 with a default of 64 dynamic queues Total number of queue...

Page 1897: ...ype Description Use the display dot1x command to display information about 802 1x including session information statistics or configuration With both the sessions keyword and the statistics keyword no...

Page 1898: ...ff checker is disabled Indicates whether the device is configured to get offline any user trying to login through a proxy Transmit Period Setting of the username request timeout timer Handshake Period...

Page 1899: ...the port The value of 0 means that no guest VLAN is configured Max on line user number Maximum number of users supported on the port EAPOL Packet Number of EAPOL packets received Tx or sent Rx Sent EA...

Page 1900: ...By default 802 1x is neither enabled globally nor enabled for any port Note that 802 1x must be enabled both globally in system view and for the intended ports in system view or interface view Otherw...

Page 1901: ...802 1x user information in the EAP attributes of RADIUS packets and sends the packets to the RADIUS server for authentication it does not need to repackage the EAP packets into standard RADIUS packet...

Page 1902: ...system view this command configures guest VLAN for all ports with interface list not provided and configures guest VLAN for specified with interface list provided In interface view you cannot specify...

Page 1903: ...x guest vlan 3 dot1x handshake Syntax dot1x handshake undo dot1x handshake View Interface view Parameter None Description Use the dot1x handshake command to enable the online user handshake function s...

Page 1904: ...ype interface number represents the port number and 1 10 means that you can provide up to 10 port indexes port index lists for this argument The start port number must be smaller than the end number a...

Page 1905: ...nction is enabled Related command display dot1x Example Disable the multicast trigger function for interface wlan ess 1 Sysname system view Sysname interface wlan ess 1 Sysname undo dot1x multicast tr...

Page 1906: ...10 means that you can provide up to 10 port indexes port index lists for this argument The start port number must be smaller than the end number and the two ports must of the same type Description Use...

Page 1907: ...er represents the port number and 1 10 means that you can provide up to 10 port indexes port index lists for this argument The start port number must be smaller than the end number and the two ports m...

Page 1908: ...ber of attempts to send an authentication request to a supplicant Use the undo dot1x retry command to restore the default By default the authenticator can send an authentication request to a supplican...

Page 1909: ...tion Use the dot1x supp proxy check command to enable detection and control of users logging in through proxies for specified or all ports Use the undo dot1x supp proxy check command to disable the fu...

Page 1910: ...15 quiet period value Setting for the quiet timer in seconds It ranges from 10 to 120 and defaults to 60 server timeout value Setting for the server timeout timer in seconds It ranges from 100 to 300...

Page 1911: ...s the request In addition to be compatible with clients that do not send EAPOL Start requests unsolicitedly the device multicasts EAP Request Identity frame periodically to detect the clients with the...

Page 1912: ...command clears 802 1x statistics on the specified ports With the argument unspecified the command clears global 802 1x statistics and 802 1x statistics on all ports Related command display dot1x Exam...

Page 1913: ...to set the maximum number of accessing users allowed by an ISP domain Use the undo access limit or access limit disable command to remove the limitation By default there is no limit to the amount of s...

Page 1914: ...hat for a specific access mode Local accounting is only for managing the local user connection number it does not provide the statistics function The local user connection number management is only fo...

Page 1915: ...N access users By default the default accounting scheme is used for LAN access users Note that the RADIUS scheme specified for the current ISP domain must have been configured Related command accounti...

Page 1916: ...By default the default accounting scheme is used for login users Note that the RADIUS or HWTACACS scheme specified for the current ISP domain must have been configured Related command accounting defau...

Page 1917: ...accounting optional feature for users in domain aabbcc net Sysname system view Sysname domain aabbcc net Sysname isp aabbcc net accounting optional accounting portal Syntax accounting portal none radi...

Page 1918: ...cters Description Use the accounting ppp command to specify the accounting scheme for PPP users Use the undo accounting ppp command to restore the default By default the default accounting scheme is u...

Page 1919: ...command To implement accounting you must enable the accounting function and meanwhile have the accounting scheme configured Related command domain radius scheme Example In the default ISP domain syst...

Page 1920: ...both range from 0 to 15 The value of port number ranges from 0 to 255 The ports bounded are determined by port number regardless of port type mac mac address Specifies the MAC address of the user in t...

Page 1921: ...a specific access mode Related command authorization default accounting default hwtacacs scheme radius scheme Example Configure the default ISP domain system to use the local authentication scheme fo...

Page 1922: ...em authentication lan access local Configure the default ISP domain system to use RADIUS authentication scheme rd for LAN access users and to use the local authentication scheme as the backup scheme S...

Page 1923: ...e domain system Sysname isp system authentication login radius scheme rd local authentication portal Syntax authentication portal none radius scheme radius scheme name undo authentication portal View...

Page 1924: ...scription Use the authentication ppp command to specify the authentication scheme for PPP users Use the undo authentication ppp command to restore the default By default the default authentication sch...

Page 1925: ...domain must have been configured You must have created a RADIUS scheme before using the authentication voip command To implement authentication you must enable the authentication function and meanwhi...

Page 1926: ...default hwtacacs scheme hwtacacs scheme name local local none radius scheme radius scheme name local undo authorization default View ISP domain view Parameter hwtacacs scheme hwtacacs scheme name Spe...

Page 1927: ...ISP domain system to use RADIUS authorization scheme rd for all types of users and to use the local authorization scheme as the backup scheme Sysname system view Sysname domain system Sysname isp sys...

Page 1928: ...acacs scheme name local local none radius scheme radius scheme name local undo authorization login View ISP domain view Parameter hwtacacs scheme hwtacacs scheme name Specifies an HWTACACS scheme by i...

Page 1929: ...zation which means the user is trusted completely Here the user is assigned with the default privilege radius scheme radius scheme name Specifies a RADIUS scheme by its name which is a string of 1 to...

Page 1930: ...the authorization scheme for PPP users Use the undo authorization ppp command to restore the default By default the default authorization scheme is used for PPP users Note that the RADIUS or HWTACACS...

Page 1931: ...lement authorization you must enable the authorization function and meanwhile have the authorization scheme configured Related command domain radius scheme Example In the default ISP domain system con...

Page 1932: ...he value range varies by device vlan vlan id Specifies all user connections in a VLAN The VLAN ID ranges from 1 to 4094 Description Use the cut connection command to tear down the specified connection...

Page 1933: ...ins the domain name vlan vlan id Specifies all user connections in a VLAN The VLAN ID ranges from 1 to 4094 Description Use the display connection command to display information about specified or all...

Page 1934: ...User Template Idle cut Disable Self service Disable 1 Domain system State Active Access limit Disable Accounting method Required Default authentication scheme local Default authorization scheme local...

Page 1935: ...ugh the console port AUX port or Asyn port state active block Specifies all local users in the state of active or block A local user in the state of active can access network services while a local us...

Page 1936: ...n sign or at sign Description Use the domain isp name command to create an ISP domain and or enter ISP domain view Use the domain default command to specify the default ISP domain and enter ISP domain...

Page 1937: ...ter disable disables the configured default ISP domain enable Enables the configured default ISP domain isp name Name of an existing ISP domain a case insensitive string of 1 to 24 characters Descript...

Page 1938: ...t enable 50 ip pool Syntax ip pool pool number low ip address high ip address undo ip pool pool number View System view ISP domain view Parameter pool number Address pool number in the range 0 to 99 l...

Page 1939: ...1 129 102 0 10 level Syntax level level undo level View Local user view Parameter level Priority level for the user which can be 0 for visiting level 1 for monitoring level 2 for system level and 3 fo...

Page 1940: ...l or all all Specifies all users service type Specifies the users of a type dvpn refers to users using DVPN tunnel ftp refers to users using FTP lan access refers to users accessing the network throug...

Page 1941: ...With the cipher force mode configured A local user password is always displayed in cipher text regardless of the configuration of the password command If you use the save command to save the configura...

Page 1942: ...rypted into a password of 24 characters in cipher text and a password of 16 to 63 characters in plain text will be encrypted into a password of 88 characters in cipher text For a password of 24 charac...

Page 1943: ...of the self service server for changing the user password A user can change his or her password through the page Only authenticated users can select Service Change Password from the 802 1x client The...

Page 1944: ...name system view Sysname local user user1 Sysname luser user1 service type telnet service type ftp Syntax service type ftp undo service type ftp View Local user view Parameter None Description Use the...

Page 1945: ...service is authorized to a user if the PPP service is authorized callback without authentication is enabled no callback number is specified and the system does not authenticate the caller number of IS...

Page 1946: ...ry name undo work directory View Local user view Parameters directory name Name of the directory that FTP SFTP users are authorized to access a case insensitive string of 1 to 135 characters Descripti...

Page 1947: ...1947 Sysname system view Sysname local user user1 Sysname luser user1 work directory cf...

Page 1948: ...1948 CHAPTER 127 AAA CONFIGURATION COMMANDS...

Page 1949: ...nction is disabled Note that This command is applicable to centralized devices only Execution of this command does not affect the results of other accounting on related commands such as accounting on...

Page 1950: ...d devices only Execution of this command does not affect the results of other accounting on related commands such as accounting on enable That is execution of the undo accounting on enable interval co...

Page 1951: ...mmand radius scheme accounting on enable Example In RADIUS scheme rd set the maximum number of accounting on packet retransmission attempts to 10 Sysname system view Sysname radius scheme rd Sysname r...

Page 1952: ...hemeName systemradius1 Index 0 Type extended Primary Auth IP 127 0 0 1 1 1 1 Port 1645 1812 State block active Primary Acct IP 127 0 0 1 1 1 1 1 Port 1646 1813 State bloc k active Second Auth IP 0 0 0...

Page 1953: ...y accounting server active or block Auth Server Encryption Key Shared key of the authentication server Acct Server Encryption Key Shared key of the accounting server Accounting On packet disable The a...

Page 1954: ...c 0 PKT response Num 0 Err 0 Succ 0 Session ctrl pkt Num 0 Err 0 Succ 0 Normal author request Num 0 Err 0 Succ 0 RADIUS sent messages statistic Auth accept Num 0 Auth reject Num 0 EAP auth replying Nu...

Page 1955: ...r of accounting requests Account off request Number of stop accounting requests PKT auth timeout Number of authentication timeout packets PKT acct_timeout Number of accounting timeout packets Realtime...

Page 1956: ...bout the stop accounting requests buffered in the device by scheme session ID time range or user name n If receiving no response after sending a stop accounting request to a RADIUS server the device b...

Page 1957: ...ey is configured Note that You must ensure that the same shared key is set on the device and the RADIUS server If authentication authorization and accounting are performed on two servers with differen...

Page 1958: ...physical interface failure The address of a loopback interface is recommended The nas ip command in RADIUS scheme view is only for the current RADIUS scheme while the radius nas ip command in system...

Page 1959: ...he primary authentication authorization server port number UDP port number of the primary authentication authorization server which ranges from 1 to 65535 Description Use the primary authentication co...

Page 1960: ...ning port of the RADIUS client is disabled The RADIUS client can either accept authentication authorization or accounting requests or process timer messages However it fails to transmit and receive pa...

Page 1961: ...nnot reach the device as the result of a physical interface failure If you configure the command for more than one time the last configuration takes effect The nas ip command in RADIUS scheme view is...

Page 1962: ...name format RADIUS scheme view retry display radius scheme display radius statistics Example Create a RADIUS scheme named radius1 and enter RADIUS scheme view Sysname system view Sysname radius schem...

Page 1963: ...buffer Syntax reset stop accounting buffer radius scheme radius scheme name session id session id time range start time stop time user name user name View User view Parameter radius scheme radius sch...

Page 1964: ...aximum number of retransmission attempts in the range 1 to 20 Description Use the retry command to set the maximum number of RADIUS retransmission attempts Use the undo retry command to restore the de...

Page 1965: ...st transmission attempts Once the limit is reached but the NAS still receives no response the NAS disconnects the user Suppose that the RADIUS server response timeout period is 3 seconds set with the...

Page 1966: ...s means that for each stop accounting request if the device receives no response within 3 seconds it will initiate a new request If still no responses are received within 5 renewed requests the stop a...

Page 1967: ...radius scheme radius1 Sysname radius radius1 secondary accounting 10 110 1 1 1813 secondary authentication RADIUS scheme view Syntax secondary authentication ip address port number undo secondary aut...

Page 1968: ...on Use the security policy server command to configure the IP address of a security policy server Use the undo security policy server command to remove one or all configured IP addresses By default no...

Page 1969: ...y Sets the status of the primary RADIUS server secondary Sets the status of the secondary RADIUS server accounting Sets the status of the RADIUS accounting server authentication Sets the status of the...

Page 1970: ...ary accounting RADIUS scheme view secondary accounting RADIUS scheme view Example Set the status of the secondary server in RADIUS scheme radius1 to active Sysname system view Sysname radius scheme ra...

Page 1971: ...uiet timer for the primary server that is the duration that the status of the primary server stays blocked before resuming the active state Use the undo timer quiet command to restore the default Rela...

Page 1972: ...interval to 51 minutes for RADIUS scheme radius1 Sysname system view Sysname radius scheme radius1 Sysname radius radius1 timer realtime accounting 51 timer response timeout RADIUS scheme view Syntax...

Page 1973: ...ut domain Excludes the ISP domain name from the username sent to the RADIUS server Description Use the user name format command to specify the format of the username to be sent to a RADIUS server By d...

Page 1974: ...OMMANDS Example Specify the device to include the domain name in the username sent to the RADIUS servers for the RADIUS scheme radius1 Sysname system view Sysname radius scheme radius1 Sysname radius...

Page 1975: ...iga packet Description Use the data flow format command to specify the unit for data flows or packets to be sent to a HWTACACS server Use the undo data flow format command to restore the default By de...

Page 1976: ...Quiet interval min 5 Realtime accounting interval min 12 Response timeout interval sec 5 Acct stop PKT retransmit times 100 Domain included Yes Data traffic unit B Packet traffic unit one packet Tabl...

Page 1977: ...y stop accounting buffer hwtacacs scheme hwt1 Total 0 record s Matched hwtacacs nas ip Syntax hwtacacs nas ip ip address undo hwtacacs nas ip View System view Parameter ip address IP address in dotted...

Page 1978: ...s However the nas ip command in HWTACACS scheme view overwrites the configuration of the hwtacacs nas ip command Related command nas ip HWTACACS scheme view Example Set the IP address for the device t...

Page 1979: ...remove the configuration By default no shared key is configured Related command display hwtacacs Example Set the shared key for HWTACACS accounting packets to hello for HWTACACS scheme hwt1 Sysname s...

Page 1980: ...ommand hwtacacs nas ip Example Set the IP address for the device to use as the source address of the HWTACACS packets to 10 1 1 1 Sysname system view Sysname hwtacacs scheme hwt1 Sysname hwtacacs hwt1...

Page 1981: ...e server It ranges from 1 to 65535 and defaults to 49 Description Use the primary authentication command to specify the primary HWTACACS authentication server Use the undo primary authentication comma...

Page 1982: ...econdary authorization servers cannot be the same Otherwise the configuration fails The HWTACACS service port configured on the device and that of the HWTACACS server must be consistent If you configu...

Page 1983: ...o clear the buffered stop accounting requests that get no responses Related command stop accounting buffer enable HWTACACS scheme view retry stop accounting HWTACACS scheme view display stop accountin...

Page 1984: ...49 Description Use the secondary accounting command to specify the secondary HWTACACS accounting server Use the undo secondary accounting command to remove the configuration Note that The IP addresse...

Page 1985: ...d on the device and that of the HWTACACS server must be consistent If you configure the command for more than one time the last configuration takes effect You can remove an authentication server only...

Page 1986: ...me hwtacacs hwt1 secondary authorization 10 163 155 13 49 stop accounting buffer enable HWTACACS scheme view Syntax stop accounting buffer enable undo stop accounting buffer enable View HWTACACS schem...

Page 1987: ...o set the quiet timer for the primary server that is the duration that the status of the primary server stays blocked before resuming the active state Use the undo timer quiet command to restore the d...

Page 1988: ...1 minutes for HWTACACS scheme hwt1 Sysname system view Sysname hwtacacs scheme hwt1 Sysname hwtacacs hwt1 timer realtime accounting 51 timer response timeout HWTACACS scheme view Syntax timer response...

Page 1989: ...sed by the device to determine the ISP domain to which a user belongs Some earlier HWTACACS servers however cannot recognize a username including an ISP domain name Before sending a username including...

Page 1990: ...1990 CHAPTER 129 HWTACACS CONFIGURATION COMMANDS...

Page 1991: ...ing statistics on Ethernet 1 0 Sysname display firewall ethernet frame filter interface ethernet 1 0 Interface Ethernet1 0 In bound Policy acl 4000 From 2005 06 07 14 46 59 to 2005 06 07 16 16 23 0 pa...

Page 1992: ...display firewall statistics fragments inspect Fragments inspection is enabled The high watermark for clamping is 10000 The low watermark for clamping is 1000 Current records for fragments inspection...

Page 1993: ...system view Sysname firewall enable firewall enable Syntax firewall enable undo firewall enable View System view Parameter None Description Use the firewall enable command to enable the firewall Use...

Page 1994: ...d by default Example Configure Ethernet frame filtering rules on the inbound direction of interface Ethernet 1 0 Sysname system view Sysname bridge enable Sysname bridge 1 enable Sysname interface eth...

Page 1995: ...agments inspect high low command to restore the default high and low watermark values By default the high watermark value is 2 000 and low watermark value is 1500 The low watermark value must be small...

Page 1996: ...ensitive string of 1 to 32 characters that must start with an English letter a to z or A to Z To avoid confusion the word all cannot be used as the ACL name inbound Filters packets in the inbound dire...

Page 1997: ...r ipv6 command to configure IPv6 packet filtering on the interface Use the undo firewall packet filter ipv6 command to remove the IPv6 packet filtering setting on the interface By default IPv6 packets...

Page 1998: ...ce type interface num View User view Parameter all Clears the firewall statistic information on all interfaces interface interface type interface num Clears the firewall statistic information of the s...

Page 1999: ...timeout of a UDP session seconds Idle timeout period of the session in seconds The effective range is 5 to 43 200 Description Use the aging time command to configure the SYN FIN wait timeout period o...

Page 2000: ...w System view Parameter aspf policy number ASPF policy number in the range of 1 to 99 Description Use the aspf policy command to create an ASPF policy and enter its view Use the undo aspf policy comma...

Page 2001: ...uses timeouts to manage the session status information of a protocol so as to determine when to terminate the status information management of a session or when to delete a session that cannot be nor...

Page 2002: ...Application Status 73A4844 1 1 1 50 1025 2 2 2 1 21 ftp FTP_CONXN_UP display aspf interface Syntax display aspf interface View Any view Parameter None Table 517 Description of the fields of the displ...

Page 2003: ...e display aspf policy command to view the information of an ASPF policy Example Display the configuration information of ASPF policy 1 Sysname display aspf policy 1 ASPF Policy Configuration Policy Nu...

Page 2004: ...ponder tcp SeqNumber AckNumber 134665683 141385146 display port mapping Syntax display port mapping application name port port number Table 519 Description of the fields of the display aspf session co...

Page 2005: ...l aspf aspf policy number inbound outbound undo firewall aspf aspf policy number inbound outbound View Interface view Parameter aspf policy number Number of the ASPF policy in the range 1 to 99 inboun...

Page 2006: ...display aspf all display aspf policy display aspf session and display aspf interface Example Enable the session logging function of the ASPF Sysname system view Sysname aspf policy 1 Sysname aspf poli...

Page 2007: ...rt mapping Example Map port 3456 to the FTP protocol Sysname system view Sysname port mapping ftp port 3456 reset aspf session Syntax reset aspf session View User view Parameter None Description Use t...

Page 2008: ...2008 CHAPTER 131 ASPF CONFIGURATION COMMANDS...

Page 2009: ...the same type and the former must be greater than the latter Description Use the display mac authentication command to display global MAC authentication information or MAC authentication information a...

Page 2010: ...uiet period Setting of the quiet timer Server response timeout value Setting of the server timeout timer The max allowed user number Maximum number of users the device supports Current user number amo...

Page 2011: ...u can configure MAC authentication parameters globally or for specified ports either before or after enabling MAC authentication If no MAC authentication parameters are configured before MAC authentic...

Page 2012: ...value Specifies the server timeout period in the range 100 to 300 seconds Description Use the mac authentication timer command to set the MAC authentication timers Use the undo mac authentication tim...

Page 2013: ...he latter case the password must be a string of 1 to 63 characters in plain text mac address Adopts the user s source MAC address as the username which is case insensitive with hyphen Indicates that t...

Page 2014: ...interface list View User view Parameter interface interface list Specifies an Ethernet port list in the format of interface type interface number to interface type interface number 1 10 where 1 10 in...

Page 2015: ...defined in the connection limit policy Use the undo connection limit default command to restore the default By default connection limit is not enabled Example Configure the default connection limit ac...

Page 2016: ...ction limit enable View System view Parameter None Description Use the connection limit enable command to enable the connection limit function Use the undo connection limit enable command to disable t...

Page 2017: ...onnection limit mode and the maximum connection rate Additionally you can add or delete rules to from the policy Example Create a connection limit policy numbered 1 Sysname system view Sysname connect...

Page 2018: ...number range in a port range The value range of port number is 0 to 65 535 The value range of start port and end port is also 0 to 65 535 and the start port must be not greater than the end port vpn...

Page 2019: ...s 1 from 202 110 10 10 to 202 110 10 15 Table 522 Description on the fields of the display connection limit statistics command Field Description source ip Source IP address dest ip Destination IP addr...

Page 2020: ...t all Syntax display nat all Table 524 Description on the fields of the display nat aging time command Field Description NAT aging time value information NAT aging time values for various protocols tc...

Page 2021: ...aging time value is 60 seconds pptp aging time value is 86400 seconds dns aging time value is 60 seconds tcp fin aging time value is 60 seconds tcp syn aging time value is 3600 seconds ftp ctrl aging...

Page 2022: ...s GlobalAddr External IP address InsideAddr Internal IP address Vpn instance Layer 3 VPN to which the internal IP address belongs tcp aging time value is 86400 seconds The aging time for TCP is 86 400...

Page 2023: ...PLS VPN instance Description Use the display nat connection limit command to display NAT connection limit statistics Example Display NAT connection limit statistics Sysname display nat connection limi...

Page 2024: ...T address group 1 no pat Ethernet1 1 acl 2002 interface Table 527 Description on the fields of the display nat log command Field Description NAT log information NAT log configuration log enable enable...

Page 2025: ...a string of 1 to 31 characters source global global address Displays NAT translation table entries for the specified external source IP address source inside inside address Displays NAT translation t...

Page 2026: ...on table count 0 active session table count HASH by Internet side IP 0 Table 530 Description on the fields of the display nat session command Field Description Protocol Protocol number 1 represents IC...

Page 2027: ...999 Only data flows that match this ACL are limited total NO PAT session table count Number of No PAT session entries total SERVER session table count Number of SERVER session entries total STATIC se...

Page 2028: ...ss 1 1 1 1 as 200 and 100 respectively Configure ACL 2001 defining that only connections initiated from 192 168 0 0 24 are limited This means that the number of user connections which initiated from 1...

Page 2029: ...e as the source address after address translation An equal start address and end address means there is only one IP address in the address pool Note that You cannot delete an address pool which has be...

Page 2030: ...udp Specifies the NAT aging time for UDP which defaults to 300 seconds seconds NAT aging time in the range 10 to 86 400 seconds 24 hours Description Use the nat aging time command to configure NAT agi...

Page 2031: ...policy number Number of the connection limit policy to be bound with the NAT module The value ranges from 0 to 19 Description Use the nat connection limit policy command to bind a connection limit pol...

Page 2032: ...he undo nat log enable command to disable the NAT log function By default the NAT log function is disabled Example Enable the NAT log function Sysname system view Sysname nat log enable acl 2001 Disab...

Page 2033: ...on Use the nat log flow begin command to generate NAT logs while establishing a NAT session Use the undo nat log flow begin command to restore the default By default no log is generated when establish...

Page 2034: ...users who use these table entries cannot access external networks whereas other users are not affected You can also use the reset nat session command to clear all the NAT address translation table ent...

Page 2035: ...al1 0 nat outbound 2001 nat outbound static Syntax nat outbound static undo nat outbound static View Interface view Parameter None Description Use the nat outbound static command to enable on an inter...

Page 2036: ...or external access interface Uses a specified interface address as the public IP address of an internal server This only applies to Easy IP interface type interface number Specifies the interface type...

Page 2037: ...nfigured on the interface that serves as the egress of an internal network and connects to the external networks Currently the device supports Easy IP which uses the interface address as the public IP...

Page 2038: ...face serial 1 0 Sysname Serial1 0 nat server vpn instance vrf10 protocol tcp globa l 202 110 10 10 1001 1100 inside 10 110 10 1 10 110 10 100 telnet Remove the WWW server using the following commands...

Page 2039: ...et NAT The IP addresses of an internal network segment are mapped with the IP addresses of an external network segment Note that when configuring net to net NAT you must ensure that internal IP addres...

Page 2040: ...ear the NAT log statistics Sysname reset userlog export reset userlog nat logbuffer Syntax reset userlog nat logbuffer View User view Parameter None Description Use the reset userlog nat logbuffer com...

Page 2041: ...Related command userlog nat export source ip Example Export NAT logs to the NAT log server whose IP address is 169 254 1 1 2000 Sysname system view Sysname userlog nat export host 169 254 1 1 2000 use...

Page 2042: ...r of NAT logs is 1 Example Set the version number of NAT logs to 1 Sysname system view Sysname userlog nat export version 1 userlog nat syslog Syntax userlog nat syslog undo userlog nat syslog View Sy...

Page 2043: ...he name of the certificate issuer subject name Specifies the name of the certificate subject dn Specifies the domain name of the entity ctn Specifies the contain operation equ Specifies the equal oper...

Page 2044: ...f abc Sysname pki cert attribute group mygroup attribute 2 issuer name f qdn nequ abc Create a certificate attribute rule specifying that the IP address in the alternative subject name cannot be 10 0...

Page 2045: ...Specify the entity for certificate request as entity1 SysnameCA system view SysnameCA pki domain 1 SysnameCA pki domain 1 certificate request entity entity1 certificate request from Syntax certificate...

Page 2046: ...s to display the password in clear text manual Specifies to request a certificate in manual mode Description Use the certificate request mode command to configure the certificate request mode Use the...

Page 2047: ...icate is signed Related command display pki certificate Example Specify the polling interval as 15 minutes and the maximum number of attempts as 40 Sysname system view Sysname pki domain 1 Sysname pki...

Page 2048: ...ple the user name Use the undo common name command to remove the configuration By default no common name is specified Example Configure the common name of an entity as test Sysname system view Sysname...

Page 2049: ...has been revoked A revoked certificate is no longer trusted Example Disable CRL checking Sysname system view Sysname pki domain 1 Sysname pki domain 1 crl check disable crl update period Syntax crl u...

Page 2050: ...lt no CRL distribution point URL is specified Note that when the URL of the CRL distribution point is not set you should acquire CA certificate and a local certificate and then acquire a CRL through S...

Page 2051: ...it Modulus 512 bit 00D41D1F Exponent 65537 0x10001 X509v3 extensions X509v3 Subject Alternative Name DNS hyf xxyyzz net X509v3 CRL Distribution Points URI http 1 1 1 1 447 myca crl Signature Algorithm...

Page 2052: ...policy rule 1 deny mygroup1 rule 2 permit mygroup2 display pki certificate attribute group Syntax display pki certificate attribute group group name all View Any view Parameter group name Name of a ce...

Page 2053: ...04 GMT CRL extensions X509v3 Authority Key Identifier keyid 0F71448E E075CAB8 ADDB3A12 0B747387 45D612EC Revoked Certificates Serial Number 05a234448E Revocation Date Sep 6 12 33 22 2004 GMT CRL entry...

Page 2054: ...of an entity as pki domain name com Sysname system view Sysname pki entity 1 Sysname pki entity 1 fqdn pki domain name com ip PKI entity view Syntax ip ip address undo ip View PKI entity view Table 5...

Page 2055: ...ew PKI domain view Parameter ip address IP address of the LDAP server in dotted decimal format port number Port number of the LDAP server in the range 1 to 65535 By default it is 389 version number LD...

Page 2056: ...ki entity 1 locality city organization Syntax organization org name undo organization View PKI entity view Parameter org name Organization name a case insensitive string of 1 to 31 characters No comma...

Page 2057: ...i certificate access control policy policy name all View System view Parameter policy name Name of the certificate attribute based access control policy a case insensitive string of 1 to 16 characters...

Page 2058: ...p named mygroup and enter its view Sysname system view Sysname pki certificate attribute group mygroup Sysname pki cert attribute group mygroup pki delete certificate Syntax pki delete certificate ca...

Page 2059: ...ntity name Name for the entity a case insensitive string of 1 to 15 characters Description Use the pki entity command to create a PKI entity and enter its view Use the undo pki entity command to remov...

Page 2060: ...ificate ca domain cer pem pki request certificate domain Syntax pki request certificate domain domain name password pkcs10 filename filename View System view Parameter domain name Name of the PKI doma...

Page 2061: ...r for certificate distribution Related command pki domain Example Retrieve the CA certificate from the certificate issuing server Sysname system view Sysname pki retrieval certificate ca domain 1 pki...

Page 2062: ...ommand pki domain Example Verify the validity of the local certificate Sysname system view Sysname pki validate certificate domain 1 root certificate fingerprint Syntax root certificate fingerprint md...

Page 2063: ...ered invalid and denied permit Indicates that a certificate matching an attribute rule in the specified attribute group is considered valid and permitted group name Name of the certificate attribute g...

Page 2064: ...acters No comma can be included Description Use the state command to specify the name of the state or province where an entity resides Use the undo state command to remove the configuration By default...

Page 2065: ...nfigurations interface interface type interface number Displays the ACLs on the specified interface Description Use the display portal acl command to display the ACLs on the specified interface Exampl...

Page 2066: ...tion statistics interface ethernet 1 0 Interface Ethernet1 0 User state statistics State Name User Num VOID 0 DISCOVERED 0 WAIT_AUTHEN_ACK 0 WAIT_AUTHOR_ACK 0 WAIT_LOGIN_ACK 0 WAIT_ACL_ACK 0 WAIT_NEW_...

Page 2067: ...fields of the display portal connection statistics command Field Description User state statistics Statistics of portal users State Name Name of a user state User Num Number of users VOID Number of us...

Page 2068: ...request message MSG_LOGIN_REQ Accounting request message MSG_LOGOUT_REQ Accounting stop request message MSG_LEAVING_REQ Leaving request message MSG_ARPPKT ARP message MSG_TMR_REQAUTH Authentication r...

Page 2069: ...ethernet 1 0 Interface portal configuration Ethernet1 0 Portal running Portal server servername Authentication type Direct Service type Normal Authentication network address 0 0 0 0 mask 0 0 0 0 Tabl...

Page 2070: ...1 portal Table 539 Description on the fields of the display portal interface command Field Description Interface portal configuration Portal configuration on an interface Ethernet 1 0 Portal state on...

Page 2071: ...he portal server statistics on Ethernet 1 0 Sysname display portal server statistics interface ethernet 1 0 Interface Ethernet1 0 Server name st Invalid packets 0 Pkt Name Total Discard Checkerr REQ_C...

Page 2072: ...portal server REQ_LOGOUT Logout request message the portal server sends to the access device ACK_LOGOUT Logout acknowledgment message the access device sends to the portal server AFF_ACK_AUTH Affirma...

Page 2073: ...Interface Table 542 Description on fields of the display portal tcp cheat statistics command Field Description TCP Cheat Statistic TCP spoofing statistics Total Opens Total number of opened connection...

Page 2074: ...on The portal authentication subnet for direct authentication is any source IP address and the portal authentication subnet for re DHCP authentication is the one determined by the private IP address o...

Page 2075: ...th netmask any source any interface interface type interface number ip ip address mask mask length netmask any mac mac address undo portal free rule rule number all View System view Parameter rule num...

Page 2076: ...source interface is Ethernet 1 0 and destination IP address is any address will not trigger a portal authentication Sysname system view Sysname portal free rule 15 source ip 10 10 10 1 mask 24 interfa...

Page 2077: ...er Use the undo portal server command to delete the specified portal server or restore the default By default no portal server is configured Note that if the specified portal server exists but there i...

Page 2078: ...ed portal authentication Description Use the portal server command to enable portal authentication on the interface and specify the portal server to be referenced authentication mode and service type...

Page 2079: ...terface type interface number View User view Parameter all Clears the portal server statistics on all interfaces interface interface type interface number Clears the portal server statistics on the sp...

Page 2080: ...2080 CHAPTER 135 PORTAL CONFIGURATION COMMANDS...

Page 2081: ...t You can operate on the RSH client to remotely execute the OS commands of the RSH server and query access information as well Example Display information about the directories and files on remote ser...

Page 2082: ...xe 2003 06 21 10 32 69 632 wrshdrun exe 2004 01 02 15 54 196 608 wrshdsp exe 2004 01 02 15 54 102 400 wrshdnt exe 2001 07 30 18 05 766 wrshdnt ico 2004 07 13 09 10 3 253 INSTALL LOG 21 files 1 749 848...

Page 2083: ...configuration and state of time range trname Sysname display time range trname Current time is 10 45 15 4 14 2005 Thursday Time range trname Inactive from 08 00 12 1 2005 to 23 59 12 31 2100 time rang...

Page 2084: ...e hh is hours and mm is minutes Its value ranges from 00 00 to 23 59 The date1 argument specifies a date in MM DD YYYY or YYYY MM DD format where MM is the month of the year in the range 1 to 12 DD is...

Page 2085: ...0 wednesday from 00 00 01 01 2004 to 23 59 12 31 2004 command You may create individual time ranges identified with the same name They are regarded as one time range whose active period is the result...

Page 2086: ...2086 CHAPTER 137 COMMON CONFIGURATION COMMANDS...

Page 2087: ...o 5999 name acl name Specifies the name of the ACL which is a case insensitive string of 1 to 32 characters It must start with an English letter and cannot be the English word of all to avoid confusio...

Page 2088: ...4 ACL but only when it is empty Example Create IPv4 ACL 2000 Sysname system view Sysname acl number 2000 Sysname acl basic 2000 Create IPv4 ACL 2002 giving the ACL a name of flow Sysname system view S...

Page 2089: ...der ACLs 5000 to 5999 for user defined ACLs dest acl name Name for the new IPv4 ACL a case insensitive string of 1 to 32 characters It must start with an English letter and cannot be the English word...

Page 2090: ...ed ACL view Parameter text ACL description a case sensitive string of 1 to 127 characters Description Use the description command to create an IPv4 ACL description to describe the purpose of the ACL f...

Page 2091: ...range that 5000 to 5999 Description Use the display acl command to display information about the specified or all IPv4 ACLs This command displays ACL rules in the order in which the system compares a...

Page 2092: ...specified or all IPv4 ACLs except for user defined ACLs Example Clear statistics about IPv4 ACL 2001 Sysname reset acl counter 2001 Clear statistics about IPv4 ACL flow Sysname reset acl counter name...

Page 2093: ...ACL rule or modify the rule if it has existed Use the undo rule command to remove a basic IPv4 ACL rule or parameters from the rule With the undo rule command if no parameters are specified the entir...

Page 2094: ...addr sour wildcard argument specifies a source IP address in dotted decimal notation Setting the wildcard to a zero indicates a host address The any keyword indicates any source IP address destination...

Page 2095: ...DP or TCP packets are matched The operator argument can be lt lower than gt greater than eq equal to neq not equal to and range inclusive range port1 port2 TCP or UDP port number represented by a numb...

Page 2096: ...auto rather than config you cannot modify ACL rules Table 548 Parameters for advanced IPv4 ACL rules Parameter Function Description icmp type icmp type icmp code icmp message Specifies the ICMP messag...

Page 2097: ...st addr dest mask lsap lsap code lsap wildcard source mac sour addr source mask time range time name type type code type wildcard undo rule rule id View Ethernet frame header ACL view Parameter rule i...

Page 2098: ...ather than config you cannot modify ACL rules When defining ACL rules you need not assign them IDs The system can automatically assign rule IDs starting with 0 and increasing in certain rule numbering...

Page 2099: ...y a user defined ACL rule if its permit deny statement is exactly the same as another rule When defining user defined ACL rules you need not assign them IDs The system can automatically assign rule ID...

Page 2100: ...ame system view Sysname acl number 3000 Sysname acl adv 3000 rule 0 permit ip source 1 1 1 1 0 Sysname acl adv 3000 rule 0 comment This rule is used in eth 1 Create a rule in ACL 4000 and define the r...

Page 2101: ...five to two the rules are renumbered 0 2 4 6 and 8 Note that even if the current step is the default performing the undo step command can still result in rule renumbering Suppose that ACL 3001 adopts...

Page 2102: ...2102 CHAPTER 138 IPV4 ACL CONFIGURATION COMMANDS...

Page 2103: ...English letter and cannot be the English word of all to avoid confusion match order Sets the order in which ACL rules are matched auto Performs depth first match For how depth first match works refer...

Page 2104: ...an existing IPv6 ACL but only when it is empty Example Create IPv6 ACL 2000 Sysname system view Sysname acl ipv6 number 2000 Sysname acl6 basic 2000 Create IPv6 ACL 2002 giving the ACL a name of flow...

Page 2105: ...ish word of all to avoid confusion The system will automatically assign the new ACL a sequence number which is the smallest one among the available ones in the ACL range for the ACL type Description U...

Page 2106: ...purpose of the ACL for example Use the undo description command to remove the IPv6 ACL description By default an IPv6 ACL has no description configured Example Create a description for IPv6 ACL 2000 S...

Page 2107: ...t This rule is used in eth 1 reset acl ipv6 counter Syntax reset acl ipv6 counter acl6 number all name acl6 name View User view Parameter all All basic and advanced IPv6 ACLs acl6 number IPv6 ACL numb...

Page 2108: ...ed packets permit Defines a permit statement to allow matched packets to pass fragment Indicates that the rule applies only to non first fragments The rule applies to both fragments and non fragments...

Page 2109: ...ured in an ACL If the match order for this IPv6 ACL is auto rules are displayed in the depth first match order rather than by rule number Example Create rules in IPv6 ACL 2000 Sysname system view Sysn...

Page 2110: ...o 128 The any keyword indicates any IPv6 destination address dscp dscp Specifies a DSCP preference The dscp argument can be a number in the range 0 to 63 or in words af11 af12 af13 af21 af22 af23 af31...

Page 2111: ...k 517 telnet 23 time 37 uucp 540 whois 43 or www 80 UDP port number can be represented in words as follows biff 512 bootpc 68 bootps 67 discard 9 dns 53 dnsix 90 echo 7 mobilip ag 434 mobilip mn 435 n...

Page 2112: ...For detailed information about step refer to step for IPv4 on page 2100 and step for IPv6 on page 2116 You may use the display acl ipv6 command to verify rules configured in an IPv6 ACL If the match o...

Page 2113: ...64 bit destination address suffix 5 128 bit source address 6 128 bit destination address source source source prefix source source p refix any Specifies a source IPv6 address The source and source pre...

Page 2114: ...ollows biff 512 bootpc 68 bootps 67 discard 9 dns 53 dnsix 90 echo 7 mobilip ag 434 mobilip mn 435 nameserver 42 netbios dgm 138 netbios ns 137 netbios ssn 139 ntp 123 rip 520 snmp 161 snmptrap 162 su...

Page 2115: ...rule id comment View Basic IPv6 ACL view advanced IPv6 ACL view Parameter rule id IPv6 ACL rule number in the range 0 to 65534 text IPv6 ACL rule description a case sensitive string of 1 to 127 charac...

Page 2116: ...e default By default the rule numbering step is five When defining rules in an IPv6 ACL you do not necessarily assign them numbers The system can do this automatically in steps For example if the defa...

Page 2117: ...sname system view Sysname acl ipv6 number 2000 Sysname acl6 basic 2000 step 2 Set the rule numbering step to 2 for IPv6 ACL 3000 Sysname system view Sysname acl ipv6 number 3000 Sysname acl6 adv 3000...

Page 2118: ...2118 CHAPTER 139 IPV6 ACL CONFIGURATION COMMANDS...

Page 2119: ...command to restore the default By default MD5 is used Note that you need to use the transform command to specify the security protocol as AH or both AH and ESP before specifying the authentication alg...

Page 2120: ...led it takes over the responsibility of IPSec processing If the encryption switch fabric is disabled or has failed but the IPSec module backup function is enabled the IPSec module takes over the respo...

Page 2121: ...the command displays detailed information about the specified IPSec policy group Related command ipsec policy system view Example Display brief information about all IPSec policies Sysname display ip...

Page 2122: ...r 10 mode manual security data flow 100 tunnel local address 162 105 10 1 tunnel remote address 162 105 10 2 proposal name prop1 inbound AH setting AH spi 12345 0x3039 AH string key AH authentication...

Page 2123: ...e that If you do not specify any keywords or parameters the command displays detailed information about all IPSec policy templates If you specify the name policy name combination but leave the seq num...

Page 2124: ...hentication md5 hmac 96 encryption des display ipsec sa Syntax display ipsec sa brief duration policy policy name seq number remote ip address Table 562 Description on the fields of display ipsec poli...

Page 2125: ...rief information about all SAs Sysname display ipsec sa brief Src Address Dst Address SPI Protocol Algorithm 10 1 1 1 10 1 1 2 300 ESP E DES A HMAC MD5 96 10 1 1 2 10 1 1 1 400 ESP E DES A HMAC MD5 96...

Page 2126: ...or nat traversal N Table 565 Description on the fields of the display ipsec sa command Field Description Interface Interface referencing the IPSec policy path MTU Maximum IP packet length supported by...

Page 2127: ...on sec 36 300 session flow 8 times matched Sour Addr 15 15 15 1 Sour Port 0 Protocol 1 Dest Addr 15 15 15 2 Dest Port 0 Protocol 1 tunnel id 4 session idle time total duration sec 7 300 session flow 3...

Page 2128: ...rity packets 0 0 dropped security packet detail not enough memory 0 can t find SA 0 queue is full 0 authentication has failed 0 wrong length 0 Table 566 Description on the fields of the display ipsec...

Page 2129: ...IPSec protected packets input output security bytes Number of inbound IPSec protected bytes and number of outbound IPSec protected bytes input output dropped security packets Number of inbound IPSec p...

Page 2130: ...l prop2 to encapsulate IP packets in transport mode Sysname system view Sysname ipsec proposal prop2 Sysname ipsec proposal prop2 encapsulation mode transport encrypt card fast switch Syntax encrypt c...

Page 2131: ...r md5 Uses the MD5 algorithm which uses a 128 bit key sha1 Uses the SHA1 algorithm which uses a 160 bit key Description Use the esp authentication algorithm command to specify the authentication algor...

Page 2132: ...on algorithm command to configure ESP so that ESP does not encrypt packets By default the DES algorithm is used Note that 3DES is well suited for environments with high demand on confidentiality and s...

Page 2133: ...ameter policy name Name of the IPSec policy a case insensitive string of 1 to 15 characters Valid characters are English letters and numbers No minus sign can be included seq number Sequence number of...

Page 2134: ...there is no primary card an IPSec policy or policy group prefers the first encryption card bound to it Once an IPSec policy or policy group takes a second encryption card as the primary card the new...

Page 2135: ...an IPSec policy group Note that Only one IPSec policy group can be applied to an interface To apply another IPSec policy group to the interface you need to remove the original application and then app...

Page 2136: ...licy command to delete the specified IPSec policies By default no IPSec policy exists Note that When creating an IPSec policy the generation mode will be manual if you do not specify it You cannot cha...

Page 2137: ...tiation Use the undo ipsec policy command to delete an IPSec policy Note that Using the undo IPSec policy command without the seq number argument deletes an IPSec policy group In an IPSec policy an IP...

Page 2138: ...policy template Example Create an IPSec policy template with the name template1 and the sequence number 100 Sysname system view Sysname ipsec policy template template1 100 Sysname ipsec policy templa...

Page 2139: ...s and the traffic based global SA lifetime is 1 843 200 kilobytes Note that When negotiating to set up an SA IKE prefers the lifetime of the IPSec policy that it uses If the IPSec policy is not config...

Page 2140: ...llman group dh group2 Uses 1024 bit Diffie Hellman group dh group5 Uses 1536 bit Diffie Hellman group dh group14 Uses 2048 bit Diffie Hellman group Description Use the pfs command to enable and config...

Page 2141: ...escription Use the proposal command to specify the IPSec proposal s for the IPSec policy to reference Use the undo proposal command to remove an IPSec proposal reference by the IPSec policy By default...

Page 2142: ...can also clear encryption card fast switching entries such as disabling the encryption card resetting the encryption card hot plugging the encryption card unbinding a policy and clearing the SA Relat...

Page 2143: ...e an SA set up through IKE negotiation is cleared the system will set up a new one through negotiation when a packet triggers an IKE negotiation As SAs appear in pairs if you specify the parameters ke...

Page 2144: ...tistics Syntax reset ipsec statistics View User view Parameter None Description Use the reset ipsec statistics command to clear IPSec message statistics and set all the statistics to zero Related comm...

Page 2145: ...el must be configured with the same key in the same format Related command ipsec policy system view Example Configure the authentication keys of the inbound and outbound SAs using AH as 0x112233445566...

Page 2146: ...7 200 seconds Sysname system view Sysname ipsec policy policy1 100 isakmp Sysname ipsec policy isakmp policy1 100 sa duration time based 7200 Set the SA lifetime for the IPSec policy to 20 Mbytes that...

Page 2147: ...ew Sysname ipsec policy policy1 100 manual Sysname ipsec policy manual policy1 100 sa encryption hex inbound esp 1234567890abcdef Sysname ipsec policy manual policy1 100 sa encryption hex outbound esp...

Page 2148: ...al policy1 100 sa spi outbound ah 20000 sa string key Syntax sa string key inbound outbound ah esp string key undo sa string key inbound outbound ah esp View IPSec policy view Parameter inbound Specif...

Page 2149: ...inbound ah abcdef Sysname ipsec policy manual policy1 100 sa string key inbound ah efcdab security acl Syntax security acl acl number undo security acl View IPSec policy view IPSec policy template vie...

Page 2150: ...ithms are DES and MD5 respectively If AH is used the default authentication algorithm is MD5 If both AH and ESP are used AH takes the authentication algorithm of MD5 by default while ESP takes the enc...

Page 2151: ...k0 quit Sysname ipsec policy policy1 100 manual Sysname ipsec policy manual policy1 100 tunnel local 10 0 0 1 tunnel remote Syntax tunnel remote ip address undo tunnel remote ip address View IPSec pol...

Page 2152: ...R 140 IPSEC CONFIGURATION COMMANDS Example Set the remote address of the IPSec tunnel to 10 1 1 2 Sysname system view Sysname ipsec policy policy1 10 manual Sysname ipsec policy policy1 10 tunnel remo...

Page 2153: ...rithm command to restore the default By default an IKE proposal uses the SHA1 authentication algorithm Related command ike proposal display ike proposal Example Set MD5 as the authentication algorithm...

Page 2154: ...tificate domain View IKE Peer view Parameter domain name Name of the PKI domain a string of 1 to 15 characters Description Use the certificate domain command to configure the PKI domain of the certifi...

Page 2155: ...Sysname system view Sysname ike proposal 10 Sysname ike proposal 10 dh group1 display ike dpd Syntax display ike dpd dpd name View Any view Parameter dpd name DPD name a string of 1 to 15 characters...

Page 2156: ...shared key 123 peer id type ip peer ip address 44 44 44 55 local ip address peer name nat traversal disable dpd dpd1 display ike proposal Syntax display ike proposal View Any view Parameter None Tabl...

Page 2157: ...e address View Any view Parameter verbose Displays detailed information connection id Displays detailed information about IKE SAs by connection ID in the range 1 to 2000000000 remote address Displays...

Page 2158: ...MAIN Table 572 Description on the fields of the display ike sa command Field Description total phase 1 SAs Total number of SAs in phase 1 connection id Identifier of the IPSec tunnel peer Remote IP a...

Page 2159: ...e duration sec 86400 remaining key duration sec 82480 exchange mode MAIN diffie hellman group GROUP1 nat traversal NO Display detailed information about the IKE SA with the remote address of 4 4 4 5 S...

Page 2160: ...view Parameter 3des cbc Uses the 3DES algorithm in CBC mode as the encryption algorithm The 3DES algorithm uses 168 bit keys for encryption aes cbc Uses the AES algorithm in CBC mode as the encryption...

Page 2161: ...the undo exchange mode command to restore the default By default main mode is used Note that if the user at one end of an IPSec tunnel obtains IP address automatically for example a dial up user IKE n...

Page 2162: ...al name remote name remote address local address exchange mode Example Use the ID type of name in IKE negotiation Sysname system view Sysname ike peer peer1 Sysname ike peer peer1 id type name ike dpd...

Page 2163: ...r Therefore make sure the local gateway name for a device is identical to the remote gateway name configured on its peer Related command remote name id type name Example Configure the local gateway na...

Page 2164: ...l proposal number View System view Parameter proposal number IKE proposal number in the range 1 to 100 It also stands for the priority with a smaller value meaning a higher priority During an IKE nego...

Page 2165: ...live transmission function By default no keepalive packet is sent Note that the keepalive interval configured at the local end must be shorter than the keepalive timeout configured at the remote end R...

Page 2166: ...imer interval Syntax ike sa nat keepalive timer interval seconds undo ike sa nat keepalive timer interval View System view Parameter seconds NAT keepalive interval in seconds in the range 5 to 300 Des...

Page 2167: ...lti subnet Sets the subnet type to multiple single subnet Sets the subnet type to single Description Use the local command to set the subnet type of the local gateway for IKE negotiation Use the undo...

Page 2168: ...ame system view Sysname ike peer xhy Sysname ike peer xhy local address 1 1 1 1 nat traversal Syntax nat traversal undo nat traversal View IKE peer view Parameter None Description Use the nat traversa...

Page 2169: ...128 characters Description Use the pre shared key command to configure the pre shared key to be used in IKE negotiation Use the undo pre shared key command to remove the configuration Related command...

Page 2170: ...IKE negotiation a string of 1 to 32 characters Description Use the remote name command to configure the name of the remote gateway Use the undo remote name command to remove the configuration If the...

Page 2171: ...en you clear the SAs of phase 2 Related command display ike sa Example Clear the IPSec tunnel to 202 38 0 2 Sysname display ike sa conn id remote flag phase doi 1 202 38 0 2 RD ST 1 IPSEC 2 202 38 0 2...

Page 2172: ...w Sysname ike proposal 10 Sysname ike proposal 10 sa duration 600 time out Syntax time out time out undo time out View IKE DPD view Parameter time out DPD packet retransmission interval in seconds in...

Page 2173: ...ype RSA Encryption Key Key code 30819F300D06092A864886F70D010101050003818D0030818902818100BC4C392A97 734A633BA0F1DB01F84EB51228EC86ADE1DBA597E0D9066FDC4F04776CEA3610D257 8341F5D049143656F1287502C06D39...

Page 2174: ...A1B66E74E5D1E16693EB 374D677A7A6124EBABD59FE48796C56F3FF919F999AEB97D1F2B83D9B98AC09BC1F7 2E80DBE337CB29989A23378EB21C38EE083F11ED6DC8D4DBE001BA85450CEA071C2A 471C83761E4CF32C174B418612CDD597B441F0CAA...

Page 2175: ...client source Syntax display sftp client source View Any view Parameter None Description Use the display sftp client source command to display the source IP address or source interface currently set f...

Page 2176: ...e Display the source IP address of the SSH client Sysname display ssh client source The source IP address you specified is 192 168 0 1 display ssh server Syntax display ssh server status session View...

Page 2177: ...hentication timeout Authentication timeout period SSH server key generating interval SSH server key pair update interval SSH Authentication retries Maximum number of SSH authentication attempts SFTP S...

Page 2178: ...mation command to display information about a specified or all SSH users With the username argument not specified the command displays information about all SSH users Related command ssh user Example...

Page 2179: ...ta It must be a hexadecimal string that is generated randomly by the SSH supported client software and coded compliant to PKCS Related command public key peer public key code end Example Enter public...

Page 2180: ...30819F300D06092A864886F70D010101050003818D003 0818902818100C0EC8014F82515F6335A0A Sysname pkey key code EF8F999C01EC94E5760A079BD73E4F4D97F3500EDB308 C29481B77E719D1643135877E13B1C531B4 Sysname pkey...

Page 2181: ...take a few minutes Press CTRL C to abort Input the bits in the modulus default 1024 Generating keys Create local DSA key pair Sysname system view Sysname public key local create dsa The range of publi...

Page 2182: ...es the format of OpenSSH ssh1 Uses the format of SSH1 ssh2 Uses the format of SSH2 filename Name of the file for storing public key Description Use the public key local export rsa command to display t...

Page 2183: ...dsa openssh ssh2 filename View System view Parameter openssh Uses the format of OpenSSH ssh2 Uses the format of SSH2 filename Name of the file for storing public key The value range varies by devices...

Page 2184: ...KJPadu68HRKNl BnjXcitTQchQbzWCFLFqL6xLNolQOHgRx9ozAAAA FQDHcyGMc37I7pk7Ty3tMPSO2s6RXwAAAIEAgiaQCeFOxHS68pMuadOx8YUXrZWUGEzN OrpbsTV75MTPoS0cJPFKyDNNdAkkrOVnsZJliW8T6UILiLFs3ThbdABMs5xsCAhcJGs cXthI5HH...

Page 2185: ...om the peer through FTP TFTP Example Import a peer public key named key2 from public key file key pub Sysname system view Sysname public key peer key2 import sshkey key pub sftp Syntax sftp server por...

Page 2186: ...MAC algorithm from server to client defaulted to sha1 Description Use the sftp command to establish a connection to a remote IPv4 SFTP server and enter SFTP client view Note that when the client s aut...

Page 2187: ...ess interface interface type interface number Specifies a source interface by its type and number Description Use the sftp client source command to specify the source IPv4 address or interface of an S...

Page 2188: ...erred key exchange algorithm defaulted to dh group exchange dh group exchange Key exchange algorithm diffie hellman group exchange sha1 dh group1 Key exchange algorithm diffie hellman group1 sha1 dh g...

Page 2189: ...erver idle timeout Syntax sftp server idle timeout time out value undo sftp server idle timeout View System view Parameter time out value Timeout period in minutes It ranges from 1 to 35 791 Descripti...

Page 2190: ...y of the server is not configured and when logging into the server the client uses the IP address or host name used for login as the public key name Example Configure the public key of the server with...

Page 2191: ...rce View System view Parameter ipv6 ipv6 address Specifies a source IPv6 address interface interface type interface number Specifies a source interface by its type and number Description Use the ssh c...

Page 2192: ...sh server authentication retries times undo ssh server authentication retries View System view Parameter times Maximum number of authentication attempts in the range 1 to 5 Description Use the ssh ser...

Page 2193: ...command display ssh server Example Set the SSH user authentication timeout period to 10 seconds Sysname system view Sysname ssh server authentication timeout 10 ssh server compatible ssh1x enable Synt...

Page 2194: ...server rekey interval Syntax ssh server rekey interval hours undo ssh server rekey interval View System view Parameter hours Server key pair update interval in hours in the range 1 to 24 Description U...

Page 2195: ...ich can be one the following password Performs password authentication any Performs either password authentication or publickey authentication The client tries publickey authentication first password...

Page 2196: ...h user command Related command display ssh user information Example Create an SSH user named user1 and specify the service type as sftp the authentication method as publickey the work folder of the SF...

Page 2197: ...the client and the server Note that when the client s authentication method is publickey the client needs to get the local private key for validation As the publickey authentication includes RSA and D...

Page 2198: ...exchange sha1 dh roup1 Key exchange algorithm diffie hellman group1 sha1 dh roup14 Key exchange algorithm diffie hellman group14 sha1 prefer stoc cipher Preferred encryption algorithm from server to...

Page 2199: ...2199 Preferred HMAC algorithm from server to client SHA1 96 Sysname ssh2 ipv6 2000 1 prefer kex dh group 1 prefer stoc cipher aes128 prefer ctos hmac md5 prefer stoc hmac sha1 96...

Page 2200: ...2200 CHAPTER 142 SSH2 0 CONFIGURATION COMMANDS...

Page 2201: ...sftp client bye Bye Sysname cd Syntax cd remote path View SFTP client view Parameter remote path Name of a path on the server Description Use the cd command to change the working path on a remote SFT...

Page 2202: ...ame of a file on the server 1 10 means that you can provide up to 10 filenames which are separated by space Description Use the delete command to delete a specified file from a server This command fun...

Page 2203: ...m detailed file and folder information under the current working directory sftp client dir rwxrwxrwx 1 noone nogroup 1759 Aug 23 06 52 config cfg rwxrwxrwx 1 noone nogroup 225 Aug 24 08 01 pubkey2 rwx...

Page 2204: ...c Local file temp c Downloading file successfully ended help Syntax help all command name View SFTP client view Parameter all Displays a list of all commands command name Name of a command Description...

Page 2205: ...ormation under the current working directory sftp client ls rwxrwxrwx 1 noone nogroup 1759 Aug 23 06 52 config cfg rwxrwxrwx 1 noone nogroup 225 Aug 24 08 01 pubkey2 rwxrwxrwx 1 noone nogroup 283 Aug...

Page 2206: ...file temp c Remote file temp1 c Uploading file successfully ended pwd Syntax pwd View SFTP client view Parameter None Description Use the pwd command to display the current working directory of a remo...

Page 2207: ...he following files will be deleted temp c Are you sure to delete it Y N y This operation may take a long time Please wait File successfully Removed rename Syntax rename oldname newname View SFTP clien...

Page 2208: ...SFTP server 1 10 means that you can provide up to 10 filenames that are separated by space Description Use the rmdir command to delete a specified directory from an SFTP server Example On the SFTP se...

Page 2209: ...nge algorithm of RSA the data encryption algorithm of DES_CBC and the MAC algorithm of SHA rsa_rc4_128_md5 Specifies the key exchange algorithm of RSA the data encryption algorithm of 128 bit RC4 and...

Page 2210: ...server policy policy1 Sysname ssl server policy policy1 client verify enable close mode wait Syntax close mode wait undo close mode wait View SSL server policy view Parameter None Description Use the...

Page 2211: ...erver policy policy name all View Any view Parameter policy name SSL server policy name a string of 1 to 16 characters all Displays information about all SSL server policies Description Use the displa...

Page 2212: ...me is 3 600 seconds Example Set the handshake timeout time of SSL server policy policy1 to 3 000 seconds Sysname system view Sysname ssl server policy policy1 Sysname ssl server policy policy1 handsha...

Page 2213: ...ient domain prefer cipher Syntax prefer cipher rsa_3des_ede_cbc_sha rsa_aes_128_cbc_sha rsa_aes_256_cbc_sha rsa_des_cbc_sha rsa_rc4_128_md5 rsa_rc4_128_sha undo prefer cipher View SSL client policy vi...

Page 2214: ...ize timeout View SSL server policy view Parameter cachesize size Sets the maximum number of cached sessions in the range 100 to 1 000 timeout time Sets the caching timeout time in the range 1 800 to 7...

Page 2215: ...ame system view Sysname ssl client policy policy1 Sysname ssl client policy policy1 ssl server policy Syntax ssl server policy policy name undo ssl server policy policy name all View System view Param...

Page 2216: ...SL 3 0 tls1 0 Specifies TLS 1 0 Description Use the version command to specify the SSL protocol version for an SSL client policy Use the undo version command to restore the default By default the SSL...

Page 2217: ...s 9000 UsedBandWidth b s 8000 Table 582 Description on the fields of the display standby flow command Field Description Interfacename Name of the main interface Flow interval s Intervals for checking...

Page 2218: ...own Indicates that the physical link is not available for data transmission for example because no cable connection is present Standby The state of the backup interface when the main interface is func...

Page 2219: ...t the interface or the main interface of the interface or all backup interfaces of the interface are all removed U USED Indicates that the interface is being used as a main interface or backup interfa...

Page 2220: ...d command standby interface Example Configure the available bandwidth used for setting the thresholds on the main interface Serial 2 0 for load sharing to 10000 kbps Sysname system view Sysname interf...

Page 2221: ...1 to 99 disable threshold Specifies lower value of the load sharing threshold It indicates the percentage of the available main interface bandwidth that the traffic load must be less than for the bac...

Page 2222: ...delay Specifies failover delay or the delay for the interface to switch its state from main to standby It ranges from 0 to 65535 seconds disable delay Fallback delay or the delay for the interface to...

Page 2223: ...ted after backup interfaces are specified Related command standby interface Example Configure load sharing backup bandwidth and flow check interval on interface Serial 2 0 to 60 seconds Sysname system...

Page 2224: ...main interface or a backup interface One interface can be associated with one Track object If you execute this command repeatedly on one interface the new configuration will overwrite the original on...

Page 2225: ...Use the display vrrp command to display the state information of VRRP If you do not specify verbose only the brief state information of VRRP is displayed If you specify both interface and standby gro...

Page 2226: ...belongs VRID Number of the standby group Adver Timer VRRP advertisement interval Admin Status Administrative state UP or DOWN State Status of the router in the standby group master backup or initiali...

Page 2227: ...ismatch 0 Packet Length Errors 0 Address List Errors 0 Become Master 1 Priority Zero Pkts Rcvd 0 Advertise Rcvd 16 Priority Zero Pkts Sent 0 Advertise Sent 40 Interface Ethernet1 1 VRID 105 CheckSum E...

Page 2228: ...ndby groups on the device are cleared Example Clear the statistics about all the standby groups on the device Sysname reset vrrp statistics vrrp vrid authentication mode Syntax vrrp vrid virtual route...

Page 2229: ...de command to configure authentication mode and authentication key for the VRRP standby groups to send and receive VRRP packets Use the undo vrrp vrid authentication mode command to restore the defaul...

Page 2230: ...IP address and the MAC address before configuring a standby group Otherwise your configuration will fail Example Associate the virtual IP address of the standby group with the real MAC address of the...

Page 2231: ...view Parameter virtual router id Virtual router ID or VRRP standby group number in the range 1 to 255 timer delay delay value Sets preemption delay The delay value argument ranges from 0 to 255 and de...

Page 2232: ...d priority View Interface view Parameter virtual router id VRRP standby group number in the range 1 to 255 priority value Priority value of the router in the specified standby group in the range 1 to...

Page 2233: ...VRRP advertisements is 1 second Note that Before executing the command create a standby group on an interface and configure the virtual IP address of the standby group Routers in the same VRRP standby...

Page 2234: ...s command can be nonexistent You can use the vrrp vrid track command to specify a Track object and then create the Track object using the track command n For details of the Track object refer to Track...

Page 2235: ...aces should only be PPP protocol the dialer interface should function as the PPPoE client and operate in the permanent online mode and the BRI interface should work in the dedicated line mode Example...

Page 2236: ...egment and are legal host addresses can the standby group operate normally If the configured virtual IP address and the interface IP address do not belong to the same network segment or the configured...

Page 2237: ...e state information of VRRP for IPv6 If you do not specify verbose only the brief state information of VRRP is displayed If you specify both interface and standby group only the state information of t...

Page 2238: ...terface to which the standby group belongs VRID Number of the standby group Adver Timer VRRP advertisement interval in centiseconds Admin Status Administrative state UP or DOWN State Status of the rou...

Page 2239: ...rrors 0 Hop Limit Errors 0 Auth Failures 0 Invalid Auth Type 0 Auth Type Mismatch 0 Packet Length Errors 0 Address List Errors 0 Become Master 1 Priority Zero Pkts Rcvd 0 Advertise Rcvd 0 Priority Zer...

Page 2240: ...groups on the device are cleared Example Clear the statistics about all the standby groups on the device Sysname reset vrrp ipv6 statistics vrrp ipv6 method Syntax vrrp ipv6 method real mac virtual ma...

Page 2241: ...guring a standby group Otherwise your configuration will fail Example Associate the virtual IP address of the standby group with the real MAC address of the routing interface Sysname system view Sysna...

Page 2242: ...s disabled Note that Before executing the command create a standby group on an interface and configure the virtual IP address of the standby group You may configure different authentication types and...

Page 2243: ...n delay set if the backup member does not receive the packet from the master member duly it waits for a period to see whether it can receive any packet from the master If the specified period elapses...

Page 2244: ...pv6 vrid 1 priority 150 vrrp ipv6 vrid timer advertise Syntax vrrp ipv6 vrid virtual router id timer advertise adver interval undo vrrp ipv6 vrid virtual router id timer advertise View Interface view...

Page 2245: ...interface By default no interface is being tracked Note that Before executing the command create a standby group on an interface and configure the virtual IPv6 address of the standby group When the r...

Page 2246: ...e a link local address and only one such address is allowed in a standby group Use the vrrp ipv6 vrid virtual ip command to add a virtual IPv6 address to a standby group Use the undo vrrp ipv6 vrid co...

Page 2247: ...User view Parameter file file url Specifies a file name a string of 1 to 64 characters slot slot number Specifies the slot number of a card The value range varies with devices main Specifies a file a...

Page 2248: ...OM part Operates only the extension part of Boot ROM Boot ROM includes the basic part and the extension part Description Use the bootrom command to read restore back up or upgrade the Boot ROM program...

Page 2249: ...nd primary secondary attribute of a BootROM file on a card or a device Related command boot loader Example Display the file adopted for the current and next boot of a device The prompt information of...

Page 2250: ...ption Use the display cpu usage command to display the CPU usage statistics The system takes statistics of CPU usage at intervals usually every 60 seconds and saves the statistical results in the hist...

Page 2251: ...tion on fields of the display boot loader command Field Description CPU usage info no idx Information of CPU usage records no The no 1 th record is currently displayed no numbers from 0 a smaller numb...

Page 2252: ...e Slot No Board Type Status Max Ports 0 AR49 45 RPU Board Normal 4 6 DFIC 24FSW Normal 26 11 FIX SNDE Normal 1 Display detailed information of cards on a device The displayed information varies with d...

Page 2253: ...2 0 CPLD VER 2 0 DSP VER 2 0 DSP 0 Normal DSP 1 Normal DSP 2 Normal DSP 3 Normal Slot 6 Status Normal Type DFIC 24FSW Hardware 2 0 Driver 1 0 CPLD 1 0 Slot 11 Status Normal Type FIX SNDE Hardware 3 0...

Page 2254: ...f the current card VCPM VCPM status PCB CPLD FPGA version of VCPM of the current main board VCPMA VCPM status PCB CPLD FPGA version of VCPM of the current interface card VPMx VPM status PCB CPLD DSP v...

Page 2255: ...erature information of all cards or subcards The displayed information depends on the device model Example Display the temperature information of cards Sysname display environment System Temperature i...

Page 2256: ...iew Parameter None Description Use the display license command to display the software registration information of a device n Only users at monitor level or a higher level can execute this command Exa...

Page 2257: ...to display the status of the power supply of a device Example Display the status of the power supply of a device The displayed information varies with devices Table 598 Descriptions on the fields of...

Page 2258: ...ay the reboot type of the card in slot 2 of the device Sysname display reboot type slot 2 The rebooting type this time is Cold The above information indicates that the last reboot type of the device i...

Page 2259: ...erial number of a device Sysname system view Sysname license register VZa47 6AbBh gtO9c K47A0 F79D8 dE84O tg2j0 Register successfully reboot Syntax reboot slot slot number View User view Parameter slo...

Page 2260: ...slot slot number Specifies the slot number of a card The value range varies with devices Description Use the remove command to remove a card n This command is supported only on MSR 50 series routers c...

Page 2261: ...the dd value depends on a specific month Description Use the schedule reboot at command to enable the scheduled reboot function and specify a specific reboot time and date Use the undo schedule reboo...

Page 2262: ...006 06 06 in 0 hour s and 16 minute s confirm Y N If you have used the terminal logging command to enable the log display function on the terminal before setting a reboot time the system will automati...

Page 2263: ...le operations when the device is to be rebooted the system does not execute the command for the sake of security c CAUTION This command reboots the device after the specified delay time thus resulting...

Page 2264: ...number Slot number The value range varies with devices lower value Lower temperature limit in Celsius degrees in the range 0 to 30 upper value Upper temperature limit in Celsius degrees in the range...

Page 2265: ...arger than the fill data the system fills the character string cyclically to encapsulate the packet until it is full For example when the fill data is abcd and the size of a probe packet is 3 byte abc...

Page 2266: ...Sysname system view Sysname nqa entry admin test Sysname nqa admin test type icmp echo Sysname nqa admin test icmp echo data size 80 description any NQA test type view Syntax description text undo de...

Page 2267: ...ype icmp echo Sysname nqa admin test icmp echo destination ip 10 1 1 1 destination port Syntax destination port port number undo destination port View TCP UDP echo UDP jitter test type view Parameter...

Page 2268: ...ed Example Display the results of the last test Sysname display nqa result administrator jitter NQA entry admin administrator tag jitter test results Destination IP address 192 168 0 81 Send operation...

Page 2269: ...due to other errors Failures due to other errors UDP jitter results UDP jitter test results available only in UDP jitter tests RTT number Number of response packets received SD max delay Maximum dela...

Page 2270: ...egative jitter delays from the destination to the source Negative SD number Number of negative jitter delays from the source to the destination Negative DS number Number of negative jitter delays from...

Page 2271: ...ansferred between the FTP server and the FTP client as config txt Sysname system view Sysname nqa entry admin test Sysname nqa admin test type ftp Sysname nqa admin test ftp filename config txt freque...

Page 2272: ...igure the interval between two consecutive tests as 1000 milliseconds Sysname system view Sysname nqa entry admin test Sysname nqa admin test type icmp echo Sysname nqa admin test icmp echo frequency...

Page 2273: ...HTTP test Sysname system view Sysname nqa entry admin test Sysname nqa admin test type http Sysname nqa admin test http http version v1 0 next hop Syntax next hop ip address undo next hop View ICMP ec...

Page 2274: ...group view Use the undo nqa command to remove the test group Note that if the test type has been configured for the test group you will directly enter NQA test type view when you execute the nqa comm...

Page 2275: ...s from the end of a test to the beginning of the next test the NQA test is in the waiting status Example Configure the maximum number of the tests that the NQA client can simultaneously perform as 50...

Page 2276: ...ever operation FTP test type view Syntax operation get put undo operation View FTP test type view Parameter get Obtains a file from the FTP server put Transfers a file to the FTP server Description Us...

Page 2277: ...face number Type and number of the interface that is performing a DHCP test Description Use the operation interface command to specify the interface to perform a DHCP test Use the undo operation inter...

Page 2278: ...test type view Parameter times Number of probes in a test in the range 1 to 15 Description Use the probe count command to configure the number of probes in a test Use the undo probe count command to r...

Page 2279: ...e the default By default the interval for sending consecutive packets is 20 milliseconds Example Configure the interval for sending consecutive packets as 100 milliseconds Sysname system view Sysname...

Page 2280: ...d to restore the default By default the timeout time in a UDP jitter test is 3000 milliseconds Example Configure the timeout time for waiting for responses in a UDP jitter test as 100 milliseconds Sys...

Page 2281: ...obe failures occurrences Number of consecutive probe failures in the range 1 to 16 action type Triggered action type defaulting to none none No actions trigger only Triggers collaboration between othe...

Page 2282: ...the network management server if the total number of probe failures in an NQA test is larger than or equal to cumulate probe failures For one test the trap is sent only when the test is completed cumu...

Page 2283: ...iew Parameter interface type interface number Interface type and the interface number of the source interface of a probe packet Description Use the source interface command to specify the IP address o...

Page 2284: ...robe request By default no source IP address is specified For an ICMP echo test if no source IP address is specified but the source interface is specified the IP address of the source interface is tak...

Page 2285: ...in the IP header in an NQA probe packet Use the undo tos command to restore the default By default the ToS field in the IP header of an NQA probe packet is 0 Example Configure the ToS field in a IP pa...

Page 2286: ...test type icmp echo Sysname nqa admin test icmp echo ttl 16 type Syntax type dhcp dlsw ftp http icmp echo snmp tcp udp echo udp jitter View NQA test group view Parameter dhcp DHCP test dlsw DLSw test...

Page 2287: ...admin test http url index htm username FTP test type view Syntax username username undo username View FTP test type view Parameter username Username used to log onto the FTP server a string of 1 to 3...

Page 2288: ...string of 1 to 31 characters It is case sensitive Description Use the vpn instance command to specify a VPN instance Use the undo vpn instance command to remove the specified VPN instance By default...

Page 2289: ...status Sysname display nqa server status nqa server is enabled tcp connect IP Address Port Status 2 2 2 2 2000 active udp echo IP Address Port Status 3 3 3 3 3000 inactive Table 602 Description on th...

Page 2290: ...ver tcp connect ip address port number undo nqa server tcp connect ip address port number View System view Parameter ip address IP address specified for the TCP listening service on the NQA server por...

Page 2291: ...Parameter ip address IP address specified for the UDP listening service on the NQA server port number Port number specified for the UDP listening service on the NQA server in the range 1 to 50000 Desc...

Page 2292: ...2292 CHAPTER 150 NQA SERVER CONFIGURATION COMMANDS Sysname system view Sysname nqa server udp echo 169 254 10 2 9000...

Page 2293: ...0 1481 1500 1501 0 0 0 0 0 0 0 Protocol Total Packets Stream Packets Active sec Idle sec Streams Sec Sec stream stream stream Total 0 0 0 0 0 0 DstIP DstP SrcIP SrcP Pro Tos Interface Pkts 3 3 3 2 0 1...

Page 2294: ...when the reset ip netstream statistics command otherwise the Last statistics reset time never field is displayed Last statistics reset time never Statistics have never been cleared IP packet number o...

Page 2295: ...ption on the fields of the display ip netstream export command Field Description Version 5 export information Statistics for exported version 5 statistics packets Stream source interface Source interf...

Page 2296: ...rce AS number destination AS number inbound interface index and outbound interface index destination prefix Destination prefix aggregation by destination AS number destination address mask length dest...

Page 2297: ...m view and the IP address and port number in aggregation view are those configured by users in system view Note that Different destination hosts can be configured in different aggregation views You ca...

Page 2298: ...0 ip netstream export version Syntax ip netstream export version version number origin as peer as undo ip netstream export version View System view Parameter version number Version number for NetStre...

Page 2299: ...the default Example Set the NetStream cache size to 5000 Sysname system view Sysname ip netstream max entry 5000 ip netstream timeout active Syntax ip netstream timeout active minutes undo ip netstrea...

Page 2300: ...ream timeout inactive command to restore the default Related command ip netstream timeout active c CAUTION You can configure the active aging timer and inactive aging timer at the same time When eithe...

Page 2301: ...cted 4 candidate 5 configured Total associations 1 Table 605 Description on the fields of the display ntp service sessions command Field Description source IP address of the clock source reference Ref...

Page 2302: ...000 UTC Jan 1 1900 00000000 00000000 now The length of time in minutes from when the last NTP message was received or when the local clock was last updated to the current time The time is in second by...

Page 2303: ...the local clock source Table 606 Description on the fields of the display ntp service status command Field Description Clock status Status of the system clock Clock stratum Stratum level of the local...

Page 2304: ...query When a device receives an NTP request it will perform an access control right match and will use the first matched right n The ntp service access command provides only a minimum degree of securi...

Page 2305: ...uthentication Sysname system view Sysname ntp service authentication enable ntp service authentication keyid Syntax ntp service authentication keyid keyid authentication mode md5 value undo ntp servic...

Page 2306: ...adcast client View Interface view Parameter None Description Use the ntp service broadcast client command to configure the device to work in the NTP broadcast client mode Use the undo ntp service broa...

Page 2307: ...ication ke yid 4 version 3 ntp service in interface disable Syntax ntp service in interface disable undo ntp service in interface disable View Interface view Parameters None Description Use the ntp se...

Page 2308: ...ic NTP sessions to 50 Sysname system view Sysname ntp service max dynamic sessions 50 ntp service multicast client Syntax ntp service multicast client ip address undo ntp service multicast client ip a...

Page 2309: ...ulticast server command to configure the device to work in the NTP multicast server mode Use the undo ntp service multicast server command to remove the device as an NTP multicast server Example Confi...

Page 2310: ...eyid keyid View System view Parameter keyid Authentication key number in the range of 1 to 4294967295 Description Use the ntp service reliable authentication keyid command to specify that the created...

Page 2311: ...ication keyid keyid priority source interface interface type interface number version number undo ntp service unicast peer vpn instance vpn instance name ip address peer name View System view Paramete...

Page 2312: ...ot include vpn instance vpn instance name in this command the command will remove the symmetric passive peer with the IP address of ip address in the public network Example Designate the device with t...

Page 2313: ...nicast server command to remove an NTP server designated for the device No NTP server is designated for the device by default n If you specify a VPN instance name this VPN must exist and at least one...

Page 2314: ...2314 CHAPTER 152 NTP CONFIGURATION COMMANDS...

Page 2315: ...enables risingOrFallingAlarm Latest value 0 Table 608 Description on the fields of the display rmon alarm command Field Description Alarm table Alarm entry index 1 in this example owned by Owner of th...

Page 2316: ...ation information displayed by the display current configuration command Related command rmon event Example Display the configuration of RMON event table Sysname display rmon event Event table 1 owned...

Page 2317: ...owned by user1 is VALID Generates eventLog 1 1 at 0days 00h 01m 39s Description The 1 3 6 1 2 1 16 1 1 1 4 1 defined in alarm table 1 less than or 100 with alarm value 0 Alarm sample type is absolute...

Page 2318: ...e invalid entry and with the display current configuration and display this commands you cannot view the corresponding rmon commands Samples Interface The sampled interface Sampling interval Sampling...

Page 2319: ...l exist forever Latest value 0 utilization Bandwidth utilization during the sampling period Table 611 Description on the fields of the display rmon history command Field Description Table 612 Descript...

Page 2320: ...023 0 1024 1518 0 When startup enables How can an alarm be triggered This entry will exist The lifetime of the entry which can be forever or span the specified period Latest value The last sampled val...

Page 2321: ...ranges from 0 to 65535 with 0 meaning no corresponding event is triggered and no event action is taken when an alarm is triggered etherStatsMulticastPkts The number of multicast packets received by th...

Page 2322: ...vent entry1 argument If the falling threshold is reached triggers the event specified by the event entry2 argument n Before creating an alarm entry define the events to be referenced in the event tabl...

Page 2323: ...munity name being trap community when the event occurs trap community represents the community name of the network management station that receives trap message a string of 1 to 127 characters owner t...

Page 2324: ...d entry from the RMON history control table This command enables RMON to periodically sample and save for an interface data such as bandwidth utilization errors and total number of packets for later r...

Page 2325: ...ng interval Sampling interval in the range 10 to 65 535 seconds absolute changeratio delta Sets the sampling type to absolute delta or change ratio rising threshold threshold value1 event entry1 Sets...

Page 2326: ...old value1 and falling threshold threshold value2 are identical to those of the existing alarm entry the system considers their configurations the same and the creation fails You can create up to 50 p...

Page 2327: ...RMON statistics group collects information on how a monitored port is being used and records errors Statistics include number of collisions CRC alignment errors number of undersize or oversize packets...

Page 2328: ...2328 CHAPTER 153 RMON CONFIGURATION COMMANDS...

Page 2329: ...cess control Example Display the local SNMP agent switch fabric ID Sysname display snmp agent local switch fabricid SNMP local EngineID 800007DB7F0000013859 display snmp agent community Syntax display...

Page 2330: ...fied Storage type nonVolatile Table 614 Descriptions on the fields of display snmp agent community Field Description Community name Community name Group name SNMP group name Acl The number of the ACL...

Page 2331: ...ay snmp agent mib view View name ViewDefault MIB Subtree iso Subtree mask Storage type nonVolatile View Type included View status active View name ViewDefault MIB Subtree snmpUsmMIB Subtree mask Stora...

Page 2332: ...cts retrieved successfully 0 MIB objects altered successfully 0 GetRequest PDU accepted and processed 0 GetNextRequest PDU accepted and processed 0 GetBulkRequest PDU accepted and processed 0 GetRespo...

Page 2333: ...which had noSuchName error status Number of PDUs with a noSuchName error SNMP PDUs which had tooBig error status Maximum packet size 1500 Number of PDUs with a tooBig error the maximum packet size is...

Page 2334: ...one Description Use the display snmp agent trap list command to display the modules that can send the Trap messages and whether their Trap sending is enabled or not If a module comprises of multiple s...

Page 2335: ...r name Displays SNMPv3 user information for a specified user name It is case sensitive group group name Displays SNMPv3 user information for a specified SNMP group name It is case sensitive Descriptio...

Page 2336: ...function on an interface and use the snmp agent trap enable standard linkdown linkup command to enable this function globally Related command snmp agent target host snmp agent trap enable Example Enab...

Page 2337: ...with acl number indicating the ACL number in the range 2 000 to 2 999 mib view view name Specifies the MIB view name associated with community name where view name represents the MIB view name a strin...

Page 2338: ...ntication Specifies the security model of the SNMP group to be authentication only without privacy privacy Specifies the security model of the SNMP group to be authentication and privacy read view rea...

Page 2339: ...gent local switch fabricid command to restore the default By default the switch fabric ID of a device is the combination of company ID and device ID Device ID varies by product it could be an IP addre...

Page 2340: ...uded view name oid tree mask mask value undo snmp agent mib view view name View System view Parameter excluded Indicates that not all nodes of the MIB tree are included in current view included Indica...

Page 2341: ...in the range 484 to 17 940 The default value is 1 500 bytes Description Use the snmp agent packet max size command to configure the maximum number of bytes in an SNMP packet that can be received or s...

Page 2342: ...touch with the manufacturer in case of network failures The system location information is a management variable under the system branch as defined in RFC1213 MIB it identifies the location of the ma...

Page 2343: ...Use the snmp agent target host command to configure the related settings for a Trap target host Use the undo snmp agent target host command to remove the current settings To enable the device to send...

Page 2344: ...ing of LSP Trap packets ospf process id ospf trap list Enables the sending of OSPF Trap packets The parameter process id is the process ID and spf trap list is the Trap packet list standard Enables th...

Page 2345: ...em view Sysname snmp agent target host trap address udp domain 10 1 1 1 pa rams securityname public Sysname snmp agent trap enable standard authentication snmp agent trap if mib link extended Syntax s...

Page 2346: ...time for SNMP Traps is 120 seconds Related command snmp agent trap enable snmp agent target host Example Configure the life time for Trap packets as 60 seconds Sysname system view Sysname snmp agent t...

Page 2347: ...d to restore the default By default SNMP chooses the IP address of an interface to be the source IP address of the Trap message Use this command to trace a specific event by the source IP address of a...

Page 2348: ...SHA 96 auth password Authentication password a string of 1 to 64 characters privacy Specifies that the security mode is privacy aes128 Specifies the privacy protocol to be advanced encryption standard...

Page 2349: ...nt community snmp agent local switch fabricid Example Add a user John to the SNMP group Johngroup Configure the security model to be authentication the authentication protocol to be HMAC MD5 96 and th...

Page 2350: ...2350 CHAPTER 154 SNMP CONFIGURATION COMMANDS...

Page 2351: ...ASCII 128 or invisible characters ASCII 33 A filename cannot contain characters such as Space or can be included in a filename but it cannot be the first or the last character of the filename and ther...

Page 2352: ...as wildcards For example to remove files with the expansion of txt you may use the delete txt command Description Use the delete command to remove a specified file from the storage device to the recyc...

Page 2353: ...file 1 rw 16044820 Oct 30 2006 15 46 58 main bin 2 rwh 4 Oct 31 2006 14 08 16 snmpboots 3 rw 2012 Oct 30 2006 16 17 28 config cfg 4 rwh 828 Oct 30 2006 16 17 26 private data txt 5 drw Oct 31 2006 14 2...

Page 2354: ...ut operations that may bring undesirable results such as file corruption or data loss quiet Disables the system to warn you about any operation Description Use the file prompt command to set a prompt...

Page 2355: ...format cf All data on cf will be lost proceed with format Y N y Format cf completed mkdir Syntax mkdir directory View User view Parameter directory Name of a directory Description Use the mkdir comma...

Page 2356: ...test application for you This file contains a summary of what you will find in each of the fi les that make up your test application Test dsp This file the project file contains information at the pro...

Page 2357: ...evice to function normally Before removing a mounted storage device from the system you should first unmount it to avoid damaging the device Related command umount n The support of this command varies...

Page 2358: ...n will fail Example Display the current path Sysname pwd cf rename Syntax rename fileurl source fileurl dest View User view Parameter fileurl source Name of the source file or directory fileurl dest N...

Page 2359: ...r command to remove a directory The directory must be an empty one If it is not first delete all files and subdirectory under it with the delete command Example Remove directory mydir Sysname rmdir my...

Page 2360: ...system you should first unmount it to avoid damaging the device By default a storage device is in the mounted state You can use it without mounting it Related command mount Example Unmount a CF card o...

Page 2361: ...fy this filename the original filename will be used With a device that supports main backup function this command only backups the main configuration file for next startup With a device that does not...

Page 2362: ...the display saved configuration command if you have saved the configuration file after the device starts up the information last saved in the configuration file is displayed Related command save reset...

Page 2363: ...startup Current startup saved configuration file cf config cfg Next main startup saved configuration file cf config cfg Next backup startup saved configuration file NULL reset saved configuration Synt...

Page 2364: ...evice is being cleared Please wait Configuration in the device is cleared restore startup configuration Syntax restore startup configuration from src addr src filename View User view Parameter src add...

Page 2365: ...file Description Use the save command to save the current configuration to the specified configuration file If no filename is specified the system saves the configuration file in an interactive way In...

Page 2366: ...alidating file Please wait Now saving current configuration to the device Saving configuration cf testcfg cfg Please wait Configuration is saved to cf successfully Sysname Save the current configurati...

Page 2367: ...ain configuration file after the execution of the startup saved configuration cfgfile backup command the configuration file has both main and backup attributes For a backup configuration file after th...

Page 2368: ...2368 CHAPTER 156 CONFIGURATION FILE MANAGEMENT COMMANDS...

Page 2369: ...ommand Related command ftp timeout and ftp update Example Display the FTP server configuration Sysname display ftp server FTP server is running Max user number 1 User count 1 Timeout value in minute 3...

Page 2370: ...released is transmitting a file the connection between the user and the FTP server is terminated after the file transmission Example Manually release the FTP connection established with username of f...

Page 2371: ...the default After you log onto the FTP server you set up an FTP connection When the connection is disrupted the FTP server if not notified cannot realize that and maintains the connection all the same...

Page 2372: ...PTER 157 FTP SERVER CONFIGURATION COMMANDS Use the undo ftp update command to restore the default namely the normal mode Example Set the FTP update mode to normal Sysname system view Sysname ftp updat...

Page 2373: ...scription Use the ascii command to set the file transfer mode to ASCII for the FTP connection FTP provides two file transfer modes ASCII and binary To transfer text files use the ASCII mode to transfe...

Page 2374: ...ption Use the bye command to disconnect from the remote FTP server and exit to user view Example Terminate the connection with the remote FTP server and exit to user view ftp bye 221 Server closing cd...

Page 2375: ...iption Use the close command to terminate the connection to the FTP server but remain in FTP client view This command is equal to the disconnect command Example Terminate the connection to the FTP ser...

Page 2376: ...ASCII mode data connection for sample file The parsed reply is 150 FTPC File transfer started with the signal light turned on FTPC File transfer completed with the signal light turned off 226 Transfer...

Page 2377: ...TP server Use the dir remotefile localfile command to display the detailed information of the specified file or directory on the remote FTP server and save the displayed information into a local file...

Page 2378: ...Currently this command displays the configuration information of the source address If the currently valid source address is the source IP address this command displays the configured source IP addre...

Page 2379: ...mand is higher than that with the ftp client source command If you specify the source address with the ftp client source command first and then with the ftp command the source address specified with t...

Page 2380: ...es the original one and vice versa If the source address is specified with the ftp client source command and then with the ftp command the source address specified with the latter one is used to commu...

Page 2381: ...hout specifying any parameters you will simply enter the FTP client view without logging onto the FTP server If you specify the parameter you will be asked to enter the username and password for acces...

Page 2382: ...ls command to view the information of all the files and subdirectories under the current directory of the remote FTP server The file names and subdirectory names are displayed Use the ls remotefile c...

Page 2383: ...p quit Sysname more aa txt logfile mkdir Syntax mkdir directory View FTP client view Parameter directory Directory name Description Use the mkdir command to create a subdirectory under the specified d...

Page 2384: ...rameter server address IP address or host name of the remote FTP server service port Port number of the remote FTP server in the range 0 to 65535 The default value is 21 i interface type interface num...

Page 2385: ...FTP passive is on put Syntax put localfile remotefile View FTP client view Parameter localfile Local file name remotefile Name of the file to be saved on the remote FTP server Description Use the put...

Page 2386: ...command to disconnect from the remote FTP server and exit to user view Example Disconnect from the remote FTP server and exit to user view ftp quit 221 Server closing Sysname remotehelp Syntax remoteh...

Page 2387: ...s a list of available ftp commands The following is an available FTP command list Those with are not yet implemented Those commands with are not yet implemented USER Username PASS Password CWD Change...

Page 2388: ...the files in the remote recycle bin under the directory will be automatically deleted Example Delete the cf temp1 directory from the FTP server ftp rmdir cf temp1 200 RMD command successful user Synta...

Page 2389: ...ged onto the FTP server and relogs onto the current FTP server with the username of ftp2 Suppose username ftp2 and password 123123123123 have been configured on the FTP server ftp user ftp2 331 Passwo...

Page 2390: ...2390 CHAPTER 158 FTP CLIENT CONFIGURATION COMMANDS...

Page 2391: ...tftp client configuration The source IP address is 192 168 0 123 n Currently this command displays the source address configuration information If the currently valid source address is the source IP a...

Page 2392: ...001 rule permit source 2030 5060 9050 64 Sysname acl6 basic 2001 quit Sysname tftp server ipv6 acl 2001 tftp Syntax tftp server address get put sget source filename destination filename source interfa...

Page 2393: ...wnloaded successfully Upload the config cfg file from the storage device to the default path of the TFTP server with the IP address of 192 168 0 98 and save it as config bak Specify the source IP inte...

Page 2394: ...lid for the current tftp command Related command display tftp client configuration Example Specify the source IP address of the TFTP client to 2 2 2 2 Sysname system view Sysname tftp client source ip...

Page 2395: ...a TFTP server or upload a specified local file to a TFTP server This command applies to IPv6 network Example Download filetoget txt from TFTP server Sysname tftp ipv6 fe80 250 daff fe91 e058 i ethern...

Page 2396: ...2396 CHAPTER 159 TFTP CLIENT CONFIGURATION COMMANDS...

Page 2397: ...nterface number Specifies the ICMP echo request sending interface by its type and number m interval Specifies the interval in milliseconds to send an ICMP echo response in the range 1 to 65535 The def...

Page 2398: ...ice Description Use the ping command to verify whether the destination device in an IP network is reachable and to display the related statistics Note that You must use the command in the form of ping...

Page 2399: ...or host name a string of 1 to 46 characters of the destination device i interface type interface number Specifies an outgoing interface by its type and number This parameter can be used only in case...

Page 2400: ...ault value is 33434 You do not need to modify this parameter q packet number Specifies the number of probe packets sent each time in the range 1 to 65535 The default value is 3 vpn instance vpn instan...

Page 2401: ...o 1 and must be less than the maximum TTL m max ttl Specifies the maximum TTL that is the maximum allowed number of hops for a packet in the range 1 to 255 It defaults to 30 and must be greater than t...

Page 2402: ...2402 CHAPTER 160 SYSTEM MAINTAINING COMMANDS Sysname tracert ipv6 3002 1 traceroute to 3002 1 30 hops max 60 bytes packet 1 3003 1 30 ms 10 ms 10 ms 2 3002 1 10 ms 11 ms 9 ms...

Page 2403: ...f their number and content You can use the debugging module name command to display the currently supported options Description Use the debugging command to enable the debugging of a specific module U...

Page 2404: ...ging Syntax display debugging interface interface type interface number module name View Any view Parameter interface interface type interface number Displays the debugging settings of the specified i...

Page 2405: ...clock datetime command to set the current time and date The current time and date of the device must be set in an environment that requires the acquisition of absolute time You may choose not to provi...

Page 2406: ...f the start date to the end time of the end date Summer time adds the add time to the current time of the device Use the undo clock summer time command to cancel the configuration of the summer time A...

Page 2407: ...the format of HH MM SS hours minutes seconds The zeros in the argument can be omitted except for indicating 0 hours end date End date which can be set in two ways Enter the year month and date at one...

Page 2408: ...off clock timezone display clock Example For the summer time in abc2 between 06 00 00 on 08 01 2007 and 06 00 00 on 09 01 2007 and from 06 00 00 08 01 to 06 00 00 on 09 01 each year after 2007 set the...

Page 2409: ...the specified view Use the undo command privilege view command to restore the default By default the commands under each view have their respective command levels Generally do not modify the default...

Page 2410: ...figure user count command to restore the default configuration Two users are allowed to configure in system view by default Related command display configure user n The support for the command varies...

Page 2411: ...ay clock View Any view Parameter None Description Use the display clock command to view the current system time and date The current system time and date are decided by the clock datetime clock summer...

Page 2412: ...rameters are used display the specified information For example isis Displays the isis configuration isp Displays the ISP configuration post system Displays the post system configuration radius templa...

Page 2413: ...regular expression Character Meaning Note Starting sign the string following it appears only at the beginning of a line Regular expression user matches a string begins with user not Auser Ending sign...

Page 2414: ...At this time you can use the display diagnostic information command to collect prompt information of the commands display clock display version display device display current configuration Example Sa...

Page 2415: ...tory command max size on page 2460 for related configuration Example Display validated history commands in current user view the display information varies with configuration Sysname display history c...

Page 2416: ...on ESC_B Move the cursor one word back ESC_D Delete remainder of word ESC_F Move the cursor forward one word ESC_N Move the cursor down a line ESC_P Move the cursor up a line ESC_ Specify the beginnin...

Page 2417: ...software Version 5 20 Beta 1202P02 Standard Copyright c 2004 2006 Hangzhou Huawei 3Com Technology Co Ltd All rights reserved H3C MSR30 20 uptime is 0 week 0 day 0 hour 17 minutes Last reboot 2006 10...

Page 2418: ...m Configuration for the detailed information Description Use the header command to create a banner Use the undo header command to clear a banner Example Configure a banner in user view Sysname system...

Page 2419: ...Assigns the hot key Ctrl L to a command CTRL_O Assigns the hot key Ctrl O to a command CTRL_T Assigns the hot key Ctrl T to a command CTRL_U Assigns the hot key Ctrl U to a command command The comman...

Page 2420: ...ne CTRL_F Move the cursor one character right CTRL_H Erase the character left of the cursor CTRL_K Kill outgoing connection CTRL_N Display the next command from the history buffer CTRL_P Display the p...

Page 2421: ...t Example Return to user view from Ethernet view Sysname interface ethernet 1 0 Sysname Ethernet1 0 return Sysname super Syntax super level View User view Parameter level User level in the range 0 to...

Page 2422: ...witch to a higher user level however they need to enter the password The password can be set with the super password command If the entered password is incorrect or no password is configured the switc...

Page 2423: ...the configuration file saves a simple password If cipher is specified the configuration file saves a cipher password The user must always enter a simple password no matter simple or cipher is specifi...

Page 2424: ...fying device name affects the prompt of the CLI For example if the device name is Sysname the prompt of user view is Sysname Example Set the name of the device to R2000 Sysname system view Sysname sys...

Page 2425: ...me on page 2432 Description Use the display channel command to display channel information If no channel is specified information for all channels is displayed Example Display information for channel...

Page 2426: ...verwritten messages 740 channel number 4 channel name logbuffer Trap buffer channel name A specified channel name which varies with user s configuration For more information refer to info center chann...

Page 2427: ...and channel name s used SNMP Agent channel number 5 channel name snmpagent The SNMP agent channel information including the channel number s and channel name s used Log buffer enabled max buffer size...

Page 2428: ...isplays log information that contains a specified character or string text Regular expression Table 627 Severity description Character Meaning Remarks emergencies 0 The system is unavailable alerts 1...

Page 2429: ...mand interface Aux0 The rest is omitted here Addition used to match a subexpression before it one or multiple times zo can map to zo and zoo but not z Hyphen It connects two values the smaller one bef...

Page 2430: ...ffer Dropped messages The number of dropped messages Overwritten messages The number of overwritten messages when the buffer size is not big enough to hold all messages the latest messages overwrite t...

Page 2431: ...Jun 20 10 52 48 495 2006 Sysname DEV 5 BOARD TEMP NORMAL The rest is omitted here display logfile summary Syntax display logfile summary View Any view Parameter None Description Use the display logfil...

Page 2432: ...ssages 0 Current messages 1 Dec 31 14 01 25 2004 Sysname DEV 2 LOAD FINISHED Trap 1 3 6 1 4 1 2011 2 23 1 12 1 20 frameIndex is 0 slotIndex 0 4 info center channel name Syntax info center channel chan...

Page 2433: ...nnel View System view Parameter channel number Specifies a channel number in the range 0 to 9 channel name Specifies a channel name which could be a default name or one that is defined by the user The...

Page 2434: ...nfo center logbuffer channel channel number channel name size buffersize undo info center logbuffer channel size View System view Parameter buffersize Specifies the maximum number of log messages in a...

Page 2435: ...able View System view Parameter None Description Use the info center logfile enable command to enable the output of system information to the log file Use the undo info center logfile enable command t...

Page 2436: ...e quota size undo info center logfile size quota View System view Parameter size The maximum capacity of a disk in MB the default range varies with devices The value however cannot be smaller than 1MB...

Page 2437: ...sname mkdir test Created dir cf test Set the directory to save the log file to cf test Sysname system View Sysname info center logfile switch directory cf test info center loghost Syntax info center l...

Page 2438: ...g 1 1 1 1 16 Sysname system view Sysname info center loghost 1 1 1 1 info center loghost source Syntax info center loghost source interface type interface number undo info center loghost source View S...

Page 2439: ...on to the monitor is enabled with a default channel name of monitor and a default channel number of 1 Note that the info center monitor channel command takes effect only after the information center i...

Page 2440: ...ew Parameter module name Specifies the output rules of the system information of the specified modules which vary with devices For instance if information on ARP module is to be output you can configu...

Page 2441: ...ly set the output rules for a module you must use the module name argument to modify or remove the rules The new configuration by using the default keyword is invalid on the module Example Set the out...

Page 2442: ...er s input is interrupted by system information then after the completion of system output the system will not display command line prompt but just print the user s input Example Enable synchronous in...

Page 2443: ...0 to 59 and sss ranging from 0 to 999 yyyy Represents the year none Indicates no time information is provided Description Use the info center timestamp command to configure the time stamp format Use t...

Page 2444: ...ame Specifies a channel name which could be a default name or one that is defined by the user The user needs to specify a channel name first before using it as a self defined channel name For more inf...

Page 2445: ...e Set to manually save the log buffer contents into the log file Sysname logfile save reset logbuffer Syntax reset logbuffer View User view Parameter None Description Use the reset logbuffer command t...

Page 2446: ...the display of debug information on the current terminal Sysname terminal debugging Current terminal debugging is on terminal logging Syntax terminal logging undo terminal logging View User view Param...

Page 2447: ...l monitor command automatically disables the monitoring of log trap and debug information By default the monitoring of the console is enabled and the monitoring of the terminal is disabled Example Ena...

Page 2448: ...played using the terminal trapping command only after the monitoring of system information is enabled on the current terminal first using the terminal monitor command Example Enable the display of tra...

Page 2449: ...t in the range 2000 to 4999 where 2000 to 2999 are the basic ACL number 3000 to 3999 are the advanced ACL number 4000 to 4999 are the layer 2 ACL number inbound Controls dial in for a user interface o...

Page 2450: ...if you input an ASCII code value 97 the system will use its corresponding character a as the shortcut key if you input the string b c the system will use the first letter b as the shortcut key By def...

Page 2451: ...te command command the system automatically executes the command when a user logs on from the interface where the command is configured After the command is completed the connection breaks automatical...

Page 2452: ...scheme Performs authorization and authentication of AAA For details about AAA refer to AAA Configuration Commands on page 1913 command authorization Performs command line authorization HWTACACS allow...

Page 2453: ...is 321 Sysname system view Sysname user interface vty 0 Sysname ui vty0 authentication mode scheme Sysname ui vty0 quit Sysname local user 123 Sysname luser 123 password cipher 321 Sysname luser 123 s...

Page 2454: ...y View Any view Parameter num1 Absolute number of a user interface The value range varies by device and normally starts from 0 num2 Relative number of a user interface in the following rules For the A...

Page 2455: ...type TTY 1 XXXX XXXX XXXX XXXX 17 XXXX XXXX XXXX XXXX 33 XXXX XXXX XXXX XXXX 49 XXXX XXXX XXXX XXXX 65 XXXX XXXX XXXX XXXX User interface type AUX 81 X User interface type VTY 82 XUXU U 3 character m...

Page 2456: ...mode Table 635 Description on the fields of the display user interface summary command Field Description User interface type Type of user interface CON TTY AUX VTY 0 X 0 represents the absolute number...

Page 2457: ...key if you input the string q c the system will use the first letter q as the shortcut key By default you can use Ctrl C to terminate a task After defining a new shortcut key using the escape key comm...

Page 2458: ...of in or out in indicates passive flow control meaning flow on the local device is controlled by the remote device out indicates active flow control meaning the local device controls flow on the remot...

Page 2459: ...ete flow control Sysname system view Sysname user interface console 0 Sysname ui console0 flow control software out hardware in Configure adopt software mode for both active and passive flow control i...

Page 2460: ...ame free user interface vty 0 Not allowed to clear current UI history command max size Syntax history command max size size value undo history command max size View User interface view Parameter size...

Page 2461: ...le or not Example Set the idle timeout timer to 1 minute and 30 seconds Sysname system view Sysname user interface console 0 Sysname ui console0 idle timeout 1 30 lock Syntax lock View User view Param...

Page 2462: ...enable the modem to dial in or dial out Use the undo modem command to disable this function By default dial in and dial out are disabled on the modem n This command takes effect on the AUX port and o...

Page 2463: ...r interface view Parameter time Timeout time in the range 1 to 60 seconds Description Use the modem timer answer command to set the timeout interval spent waiting for the carrier signal after the off...

Page 2464: ...terface view Parameter all Supports all the protocols including Telnet SSH and PAD pad Supports PAD only ssh Supports SSH only telnet Supports Telnet only Description Use the protocol inbound command...

Page 2465: ...user interface Example Manually terminate a redirected Telnet connection Sysname system view Sysname user interface tty 1 Sysname ui tty1 redirect disconnect redirect enable Syntax redirect enable un...

Page 2466: ...ed Telnet connections Use the undo redirect listen port command to restore the default listening port The default number of the listening port for redirected Telnet connections equals absolute user in...

Page 2467: ...return deal from telnet Syntax redirect return deal from telnet undo redirect return deal from telnet View User interface view Parameter None Description Use the redirect return deal from telnet comm...

Page 2468: ...l are not processed n The redirect commands are supported on the AUX and TTY user interfaces only Execute other redirect commands after using the redirect enable command to enable redirection on the u...

Page 2469: ...ngth command to restore the default or 24 lines Multiple screen output is supported on the device If you press Space when information display pauses the system continues to display information of the...

Page 2470: ...ress Ctrl C to remove this operation when inputting messages Example Send the message hello abc to the Console user interface Sysname send console 0 Enter message end with CTRL Z or Enter abort with C...

Page 2471: ...t password easily gets cracked Therefore you are recommended to use cipher text password Related command authentication mode Example Set the local authentication password for the user interface Consol...

Page 2472: ...en a Telnet terminal logs in The connection was closed by the remote host speed in user interface view Syntax speed speed value undo speed View User interface view Parameter speed value Transmission r...

Page 2473: ...et the stop bits on the user interface Use the undo stopbits command to restore the default or one stop bit n The command is only applicable to asynchronous serial interfaces including AUX and Console...

Page 2474: ...ntax user privilege level level undo user privilege level View User interface view Parameter level Command level in the range 0 to 3 n Command level is divided into four levels of visit monitor system...

Page 2475: ...e varies with devices and normally starts from 0 but cannot be smaller than the first num1 first num2 Relative number of the first user interface in the following rules For the AUX port the value is 0...

Page 2476: ...2476 CHAPTER 164 USER INTERFACE CONFIGURATION COMMANDS Sysname system view Sysname user interface vty 0 3 Sysname ui vty0 3...

Page 2477: ...vlan id is in the range 1 to 4094 count Displays the total number of MAC addresses in the MAC address table mac address Specifies a MAC address in the format of H H H dynamic Displays dynamic MAC add...

Page 2478: ...address aging time 300s The above information indicates that the aging time of dynamic entries in the MAC address table is 300 seconds display mac address mac learning Syntax display mac address mac l...

Page 2479: ...hernet interface view Parameter dynamic Dynamic MAC address entries Aging time is set for these entries static Static MAC address entries Similar to blackhole MAC address entries these entries do not...

Page 2480: ...ress blackhole dynamic static mac address vlan vlan id undo mac address dynamic static mac address interface interface type interface number vlan vlan id undo mac address dynamic static interface inte...

Page 2481: ...ation cannot survive a reboot save it after completing the configuration The dynamic entries however will be lost whether you save the configuration or not Related command display mac address Example...

Page 2482: ...le forwarding View Ethernet interface view aggregation port group view Parameter count Maximum number of MAC addresses that can be learned on a port When the argument takes 0 the VLAN is not allowed t...

Page 2483: ...nt disable forwarding mac address timer Syntax mac address timer aging seconds no aging undo mac address timer aging View System view Parameter aging seconds Sets a aging time for dynamic MAC address...

Page 2484: ...2484 CHAPTER 165 MAC ADDRESS TABLE MANAGEMENT CONFIGURATION COMMANDS...

Page 2485: ...ly poe profile command to apply the PoE configuration file to the current PoE interface Use the undo apply poe profile command to remove the application of the PoE configuration file to the current Po...

Page 2486: ...erface number View Any view Parameter interface type interface number Interface type and interface number Description Use the display poe interface command to display the power information of the spec...

Page 2487: ...ical PoE interface power deny The PSE refuses to supply power The power required by the powered device PD is higher than the configured power power itself The external equipment is supplying power for...

Page 2488: ...support different power supply modes Port Current Power Current power of a PoE interface including PD consumption power and transmission loss The transmission loss usually does not exceed one watt Th...

Page 2489: ...power required by the powered device PD is higher than the configured power power itself The external equipment is supplying power for itself power limit The PSE is supplying a limited power The powe...

Page 2490: ...me display poe power usage PoE Current Power 600 W PoE Max Power 2000 W PoE Max Guaranteed Power 1000 W PoE Remaining Allocate Power 800 W PoE Remaining Guaranteed Power 600 W PoE Total Powered Port N...

Page 2491: ...Field Description PoE Current Power Total consumption power of the PSE PoE Max Power Maximum PoE power PoE Max Guaranteed Power Guaranteed maximum PoE power namely the maximum power supplied to critic...

Page 2492: ...pted yes The power of the PSE is preempted so that it can supply power although PoE is enabled for the PSE PSE Power Priority Power priority of the PSE PSE Current Power Current power of the PSE PSE A...

Page 2493: ...er Tyco Electronics Com Type PSE2500 B Status Normal Table 645 Description on fields of the display poe power command Field Description PoE Current Power Current PoE power PoE Average Power Average Po...

Page 2494: ...of the configurations and applications of existing PoE configuration files will be displayed Example Display all information of the configurations and applications of the current PoE configuration fil...

Page 2495: ...rtened form of the PoE interface to which the PoE configuration is applied Configuration Configurations of the PoE configuration file poe profile s created Number of PoE configuration files port s app...

Page 2496: ...ation file are applied successfully only the configurations that currently take effect on the interface are displayed poe disconnect Syntax poe disconnect ac dc undo poe disconnect Interface Shortened...

Page 2497: ...ct dc poe enable Syntax poe enable undo poe enable View PoE interface view PoE profile file view Parameter None Description Use the poe enable command to enable PoE on a PoE interface Use the undo poe...

Page 2498: ...pse command to enable PoE for the PSE Use the undo poe enable pse command to disable PoE for the PSE By default PoE is disabled for the PSE n The support for this command varies with devices Example...

Page 2499: ...max power command to restore the default maximum power of a PoE interface By default the maximum power of the PoE interface is 15 400 milliwatts Example Set the maximum power of Ethernet 1 0 to 12 00...

Page 2500: ...ply to these PoE interfaces When the consumption power of all PDs connected to the PSE is greater than the maximum power of the PSE some PDs will be powered off The sum of the maximum power of all PSE...

Page 2501: ...interface ethernet 1 0 Sysname Ethernet1 0 apply poe profile name abc poe pd description Syntax poe pd description string undo poe pd description View PoE interface view Parameter string Description o...

Page 2502: ...is power is first supplied to the PD connected to this critical PoE interface high Sets the power priority of a PoE interface to high low Sets the power priority of a PoE interface to low Description...

Page 2503: ...oe priority pse pse id View System view Parameter critical Sets the power priority level of the PSE to critical The PSE whose power priority level is critical works in guaranteed mode that is power is...

Page 2504: ...e pse id View System view Parameter full Specifies to upgrade the PSE processing software in full mode when the software is unavailable refresh Specifies to upgrade the PSE processing software in refr...

Page 2505: ...eshold If the percentage of the power utilization always keeps above the alarm threshold the system does not send any Trap message Instead when the percentage of the power utilization drops below the...

Page 2506: ...onfiguration file starting from 1 If a PoE configuration file is already applied to a PoE interface you cannot delete it To delete the file you must first execute the undo apply poe profile command to...

Page 2507: ...o the Linux OS on an OAP module You can press Ctrl k to return from the Linux OS on an OAP module to the command line interface on the router Example Switch from command line interface on the router t...

Page 2508: ...Before resetting an OAP module you are recommended to save the data on Linux OS and shut down the Linux OS to avoid service interruption and hardware data loss After the reset the Linux OS on the OAP...

Page 2509: ...ient info Syntax display acfp client info client id View Any view Parameters client id Displays information of the specified ACFP client where client id represents the ACFP client ID in the range of 1...

Page 2510: ...rface number Displays all the policies that use the specified interface destination interface for connecting to the ACFP client where interface type interface number is the interface type and interfac...

Page 2511: ...he active or inactive policies If no argument is specified the command will display the information about all the policies Example Display the information about the effective policies for all the inte...

Page 2512: ...ut interface keyword the command will display all the ACFP rule cache information Example Display all the ACFP rule cache information Sysname display acfp rule cache ACFP rule cache total items 2 Idx...

Page 2513: ...se the display acfp rule info command to display ACFP rule information Idx Hash index SIP Source IP address SPort Source port number DIP Destination IP address DPort Destination port number Pro Protoc...

Page 2514: ...licy Index 1 Rule Index 1 SIP 192 168 132 122 SMask 0 0 0 255 SPort 65500 to 65535 DIP 192 168 112 115 DMask 0 0 0 255 DPort 65500 to 65535 Protocol ipinip Establish false Fragment false DSCP AF11 Act...

Page 2515: ...mbers for other modes Action Action permit deny mirror and redirect Status Rule status active and inactive Table 653 Description on the fields of the display acfp rule info command Field Description T...

Page 2516: ...type and interface number out interface interface type interface number Clears the ACFP rule cache for the specified outbound interface where interface type interface number is the interface type and...

Page 2517: ...rver Use the undo acsei server enable command to disable ACSEI server By default ACSEI server is disabled Examples Enable ACSEI server Sysname system view Sysname acsei server enable acsei server Synt...

Page 2518: ...default the sychronization timer is set to five minutes Examples Set the synchronization timer from ACSEI server to ACSEI client to 20 minutes Sysname system view Sysname acsei server Sysname acsei s...

Page 2519: ...client close 1 acsei client reboot Syntax acsei client reboot client id View ACSEI server view Parameters client id ID of the ACSEI client to be restarted in the range of 1 to 10 Description Use the...

Page 2520: ...1 Status Open MAC Address 00e0 fc0a c3ef Interface GigabitEthernet5 0 Last registered 02 08 2007 12 00 00 client ID 2 Status Open MAC Address 00e0 fa1e 03da Interface GigabitEthernet6 0 Last register...

Page 2521: ...card 256 MB Memory 512 MB Harddisk 40 0 GB Display information about all ACSEI clients Sysname display acsei client info Total client Number 2 client ID 1 client Description Hardware System Software...

Page 2522: ...d version of the ACSEI client CPU CPU information of the ACSEI client PCB Version PCB version of the ACSEI client CPLD Version CPLD version of the ACSEI client Bootrom Version Boot ROM version of the...

Page 2523: ...odule For description on the oap connect slot command refer to oap connect slot on page 2507 acsei client debug disable Syntax acsei client debug disable View Any directory of the Linux system Paramet...

Page 2524: ...EI client debugging will be displayed ACSEI client debugging is displayed through a pipe therefore part of the debugging information may fail to be displayed when the pipe is full Examples Display the...

Page 2525: ...client automatically when the system is started up Sysname oap connect slot 6 Connected to OAP root localhost chkconfig acseid on service acseid condrestart Syntax service acseid condrestart View Any...

Page 2526: ...ration file only when the ACSEI client is started Otherwise you will fail to load the ACSEI client configuration file Examples Load the ACSEI client configuration file Sysname oap connect slot 6 Conne...

Page 2527: ...vice acseid start command to start an ACSEI client By default the ACSEI client installed on the OAP module is started Examples Start an ACSEI client that is running Sysname oap connect slot 6 Connecte...

Page 2528: ...vice acseid stop View Any directory of the Linux system Parameters None Description Use the service acseid stop command to stop an ACSEI client By default the ACSEI client installed on the OAP is star...

Page 2529: ...ck ID 1 Status Positive Reference Object NQA Entry admin test Reaction 10 track Syntax track track entry number nqa entry admin name operation tag reaction item num undo track track entry number Table...

Page 2530: ...command to create the Track object associated with the specified Reaction entry of the NQA test group Use the undo track command to delete the created Track object By default no Track object is create...

Page 2531: ...g of IPX type 20 propagation packet is disabled Delay of this IPX interface in ticks is 1 SAP GNS response is enabled RIP packet maximum size is 432 bytes SAP packet maximum size is 480 bytes IPX enca...

Page 2532: ...er the interface is enabled to respond to SAP GNS requests RIP packet maximum size Maximum size of RIP updating packet on the current interface SAP packet maximum size Maximum size of SAP updating pac...

Page 2533: ...0000 0000 0000 Time 0 Interface 1 0020 9c68 448e Vlan interface1 State Active Protocol Static Preference 60 Ticks 1 Hops 1 Nexthop 2 000e 0001 0000 Time 0 Interface 2 0020 9c68 448f Vlan interface2 St...

Page 2534: ...se keywords are not specified Example Display default IPX routing information Sysname display ipx routing table protocol default Default routing tables Summary count 0 Default routing tables status ac...

Page 2535: ...ame network network order network type type service type verbose View Any view Parameter inactive Displays inactive service information name name Displays the service information of a server The name...

Page 2536: ...Recv If Interface from which the se rvice is received Number of Static Entries 2 Number of Dynamic Entries 0 Name Type NetId S Prn1 0005 000d S Prn2 0005 0008 Display detailed IPX service information...

Page 2537: ...errors 0 bad hops 16 0 discarded hops 16 0 other errors 0 local destination 0 can not be dealt with Statistics of the received packets including the total number of received packets the number of padd...

Page 2538: ...guration Example Enable IPX Sysname system view Sysname ipx enable SAP 0 general requests received 0 specific requests received 0 GNS requests received 0 general responses sent 0 specific responses se...

Page 2539: ...tion format By default IPX frame encapsulation format is dot3 Ethernet_802 3 The command is only applicable to the layer 3 Ethernet interface and the VLAN interface Example Specify the IPX frame encap...

Page 2540: ...of the interface By default no network ID is allocated to an interface that is IPX is still disabled on the interface after IPX is enabled in system view Example Assign network ID 675 to the interface...

Page 2541: ...ize of each routing information item is 8 bytes and the size of IPX header plus RIP header is 32 bytes So an updating packet can carry up to 50 routing information items at most Example Specify the ma...

Page 2542: ...sname system view Sysname ipx rip multiplier 5 ipx rip timer update Syntax ipx rip timer update seconds undo ipx rip timer update View System view Parameter seconds RIP updating interval in seconds ra...

Page 2543: ...tination network 1 tick 1 18 second ranging from 1 to 65 534 The default is 1 When the tick value of the outgoing interface is modified the tick value of the corresponding static route will also be ch...

Page 2544: ...System view Parameter paths Maximum number of routes to the same destination including both static and dynamic routes in the range 1 to 255 Description Use the ipx route max reserve path command to s...

Page 2545: ...ax ipx sap gns disable reply undo ipx sap gns disable reply View Interface view Parameter None Description Use the ipx sap gns disable reply command to disable the interface from responding to IPX GNS...

Page 2546: ...length undo ipx sap max reserve servers View System view Parameter length Maximum reserve queue length of the same type service information ranging from 1 to 2 048 Description Use the ipx sap max rese...

Page 2547: ...st Sysname system view Sysname interface ethernet 1 0 Sysname Ethernet1 0 ipx sap mtu 674 ipx sap multiplier Syntax ipx sap multiplier multiplier undo ipx sap multiplier View System view Parameter mul...

Page 2548: ...interval as 300 seconds Sysname system view Sysname ipx sap timer update 300 ipx service Syntax ipx service service type server name network node socket hop hopcount preference preference undo ipx se...

Page 2549: ...service information item Example Add a static service information item with the service type being 4 service name FileServer server network ID 130 node value 0000 0a0b abcd server hop 1 and server pre...

Page 2550: ...face Ethernet 1 0 Sysname system view Sysname interface ethernet 1 0 Sysname Ethernet1 0 ipx tick 5 ipx update change only Syntax ipx update change only undo ipx update change only View Interface view...

Page 2551: ...500 Description Use the ping ipx command to check host reachability and network connectivity in an IPX network Example Ping the destination address at 675 0000 a0b0 fefe Sysname ping ipx 675 0000 a0b0...

Page 2552: ...e added deleted freed Direct 1 1 1 0 0 Static 9 9 14 5 5 RIP 0 0 0 0 0 Default 0 0 0 0 0 Total 10 10 15 5 5 Clear IPX static route statistics Sysname reset ipx routing table statistics protocol static...

Page 2553: ...uses a gatekeeper GK to provide IP voice services sip Uses the SIP port port number Port number in the range of 1 to 65535 The default port number is 5060 proxy Uses the SIP proxy server to implement...

Page 2554: ...urope standard is used This command applies to 2 wire loop trunk subscriber line FXO only Once this command is configured the configuration will be effective to all the analog FXO voice cards on the d...

Page 2555: ...undo busytone t th View Analog FXO voice subscriber line view Parameter time threshold Number of busy tone periods for detection in the range of 2 to 12 A bigger value means a longer busy tone detecti...

Page 2556: ...ber line Use the undo cid display command to disable CID By default CID is enabled on an analog FXS voice subscriber line Example Enable CID on voice subscriber line 1 0 Sysname system view Sysname vo...

Page 2557: ...XO voice subscriber line view Parameter None Description Use the cid send command to enable the FXS or FXO voice subscriber line to send calling numbers to the remote end Use the undo cid send command...

Page 2558: ...ata message format SDMF If the remote end supports one format only you must use the same message format at the local end Example Set the format of the transmitted caller identification information to...

Page 2559: ...ority g711alaw G 711 A law codec defining the pulse code modulation technology requiring a bandwidth of 64 kbps usually adopted in Europe g711ulaw G 711 law codec requiring a bandwidth of 64 kbps usua...

Page 2560: ...er flexibility for application The voice quality provided by g729r8 and g729a is similar to the ADPCM of 32 kbps having the quality of a toll and also featuring low bandwidth lesser event delay and me...

Page 2561: ...val 30 ms Table 667 G 723 r53 algorithm Packet assembly interval Bytes coded in a time unit Packet length bytes IP Network bandwidth IP Packet length bytes IP PPP Network bandwidth IP PPP Coding laten...

Page 2562: ...t length bytes IP Network bandwidth IP Packet length bytes IP PPP Network bandwidth IP PPP Coding latency 10 ms 40 80 64 kbps 86 68 8 kbps 10 ms 20 ms 80 120 48 kbps 126 50 4 kbps 20 ms 30 ms 120 160...

Page 2563: ...sembly interval of 30ms Two communication parties can communicate normally only if they share some identical coding decoding algorithms If the codec algorithm between two connected devices is not cons...

Page 2564: ...pe View Voice view Parameter country type locale Configure the current device to play the call progress tones of a specified country or regions Currently call progress tones of 64 countries or regions...

Page 2565: ...s NZ New Zealand NG Nigeria NO Norway PK Pakistan PA Panama PH Philippines PL Poland PT Portugal RU Russian Federation SA Saudi Arabia SG Singapore SK Slovakia SI Slovenia ZA South Africa ES Spain SE...

Page 2566: ...l busy tone congestion tone dial tone ringback tone special dial tone waiting tone amplitude value undo cptone tone type all busy tone congestion tone dial tone ringback tone special dial tone waiting...

Page 2567: ...ning the pulse code modulation technology requiring a bandwidth of 64 kbps usually adopted in Europe g711ulaw G 711 law codec requiring a bandwidth of 64 kbps usually adopted in North America and Japa...

Page 2568: ...ame voice dial default entity compression 1st level g723r53 default entity payload size Syntax default entity payload size g711 g723 g726r16 g726r24 g726r32 g726r40 g729 time length undo default entit...

Page 2569: ...al program view Parameter None Description Use the default entity vad on command to globally configure enabling silence detection as the default value Use the undo default entity vad on command to res...

Page 2570: ...subscriber line command to restore the default value You can use this command to increase the power of voice signal on the subscriber lines if the signal is too weak Related command transmit gain Exa...

Page 2571: ...elay start mode The value ranges from 20 to 2 000 Description Use the delay rising command to configure a delay time from when the terminating side detects a seizure signal to when it sends a delay si...

Page 2572: ...dtmf 3000 delay send wink Syntax delay send wink milliseconds undo delay send wink View E M voice subscriber line view Parameter send wink milliseconds Specifies an interval in milliseconds from when...

Page 2573: ...in the wink start mode Related command em signal Example Set the duration the terminating side sends wink signals in the wink start mode to 700 milliseconds Sysname system view Sysname voice setup Sy...

Page 2574: ...000 delay start dial Syntax delay start dial seconds undo delay start dial View FXS FXO voice subscriber line view Parameter seconds Dial delay in seconds in the range of 0 to 10 Description Use the d...

Page 2575: ...scription text undo description View FXS FXO E M voice subscriber line view Parameter text Description string of voice subscriber line consisting of up to 80 characters Description Use the description...

Page 2576: ...the call information table Description Use the display voice call info command to display the contents in the call information table Example Display the brief information of the call information table...

Page 2577: ...rmation related to CMC module Description Use the display voice cmc command to display messages which are related to CMC module These messages mainly contain call control block messages and statistic...

Page 2578: ...ay LGS statistics information related to the CMC module Sysname display voice cmc statistic lgs ACCP Message statistics between CMC and LGS Send SETUP message 0 Send SETUP_ACK message 0 Send ALERTING...

Page 2579: ...he call Call Leg Number Indicates the number of call legs of the call Active Service Indicates the number of services involved in the call Spl Protocol Indicates the type of protocol used in the call...

Page 2580: ...29 30 system 30 Table 677 Description on fields of the display voice default command Field Description fax ecm ECM mode is used for Fax fax protocol t38 Fax protocol for intercommunication fax redunda...

Page 2581: ...ill display a great deal of information So if you just want to view the configuration information of voice entities you can use the display voice entity command Example Display the configuration infor...

Page 2582: ...g 0 Send_Connect 0 Send_ReleaseComplete 0 Send_FacilityIndUserInput 0 Send_FacilityTCSRequest 0 Send_FacilityTCSAck 0 Send_FacilityTCSReject 0 Send_FacilityOLCRequest 0 Send_FacilityOLCAck 0 Send_Faci...

Page 2583: ...es CallProceeding Statistics of CallProceeding messages Alerting Statistics of Alerting messages Connect Statistics of Connect messages ReleaseComplete Statistics of ReleaseComplete messages FacilityI...

Page 2584: ...ice subscriber line line number View Any view Parameter line number Subscriber line number Description Use the display voice subscriber line command to view the configuration information of the subscr...

Page 2585: ...ndex 1 458 Index 2 9 Index 3 9 Index 4 9 Index 5 9 Index 6 3 Index 7 12 Index 8 12 Index 9 30 Index 10 300 Index 11 3200 Index 12 375 Timer Dial Interval 10 Timer Wait Digit 5 Timer Ring Back 60 Delay...

Page 2586: ...ire Cable type of analog E M voice interface E M Type Circuit type of analog E M voice interface Slic Gain SLIC gain configuration of analog E M voice interface Physical Information Physical statistic...

Page 2587: ...IP packets that carry the RTP stream of VoIP voice entity to af41 Sysname system view Sysname voice setup Sysname voice dial program Sysname voice dial entity 2 voip Sysname voice dial entity2 dscp m...

Page 2588: ...level Use the undo dtmf sensitivity level command to restore the default detection sensitivity level By default the DTMF detection sensitivity level is high This command is valid only for FXS FXO inte...

Page 2589: ...an integer in the range of 0 to 12 value Threshold corresponding to the specified index The value range varies with indexes For details see Table 682 According to the energy level of the row and colum...

Page 2590: ...energy level from the column frequency group to COLMAX The ratio must be lower than this limit for the input signal to be recognized as a DTMF digit 18 to 3 dB with a default of 9 dB The smaller the...

Page 2591: ...ho canceller Syntax echo canceller enable tail length milliseconds undo echo canceller enable tail length View FXS FXO E M voice subscriber line view Parameter enable Enables the echo cancellation EC...

Page 2592: ...parameter Syntax echo canceller parameter convergence rate value max amplitude value mix proportion ratio value talk threshold value undo echo canceller parameter convergence rate max amplitude mix p...

Page 2593: ...subscriber line view Parameter 2 wire Chooses the 2 wire analog E M wire scheme 4 wire Chooses the 4 wire analog E M wire scheme Description Use the em phy parm command to configure a wire scheme for...

Page 2594: ...ber Description Use the em signal command to configure a start mode for an analog E M voice subscriber line Use the undo em signal command to restore the default start mode By default the immediate st...

Page 2595: ...nection is disabled As there is no ability negotiation for fast connection mode the ability confirmation of the two parties is determined by the called gateway When the router acts as an originating g...

Page 2596: ...mand to configure the off hook mode for the FXO voice subscriber line Use the undo hookoff mode command to restore the default By default the FXO voice subscriber line operates in the immediate off ho...

Page 2597: ...O voice subscriber line by restricting incoming calls The bound FXS and FXO voice subscriber lines must come from the same device Example Specify the delay off hook mode for the FXO voice subscriber l...

Page 2598: ...dance R700 700 ohm real impedance R750 750 ohm real impedance R800 800 ohm real impedance R850 850 ohm real impedance R900 900 ohm real impedance R950 950 ohm real impedance Description Use the impeda...

Page 2599: ...plate match string undo match template View POTS VoIP VoFR entity view Parameter match string Number template Its format is string T T with the maximum length of 31 characters The characters are descr...

Page 2600: ...but also an expression that can match a group of numbers such as 010 1 5 678 They Table 683 Meanings of the characters in string Character Meaning 0 9 Numbers from 0 to 9 Each means a digit and Each...

Page 2601: ...ure a match template for VoIP entity 10 Sysname system view Sysname voice setup Sysname voice dial program Sysname voice dial entity 010 voip Sysname voice dial entity10 match template 5557922 nlp on...

Page 2602: ...l on Example Configure DTMF out of band transmission in the fast connection mode for VoIP voice entity 10 Sysname system view Sysname voice setup Sysname voice dial program Sysname voice dial entity 1...

Page 2603: ...igure the voice packetization period for different codecs Use the undo payload size command to restore the default By default the voice packetization period for g971 is 20 milliseconds and that for g7...

Page 2604: ...range of 14 0 to 13 9 with one digit after the decimal point Description Use the receive gain command to configure the gain value at the voice subscriber line input end Use the undo receive gain comm...

Page 2605: ...er cannot have the same number you cannot register a POTS entity with a GK and a SIP server at the same time In other cases you may need to register only some port numbers on the gateway with a GK or...

Page 2606: ...mand to reset IPP statistics Related command display voice ipp statistic Example Clear IPP statistics Sysname reset voice ipp statistic reset voice iva statistic Syntax reset voice iva View User view...

Page 2607: ...stem view Sysname voice setup Sysname voice dial program Sysname voice dial entity 10 voip Sysname voice dial entity10 rtp payload type nte 102 send busytone Syntax send busytone enable time seconds u...

Page 2608: ...voice entity to a trunk other than FXS voice subscriber line Example Enable the local end to play ringback tone Sysname system view Sysname voice setup Sysname voice dial program Sysname voice dial en...

Page 2609: ...o FXO FXS analog E M subscriber lines and E1 T1 voice subscriber line The POTS interface on the voice interface card will be down and there will be no sound on the connected telephone after the comman...

Page 2610: ...to 10 seconds Sysname system view Sysname voice setup Sysname voice subscriber line 1 0 Sysname voice line1 0 silence th span 20 10 slic gain Syntax slic gain 0 1 undo slic gain View Analog E M voice...

Page 2611: ...al interval seconds undo timer dial interval View FXS FXO E M voice subscriber line view Parameter seconds Maximum interval in seconds for dialing the next digit in the range of 1 to 300 Description U...

Page 2612: ...erminated Example Set the maximum interval between off hook and dialing the first digit to 10 seconds Sysname system view Sysname voice setup Sysname voice subscriber line 1 0 Sysname voice line1 0 ti...

Page 2613: ...ing back Syntax timer ring back seconds undo timer ring back View FXS FXO E M voice subscriber line view Parameter seconds Maximum duration in seconds of playing ringback tone in the range of 5 to 120...

Page 2614: ...ax transmit gain value undo transmit gain View FXS FXO E M voice subscriber line view Parameter value Voice output gain in dB in the range of 14 0 to 13 9 with one digit after the decimal point Descri...

Page 2615: ...ter Being the called gateway it shall be decided whether or not to enable the tunnel function based on the status of the calling gateway That is if the function is enabled on calling gateway it will a...

Page 2616: ...0 Sysname voice line1 0 type 3 vad on Syntax vad on undo vad on View POTS VoIP VoFR entity view Parameter None Description Use the vad on command to enable voice activity detection VAD function Use t...

Page 2617: ...n Hz in the range of 50 to 3 600 p1 Signal amplitude 1 in the range of 50 to 32 767 p2 Signal amplitude 2 in the range of 50 to 32 767 p3 Duration of a single tone in milliseconds in the range of 10 t...

Page 2618: ...usy tone detect auto 0 2 0 Save the frequency of the busy tone indexed as 0 duration limit of high low level duration error of high low level and duration difference of high low level Sysname system v...

Page 2619: ...e type in the range of 0 to 3 Description Use the vi card cptone custom command to configure parameters for a customized call progress tone Use the undo vi card cptone custom command to remove the con...

Page 2620: ...scription Use the voice setup command to enter voice view and enable voice services Example Enter voice view and enable voice services Sysname system view Sysname voice setup voip called tunnel enable...

Page 2621: ...d in fast connection procedures the faculties of the two parties are determined by the GW If a router acts as a calling GW you can enable or disable fast connection for each channel of initiated calls...

Page 2622: ...e voip timer voip to pots 3 vqa dscp Syntax vqa dscp media signal dscp value undo vqa dscp media signal View Voice view Parameter media Global DSCP value in the ToS field of the IP packets that carry...

Page 2623: ...me voice vqa dscp signal af41 vqa dsp monitor buffer time Syntax vqa dsp monitor buffer time time undo vqa dsp monitor buffer time View Voice view Parameter buffer time time Duration in milliseconds o...

Page 2624: ...CHAPTER 173 VOIP CONFIGURATION COMMANDS Example Set the duration of monitoring DSP buffered data to 270 milliseconds Sysname system view Sysname voice setup Sysname voice vqa dsp monitor buffer time...

Page 2625: ...inate calls string A character string consisting of 0123456789 Table 685 describes these characters Table 685 Description of characters in a string Character Meaning 0 9 Digits 0 through 9 and Indicat...

Page 2626: ...ommand match template on page 2599 Example Configure voice entity 2 to accept calls from the number 660268 Sysname system view Sysname voice setup Sysname voice dial program Sysname voice dial entity...

Page 2627: ...together through the FXO interface For details about number sending refer to send number on page 2642 When the number with a prefix exceeds 31 digits only the first 31 digits are sent Related command...

Page 2628: ...ht left Reserves from right to left the digits which the dots correspond to in a number Description Use the dot match command to configure the dot match rule of the number substitution rule list Use t...

Page 2629: ...preferred number substitution rule By default no preferred number substitution rule is configured In a voice call the system first uses the rule defined by the first rule command for number substituti...

Page 2630: ...Sysname system view Sysname voice setup Sysname voice dial program Sysname voice dial max call 1 5 max call in voice entity view Syntax max call set number undo max call View POTS VoIP VoFR voice enti...

Page 2631: ...onfigure a global number match policy Use the undo number match command to restore the default number match policy By default the shortest number match policy is adopted Related command match template...

Page 2632: ...ogram Sysname voice dial number priority peer enable number substitute Syntax number substitute list number undo number substitute list number all View Voice dial program view Parameter list number Se...

Page 2633: ...ntities and the selection priority rules see select rule rule order on page 2638 select rule search stop on page 2639 and select rule type first on page 2640 the router will first select the voice ent...

Page 2634: ...e output number type numbering plan input numbering plan output numbering plan undo rule rule tag all View Voice number substitute view Parameter all Deletes all number substitution rules rule tag Num...

Page 2635: ...gument are discarded 3 Extra dots in the input number argument are discarded If you use the dot match command to set the dot match rule to right left from right to left or left right from left to righ...

Page 2636: ...t number type Type of an output number involved in number substitution For the values see Table 689 numbering plan Specifies a numbering plan input numbering plan Input numbering plan involved number...

Page 2637: ...n rules for number substitution rule list 1 Sysname system view Sysname voice setup Sysname voice dial program Sysname voice dial number substitute 1 Configure number substitution rule 1 for number su...

Page 2638: ...ational Input numbering plan any Output numbering plan telex Sysname voice dial substitute1 rule 3 93 3 number type any intern ational numbering plan any telex select rule rule order Syntax select rul...

Page 2639: ...rule is applied there will be no voice entity selection conflict Therefore the random selection rule can only serve as a rule with the lowest priority or serve as a unique rule separately Related com...

Page 2640: ...that are matched in accordance with rules Related command select rule rule order and select rule type first Example Configure the maximum number of voice entities found to 5 Sysname system view Sysna...

Page 2641: ...orities The system selects the first type first then the second type and finally the third type Related command select rule rule order and select rule search stop Example Configure the system to selec...

Page 2642: ...mmand to restore the default number sending mode By default the truncate mode is used Note that This command applies to only POTS voice entities This command is used to control how to send called numb...

Page 2643: ...bound to a voice subscriber line or voice entity That is to say no number substitution is performed Before carrying out the this command you must first use the number substitute list number command to...

Page 2644: ...Description Use the substitute command to bind the calling called number of incoming outgoing calls to the specified number substitution rule list Use the undo substitute incoming call command to rem...

Page 2645: ...Voice dial program view Parameter character Dial terminator which can be any of 0 through 9 pound sign or asterisk Description Use the terminator command to configure a special character as the dial...

Page 2646: ...2646 CHAPTER 174 DIAL PLAN CONFIGURATION COMMANDS...

Page 2647: ...ling party information from the originating point By default the terminating point does not request calling party information from the originating point during call connection n Configure the local en...

Page 2648: ...e digits are collected By default the number of digits to be collected before the calling party information is 1 This command applies to R2 signaling only Related command cas timer reverse and renew E...

Page 2649: ...0 Sysname e1 1 0 timeslot set 0 timeslot list 1 31 signal r2 Sysname e1 1 0 cas 0 Sysname cas1 0 0 undo answer enable callmode Syntax callmode segment terminal undo callmode View R2 CAS view Paramete...

Page 2650: ...ar forward ack enable undo clear forward ack enable View R2 CAS view Parameter None Description Use the clear forward ack enable command to enable the terminating point to respond with a clear back si...

Page 2651: ...riber line Syntax display voice subscriber line slot number ts set number 15 23 View Any view Parameter slot number Number of the voice subscriber line automatically created upon creation of a TS grou...

Page 2652: ...tus Status of the voice subscriber line Call Status Status of the voice protocol call Description Information about the voice subscriber line Private Line Private line dialup mode of the voice subscri...

Page 2653: ...ng setting applies to transmitted R2 line signals ABCD ABCD bit pattern of R2 line signaling in the range of 0000 to 1111 Description Use the dl bits command to configure the ABCD bit pattern for R2 s...

Page 2654: ...iew Parameter None Description Use the dtmf enable command to set the way receiving and transmitting R2 signals to DTMF mode Use the undo dtmf enable command to restore the default By default multifre...

Page 2655: ...nable Syntax final callednum enable undo final callednum enable View R2 CAS view Parameter None Description Use the final callednum enable command to enable the originating point to send a number term...

Page 2656: ...etering signal processing By default R2 metering signal processing is disabled This command applies to R2 signaling only When the terminating point supports metering signals the system may send a forc...

Page 2657: ...view Sysname controller e1 1 0 Sysname e1 1 0 timeslot set 0 timeslot list 1 31 signal r2 Sysname e1 1 0 cas 0 Sysname cas1 0 0 group b enable line Syntax line slot number ts set number 15 23 undo lin...

Page 2658: ...ina Uses Argentinean R2 signaling standard australia Uses Australian R2 signaling standard bengal Uses Bengalee R2 signaling standard brazil Uses Brazilian R2 signaling standard china Uses Chinese R2...

Page 2659: ...d C and D signaling bits and other parameters depending on the default settings of configured national R2 signaling variants If the custom keyword is configured you can customize specific signaling ex...

Page 2660: ...e and 1 to 24 on a T1 interface You may specify a single timeslot by specifying a number a range of timeslots by specifying a range in the form of number1 number2 or several discrete timeslots by spec...

Page 2661: ...ller e1 1 0 Sysname e1 1 0 pri set timeslot list 1 2 8 12 re answer enable Syntax re answer enable undo re answer enable View R2 CAS view Parameter None Description Use the re answer command to enable...

Page 2662: ...subscriber idle View R2 CAS view Parameter billingcategory value Specifies the billing category value in the range 1 to 16 It configures the KA signal in R2 signaling The KA signal is sent by the orig...

Page 2663: ...next called number signal value in the range 1 to 16 req nextcallingnum value Specifies the send next calling number signal value in the range 1 to 16 req switch groupb value Specifies the changeover...

Page 2664: ...e callingcategory keyword but not the send billing category billingcategory signal Related command group b enable Example Request the originating point to send calling category by configuring a backwa...

Page 2665: ...command takes either of the two values 0 for normal or 1 for inversion The default is 0000 that is inversion disabled Description Use the reverse command to configure line signal inversion mode Use th...

Page 2666: ...and allowing the terminating point not to acknowledge received seizure signals Related command timer dl seizure Example Disable the terminating point to send seizure acknowledgement signals Sysname sy...

Page 2667: ...n Example Set the trunk routing mode for TS group 5 to max on interface E1 1 0 Sysname system view Sysname controller e1 1 0 Sysname e1 1 0 timeslot set 5 timeslot list 1 31 signal r2 Sysname e1 1 0 c...

Page 2668: ...or 1 Description Use the signal value command to configure the ABCD bit patterns of idle receive receive seized idle transmit and transmit seized signals on the digital E M voice subscriber line Use t...

Page 2669: ...cters such as pound signs and asterisks in addition to digits n You cannot use the special character command to assign a special character different signal values To ensure that the device can process...

Page 2670: ...ubscriber line 1 0 15 Sysname voice line1 0 15 tdm clock Syntax tdm clock internal line primary undo tdm clock View E1 T1 interface view Parameter internal Sets the time division multiplexing TDM cloc...

Page 2671: ...internal This is to prevent frame slips and bit errors You can do this however if the remote E1 T1 interfaces adopt the line clock source When there is no VCPM on the mainboard the configuration of ea...

Page 2672: ...hould send back a seizure acknowledgement signal within the timeout time re answer time Timeout time in milliseconds of R2 re answer signal configured at the originating point in the range 100 to 60 0...

Page 2673: ...this command you must configure the dtmf enable command Example Configure the R2 signaling to start sending DTMF signals 800 milliseconds later after receiving a seizure acknowledgement signal Sysnam...

Page 2674: ...mer register complete group b Syntax timer register complete group b time undo timer register complete group b View R2 CAS view Parameter group b time Maximum time in milliseconds that the originating...

Page 2675: ...seconds and that of playing the busy tone is 30 000 milliseconds This command applies to R2 signaling only Related command send ring on page 2608 Example Set the duration of playing the ringback tone...

Page 2676: ...signaling r2 Adopts ITU T Q 421 R2 digital line signaling This is the one most commonly used Description Use the timeslot set command to create a TS group and specify a signaling mode for it on the E1...

Page 2677: ...R2 signaling to operate normally for call connection you need to ensure that the trunking mode is incoming at one end of the trunk and outgoing at the other end If both ends are using bidirectional t...

Page 2678: ...cify a single timeslot by specifying a number a range of timeslots by specifying a range in the form of number1 number2 or several discrete timeslots by specifying number1 number2 number3 Examples are...

Page 2679: ...es the maximum transmission rate of the fax The default value is voice 2400 Sets the maximum transmission rate to 2400 bps 4800 Negotiates the baud rate first in accordance with the V 27 fax protocol...

Page 2680: ...38 packets in the range of 0 to 2 lb redundancy number Number of redundant low speed T 38 packets in the range of 0 to 5 train mode Specifies the fax training mode By default the point to point traini...

Page 2681: ...38 0 FAX_VOIP_T38 0 Failure 0 FAX_VOFR_STANDARD_SWITCH 0 FAX_VOFR_FRF11_TRUNK 0 FAX_VOFR_FRF11_SWITCH 0 FAX_VOFR_MOTOROLA 0 FAX_VOIP_STDT38 0 FAX_VOIP_T38 0 Last Time 00 00 00 FAX_VOFR_STANDARD_SWITCH...

Page 2682: ...tatistics of the number of connections released in the case that the DP does not start demodulation within the specified time WAIT_DP_BEG_MODULATE_TIMEOUT Statistics of the number of connections relea...

Page 2683: ...is 14 400 bps and the fax protocol is V 17 If G 723 1 Annex A is adopted the fax baud rate is 4 800 bps and the fax protocol is V 27 If G 726 is adopted the fax baud rate is 14 400 bps and the fax pro...

Page 2684: ...figure the gateway to use the ECM mode by force Use the undo fax ecm command to restore the default By default the ECM mode is not used on the gateway The fax ecm command is used to perform the forced...

Page 2685: ...ct try to adjust the transmit energy level Example Set the transmit energy level of the gateway carrier to 20 dBm Sysname system view Sysname voice setup Sysname voice dial program Sysname voice dial...

Page 2686: ...View POTS VoIP entity view Parameter None Description Use the fax nsf on common to configure the signal transmission mode of fax capability as a nonstandard mode Use the undo fax nsf on command to re...

Page 2687: ...n Use the fax protocol command to configure the type of protocol used for fax communication with other devices Use the undo fax protocol command to restore the default type of protocol used for fax co...

Page 2688: ...d be disabled Example Set to 2 the number of high speed redundant packets sent via the T 38 fax protocol Sysname system view Sysname voice setup Sysname voice dial program Sysname voice dial entity 4...

Page 2689: ...ng the T 38 capability description in its capability set By default T 38 capability description is contained Because NetMeeting does not support T 38 capability description parsing you must disable th...

Page 2690: ...CONFIGURATION COMMANDS Example Disable the voice gateway in H 323 slow start mode from containing T 38 capability description in its capability set Sysname system view Sysname voice setup Sysname voic...

Page 2691: ...y Each area ID identifies a particular type of gateway for example 1 for the voice gateway and 2 for the video gateway depending on the agreement that the gateway and the gatekeeper reaches beforehand...

Page 2692: ...E164 ID 07552002 E164 ID 660019 Current GK information H323 ID 1962 E164 ID 1119 E164 ID 100 E164 ID 400 E164 ID 1234 E164 ID 07552001 E164 ID 07552002 E164 ID 660019 gk client Syntax gk client View V...

Page 2693: ...65535 The default is 1719 Description Use the gk 2nd id command to configure the secondary gatekeeper for the gateway Use the undo gk 2nd id command to remove the secondary gatekeeper By default no s...

Page 2694: ...undo gk id command to remove the primary gatekeeper By default no primary gatekeeper is specified for the gateway Only after you configure the information of the primary gatekeeper can the gateway lo...

Page 2695: ...passwords in ciphertext simple Displays passwords in plain text password A string of 1 to 16 characters excluding spaces Description Use the gk security register pwd command to configure a password fo...

Page 2696: ...e and in addition this address and the address of the peer H 323 entity a gatekeeper terminal or MCU are reachable to each other Related command area id gk 2nd id gk id gw address and ras on Example B...

Page 2697: ...n the gatekeeper client function is active can the normal communication be maintained between the voice gateway and the gatekeeper When the function is inactive the voice gateway cannot set up connect...

Page 2698: ...ay Use the undo voip h323 descriptor command to restore the default H 323 descriptor By default the descriptor is Wqldg0Hcwfydz You are recommended to use the default descriptor If at both ends are th...

Page 2699: ...tistics of Stack TPT Message UDP TCP SCTP TLS Total InMsg 0 0 0 0 0 OutMsgSucc 0 0 0 0 0 OutMsgFail 0 0 0 0 0 TXN Message Inv_Cli NonInv_Cli Inv_Srv NonInv_Srv Create Succ 0 0 0 0 Create Fail 0 0 0 0...

Page 2700: ...nom Terminal exception Request Message Statistics of all SIP request messages including Inv Invite Ack Bye Can Cancel Opt Option Reg Register Inf Information Prk Prack Upd Update Each type of message...

Page 2701: ...ssages without headers rcvd Statistics of received messages without headers in SIP SDP decode failures Statistics of SDP decoding failures in SIP registration timeouts Statistics of registration timeo...

Page 2702: ...1 2 Sysname voice dial entity10 outband sip proxy Syntax proxy ipv4 ip address port port number undo proxy ipv4 View SIP client view Parameter ipv4 ip address IPv4 address of the proxy server port por...

Page 2703: ...me voice sip Sysname voice sip sip server master 169 54 5 10 Sysname voice sip register enable on registrar ipv4 Syntax registrar ipv4 ip address port port number expires seconds slave undo registrar...

Page 2704: ...169 54 5 10 port 1120 expires 120 reset voice sip Syntax reset voice sip View User view Parameter None Description Use the reset voice sip command to clear all the statistics about the SIP client Exam...

Page 2705: ...g a SIP request Sysname system view Sysname voice setup Sysname voice sip Sysname voice sip sip comp from sip comp agent Syntax sip comp agent product name product version undo sip comp agent View SIP...

Page 2706: ...remove the configuration By default the Server header field in SIP response messages is not configured Examples Set the Server header field in SIP response messages to company 1 1 Sysname system view...

Page 2707: ...ource IP address is configured to be bound to the packets sent by the UA Note that the source IP address must be already assigned to a gateway interface You can use this command only when the SIP regi...

Page 2708: ...to configure SIP authentication information Use the undo user command to restore the default By default the username and password in SIP client view are VOICE GATEWAY and VOICE SIP respectively while...

Page 2709: ...POTS entity you may use a number containing the wildcards of dot and T instead of using a standard E 164 number After enabling fuzzy telephone number registration the router retains the wildcard and s...

Page 2710: ...2710 CHAPTER 178 SIP CONFIGURATION COMMANDS...

Page 2711: ...mber of a VoFR entity in the range of 4 to 255 Description Use the address command to configure a channel to the peer voice gateway Use the undo address command to remove the configuration By default...

Page 2712: ...ter the call is completed the frame relay will immediately remove the voice channel and release the corresponding FRF 11 sub channel The call control protocol used in the dynamic call mode is specifie...

Page 2713: ...0 fr dlci 100 Sysname fr dlci 100 cid select mode min poll display fr vofr info Syntax display fr vofr info serial interface number dlci number View Any view Parameter serial interface number Display...

Page 2714: ...er Example Create a VoFR entity and number it 10 Sysname system view Sysname voice setup Sysname voice dial program Sysname voice dial entity 10 vofr outband vofr Syntax outband vofr undo outband View...

Page 2715: ...ets carry a sequence number Routers of some manufacturers do not comply with the above rule but force VoFR packets to carry a sequence number when a specific codec is adopted If a call failure or seve...

Page 2716: ...e system view Sysname voice setup Sysname voice dial program Sysname voice dial entity 10 vofr Sysname voice dial entity10 timestamp trunk id Syntax trunk id string undo trunk id View VoFR entity view...

Page 2717: ...after the DLCI references such a frame relay class Otherwise no voice bandwidth will be available and call setup will fail Example Reserve a maximum bandwidth of 8 kbps for voice in frame relay class...

Page 2718: ...y default no VoFR operation mode is configured If the VoFR operation mode is set to Motorola compatible and the call mode is set to static FRF 11 trunk mode a call failure will occur In the Motorola c...

Page 2719: ...ength incoming calls are prohibited and received voice packets are dropped No signaling is exchanged in the FRF 11 trunk mode When one voice gateway receives the first voice packet from its peer voice...

Page 2720: ...2720 CHAPTER 179 VOFR CONFIGURATION COMMANDS...

Page 2721: ...le the RADIUS accounting function for users who dial some access number Use the undo accounting command to disable the RADIUS accounting function By default the RADIUS accounting function is disabled...

Page 2722: ...unting did Syntax accounting did undo accounting did View Voice AAA client view Parameter None Description Use the accounting did command to enable the RADIUS accounting function for all one stage dia...

Page 2723: ...n Accounting_Start request or Accounting_Stop request to the RADIUS server before connecting or releasing a call and directly connects or releases the call without waiting for an acknowledgment from t...

Page 2724: ...P calls If the authentication function is disabled users who dial the access number can directly make IP calls no matter whether they are legal The authentication function must be enabled before the a...

Page 2725: ...and cannot make IP calls The authentication function must be enabled before the authorization function When the authentication function is disabled the authorization function will automatically be dis...

Page 2726: ...function for users who dial the access number 17909 Sysname voice dial anum17909 undo authorization authorization did Syntax authorization did undo authorization did View Voice AAA client view Paramet...

Page 2727: ...undo callednumber receive method command to restore the default By default users need to press the dial terminator after dialing all digits of a called number This command is applicable to both the o...

Page 2728: ...cess by using the process config command Note that This command is used to configure the number of digits in a card number for the card number password process Once the number of digits is fixed all u...

Page 2729: ...g rule and the undo cdr all command to restore the values of buffer duration and threshold all to the defaults The voice gateway will save a certain amount of CDRs according to the configured rule Whe...

Page 2730: ...n for all access numbers Related command gw access number and aaa client Example Display the configuration information and access numbers Sysname display voice access number AAA configuration accounti...

Page 2731: ...uration command cdr threshold CDR alarm threshold See cdr on page 2728 access number Access number for example 17909 See gw access number on page 2736 dialing process Two stage dialing process includi...

Page 2732: ...subscriber line of the voice gateway The value range of the line number argument varies with devices remote ip addr ip address Displays call records by callee s IP address The ip address argument repr...

Page 2733: ...47 SendPackets 71 packages SendBytes 2982 bytes ReceivePackets 111 packages ReceiveBytes 4662 bytes Outgoing call leg 0 CalledNumber 2000 CallDuration 00h 00m 02s EncodeType G729R8 DecodeType G729R8 R...

Page 2734: ...sent SendBytes Bytes sent ReceivePackets Packets received ReceiveBytes Bytes received Outgoing call leg 0 Information of the outgoing call leg One call may involves multiple outgoing call legs 0 ident...

Page 2735: ...axVoiceSwitch 0 FaxTone 0 Table 703 Description on fields of the display voice radius statistic command Field Description VORDS AAA Messages from the voice RADIUS module to the AAA module Authen_Reque...

Page 2736: ...numbers the voice gateway will give alarm information requiring you to make a confirmation You can press Y to delete all access numbers or press N to cancel the operation AcctRsp_PstnCaller Accountin...

Page 2737: ...umber 17909 Sysname voice dial anum17909 Add the access number 179 and enter access number view Sysname system view Sysname voice setup Sysname voice dial program Sysname voice dial gw access number 1...

Page 2738: ...rd for the access number 17909 Sysname voice dial anum17909 undo password digit process config Syntax process config callernumber cardnumber voice caller undo process config View Access number view Pa...

Page 2739: ...ess number the voice gateway will play prompt tones requiring the user to dial a called number In the card number password process with the authentication function disabled a user can enter any two nu...

Page 2740: ...refers to the number of redial attempts that is the number of dial attempts is the number of redial attempts plus 1 This command is unavailable in the caller number process For the card number passwor...

Page 2741: ...language View Access number view Parameter enable Enables the language selection function so that users can select a language to play prompt tones chinese Plays prompt tones in Chinese english Plays p...

Page 2742: ...42 CHAPTER 180 VOICE RADIUS CONFIGURATION COMMANDS Sysname voice dial gw access number 17909 Sysname voice dial anum17909 process config voice caller Sysname voice dial anum17909 selectlanguage englis...

Reviews: