3Com Router 3012 страница 71 Скачать руководство пользователя

Страница: 71 / 101

4.5 ntp-service access

Syntax

ntp-service access

{

query

synchronization

server

peer

}

acl-number

undo ntp-service access

{

query

synchronization

server

peer

}

View

System view

Parameter

query

: Assigns the controlled query right.

synchronization

: Allows only the server to access.

server

: Allows the server and query to access.

peer

: Full access right.

acl-number

: IP ACL number. The basic ACL can be numbered in the range of 1 to 99.

Description

Using the

ntp-service access

command, you can control the access to the service

provided by the local device. Using the

undo ntp-service access

command, you can

remove the configured access rights.

By default, there is no access restriction.

This command can be used to control the access to the NTP services of the local

device. It just provides a minimum security protection, however. To obtain much

reliable security, you must configure authentication. Whenever receiving an access

request, the router will perform the match operation to find out the access right

assigned to the requestor in the descending order of access rights, i.e.,

peer

server

synchronization

, and

query

. The match found first will be the service access right

assigned to the requestor.

Example

Assign the

peer

access right to the peers in ACL 76.

[3Com]

ntp-service access peer 76

Assign the

synchronization

access right to the peers in ACL 28.

[3Com]

ntp-service access synchronization 28

3Com Router Command Reference Guide Addendum for V1.2

Содержание Router 3012

Страница 1: ...3ComRouter Command Reference Guide Addendum for V1 20 http www 3com com Part No 10014302 Published January 2004...

Страница 2: ...upport 3com com infodeli tools routers R3000Install pdf Download the Router 5000 Installation Guide from http support 3com com infodeli tools routers 5000Install pdf Download the 3Com Router Command R...

Страница 3: ...are configurable The sum of the bandwidths assigned to the assured forwarding and expedited forwarding classes of the same policy must be smaller than the available bandwidth of the interface applied...

Страница 4: ...the CIR action Action conducted to a packet including discard Drop the packet remark dscp pass new dscp Set new dscp and transmit the packet It ranges from 0 to 63 remark prec pass new precedence Set...

Страница 5: ...ugging qos Syntax debugging qos cbq af be ef class cq pq wfq interface type number undo debugging qos cbq af be ef class cq pq wfq interface type number View All views Parameter cbq af Enable the debu...

Страница 6: ...type number View All views Parameter interface type Interface type number Interface number Description Using the display qos cbq interface command you can browse the class based queue configuration i...

Страница 7: ...the class information concerning router configuration Example 3Com display qos class QoS Class Configuration Information Class 3COM Operator Logical AND Rules If match ip precedence 5 Class database...

Страница 8: ...e 3Com display qos policy QoS Policy Configuration Information Policy test Class default class Behavior s none Class AF Behavior s Committed Access Rate CIR 8000 Bps CBS 15000 Bit EBS 0 Bit Conform Ac...

Страница 9: ...iews Parameter interface type Interface type number Interface number Description Using the display qos policy interface command you can view configuration information and operating status of the polic...

Страница 10: ...ded 0 0 Packets Bytes Class AF Matched 0 0 Packets Bytes Operator Logical AND Rule s If match ACL 131 If match ACL 101 If match inbound interface Ethernet0 Behavior s Traffic Police CIR 8000 bps CBS 1...

Страница 11: ...Packets Bytes Rule s If match any Behavior s none Class AF Matched 0 0 Packets Bytes Operator Logical AND Rule s If match ACL 13 If match ACL 101 If match inbound interface Ethernet0 Behavior s Commit...

Страница 12: ...e the configuration The command can not be used together with queue af queue length and wred in class view This command is unavailable for default class For the related command see qos policy qos clas...

Страница 13: ...ed qos gts command ineffective If this command is frequently configured on classes of the same policy the last configuration will overwrite the previous ones For the related command see qos policy qos...

Страница 14: ...a class to match ACL101 3Com qos class class1 3Com qosclass class1 if match acl 101 1 11 if match any Syntax if match logic not any undo if match logic not any View Class view Parameter logic not Do...

Страница 15: ...match rule for a QoS class Using the undo if match class command you can delete the match rule for the QoS class This configuration method is the only one to match the traffic with both the match all...

Страница 16: ...match logic not criteria undo if match logic not criteria View Class view Parameter criteria Match rule of a class which can be acl any class map destination mac inbound interface ip precedence dscp...

Страница 17: ...input interface match rule of a class When defining a match rule the specified interface must be existent Supported interface types Ethernet interface serial interface Tunnel interface virtual templat...

Страница 18: ...be deleted Up to 8 DSCP values can be configured by a command If several DSCPs are configured with the same value they will considered as one by default The relation between different DSCP values is O...

Страница 19: ...ts with the precedence value as 1 or 6 3Com qos class class1 3Com qosclass class1 if match ip precedence 1 6 1 17 if match mac address Syntax if match logic not destination mac source mac mac address...

Страница 20: ...ource MAC address as 0050 ba27 bed2 3Com qos class class2 3Com qosclass class2 if match source mac 00 50 ba 27 be d2 1 18 if match protocol Syntax if match logic not protocol ip undo if match logic no...

Страница 21: ...delete the port match rule of RTP This command is used to match RTP packets in the specified RTP port range that is match the packets of even UDP port numbers between starting port number and end port...

Страница 22: ...ic control mechanism for the lower layer queue and the number of packets sent to the lower layer interface queue can be controlled according to the number of tokens In normal conditions it is suggeste...

Страница 23: ...e available bandwidth on the interface af ef wfq and gts cannot be configured for inbound policies The application rule of QoS policy in interface view is as follows On a common physical interface or...

Страница 24: ...mmand you can define a QoS policy and enter class view Using the undo qos class command you can delete a class By default the relation is logic and class name cannot be set to default class For the re...

Страница 25: ...nd is usually configured on these interface Note When the actual available bandwidth the maximum bandwidth multiplied by the percentage of reserved bandwidth of an interface is smaller than the sum of...

Страница 26: ...pct percent undo qos reserved bandwidth View Interface view Parameter pct percent Percentage of reserved bandwidth in available bandwidth ranging from 1 to 100 By default it is 75 Description Using q...

Страница 27: ...me and can be set to default class Description Using qos class command you can configure a class in QoS policy Using undo qos class command you can delete the specified class For the related command s...

Страница 28: ...th command the latter will be deleted at the same time After configuring queue length if you enable random drop with the wred command the former will be canceled By default tail drop is configured For...

Страница 29: ...alue as 6 3Com qos policy 3Com 3Com qospolicy 3Com qos class database 3Com qospolicy c 3Com database remark ip dscp 6 1 29 remark ip precedence Syntax remark ip precedence value undo remark ip precede...

Страница 30: ...Description Using wfq command you can configure the default class to use WFQ Using undo wfq command you can delete the configuration This command is available for default class only In addition it ca...

Страница 31: ...nnot be configured at a time When canceling this configuration the WRED related configuration will be deleted When a policy configured with wred is applied on an interface the previous WRED configurat...

Страница 32: ...of WRED Using undo wred ip dscp command you can delete the configuration This command can be used only after the wred command is used to enable the WRED drop mode based on DSCP The configuration of wr...

Страница 33: ...drop proportion denominator of WRED Using undo wred ip precedence command you can remove the configuration This command can be used only after the wred command has been used to enable WRED drop mode...

Страница 34: ...this command you must have configured the af command and have used the wred command to enable the WRED discarding mode When removing the wred configuration the configuration of wred weighting constan...

Страница 35: ...nable AAA accounting debugging and display the AAA accounting debugging information packet Enable AAA packets debugging and print the details of AAA packets user user name User name which is a printab...

Страница 36: ...lay hwtacacs accounting Syntax display hwtacacs accounting verbose View All views Parameter verbose Display the detailed accounting information of AAA users If this argument has been configured the in...

Страница 37: ...ing Statistics Accounting Packet Wait Queue Length 0 Accounting type Login Starts 2 Stops 0 realtimes 0 Active 0 Drops 0 Accounting type Network Starts 0 Stops 0 realtimes 0 Active 0 Drops 0 Accountin...

Страница 38: ...quests Outbound Provide all the outbound connection information Telnet rlogin PAD generated by the NAS Command Display the statistics of all the commands at the specified level System Display the stat...

Страница 39: ...ics Example Display the information interacted between the current host and the TACACS server Router display hwtacacs server verbose Queue length Current Queue length Authentication 250 1 Authorizatio...

Страница 40: ...domain has been executed the whole character string entered by a user will be sent to the TACACS server configured in the scheme as the user name For example if a user enters username 3com com the rou...

Страница 41: ...ify the server configured currently as the primary accounting server Description Using host command you can add a TACACS server into a TACACS server group by specifying its IP address as well as speci...

Страница 42: ...ing The Server is a author primary Server Warning The Server is a account primary Server If configuring undo host with the parameter authen primary or author primary or account primary you will only d...

Страница 43: ...server group has been created With this command a maximum of 11 TACACS server groups can be configured with each containing up to 5 TACACS servers If the template configured currently exceeds the uppe...

Страница 44: ...see display hwtacacs accounting Example Clear all accounting statistics for the AAA users Router reset hwtacacs accounting statistics 2 8 reset hwtacacs server statistics Syntax reset hwtacacs server...

Страница 45: ...er to carry out AAA negotiation Using undo shared key command you can delete the shared key used for the AAA negotiation with the TACACS server By default no key is set The entered key must match the...

Страница 46: ...dress is specified for transmitting TACACS packets If the same source IP address is specified for all the TACACS packets the TACACS server will only need to contact the router using that IP address in...

Страница 47: ...nd enter the hwtacacs view before configuring this command This switchover interval can become valid only if you have specified a AAA primary server with the arguments authen primary author primary or...

Страница 48: ...f the RSA algorithm to the info center in the form of debugging information Using the undo debugging rsa command you can disable debugging By default debugging is disabled For related commands see rsa...

Страница 49: ...entication retries ssh server rekey interval and ssh server timeout Example Print the debugging information when running SSH 3Com debugging ssh server vty 4 SSH The packet received on VTY 4 SSH SSH_CM...

Страница 50: ...xample 3Com display rsa local key pair public Time of Key pair created 14 20 8 2000 12 13 Key name 3Com_Host Key type RSA encryption Key Key code 3047 0240 D5797459 00089D88 A3CB8FE2 58B81738 56E915CF...

Страница 51: ...to be displayed which is a string of 1 to 64 consecutive characters Description Using the display rsa peer public key command you can display information of a specified RSA public key If no key has be...

Страница 52: ...he SSH server session Display the session information of the SSH server Description Using the display ssh server command you can display the SSH state or session information For related commands see s...

Страница 53: ...key names associated with the users and the authentication types of the user If the parameter username has been specified only information of the specified user will be displayed For related commands...

Страница 54: ...discard all the public key data configured by the user due to the presence of illegal characters and will return to the public key view from the current view In this case you can access the public ke...

Страница 55: ...userid Closes the SSH process specified by the task ID by force Description Using the kill ssh command you can close an SSH process by force A system administrator can disconnect the connections of a...

Страница 56: ...dress It is in the range of 0 to 99 with 0 indicating that no ACL is used Description Using the protocol inbound command you can specify the protocol and the maximum number of the protocol specific co...

Страница 57: ...lic key public key code end and hex Example Access the public key edit view and input the key data 3Com rsa peer public key 3Com003 3Com rsa public key public key code begin 3Com rsa key code hex 3081...

Страница 58: ...gain using the public key code begin command and input new public key data using the hex command If you do not want to input the key data again you can exit to the system view by executing the public...

Страница 59: ...ir create Syntax rsa local key pair create View System view Parameter None Description Using the rsa local key pair create command you can generate RSA host key pair and server key pair If there has b...

Страница 60: ...st already exist Confirm to replace them yes no y The range of public key size is 512 2048 NOTES If the key modulus is greater than 512 It will take a few minutes Input the bits in the modulus default...

Страница 61: ...ublic key Syntax rsa peer public key key name undo rsa peer public key key name View System view Parameter key name Name of the key to be configured destroyed which is a character string of 1 to 64 by...

Страница 62: ...ge of 1 to 5 and defaults to 3 Description Using the ssh server authentication retries command you can set the number of SSH connection authentication retries that are allowed Using the undo ssh serve...

Страница 63: ...l for updating the SSH server key Using the undo ssh server rekey interval command you can disable updating the SSH server key By default no updating operation is performed on the key For related comm...

Страница 64: ...18 ssh user username assign rsa key Syntax ssh user username assign rsa key keyname undo ssh user username assign rsa key View System view Parameter username A valid SSH username defined by the AAA m...

Страница 65: ...s in the router For related command see display ssh user information Example Assign the public key key1 to the user smith 3Com ssh user smith assign rsa key key1 3 19 ssh user authentication type Synt...

Страница 66: ...u must specify an authentication mode for a new user otherwise the user will be unable to log into to the system The authentication mode set for the new user will take effect the next time when the us...

Страница 67: ...ty all View User view Parameter access NTP access control debugging adjustment NTP clock adjustment debugging all All NTP debugging authentication NTP authentication debugging event NTP event debuggin...

Страница 68: ...ssions command you can display the state information of all the sessions maintained by the NTP service of the local device By default the state information of all the sessions maintained by the NTP se...

Страница 69: ...8 ms peer disper 5 98 ms The following table gives the explanation to the displayed information Table 4 1 Description of the state information of the NTP server Item Description synchronized The local...

Страница 70: ...ce trace along the time synchronization NTP server link back to the reference clock source and display the brief information of all the NTP servers along the link Example Display the brief information...

Страница 71: ...rights By default there is no access restriction This command can be used to control the access to the NTP services of the local device It just provides a minimum security protection however To obtai...

Страница 72: ...le command you can disable authentication By default authentication is disabled Example Enable NTP authentication 3Com ntp service authentication enable 4 7 ntp service authentication keyid Syntax ntp...

Страница 73: ...e view Parameter None Description Using the ntp service broadcast client command you can configure the NTP broadcast client mode Using the undo ntp service broadcast client command you can disable the...

Страница 74: ...of 1 to 4294967295 version Defines the NTP version number number NTP version number in the range of 1 to 3 Description Using the ntp service broadcast server command you can enable the NTP broadcast...

Страница 75: ...ice max dynamic sessions command you can set the number of sessions allowed at the local Using the undo ntp service max dynamic sessions command you can restore the default number of sessions allowed...

Страница 76: ...erver mode to exchange the message with the remote server for the purpose of estimating the network delay and then it switches to the broadcast client mode to assume the work of detecting the incoming...

Страница 77: ...version number is 3 With this command you can specify an interface on the local device for sending NTP multicast messages while the local device is running in multicast server mode to periodically sen...

Страница 78: ...works as the NTP master clock by default With this command you can specify the stratum level where the NTP master clock operates Example Set the local device to be the NTP master clock at stratum 3 wh...

Страница 79: ...erface View System view Parameter interface name Interface name The IP address of the interface will be used as the source IP address of the messages interface type Interface type which identifies an...

Страница 80: ...ion Using the ntp service source interface disable command you can disable an interface to receive NTP messages Using the undo ntp service source interface disable command you can enable the interface...

Страница 81: ...r interface number Interface number which identifies an interface along with interface type priority Specifies the server to be the preferred server Description Using the ntp service unicast peer comm...

Страница 82: ...Parameter X X X X IP address of the remote server version Defines NTP version number NTP version number in the range of 1 to 3 authentication keyid Defines authentication key ID keyed The key ID shoul...

Страница 83: ...pecified by X X X X X X X X represents a host address which must not be a broadcast or multicast address or the IP address of the reference clock Configured with this command the local device is worki...

Страница 84: ...Enables the X2T event debugging packet Enables the X2T packet debugging Description Using the debugging x25 x2t command you can enable X2T debugging Example Enable the X2T event debugging Router debu...

Страница 85: ...itch table Syntax display x25 x2t switch table View All views Parameter None Description Using the display x25 x2t switch table command you can display the X2T dynamic route switching table Example Di...

Страница 86: ...d IP address and port of the router the router will translate the IP packets into X 25 packets upon the receipt and forward them to the X 121 address on the X 25 network Example Configure an X2T forwa...

Страница 87: ...ver receiving the X 25 packets destined to a specified X 121 address the router will convert these X 25 packets into IP packets and forward them to the specified IP address in the IP network Example C...

Страница 88: ...hat is interoperating with an exchange sends SETUP ACK messages even if the received SETUP messages do not carry the called number information The switches of some vendors neither carry the called num...

Страница 89: ...is initiated Using the undo isdn ignore hlc command you can enable the high level compatibility information unit in the SETUP message By default the SETUP message carries high level compatible inform...

Страница 90: ...essage By default the SETUP message carries low level compatible information unit when the ISDN originates data calls When connecting to a European ISDN network it is necessary to configure this comma...

Страница 91: ...before it can be ACTIVE Some exchanges will send CONNECT ACK messages but some will not Example Configure the router to become ACTIVE to start data exchange before receiving CONNECT ACK messages 3Com...

Страница 92: ...face B1 channel It can be a static configuration or the result of a dynamic negotiation all depending on the specified SPID Type SPID Num SPID value of the BRI interface It can be a static configurati...

Страница 93: ...to the default Note When a router interoperates with an ISDN switch its configuration should be consistent with that of the switch If there is a call on the ISDN interface you cannot configure this c...

Страница 94: ...will set the type of signaling for the active ISDN interface However if there are calls on the interface configuring this command will not take effect Note You are allowed to configure DSS1 ISDN on BR...

Страница 95: ...931 signaling timers Different timers have different default values Refer to the following table for a description in detail Table 6 2 Description of Q931 timers timer name Timer Value range in second...

Страница 96: ...ls or just for the purpose of testing By default a BRI interface does not originate a SPID negotiation request unless triggered by a call This command applies only on the BRI interface running the NI...

Страница 97: ...iew ISDN BRI Interface view Parameter seconds Duration of the SPID timer which is in the range of 1 to 255 seconds and defaults to 30 seconds Description Using the isdn spid timer command you can set...

Страница 98: ...ault number of INFORMATION message retransmission attempts on the interface On a BRI interface compliant with the ISDN protocol in North America calls can be placed only after the SPID negotiation or...

Страница 99: ...ere are three types of services You can select any one or none None means all services are supported By default SPID supports data and voice service simultaneously For BRI interfaces using National IS...

Страница 100: ...ca calls can be placed only after the SPID negotiation or initialization is finished SPID information can be obtained via static configuration or dynamic negotiation Only after SPID information is con...

Страница 101: ...ca calls can be placed only after the SPID negotiation or initialization is finished SPID information can be obtained via static configuration or dynamic negotiation Only after SPID information is con...

Результаты поиска

Содержание Router 3012

Отзывы:

Похожие инструкции для Router 3012

Бренды по названию

Популярные бренды

3Com Router 3012, Справочник по командам

Результаты поиска

Содержание Router 3012

Отзывы:

Похожие инструкции для Router 3012

Бренды по названию

Популярные бренды