manualshive.com logo in svg

Nortel Contivity1510D, Reference

Share
Download
Nortel Contivity1510D Reference Download Page 26

26 Contents

311645-A Rev 00

Required fields for user and branch records  . . . . . . . . . . . . . . . . . . . . . . . . . . . . 219

Group name syntax  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 220

Certificate Distinguished Name order  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 220

Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 221

Summary of Contents for Contivity1510D

Page 1: ...Version 3 5 Part No 311645 A Rev 00 December 2000 600 Technology Park Drive Billerica MA 01821 4130 Reference for the Contivity VPN Switch Command Line Interface...

Page 2: ...rcial Computer Software Restricted Rights clause at FAR 52 227 19 Statement of Conditions In the interest of improving internal design operational function and or reliability Nortel Networks NA Inc re...

Page 3: ...EN 55 022 Class A CISPR 22 Warning This is a Class A product In a domestic environment this product may cause radio interference in which case the user may be required to take appropriate measures Ach...

Page 4: ...e use for any competitive analysis reverse engineer distribute or create derivative works from the Software or user manuals or any copy in whole or in part Except as expressly provided in this Agreeme...

Page 5: ...unity If Licensee uses the Software within a country in the European Community the Software Directive enacted by the Council of European Communities Directive dated 14 May 1991 will apply to the exami...

Page 6: ...E AND EXCLUSIVE AGREEMENT BETWEEN NORTEL NETWORKS AND LICENSEE WHICH SUPERSEDES ALL PRIOR ORAL AND WRITTEN AGREEMENTS AND COMMUNICATIONS BETWEEN THE PARTIES PERTAINING TO THE SUBJECT MATTER OF THIS AG...

Page 7: ...tton 31 Nortel Networks Customer Service 32 Chapter 1 Introduction 33 Accessing the CLI 33 Access from a Telnet session 33 Access from the serial port menu 34 Command modes 34 User Exec Mode 35 Privil...

Page 8: ...mand mode 44 Next command mode 44 Related commands 44 clear ip route 45 Syntax 45 Parameters 45 Default 45 Command mode 45 Next command mode 45 Warnings 45 Related commands 46 Example 46 clear logging...

Page 9: ...ext command mode 50 Related commands 50 Examples 50 control 52 Syntax 52 Parameters 52 Command mode 52 Next command mode 52 Related commands 52 Examples 53 disable 54 Syntax 54 Parameters 54 Default 5...

Page 10: ...exception backup 60 Syntax 60 Parameters 60 Default 60 Command mode 61 Next command mode 61 Related commands 61 Example 61 exit 62 Syntax 62 Parameters 62 Default 62 Command mode 62 Next command mode...

Page 11: ...lt 67 Command mode 67 Next command mode 67 Prerequisites 67 Warnings 67 Related commands 68 Example 68 interface management 69 Syntax 69 Parameters 69 Command mode 69 Next command mode 69 Warnings 69...

Page 12: ...mode 76 Warnings 76 Example 76 ldap server 77 Syntax 77 Parameters 77 Default 77 Command mode 77 Next command mode 77 Related commands 78 Example 78 ldap server source 79 Syntax 79 Parameters 79 Defa...

Page 13: ...efault 83 Command mode 84 Next command mode 84 Warnings 84 Related commands 84 Example 84 logout 85 Syntax 85 Parameters 85 Command mode 85 Next command mode 85 Related commands 85 Example 85 more 86...

Page 14: ...s 93 Related commands 93 Example 94 Comments 94 reload at 95 Syntax 95 Parameters 95 Default 96 Command mode 96 Next command mode 96 Prerequisites 97 Warnings 97 Related commands 97 Example 98 Comment...

Page 15: ...105 Comments 105 reload no sessions 106 Syntax 106 Parameters 106 Default 107 Command mode 107 Next command mode 107 Prerequisites 108 Warnings 108 Related commands 108 Example 109 Comments 109 server...

Page 16: ...16 Parameters 116 Default 116 Command mode 116 Response 116 Next command mode 116 Prerequisites 116 Warnings 117 Related commands 117 Example 117 Comments 117 server stop 117 Syntax 118 Parameters 118...

Page 17: ...121 Command mode 121 Response 121 Next command mode 122 Warnings 122 Related commands 122 Example 123 show file systems 124 Syntax 124 Parameters 124 Default 124 Command mode 124 Next command mode 12...

Page 18: ...mand mode 131 Example 131 show ip ospf 132 Syntax 132 Parameters 132 Default 132 Command mode 132 Response 132 Next command mode 132 Related commands 132 Example 133 show ip ospf database 134 Syntax 1...

Page 19: ...Response 138 Next command mode 138 Related commands 138 Example 139 show ip rip 140 Syntax 140 Parameters 140 Default 140 Command mode 140 Response 140 Next command mode 141 Related commands 141 show...

Page 20: ...mand mode 148 Related commands 148 Example 148 show ip route policies 149 Syntax 149 Parameters 149 Default 149 Command mode 149 Response 149 Next command mode 150 Related commands 150 Example 150 sho...

Page 21: ...mand mode 156 Warnings 157 Related commands 157 Example 157 show logging config 158 Syntax 158 Parameters 158 Default 159 Command mode 159 Response 159 Next command mode 159 Related commands 159 Examp...

Page 22: ...arameters 167 Default 167 Command mode 167 Response 168 Next command mode 168 Related commands 168 Example 168 Comments 169 show logging syslog 169 Syntax 169 Parameters 169 Default 170 Command mode 1...

Page 23: ...mode 175 Related commands 175 Example 175 show version 175 Syntax 175 Parameters 175 Default 176 Command mode 176 Next command mode 176 Related commands 176 Example 176 snmp server contact 177 Syntax...

Page 24: ...82 Related commands 182 Example 182 suffix remove 183 Syntax 183 Parameters 183 Default 183 Command mode 183 Next command mode 183 Related commands 183 Example 184 trace 185 Syntax 185 Parameters 185...

Page 25: ...p 194 Purge Group 197 Delete Group 197 Delete All 198 Branch office commands 198 Add branch office connection 199 Modify branch office connection 202 Delete branch office connection 202 Add branch off...

Page 26: ...26 Contents 311645 A Rev 00 Required fields for user and branch records 219 Group name syntax 220 Certificate Distinguished Name order 220 Index 221...

Page 27: ...operation Documentation This document uses the following conventions to distinguish among notes of varying importance Note Take notice Notes contain helpful suggestions or references to materials con...

Page 28: ...onfiguration screens Text This guide uses the following text conventions angle brackets Indicate that you choose the text to enter based on the description inside the brackets Do not type the brackets...

Page 29: ...ook titles and variables in command syntax descriptions Where a variable is two or more words the words are connected by an underscore Example If the command syntax is show at valid_route valid_route...

Page 30: ...ol ISDN Integrated Services Digital Network ISO International Organization for Standardization ITU T International Telecommunication Union Telecommunication Standardization Sector formerly CCITT MAC m...

Page 31: ...al publications through the Internet at the www1 fatbrain com documentation nortel URL You can purchase Nortel Networks documentation sets CDs and selected technical publications through the Nortel Ne...

Page 32: ...ing Nortel Networks Technical Solutions Centers An Express Routing Code ERC is available for many Nortel Networks products and services When you use an ERC your call is routed to a technical support p...

Page 33: ...ss for example telnet 10 0 16 247 You then log into the switch using an account with administrator privileges for example Login admin Password Upon login the CLI prompt appears indicating that you are...

Page 34: ...e CLI through the Serial Port menu if you have a serial port connection to the switch Select L from the Serial Port menu shown below to access the CLI Figure 1 Serial Port Menu Command modes The switc...

Page 35: ...ands Table 1 CLI Modes Prompts and Access Mode Prompt Access User Exec Mode CES Login via Telnet with administrator name and password Privileged Exec Mode CES Enter the command enable at the User Exec...

Page 36: ...owned and imported by RIP show ip rip interface Display info about interfaces configured for RIP show ip route Display IP routing table show ip route policies Display IP route policies show ip traffi...

Page 37: ...ed Exec Mode commands The following table summarizes the Privileged Exec Mode commands Table 3 Privileged Exec Mode commands Command Description clear arp cache Clear ARP cache clear logging events Cl...

Page 38: ...Configuration Mode commands The following table summarizes the Global Configuration Mode commands show logging events Show event log contents show logging history Show the logging history setting show...

Page 39: ...elnet session Mini CLI reset Set switch system boot mode Mini CLI restore flash Restore factory default switch flash settings restore system Restore factory default switch configuration restrict Restr...

Page 40: ...and control P or up arrow previous history command control Q escape sequence for unprintables control T transpose characters control U delete entire line control W delete word left of cursor control X...

Page 41: ...tical order arp This command modifies the contents of the Address Resolution Protocol ARP cache On the Contivity VPN Switch only the no form of the de facto command is supported There is no command to...

Page 42: ...42 Chapter 2 CLI Command Summary 311645 A Rev 00 Next command mode Global Configuration Related commands show arp clear arp cache...

Page 43: ...m on the switch that is sounded under certain error conditions Syntax audible alarm no audible alarm Parameters None Default Audible alarm is enabled Command mode Global Configuration Next command mod...

Page 44: ...dynamic entries from the ARP cache to clear the fast switching cache and to clear the IP route cache Syntax This command has no arguments or keywords clear arp cache Parameters None Default None Comm...

Page 45: ...is command This command is intended as a troubleshooting tool for use when routing problems are being caused by the presence of a wrong route Syntax clear ip route address mask Parameters address The...

Page 46: ...46 Chapter 2 CLI Command Summary 311645 A Rev 00 Related commands show ip route Example CES clear ip route 10 11 0 12...

Page 47: ...used to clear the contents of the system events log Syntax clear logging events Parameters None Default None Command mode Privileged Exec Next command mode Privileged Exec Related commands show loggi...

Page 48: ...iguration mode commands To exit this mode the user can enter control Z the exit command or the end command All global configuration commands are entered from the terminal Syntax configure terminal Par...

Page 49: ...CLI commands that are available are disable enable exit reload reload at reload in reload no sessions Because none of the Global Configuration mode commands are allowed setting the switch into a restr...

Page 50: ...d in the CLI only supports the boot safe and boot normal parameters show Display the current console mode setting Default The system boots in unrestricted mode where all commands are enabled Command m...

Page 51: ...to RESTRICTED1 CES Exec commands disable Turn off privileged commands enable Turn on privileged commands exit Exit the Telnet session reload Stop and perform a cold restart These examples show the de...

Page 52: ...y the currently existing control tunnels Control tunnels provide a secure means to manage the switch Syntax control help create delete show Parameters help If present the control command is not Execut...

Page 53: ...Chapter 2 CLI Command Summary 53 Reference for the Contivity VPN Switch Command Line Interface Examples CES config control Help delete CES config control create CES config control show...

Page 54: ...ummary 311645 A Rev 00 disable This command makes the CLI parser exit from Privileged Exec mode and return to user Exec mode Syntax disable Parameters None Default None Command mode Privileged Exec Ne...

Page 55: ...Chapter 2 CLI Command Summary 55 Reference for the Contivity VPN Switch Command Line Interface Related commands configure enable end Example CES disable CES...

Page 56: ...before they can enter privileged Exec mode This password is created when the administrator user account is set up using the Web management pages The user gets three attempts to enter the password Afte...

Page 57: ...I Command Summary 57 Reference for the Contivity VPN Switch Command Line Interface Related commands configure disable enable password Example CES enable Password fred The password does not display CES...

Page 58: ...assword is not different from the existing password a warning message is generated Syntax enable password password Parameters password The password is defined that the administrator types to enter ena...

Page 59: ...S enable Password jane CES configure CES config enable password jane The enable password you have chosen is the same as your current password This is not recommended reenter the enable password This f...

Page 60: ...password userpassword no exception backup 1 2 3 default exception backup Parameters 1 2 3 The number of backup FTP servers being modified defined undefined backup_ip_add The IP address for backup ser...

Page 61: ...vity VPN Switch Command Line Interface Command mode Global configuration Next command mode Global configuration Related commands show exception backup Example CES config exception backup 1 12 0 44 129...

Page 62: ...it any configuration mode or to close an active Telnet session if they use the command when in User Exec mode Syntax exit Parameters None Default None Command mode Available in all command modes Next...

Page 63: ...rence for the Contivity VPN Switch Command Line Interface Related commands end Example CES config exit CES exit CES This example shows a user starting in Global configuration mode and using the exit c...

Page 64: ...t in a command by entering a question mark If nothing matches the Help list is empty and you must back up until entering a question mark shows the available options Two styles of Help are provided 1 F...

Page 65: ...ost address master slave1 slave2 port ssl port port_number bind dn bind_dn_value bind password bind_password no host master slave1 slave2 Parameters address The IP address for the LDAP server Can be a...

Page 66: ...s access bind password A password must be used during connection to the FTP server Default Defaults to a non SSL connection made to port 389 If ssl port is specified without providing a port number va...

Page 67: ...o the name in the DNS server to identify the management address of the switch that is located on the private network Syntax hostname string Parameters string The DNS name to assign to the switch This...

Page 68: ...CLI Command Summary 311645 A Rev 00 Related commands no hostname ip domain name ip name server interface management Example CES config hostname MarketingCES This example assigns the name MarketingCES...

Page 69: ...stemfor the services such as HTTP FTP SNMP and Telnet The IP address cannot be used for any other purpose Syntax interface management ip address address exit Parameters address The IP address that is...

Page 70: ...Rev 00 Related commands ip http server Example CES config interface management Router config if ip address 10 0 3 33 Router config if exit This command assigns the IP address 10 0 3 33 to the switch...

Page 71: ...r to enable or disable management of the switch using a Web browser If HTTP management is disabled the switch can still be managed using the Nortel Networks CLI Syntax ip http server no ip http server...

Page 72: ...mmand Summary 311645 A Rev 00 Related commands interface loopback Example CES config no ip http server This command disables management of the switch using a Web browser The switch can still be config...

Page 73: ...completed and the session is then terminated without any warning or message to the Telnet user If the session ID given by the administrator is not valid or is not for a Telnet session the command disp...

Page 74: ...ES who 121 From 116 102 4 45 213 From 116 102 12 23 217 From 116 102 12 23 CES kill 213 CES who 121 From 116 102 4 45 217 From 116 102 12 23 This example shows a series of Telnet sessions active on th...

Page 75: ...top Parameters help If present the ldap command is not Executed but some Help about the command is displayed on the terminal export Export the contents of the LDAP database to the named LDIF file The...

Page 76: ...ally running Default None Command mode Global configuration Next command mode Global configuration Warnings LDAP server is currently running LDAP server is already running LDAP server is already stopp...

Page 77: ...LDAP server can be internal to the switch being administered or can be an external server that is shared by one or more Contivities Syntax ldap server internal external Parameters internal Enter LDAP...

Page 78: ...1 The prompt returns after the backup is completed then the administrator restarts the LDAP server CES config ldap server external Router config ldap domain delimiter suffix Router config ldap suffix...

Page 79: ...by one or more Contivities Syntax ldap server source internal external Parameters internal Use the internal LDAP server for switch configuration data external Use the external LDAP server for switch c...

Page 80: ...CLI Command Summary 311645 A Rev 00 Warnings External LDAP server not configured Cannot reach external LDAP server Related commands ldap server show ldap server Example See the example for the ldap se...

Page 81: ...inistrator to use the Bulk Load facility to Execute a command file that has been previously copied to the switch using FTP The commands in the file can configure various settings on the switch This fa...

Page 82: ...82 Chapter 2 CLI Command Summary 311645 A Rev 00 Prerequisites The LDAP server must be running Related commands ldap Example CES config load ide0 system test cmd...

Page 83: ...rning is displayed if the level set with this command does not agree with the level required for syslog message forwarding as set in the logging facility syslog command Syntax logging history alerts e...

Page 84: ...tion Warnings Does not agree with syslog forwarding settings Related commands show logging history logging facility syslog show logging syslog Example CES config logging history errors This command se...

Page 85: ...n earlier versions of the switch software This command logs the administrator off the switch and terminates the Telnet session It is equivalent to using the exit command in User Exec mode Syntax logou...

Page 86: ...t are 10KB or smaller If the user tries to use more on a file that is larger than 10KB an error message is displayed Syntax more ascii binary file Parameters ascii Display file in ASCII binary Display...

Page 87: ...are in the range decimal 32 space to decimal 126 inclusive plus the characters t decimal 9 n decimal 10 and r decimal 13 Non printable characters are represented by a period in the ASCII part if the b...

Page 88: ...0 0 Permit Key 2 0 0 0 255 0 0 Permit AccessLst abc Rule 2 0 0 0 255 0 0 Permit SourceAddr 2 0 0 0 AccessLst bar AccessLst bar Name bar AccessLst bar Rule 1 2 0 0 255 255 0 0 0 AccessLst bar Rule 1 2...

Page 89: ...g facility It sends three 100 byte ping packets The ping command does not recognize DNS names with hyphens Syntax ping host address scr_host scr_address Parameters address The IP address of system to...

Page 90: ...s 64 bytes from 122 104 11 112 icmp_seq 1 time 16 ms 64 bytes from 122 104 11 112 icmp_seq 2 time 16 ms 122 104 11 112 PING Statistics 3 packets transmitted 3 packets received 0 packet loss round trip...

Page 91: ...ch operates normally In Safe mode the HTTP or FTP traffic is allowed No other VPN traffic is allowed through the secure management tunnel or the switch Syntax reload power off restart boot safe boot n...

Page 92: ...occurs disable after restart Logins should not be permitted after the reboot This is intended to support system maintenance tasks after a reboot text If present this explains the reason for a reload c...

Page 93: ...ec Prerequisites A named configuration file can only be used after it has been created Warnings Any warnings cause the command to fail The user must reenter the command after correcting the parameters...

Page 94: ...eboots the switch from ide0 using the factory installed defaults and disabling logins after the reboot to allow for system maintenance Reason is to Upgrade software The user must press CR or any subse...

Page 95: ...latest factory config name disable logins disable after restart text Parameters hh mm The time at which the shutdown will commence Values are based on a 24 hour clock If this time has already passed...

Page 96: ...rmitted after the reboot This is intended to support system maintenance tasks after a reboot text If present this gives the reason for a reload command This reason will be displayed on the Admin Shutd...

Page 97: ...s A named configuration file can only be used after it has been created Warnings Any warnings cause the command to fail The user must reenter the command after correcting the parameters in error Confi...

Page 98: ...roceed with reload confirm y This reboots the switch from ide0 using the latest configuration and disabling logins after the reboot to allow for system maintenance Reason is to Backup LDAP database Co...

Page 99: ...g reload command There can only be one pending reload at any given time When a reload has been canceled the details for the pending reload are displayed Syntax reload cancel Parameters None Default No...

Page 100: ...ry 311645 A Rev 00 Next command mode Privileged ExecPrerequisites A reload must already have been scheduled Warnings No currently scheduled reload operation Related commands reload reload at reload in...

Page 101: ...oad Explanation Backup LDAP database After Shutdown Restart Disable New Logins No Disable Logins after Restart Yes Boot Mode Normal Config File latest Boot Drive ide0 This example schedules a reload c...

Page 102: ...ide1 config file latest factory config name disable logins disable after restart text Parameters hh mm The hours and minutes that must pass before the shutdown will start The allowed range is 00 01 t...

Page 103: ...Logins should not be permitted after the reboot This is intended to support system maintenance tasks after a reboot text If present this explains the reason for a reload command This reason will be d...

Page 104: ...file can only be used after it has been created Warnings Any warnings cause the command to fail The user must reenter the command after correcting the parameters in error Configuration file does not...

Page 105: ...latest Boot Drive ide1 Proceed with reload confirm y This example command powers down the switch in eight hours time When the switch is powered up again it will reboot from ide1 Further logins are di...

Page 106: ...nnected Syntax reload no sessions power off restart boot safe boot safe boot drive ide0 ide1 config file latest factory config name disable logins disable after restart text Parameters no sessions Ind...

Page 107: ...ogins should not be permitted after the reboot This is intended to support system maintenance tasks after a reboot text If present this explains the reason for a reload command This reason will be dis...

Page 108: ...ation file can only be used after it has been created Warnings Any warnings cause the command to fail The user must reenter the command after correcting the parameters in error Configuration file does...

Page 109: ...ormal Config File latest Boot Drive ide0 Proceed with reload confirm y This example reboots the switch from ide0 using the latest configuration when there are no sessions connected to the switch New s...

Page 110: ...mmand can be performed Syntax server backup filename Parameters filename The filename to which the LDAP database will be backed up The filename can have a maximum of 8 characters The file is stored in...

Page 111: ...The internal LDAP server must be stopped before a backup command can be performed Warnings LDIF File xxxxxxxx already exists The LDAP server must be stopped before performing a backup Cannot backup L...

Page 112: ...er backup jan102000 Server backup started to file ide0 system slapd ldif jan102000 Server backup completed Router config ldap server start Router config ldap exit This example shows the internal LDAP...

Page 113: ...erformed The previous contents of the LDAP database is lost Syntax server restore filename Parameters filename The name of the LDIF file that should be restored into the LDAP database The filename can...

Page 114: ...ver must be stopped before a restore command can be performed Warnings LDIF file filename not found The LDAP server must be stopped before performing a restore Cannot restore LDAP server backup in pro...

Page 115: ...config ldap server restore jan031999 Server restore started from file ide0 system slapd ldif jan031999 Server restore completed Router config ldap server start Router config ldap exit This example sho...

Page 116: ...er it has been stopped Syntax server start Parameters None Default None Command mode LDAP server configuration Response The switch outputs a confirmation message once the LDAP server has been restarte...

Page 117: ...n progress Related commands ldap server internal server backup server restore server stop Example CES config ldap server internal Router config ldap server start The LDAP server has started Router con...

Page 118: ...ne Default None Command mode LDAP server configuration Response The switch outputs a confirmation message when the LDAP server has stopped Next command mode LDAP server configuration Prerequisites The...

Page 119: ...server start Example CES config ldap server internal Router config ldap server stop The LDAP server has stopped Router config ldap exit This example shows the internal LDAP server being stopped Comme...

Page 120: ...nd displays the entries in the ARP table Syntax show arp Parameters None Default None Command mode Privileged Exec Next command mode Privileged Exec Related commands clear arp cache Example CES show a...

Page 121: ...eption backup This command shows the current backup FTP servers that are defined for the switch Syntax show exception backup Parameters None Default None Command mode Global configuration Response Thi...

Page 122: ...122 Chapter 2 CLI Command Summary 311645 A Rev 00 Next command mode Global configuration Warnings No backup FTP servers defined Related commands exception backup...

Page 123: ...rname ContivityMainAdmin CES config no exception backup 3 CES config show exception backup Backup FTP Server 1 Server Address 12 230 111 10 Backup Filepath dev1 CES Backup Backup Interval 12 hours Ser...

Page 124: ...nd details of available space remaining Syntax show file systems Parameters None Default None Command mode User Exec Next command mode User Exec Example CES show file systems File Systems Size b Free...

Page 125: ...Command Line Interface show flash contents This command shows the current settings that are in flash for the switch This is equivalent to the Flash Contents button display on the Status Statistics Web...

Page 126: ...126 Chapter 2 CLI Command Summary 311645 A Rev 00 Command mode User Exec Next command mode User Exec Related commands show version...

Page 127: ...Allow L2TP tunnels True Allow IPsec tunnels True Allow QoS internal True Allow QoS admission True Allow RSVP True Allow RADIUS authentication True Allow LDAP authentication True Allow NT Domain authen...

Page 128: ...trator to check on areas that may cause problems in the future as well as see where problems have been detected already Syntax show health alerts warnings disabled all Parameters alerts Causes conditi...

Page 129: ...Next command mode Privileged Exec Related commands audible alarm Example CES show health warnings Alert LAN on slot 2 Interface 1 Device fei1 down Alert Auto backup servers Can t backup to 12 33 44 12...

Page 130: ...s lists The CLI accepts names up to 50 characters long The maximum length of the CLI name is 50 characters not 64 as it is in the browser based GUI Syntax show ip access list Parameters access list Th...

Page 131: ...Next command mode User Exec Example CES show ip access list name Standard IP access list TEST permit 2 2 0 0 wildcard bits 255 255 0 0 exact Standard IP access list TEST1 deny 3 3 0 0 wildcard bits 25...

Page 132: ...ion about OSPF routing and the state of OSPF routing processes Syntax show ip ospf Parameters None Default None Command mode User Exec Response See the example for output from this command Next comman...

Page 133: ...umber of external LSA 0 Link State Update Interval is 00H 30M Same for all areas Link State Age Interval is 01H 00M Same for all areas Number of Areas in this router is 3 3 Normal 0 Stub 0 nssa Area 0...

Page 134: ...atabase for the switch It also delivers information about OSPF link state advertisements Syntax show ip ospf database Parameters None Default None Command mode User Exec Response See the example for o...

Page 135: ...nk States Area 0 0 0 0 Link State ID Adv Router Age Seq Nbr CheckSum Links 15 62 250 250 15 62 250 250 1041 0x80000011 0xecf5 3 10 254 1 36 10 254 1 36 1001 0x8000001d 0xf39a 6 Displaying Summary Link...

Page 136: ...interface This command displays information about interfaces that are configured for OSPF routing Syntax show ip ospf interface Parameters None Default None Command mode User Exec Response See the ex...

Page 137: ...ands show ip ospf show ip ospf database show ip ospf neighbor Example CES show ip ospf interface IP Address CId Area ID Type State Cost Priority Router 15 60 150 150 17 0 0 0 0 BCAST DR 1 1 10 254 1 3...

Page 138: ...nformation about OSPF neighbors on a per interface basis Syntax show ip ospf neighbor Parameters None Default None Command mode User Exec Response See the example for output from this command Next com...

Page 139: ...namic Neighbors This example shows the IP address router id and state of the neighbors RouterID Pri State Dead Time Address Interface 10 0 62 182 1 FULL DR 00 00 20 10 0 62 182 10 0 4 41 10 0 16 36 1...

Page 140: ...00 show ip rip This command displays general information about RIP routing and the state of RIP routing process and status Syntax show ip rip Parameters None Default None Command mode User Exec Respon...

Page 141: ...nabled Trusted Neighbor Disabled Rip Domain 0 Triggered Update Off RouteChange 0x0 Query 0x0 Local Net 0x00000000 Mask 0x00000000 ClassMask 0x00000000 LocalCircuit 1 Node Wide Stats rn_rtid 0x00000000...

Page 142: ...command provides information related to the RIP database for the switch It also delivers information about routes owned and imported by RIP Syntax show ip rip database Parameters None Default None Co...

Page 143: ...ands show ip rip show ip rip interface show ip rip database Example CES show ip rip database This example shows routes owned by an RIP database Table 6 Circuit Address Mask Owner Cost Metric GW 1 192...

Page 144: ...ormation about interfaces that are configured for RIP routing Syntax show ip rip interface Parameters None Default None Command mode User Exec Response See the example for output from this command Nex...

Page 145: ...ce Example CES show ip rip interface This example shows the state of the configured interface Ip 10 0 15 146 Subnet 255 255 0 0 RipEnabled Yes IntfState UP Auth None Type ETH Cid 1 RxMode V2 TxMode V2...

Page 146: ...e RTM routing table Each line of the output has the following format P TT a a a a n ad rm via nh nh nh nh d hh mm ss CircId nFormat CodeUsage P Authoring protocol TT Type a a a a Address n Number of b...

Page 147: ...oute address mask Parameters If no parameters are specified all of the current contents are displayed address Display a specific host a a a a mask Display a specific route to address a a a a net mask...

Page 148: ...0 0 1 0 00 58 36 CircId 1 D 10 0 4 41 32 0 0 via 127 0 0 1 0 00 58 36 CircId 1 D 11 0 0 0 16 0 0 via 11 0 4 41 0 00 58 36 CircId 9 D 11 0 4 41 32 0 0 via 127 0 0 1 0 00 58 36 CircId 9 CES show ip rou...

Page 149: ...Switch Command Line Interface show ip route policies This command displays the contents of route policies in the routing protocol Syntax show ip route policies Parameters None Default None Command mod...

Page 150: ...ommand mode User Exec Related commands show ip route Example CES show ip route policies ospf 0 interface 10 0 3 41 distribute list in TEST This example shows the accept route policy in OSPF on the int...

Page 151: ...nterface show ip traffic This command displays statistics about IP traffic including packets sent and received and various errors Syntax show ip traffic Parameters None Default None Command mode User...

Page 152: ...ments 0 noroute 125 badoptions 0 badversion 0 zero src addr 3 src dst addr 0 src addr error 0 dest addr error 0 mgmt filterdrops 6127 intf filterdrops 0 route filterdrops 0 qosdrops 0 ICMP 27 calls to...

Page 153: ...ate acks 0 ack for unsent data 14578 packets 1713926 bytes received in sequence 0 completely duplicate packet 0 byte 0 packet with some dup data 0 byte duped 117 out of order packets 0 byte 0 packet 0...

Page 154: ...displays information about VRRP status Syntax show ip vrrp interface Parameters interface Displays information about VRRP status of the specified interface Default None Command mode User Exec Respons...

Page 155: ...eempt Advertisement interval 1 IP Address 10 0 20 186 Became master 1 times sent 0 Zero prio pkts recv d 0 Sent 436 advertisements recv d 0 No errors Virtual router 2 Current state is Backup priority...

Page 156: ...r the internal and the external LDAP servers external Displays configuration and state for the external LDAP servers internal Displays configuration and state for the internal LDAP server Default If n...

Page 157: ...DN cn Marketing Base Master Host Base DN ou Marketing o Nortel c US Master Host SSL Encrypt None Slave1 Host Address 16 211 17 100 Slave1 Host SSL Port 636 Slave1 Host Bind DN cn Marketing Slave1 Hos...

Page 158: ...isplayed year The year for which the configuration log is to be displayed A four digit value normal Display normal events including user and system interactions that indicate switch activity urgent Di...

Page 159: ...aults to today If the year portion of the date is omitted it defaults to the current year The display level defaults to normal Command mode Privileged Exec Response See the example for output from thi...

Page 160: ...le setting IpxIntfOmCls IPXPublicAddress N A 09 54 31 tSerialConfig 0 Flash AdminUid changed from admin to sysadmin by use 09 54 31 tSerialConfig 0 Flash AdminPassword changed by user 09 54 31 tSerial...

Page 161: ...s should only be used for troubleshooting as using them can significantly impact performance of the switch Once you set these options they remain on until cleared by a subsequent show logging events c...

Page 162: ...eged Exec Response See the example for output from this command Next command mode Privileged Exec Warnings If the user chooses to track dropped IP or IPX packets a confirmation is requested due to the...

Page 163: ...ter admin authenti 09 02 1999 12 04 03 0 Security 11 Session LOCAL admin 2877 server right MANAGE 09 02 1999 12 04 03 0 Security 11 Session LOCAL admin 2877 user group right MAN 09 02 1999 12 04 04 0...

Page 164: ...3739424 Prv 00 Mgmt filter drop src 0x8f0f010a dst 09 02 1999 12 17 54 0 IPvfy 03739424 Prv 00 Mgmt filter drop src 0x8c10000a dst 09 02 1999 12 17 57 0 PaceJob 0 00 Calling 0x00ca012c passing 011b7b2...

Page 165: ...s long example shows the amount of detail that is output by this command depending on the options chosen The second to last command disables tracking of IP drops and clears the event log so that no ou...

Page 166: ...ogging history Logging history level is errors This example shows the output for a switch where the logging history is still the default value show logging security This command displays the contents...

Page 167: ...Display events that an administrator should be aware of immediately In the output these events are marked with an asterisk Could indicate potential security or access problems Also display normal even...

Page 168: ...Forcing admin to re supply userid 11 26 11 tEvtLgMgr 0 Security 12 Session LOCAL admin 2875 master admin authen 11 26 11 tEvtLgMgr 0 Security 12 Session LOCAL admin 2875 Management logged 11 48 39 tE...

Page 169: ...yslog This command displays the contents of the system log The system log contains all system events that are considered significant enough to be written to disk including those displayed in the secur...

Page 170: ...ort personnel Also display normal and urgent events all Display events for use of Nortel Networks support personnel used for troubleshooting the switch Includes every event that the switch generates A...

Page 171: ...ion LOCAL admin 2880 master admin authen 15 09 12 tEvtLgMgr 0 Security 12 Session LOCAL admin 2880 Management logged 15 27 33 tEvtLgMgr 0 Security 13 Management Forced Admin User Off Due to Timeo 15 2...

Page 172: ...through the output one screen at a time or quit and abandon the remainder of the output show reload This command displays information about any pending shutdowns that are scheduled on the switch This...

Page 173: ...ad at reload in reload no sessions Example CES show reload Reload scheduled in 1 hour 45 minutes Explanation Load latest software patches After shutdown Restart Current logins Enabled Reboot logins Di...

Page 174: ...ns details Show detailed information for the connections ipsec Show information for IPSec connections l2f Show information for L2F connections l2tp Show information for L2TP connections pptp Show info...

Page 175: ...Example CES show sessions This command shows the administrator connections currently made to the switch Details include the number of current sessions as well as who is currently logged in to each ses...

Page 176: ...uild Date Nov 18 2000 11 31 50 System Serial Number 12012 MAC Address 00 E0 7B 00 00 C0 BIOS 1 00 02 DI0 11 05 9612 40 54 bftarget uptime 016 days 01 hours 14 minutes Current Configuration File ide0 s...

Page 177: ...rs the SysContact field in the MIB II MIB This field contains the name and contact information of the contact person for this switch Syntax snmp server contact text no snmp server contact Parameters t...

Page 178: ...g too long must be 255 characters or less Related commands snmp server location text snmp server name text Example CES config snmp server contact Dial John Connolly at 1 800 555 1212 x 123 This exampl...

Page 179: ...field in the MIB II MIB This field contains the physical location for this switch Syntax snmp server location text no snmp server location Parameters text String containing the physical location of t...

Page 180: ...y 311645 A Rev 00 Related commands snmp server contact text snmp server name text Example CS config snmp server location Building 400 4th Floor Closet A122 This example sets the location string to Bui...

Page 181: ...snmp server name This command sets or clears the SysName field in the MIB II MIB This field contains an administratively assigned name for this switch Syntax snmp server name text no snmp server name...

Page 182: ...bal configuration Warnings Name string too long must be 255 characters or less Related commands snmp server contact text snmp server location text Example CES config snmp server name Contivity Chester...

Page 183: ...for the switch It allows the administrator to remove the domain name suffix from the user ID before sending the user ID to the LDAP server for authentication Syntax suffix remove no suffix remove Par...

Page 184: ...er config ldap no suffix remove Router config ldap domain delimiter suffix Router config ldap exit In this example the delimiter between the user ID and the domain name is set to the character and the...

Page 185: ...ems The trace command does not recognize DNS names with hyphens Syntax trace ip host address hops number wait timeout Parameters host The trace packets to the system identified by this host name addre...

Page 186: ...2 15 1 router a fred corp com 195 120 1 6 1000 msec 8 msec 4 msec 2 filter 1 jane fred com 195 120 16 2 8 msec 8 msec 8 msec 3 core2 seattle cw net 204 70 9 120 8 msec 4 msec 4 msec 4 internap seattle...

Page 187: ...e listed by session ID The session ID values are fixed for the life of a session Syntax who ip_address Parameters ip_address A dotted IP address If present limits the output to Telnet sessions that ar...

Page 188: ...188 Chapter 2 CLI Command Summary 311645 A Rev 00 Illegal IP address Related commands kill show sessions...

Page 189: ...tions tunnel types and so forth The bulk load command is executed via the telnet interface by using the LOAD command The LOAD command has the following syntax LOAD name of file As the command executes...

Page 190: ...The file is located in SYSTEM COMMAND directory on the boot disk The command file has the following characteristics The command file must conform to the 8 3 eight character prefix the character suffix...

Page 191: ...ith different releases installed For example the following command file may be executed on a switch installed with versions 2 50 2 60 and 3 00 FILE_FORMAT 1 0 COMMAND ONE END FILE_FORMAT 2 0 COMMAND T...

Page 192: ...s User commands allow an administrator to add or delete user records They also allow an administrator to add or delete user groups The supported user commands are ADD_USER DELETE_USER RESET_USER_CERTS...

Page 193: ...ress mask IPSEC_UID IPSec User ID Required if not using certificates IPSEC_PSW IPSec password Required if not using certificates IPSEC_SUBJECTDN Subject distinguished name Required if using certificat...

Page 194: ...ME User name Required END Add Group The ADD_GROUP command is used to add a group to the switch database COMMAND ADD_GROUP GROUP Group name Required END Modify Group The MODIFY_GROUP command is used to...

Page 195: ...Idle timeout period hh mm ss format FORCED_LO_TIME Forced logout timeout hh mm ss format SPLIT_TUN Split tunneling Enable Disable SPLIT_TUN_NET Split tunnel network name ADDR_POOL Address pool name or...

Page 196: ...ESP_NULLSHA1 ESP NULL Authentication Only with SHA1 Integrity Enable Disable ESP_NULLMD5 ESP NULL Authentication Only with MD5 Integrity Enable Disable AH_SHA1 AH Authentication Only HMAC SHA1 Enable...

Page 197: ...NS Secondary DNS address SEC_WINS Secondary WINS address END Purge Group The PURGE_GROUP command is used to delete all users in a specified group If you do not specify a group the command purges all u...

Page 198: ...ete branch office connections including control tunnel connections These commands also allow administrators to add and delete branch office groups The supported branch office commands are ADD_CONNECTI...

Page 199: ...nection name Required SYSTEM_IP Contivity management IP address Required for Restricted tunnel LOCAL_ENDPOINT Local interface IP address Required REMOTE_ENDPOINT Remote interface IP address Required R...

Page 200: ...ault Disable IPSec Authentication IPSEC_PSW IPSec password Required if not using certificates IPSEC_SUBJECTDN Subject distinguished name Required if using certificates and not IPSEC_ALTNAME IPSEC_ALTN...

Page 201: ...types Required for PPTP L2TP PEER_PSW Tunnel authentication peer password PPTP L2TP tunnel types COMPRESSION PPTP L2TP compression Enable Disable PPTP L2TP tunnel types ENC_STATE_MODE PPTP L2TP Compre...

Page 202: ...ME Name of existing Branch Office connection to modify Required SUBNET Remote Network subnet Required MASK Remote Network subnet mask Required REM_NET_COST Remote network cost Default 10 REM_NET_STATE...

Page 203: ...ecified A group name is required COMMAND ADD_BRANCHGROUP GROUP Group name Required END Modify branch office group The MODIFY_BRANCHGROUP command is used to modify existing branch office groups All val...

Page 204: ...IPSEC Attributes ESP_3SHA1 ESP Triple DES with SHA1 Integrity Enable Disable ESP_3MD5 ESP Triple DES with MD5 Integrity Enable Disable ESP_56SHA1 ESP 56 bit DES with SHA1 Integrity Enable Disable ESP...

Page 205: ...Export default routes metric Enable Disable EXPORT_STATIC_ROUTE Export static routes metric Enable Disable EXPORT_BO_STATIC_ROUTE Export branch office static routes metric Enable Disable EXPORT_OSPF_...

Page 206: ...of these values OSPF_PASS OSPF Authentication Password MD5_PASS OSPF MD5 password MD5_KEY OSPF MD5 Key END Contivity VPN Switch configuration commands Switch configuration commands allow the administ...

Page 207: ...d END The DELETE_NETWORK command is used to delete an existing network definition COMMAND DELETE_NETWORK NET_NAME Name of existing network to delete Required END The MODIFY_NETWORK command is used to...

Page 208: ...pe Static Pooled Port Required IN_START_IP Internal starting IP address Required IN_END_IP Internal ending IP address Required EX_START_IP External starting IP address Required EX_END_IP External endi...

Page 209: ...ternal starting IP address Required IN_END_IP Internal ending IP address Required EX_START_IP External starting IP address Required EX_END_IP External ending IP address Required for Pooled NAT type EN...

Page 210: ...sting address pool COMMAND DELETE_POOL IP_START Starting IP address Required IP_END Ending IP address Required END Filters Several bulk load commands are used to create and configure filters and filte...

Page 211: ...Disable SNMP_SVC SNMP local service Enable Disable FTP_SVC FTP local service Enable Disable TELNET_SVC TELNET local service Enable Disable PING_SVC Ping local service Enable Disable RADIUS_SVC Radius...

Page 212: ...on COMMAND CREATE_RULE RULE_NAME Rule name Required ADDR_NAME Address Name Default Any ACTION Rule action Permit Deny Default Deny DIRECTION Direction Inbound Outbound Default Inbound PROTOCOL Protoco...

Page 213: ...EATE_ADDRESS ADDR_NAME Address Name Required IP_ADDR IP Address Required MASK Address mask Required END The CREATE_PORT command creates a new port definition to be used by a filter rule COMMAND CREATE...

Page 214: ...Enable FTP_PSW Password for FTP host Default FTP_INTERVAL Time between backups hours Default 5 FTP_PATH Path where files are stored Default FTP_SERVER FTP Server 1 2 3 Default 1 END The DELETE_FTPSER...

Page 215: ...port Default 514 SLOG_ENABLE Enable Syslog Server Default Enable SLOG_SERVER Syslog Server 1 2 3 4 Default 1 END The DELETE_SYSLOG command is used to remove an existing system log forwarding server CO...

Page 216: ..._COMMUNITY SNMP Community name SNMP_ENABLE Enable SNMP Host Default Enable END The DELETE_SNMPHOST command is used to remove an existing SNMP Get or Trap host COMMAND DELETE_SNMPHOST SNMP_TYPE Get Tra...

Page 217: ...re used to configure DHCP CONFIG_REMOTE_POOL CONFIG_DHCP DELETE_DHCP The CONFIG_REMOTE_POOL command is used to set the type of remote pool used by the switch either DHCP or Address Pools COMMAND CONFI...

Page 218: ...ng of certain features will be supported in bulkload version 3 0 The following two commands allow the user to enable and disable a paid feature on the CES ENABLE_PAID_FEATURE DISABLE_PAID_FEATURE The...

Page 219: ...y using the DELETE_USER or DELETE_CONNECTION command lessens the load on the LDAP server but it may increase the time required to execute the commands Required fields for user and branch records You m...

Page 220: ...aving out the Base specifier For example Base Engineering is specified as Group ou Engineering Base Engineering Software is specified as Group ou Software ou Engineering Base Field Boston Sales is spe...

Page 221: ...2 D DHCP 217 disable 54 documentation map 28 E enable 56 enable password 58 exception backup 60 exit 62 H help 64 host address 65 hostname 67 I interface management 69 ip http server 71 K kill 71 L ld...

Page 222: ...se 142 show ip rip interface 144 show ip route 146 show ip route policies 149 show ip traffic 151 show ip vrrp 154 show ldap server 156 show logging config 158 show logging events 161 show logging his...

Reviews:

No comments

Brands by name

Popular brands

Load more brands