Gebruiksaanwijzing /service van het product XSR CLI van de fabrikant Enterasys Networks
Ga naar pagina of 684
X-Pedition ™ Security Router XSR CLI Reference Guide Ve r s i o n 7 . 6 P/N 9033842-07.
.
-i Notice Enterasys Networks reserves the right to ma ke changes in specificatio ns and other informat ion contained in this document and its W eb site without prior notice. The read er should in all cases cons ult Enterasys Networks to determi ne whether any such changes have been made.
0 Enterasys Networks, Inc. FIRMW ARE LICENSE AGREEMENT BEFORE OPENING OR UTILIZIN G THE ENCL OSED PRODUCT , CAREFULL Y READ THIS LICENSE AGREEMENT .
i 4) EXPOR T RESTRICTIONS. Yo u unders tand that Enterasys and its Affiliates are subject to re gulation by agencies of the U.
ii 9) OWNERSHIP . This is a license agreement and not an agreement for sale. Yo u acknowledge and agree that the Program constitutes trade secrets and/or copyrighted mat erial of Enterasys and/or it s suppliers.
v Contents Preface Chapter 1: Network Management Observing Syntax and Conv entions ................ ................ ................... ................ ................. .......... ............ ..... 1-1 Network Management Commands ............... .
vi ARP Commands . ................ ................ ................ ................ .................... ................ ............. ......... .............. 5-149 Other IP Commands . ................ ................ ................ ...........
vii QoS Show Commands ................ ................. ................ ................ ................ ................... ......... ................ 12-105 Chapter 13: Configuring ADSL Observing Syntax and Conv entions ................ .........
viii.
XSR User’s Guid e ix Preface This guide describes the Command Line Interface (CLI) commands needed to mount, connect, power ‐ up, and maintain an XSR from Enterasys Netw orks.
x Conventions Used in This Guide The following conventions are used in this guide: Getting Help For additional support related to the XSR, conta.
XSR User’s Guid e xi Before contacting Ente rasys Networks for technical support, have the fol lowing information ready: •Y o u r Enterasys Netw.
xii.
XSR CLI Reference Guide 1-1 1 Network Management Observing Synt ax and Conventions The CLI Syntax and conv entions use the notation descri bed in the following table.
General Network Management Commands 1-2 Network Management General Network Management Commands banner This command cr eates a login banner at the XSR’ s CLI prompt. Te x t is entered one line at time and should not exceed 80 characters per line.
General Network Management Commands XSR CLI Reference Guide 1-3 crypto key dsa This command generates the Digital Signature Algorithm (DSA) type host key pair (pri va te and public) as we ll as displays the public key .
General Network Management Commands 1-4 Network Management Example XSR#disable enable This command jumps to Privileged EXEC mode. Synt ax enable Mode EXEC: XSR> Example XSR>enable end This command terminates configuration mode.
General Network Management Commands XSR CLI Reference Guide 1-5 help This command retrieves he lp at any Mode. Synt ax help Mode All Example XSR#help ip http port This comm.
General Network Management Commands 1-6 Network Management Synt ax ip http server [ enable | disable ] Synt ax of the “no” Form The no form of this command disables the.
General Network Management Commands XSR CLI Reference Guide 1-7 •P o r t number 22 Example XSR(config)#ip ssh server enable ip telnet port This command changes the Te l n e t port where incoming Te l n e t sessions connect to.
General Network Management Commands 1-8 Network Management Mode Global configuration: XSR(config)# Default Enabled Examples XSR(config)#ip telnet server enable XSR(config)#no ip telnet server .
General Network Management Commands XSR CLI Reference Guide 1-9 Reply from 192.168.27.165: 10ms Reply from 192.168.27.165: 10ms Reply from 192.168.27.165: 10ms Reply from 192.
General Network Management Commands 1-10 Network Management Mode Global configuration: XSR(config)# Default s •P r i v i l e g e level 0: all statistics ( show ) commands with low ‐ level security su ch as show version , show clock , etc.
General Network Management Commands XSR CLI Reference Guide 1-11 session-timeout This command sets the interv al for closing a connection when there is no input.
General Network Management Commands 1-12 Network Management •W i d t h : 132 characters •0 means no limit Example XSR#terminal width 40 XSR#terminal length 40 traceroute This .
General Network Management Commands XSR CLI Reference Guide 1-13 username This command adds a user , privileg e level, passw ord, and encryption type for those accessing the XSR.
General Show Commands 1-14 Network Management Mode Global configuration: XSR(config)# Default s •U s e r n a m e : admin • P assword: ““ (null or zero length .
General Show Commands XSR CLI Reference Guide 1-15 Sample Output The following output display s public key: XSR(config)#crypto key dsa show ---- BEGIN SSH2 PUBLIC KEY ---- Subject:.
snmp-server Commands 1-16 Network Management Sample Output The following is output from the ip telnet command: XSR#show ip telnet TELNET Information: Telnet Server: Enabled.
snmp-server Commands XSR CLI Reference Guide 1-17 Yo u can download Enterasys MIBs from the fo llowing We b site: http://www .
snmp-server Commands 1-18 Network Management snmp-server community This command allows a community string to access MIBs in the XSR.
snmp-server Commands XSR CLI Reference Guide 1-19 Synt ax of the “no” Form The no form of this command offers no contact information: no snmp-server contact Mode Global configuration: XSR(config)# Default Null string Example XSR(config)#snmp-server contact Larr yCurtis@enterasys.
snmp-server Commands 1-20 Network Management Synt ax of the “no” Form The no form of this command disables the sending of specified traps: no snmp-serve.
snmp-server Commands XSR CLI Reference Guide 1-21 Mode Global configuration: XSR(config)# Example The following example specifies the Engine ID: XSR(config)#snmp-server.
snmp-server Commands 1-22 Network Management snmp-server host This command specifies host parameters of the SNMP serv er; it adds a new man agement station to send traps to.
snmp-server Commands XSR CLI Reference Guide 1-23 Example The following examples illustrate an SNMP host with trap on and off : XSR(config)#snmp-server host 192.168 .1.10 traps trapsOn XSR(config)#no snmp-server host 192.
snmp-server Commands 1-24 Network Management Example This example shows an inform with 1 retry , a 5 ‐ second timeout and a 10 pending val.
snmp-server Commands XSR CLI Reference Guide 1-25 Default 0 traps (unlimited) Example The following example sets the traps permitted to 1000: XSR(config)#snmp-s.
snmp-server Commands 1-26 Network Management Synt ax of the “no” Form The no form sets the maximum allow ed incoming and outgoing packetsize to the .
snmp-server Commands XSR CLI Reference Guide 1-27 Synt ax snmp-server set entityMIB { entPhysic alAlias | entPhysicalAssetID } host < strin g > Synt ax of the “no” Form The no comman.
snmp-server Commands 1-28 Network Management snmp-server t f t p-server-list This command specifies an Access Control List (A CL) to limit TF TP serv ers’ access during SNMP downloads.
snmp-server Commands XSR CLI Reference Guide 1-29 snmp-server trap-timeout This command specifies the interval traps in the retransmission queue are retried if no route exists to the host that SNMP traps will to be sent to.
snmp-server Commands 1-30 Network Management Synt ax of the “no” Form Use the no form of this command to remov e a user: no snmp-server user username gr.
snmp-server Commands XSR CLI Reference Guide 1-31 Mode Global configuration: XSR(config)# Examples The following example creates a view of all objec ts on .
snmp-server Commands 1-32 Network Management at 1.3. 6.1.2. 1.3 atEntry 1.3.6 .1.2.1 .3.1.1 ip 1.3. 6.1.2. 1.4 ipAddrEn try 1.3.6.1 .2.1.4.20 .1 ipRouteEnt ry 1.3.6. 1.2.1.4. 21.1 ipNetT oMedi aEntry 1. 3.6.1.2.1 .4.22.1 icmp 1.3. 6.1.2. 1.5 tcp 1.3.6.
snmp-server Commands XSR CLI Reference Guide 1-33 snmp-server window-time This command specifies the length, in seconds, of the moving window used to count the number of traps sent.
SNMP Show Commands 1-34 Network Management SNMP Show Commands show snmp This command information about the SNMP server . Synt ax show snmp [ location ] Mode Privileged EXEC.
SNMP Show Commands XSR CLI Reference Guide 1-35 0 Silent drops 0 Proxy drops The example below shows output with the location option entered: XSR#show snmp location Haverhill Mass. show snmp engineID This command displays the identification of the local SNMP engine.
SNMP Show Commands 1-36 Network Management grouname: nm security model: v3 auth readview: v1default wirteview: nmMIBIIview notifyview: nmMIBIIview The following is sample output fr.
SLA Agent Commands XSR CLI Reference Guide 1-37 User name: authprivUser group: v3RWGroup Engine ID: 800015f8030001f423e691 storage-type: nonvolatile active Parameter Description show snmp view This command displays information on each SNMP view in the gro up username table.
SLA Agent Commands 1-38 Network Management Synt ax aggregate-period period Synt ax of the “no” Form The no form of this command returns to the default va l .
SLA Agent Commands XSR CLI Reference Guide 1-39 Example This example sets the buckets ‐ of ‐ history val u e to 5 records: XSR(config-rtr-echo-1)#buckets-of-hi story-kept 5 frequency This command specifies how frequently to send a Response Time Reporter (RTR) probe.
SLA Agent Commands 1-40 Network Management Mode RTR Echo configuration: XSR(config-rtr-echo- xx )# Example The following example creates an RTR map: XSR(config-rtr-.
SLA Agent Commands XSR CLI Reference Guide 1-41 Mode RTR Echo configuration: XSR(config-rtr-echo- xx )# Default Pa y l o a d size: 12 bytes Example The following exampl.
SLA Agent Commands 1-42 Network Management Synt ax of the “no” Form The no form of this command returns to the default va l u e : no timeout Mode RTR Ec.
RTR-mode Commands XSR CLI Reference Guide 1-43 RTR-mode Commands rtr This command creates a Response Time Reporter (RTR) entry . The following are sub ‐ commands: • rtr owner registers the RTR administrator .
RTR-mode Commands 1-44 Network Management Default Quota: 700 Example The following example registers the RTR owner: XSR(config)#rtr owner operator1 192.168.57.5 email larrycurtis@enterays.com quota 1000 rtr schedule This command schedules an Response Time Re porter (RTR) entry .
RTR Show Commands XSR CLI Reference Guide 1-45 RTR Show Commands show rtr operation-st ate This command displays the current operational state of the Response Time Reporter (RTR).
RTR Show Commands 1-46 Network Management Status of Entry (SNMP RowStatus): ac tive Protocol Type: ipIcmpEcho Target Address: 192.168.57.3 Source Address: 192.
XSR CLI Reference Guide 2-55 2 Configuring T1/E1 and T3/E3 Subsystems Observing Synt ax and Conventions The CLI Syntax and conv entions use the notation descri bed in the following table.
T1/E1 & T3/E3 Commands 2-56 Configuring T1/E1 and T3/E3 Subsystems cablelength For T3 controllers only This command specifies the distance of cabling from the XSR to the network equipment for a T3 NIM card only .
T1/E1 & T3/E3 Commands XSR CLI Reference Guide 2-57 the received sig nals. This feature is provided by placing a transmit attenuator in the data path. This attenuation is selectable from 0 , ‐ 7.
T1/E1 & T3/E3 Commands 2-58 Configuring T1/E1 and T3/E3 Subsystems Synt ax cablelength short { 133 | 266 | 399 | 533 | 655 } Synt ax of the “no” form The no form of this .
T1/E1 & T3/E3 Commands XSR CLI Reference Guide 2-59 Synt ax of the “no” Form Use the no form of the command to remov e a channel group: no channel-group number Default s Speed: 64 kbps for both T1 and E1 controlle rs.
T1/E1 & T3/E3 Commands 2-60 Configuring T1/E1 and T3/E3 Subsystems Default Line Mode Controller configuration: XSR(config-controller < xx >)# Examples The following example .
T1/E1 & T3/E3 Commands XSR CLI Reference Guide 2-61 Synt ax of the “no” Form The no form of this command deletes the defined controller: no controller { t1 .
T1/E1 & T3/E3 Commands 2-62 Configuring T1/E1 and T3/E3 Subsystems Synt ax crc { 16 | 32 } Synt ax of the “‘no” Form The no form of this command returns to th.
T1/E1 & T3/E3 Commands XSR CLI Reference Guide 2-63 XSR(config)#controller t1 1/0 XSR(config-controller<T1-1/0>)#frami ng esf XSR(config-controller<T1-1/0>)#linec ode b8zs XSR(config-c.
T1/E1 & T3/E3 Commands 2-64 Configuring T1/E1 and T3/E3 Subsystems XSR(config-controller<T3-1/2/0>)#fra ming m13 XSR(config-controller<T3-1/2/0>)#cab lelength 250 XSR(config-controller.
T1/E1 & T3/E3 Commands XSR CLI Reference Guide 2-65 Mode Controller configuration: XSR(config-controller xx )# Default •T 3 : 44,210 kbps (full ‐ rate) •E 3 : 34,099.
T1/E1 & T3/E3 Commands 2-66 Configuring T1/E1 and T3/E3 Subsystems equipment For T3/E3 controllers only This command configures the T3/E3 controller as network or customer equipment and operates according to the T1.
T1/E1 & T3/E3 Commands XSR CLI Reference Guide 2-67 Synt ax framing { sf | esf } ( T1 ) framing { crc4 | no-crc4 } ( E1 ) framing { c-bit | m13 } ( T3 ) framing { g751 | bypass } ( E3 ) Synt ax of.
T1/E1 & T3/E3 Commands 2-68 Configuring T1/E1 and T3/E3 Subsystems interface serial This command configures the Seria l interface automatically created by the controller command in conjunction with T1/E1 and T3/E3 NIM operations.
T1/E1 & T3/E3 Commands XSR CLI Reference Guide 2-69 Example The following example configures the E3 controller in slot 1 , card 2 with line .
T1/E1 & T3/E3 Commands 2-70 Configuring T1/E1 and T3/E3 Subsystems Synt ax linecode { ami | b8zs | hdb3 } Synt ax of the “no” Form Return to the defaul t linecode setting .
T1/E1 & T3/E3 Commands XSR CLI Reference Guide 2-71 Synt ax of the “no” Form no loopback Default Disabled Mode Controller configuration: XSR(config-controller < xx >)# Examples T.
T1/E1 & T3/E3 Commands 2-72 Configuring T1/E1 and T3/E3 Subsystems Mode Controller configuration: XSR(config-controller xx )# Default 1 Example The following example configures.
T1/E1 & T3/E3 Commands XSR CLI Reference Guide 2-73 Example The following example configures the T3 controller in slot 1 , car d 2 with line .
T1/E1 and T3/E3 Clear and Show Commands 2-74 Configuring T1/E1 and T3/E3 Subsystems Examples The following example disables a T1 controller: XSR(config)#controller t1 1/0 XSR(c.
T1/E1 and T3/E3 Clear and Show Commands XSR CLI Reference Guide 2-75 show controllers This command displays the status and statistics for any controller .
T1/E1 and T3/E3 Clear and Show Commands 2-76 Configuring T1/E1 and T3/E3 Subsystems 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 Rx ABCD * * * * * * F F 0 * F F F F F F F F F F F F F F Channel 1: T.
T1/E1 and T3/E3 Clear and Show Commands XSR CLI Reference Guide 2-77 Latest II I II IV No Code No Code No Code No Code Alarms Detected: LOS LOF TxAIS RxAIS TxRA I RxRAI LOOP PayLd X X X 24 Hour Statis.
T1/E1 and T3/E3 Clear and Show Commands 2-78 Configuring T1/E1 and T3/E3 Subsystems Rx ABCD * * * * * * F F 0 * F F F F F F F .
T1/E1 and T3/E3 Clear and Show Commands XSR CLI Reference Guide 2-79 FE AC code rece iv e d Displays the last 4 FEAC codes or commands that wer e received. Applicable for C ‐ bit parity framing only , per ANSI T1.
Drop and Insert Commands 2-80 Configuring T1/E1 and T3/E3 Subsystems Drop and Insert Commands These commands effect the operation of the T1/E1 Drop and Insert NI M.
Drop and Insert Commands XSR CLI Reference Guide 2-81 Mode Controller configuration: XSR(config-controller < xx >)# Default cas Example This configuration instructs the X.
Drop and Insert Commands 2-82 Configuring T1/E1 and T3/E3 Subsystems Applique type is Fractional T1. Loopback is set as none. Cablelength long and short 0. Framing is esf, Line Encoding is b8z s, Clock Source is line. Description: None Alarms Detected: None Rx 0signal level -0.
XSR CLI Reference Guide 3-83 3 Configuring the XSR Plat form Observing Synt ax and Conventions The CLI command syntax and conventions use the notation described in the following table.
Clock Commands 3-84 Configuring the XSR Platform Clock Commands clock set This command sets the current time of the Real Time Clock chip (software module clock). After resetting the XSR, you must manually set the clock.
Crypto Key Commands XSR CLI Reference Guide 3-85 Crypto Key Commands crypto key master generate This command generates a random master encryption key . When the command is entered, you are prompted to identify the previous master key .
Other Platform Commands 3-86 Configuring the XSR Platform crypto key master specify This command allows you to speci fy a master encryption key . When entered , the command first prompts you to identify the pr evious ma ster key .
Other Platform Commands XSR CLI Reference Guide 3-87 Example XSR(config)#cpu-utilization debug processor This command defines a method to force forw arding engine jobs to a specific CPU or allows the jobs to float between av ailable CPUs.
Other Platform Commands 3-88 Configuring the XSR Platform Example XSR#hostname XSR-1800 XSR-1800# logging This command enables/disables message logging at va r y i n g severity leve ls for specified destinations.
Other Platform Commands XSR CLI Reference Guide 3-89 Synt ax of the “no” Form Use the no form of this command to di sable the earlier configured se rvice: no logging [console | buffered | mon itor | snmp | A.
Other Platform Commands 3-90 Configuring the XSR Platform Examples This example sets logging at High for the console wi th a local ti mestamp: XSR#loggi.
SNTP Commands XSR CLI Reference Guide 3-91 Mode Global configuration: XSR(config)# Examples The following example selects a 5 ‐ minute auto inst all: XSR(config)#.
SNTP Commands 3-92 Configuring the XSR Platform sntp-client poll-interval This command configures the interval th e SNTP client wa i ts , when synchronized, before sending another time request to an SNTP serv er .
SNTP Commands XSR CLI Reference Guide 3-93 no sntp-server This command disables the SNTP server . Synt ax no sntp-server Mode Global configuration: XSR(config)# show sntp This command displays the current status of the SNTP server .
Platform Clear and Show Commands 3-94 Configuring the XSR Platform Nominal freq is xxxxx Hz , actual freq is xxxx Hz, precision is 2**16 Reference time is 12345678.12345678 (01:01:01 .123 EDT Mon Jan 1 2004) Clock offset is 1.
Platform Clear and Show Commands XSR CLI Reference Guide 3-95 clear logging This command deletes all messages from the logging buffer in RAM.
Platform Clear and Show Commands 3-96 Configuring the XSR Platform Memory Block Allocation: Memory Options enabled: None. ------------------------------------ --------------------------------- Size Number Number Avg.
Platform Clear and Show Commands XSR CLI Reference Guide 3-97 show buffers i/o This command displays summary I/O (data buffers, frame elements) memory usage statistics. Allocations are based on the hardwa re present in the XSR.
Platform Clear and Show Commands 3-98 Configuring the XSR Platform Parameter Descriptions show buffers malloc This command displays summary Malloc (tables, configuration structure) area memory statistics.
Platform Clear and Show Commands XSR CLI Reference Guide 3-99 Sample Output Memory Block Allocation: Memory Options enabled: None. ------------------------------------ ------------------------------ Size Number Number Avg.
Platform Clear and Show Commands 3-100 Configuring the XSR Platform show cpu-utilization This command tracks current use of va r i o us CPU processes as a p.
Platform Clear and Show Commands XSR CLI Reference Guide 3-101 show fault-report This command displays the fault report captured when the XSR experiences a system problem. It contains information that pinpoints the cause of the software fai lure.
Platform Clear and Show Commands 3-102 Configuring the XSR Platform Sample Output The following is sample output from an XSR ‐ 3020 router: Fault Report captured in n.
Platform Clear and Show Commands XSR CLI Reference Guide 3-103 004276be 12345678 12345678 12345678 12345678 12345678 12345678 12345 678 004276ce 12345678 12345678 12345678 12345678 12345678 12345678 12345 678 004276de 12345678 12345678 12345678 12345678 12345678 12345678 12345 678 etc.
Platform Clear and Show Commands 3-104 Configuring the XSR Platform Synt ax show logging Mode EXEC or Privileged EXEC: XSR> or XSR# Example XSR>show logging file Sample Output Th.
Platform Clear and Show Commands XSR CLI Reference Guide 3-105 Mode Privileged EXEC: XSR# Sample Output XSR#show sntp Server IP:192.168.27.88 Poll Interval: 512 Sntp Requested: 1 Last Synced: .
Platform Clear and Show Commands 3-106 Configuring the XSR Platform Software: Version 5.5.1.3, Built May 16 20 03, 14:31:56 CLI revision 1.5 Software file is “xsr1800.fls” w ith VPN; with Firewall XSR-1800 uptime is 33 days, 10 h ours, 44 minutes.
File System Commands XSR CLI Reference Guide 3-107 Example XSR#show whoami Sample Output XSR#show whoami Comm Server “Enterasys”, current lin e at 9600bps. File System Commands The XSR employs an MS ‐ DOS ‐ compatible file system in Flash memory .
File System Commands 3-108 Configuring the XSR Platform XSR(config)#rename VPN_XSR1800.fls x sr1800.fls Rename flash:VPN_xsr1800.fls to flas h:xsr1800.
File System Commands XSR CLI Reference Guide 3-109 XSR#copy running-config startup-conf ig . Mode Privileged EXEC: XSR# Examples XSR#copy tftp://192.168.27.1/root/en terasys-sw flash: Save Configuration to TFTP Server Save the startup-config fi le on a TF TP serv er over the netw ork.
File System Commands 3-110 Configuring the XSR Platform Configuration Load This example loads startu p ‐ config via the netw ork from a TF TP server . The XSR does not load the configuration from the netw ork automat ically .
File System Commands XSR CLI Reference Guide 3-111 Mode Privileged EXEC: XSR# Example XSR#copy startup-config tftp://192.1 68.1.100/cfg.txt Sample Output XSR#copy startup-config tftp://192.1 68.1.100/abc.cfg Copy 'startup-config' from Flash to server as 'abc.
File System Commands 3-112 Configuring the XSR Platform Mode Privileged EXEC: XSR# Default flash: unless you change the default using the cd command.
File System Commands XSR CLI Reference Guide 3-113 Default •F o r m a t : ASCII •D i r e c t o r y : current directory Examples XSR#more /ascii flash:startup-config XSR#more flash:star.
File System Commands 3-114 Configuring the XSR Platform which is specified in the flash:boot ‐ config file. Although you cannot configure the secondary EOS file, if you wish to rename it, use the boot system command.
File System Commands XSR CLI Reference Guide 3-115 Examples The following example immediately cold restarts the XSR: XSR#reload cold The following example warm .
File System Commands 3-116 Configuring the XSR Platform Example XSR#rename cflash:xsr3000.fls.5512 flash:xsr3000.fls show hostname This command displays the name you specified for the XSR.
File System Commands XSR CLI Reference Guide 3-117 XSR#show reload No reload is scheduled No EOS fallback Parameter Description show running-config This command displays the router ’ s running configuration as a sequence of CLI commands segmented by module.
File System Commands 3-118 Configuring the XSR Platform session-timeout console 35000 session-timeout telnet 35000 session-timeout ssh 35000 !T1E1 controller t1 0/2/0 clock source internal no shutdown !IKE crypto isakmp proposal try1 authentication pre-share encryption aes hash md5 group 5 lifetime 40000 crypto isakmp peer 2.
File System Commands XSR CLI Reference Guide 3-119 !OSPF router ospf 1 network 30.1.1.0 0.0.0.255 area 0.0. 0.0 network 20.1.1.0 0.0.0.255 area 0.0. 0.0 !RIP router rip !SNMP snmp-server community public rw snmp-server enable !AAA aaa group ii dns server primary 0.
File System Commands 3-120 Configuring the XSR Platform verify This command veri fi es a packed softw are image file. The file name must end in *.fls . If the directory name is not specified, the current directory is used.
Bootrom Monitor Mode Commands XSR CLI Reference Guide 3-121 Bootrom Monitor Mode Commands Bootrom monitor mode offers special user access for Flash:/CompactFlash: file operations and on occasions when the XSR lacks va l i d software or runs abnormally .
Bootrom Monitor Mode Commands 3-122 Configuring the XSR Platform If the Bootrom password is lost on the XSR 1800 Series, you can restore it by pressing the Default button.
Bootrom Monitor Mode Commands XSR CLI Reference Guide 3-123 da This command displays system date and time with this sample output: XSR-1800: da Date: Thursday, 29-MAY-2003. Time: 10:14:07 del This command removes a fi le from flash: or cflash: memory .
Bootrom Monitor Mode Commands 3-124 Configuring the XSR Platform dt This command sets system time using th e syntax hh mm ss . For example: XSR:dt 11 59 59 ff This command formats the Flash file system.
Bootrom Monitor Mode Commands XSR CLI Reference Guide 3-125 Remote Host IP address (192.168.1.10 ) : Remote file path (c:) : Use TFTP (no) : Ftp userid (anonymous) : Ftp password () : Local target nam.
Bootrom Monitor Mode Commands 3-126 Configuring the XSR Platform gp= 8219b1e0 sp= 85febb90 s8= 00000000 ra= 82 0e9178 par1= ffffffff par2= 85febaf8 par3= ffffffff par4= 82 0e9b10 cause= 80000014 cntxt.
Bootrom Monitor Mode Commands XSR CLI Reference Guide 3-127 RAM: 512MB without interleave Memory Bus at 120MHz, CASL at 2.0 Bootrom Flash: 4MB Filesystem Flash: 8MB CompactFlash not present Real Time .
Bootrom Monitor Mode Commands 3-128 Configuring the XSR Platform.
XSR CLI Reference Guide 4-83 4 Configuring Hardware Controllers Observing Synt ax and Conventions The CLI command syntax and conventions use the notation described in the following table.
Hardware Controller Comman ds 4-84 Configuring Hardware Controllers Synt ax clock rate bps Synt ax of the “no” Form no clock rate Mode Interface configuration: XSR(config-if<S x >)# .
Hardware Controller Commands XSR CLI Reference Guide 4-85 description This command sets the description text for an interface. The description wil l appear in the ifDescription (interface description) var i a bl e of the MIB.
Hardware Controller Comman ds 4-86 Configuring Hardware Controllers Synt ax of the “no” Form no duplex Default auto Mode Interface configuration: XSR(config-if<F x >)# Example XSR(co.
Hardware Controller Commands XSR CLI Reference Guide 4-87 media-type This command sets the media ‐ type appropriate to the cable type that the interface is connected to.
Hardware Controller Comman ds 4-88 Configuring Hardware Controllers pa r i t y This command configur es th e parity on a serial inter face. It is val i d and ta kes effect only when the interface is in Asynchronous mode.
Hardware Controller Commands XSR CLI Reference Guide 4-89 Mode Interface configuration: XSR(config-if<Sx>)# Default Sync Example XSR(config-if<S1/0>)#physical-layer async shut down This command disables an interface.
Hardware Controller Comman ds 4-90 Configuring Hardware Controllers • Speed cannot be changed in loopback mode. •W h e n connecting an auto setting on .
Hardware Controller Commands XSR CLI Reference Guide 4-91 Mode Interface configuration: XSR(config-if<S x >)# Default 1 Example The following example sets 2 stopbits .
Hardware Controller Clear and Show Commands 4-92 Configuring Hardware Controllers Hardware Controller Clear and Show Commands clear counters fastethernet This command clears MIB ‐ II counters for the FastEther net interface.
Hardware Controller Clear and Show Commands XSR CLI Reference Guide 4-93 Mode Privileged EXEC: XSR# Example The following example clears the MIB ‐ II counters on GigabitEthernet port 3 , sub ‐ interface 2 : XSR#clear counters gigabitethernet 3 .
Hardware Controller Clear and Show Commands 4-94 Configuring Hardware Controllers Example The following example resets GigabitEthernet port 1 , sub ‐ interface 5 : XSR#clear counters gigabitethernet 1 .5 clear counters serial This command clears serial interface counters.
Hardware Controller Clear and Show Commands XSR CLI Reference Guide 4-95 Synt ax clear interface serial [ card / port ] Mode Privileged EXEC: XSR# Example XSR#clear interface serial 1/0 show controllers fastethernet This command displays detailed FastEthernet controller data for a port.
Hardware Controller Clear and Show Commands 4-96 Configuring Hardware Controllers dataLen 0x00000000, status 0 x00001300, buffer 0x00000000 dataLen 0x00000000, status 0 x00001300, buffer 0x00000000 dataLen 0x00000000, status 0 x00001300, buffer 0x00000000 dataLen 0x00000000, status 0 x00001300, buffer 0x00000000 [.
Hardware Controller Clear and Show Commands XSR CLI Reference Guide 4-97 datalen 0x00000000, status 0 x00000000, buffer 0x80000000 datalen 0x00000000, status 0 x00000000, buffer 0x80000000 datalen 0x0.
Hardware Controller Clear and Show Commands 4-98 Configuring Hardware Controllers Packet Processor Tx Scheduler Stats: 0 Packet driver Tx OK 0 Packet driver not Tx: MUX END_ERR_BLOCK 0 Packet driver not Tx: MUX ERROR 0 Packet driver not Tx: Unkn own Msg from MUX The unit number is 50331656.
Hardware Controller Clear and Show Commands XSR CLI Reference Guide 4-99 Mode Privileged EXEC or Global configuration: XSR# or XSR(config)# Sample Output The following .
Hardware Controller Clear and Show Commands 4-100 Configuring Hardware Contr ollers show interface dialer This command displays information about th e Dialer interf ace.
Hardware Controller Clear and Show Commands XSR CLI Reference Guide 4-101 Internet address is 54.54.54.1, subn et mask is 255.255.255.0 Secondar y Internet address is 57.57.57.1, subn et mask is 255.255.255.0 Secondar y Internet address is 58.58.58.1, subn et mask is 255.
Hardware Controller Clear and Show Commands 4-102 Configuring Hardware Contr ollers The Name of the Access Concentrator is c3600-1 The Session Id is 0x0005 The MAC Address of the Access Concen trator .
Hardware Controller Clear and Show Commands XSR CLI Reference Guide 4-103 ifLastChange 00:00:0 0 ifInOctets 0 ifInUcastPkts 0 ifInNUcastPkts 0 ifInDiscards 0 ifInErrors 0 ifInUnknownProtos 0 ifOutOcte.
Hardware Controller Clear and Show Commands 4-104 Configuring Hardware Contr ollers XSR#show interface multilink 8 ********** Multilink Interface Stats ********** Multilink 8 is Admin Down Internet ad.
Hardware Controller Clear and Show Commands XSR CLI Reference Guide 4-105 Sent: 0 octets, 0 unicast packets, 0 discards, 0 errors. MTU is 1500 bytes. Proxy ARP is enabled. Helper address is not set. Directed broadcast is enabled. Outgoing access list is not set.
Hardware Controller Clear and Show Commands 4-106 Configuring Hardware Contr ollers ifindex 0 ifType 22 ifAdminStatus 1 ifOperStatus 1 ifLastChange 00:00:2 5 ifInOctets 1500 ifInUcastPkts 100 ifInNUca.
XSR CLI Reference Guide 5-83 5 Configuring the Internet Protocol Observing Synt ax and Conventions The CLI Syntax and conv entions use the notation descri bed below .
OSPF Commands 5-84 Configuring the Internet Protocol • “VRRP Clear and Show Commands” on page 5 ‐ 197. OSPF Commands area authentication This command enables/disables authenticati on for an OSPF area.
OSPF Commands XSR CLI Reference Guide 5-85 Synt ax of the “no” Form The no form of this command removes the cost va l u e from the summary route.
OSPF Commands 5-86 Configuring the Internet Protocol Default No NSSA defined Example The following example configures area 10 as a NSSA area: XSR(config)#interface fastethernet 1 XSR(config-if<F1>)#ip address 172.
OSPF Commands XSR CLI Reference Guide 5-87 Mode Router configuration: XSR(config-router)# Examples This example sets the address range used by this router for summarized routes learned at the boundary of area 0.
OSPF Commands 5-88 Configuring the Internet Protocol XSR(config)#router ospf XSR(config)#network 172.16.152.0 0.0 .0.0 area 10 XSR(config)#area 10 stub area virtual-link This command defines .
OSPF Commands XSR CLI Reference Guide 5-89 The no form of this command removes the virtual li nk : no area area-id virtual-link router-id [ authenticati on [ messag.
OSPF Commands 5-90 Configuring the Internet Protocol Figure 5-1 Area V irtual Link Example auto-virtual-link This command automatically creates virtual links . Refer to the area-virtual-link command for more related information.
OSPF Commands XSR CLI Reference Guide 5-91 Default s •L i m i t : ‐ 1 •E x i t External Interv al: 0 • W arning Level: 0 Mode OSPF Router configuration: XSR(.
OSPF Commands 5-92 Configuring the Internet Protocol Synt ax distance ospf { intra | inter | ext } weight Synt ax of the “no” Form The no command resets the administrative distance to the default va l u e for the particular type of routes.
OSPF Commands XSR CLI Reference Guide 5-93 Example This example sets the administrativ e distance for OSPF external routes to 65 .
OSPF Commands 5-94 Configuring the Internet Protocol ip osp f cost This command sets the cost of sending a pack et on a interface. Each router interface that participates in OSPF routing is assigned a def ault cost.
OSPF Commands XSR CLI Reference Guide 5-95 Default Four times the val u e of the seconds parameter defined in the ospf hello-interval command.
OSPF Commands 5-96 Configuring the Internet Protocol ip osp f message-digest-key This command enables/disables OSPF MD5 authentication on an interface to val i d a t e OSPF routing updates between neighboring routers.
OSPF Commands XSR CLI Reference Guide 5-97 Mode Interface configuration: XSR(config-if< xx ># Example The following example imposes OSPF passive on Fast E.
OSPF Commands 5-98 Configuring the Internet Protocol Mode Interface configuration: XSR(config-if< xx >)# Default 1 Example The following example sets OSPF priority to 20 for FastEthernet port 1: XSR(config)#interface fastethernet 1 XSR(config-if<F1>)#ip address 172.
OSPF Commands XSR CLI Reference Guide 5-99 ip osp f transmit-delay This command sets the interv al required to trans mit a link state update packet on this interface.
OSPF Commands 5-100 Configuring the Internet Protocol Mode Router configuration: XSR(config-router)# Default s • Disabled •C o s t s : LAN ‐ 10, Serial ‐ 64 Example In this example , three routers are configured to run OSPF .
OSPF Commands XSR CLI Reference Guide 5-101 Synt ax of the “no” Form The no form of this command cancels the redistribution of routes: no redistribute from_.
OSPF Commands 5-102 Configuring the Internet Protocol Next Mode Router configuration: XSR(config-router)# Default OSPF disabled Example The following example enables OSPF .
OSPF Commands XSR CLI Reference Guide 5-103 Synt ax of the “no” Form The no form of this command removes summary addressing on the XSR: no summary-addre.
OSPF Debug and Show Commands 5-104 Configuring the Internet Protocol OSPF Debug and Show Commands debug ip osp f dr This command debugs OSPF des ignated router events. As wi th al l XSR debug command s, it is set to privilege leve l 15 by default.
OSPF Debug and Show Commands XSR CLI Reference Guide 5-105 Synt ax of the “no” Form The no form of this command returns the debug function to the de.
OSPF Debug and Show Commands 5-106 Configuring the Internet Protocol debug ip osp f lsas This command debugs OSPF Link State Advertisem ents (LS As). As with all XSR debug commands, it is set to privilege lev el 15 by default.
OSPF Debug and Show Commands XSR CLI Reference Guide 5-107 OSPF: Tx LSA. external, age:017a opt :20 id:13.0.0.0 rid:10.0.0.1 seq: 80000088 chk:807a l:36 from GigabitEthernet 2 The following example displays a receiv ed LSA acknowledgement: OSPF: Rx Ack.
OSPF Debug and Show Commands 5-108 Configuring the Internet Protocol Synt ax debug ip ospf nbr Synt ax of the “no” Form The no form of this command returns the debu.
OSPF Debug and Show Commands XSR CLI Reference Guide 5-109 show ip osp f This command, when any debugging type is enabled, displays output about the fol.
OSPF Debug and Show Commands 5-110 Configuring the Internet Protocol show ip osp f border-routers This command displays information about OSPF internal route table entries to ABRs and ASBRs.
OSPF Debug and Show Commands XSR CLI Reference Guide 5-111 show ip osp f dat abase This command displays the link state (LS) database.
OSPF Debug and Show Commands 5-112 Configuring the Internet Protocol No Parameter XSR>show ip ospf database OSPF Router with ID(10.1.2.1) Displaying Net Link States (Area 0.0.0.0) LinkID ADV Router Age Seq# Checksum 10.1.1.1 10.0.0.1 0x1 0x80000001 0x61c610.
OSPF Debug and Show Commands XSR CLI Reference Guide 5-113 (Link Data) Router Interface addr ess: 0.0.0.0 Number of TOS metrics: 0 TOS 0 Metrics: 64 Network Parameter XSR>show ip ospf database network OSPF Router with ID (192.168.44.2) Net Link States (Area 0.
OSPF Debug and Show Commands 5-114 Configuring the Internet Protocol Link State ID: 172.15.0.0 (summary N etwork Number) Advertising Router: 192.168.44.2 LS Seq. number: 80000006 Checksum: 0x5ACD Length: 28 Network Mask: /0 TOS: 0 Metric: 16777215 External Parameter Response XSR>show ip ospf database external OSPF Router with ID (192.
OSPF Debug and Show Commands XSR CLI Reference Guide 5-115 Forward Address: 192.168.33.2 External Route Tag: 0 Dat abase-summary Parameter Re sponse XSR>show ip ospf data database-summa ry OSPF Router with ID (192.168.44.1) AreaID Router Network S-Net S-ASBR Type-7 Subtotal Delete Manage 0.
OSPF Debug and Show Commands 5-116 Configuring the Internet Protocol For Network Parameter For Summary Parameter Display T ype of rou te r Ty p e of OSPF rou ter ‐ internal, ABR, and ASBR. Number of links To t a l individual links inside this LS record.
OSPF Debug and Show Commands XSR CLI Reference Guide 5-117 For ASB-summary Parameter Display For External Parameter LS T ype Summary links (network) for summary LS record. Link State ID IP address of the summarized network.
OSPF Debug and Show Commands 5-118 Configuring the Internet Protocol For NSSA-external Parameter For Dat abase-summary Parameter Length Length of the LS record in bytes. Network mask Mask of the network. Metric type OSPF type 1 or 2 metric.
OSPF Debug and Show Commands XSR CLI Reference Guide 5-119 show ip osp f interface This command displays interface OSPF ‐ related information, including network type, priority , cost, hello, interv al, dead interval.
OSPF Debug and Show Commands 5-120 Configuring the Internet Protocol show ip osp f neighbor This command displays the state of communication betw een this router and it s neighbor routers.
OSPF Debug and Show Commands XSR CLI Reference Guide 5-121 Sample Output The following are sample responses: XSR#show ip ospf neighbor ID Pri State Dead Intvl Address Address 10.7.7.1 1 FULL 40 10.5.6.1 FastEthernet6 10.0.0.1 1 FULL 40 10.
OSPF Debug and Show Commands 5-122 Configuring the Internet Protocol Sample Output The following is sample output: XSR>show ip ospf virtual-links Virtual Link OSPF_VLI to router 192. 168.22.1 is up Run as demand circuit. DoNotAge LSA not allowed (Number o f Dcbitless LSA is 2).
RIP Commands XSR CLI Reference Guide 5-123 RIP Commands dist ance (RIP) This command defines administrative distances (route prefe rence) in the RIP domain. The RIP default ranks higher than all other routed di stances.
RIP Commands 5-124 Configuring the Internet Protocol Mode Router configuration: XSR(config-router)# Example The following example sets the RIP administrative distan.
RIP Commands XSR CLI Reference Guide 5-125 ip rip authentication This command sets or deletes the single authentication key used for RIP authentication on the interface. Authentication can be used only if a key exis ts.
RIP Commands 5-126 Configuring the Internet Protocol FastEthernet port 2 is instructed to be totally passive (no adve rtising on it, no sending of triggered updates, and no receiving of updates).
RIP Commands XSR CLI Reference Guide 5-127 Mode Interface configuration: XSR(config-if< xx >)# Default No authentication mode specified.
RIP Commands 5-128 Configuring the Internet Protocol Default Allows RIP to respond to a triggered update. Example This example prevents RIP from respond.
RIP Commands XSR CLI Reference Guide 5-129 Figure 5-3 Offs et Example ip rip receive version This command sets RIP v1 or v2 for update packets receiv ed on the port.
RIP Commands 5-130 Configuring the Internet Protocol ip rip send version This command sets RIP v1 or v2 for update packets sent on the interface.
RIP Commands XSR CLI Reference Guide 5-131 Default IP split ‐ horizon Example The following command sets split horizon for packets to be transmitted b.
RIP Commands 5-132 Configuring the Internet Protocol network This command attaches a ne twork of directly connected networks to a RI P routing process.
RIP Commands XSR CLI Reference Guide 5-133 Example This example sets F2 as a passiv e interface. No RIP updates will be transmitted on F2 : .
RIP Commands 5-134 Configuring the Internet Protocol Synt ax of the “no” Form The no form of this command cancels the redistribution of routes: no redistrib.
RIP Commands XSR CLI Reference Guide 5-135 Example XSR(config)#router rip XSR(config-router)# timers This command configures RIP timers.
RIP Show Commands 5-136 Configuring the Internet Protocol RIP Show Commands show ip rip This command displays configuration data and stati stics global to all ports.
RTP Header Compression Commands XSR CLI Reference Guide 5-137 Routing Source Information: 192.168.28.0/24 via: 192.168.29.22 cost:2 age:16 FastEthernet2 1.1.1.1/32 via: 192.168.29.22 cost:2 age:16 FastEthernet2 10.0.0.0/32 via: 201.1.1.0 cost:2 age: - Serial2/0:1.
RTP Header Compression Commands 5-138 Configuring the Internet Protocol UDP payload must be less than 500 bytes Pa c k e t must not be fragmented The de.
RTP Header Compression Commands XSR CLI Reference Guide 5-139 Mode Interface configuration: XSR(config-if<xx>)# This command is applicable only on serial interface with PPP encapsulation.
RTP Header Compression Commands 5-140 Configuring the Internet Protocol Mode Interface configuration: XSR(config-if<xx>)# This command is applicable only on serial interface with PPP encapsulation.
RTP Header Compression Commands XSR CLI Reference Guide 5-141 show ip rtp header compression interface serial This command displays the RT P header compression statistics for the specif ic PPP serial interface.
Triggered on Demand RIP Commands 5-142 Configuring the Internet Protocol T riggered on Demand RIP Commands The following commands are subsets of triggered RIP functionality: • ip rip max-retransmissions - Specifies the maximum number of retransmissions.
Triggered on Demand RIP Commands XSR CLI Reference Guide 5-143 • ip rip triggered-on-demand ‐ Enables the functionality on the specified interface. Refer to page 192 for the command definition.
Triggered on Demand RIP Commands 5-144 Configuring the Internet Protocol Synt ax of the “no” Form The no command resets maximum retransmissions to the default: no i.
Policy-Based Routing Commands XSR CLI Reference Guide 5-145 Synt ax of the “no” Form The no form of this command disables triggered RIP on the interface.
Policy-Based Routing Commands 5-146 Configuring the Internet Protocol Examples The following example enables PBR on interface FastEthernet 2 : XSR(config-if<F2>)#.
Policy-Based Routing Commands XSR CLI Reference Guide 5-147 match ip address This command associates the PBR policy with a configured Access Control List (ACL).
PBR Clear and Show Commands 5-148 Configuring the Internet Protocol set interface This command specifies an XSR interface as the forw arding port for Po l i c y Based Routing.
ARP Commands XSR CLI Reference Guide 5-149 XSR>show ip pbr-cache Source Destination Age(sec) IP Prot TCP/UDP Port ICMP Code 192.168.1.1 192.168.27.1 109 1 8 192.
ARP Commands 5-150 Configuring the Internet Protocol Synt ax arp ip-address hardware-address Synt ax of the “no” Form The no form of this command deletes the specif.
Other IP Commands XSR CLI Reference Guide 5-151 Example This example adds a permanent ARP entry for the IP addr ess 130.2.3.1 and sets the timeout at 5 hours (18,000 seconds) as shown in Figure 5 ‐ 4 : XSR(config)#arp 130.
Other IP Commands 5-152 Configuring the Internet Protocol Mode Interface configuration: XSR(config-if< xx >)# Examples The following CIDR exam ple sets IP address 192.168.1.1 with a mask of /24 on interface F1 .
Other IP Commands XSR CLI Reference Guide 5-153 Mode Global configuration: XSR(config)# Example In the following example, as shown in Figu re 5 ‐ 5 , Router 1 sets two candidates for the def ault route: network 199.
Other IP Commands 5-154 Configuring the Internet Protocol Mode Interface configuration: XSR(config-if< xx >)# Default Enabled Example The following example denies ICMP br.
Other IP Commands XSR CLI Reference Guide 5-155 ip domain This command identifies th e domain to which the XSR belongs.
Other IP Commands 5-156 Configuring the Internet Protocol Parameters Synt ax of the “no” Form The no form of the command disables equal ‐ cost mu lti ‐ path: no.
Other IP Commands XSR CLI Reference Guide 5-157 Synt ax of the “no” Form The no form of this command removes a UDP port or UDP protocol. If the UDP protocol is removed, UDP forw arding is disabled.
Other IP Commands 5-158 Configuring the Internet Protocol DHCP Relay Functionality The DHCP Relay functionality is applied with the help of IP broadc ast forw arding.
Other IP Commands XSR CLI Reference Guide 5-159 XSR(config)#ip forward-protocol udp XSR(config)#interface fastethernet 1 XSR(config-if<F1>)#ip helper-address 192.168.1.255 XSR(config)#interface fastethernet 2 XSR(config-if<F2)#ip helper-address 192.
Other IP Commands 5-160 Configuring the Internet Protocol Synt ax ip irdp [ multicast | holdtime seconds | advertinterval seconds | preference number ] Synt ax of the “no” Form The no form.
Other IP Commands XSR CLI Reference Guide 5-161 Mode Interface configuration: XSR(config-if< xx >)# Default 1500 Example The following example sets the MTU size t.
Other IP Commands 5-162 Configuring the Internet Protocol Synt ax ip proxy-dns enable Synt ax of the “no” Form The no form of this command disables Proxy DNS: no ip.
Other IP Commands XSR CLI Reference Guide 5-163 Synt ax of the “no” Form The no form of this command negates IP redirection: no ip redirects Default Enabled Mode Gl.
Other IP Commands 5-164 Configuring the Internet Protocol Mode Global configuration: XSR(config)# Examples This example, shown in Figure 5 ‐ 8 , sets 2 static routes to netw orks 192.1.2.0 and 193.
Other IP Commands XSR CLI Reference Guide 5-165 ip tcp adjust-mss This command sets the Maximum Segment Size (MSS) for TCP SYN (synchronize) packets.
Other IP Commands 5-166 Configuring the Internet Protocol ip telnet server This command enables or disable s Te l n e t service to the XSR. If the optional parameter is not supplied, the Te l n e t server is enabled.
Other IP Commands XSR CLI Reference Guide 5-167 Synt ax ip unnumbered [ type number ] Synt ax of the “no” Form The no form of this command disables the unnumbered .
IP Clear and Show Commands 5-168 Configuring the Internet Protocol Example The following example configures a router identifier: XSR(config)#ip router-id 1.2.3.4 IP Clear and Show Commands clear arp-cache This command deletes all nonstatic entries from the ARP cache.
IP Clear and Show Commands XSR CLI Reference Guide 5-169 clear ip traffic-counters This command clears all IP related counters (IP , ICMP , ARP , UDP , TCP , RIP , OSPF) displayed by the show ip traffic command.
IP Clear and Show Commands 5-170 Configuring the Internet Protocol Internet 134.141.235.137 1 00b0.d07f.0cab ARPA FastEthernet1 Internet 134.141.235.150 0 00b0.d02c.06d2 ARPA FastEthernet1 Internet 134.141.235.155 2 00b0.d02c.077e ARPA FastEthernet1 Internet 134.
IP Clear and Show Commands XSR CLI Reference Guide 5-171 Sample Output The following is sample output from the command: XSR>show ip interface Dialer 0 is Admin Up Internet address is 1.
IP Clear and Show Commands 5-172 Configuring the Internet Protocol Internet address is 58.58.58.1, sub net mask is 255.255.255.0 Seconda ry Rcvd: 515027 octets, 3306 unicast p ackets, 0 discards, 0 errors, 0 unkno wn protocol. Sent: 363256 octets, 2472 unicast p ackets, 0 discards, 0 errors.
IP Clear and Show Commands XSR CLI Reference Guide 5-173 show ip ird p This command displays ICMP router discov ery settings. Synt ax show ip irdp Configuration Mode EXEC o.
IP Clear and Show Commands 5-174 Configuring the Internet Protocol Sample Output The following is sample output from the command: XSR>show ip proxy-dns cache Name Age(sec) www.
IP Clear and Show Commands XSR CLI Reference Guide 5-175 Sample Output The following is sample output. Note the route costs as indicate d within brackets.
IP Clear and Show Commands 5-176 Configuring the Internet Protocol show ip st atic dat abase This command displays static route information including the destination IP address , gat eway IP address, and administrative distance .
IP Clear and Show Commands XSR CLI Reference Guide 5-177 show ip traffic This command displays general IP protocols statistics.
IP Clear and Show Commands 5-178 Configuring the Internet Protocol 0 link state updates, 0 link state a cks Sent: 0 total ARP statistics: Rcvd: 87441 requests, 5 replies Sent: 3 requests, 36 replies (.
IP Clear and Show Commands XSR CLI Reference Guide 5-179 Max Unresolved ARP Requests| 0| 384| 0| 0 Routing Table Size| 3| 352| 1056| 0 Number of Static Routes| 2| 96| 192| 0 Number of Secondary IP| 0|.
IP Clear and Show Commands 5-180 Configuring the Internet Protocol Parameter Description show tcp This command displays TCP statistics.
IP Clear and Show Commands XSR CLI Reference Guide 5-181 4 transitions from LISTEN to SYN-RCV D 2 transitions from SYN-SENT or SYN-R CVD to CLOSED 2 transitions from ESTABLISHED or CL OSE-WAIT to CLOS.
Network Address Translation Commands 5-182 Configuring the Internet Protocol Default Standard Te l n e t port 23. If the port is not provided , the client will try to connect to port 23 on the remote serv er .
Network Address Translation Commands XSR CLI Reference Guide 5-183 The following example clears a specific UDP entry from the NAPT table: XSR#clear ip nat translation fastEthernet 1 17 200.
Network Address Translation Commands 5-184 Configuring the Internet Protocol Next Mode IP Local P ool configuration: XSR(ip-local-pool) # Example The following example creates local IP address pool marketing , which contains all IP addr esses in the range 203.
Network Address Translation Commands XSR CLI Reference Guide 5-185 Synt ax ip nat pool name Synt ax of the “no” Form The no command removes one or more ad dresses f.
Network Address Translation Commands 5-186 Configuring the Internet Protocol XSR(config)#ip nat service list 1 ft p tcp port 2021 XSR(config)#access-list 1 permit 10. 1.1.1 This example sets non ‐ standard port 2021 and standard port 21 for FT P .
Network Address Translation Commands XSR CLI Reference Guide 5-187 ip nat source int f-st atic (interface mode) This command configures a single static translation entry in the Network Ad dress T ranslation (NA T) table.
Network Address Translation Commands 5-188 Configuring the Internet Protocol Synt ax of the “no” Form The no form of the command removes a single static tra.
Network Address Translation Commands XSR CLI Reference Guide 5-189 Default s •T i m e o u t : 180 seconds (3 minutes) •U D P ‐ timeout: 300 seconds (5 min utes) .
Network Address Translation Commands 5-190 Configuring the Internet Protocol NAPT using address: 10.10.10.2 Num translations: 8 ------------------------------------ --- Pro Private Host NAT Addr External Host Idle (Local IP Addr) (Global IP Addr) UDP 192.
Virtual Router Redundancy Protocol Commands XSR CLI Reference Guide 5-191 V irtual Router Redundan cy Protocol Commands vrrp <group> adver-int This command configures the interval betw een successive advertisements sent by the master VR in a virtual group.
Virtual Router Redundancy Protocol Commands 5-192 Configuring the Internet Protocol message is accepted and if not, it is discarded. All routers within the group must share the same authentication string.
Virtual Router Redundancy Protocol Commands XSR CLI Reference Guide 5-193 Synt ax vrrp group ip ipaddress Synt ax of the “no” Form The no form of this command removes t.
Virtual Router Redundancy Protocol Commands 5-194 Configuring the Internet Protocol Default s • Disabled ‐ the VR master will not respond to an ICMP echo request sent to the virtual IP address if it is not the physical owner .
Virtual Router Redundancy Protocol Commands XSR CLI Reference Guide 5-195 Mode Interface configuration: XSR(config-if< xx >)# Examples The following example enables preem.
Virtual Router Redundancy Protocol Commands 5-196 Configuring the Internet Protocol vrrp <group> track This command allows a Vir t u a l Router (VR) to track .
VRRP Clear and Show Commands XSR CLI Reference Guide 5-197 XSR(config)#interface fastethernet 1 XSR(config-if)#vrrp 2 track serial 1/0 This example disables the track ing of in.
VRRP Clear and Show Commands 5-198 Configuring the Internet Protocol Mode EXEC: XSR> Sample Output The following sample output displays configuration data for al.
VRRP Clear and Show Commands XSR CLI Reference Guide 5-199 InvalidTypePktsRcvd: 0 UnknownAuthType: 0 AuthTypeErrors: 10 AuthFailures: 0 show vrrp interface This command displays all the virtual routers and the ir status on a specified interface.
VRRP Clear and Show Commands 5-200 Configuring the Internet Protocol show vrrp summary This command displays VRRP summary information on this router .
VRRP Clear and Show Commands XSR CLI Reference Guide 5-201 Maximum number of virtual addresses per VR: 11 Number of virtual IP address in use: Fast Ethernet 1 Fast Ethernet 2 F ast Ethernet 3 VR1 1 1 .
VRRP Clear and Show Commands 5-202 Configuring the Internet Protocol.
XSR CLI Reference Guide 6-83 6 Configuring the Border Gateway Protocol Observing Synt ax and Conventions The CLI command syntax and conventions use the notation described below .
BGP Configuration Commands 6-84 Configuring the Border Gateway Pr otocol •N e t w o r k s •N e i g h b o r parameters • Routing policies Synt ax router bgp autonomous-system Synt ax of t.
BGP Configuration Commands XSR CLI Reference Guide 6-85 Synt ax of the “no” Form The no form of this command removes the aggregate entry from the ta.
BGP Configuration Commands 6-86 Configuring the Border Gateway Pr otocol Mode Router configuration: XSR(config-router)# Default Enabled Example The following example configures .
BGP Configuration Commands XSR CLI Reference Guide 6-87 bgp bestp ath med missing-as-worst This command specifies that a route with a MED is alw ays conside.
BGP Configuration Commands 6-88 Configuring the Border Gateway Pr otocol Example This example first disables the default reflection setting on this router t.
BGP Configuration Commands XSR CLI Reference Guide 6-89 Synt ax bgp confederation identifier autonom ous-system Synt ax of the “no” Form The no form of this command removes.
BGP Configuration Commands 6-90 Configuring the Border Gateway Pr otocol bgp dampening This command enables BGP route dampening to minimize propagation of flapping routes (repeatedly available/unav ailable) across the netw ork.
BGP Configuration Commands XSR CLI Reference Guide 6-91 bgp default local-preference This command changes the default local preference val u e .
BGP Configuration Commands 6-92 Configuring the Border Gateway Pr otocol Default s •E x t e r n a l : 20 • Internal: 200 Mode Router configuration: XSR(config-router)# Example This.
BGP Configuration Commands XSR CLI Reference Guide 6-93 Example The following example sets the neighbor adverti sement ‐ interv al va l ue within BGP process 100 .
BGP Configuration Commands 6-94 Configuring the Border Gateway Pr otocol neighbor distribute-list This command distributes the information specified in an access ‐ list to a BGP neighbor .
BGP Configuration Commands XSR CLI Reference Guide 6-95 neighbor ebgp-multihop This command connects the BGP neighbors on networks that are not directly ‐ connected to the network of the router that this command is entered on.
BGP Configuration Commands 6-96 Configuring the Border Gateway Pr otocol Synt ax of the “no” Form The no form of this command removes the specified neighbor: no.
BGP Configuration Commands XSR CLI Reference Guide 6-97 Synt ax of the “no” Form The no form of this command removes the specified neighbor: no neighbor { ip-ad.
BGP Configuration Commands 6-98 Configuring the Border Gateway Pr otocol Example The following example sets the router at 192.168.1.1 as the next hop: XSR(config)#router bgp 100 XSR(config-router)#neighbor 192.
BGP Configuration Commands XSR CLI Reference Guide 6-99 neighbor peer-group This command creates a BGP peer group and assigns a BGP neighbor to a peer group.
BGP Configuration Commands 6-100 Configuring the Border Gateway Protocol Mode Router configuration: XSR(config-router)# Example The following example configures two neighbors.
BGP Configuration Commands XSR CLI Reference Guide 6-101 neighbor route-reflector-client This command establishes the router that this command wa s entered on as a BGP route reflector .
BGP Configuration Commands 6-102 Configuring the Border Gateway Protocol Example The following example sets a neighbor ’ s community: XSR(config)#router bgp 100 XSR(config-router)#neighbor 192.168. 1.1 remote-as 101 XSR(config-router)#neighbor 192.
BGP Configuration Commands XSR CLI Reference Guide 6-103 Synt ax of the “no” Form The no form of this command returns to the command default: no neighbor { .
BGP Configuration Commands 6-104 Configuring the Border Gateway Protocol Mode Router configuration: XSR(config-router)# Example This example sets the peer keep ‐ aliv e .
BGP Configuration Commands XSR CLI Reference Guide 6-105 neighbor weight This command specifies a we ig ht va l ue for a connection to a neighbor or a BGP peer group.
BGP Configuration Commands 6-106 Configuring the Border Gateway Protocol Synt ax of the “no” Form The no form of this command removes the configured filter .
BGP Configuration Commands XSR CLI Reference Guide 6-107 Synt ax of the “no” Form The no form of this command removes the commmunity list number: no communi.
BGP Configuration Commands 6-108 Configuring the Border Gateway Protocol Synt ax of the “no” Form The no form removes the network from the routing table: no net.
BGP Configuration Commands XSR CLI Reference Guide 6-109 Mode Router configuration: XSR(config-router)# Default Redistribution is not enabled.
Route Map Commands 6-110 Configuring the Border Gateway Protocol Synt ax timers bgp keep-alive Synt ax of the “no” Form The no form of this command deletes the time.
Route Map Commands XSR CLI Reference Guide 6-111 Synt ax of the “no” Form The no form of this command removes the patch li st number: no match as-path path-.
Route Map Commands 6-112 Configuring the Border Gateway Protocol Mode Route ‐ map configuration: XSRA(config-route-map)# Default No match based on community list Example .
Route Map Commands XSR CLI Reference Guide 6-113 Mode Route ‐ map configuration: XSR(config-route-map)# Example The following example sets the match metric to .
BGP Set Commands 6-114 Configuring the Border Gateway Protocol Synt ax match ip next-hop access-list-number Synt ax of the “no” Form The no form of this command removes .
BGP Set Commands XSR CLI Reference Guide 6-115 Synt ax of the “no” Form The no form of this command removes the AS path va lu e : no set as-path Mode Route .
BGP Set Commands 6-116 Configuring the Border Gateway Protocol Synt ax of the “no” Form The no form of this command removes the se t community val u e : no .
BGP Set Commands XSR CLI Reference Guide 6-117 •T h e XSR penalizes a route marked as unstable with a va l u e of 1024 each time it fails.
BGP Set Commands 6-118 Configuring the Border Gateway Protocol XSR(config)#router bgp 100 XSR(config)#bgp dampening route-map 1 set ip next-hop This command specifies where to output packets that pass a match clause of a route map for policy routing.
BGP Set Commands XSR CLI Reference Guide 6-119 Synt ax of the “no” Form The no form of this command removes the lo cal preference val u e: no set local-preference value Mode Route ‐ map configuration: XSR(config-route-map)# Default Preference val u e : 100.
BGP Set Commands 6-120 Configuring the Border Gateway Protocol Mode Route ‐ map configuration: XSR(config-route-map)# Default The dynamically ‐ learned metric valu e .
BGP Set Commands XSR CLI Reference Guide 6-121 Mode Route ‐ map configuration: Router(config-route-map)# Default The default val ue for this command is the defaul t val u e for the origin code.
BGP Clear and Show Commands 6-122 Configuring the Border Gateway Protocol Example The following example configures the weig ht parameter in the context of c.
BGP Clear and Show Commands XSR CLI Reference Guide 6-123 Synt ax clear ip bgp {* | address | peer-gro up peer-group-name } [ soft [ in | out ]]} Mode Privileged EXEC: XSR# Examples This e.
BGP Clear and Show Commands 6-124 Configuring the Border Gateway Protocol show ip bgp This command displays entries in the BGP routing table.
BGP Clear and Show Commands XSR CLI Reference Guide 6-125 Display Parameters The following is sample output from the command: XSR#show ip bgp 55.5.5.0/24 BGP routing table entry for 55.5.5.0 255.255.255.0 Paths: (2 available, learned over EB GP) AS Path 200, Aggregator 500 1.
BGP Clear and Show Commands 6-126 Configuring the Border Gateway Protocol XSR#show ip bgp community 400 Local router ID is 1.1.1.4 Status codes: s suppressed, * valid, > best, i - internal Origin codes: i - IGP, e - EGP, ? = incomplete Network Next Hop Metric LocPrf Weight Path *> 192.
BGP Clear and Show Commands XSR CLI Reference Guide 6-127 Synt ax show ip bgp dampened-paths Mode EXEC configuration: XSR> Example The following is sample output from the command: XSR#show ip bgp dampened-paths Local router ID is 1.
BGP Clear and Show Commands 6-128 Configuring the Border Gateway Protocol show ip bgp inconsistent-as This command displays routes that have incomplete originating ASs.
BGP Clear and Show Commands XSR CLI Reference Guide 6-129 Hold time is 90, keepalive interval is 30 seconds Neighbor capabilities: Route Refresh: advertised & recei ved Address family IPv4 Unicast.
BGP Clear and Show Commands 6-130 Configuring the Border Gateway Protocol show ip bgp peer-group This command displays information about th e BGP peer group belonging to the router that this command is entered on.
BGP Clear and Show Commands XSR CLI Reference Guide 6-131 Local router ID is 1.1.1.4 Status codes: s suppressed, * valid, > best, i - internal Origin codes: i - IGP, e - EGP, ? = incomplete Network Next Hop Metric LocPrf Weight Path *> 192.4.4.0/24 192.
BGP Debug Commands 6-132 Configuring the Border Gateway Protocol show route-map This command displays configured route maps and information about policy maps that are referenced.
BGP Debug Commands XSR CLI Reference Guide 6-133 Synt ax of the “no” Form The no form of this command disables debugging output: no debug ip bgp [ events | updates ] Mode EXEC configuration: XSR> Default BGP debugging is di sabled.
BGP Debug Commands 6-134 Configuring the Border Gateway Protocol Display Parameters show ip traffic This command display BGP statistics among other IP data.
XSR CLI Reference Guide 7-83 7 Configuring IP Multicast Observing Synt ax and Conventions The CLI command syntax and conventions use the notation described below .
Observing Syntax and Conventions 7-84 Configuring IP Multicast Synt ax The no form of the command disables the multicast service: no ip multicast-routing Mode Globa.
Observing Syntax and Conventions XSR CLI Reference Guide 7-85 ip igmp join This command manua lly joins a multicast group to a local interface.
Observing Syntax and Conventions 7-86 Configuring IP Multicast ip igmp last-member-query-interval This command sets the frequency at which IGMP group ‐ specific host query messages ar e sent.
Observing Syntax and Conventions XSR CLI Reference Guide 7-87 Example This example changes the frequency which IGMP host ‐ query messages are sent to .
Observing Syntax and Conventions 7-88 Configuring IP Multicast Mode Interface configuration: XSR(config-if<xx>)# Default Tw o ti mes the query interv al Example The f.
PIM Commands XSR CLI Reference Guide 7-89 PIM Commands ip pim sp arse-mode This command enables Protocol Independent Multicast (PIM) Spa rse Mode (SM) on a local interface.
PIM Commands 7-90 Configuring IP Multicast Example The following example sets interface F1 as the PIM domain border: XSR(config-if<F1>)#ip pim bsr-border .
PIM Commands XSR CLI Reference Guide 7-91 ip pim dr-priority This command sets the priority for which a router is elected as the Designated Router (DR).
PIM Commands 7-92 Configuring IP Multicast Default 60 seconds Example The following example changes the PIM ‐ SM message interv al to 120 seconds: XSR(con.
PIM Commands XSR CLI Reference Guide 7-93 Synt ax of the “no” Form The no form of this command removes the static RP configuration: no ip pim rp-address rp-.
PIM Commands 7-94 Configuring IP Multicast ip pim regcksum wholep acket This command changes the register checksum calculation to the industry standard.
IGMP Clear and Show Commands XSR CLI Reference Guide 7-95 Default The threshold is 0 Example The following example sets the source tree switching threshold .
IGMP Clear and Show Commands 7-96 Configuring IP Multicast State: Dynamic Mode: Include Current version: V3 Group IP: 232.1.1.1 Reporter IP: 3.3.3.199 V1MEM exist timer: 0 V2MEM exist timer: 0 Member expire timer: 256 Source IP: 6.
IGMP Clear and Show Commands XSR CLI Reference Guide 7-97 IGMP state: Enabled Multicast ttl threshold: 0 Current query Interval: 125 Last Member Interval: 1 Querier timeout: 255 Max Response Timeout: 10 Current robust value: 2 Querier IP: 1.
IGMP Clear and Show Commands 7-98 Configuring IP Multicast show ip mroute This command displays entries in the IP multicast routing table.
IGMP Clear and Show Commands XSR CLI Reference Guide 7-99 Parameters in the Response show ip pim bsr This command displays Bootstrap Router (BSR) ver s io n 2 information.
IGMP Clear and Show Commands 7-100 Configuring IP Multicast Example The following example displays sample responses: XSR>#show ip pim bsr PIMv2 Bootstrap information This system is the Elected Bootstrap Router (BSR) BSR address: 192.
IGMP Clear and Show Commands XSR CLI Reference Guide 7-101 Parameter Descriptions show ip pim neighbor This command displays discov ered Protocol Independent Multicast (PIM) neighbors.
IGMP Clear and Show Commands 7-102 Configuring IP Multicast show ip pim rp This command displays the activ e rende zvous points (RPs) that are cached with associated multicast routing entries.
IGMP Clear and Show Commands XSR CLI Reference Guide 7-103 Example The following example displays sample responses: XSR>show ip pim rp-hash 239.1.1.1 RP 192.168.27.12 Parameter Descriptions RP Address of the RP for the group specified (239.
IGMP Clear and Show Commands 7-104 Configuring IP Multicast.
XSR CLI Reference Guide 8-83 8 Configuring the Point-to-Point Protocol Observing Synt ax and Conventions The CLI Syntax and conv entions use the notation descri bed in the following table.
PPP Commands 8-84 Configuring the Point-to-Point Protocol encap sulation ppp This command sets the Poi n t ‐ to ‐ Po i n t Protocol (PPP) as the encapsulation method used by a ser ial port.
PPP Commands XSR CLI Reference Guide 8-85 Synt ax interface type slot_num card_num por t_num sub-interface_num Slots, cards, ports, and sub ‐ interfaces ar e expressed as.
PPP Commands 8-86 Configuring the Point-to-Point Protocol XSR(config)#interface serial 1/0 XSR(config-if<S1/0>)#encapsulation p pp XSR(config-if<S1/0>)#no shutdown The following ex.
PPP Commands XSR CLI Reference Guide 8-87 Synt ax of the “no” Form The no form of this command disable PPP authentication: no ppp authentication Default Not ena.
PPP Commands 8-88 Configuring the Point-to-Point Protocol Example 2 Figure 8 ‐ 2 shows two router s, Site A and Site B, and only one peer configured to do authentication (using chap) with only Site B issuing the challenge.
PPP Commands XSR CLI Reference Guide 8-89 Synt ax of the “no” Form The no form of this command disables either function: no ppp chap { hostname | refuse | password .
PPP Commands 8-90 Configuring the Point-to-Point Protocol Example The following example sets Serial interface 1/0 to have keepaliv e configured at 8 ‐.
PPP Commands XSR CLI Reference Guide 8-91 Synt ax ppp lcp max-failure number Synt ax of the “no” Form The no command resets the counter to the def ault val u e .
PPP Commands 8-92 Configuring the Point-to-Point Protocol Mode Serial, Dialer and Fast/GigabitEthernet Sub ‐ interface configuration: XSR(con fig-if< xx >)# Example The.
PPP Commands XSR CLI Reference Guide 8-93 Synt ax ppp pap sent-username [ username ] pas sword [ password ] Synt ax of the “no” Form Use the no form of this command to .
PPP Commands 8-94 Configuring the Point-to-Point Protocol Synt ax ppp peer default ip address { ip addr ess } Synt ax of the “no” Form Use the no form of this command t.
PPP Commands XSR CLI Reference Guide 8-95 Synt ax of the “no” Form Use the no form of this command to di sable LQM: no ppp quality Default Disabled Mode Interfa.
PPP Commands 8-96 Configuring the Point-to-Point Protocol XSR(config-if<S1>)#ppp timeout retry 20 username This command adds or modifies a user who can manage the XSR.
PPP Debug, Clear and Show Commands XSR CLI Reference Guide 8-97 Example The following example enables CHAP on serial interface 1/0 and defines a passw o.
PPP Debug, Clear and Show Commands 8-98 Configuring the Point-to-Point Protocol XSR#debug ppp packet serial 2/0:0 li mit 10 lcp bacp bap Sample Output The following debugging output di.
PPP Debug, Clear and Show Commands XSR CLI Reference Guide 8-99 Synt ax of the “no” Form The no form of this command removes PPP de bugging on the inter.
PPP Debug, Clear and Show Commands 8-100 Configuring the Point-to-Point Protocol XSR#show ppp interface ********** PPP Stats ********** Serial 1/0:0: PPP is Admin Up / Oper Up / Link Speed: 64000 LCP .
PPP Debug, Clear and Show Commands XSR CLI Reference Guide 8-101 Mode EXEC or Global configuration: XS R> or XSR(config)# Sample Output The following output is displ.
PPP Debug, Clear and Show Commands 8-102 Configuring the Point-to-Point Protocol Mode EXEC or Global configuration: XS R> or XSR(config)# Sample Output The following output is produced by this command: Serial 1/0 is Admin Up / Oper Up Internet address is 25.
PPP Debug, Clear and Show Commands XSR CLI Reference Guide 8-103 Mode EXEC or Global configuration: XS R> or XSR(config)# Sample Output The following output display s .
PPP Debug, Clear and Show Commands 8-104 Configuring the Point-to-Point Protocol Serial 1/0:0 Serial 1/0:3 Serial 1/0:7 Serial 1/0:13 Serial 1/0:10 Serial 1/0:1 Serial 1/0:25 Serial 1/0:11 Serial 1/0:.
PPP Debug, Clear and Show Commands XSR CLI Reference Guide 8-105 Quality: good InGoodOctets : 26600 LocalPeriod: 100000 RemotePeriod: 100 000 OutLQRs:1000InLQRs: 1000 LCP Configuration: LCP CONFIGURAT.
PPP Debug, Clear and Show Commands 8-106 Configuring the Point-to-Point Protocol RemoteT oLocalProtocolCompression LocalMRU RemoteMRU ReceiveFcsSize T ransmitFcsSize LQR St atus and St atistics This section displays LQR parameters display ed for the local PPP entity .
PPP Debug, Clear and Show Commands XSR CLI Reference Guide 8-107 OutLQRs LCP Configuration This section describes LCP configuration data display ed for a PPP Link.
Multilink PPP Commands 8-108 Configuring the Point-to-Point Protocol St atus Multilink PPP Commands interface multilink This command names the multilink group and creates a logic interface for this multilink group.
Multilink PPP Commands XSR CLI Reference Guide 8-109 XSR(config-if<S1/1>)#multilink-group 2 XSR(config-if<S1/1>)#encapsulation p pp XSR(config-if<S1/1>)#ppp multilink XSR(config-if&l.
Multilink PPP Commands 8-110 Configuring the Point-to-Point Protocol Default 1 Mode Dialer Interface configuration: XSR(con fig-if< xx >)# Examples The following example .
Multilink PPP Commands XSR CLI Reference Guide 8-111 XSR(config-if<D57>)#ppp bap call acc ept ppp bap callback This command sets enables Bandwidth Allocation Protocol (BAP) callback parameters on a dialer interface to set up Bandwidth ‐ on ‐ Demand (BoD).
Multilink PPP Commands 8-112 Configuring the Point-to-Point Protocol Synt ax ppp bap number { default phone-number } Synt ax of the “no” Form The no command removes a BAP p.
Multilink PPP Commands XSR CLI Reference Guide 8-113 Example The following example resets the BAP pending timeout on Dialer port 1: XSR(config)#interface di.
Multilink PPP Commands 8-114 Configuring the Point-to-Point Protocol Default Disabled Mode Dialer or Serial Interface configuration: XSR(config -if<D/S xx >)# Examples The following example configures a dialer for Multilink PPP .
Multilink PPP Commands XSR CLI Reference Guide 8-115 Mode Dialer , Multilink, BRI Interface, and Controller configuration: XSR(c onfig-if< xx >) and XSR(config-contro.
Multilink PPP Commands 8-116 Configuring the Point-to-Point Protocol entered, no maximum fragment size will be set and the fragment size will only be decided with the load balance.
Multilink PPP Commands XSR CLI Reference Guide 8-117 ppp multilink fragment disable This command disables fragmentation over a bundle PPP connection, supporting Multilink and Dialer interfaces.
Multilink PPP Commands 8-118 Configuring the Point-to-Point Protocol Group Num: 1 LCP State: OPENED IPCP State: OPENED Multilink State: OPENED Multi-Class State: OPENED Multilink header format is LONG.
Multilink PPP Commands XSR CLI Reference Guide 8-119 Synt ax of the “no” Form The no form of this command removes the PP P multilink group: no multilink-gro.
Multilink PPP Commands 8-120 Configuring the Point-to-Point Protocol Synt ax multilink load-threshold number ( 1-2 55 ) Default 255 Mode Dialer Interface configuration: XSR(con fig-if< .
Multilink PPP Commands XSR CLI Reference Guide 8-121 Example The following example enables the multi ‐ class MLPPP option: XSR(config-if<D57>)#ppp multilink mu lti-.
Multilink Show Commands 8-122 Configuring the Point-to-Point Protocol Multilink Show Commands show interface multilink This command displays multil ink interface statistics including MLPPP status for both the bundle and the member link.
Multilink Show Commands XSR CLI Reference Guide 8-123 PPP Multilink St atus LCP St ate IPCP St ate Multilink St ate Multi-Class St ate Bundle Size Class Level Tx/Rx Max Load Threshold Bundle Tx/Rx Loa.
Multilink Show Commands 8-124 Configuring the Point-to-Point Protocol Max Fragment Size High Pri Member link is Serial 1/00 PPP Multilink Bundle St atistics Rx St ats Tx St ats Range Not defined. Description Ma ximum fragment size ov er the member links.
Multilink Show Commands XSR CLI Reference Guide 8-125 show ppp interface multilink/dialer This command displays PPP status, statistics and configurat ion data for interfaces running PP P .
Multilink Show Commands 8-126 Configuring the Point-to-Point Protocol Invalid Proto: 0 Wrong Proto: 0 Padding Error: 0 Invalid Cls#: 0 Error to CP: 0 No Lower Lyr: 0 No Upper Lyr: 0 Others: 0 Tx Stats.
Multilink Show Commands XSR CLI Reference Guide 8-127 Pck Too Long: 0 Invalid Proto: 0 Wrong Proto: 0 Padding Error: 0 Invalid Cls#: 0 Error to CP: 0 No Lower Lyr: 0 No Upper Lyr: 0 Others: 0 Tx Stats.
Multilink Show Commands 8-128 Configuring the Point-to-Point Protocol Max Fragment delay is 10 ms Max Fragment Size is 256 bytes Class 0 1 2 3 4 QoSCls# -1 0 1 2 3 ExpctSeq# 1 1 1 1 1 LastFwdSeq# 0 0 .
Multilink Show Commands XSR CLI Reference Guide 8-129 ExpctSeq# LastFwdSeq# LastM# MaxFListSize FragListSize TxSeq# TxBufferSize Tx/Rx Load A verage/Max/Min Description Equivalent QoS class, • -1: fair class. • 0: low priority class. • 1: normal priority class.
Multilink Show Commands 8-130 Configuring the Point-to-Point Protocol Rx St ats Tx St ats show ppp interface multilink/dialer memberlink This command displays general me mber link statistics under MLPPP or specific member link statistics if specified.
Multilink Show Commands XSR CLI Reference Guide 8-131 IPCP State: OPENED Multilink State: OPENED Multi-Class State: OPENED Multilink header format is LONG SEQ NUM Class suspendable level is 5 tx clas .
Multilink Show Commands 8-132 Configuring the Point-to-Point Protocol ********** MLPPP Member Link MultiCl assStats ********** Multilink 1: MLPPP is Admin Up / Ope r Up Group Num: 1 LCP State: OPENED .
Multilink Show Commands XSR CLI Reference Guide 8-133 Rx St ats Tx St ats show ppp interface dialer x mlpppgroup x bap This command displays BAP multilink bundle statistics of a specific bundle under the dialer interface.
Multilink Show Commands 8-134 Configuring the Point-to-Point Protocol BACP State: OPENED Multilink State: OPENED Multi-Class State: OPENED Multilink header format is LONG SEQ NUM Class suspendable lev.
Multilink Show Commands XSR CLI Reference Guide 8-135 Rcv Call-ReqAck: 19 Rcv CallBack-Req: 0 Rcv CallBack-ReqAck: 0 Rcv LinkDrop-Req: 0 Rcv LinkDrop-ReqAck: 0 Tx Call-Req: 20 Tx Call-ReqAck: 0 Tx Cal.
Multilink Show Commands 8-136 Configuring the Point-to-Point Protocol.
XSR CLI Reference Guide 9-83 9 Configuring Frame Relay Observing Synt ax and Conventions CLI command syntax and conventions use the notation described below .
Frame Relay Commands 9-84 Configuring Frame Relay Synt ax encapsulation frame-relay Synt ax of the “no” Form Disable Frame Relay encapsulation on the interface with .
Frame Relay Commands XSR CLI Reference Guide 9-85 Synt ax of the “no” Form The no form removes the association of the map class to the interface .
Frame Relay Commands 9-86 Configuring Frame Relay Once chosen as static, no inv erse ARP will be sent out by default. A free inver se ARP reque st (similar to above) can be requested by this command.
Frame Relay Commands XSR CLI Reference Guide 9-87 Next Mode Frame Relay DLCI configuration: XSR(config- fr-dlci<xx>)# Examples The following example maps DLCIs 16 and 18 on serial sub ‐ interface 1/0.
Frame Relay Commands 9-88 Configuring Frame Relay XSR(config)#interface serial 1/0 XSR(config-if<S1/0>)#no shutdown XSR(config-if<S1/0>)#encapsulation f rame-relay XSR(config-if<S1/0>.
Frame Relay Commands XSR CLI Reference Guide 9-89 frame-relay lmi-n391d te This command sets the full status ‐ polling interv al when the Digital Te r m i n a l Equipment (DTE) interface is configured to set the full status message ‐ polling interval.
Frame Relay Commands 9-90 Configuring Frame Relay Default 3 Mode Interface configuration: XSR(config-if< xx >)# Example This example sets the LMI failur e thresho.
Frame Relay Commands XSR CLI Reference Guide 9-91 frame-relay lmi-t392dce This command sets polling veri f ic at io n timer on a Data Communications Equipment (DCE) interface.
Frame Relay Commands 9-92 Configuring Frame Relay Mode Interface configuration: XSR(config-if< xx >)# Example This example sets the LMI failur e threshold to .
Frame Relay Commands XSR CLI Reference Guide 9-93 frame-relay lmi-type This command configures the Local Management Interface (LMI) type on a per ‐ interface basis.
Frame Relay Commands 9-94 Configuring Frame Relay Synt ax of the “no” Form The no command disables the use of map ‐ class parameters: no frame-relay traffic-shapi.
Frame Relay Map Class Commands XSR CLI Reference Guide 9-95 Synt ax of the “no” Form The no command deletes the interface: no interface serial port_num interface_num Mode Globa.
Frame Relay Map Class Commands 9-96 Configuring Frame Relay Mode Vi rt u a l Circuit configuration: XSR(config -fr-dlci)# Example The first three commands in the following example set up Serial sub ‐ interface 1/0.
Frame Relay Map Class Commands XSR CLI Reference Guide 9-97 Synt ax frame-relay bc out bits Synt ax of the “no” Form The no command resets the committed burst size .
Frame Relay Map Class Commands 9-98 Configuring Frame Relay Example This example adds map class slowlink with Be of 10000 and Bc of 6000 bits: X.
Frame Relay Map Class Commands XSR CLI Reference Guide 9-99 frame-relay fragment This command specifies the FRF .12 end ‐ to ‐ end fragment si ze for a Frame Relay map ‐ class. Fragment size is defined in bytes.
Frame Relay Map Class Commands 9-100 Configuring Frame Relay Synt ax of the “no” Form no map-class [ frame-relay | dialer ] map-class-name Mode Global configuration: XSR(config)# Next Mode.
Frame Relay Map Class Commands XSR CLI Reference Guide 9-101 Example The following example specifies HighPriori ty as the policy for the class map: XSR(config-map-class)#service-policy out HighPriority shut down This command disables an interface or sub ‐ interface.
Frame Relay Clear and Show Commands 9-102 Configuring Frame Relay Examples This example selects sub ‐ interface Serial 1/0.5 on a serial interface: XSR(config)#in.
Frame Relay Clear and Show Commands XSR CLI Reference Guide 9-103 Mode EXEC: XSR> Examples The following example clears all Frame Relay Inve rse ARP entries:.
Frame Relay Clear and Show Commands 9-104 Configuring Frame Relay XSR(config)#show frame-relay fragmen t interface serial 2/0.1 960 Frame Relay End-to-End Fragmentation Detailed Statistics Serial 2/0.
Frame Relay Clear and Show Commands XSR CLI Reference Guide 9-105 show frame-relay lmi This command displays Local Management Interface (LMI) st atistics. Enter the command without arguments to obtain statistics about all Frame Relay interfaces.
Frame Relay Clear and Show Commands 9-106 Configuring Frame Relay Parameter Descriptions show frame-relay map This command displays data from current fr ame ‐ relay map entries.
Frame Relay Clear and Show Commands XSR CLI Reference Guide 9-107 The following example displays a point ‐ to ‐ point Frame Relay map: XSR#show frame-relay map Frame Relay Map Statistics (Serial 2 /0) Serial 2/0.3 dlci 981 (0x3D5, 0x F450) Remote Addr.
Frame Relay Clear and Show Commands 9-108 Configuring Frame Relay PVC Statistics for Serial 2/0:1.1 (F rame Relay DTE) LMI = NONE DLCI = 16 PVC Status = UP INPUT: Pkt/Sec = 0 Packets = 17941 Bytes = 2.
Frame Relay Clear and Show Commands XSR CLI Reference Guide 9-109 show frame-relay traffic This command displays global Frame Relay statistics since the last reload.
Frame Relay Clear and Show Commands 9-110 Configuring Frame Relay Serial 1/0, CIR= 64000, Bc=8000, B E= 9000, fragment=53 Adaptive Shaping: Disabled, Servic e Policy: Voice # FR Ports = 1, # FR sub-In.
Frame Relay Clear and Show Commands XSR CLI Reference Guide 9-111 The card is 2. The channel is 0. The current MTU is 1506. The device is in polling mode, and i s active. The last driver error is (null). The physical-layer is HDLC-SYNC, the TX, RX clock source is external.
Frame Relay Clear and Show Commands 9-112 Configuring Frame Relay.
XSR CLI Reference Guide 10-83 10 Configuring the Dialer Interface This chapter descri bes commands for the dialer , dial er backup, and Dial ‐ on ‐ Demand/Bandwidth ‐ on ‐ Demand services.
Dialer Interface Commands 10-84 Configuring the Dialer Interface •T h e dialer string command must be set to the dialer interface that owns the dialer pool where the dialer DTR serial interface is added.
Dialer Interface Commands XSR CLI Reference Guide 10-85 Mode Interface configuration: XSR(config-if< xx >)# Example The following example shows dialer interface 0 assigned to dialer pool 6.
Dialer Interface Commands 10-86 Configuring the Dialer Interface dialer string This command creates a string used to place a call a destination or subnet. Ty p i c a l l y, it is the telephone number needed for dialing.
Dialer Interface Commands XSR CLI Reference Guide 10-87 Example The following example specifies a wai t time of 90 seconds for the carrier signal .
Dialer Interface Commands 10-88 Configuring the Dialer Interface This mode of operation of the dial er interface is called spoofing and it is the default mode for this interface.
Dialer Interface Commands XSR CLI Reference Guide 10-89 XSR(config-if<D3>)#dialer-group 7 XSR(config-if<D3>)#access-list 101 permit ip 0.0.
Dialer Interface Clear and Show Commands 10-90 Configuring the Dialer Interface Synt ax of the “no” Form The no form of this command removes the modem ‐ ini t ‐.
Dialer Interface Clear and Show Commands XSR CLI Reference Guide 10-91 Example XSR#show dialer 1 Sample Output The following is sample output from the show dialer command .
Dialer Interface Clear and Show Commands 10-92 Configuring the Dialer Interface Phone numbers: <2400:12> Connection speed/type: <64k>/<On De mand> Dialer maps configured on Interface <Dialer2>: Next hop IP address: <20.20.20.
Dial Backup Commands XSR CLI Reference Guide 10-93 Dial Backup Commands The following set of commands defines a backup dial line. backup This command set backup functionality on Serial, Ethernet or sub ‐ interfaces.
Dial Backup Commands 10-94 Configuring the Dialer Interface backup interface dialer This command designates a Serial or Fast/GigabitEthernet/GigabitEthernet int erface or sub ‐ interface as a backup dialer interface.
Dial Backup Commands XSR CLI Reference Guide 10-95 XSR(config)#interface fastethernet 2 XSR(config-if<F2>)#no shutdown XSR(config)#interface fastethernet 2 .
DOD/BOD Commands 10-96 Configuring the Dialer Interface show interface dialer This command displays general information for a dialer interface.
DOD/BOD Commands XSR CLI Reference Guide 10-97 Synt ax dialer-group group-number Synt ax of the ‘no’ Form Use the no form of this command to remov e an inte.
DOD/BOD Commands 10-98 Configuring the Dialer Interface Example The following example maps ACL 1350 to dialer li st 57: XSR(config) #access-list 57 permit ip 0.
DOD/BOD Commands XSR CLI Reference Guide 10-99 Synt ax of the “no” Form The no form of this command disables the feature: no dialer caller number Mode Dialer In.
DOD/BOD Commands 10-100 Configuring the Dia ler Interface XSR(config)#interface dialer 1 XSR(config-if<D1>)#dialer idle-timeo ut 300 The following example disables the idle .
DOD/BOD Commands XSR CLI Reference Guide 10-101 Example The following example configures a next hop IP address, SPC, hostname and line speed for map class AcmeMap : XSR(config)#dialer map 1 XSR(config-if<D 1 >)#dialer map ip 192 .
DOD/BOD Commands 10-102 Configuring the Dia ler Interface Mode Interface configuration: XSR(config-if< xx >)# Default s •A t t e m p t : 1 (no redial) •I n t e r v a l : .
Dialer Watch Commands XSR CLI Reference Guide 10-103 Dialer W a tch Commands dialer watch-group This command enables Dialer Wa t c h backup on a dialer interface with up to 16 wat c h ‐ groups.
Dialer Watch Commands 10-104 Configuring the Dia ler Interface Synt ax of the “no” Form Use the no form of this command to di sable this feature: no dialer .
Dialer Watch Commands XSR CLI Reference Guide 10-105 dial string: 3200, success: 0, fail : 0 Dialer pool 1 stats: member: Serial 1/3:0, available B-channels: 30, serial p orts: 0 Watch-group stats: wa.
Dialer Watch Commands 10-106 Configuring the Dia ler Interface.
Book Title goes here 11-83 11 ISDN BRI and PRI Commands Observing Synt ax and Conventions The CLI Syntax and conv entions use the notation descri bed in the following table.
ISDN Commands 11-84 ISDN BRI and PRI Commands Synt ax of the “no” Form no interface bri board/slot Mode Global configuration: XSR(config)# Next Mode BRI Interface configuration: .
ISDN Commands Book Title goes here 11-85 Synt ax of the “no” Form Use the no form of this command to remov e the ve r if ic a ti on request: no isdn ans.
ISDN Commands 11-86 ISDN BRI and PRI Commands Example The following example sets the T1 controller to make call selections in ascending order: XSR(c.
ISDN Commands Book Title goes here 11-87 A PRI or BRI port can hav e only one ISDN calling ‐ number entry .
ISDN Commands 11-88 ISDN BRI and PRI Commands Example The following example sets up a test call on channel 24 on BRI port 1/1: XSR#isdn disconnect 1/1 24 <186>Jul 28 22:49:51 10.
ISDN Commands Book Title goes here 11-89 Synt ax isdn switch-type switch-type { basic-dms100 | basic-ni1 | basic-ntt | basic-net3 | primary-net5 | primary-ni2 | primary-5ess | primary- dms100 | primar.
ISDN Commands 11-90 ISDN BRI and PRI Commands Example The following example selects a switch typ e on the BRI 1/1 interface: XSR(config)#interface bri 1/1 X.
ISDN Commands Book Title goes here 11-91 Examples The following example configures two data streams on leas ed ‐ line BRI interface 1/1 at 56 .
ISDN Debug and Show Commands 11-92 ISDN BRI and PRI Commands shut down (BRI) This command forces all data calls to be disconnected and signals all intern al XSR resources that the port is not available.
ISDN Debug and Show Commands Book Title goes here 11-93 Synt ax of the “no” Form The no form of this command removes ISDN message tracing. Yo u may choose to issue the command with all or no parameters selected.
ISDN Debug and Show Commands 11-94 ISDN BRI and PRI Commands Packet Processor Tx Scheduler Stats: 0 Packet driver Tx OK 0 Packet driver not Tx: MUX END_ERR_BLOCK 0 Packet driver not Tx: MUX ERROR 0 Packet driver not Tx: Unkn own Msg from MUX The unit number is 167772177.
ISDN Debug and Show Commands Book Title goes here 11-95 •P R I ‐ show interface serial 2/1:0 - 14 , 16-30 for E1 B channels Use the following table for refere nce.
ISDN Debug and Show Commands 11-96 ISDN BRI and PRI Commands Standard output of the command follows but is not displayed here.
ISDN Debug and Show Commands Book Title goes here 11-97 show isdn history This command displays past ISDN actions on the XSR.
ISDN Debug and Show Commands 11-98 ISDN BRI and PRI Commands show isdn active This command displays current call information of all BRI or PRI ports, or only the selected port specified by board/slot/port identifier .
ISDN Debug and Show Commands Book Title goes here 11-99 show isdn service This command displays the service status of all or selected ISDN ports .
ISDN Debug and Show Commands 11-100 ISDN BRI and PRI Commands 20 CONNECTED 21 CONNECTED 22 CON NECTED 23 CONNECTED 24 CONNEC TED 25 CONNECTED 26 CONNECTED 27 CON NECTED 28 CONNECTED 29 CONNEC TED 30 C.
XSR CLI Reference Guide 12-83 12 Configuring Quality of Service Observing Synt ax and Conventions The CLI Syntax and conv entions use the notation descri bed in the following table.
Policy-Map Commands 12-84 Configuring Quality of Service service-policy This command attaches a policy map to an output or input interface. Yo u can att ach a single policy map to one or more interfaces.
Policy-Map Commands XSR CLI Reference Guide 12-85 • random-detect exponential-weighting- constant ‐ Configures the WRED exponential wei gh t fact or for the av erage queue size calculation.Refer to page 12 ‐ 95 for the command definition.
Policy-Map Commands 12-86 Configuring Quality of Service Example These commands create class ‐ map class1 and define its match criteria: XSR(config)#class-map cla.
Policy-Map Commands XSR CLI Reference Guide 12-87 Synt ax of the “no” Form Remove the bandwidth sp ecified for a class by using the no for m of .
Policy-Map Commands 12-88 Configuring Quality of Service Synt ax of the “no” Form The no form of this command removes a class from the policy map: n.
Policy-Map Commands XSR CLI Reference Guide 12-89 police This command configures traffic policing. Synt ax police bps [ burst-normal ][ burst-max ][ conform-action action ][ exceed-act.
Policy-Map Commands 12-90 Configuring Quality of Service Example The following example defines a traffic class using the class-map command and match cri.
Policy-Map Commands XSR CLI Reference Guide 12-91 Mode Po l i c y ‐ Map Class configuration: XSR(config-pmap-c-< xx> )# Example The following example configures two.
Policy-Map Commands 12-92 Configuring Quality of Service XSR(config)#policy-map policy75 XSR(config-pmap<policy75>)#class acl 203 XSR(config-pmap-c<acl203>)#bandwidth percent 35 XSR(config-pmap-c<acl203>)#queue-lim it 50 random-detect (RED) This command configures RED for a policy map.
Policy-Map Commands XSR CLI Reference Guide 12-93 random-detect (WRED) This command configures and enables We i g h t e d Random Early Detect (WRED) for the class.
Policy-Map Commands 12-94 Configuring Quality of Service Synt ax random-detect dscp dscp-value min-th res max-thres [ mark-prob ] Synt ax of the “no” Form The no form reverts WRED .
Policy-Map Commands XSR CLI Reference Guide 12-95 Examples The following example enables WRED with a minimum threshold for DSCP af21 of 24 and maximum threshold of 40 . The dropping probability is 1/4th .
Policy-Map Commands 12-96 Configuring Quality of Service Synt ax of the “no” Form The no form of this command sets the constant to the default va l .
Policy-Map Commands XSR CLI Reference Guide 12-97 Default s • Disabled •M a r k ‐ prob: 10 Mode Po l i c y ‐ Map Class configuration: XSR(config-pmap-c-< xx> )# Examples .
Policy-Map Commands 12-98 Configuring Quality of Service Mode Po l i c y ‐ Map Class configuration: XSR(config-pmap-c-< xx> )# Example The following example configures .
Policy-Map Commands XSR CLI Reference Guide 12-99 Synt ax of the “no” Form The no form of this command removes a previously set IP DSCP: no set ip dscp .
Policy-Map Commands 12-100 Configuring Quality of Service Mode Po l i c y ‐ Map Class configuration: XSR(config-pmap-c- xx )# Example The following example sets the I.
Class-map Commands XSR CLI Reference Guide 12-101 Class-map Commands class-map This command creates a class map for matching packets to a specified class.
Class-map Commands 12-102 Configuring Quality of Service XSR(config)#class-map class57 XSR(config-cmap<class57>)#match acce ss-group 136 XSR(config)#policy-map policy99 XSR(config-pmap<policy.
Class-map Commands XSR CLI Reference Guide 12-103 match cos This command identifies a specific IEEE 802.1 priority va l ue as a match criterion. Up to 8 priority va l u e s can be matched in one match statement.
Class-map Commands 12-104 Configuring Quality of Service Synt ax match ip dscp ip-dscp-value [ ip-dscp -value ][ ip-dscp-value ] [ ip-dscp-value ] [ ip- dscp-value ][ ip-dscp-value ][ ip-dscp-value ][.
QoS Show Commands XSR CLI Reference Guide 12-105 Synt ax of the “no” Form Use the no form of this command to remov e IP precedence va l ue s from .
QoS Show Commands 12-106 Configuring Quality of Service Class map c3 Match access-group 103 Class map c2 Match ip precedence 2 Class map c1 Match ip dscp 32 show policy-map This command displa.
QoS Show Commands XSR CLI Reference Guide 12-107 show policy-map interface This command shows the configuration of all service policies applied on an interface or Frame Relay Data ‐ link Connection Identifier (DLCI) .
QoS Show Commands 12-108 Configuring Quality of Service XSR(config)#map-class frame-relay fo o XSR(config-map-class<foo>)#frame-rel ay cir out 100000 XSR(config-map-class<foo>)#frame-rel a.
QoS Show Commands XSR CLI Reference Guide 12-109 show random-detect interface This command displays data about Random Early Detection (RED).
QoS Show Commands 12-110 Configuring Quality of Service DSCP min-th max-th mark-prob tail drop early drop 0 2 5 20 0 0 1 2 5 20 0 0 2 2 5 20 0 0 3 2 5 20 0 0 4 2 5 20 0 0 5 2 5 20 0 0 6 2 5 20 0 0 7 2.
QoS Show Commands XSR CLI Reference Guide 12-111 49 2 5 20 0 0 50 2 5 20 0 0 51 2 5 20 0 0 52 2 5 20 0 0 53 2 5 20 0 0 54 2 5 20 0 0 55 2 5 20 0 0 56 2 5 20 0 0 57 2 5 20 0 0 58 2 5 20 0 0 59 2 5 20 0.
QoS Show Commands 12-112 Configuring Quality of Service Sample Output This following commands configure shape information for each class.
XSR CLI Reference Guide 13-83 13 Configuring ADSL Observing Synt ax and Conventions The CLI command syntax and conventions use the notation described below .
CMV Commands 13-84 Configuring ADSL Synt ax cmv append command-ID offset value Mode AT M Interface configuration: XSR(config-if<ATM xx >)# Example The following example a.
CMV Commands XSR CLI Reference Guide 13-85 Synt ax cmv cr command-ID offset Mode AT M Interface configuration: XSR(config-if<ATM xx >)# Example The following example read.
CMV Commands 13-86 Configuring ADSL Synt ax cmv delete command-ID offset [value] Mode AT M Interface configuration: XSR(config-if<ATM xx >)# Example The following example .
Other ADSL Commands XSR CLI Reference Guide 13-87 Synt ax cmv save file-name Mode AT M Interface configuration: XSR(config-if<ATM xx >)# Example The following example sav.
Other ADSL Commands 13-88 Configuring ADSL interface atm This command creates an AT M interface object and its associated de vice driv er which downloads the specified firmware file to th e on ‐ board DSP .
Other ADSL Commands XSR CLI Reference Guide 13-89 • backup ‐ configures and enables a backup interface for the AT M sub ‐ interface. Refer to page 13 ‐ 90 for the command description.
Other ADSL Commands 13-90 Configuring ADSL Default s • Backup : Disabled • VPN : Disabled • Description : Set to the empty string • Encapsulation : None .
Other ADSL Commands XSR CLI Reference Guide 13-91 Default Disabled by default. When enabled, all operational parameters must be specified .
Other ADSL Commands 13-92 Configuring ADSL XSR(config-if<ATM0/1/0.1>)#crypto ez ipsec XSR(config-if<ATM0/1/0.1>)#crypto ip sec df-bit copy XSR(config-if<ATM0/1/0.1>)#crypto ma p ets-vpn description This command adds a description string to an existing AT M sub ‐ interface.
Other ADSL Commands XSR CLI Reference Guide 13-93 Synt ax of the “no” Form The no form of this command removes any form of encapsulation, effectiv ely disabling the sub ‐ interface: no encapsulation Mode AT M Sub ‐ Interface configuration: XSR(config-if <ATM xx.
Other ADSL Commands 13-94 Configuring ADSL Synt ax ip address { ip-address / subnet-mask | negotiated } Synt ax of the “no” Form The no form of this command returns thi.
Other ADSL Commands XSR CLI Reference Guide 13-95 oam-pvc This command enables end ‐ to ‐ end F5 (circuit) OAM cell procedures for AT M P ermanent Vi rt u a l Circuit (PVC) management.
Other ADSL Commands 13-96 Configuring ADSL Example The following example sets the OAM frequency to 20 seconds: XSR(config-if<ATM0/1/0.1>)#oam-pvc m anage 20 oam retry This command configures parame ters related to OAM cell handling for AT M VC management.
Other ADSL Commands XSR CLI Reference Guide 13-97 Synt ax pvc vpi/vci Synt ax of the “no” Form The no form of this command returns this parameter to its def ault setting: no pvc Mode AT M Sub ‐ Interface configuration: XSR(config-if <ATM x / x / x .
Other ADSL Commands 13-98 Configuring ADSL no shut down This command sets the AT M interface to the administrativ e Up state and enables the line for operation.
PPP Configuration Commands XSR CLI Reference Guide 13-99 PPP Configuration Commands This section lists the subset of PPP configuration commands that apply when an AT M sub ‐ interface is configured for PPP o A or PPP oE encapsulation.
PPP Configuration Commands 13-100 Configuring ADSL Synt ax of the “no” Form The no form of this command returns this parameter to its def ault setting: no ppp keepalive Mode AT M Sub ‐ Interface configuration: XSR(config-if <ATM x / x / x .
PPP Configuration Commands XSR CLI Reference Guide 13-101 Example The following example sets LCP parameters: XSR(config-if<ATM0/1/0.
PPP Configuration Commands 13-102 Configuring ADSL Synt ax of the “no” Form The no form of this command returns this parameter to its def ault setting: no ppp pap Mode AT M Sub ‐ Interface configuration: XSR(config-if <ATM x / x / x .
ATM Clear and Show Commands XSR CLI Reference Guide 13-103 ppp timeout retry This command sets the maximum time to wai t for a response during PPP negotiation.
ATM Clear and Show Commands 13-104 Configuring ADSL Example The following example clears the AT M counters: XSR#clear counters atm show controllers atm This command dis.
ATM Clear and Show Commands XSR CLI Reference Guide 13-105 The following is sample output when a sub ‐ interface is specified: XSR#show controllers atm 1/0.1 ********** ATM Sub-Interface Stats * ********* ATM 1/0.
ATM Clear and Show Commands 13-106 Configuring ADSL Parameters in the Sub-Interface Response Packet Processor Tx Scheduler St ats A TM Sub-interface S t atistic Counters: DSP Image File : CFlash:adsl.fls Name of the file containing the DSP image.
ATM Clear and Show Commands XSR CLI Reference Guide 13-107 show interface atm This command displays the running configuration and st atistical details for an AT M interface. Statistics supported by the ADSL interface are har dwa re dependent.
ATM Clear and Show Commands 13-108 Configuring ADSL Examples The following is sample output when an interface is sp ecified: XSR#show interface atm 1/0 ********** A.
ATM Clear and Show Commands XSR CLI Reference Guide 13-109 The logical link is currently Up The Name of the Access Concentrator is ENTERASY-CDDU1S The Session Id is 0x000b The MAC Address of the Acces.
ATM Clear and Show Commands 13-110 Configuring ADSL Parameters in the Sub-Interface Response The last section contains the MIB2 interface table as described in RFC ‐ 1213.
XSR CLI Reference Guide 14-83 14 Configuring the VPN Observing Synt ax and Conventions The CLI Syntax and conv entions use the notation descri bed in the following table.
PKI commands 14-84 Configuring the VPN • “Crypto Map Mode Commands” on pag e 14 ‐ 110. • “Crypto T ransform Mode Commands” on page 14 ‐ 115. • “Crypto Show Commands” on page 14 ‐ 118.
CA Identity Mode Commands XSR CLI Reference Guide 14-85 Synt ax of the “no” Form Use the no form to delete all identity information and certificates .
CA Identity Mode Commands 14-86 Configuring the VPN Mode Certificate Authority Identity configuration: XSR(ca-identity)# Example The following example sets the CRL .
CA Identity Mode Commands XSR CLI Reference Guide 14-87 Synt ax of the “no” Form The no form of this command resets the va l u e to the default: no enro.
CA Identity Mode Commands 14-88 Configuring the VPN XSR(config)#crypto ca identity ACMEc a XSR(ca-identity)#enrollment url http://ca_server XSR(ca-identity)#enrollment retry pe riod 5 enrollment url This command sets the Uniform Resource Locator (URL) of the Certificate Authority (CA).
CA Identity Mode Commands XSR CLI Reference Guide 14-89 Synt ax crypto ca enroll name Synt ax of the “no” Form The no form of this command cancels a current enr.
Other Certificate Comman ds 14-90 Configuring the VPN show crypto ca identity This command displays data about enrolled Certificate Authorities (CA).
Other Certificate Commands XSR CLI Reference Guide 14-91 Mode Global configuration: XSR(config)# Sample Output The following script prompts yo u to accept the certificate.
Other Certificate Comman ds 14-92 Configuring the VPN crypto ca crl request This command downloads a new Certificate Rev ocation List (CRL) from the specified Certificate Authority (CA), updating the CRL.
Other Certificate Commands XSR CLI Reference Guide 14-93 Issuer: C=US, O=sml, CN= ldapca Valid From: 2002 Aug 20th, 1 8:26:01 GMT Valid To: 2002 Aug 20th, 2 0:01:01 GMT Issuing CDP: ldap://ldapca.
IKE Security Protocol Commands 14-94 Configuring the VPN The following is sample output from the command when the CA supports an RA. In thi s example, CA and RA certificates wer e requested ear lier by the crypto ca authenticate command.
ISAKMP Protocol Policy Mode Commands XSR CLI Reference Guide 14-95 ISAKMP Protocol Policy Mode Commands crypto isakmp proposal This command de fines an IKE proposal (policy) ‐ a set of parameters used during IKE negotiation.
ISAKMP Protocol Policy Mode Commands 14-96 Configuring the VPN Next Mode ISAKMP protocol proposal configuration: XSR(config-isakmp)# Example The following example configure.
ISAKMP Protocol Policy Mode Commands XSR CLI Reference Guide 14-97 encryption This command sets the encryption algorithm used in an IKE proposal (policy).
ISAKMP Protocol Policy Mode Commands 14-98 Configuring the VPN Synt ax of the “no” Form The no form of this command resets the va l u e to the default: .
Remote Peer ISAKMP Protocol Policy Mode Commands XSR CLI Reference Guide 14-99 lifetime This command specifies the lifetime of an IKE Se curity Association (SA) for a giv en IKE proposal (policy).
Remote Peer ISAKMP Protocol Policy Mode Commands 14-100 Configuring the VPN Synt ax crypto isakmp peer_address subnet-ma sk Synt ax The no form of this command removes poli.
Remote Peer ISAKMP Protocol Policy Mode Commands XSR CLI Reference Guide 14-101 Default Disabled Mode Remote P eer ISAKMP protocol policy configuration: XSR(config-isakmp-peer).
Remote Peer ISAKMP Protocol Policy Mode Commands 14-102 Configuring the VPN XSR(config-isakmp-peer)#exchange-mod e main nat-traversal The command sets the IKE and IPSec NA .
Remote Peer ISAKMP Protocol Policy Mode Commands XSR CLI Reference Guide 14-103 Synt ax of the “no” Form The no form of this command removes policies from the .
Remote Peer Show Commands 14-104 Configuring the VPN Remote Peer Show Commands show crypto isakmp peer This command displays attributes for each ISAKMP peer . IKE ʹ s first config uration der ives from the IP address of the remote peer .
Remote Peer Show Commands XSR CLI Reference Guide 14-105 show crypto isakmp proposal This command lists attributes for each Internet Key Exchange (IKE) proposal.
IPSec Commands 14-106 Configuring the VPN Parameters Descriptions Main Mode Exchange Aggressive Mode Exchange Quick Mode Exchange IPSec Commands This section describes commands that .
IPSec Commands XSR CLI Reference Guide 14-107 Synt ax access-list acl-number { deny | permit } protocol [ source_addr source_mask [ eq port ] destination_addr destination_mask [ eq port ] Synt ax of t.
IPSec Clear and Show Commands 14-108 Configuring the VPN IPSec Clear and Show Commands clear crypto sa This command deletes IPSec Securi ty Associations (SAs ) as follo.
IPSec Clear and Show Commands XSR CLI Reference Guide 14-109 Default If an access list number is not specified, all access lists are shown.
Crypto Map Mode Commands 14-110 Configuring the VPN Sample Output The following output display s when a master key is generated: XSR(config)#crypto key master gener.
Crypto Map Mode Commands XSR CLI Reference Guide 14-111 Crypto Map Rules A crypto map is a collection of rules, each with a different seq ‐ num but the same map ‐ name .
Crypto Map Mode Commands 14-112 Configuring the VPN Synt ax of the “no” Form Use the no form to remov e the ACL from a crypto map entry: no match address [ access-list-id ] Default No access lists are matche d to th e crypto map entry .
Crypto Map Mode Commands XSR CLI Reference Guide 14-113 Mode Crypto Map configuration: XSR( config-crypto-m)# Example This example defines a tr ansform ‐ set and changes the mode to transport mode.
Crypto Map Mode Commands 14-114 Configuring the VPN set security-association level per-host This command specifies that separate IPSec Security Associati ons (SAs) should be requested for each source/destination host pair .
Crypto Transform Mode Commands XSR CLI Reference Guide 14-115 Example This example defines tw o transform ‐ sets, specifying both ca n be used within a crypto map entry .
Crypto Transform Mode Commands 14-116 Configuring the VPN Mode of the “no” Form The no form of the command deletes a transfor m ‐ set: no crypto ipsec transform-s.
Crypto Transform Mode Commands XSR CLI Reference Guide 14-117 Mode Crypto Tr a n s f o r m configuration: XSR(cfg-crypto-tran)# Example This example selects PFS group 2.
Crypto Show Commands 14-118 Configuring the VPN Crypto Show Commands show crypto ip sec sa This command displays current Security Associations (SAs) settings.
Crypto Show Commands XSR CLI Reference Guide 14-119 show crypto ip sec transform-set This command displays configured transform ‐ sets. IPSe c transform ‐ sets created with EZ ‐ IPSec configuration are marked with an asterisk (*) in the show output.
Crypto Show Commands 14-120 Configuring the VPN show crypto map This command displays the crypto map configuration. IPSec crypto maps created with EZ .
Interface CLI Commands XSR CLI Reference Guide 14-121 Interface CLI Commands crypto map This command applies a previously defined crypto map to an interf ace.
Interface VPN Commands 14-122 Configuring the VPN crypto ezip sec This command creates a suite of IPSec policies, sorted by cryptograp hic strength, that are offered to the remote security gateway .
Interface VPN Commands XSR CLI Reference Guide 14-123 • ip multicast-redirect - Native IPSec tunnels attached to VPN interfaces will not easily forward multicast traffic multicast packet redirection to the unicast address of the remote tunnel endpoint.
Interface VPN Commands 14-124 Configuring the VPN A mul ti ‐ point interface accepts many inbound tunnels and is used when the XSR is configured as a remote access VPN gatew ay .
Interface VPN Commands XSR CLI Reference Guide 14-125 Mode VPN Interface configuration: XSR(config ‐ if<xx>)# Example The following example configures VPN interface 1 with an IP address, and TOS copy enabled.
Interface VPN Commands 14-126 Configuring the VPN ip address negotiated This command marks the VPN interface to dynamically get its IP address via the tunnel protocol.
Tunnel Commands XSR CLI Reference Guide 14-127 Mode Internet Protocol Interface configuration: XSR( config-int<vpn>)# Example This example redirects multicas t .
Tunnel Commands 14-128 Configuring the VPN • set protocol - Defines the VPN tunneling protocol used when the tunnel is created: client mode or network ext ension mode. Refer to page 14 ‐ 130 for the command definition.
Tunnel Commands XSR CLI Reference Guide 14-129 Mode Tu n n e l configuration: XSR(config-tms-tunnel)# Example The following example enables the tu nnel ACME_VPN: XSR(co.
Tunnel Commands 14-130 Configuring the VPN set peer This command specifies the physical IP address of the remote VPN gatew ay .
Tunnel Commands XSR CLI Reference Guide 14-131 Mode Tu n n e l configuration: XSR#(config-tms-tunnel)# Default IPSec Examples The following example sets the IPSec tunne.
Tunnel Clear and Show Commands 14-132 Configuring the VPN T unnel Clear and Show Commands clear tunnel This command terminates a non ‐ GRE tunnel associated wi th a user or tunnel ID.
Tunnel Clear and Show Commands XSR CLI Reference Guide 14-133 User: xsrclient Tunnel ID: 40000001 VPN Interface: VPN1 Group: xsrgroup Connect Time: 11/05/2003, 23:39 Protocol: L2TP Authentication Meth.
Additional Tunnel Termination Commands 14-134 Configuring the VPN Additional T unnel T ermination Commands ip local pool This command configures a local pool of IP addr.
Additional Tunnel Termination Commands XSR CLI Reference Guide 14-135 exclude This sub ‐ command bars the use of a range of IP addresses fr om an earlier created IP pool.
Additional Tunnel Termination Commands 14-136 Configuring the VPN show ip local pool This command displays statistics for any define d IP address pools.
DF Bit Commands XSR CLI Reference Guide 14-137 10.120.122.22 10.120.122.24 10.120.122.25 10.120.122.26 10.120.122.28 10.120.122.31 10.120.122.32 Inuse addresses: 10.120.122.10 10.120.122.21 10.120.122.23 10.120.122.27 10.120.122.29 10.120.122.30 10.120.
DF Bit Commands 14-138 Configuring the VPN Default s • Disabled • Copy setting Mode Global configuration: XSR(config)# Example The following example clears the DF .
XSR CLI Reference Guide 15-83 15 Configuring DHCP Observing Synt ax and Conventions The CLI command syntax and conventions use the notation described in the following table.
DHCP Commands 15-84 Configuring DHCP Synt ax of the “no” Form Use the no form of this command to del ete the boot image name: no bootfile Mode Any .
DHCP Commands XSR CLI Reference Guide 15-85 Example The following example specifies string clientclass1 that will be the name of the client clas.
DHCP Commands 15-86 Configuring DHCP Example The following example specifies the client identifier for MAC address 00.01f4.0127.10 in dotted hexadecimal notation: XSR(config-dhcp)#client-identifier 0 100.
DHCP Commands XSR CLI Reference Guide 15-87 debug ip dhcp server This command enables DHCP server de bugging. Thi s command should be used for troubleshooting purposes only .
DHCP Commands 15-88 Configuring DHCP Mode Any of the following command modes are av ailable: DHCP pool configuration: XSR(config-dhcp-pool )# DHCP host .
DHCP Commands XSR CLI Reference Guide 15-89 Example The following example specifies 1 1.12.1.99 as the IP address of the DNS serv er of a client in the subnet: XSR(config-dhcp-pool)#dns-server 11.
DHCP Commands 15-90 Configuring DHCP The following example specifies enterasys.com as the domain name of any client in the client ‐ class engineering : XSR(config-dhcp-pool)#client-class e ngineering XSR(config-dhcp-class)#domain-name e nterasys.
DHCP Commands XSR CLI Reference Guide 15-91 Examples The following example specifies the hardw are address for the DHCP client host to be of Ethernet type with MAC address 0001.
DHCP Commands 15-92 Configuring DHCP Next Mode When this command is specified from either DHCP pool configuration mode or DHCP class configuration sub ‐ mode, the CL I acquires DHCP host config uration mode.
DHCP Commands XSR CLI Reference Guide 15-93 Default DCHP Client is not active on an interface Mode Interface configuration: XSR(config-if< xx >)# Example The .
DHCP Commands 15-94 Configuring DHCP Synt ax ip dhcp ping timeout milliseconds Synt ax of the “no” Form Use the no form of this command to restor e the ping.
DHCP Commands XSR CLI Reference Guide 15-95 Mode Global configuration: XSR(config)# Next Mode DHCP pool configuration: XSR(config-dhcp-pool )# Example The following example.
DHCP Commands 15-96 Configuring DHCP ip local pool This command, when issued multipl y , configures a local pool of IP addre sses to be used for a DHCP Server pool ran ge.
DHCP Commands XSR CLI Reference Guide 15-97 exclude This sub ‐ command of ip local pool bars the use of a range of IP address es from an earlier created IP pool.
DHCP Commands 15-98 Configuring DHCP lease This command configures the duration of the lease for an IP address that a DHCP server assigns to a DHCP client.
DHCP Commands XSR CLI Reference Guide 15-99 netbios-name- server This command configures NetBIOS W indows Internet Naming Service (WINS) name servers that are av ailable to Microsoft DHCP clients.
DHCP Commands 15-100 Configuring DHCP netbios-node-type This command configures the NetBIOS node type for Microsoft DHCP clients. Depending on the client configuration inheritance, the command should be used in proper mode.
DHCP Commands XSR CLI Reference Guide 15-101 next-server This command specifies the server from whi ch the initial boot file will be loaded. The server can be designated either by IP address or hostname.
DHCP Commands 15-102 Configuring DHCP Synt ax of the “no” Form Use the no form of this command to remov e the options: no option code [ instance number ] De.
DHCP Commands XSR CLI Reference Guide 15-103 5 Name Server BOOTP/IP address list - IEN 1 16 name serve rs availab le to a c lient. List in order of preference . Length: 4-octet minimum; multiples of 4 6 * Domain Name Server Basic, MS DHCP Client/ IP address list - List of Domain Name System (STD 13, RFC-1035) name serve rs available to a client.
DHCP Commands 15-104 Configuring DHCP 20 Non-Local Source Routing Host IP/ Boolean (hex) false S pecifies whether a cli ent will config ure its IP layer to allow forwarding of datagrams with non-local source routes.
DHCP Commands XSR CLI Reference Guide 15-105 32 Router Solicitation Address Interface/ IP address - Address to which a client should send router solicitation requests. Length: 4 octets 33 S tatic Route Interface/ IP address pai rs - S tatic routes that a client will install in its routing cache.
DHCP Commands 15-106 Configuring DHCP 44 * NetBIOS over TCP/ IP Name Server WINS/ NetBIOS, MS DHCP Client/ IP address list - RFC-1001/1002 NBNS name servers listed by preference.
DHCP Commands XSR CLI Reference Guide 15-107 53 DHCP Message Ty p e - - Conveys the type of DHCP message . The default is 1 (DHCPDISCOVER). 1=DHCPDISCOVER 2=DHCPOFFER 3=DHCPREQUEST 4=DHCPDECLINE 5=DHC.
DHCP Commands 15-108 Configuring DHCP 61 * Client- Identifier Basic/S tring - A DHCP client’s unique identifier . DHCP servers use this value to in dex their database of address bindings. This value is expected to be unique for all clients in an administrative domain.
DHCP Commands XSR CLI Reference Guide 15-109 Examples The following example configures DHCP option 33, which specifies static routes that the client should install in it s routing cache.
DHCP Commands 15-110 Configuring DHCP The following example configures DHCP option 36, which specifies Ethernet encapsulation Ve r s i o n 2 (RFC ‐ 894) or IEEE 802.3 for DHCP clients.
DHCP Clear and Show Commands XSR CLI Reference Guide 15-111 service dhcp This command enables DHCP server functionality to respond to client requests.
DHCP Clear and Show Commands 15-112 Configuring DHCP Example The example below deletes address binding 18.12.22.99 from a DHCP server bi ndings database: XSR#clear ip dhcp binding 18.12.22.9 9 clear ip dhcp server st atistics This command resets all DHCP se rver counters.
DHCP Clear and Show Commands XSR CLI Reference Guide 15-113 Parameter Descriptions show interface This command displays DHCP interface’ s IP address and subnet mask. When negotiating, the interface will indicate ʺ Internet address is not assi gned ʺ .
DHCP Clear and Show Commands 15-114 Configuring DHCP show ip dhcp binding This command displays activ e address bindings on the DHCP serve r . If the address is not specified, all address bindings are shown .
DHCP Clear and Show Commands XSR CLI Reference Guide 15-115 11.1.0.253 0002.2ab4.4b01 JUL 19 2003 05:07PM Automatic Y The following example the displays lease expiration of DHCP client 11.1.0.253 in local time: XSR#show ip dhcp binding local 11.
DHCP Clear and Show Commands 15-116 Configuring DHCP Message Sent BOOTREPLY 12 DHCPOFFER 19 DHCPACK 17 DHCPNAK 6 Parameter Descriptions Memory usage Sum of bytes of RAM allocated by the DHCP server . Address pools Sum of configured address pools in the DHCP database.
XSR CLI Reference Guide 16-83 16 Configuring Security Observing Synt ax and Conventions The CLI Syntax and conv entions use the notation descri bed in the following table.
General Security Commands 16-84 Configuring Security General Security Commands access-list (extended) This command defines an extended IP Access List (ACL) by number ranging from 100 to 199.
General Security Commands XSR CLI Reference Guide 16-85 Additional Synt ax The access-list command also provides the move option, expressed in the following .
General Security Commands 16-86 Configuring Security Mode Global configuration: XSR(config)# Default No access list defined (that is, all access permitted) Exam.
General Security Commands XSR CLI Reference Guide 16-87 Synt ax access-list list# [[{ insert | replace | move }] [{ ent ry# destination source1 [ source2 ]]}{ deny | permit }{log} { src IpAddr [ srcWi.
General Security Commands 16-88 Configuring Security Examples The following example allows access only to those hosts on the three specified networks. The wildcard bits apply to the host portions of the netw ork addr esses.
General Security Commands XSR CLI Reference Guide 16-89 Synt ax of the “no” Form Threshold logging is disabled with the no form of this command : no access-.
General Security Commands 16-90 Configuring Security Example The example below enables protection from land attack and large ICMP packets. Synflood protection wil l trigger for more than 7 sessions.
Security Clear and Show Commands XSR CLI Reference Guide 16-91 Security Clear and Show Commands clear host dos-counters This command clears all host security statistics.
Security Clear and Show Commands 16-92 Configuring Security show access-list log-up date-threshold This command displays ACL log information.
AAA Commands XSR CLI Reference Guide 16-93 IP packet with Multicast/broadcast s ource address Always enabled No attacks Syn flood attack mitigation Always enabled 100 attacks Fragmented ICMP traffic E.
AAA Usergroup Commands 16-94 Configuring Security Mode Global configuration: XSR(config)# Examples The following example configures the Te l n e t sub ‐ system to.
AAA Usergroup Commands XSR CLI Reference Guide 16-95 Example The following example adds the usergroup headquarter s: XSR(config)#aaa group headquarters XSR(aaa-group)# dns server This command sets the address of DNS servers.
AAA Usergroup Commands 16-96 Configuring Security Synt ax of the “no” Form The no form unlinks a pool of addresses from a group of us ers: no ip poo.
AAA User Commands XSR CLI Reference Guide 16-97 wins server This command sets the WINS serv er address which is give n to connecting clients during connection time.
AAA User Commands 16-98 Configuring Security Synt ax aaa user user-name Synt ax of the “no” Form The no form of this command deletes the user profile: no aaa us.
AAA User Commands XSR CLI Reference Guide 16-99 ip address This command specifies the IP address to be assigned to the remote user .
AAA User Commands 16-100 Configuring Security Example The following example sets the password williams for user ted : XSR(config)#aaa user ted XSR(aaa-user)#passwor.
AAA Method Commands XSR CLI Reference Guide 16-101 privilege This command configures the privilege level of a user . It is available from both AAA User and AAA Group configuration modes.
AAA Method Commands 16-102 Configuring Security • client ‐ Configures the default AAA method (plug ‐ in) for each client service. Refer to page 16 ‐ 106 for the command definition.
AAA Method Commands XSR CLI Reference Guide 16-103 acct-port This command specifies the UDP port for accounting requests and uses the RADIUS method only .
AAA Method Commands 16-104 Configuring Security Mode AAA Method configuration: XSR(aaa-method-radius)# Example The following example sets number9 as the RADIUS .
AAA Method Commands XSR CLI Reference Guide 16-105 Synt ax auth-port port-number Synt ax of the “no” Form The no form of this command resets to the default port number ‐ 1645: no auth-port Default The default authorization port numbe r is 1645.
AAA Method Commands 16-106 Configuring Security client This command configures the default AAA me thod (plug ‐ in) for each client service.
AAA Method Commands XSR CLI Reference Guide 16-107 Default Enabled Mode AAA Method configuration: XSR(aaa-method-radius)# Example The following example enables the RADI.
AAA Method Commands 16-108 Configuring Security hash enable This command enables the hash for the plugin and is used for the RADIUS method only . The sub ‐ command may be a plugin ‐ type dependent command.
AAA Method Commands XSR CLI Reference Guide 16-109 Example The following example resets the RADIUS key val u e to 1234qwerty : XSR(config)#aaa method radius defaul .
AAA Method Commands 16-110 Configuring Security Default 3 Mode AAA Method configuration: XSR(aaa-method- xx )# Example The following example lengthens the retransmit .
AAA Per-Interface Commands XSR CLI Reference Guide 16-111 AAA Per-Interface Commands aaa-method This command is executed at the Interface Mode.
AAA Debug and Show Commands 16-112 Configuring Security Synt ax of the “no” Form The no form of this command removes the us er/group/interface re striction: no .
AAA Debug and Show Commands XSR CLI Reference Guide 16-113 AAuthenticatePlugin::queue (alg == 0 xf) groupplugin Reply: Pool = authpool IRMauthorizeMsg::clientLogon [test] The following is .
AAA Debug and Show Commands 16-114 Configuring Security IP Address is: 0.0.0.0 IP Mask is: 0.0.0.0 Primary DNS server is: 0.0.0.0 Secondary DNS server is: 0.
Firewall Feature Set Commands XSR CLI Reference Guide 16-115 Default If the method ‐ name is not set, all methods and method attributes display .
Firewall Feature Set Commands 16-116 Configuring Security Synt ax of the “no” Form The no form sets either the timeout or Auth port to its default .
Firewall Feature Set Commands XSR CLI Reference Guide 16-117 Default Disabled globally Mode Global or Interface configuration: XSR(config)# or XSR(conf ig-if< xx >)# Example .
Firewall Feature Set Commands 16-118 Configuring Security Default s Deny all Mode Global configuration: XSR(config)# Example The following example permits any remote .
Firewall Feature Set Commands XSR CLI Reference Guide 16-119 Synt ax ip firewall java { all, none, selected network_name } ip firewall activex { all, none, selected network_name } Synt ax of the “no.
Firewall Feature Set Commands 16-120 Configuring Security Synt ax of the “no” Form The no form of this command cancels a scheduled load and unlocks .
Firewall Feature Set Commands XSR CLI Reference Guide 16-121 Synt ax ip firewall logging event-threshold 0-7 Synt ax of the “no” Form The no form of this command sets f.
Firewall Feature Set Commands 16-122 Configuring Security Also, all firewall object names including pre ‐ defined objects such as ANY_EXTERNAL and user ‐ defined object names are case ‐ sensitiv e.
Firewall Feature Set Commands XSR CLI Reference Guide 16-123 objects such as ANY_EXTERNAL and user ‐ defined object names are case ‐ sensitive. Refer to the ip firewall policy command for applicable policy and gating rule limit s.
Firewall Feature Set Commands 16-124 Configuring Security Synt ax ip firewall policy policy_name src_net_name dst_net_name se rv_name { allow | allow- log | allow-auth group_name | reject | log | url-b | url-w | cls name .
Firewall Feature Set Commands XSR CLI Reference Guide 16-125 Example The f ollowing policy allows FT P access to a host. Be aware that the host’ s source IP address will be authenticated against the group sales ‐ group .
Firewall Feature Set Commands 16-126 Configuring Security Synt ax of the “no” Form The no form of this command sets the default RP C timeout val u e : n.
Firewall Feature Set Commands XSR CLI Reference Guide 16-127 Synt ax of the “no” Form The no form of this command disables the selected ser vice: no ip firewall.
Firewall Feature Set Commands 16-128 Configuring Security ip firewall tcp/ud p timeout This command resets the idle timeout interval for Firew all sessions applying TCP or UDP pa cket inspection.
Firewall Interface Commands XSR CLI Reference Guide 16-129 Examples The following examples configure va li d inputs: ip firewall url-load-black-list blac klist.txt ip firewall url-load-black-list flas h:blacklist.txt ip firewall url-load-white-list cfla sh:whitelist.
Firewall Interface Commands 16-130 Configuring Security Example The following example disables the firewa ll on FastEthernet port 2 only: XSR(config-if<F2>.
Firewall Interface Commands XSR CLI Reference Guide 16-131 no ip firewall ip-multicast { in | ou t | both } Default Multicast packets are not allowed inbound and outbound.
Firewall Interface Commands 16-132 Configuring Security no ip firewall ip-options {loose-sou rce-route | strict-source-route | record- route | time-stamp | other | all} {i n | out | both} Default IP options are not allow ed inbound and outbound.
Firewall Show Commands XSR CLI Reference Guide 16-133 Example The following example blocks the host when the sy nc packets exceed 1000 packets per .
Firewall Show Commands 16-134 Configuring Security Ip firewall policy dmz private SMTP allow ! ! Policies: between dmz and external ! Ip firewall policy ANY_EXTERNAL dmz HTTP allow Ip firewall policy .
Firewall Show Commands XSR CLI Reference Guide 16-135 Mode EXEC or Privileged EXEC Mode: XSR> or XSR# Sample Output The following output display s Filter Source Destination Protocol.
Firewall Show Commands 16-136 Configuring Security Sample Output The output below displays netw ork objects for the Private ‐ network and Partner ‐ networks groups. Note that only member obje cts names are shown.
Firewall Show Commands XSR CLI Reference Guide 16-137 Mode EXEC or Privileged EXEC Mode: XSR> or XSR# Sample Output The following output display s firew all service group .
Firewall Show Commands 16-138 Configuring Security Mode EXEC or Privileged EXEC Mode: XSR> or XSR# Default If no options are specified all sessions are display ed.
Firewall Show Commands XSR CLI Reference Guide 16-139 Sample Output The following sample output displays summary statistics: Overall Firewall Status: Enabled Protected Interfac.
Firewall Show Commands 16-140 Configuring Security Mode EXEC or Privileged EXEC Mode: XSR> or XSR# Example The following is sample output from the command: show ip firewall urLlist Black URLs from File: blacklist.tx t 1.
Een belangrijk punt na aankoop van elk apparaat Enterasys Networks XSR CLI (of zelfs voordat je het koopt) is om de handleiding te lezen. Dit moeten wij doen vanwege een paar simpele redenen:
Als u nog geen Enterasys Networks XSR CLI heb gekocht dan nu is een goed moment om kennis te maken met de basisgegevens van het product. Eerst kijk dan naar de eerste pagina\'s van de handleiding, die je hierboven vindt. Je moet daar de belangrijkste technische gegevens Enterasys Networks XSR CLI vinden. Op dit manier kan je controleren of het apparaat aan jouw behoeften voldoet. Op de volgende pagina's van de handleiding Enterasys Networks XSR CLI leer je over alle kenmerken van het product en krijg je informatie over de werking. De informatie die je over Enterasys Networks XSR CLI krijgt, zal je zeker helpen om een besluit over de aankoop te nemen.
In een situatie waarin je al een beziter van Enterasys Networks XSR CLI bent, maar toch heb je de instructies niet gelezen, moet je het doen voor de hierboven beschreven redenen. Je zult dan weten of je goed de alle beschikbare functies heb gebruikt, en of je fouten heb gemaakt die het leven van de Enterasys Networks XSR CLI kunnen verkorten.
Maar de belangrijkste taak van de handleiding is om de gebruiker bij het oplossen van problemen te helpen met Enterasys Networks XSR CLI . Bijna altijd, zal je daar het vinden Troubleshooting met de meest voorkomende storingen en defecten #MANUAl# samen met de instructies over hun opplosinge. Zelfs als je zelf niet kan om het probleem op te lossen, zal de instructie je de weg wijzen naar verdere andere procedure, bijv. door contact met de klantenservice of het dichtstbijzijnde servicecentrum.
