User Guide

ManualsBrandsCarrier Access ManualsOtherAdit 3000

Adit 3000 Series and

Multi-Service Router (MSR) Card

CLI REFERENCE MANUAL

Part Number: 770-0165 BB

Product Release: Adit 3000 Series - 1.6

MSR Card - 2.0

April 2008

Summary of content (496 pages)

PAGE 1
Adit 3000 Series and Multi-Service Router (MSR) Card CLI REFERENCE MANUAL Part Number: 770-0165 BB Product Release: Adit 3000 Series - 1.6 MSR Card - 2.
PAGE 2
Copyright 2008 Turin Networks Inc. All rights reserved. The information presented in this manual is subject to change without notice and does not represent a commitment on the part of Turin Networks Inc. The hardware and software described herein are furnished under a license or non-disclosure agreement. The hardware, software, and manual may be used or copied only in accordance with the terms of this agreement.
PAGE 3
PREFACE Preface Safety Information CAUTION! WHEN USING YOUR TELEPHONE EQUIPMENT, BASIC SAFETY PRECAUTIONS SHOULD ALWAYS BE FOLLOWED TO REDUCE THE RISK OF FIRE, ELECTRIC SHOCK AND INJURY TO PERSONS, INCLUDING THE FOLLOWING: z Do not use this product near water for example, near a bathtub, washbowl, kitchen sink or laundry tub, in a wet basement or near a swimming pool. z Avoid using a telephone (other than a cordless type) during an electrical storm.
PAGE 4
Preface Notices This manual contains important information and warnings that must be followed to ensure safe operation of the equipment. DANGER! A DANGER NOTICE INDICATES THE PRESENCE OF A HAZARD THAT CAN OR WILL CAUSE DEATH OR SEVERE PERSONAL INJURY IF THE HAZARD IS NOT AVOIDED. CAUTION! A CAUTION NOTICE INDICATES THE POSSIBILITY OF INTERRUPTING NETWORK SERVICE IF THE HAZARD IS NOT AVOIDED. WARNING! A WARNING NOTICE INDICATES THE POSSIBILITY OF EQUIPMENT DAMAGE IF THE HAZARD IS NOT AVOIDED.
PAGE 5
TABLE OF CONTENTS Table of Contents Preface Safety Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . iii Notices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . iv 1 Introduction Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 6
Table of Contents reload . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . show . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . traceroute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 7
Table of Contents remote-admin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-54 router ospf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-56 security-default . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-57 security-log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 8
Table of Contents 7 Configuration - DHCP Pool Ethernet Mode do . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . end . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . end-address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . exit . . . . . . . . . . . .
PAGE 9
Table of Contents 10 Configuration - Dial Peer VoIP Mode destination-pattern . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-2 do . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-3 end . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-4 exit . . . . . . . . . .
PAGE 10
Table of Contents remote-admin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . renew . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . schedule-availability . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . shutdown . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 11
Table of Contents ppp username . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-24 schedule-availability . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-24 shutdown . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-24 sip-alg . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 12
Table of Contents shutdown . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-24 sip-alg . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-24 14 Configuration - IPSec Mode aggressive-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14-2 authentication . . . . . . . . . . . . . . .
PAGE 13
Table of Contents 15 Configuration - L2TPC Mode do . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-2 end . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-3 exit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-3 firewall . . . . . . . .
PAGE 14
Table of Contents 16 Configuration - OSPF Mode area commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16-2 compatible rfc1583 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16-3 do . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16-4 end . . . . . . . . . . . . . . . . . . . . . .
PAGE 15
Table of Contents ppp restart-timer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17-22 ppp time-btwn-reconnect . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17-22 ppp username . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17-22 schedule-availability . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 16
Table of Contents 21 Configuration - VLAN Port Mode do . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . end . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . exit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . history . . . . . . . . . . . . . .
PAGE 17
Table of Contents history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24-6 input-gain . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24-6 isdn switch-type (PRI) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24-7 no commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 18
Table of Contents xviii Adit 3000 (Rel. 1.6) and MSR Card (Rel 2.
PAGE 19
CHAPTER 1 Introduction This Reference Manual covers the Command Line Interface (CLI) for the following products: z Adit 3000 series (Adit 3104, Adit 3200, and Adit 3500) z Multi-Service Router (MSR) Card (a service card for the Adit 600 platform) The chapters are broken down into Modes and Configuration Groups. All commands that are listed in each group are described in the chapter. NOTE: Throughout this manual, examples primarily reflect the Adit 3000 series.
PAGE 20
Introduction Overview Overview The Adit 3000/MSR CLI has three command modes, each with access to different command sets. The following displays the basic flow of the CLI. 1-2 Adit 3000 (Rel. 1.6) and MSR Card (Rel 2.
PAGE 21
Introduction Overview Prompt Identifier When you initiate a CLI session it will open in User mode, which is indicated by the ">" prompt. At any time you can quickly determine which mode you are in by the prompt. Command Mode Access Method Prompt Displayed Exit Method User Login adit 3104> adit 3200> adit 3500> adit MSR> Use the logout command Privileged From User mode, enter the enable command adit 3104# adit 3200# adit 3500# adit MSR# Use the exit or end command.
PAGE 22
Introduction Overview Configuration Mode z Allows users to configure specific features/functions. z Use the configure terminal command to enter from Privileged mode. z Identified by the (config)# prompt. Note: As the submodes change, the words inside the parentheses are modified. z To exit Configuration mode, type exit or press Ctrl-Z.
PAGE 23
Introduction Command Syntax Conventions Command Syntax Conventions The conventions used to present command syntax are as follows: Convention Description | Vertical bars separate alternative, mutually exclusive elements. Example: (config)# clock source {1|2} {none|ds1 1|ds1 2|ds1 3|ds1 4} [] Square brackets indicate an optional element. Example: (config)# event-history priority [error|fatal|info|notice|warning] {} Braces indicate a required choice.
PAGE 24
Introduction Shortcuts Shortcuts Keystroke Up Arrow  Description Use the up arrow key to re-display a previously entered command. Select the up arrow repeatedly, to scroll through all the commands entered starting with the most recent. Will move curser one character to the left or right. Left and Right Arrow 1-6 ? The question mark will display help for the current command. [Tab] Select the Tab key after entering a partial (but unique) portion of the CLI command.
PAGE 25
CHAPTER 2 User Mode User mode is the first level of commands after logging in. User mode is represented by the > prompt.
PAGE 26
User Mode date Use the date command to display the current date. Syntax: > date Example: adit 3500> date Wed Jan 12 10:37:51 2007 Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR enable Use the enable command (at the User mode prompt) to enter the Privileged mode. Note: Once a correct password has been entered, the prompt changes from ">" to "#".
PAGE 27
User Mode exit Use the exit command to close your current connection if you are in User mode or Privileged mode. If the command is entered in a subconfiguration mode (Interface or Routing), this command takes you to the previous level (example: back to Privileged mode from Interface configuration mode).
PAGE 28
User Mode history Use the history command to display commands that have been entered in this session. This command can be entered in any Configuration mode. Syntax: > history Example: Adit 3500> history date ping 192.168.1.1 -n 4 show version show users show voice-port fxs ping 192.168.1.1 show version history Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR 2-4 Adit 3000 (Rel. 1.6) and MSR Card (Rel 2.
PAGE 29
User Mode ping Use the ping command to send a sequence of ICMP echo request packets to the specified host. If the host variable is omitted, and you are in User mode, the router prompts you for additional information. Note: The ping command verifies a connection, and is a very important troubleshooting tool. Syntax: > ping {address [-i time] [-l size] [-n count] [-w timeout]|stop} Field Definition address IP address of the host to ping. -i time Specifies the intervals between pings.
PAGE 30
User Mode show 2-6 show alarms show ip ospf database show arp show ip ospf interface show caclkcd show ip ospf neighbor show config dynamic-dns show licenses show controller lcc show log show controller t1 show mac-address-table show dhcp-leases show nat-fw show digit-map show port-trigger show interface description show route show interface ethernet show service show interface multilink show users show interface serial show version show interface stats show voice-port fxs show
PAGE 31
User Mode show alarms Use the show alarms command to display the active alarms. Syntax: > show alarms [t1 port|lcc number] {alert|all|critical|info|major|minor} Field Definition t1 port Display alarms for a specific port. Adit 3104: Value must be 1. Adit 3500: Range = 1-4. lcc number Display alarms for a specific Link Cross-Connect (LCC). MSR: Range = 1-8. alert Filter alert alarms (threshold crossing). all Display all alarms. critical Filter critical alarms. info Filter information alarms.
PAGE 32
User Mode show arp Use the show arp command to display the ARP (Address Resolution Protocol) table. Syntax: > show arp {all|address|ethernet port} Field Definition all Display entire ARP table. address Display ARP items of the entered IP address. ethernet port Display Ethernet ARP items only. port - Define an Ethernet port number. Range 1 - 2. Example: adit 3500> show arp ethernet 1 1 192.168.1.1 ether Dynam 00:50:da:59:f0:25 eth_lan Example: adit 3500> show arp 192.168.1.1 ip=192.168.1.
PAGE 33
User Mode show caclkcd Use the show caclkcd command to display the linux kernel crash dump Syntax: > show caclkcd Example: Adit 3500> show caclkcd ---------------- Begin cacLKCD ----------Jan 1 2003 00:00:44 <3> openrg: unhandled page fault at pc=0x400528c0, lr=0x400 digit-map Show digit-map settings 52890 (bad address=0x30303038, code 245)Show various interfaces pc : [<400528c0>] lr : [<40052890>] No Show l r7 : 4006bb9c r6 : 30303038 r5 : 4006bb9c r4 : 4006bc1c port-trigger r3 : 30303030 r2 : 4006bc1c
PAGE 34
User Mode show config dynamic-dns Use the show config dynamic-dns command to display the dynamic DNS configuration.
PAGE 35
User Mode show controller t1 Use the show controller t1 command to display the performance statistics of the DS1. Syntax: > show controller t1 port Field Definition port DS1 (T1) interface.
PAGE 36
User Mode show dhcp-leases Use the show dhcp-leases command to display the DHCP lease table. Syntax: > show dhcp-leases Example: Adit 3500> show dhcp-leases Ethernet 1 Hostname : new-host IP:192.168.1.10 MAC:00:00:ff:ff:00:00 Type:static Expires-In:0 Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR show digit-map Use the show digit-map command to display the Digit Map settings.
PAGE 37
User Mode show interface description Use the show interface description command to display interface information. Syntax: > show interface description Example: Adit 3500> show interface description Device State IP/Mask Dependencies T1 1 running None T1 2 running None T1 3 up None T1 4 up None Serial 1 up 0.0.0.0/255.255.255.255 T1 1 Ethernet 2 disabled 0.0.0.0/0.0.0.0 None Ethernet 1 running 192.168.1.1/255.255.255.0 None IPsec 0 disabled 0.0.0.0/0.0.0.
PAGE 38
User Mode show interface ethernet Use the show interface ethernet command to display the Ethernet interface information. Syntax: > show interface ethernet port Field Definition port Ethernet port number. Range = 1-2. Example: Adit 3500> show interface ethernet 1 Device=Ethernet 1 State=running IP/Mask=192.168.1.1/255.255.255.
PAGE 39
User Mode show interface serial Use the show interface serial command to display the configuration of the serial interface. Syntax: > show interface serial port Field Definition port Serial interface. Adit 3104: Value must be 1. Adit 3500: Range = 1-4. MSR: Range = 1-8. Example: Adit 3500> show interface serial 3 Device=Serial 1 State=up IP/Mask=0.0.0.0/255.255.255.255 Dependency=T1 1 Status: Reconnecting...
PAGE 40
User Mode show interface stats Use the show interface stats command to display the interface statistics.
PAGE 41
User Mode Status: Unassigned Device=LinkCC 8 State=down Dependency=None Status: Unassigned Device=Ethernet 2 State=up Dependency=None IP/Mask=DHCP Unassigned Status: DHCP IP Address Released; Link: Down Tx (Packets/Bytes/Dropped/Errors)=(0/0/0/0) Rx (Packets/Bytes/Dropped/Errors)=(0/0/0/0) Broadcasts (Tx/Rx)=(0/0) Multicasts=0 Collisions=0 Device=Ethernet 1 State=running IP/Mask=10.0.0.3/255.255.255.
PAGE 42
User Mode show ip ospf Use the show ip ospf command to display the general OSPF routing process information. Syntax: > show ip ospf Example: adit 3500> show ip ospf Routing Process "ospf 0" with ID 192.168.1.
PAGE 43
User Mode show ip ospf database Use the show ip ospf database command to display information related to the OSPF database for a specific router. The various forms of this command deliver information on defined OSPF link state advertisements.
PAGE 44
User Mode Example: adit 3500> show ip ospf database Router Link States (Area 0.0.0.1) Link ID 192.168.3.1 192.168.3.255 ADV Router 192.168.3.1 192.168.3.255 Age Seq# CkSum Link count 313 0x800000c1 0x4978 1 568 0x8000003a 0xa6c0 1 Net Link States (Area 0.0.0.1) Link ID 192.168.3.251 ADV Router 192.168.3.255 Age Seq# CkSum 388 0x80000003 0xbcec Example: adit 3500> show ip ospf database self-originate Router Link States (Area 0.0.0.1) Link ID ADV Router Age Seq# CkSum Link count 192.168.3.255 192.168.
PAGE 45
User Mode show ip ospf interface Use the show ip ospf interface command to display OSPF related interface information. Syntax: > show ip ospf interface {ethernet port|serial port|multilink port} Field Definition ethernet port Display information on the Ethernet interface. port = 1 or 2 serial port Display information on the serial interface. Adit 3104: Value must be 1. Adit 3500: Range = 1-4. MSR: Range = 1-8. multilink port Display information on the Multilink interface.
PAGE 46
User Mode show ip ospf neighbor Use the show ip ospf neighbor command to display OSPF neighbor information. Syntax: > show ip ospf neighbor [interface address|neighbor-id|detail] Field Definition interface address Optional parameter. Enter interface IP address to define display. neighbor-id Optional parameter. Enter neighbor IP address to define display. detail Optional parameter. Enable display of detailed information. Example: adit 3500> show ip ospf neighbor ID Pri 10.199.199.137 1 172.16.48.
PAGE 47
User Mode show licenses Use the show licenses command to display all enabled feature keys. Syntax: > show licenses Example: Adit 3500> show licenses VPN SIP MGCP G729A license license license license = = = = No Yes No Yes Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR show log Use the show log command to display the current events on the system.
PAGE 48
User Mode Example: Adit 3500> show log t1 1 minor System System System System System System System System Log Log Log Log Log Log Log Log Message Message Message Message Message Message Message Message Jan Jan Jan Jan Jan Jan Jan Jan 1 1 1 1 1 1 1 1 00:00:08 00:00:04 01:19:13 00:57:12 00:56:52 00:56:34 00:56:09 00:00:04 2003 2003 2003 2003 2003 2003 2003 2003 kern.err kern.err kern.err kern.err kern.err kern.err kern.err kern.
PAGE 49
User Mode show nat-fw Use the show nat-fw command to display the current NAT and firewall connection table. Syntax: > show nat-fw Example: Adit 3500> show nat-fw Number Content 1 TCP 11.0.0.4 36104<--> 172.15.16.1 36104[31.0.0.6 5516 ] TIME_WAIT/TIME_WAIT ttl 0 sec bytes 1320 pkts 7 ppp100 Outgoing BY FTP 2 TCP 11.0.0.4 36103<--> 172.15.16.1 36103[31.0.0.6 21 ] TIME_WAIT/TIME_WAIT ttl 0 sec bytes 1182 pkts 20 FTP child: Yes ppp100 Outgoing 3 TCP 11.0.0.4 36102<--> 172.15.16.1 36102[31.0.0.
PAGE 50
User Mode show port-trigger Use the show port-trigger command to display all port triggering information.
PAGE 51
User Mode show service Use the show service command to displays all services.
PAGE 52
User Mode show users Use the show users command to displays all users on this system. Syntax: > show users Example: Adit 3500> show users Provisioned User List User-1 : admin Access: ADMIN
PAGE 53
User Mode Example: Adit MSR> show version Application Version: 2.0.0.5 Compilation Time: Thu Jan 31 2008 13:48:42 FPGA Version: 0.04 Boot Version: 1.14 Board Version: 0 003-1756-0001 Flash Size: 32M bytes Memory Size: 64M bytes IXP400 Software Release: 1_4 SQA4_1 MSP: 82610 - 100 channels Image File Name: TGW_v5_05.axf API Version : 2.1.0 Source IP Addr : 10.10.4.202 MSR Card Slot: 5 CLEI Code: SITRAANBAA Product Features: VPN enabled. SIP enabled.
PAGE 54
User Mode show voice-port fxs Use the show voice-port fxs command to display the FXS interface information. Syntax: > show voice-port fxs Example: Adit 3500> show voice-port fxs Registration Address: 172.32.1.15 SIP Proxy: Yes Proxy Address: 172.32.1.
PAGE 55
User Mode show voice-port trunk Use the show voice-port trunk command to display the voice trunk statistics. Syntax: > show voice-port trunk port Field Definition port Adit 3500: DS1 (T1) interface. Value must be 1. MSR: Link Cross Connect (LCC). Range = 1-8.
PAGE 56
User Mode Example: Adit MSR> show voice-port trunk 1 ******************************* PRI 1 *************************************** Channel no Internal Call Id Q931 Connection Id Tdm TimeSlot Call State ------------------------------------------------------------------------------1 -1 -1 -1 INACTIVE 2 -1 -1 -1 INACTIVE 3 -1 -1 -1 INACTIVE 4 -1 -1 -1 INACTIVE 5 -1 -1 -1 INACTIVE 6 -1 -1 -1 INACTIVE 7 -1 -1 -1 INACTIVE 8 -1 -1 -1 INACTIVE 9 -1 -1 -1 INACTIVE 10 -1 -1 -1 INACTIVE 11 -1 -1 -1 INACTIVE 12 -1 -1
PAGE 57
User Mode traceroute Use the traceroute command to trace a route to a remote host. Syntax: > traceroute Syntax: > traceroute {address|hostname|stop} Field Definition address IP address of the remote host. hostname Host name of the remote host. stop Stop the traceroute process. Example: Adit 3500> traceroute to 192.168.1.200 (192.168.1.200), 10 hops max 1 192.168.1.200 (192.168.1.200) 10.500 ms 1.013 ms 0.
PAGE 58
User Mode 2-34 Adit 3000 (Rel. 1.6) and MSR Card (Rel 2.
PAGE 59
CHAPTER 3 Privileged Mode The Privileged Mode allows the operator access to the configuration modes. This Mode is entered with the > enable command from the Basic mode. The Privileged Mode is represented by the # prompt.
PAGE 60
Privileged Mode clear clear arp Use the clear arp command to clear the ARP (Address Resolution Protocol) table. Syntax: # clear arp {all|ethernet port|address} Field Definition all Display entire ARP table. ethernet port Display Ethernet ARP items only. port - Define an Ethernet port number. Range 1 - 2. address Enter IP address for specific ARP information on this address.
PAGE 61
Privileged Mode configure terminal Use the configure terminal command to enter the configuration mode. Syntax: # configure terminal Example: adit 3500# configure terminal adit 3500 (config)# Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR copy copy defaults Use the copy defaults command to restore default setting. Syntax: # copy defaults running-config Example: adit 3500# copy defaults running-config Going to reboot! Restarting system.
PAGE 62
Privileged Mode Example: Adit MSR#copy path tftp://192.168.1.100/MSR_config runningconfig Adit MSR#Configuration restore: Success. WARNING: A reload is needed for changes to take effect. Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR copy running-config Use the copy running-config command to save the current configuration on the Adit. Note: The TFTP server must be running on the destination device.
PAGE 63
Privileged Mode debug debug portmon all Use the debug portmon all command allows the user to monitor all traffic of a specific type. All traffic can be displayed, or a specific traffic type can be defined. Note: Immediately after this command is issued, any traffic that falls into the filter parameter will be displayed. To turn the monitoring off, you must issue a no debug portmon command. See no debug portmon command on page 3-16.
PAGE 64
Privileged Mode debug portmon {rx|tx|both} Use the debug portmon {rx|tx|both} command allows the user to monitor specific direction of traffic. Note: Immediately after this command is issued, any traffic that falls into the filter parameter will be displayed. To turn the monitoring off, you must issue a no debug portmon command. See no debug portmon command on page 3-16. Syntax: # debug portmon {rx|tx|both} Field Definition both Display both receive and transmit information.
PAGE 65
Privileged Mode debug portmon ethernet Use the debug portmon ethernet command allows the user to monitor specific Ethernet traffic. Note: Immediately after this command is issued, any traffic that falls into the filter parameter will be displayed. To turn the monitoring off, you must issue a no debug portmon command. See no debug portmon command on page 3-16.
PAGE 66
Privileged Mode debug portmon management Use the debug portmon management command allows the user to configure management trace suppression. See no debug portmon command on page 3-16. Syntax: # debug portmon management {hush|off} Field Definition hush hush - Enable suppression of management traffic trace off off - Disable suppression of management traffic trace Example: adit 3500# debug portmon management hush Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR 3-8 Adit 3000 (Rel. 1.
PAGE 67
Privileged Mode debug portmon multilink Use the debug portmon multilink command allows the user to monitor the multilink traffic. All traffic can be displayed, or a specific traffic type can be defined. Note: Immediately after this command is issued, any traffic that falls into the filter parameter will be displayed. To turn the monitoring off, you must issue a no debug portmon command.
PAGE 68
Privileged Mode debug portmon raw Use the debug portmon raw command allows the user to display raw data related traffic. See no debug portmon command on page 3-16. Syntax: # debug portmon raw {off|on} Field Definition off Disable display of packet hex data on Enables display of packet hex data Example: adit 3500# debug portmon raw off Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR 3-10 Adit 3000 (Rel. 1.6) and MSR Card (Rel 2.
PAGE 69
Privileged Mode debug portmon serial Use the debug portmon serial command allows the user to monitor traffic on a serial interface. Note: Immediately after this command is issued, any traffic that falls into the filter parameter will be displayed. To turn the monitoring off, you must issue a no debug portmon command. See no debug portmon command on page 3-16.
PAGE 70
Privileged Mode debug trace Use the debug trace command allows the user to configure trace settings. Note: Immediately after this command is issued, any trace that falls into the filter parameter will be displayed. To turn the monitoring off, you must issue a no debug trace command. See no debug trace command on page 3-16. Syntax: # debug trace {cas|pri|sip} {enable|tx|rx} Field Definition cas Enable Channel Associated Signaling (CAS) tracing. Note: Not supported on the Adit 3104.
PAGE 71
Privileged Mode help Use the help command to display the help information for this command. Note: This can also be accomplished with a ?. This command can be entered in any configuration mode.
PAGE 72
Privileged Mode history Use the history command to display commands that have been entered in this session. This command can be entered in any configuration mode. Syntax: # history Example: adit 3500# history debug trace sip rx no debug trace no debug trace rx no debug trace sip no debug trace no debug trace sip debug trace date end enable configure terminal history Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR 3-14 Adit 3000 (Rel. 1.6) and MSR Card (Rel 2.
PAGE 73
Privileged Mode log clear Use the log clear command to clear the history of the log. Syntax: # log clear {all|firewall|pri|sip|system|t1|lcc} Field Definition all Clear the entire event log. firewall Clear firewall event log. pri Clear PRI event log. Note: Not supported on the Adit 3104. sip Clear SIP event log. system Clear system event log. t1 Clear T1 event log. (Adit 3104, Adit 3200, Adit 3500 only.) lcc Clear Link Cross-Connect (LCC) event log. (MSR only.
PAGE 74
Privileged Mode no debug no debug portmon Use the no debug portmon command to stop the Packet Monitor (portmon) process. To configure a debug command, see the debug command on page 3-5. Syntax: # no debug portmon Example: adit 3500# no debug portmon Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR no debug trace Use the no debug trace command to stop the trace process. To configure a debug trace, see the debug trace command on page 3-12.
PAGE 75
Privileged Mode ping Use the ping command to send a sequence of ICMP echo request packets to the specified host. If the host variable is omitted, and you are in Privileged mode, the router prompts you for additional information. Note: The ping command verifies a connection and is a very important troubleshooting tool. Syntax: # ping {address [-i time] [-l size] [-n count] [-w timeout]|stop} Field Definition address IP address of the host to ping. -i time Specifies the intervals between pings.
PAGE 76
Privileged Mode reload Use the reload command to reset the system. CAUTION! THIS IS A SERVICE AFFECTING COMMAND. Syntax: # reload Example: adit 3500# reload Going to reboot! Restarting system. Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR 3-18 Adit 3000 (Rel. 1.6) and MSR Card (Rel 2.
PAGE 77
Privileged Mode show For maneuverability through these commands, all command names in blue or italics are hyperlinked.
PAGE 78
Privileged Mode show alarms Use the show alarms command to display the active alarms. Syntax: # show alarms [t1 port|lcc number] {alert|all|critical|info|major|minor} Field Definition t1 port Display alarms for a specific port. Adit 3104: Value must be 1. Adit 3500: Range = 1-4. lcc number Display alarms for a specific Link Cross-Connect (LCC). MSR: Range = 1-8. alert Filter alert alarms (threshold crossing). all Display all alarms. critical Filter critical alarms.
PAGE 79
Privileged Mode show arp Use the show arp command to display the ARP (Address Resolution Protocol) table. Syntax: # show arp {all|address|ethernet port} Field Definition all Display entire ARP table. address Display ARP items of the entered IP address. ethernet port Display Ethernet ARP items only. port - Define an Ethernet port number. Range 1 - 2. Example: adit 3500# show arp ethernet 1 1 192.168.1.1 ether Dynam 00:50:da:59:f0:25 eth_lan Example: adit 3500# show arp 192.168.1.1 ip=192.
PAGE 80
Privileged Mode show caclkcd Use the show caclkcd command to display the linux kernel crash dump Syntax: # show caclkcd Example: adit 3500# show caclkcd ---------------- Begin cacLKCD ----------Jan 1 2003 00:00:44 <3> openrg: unhandled page fault at pc=0x400528c0, lr=0x400 digit-map Show digit-map settings 52890 (bad address=0x30303038, code 245)Show various interfaces pc : [<400528c0>] lr : [<40052890>] No Show l r7 : 4006bb9c r6 : 30303038 r5 : 4006bb9c r4 : 4006bc1c port-trigger r3 : 30303030 r2 : 400
PAGE 81
Privileged Mode show config access-control Use the show config access-control command to display all access control filters. Syntax: # show config access-control Example: adit 3500# show config access-control access-control id 1 apply-to lan time-range always service 1 enable Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR show config access-list Use the show config access-list command to display all access lists.
PAGE 82
Privileged Mode show config controller t1 Use the show config controller t1 command to display the T1 information. Syntax: # show config controller t1 port Field Definition port T1 port to display. Adit 3104: Value must be 1. Adit 3500: Range 1 - 4.
PAGE 83
Privileged Mode show config dmz-host Use the show config dmz-host command to display the DMZ information. Syntax: # show config dmz-host Example: adit 3500# show config dmz-host dmz-host 192.168.1.200 enable Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR show config host-filter Use the show config host-filter command to display the IP and host name filters. Syntax: # show config host-filter Example: adit 3500# show config host-filter host-filter id test ip-address 192.168.1.
PAGE 84
Privileged Mode show config interface ethernet Use the show config interface ethernet command to display the Ethernet port information. Syntax: # show config interface ethernet port Field Definition port Ethernet port to display. Range 1 - 2 Example: adit 3500# show config interface ethernet 1 Interface Ethernet 1 ip address 192.168.1.1 mask 255.255.255.
PAGE 85
Privileged Mode show config interface multilink Use the show config interface multilink command to display the Multilink port information. Syntax: # show config interface multilink port Field Definition port Multilink port to display. Adit 3104, Adit 3200, Adit 3500: Value must be 1. MSR: Range = 1-8.
PAGE 86
Privileged Mode show config interface serial Use the show config interface serial command to display serial interface information. Syntax: # show config interface serial port Field Definition port Serial interface to display. Adit 3104: Value must be 1. Adit 3500: Range = 1-4. MSR: Range = 1-8.
PAGE 87
Privileged Mode show config ip dhcp ethernet Use the show config ip dhcp ethernet command to display the DHCP Pool. Syntax: # show config ip dhcp ethernet port Field Definition port Ethernet port to display. Range 1 - 2 Example: adit 3500# show config ip dhcp ethernet 1 ip dhcp pool ethernet 1 no relay start-address 192.168.1.1 end-address 192.168.1.244 subnet-mask 255.255.255.
PAGE 88
Privileged Mode show config nat-bypass Use the show config nat-bypass command to display the NAT Bypass entries. Syntax: # show config nat-bypass Example: adit 3500# show config nat-bypass nat-bypass ip-address 192.168.1.120 mask 255.255.255.0 nat-bypass ip-address 192.168.1.120 mask 255.255.255.0 enable Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR show config network-object Use the show config network-object command to display the network object configuration.
PAGE 89
Privileged Mode show config remote-admin Use the show config remote-admin command to display the remote admin configuration.
PAGE 90
Privileged Mode show config service Use the show config service command display the current defined services. Syntax: # show config service Example: adit 3500# show config service service id 4 name service1 description test protocol tcp server-src-port 1-1 server-dst-port 4-4 Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR show config static-dns Use the show config static-dns command to display the static DNS entries.
PAGE 91
Privileged Mode show config voice-port fxs Use the show config voice-port fxs command to display the FXS port information. Syntax: # show config voice-port fxs [port] Field Definition port FXS port to display. Adit 3104: Range = 1 - 24. Adit 3500: Range = 1 - 4. MSR: Range = 1 - 48.
PAGE 92
Privileged Mode show config voice-port trunk Use the show config voice-port trunk command display the Trunk port information. Syntax: # show config voice-port trunk port Field Definition port Trunk port to display. Value must be 1.
PAGE 93
Privileged Mode show controller lcc Use the show controller lcc command to display the settings for a Link Cross Connect on the MSR card. Syntax: # show controller lcc number Field Definition number Link Cross Connect number, 1-8.
PAGE 94
Privileged Mode show controller t1 Use the show controller t1 command displays the T1 configuration and performance information. Syntax: # show controller t1 port Field Definition port DS1 (T1) interface.
PAGE 95
Privileged Mode show dhcp-leases Use the show dhcp-leases command to display the DHCP lease table. Syntax: # show dhcp-leases Example: Adit 3500# show dhcp-leases Ethernet 1 Hostname : new-host IP:192.168.1.10 MAC:00:00:ff:ff:00:00 Type:static Expires-In:0 Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR show digit-map Use the show digit-map command to display the Digit Map patterns.
PAGE 96
Privileged Mode show interface description Use the show interface description command to display the interface information. Syntax: # show interface description Example: adit 3500# show interface description Device T1 1 T1 2 T1 3 T1 4 Serial 1 Ethernet 2 Ethernet 1 IPsec 0 IPsec 1 State IP/Mask running running up up up 0.0.0.0/255.255.255.255 disabled 0.0.0.0/0.0.0.0 running 192.168.1.1/255.255.255.0 disabled 0.0.0.0/0.0.0.0 running 192.168.1.1/255.255.255.
PAGE 97
Privileged Mode show interface ethernet Use the show interface ethernet command to display the Ethernet interface information. Syntax: # show interface ethernet port Field Definition port Port number range 1-2. Example: adit 3500# show interface ethernet 1 Device=Ethernet 1 State=running IP/Mask=192.168.1.1/255.255.255.
PAGE 98
Privileged Mode show interface serial Use the show interface serial command to display the configuration of the serial interface. Syntax: # show interface serial port Field Definition port Serial interface. Adit 3104: Value must be 1. Adit 3500: Range = 1-4. MSR: Range = 1-8. Example: adit 3500# show interface serial 1 Device=Serial 1 State=up IP/Mask=0.0.0.0/255.255.255.255 Dependency=T1 1 Status: Reconnecting...
PAGE 99
Privileged Mode show ip ospf Use the show ip ospf command to display the general OSPF routing process information. Syntax: # show ip ospf Example: adit 3500# show ip ospf Routing Process "ospf 0" with ID 192.168.1.
PAGE 100
Privileged Mode show ip ospf database Use the show ip ospf database command to display information related to the OSPF database for a specific router. The various forms of this command deliver information on defined OSPF link state advertisements.
PAGE 101
Privileged Mode Example: adit 3500# show ip ospf database Router Link States (Area 0.0.0.1) Link ID 192.168.3.1 192.168.3.255 ADV Router 192.168.3.1 192.168.3.255 Age Seq# CkSum Link count 313 0x800000c1 0x4978 1 568 0x8000003a 0xa6c0 1 Net Link States (Area 0.0.0.1) Link ID 192.168.3.251 ADV Router 192.168.3.255 Age Seq# CkSum 388 0x80000003 0xbcec Example: adit 3500# show ip ospf database self-originate Router Link States (Area 0.0.0.1) Link ID ADV Router Age Seq# CkSum Link count 192.168.3.
PAGE 102
Privileged Mode show ip ospf interface Use the show ip ospf interface command to display OSPF related interface information. Syntax: # show ip ospf interface {ethernet port|serial port|multilink port} Field Definition ethernet port Display information on the Ethernet interface. port = 1 or 2 serial port Display information on the serial interface. Adit 3104: Value must be 1. Adit 3500: Range = 1-4. MSR: Range = 1-8. multilink port Display information on the Multilink interface.
PAGE 103
Privileged Mode show ip ospf neighbor Use the show ip ospf neighbor command to display OSPF neighbor information. Syntax: # show ip ospf neighbor [interface address|neighbor-id|detail] Field Definition interface address Optional parameter. Enter interface IP address to define display. neighbor-id Optional parameter. Enter neighbor IP address to define display. detail Optional parameter. Enable display of detailed information. Example: adit 3500# show ip ospf neighbor ID Pri 10.199.199.137 1 172.
PAGE 104
Privileged Mode show ipsec Use the show ipsec command to display the IPSec Connections or the connection configuration information. Syntax: # show ipsec [vpn_ipsecconnection-id] Field Definition connection-id Enter the name of a connection. Example: adit 3500# vpn_ipsec vpn_ipsec vpn_ipsec vpn_ipsec show ipsec 0 1 2 3 Example: adit 3500# show ipsec vpn_ipsec2 Device = test State = Enabled tatus = No VPN software license Schedule Availability = Always Remote Tunnel Endpoint Address = 192.168.1.
PAGE 105
Privileged Mode show l2tpc Use the show l2tpc command to display the Layer 2 Tunneling Protocol Connections or the connection configuration information. Syntax: # show l2tpc [l2tpc connection-id] Field Definition connection-id Enter the name of a connection.
PAGE 106
Privileged Mode show licenses Use the show licenses command to display all enabled feature keys. Syntax: # show licenses Example: adit 3500# show licenses VPN SIP MGCP G729A license license license license = = = = No Yes No Yes Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR 3-48 Adit 3000 (Rel. 1.6) and MSR Card (Rel 2.
PAGE 107
Privileged Mode show log Use the show log command to display the current events on the system. Syntax: # show log {firewall|pri|sip|system|t1 port|lcc number} [severity] Field Definition firewall Filter firewall alarms pri Display PRI logs. Note: This is not supported on the Adit 3104. sip Display SIP logs. system Filter general system alarms t1 port Display event log for a specific T1 port. Adit 3104: Value must be 1. Adit 3500: Range = 1-4.
PAGE 108
Privileged Mode show mac-address-table Use the show mac-address-table command to display the current MAC addresses (LAN\WAN). Syntax: # show mac-address-table Example: adit 3500# show mac-address-table Ethernet 1 mac= 00:00:00:ff:ff:ff Ethernet 2 mac= 00:00:00:ff:ff:fd Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR show nat-fw Use the show nat-fw command to display the current NAT and firewall connection table. Syntax: # show nat-fw Example: adit 3500# show nat-fw Number Content 1 TCP 11.
PAGE 109
Privileged Mode show port-trigger Use the show port-trigger command to display the port trigger information. Syntax: # show port-trigger Example: adit 3500# show port-trigger Service ID:134217730 Trigger protocol: UDP dst_end=1701 Enable Service Name:L2TP port: src_start=0 src_end=0 Service ID:16777223 Trigger protocol: UDP dst_end=69 Enable Service Name:TFTP port: src_start=1024 src_end=65535 dst_start=1701 dst_start=69 Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR Adit 3000 (Rel. 1.
PAGE 110
Privileged Mode show pptpc Use the show pptps command to display the PPTP connections or the PPTP connection details. Syntax: # show pptpc [pptpc connection-id] Field Definition connection-id Enter the name of a connection.
PAGE 111
Privileged Mode show pptps Use the show pptps command to display the PPTP Server settings. Syntax: # show pptps Example: adit 3500# show pptps state = Enable status = Invalid vpn license Idle_Time = 1200 Authentication = MS-CHAP MS-CHAPv2 PAP Encryption = MPPE-40 MPPE-128 (Stateless) Remote IP Address Range = 192.168.1.245 - 192.168.1.254 Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR show route Use the show route command to display the routing table.
PAGE 112
Privileged Mode show running-config Use the show running-config command to display the current configuration of the system. Syntax: # show running-config Example: adit 3500# show running-config ip host adit3500 log system notify none log security notify none log t1 notify none clock source 1 t1 1 clock source 2 none controller t1 1 description T1 #1 lbo short 133 fdl none framing esf linecode b8zs loopdetect none loopback none idle-pattern 0x7f no pri-group no tdm-group no ds0-group . . .
PAGE 113
Privileged Mode no radius-server voice-port trunk 1 description Trunk 1 no comfort-noise connection t1 2 no echo-cancel input-gain 0 output-gain 0 isdn switch-type primary-ni2 voice-port fxs 1 description Line 1 no comfort-noise echo-cancel enable input-gain 0 output-gain 0 dial-timeout 5 signal loop-start . . .
PAGE 114
Privileged Mode session-timer refresher uac no session-timer mode redundancy type none redundancy ttl 3600 redundancy rollback-timer 300 redundancy advanced-timeout 2 redundancy advanced-retries 3 no filter-incoming Example: adit MSR# show running-config ! Start of commands to eliminate default configuration no voice-port trunk 1 interface serial 1 shutdown exit no interface serial 1 ! End of commands to eliminate default configuration ip host adit_MSR ip domain-name home log system notify none log securi
PAGE 115
Privileged Mode no schedule-availability ip ospf authentication null exit interface ethernet 2 ip address auto description Ethernet 2 ip mtu auto ip dhcp auto-provision no ip primary-dns no ip secondary-dns ip route-mode napt ip default-route enable no ip proxy-arp no ip rip ip rip receive-version 1or2 ip rip send-version 2-bcast sip-alg enable firewall enable metric 40 no shutdown speed auto full-duplex no schedule-availability ip ospf authentication null exit no ip dhcp pool ethernet 1 no ip dhcp pool et
PAGE 116
Privileged Mode voice-port fxs no digit-map dial-timeout 5 exit voice-port fxs 1 description Line 1 no comfort-noise echo-cancel enable input-gain 0 output-gain 0 signal loop-start no per-line-logging no shutdown exit . . .
PAGE 117
Privileged Mode registration retry-timeout 500 registration tries 2 registration failed-time 60 registration window-size 10 no registration ignore-negotiated enable redundancy type none fax-protocol-t38 signaling sdp-preferred fax-protocol-t38 ecs redundant fax-protocol-t38 ls-redundancy 3 fax-protocol-t38 hs-redundancy 0 exit port-trigger service 134217730 enable port-trigger service 16777223 enable remote-admin telnet primary-port port 23 remote-admin telnet secondary-port port 8023 remote-admin telnet
PAGE 118
Privileged Mode no no no no no no no no no no no no no no no no no no no ipsec ipsec ipsec ipsec ipsec ipsec ipsec ipsec ipsec ipsec ipsec ipsec ipsec ipsec ipsec ipsec ipsec ipsec ipsec log log log log log log log log log log log log log log log log log log log ike msg-enc-dec ike msg-inp ike msg-outp ike pri-key ike rej-packet ipsec atc ipsec emvc ipsec etc ipsec ip-ctc ipsec irtmc ipsec mirl ipsec rc ipsec rtmc ipsec satmc ipsec tc ipsec tsmc ipsec ttc ipsec usc ipsec vrp pptps ppp authentication pp
PAGE 119
Privileged Mode show service Use the show service command to display all service information. Note: The following example, is only a portion of the list. Syntax: # show service Example: adit 3500# show service Group: Service Trigger Service Trigger Service Trigger Service Trigger Service Trigger Service Trigger Service Trigger Service Trigger Service Trigger Service Trigger Service Trigger Service Trigger Service Trigger Service Trigger Service Trigger Service Trigger Service Trigger . . .
PAGE 120
Privileged Mode show users Use the show users command to display all users on this system. Syntax: # show users Example: adit 3500# show users Provisioned User List User-1 : admin Access: ADMIN
PAGE 121
Privileged Mode Example: Adit MSR# show version Application Version: 2.0.0.5 Compilation Time: Thu Jan 31 2008 13:48:42 FPGA Version: 0.04 Boot Version: 1.14 Board Version: 0 003-1756-0001 Flash Size: 32M bytes Memory Size: 64M bytes IXP400 Software Release: 1_4 SQA4_1 MSP: 82610 - 100 channels Image File Name: TGW_v5_05.axf API Version : 2.1.0 Source IP Addr : 10.10.4.202 MSR Card Slot: 5 CLEI Code: SITRAANBAA Product Features: VPN enabled. SIP enabled.
PAGE 122
Privileged Mode show voice-port fxs Use the show voice-port fxs command to display the FXS voice port information. Syntax: # show voice-port fxs Example: adit 3500# show voice-port fxs Registration Address: 172.32.1.15 SIP Proxy: Yes Proxy Address: 172.32.1.
PAGE 123
Privileged Mode show voice-port trunk Use the show voice-port trunk command to display the trunk voice port information. Syntax: # show voice-port trunk port Field Definition port Adit 3500: DS1 (T1) interface. Value must be 1. MSR: Link Cross Connect (LCC). Range = 1-8.
PAGE 124
Privileged Mode Example: adit MSR# show voice-port trunk 1 ******************************* PRI 1 *************************************** Channel no Internal Call Id Q931 Connection Id Tdm TimeSlot Call State ------------------------------------------------------------------------------1 -1 -1 -1 INACTIVE 2 -1 -1 -1 INACTIVE 3 -1 -1 -1 INACTIVE 4 -1 -1 -1 INACTIVE 5 -1 -1 -1 INACTIVE 6 -1 -1 -1 INACTIVE 7 -1 -1 -1 INACTIVE 8 -1 -1 -1 INACTIVE 9 -1 -1 -1 INACTIVE 10 -1 -1 -1 INACTIVE 11 -1 -1 -1 INACTIVE 12
PAGE 125
Privileged Mode traceroute Use the traceroute command to trace a route to a remote host. Syntax: # traceroute Syntax: # traceroute {address|hostname|stop} Field Definition address IP address of the remote host. hostname Host name of the remote host. stop Stop the traceroute process. Example: Adit 3500# traceroute to 192.168.1.200 (192.168.1.200), 10 hops max 1 192.168.1.200 (192.168.1.200) 10.500 ms 1.013 ms 0.
PAGE 126
Privileged Mode 3-68 Adit 3000 (Rel. 1.6) and MSR Card (Rel 2.
PAGE 127
CHAPTER 4 Global Configuration Mode The Global Configuration Mode allows commands to be entered directly to the router configuration. From this level, additional configuration modes can be entered. Once configuration is complete, use the exit/end command to return to the Privileged Mode prompt. This Mode is entered with the # configure terminal command from the Privileged mode. The Global Configuration Mode is represented by the (config)# prompt. Note: The Trunk option is not available on the Adit 3104.
PAGE 128
Global Configuration Mode Commands for Entering Configuration Submodes 4-2 Configuration Mode Link to Command Prompt Displayed Controller LCC controller lcc (config-cont-lcc-{n})# Controller T1 controller t1 (config-cont-t1-{n})# DHCP server pool ip dhcp pool ethernet (config-dhcp-eth-{n})# Dial Peer FXS dial-peer voice pots fxs (config-dpeer-fxs)# Dial Peer Trunk dial-peer voice pots trunk (config-dpeer-trk)# Dial Peer VoIP dial-peer voice voip (config-dpeer-voip)# Ethernet Interfac
PAGE 129
Global Configuration Mode Global Configuration Commands Global Configuration Commands • access • l2tpc • access-control • local-server • access-list • log • authentication login • mail-server • clock source • nat-bypass • controller lcc • network-object • controller t1 • no commands • date • port-trigger service • delete local-server • pptpc • dial-peer voice • pptps • dmz-host • radius-client • do • remote-admin • dynamic-dns • router ospf • end • security-default • exit • sec
PAGE 130
Global Configuration Mode Global Configuration Commands access Use the access command to enable remote access via LAN or WAN. To disable remote access, see no access command on page 4-36. Syntax: (config)# access {lan|wan} enable Field Definition lan Enable remote access via the LAN. wan Enable remote access via the WAN.
PAGE 131
Global Configuration Mode Global Configuration Commands access-list Use the access-list command to configure the advanced filtering entries. To delete an access list, see no access-list command on page 4-37.
PAGE 132
Global Configuration Mode Global Configuration Commands Field Definition (Continued) frag enable - Enable fragmentation. none - Do not allow fragmentation. log Enable or disables logging of packets matched by this rule.
PAGE 133
Global Configuration Mode Global Configuration Commands controller lcc Use the controller lcc command to allow access to the Controller LCC configuration commands. See Chapter 5, Configuration - LCC Controller Mode for commands in this mode. Syntax: (config)# controller lcc number Field Definition number Selects the Link Cross Connect.
PAGE 134
Global Configuration Mode Global Configuration Commands date date auto-time-update Use the date auto-time-update command to automatically update the clock from the defined server. To stop the auto update, see no date auto-time-update command on page 4-37. Syntax: (config)# date auto-time-update protocol {ntp|tod} server address1 [address2] [address3] [address4] update-every hours Field Definition ntp Network Time Protocol protocol. Default for Adit 3000. tod Time of Day protocol.
PAGE 135
Global Configuration Mode Global Configuration Commands date summer-time Use the date summer-time command to update the clock for daylight savings time. To stop the update for daylight saving, see no date summer-time command on page 4-38. Note: Default settings are start: 3/28 time 00:00, end: 10/28 time 01:00. Syntax: (config)# date summer-time smonth sday shh:mm emonth eday ehh:mm offset Field Definition smonth and emonth The month in which daylight savings time starts (smonth) or ends (emonth).
PAGE 136
Global Configuration Mode Global Configuration Commands date timezone Use the date timezone command to set the time zone and the number of hours from the GMT. Syntax: (config)# date timezone hh:mm Field Definition hh Hour offset from GMT. Range is from -12 to +12, with a default of 0. mm Minute offset from GMT in minutes. Range is from 00 to 59, with a default of 00. This is used for half hour time zones.
PAGE 137
Global Configuration Mode Global Configuration Commands dial-peer voice dial-peer voice pots fxs Use the dial-peer voice pots fxs command to allow access to the Dial Peer Voice FXS configuration commands. See Chapter 8, Configuration - Dial Peer FXS Mode for commands in this mode. For the no counterpart of this command see no dial-peer voice pots fxs command on page 4-38. Syntax: (config)# dial-peer voice pots fxs port Field Definition port Selects the FXS port to configure. Adit 3104: Range is 1-24.
PAGE 138
Global Configuration Mode Global Configuration Commands dial-peer voice voip Use the dial-peer voice voip command to allow access to the Dial Peer Voice VoIP configuration commands. See Chapter 10, Configuration - Dial Peer VoIP Mode for commands in this mode. For the no counterpart of this command see no dial-peer voice voip command on page 4-39. Syntax: (config)# dial-peer voice voip trunk Field Definition trunk Enter trunk number. Range is 1-50.
PAGE 139
Global Configuration Mode Global Configuration Commands do Use the do commands to run User and Privileged mode commands. The following are links to the User and Privileged do commands.
PAGE 140
Global Configuration Mode Global Configuration Commands dynamic-dns Use the dynamic-dns commands to configure the DNS Dynamic entries. To disable Dynamic DNS, see no dynamic-dns command on page 4-39. dynamic-dns backup-mx Use the dynamic-dns backup-mx command to enable the Dynamic DNS backup MX.
PAGE 141
Global Configuration Mode Global Configuration Commands dynamic-dns mail-exchanger Use the dynamic-dns mail-exchanger command to define the Dynamic DNS mail exchanger. Syntax: (config)# dynamic-dns mail-exchanger mail-exchanger Field Definition mail-exchanger Enter your mail exchange server address, to redirect all E-mails arriving at your Dyndns address to your mail server. Example: (config)# dynamic-dns mail-exchanger 10.10.1.
PAGE 142
Global Configuration Mode Global Configuration Commands dynamic-dns wildcard Use the dynamic-dns wildcard command to enable the Dynamic DNS wildcard. Syntax: (config)# dynamic-dns wildcard enable Example: (config)# dynamic-dns wildcard enable Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR end Use the end command to exit the current configuration mode. Note: This command can be entered in any configuration mode with the same result.
PAGE 143
Global Configuration Mode Global Configuration Commands help Use the help command to display the help information for this command. Note: This can also be accomplished with a ?. This command can be entered in any configuration mode.
PAGE 144
Global Configuration Mode Global Configuration Commands history Use the history command to display commands that have been entered in this session. This command can be entered in any configuration mode. Syntax: (config)# history Example: (config)# history clock source 1 none date date set 12:12:06 15 12 2006 date set 3:4:3 date set 12:12:20 date set 0:0:1 date summer-time 3 28 00:00 10 28 01:00 60 date timezone +03:00 dial-peer voice pots trunk 1 1 dial-peer voice voip dmz-host 192.168.1.
PAGE 145
Global Configuration Mode Global Configuration Commands host-filter Use the host-filter command to configure the IP/host name filtering entries. To delete a host filter, see no host-filter command on page 4-40. Syntax: (config)# host-filter id filter-id {ip-address address|hostname hostname} apply-to {lan|network-object object-id} time-range {always|schedule-id} Field Definition filter-id Enter a filter ID name. address Enter the host IP address. hostname Enter a host name for the rule.
PAGE 146
Global Configuration Mode Global Configuration Commands interface multilink Use the interface multilink command to allow access to the MLPPP configuration commands. See Chapter 12, Configuration - Multilink Interface Mode for commands in this mode. To delete a Multilink interface, see no interface multilink command on page 4-42. Syntax: (config)# interface multilink group-number Field Definition group-number Enter multilink group number. Adit 3104, Adit 3200, Adit 3500: Value must be 1.
PAGE 147
Global Configuration Mode Global Configuration Commands ipsec Use the ipsec commands to create an IPSec connection and to configure IPSec global settings. See Chapter 14, Configuration - IPSec Mode for additional commands in this mode. ipsec authentication-retries Use the ipsec authentication-retries command to enable the block-ip feature. To disable block-ip, see no ipsec authentication-retries command on page 4-40.
PAGE 148
Global Configuration Mode Global Configuration Commands ipsec log ike Use the ipsec log ike command to enable Internet Key Exchange (IKE) related logs. To disable IKE logging, see no ipsec log ike command on page 4-40 Syntax: (config)# ipsec log ike {auto-key|ike-int|ike-msg|msg-byte| msg-enc-dec|msg_inp|msg-outp|pri-key|rej-packet} Field Definition auto-key Enable verbose automatic keying. ike-int Enable verbose IKE IPSec interaction. ike-msg Print all IKE message ignoring rate limit.
PAGE 149
Global Configuration Mode Global Configuration Commands ipsec log ipsec Use the ipsec log ipsec command to enable IPSec related logs. To disable IPSec logging, see no ipsec log ipsec command on page 4-41. Syntax: (config)# ipsec log ipsec {atc|emvc|etc|ip-ctc|irtmc|mirl |rc|rtmc|satmc|tc|tsmc|ttc|usc|vrp} Field Definition atc Authentication Transforms Code. emvc Even More Verbose Output. etc Encryption Transforms Code. ip-ctc IP Compression Transforms Code.
PAGE 150
Global Configuration Mode Global Configuration Commands ipsec net-to-net Use the ipsec net-to-net command to create a network-to-network connection. Syntax: (config)# ipsec net-to-net remote-ip {address|any} remote-subnet {ip address mask mask|any} pre-share secret Field Definition remote-ip address - Enter the remote tunnel endpoint address. any - Allow any IP address. remote-subnet address - Enter an IP address if it is a remote IP. mask - Enter an IP mask if it is a remote IP.
PAGE 151
Global Configuration Mode Global Configuration Commands ip dhcp pool ethernet Use the ip dhcp pool ethernet command to allow access to the DHCP configuration commands. See Chapter 7, Configuration - DHCP Pool Ethernet Mode for commands in this mode. For the no counterpart, see no ip dhcp pool ethernet command on page 4-43. Syntax: (config)# ip dhcp pool ethernet port Field Definition port Selects the Ethernet port to configure. Range is 1-2.
PAGE 152
Global Configuration Mode Global Configuration Commands key Use the key command to enable a specific keyed feature. To acquire a feature key code, contact Turin Networks Customer Support. To disable a keyed feature, see the no key command on page 4-43. Syntax: (config)# key key-code Field Definition key-code Enter the key code to enable the feature.
PAGE 153
Global Configuration Mode Global Configuration Commands local-server Use the local-server command to configure the local server entries. To delete a local server, see the no local-server command on page 4-44. Syntax: (config)# local-server id {name|new} {ip-address address |hostname hostname} time-range {always|schedule-name} fwd-port port service service-id Field Definition name Enter a name of the server. new Select New to create a new local server.
PAGE 154
Global Configuration Mode Global Configuration Commands log log lcc buffer Use the log lcc buffer command to set the buffer size allowed for the Link Cross-Connect (LCC) log buffer. Syntax: (config)# log lcc buffer kilobytes Field Definition kilobytes Set the size of the LCC log buffer. Range is 1 - 256 KB. Default is 16KB. Example: (config)# log lcc buffer 24 Supported Platforms: MSR log lcc notify Use the log lcc notify command to set the remote Link Cross-Connect (LCC) notify level.
PAGE 155
Global Configuration Mode Global Configuration Commands log pri Use the log pri command to configure PRI logging. Syntax: (config)# log pri {buffer-fill {0|1}|buffer-size kilobytes |display number|enable} Field Definition buffer-fill {0|1} Define the method of loading the buffer. 0 = Circular Buffer - the buffer will store a continuous stream of data by starting again at the beginning of the buffer after reaching the end. Default. 1 = Fill Until Full - the buffer will fill until it is full.
PAGE 156
Global Configuration Mode Global Configuration Commands log security notify Use the log security notify command to set the remote security notify level. Syntax: (config)# log security notify {error|info|ip-address address |none|warn} Field Definition error Notify for error level. info Notify for information level. ip-address address Enter IP address of remote system to notify. none No notification. warn Notify for warning level.
PAGE 157
Global Configuration Mode Global Configuration Commands log system buffer Use the log system buffer command to set the buffer size allowed for the system log buffer. Syntax: (config)# log system buffer kilobytes Field Definition kilobytes Set the size of the system log buffer. Range is 1 - 256 KB. Default is 16KB. Example: (config)# log system buffer 24 Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR log system notify Use the log system notify command to set the remote system notify level.
PAGE 158
Global Configuration Mode Global Configuration Commands log t1 buffer Use the log t1 buffer command to set the buffer size allowed for the T1 log buffer. Syntax: (config)# log t1 buffer kilobytes Field Definition kilobytes Set the size of the T1 log buffer. Range is 1 - 256 KB. Default is 16KB. Example: (config)# log t1 buffer 24 Supported Platforms: Adit 3104, Adit 3200, Adit 3500 log t1 notify Use the log t1 notify command to set the remote T1 notify level.
PAGE 159
Global Configuration Mode Global Configuration Commands mail-server mail-server authentication enable Use the mail-server authentication enable command to enable the outgoing mail server authentication. To disable the mail-server authentication, see no mail-server authentication command on page 4-44.
PAGE 160
Global Configuration Mode Global Configuration Commands mail-server port Use the mail-server port command to set the outgoing mail server port. Syntax: (config)# mail-server port port Field Definition port Enter the port number. Range is 0 - 65535. Default is 25. Example: (config)# mail-server port 25 Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR mail-server username Use the mail-server username command to set the username and password for the mail server.
PAGE 161
Global Configuration Mode Global Configuration Commands nat-bypass Use the nat-bypass command to create and enable a NAT bypass rule. To disable NAT Bypass, see no nat-bypass command on page 4-44. Syntax: (config)# nat-bypass ip-address address mask mask [enable] Field Definition address Enter a NAT bypass IP address. mask Enter a subnet mask for the above address. enable Enable NAT bypass. Note: To create the rule without enabling, do not enter this option.
PAGE 162
Global Configuration Mode Global Configuration Commands no commands no access Use the access command to disable remote access via LAN or WAN. To enable remote access, see access command on page 4-4. Syntax: (config)# no access {lan|wan} Field Definition lan Disable access to the unit via the LAN. wan Disable access to the unit via the WAN.
PAGE 163
Global Configuration Mode Global Configuration Commands no access-list Use the no access-list command to remove an advanced filtering entry. To add a filter, see accesslist command on page 4-5. Syntax: (config)# no access-list rule rule-name apply {eth-lan|eth-wan |ppp-wan|initial|final} Field Definition rule-name Enter an existing rule name to apply this command to. eth-lan Ethernet LAN interface. eth-wan Ethernet WAN interface.
PAGE 164
Global Configuration Mode Global Configuration Commands no date summer-time Use the no date summer-time command to remove daylight savings time setting. To enable daylight savings, see date summer-time command on page 4-9.
PAGE 165
Global Configuration Mode Global Configuration Commands no dial-peer voice voip Use the no dial-peer voice voip command denies access to the Dial Peer Voice VoIP configuration commands. To allow access, see dial-peer voice command on page 4-11. Syntax: (config)# no dial-peer voice voip tag Field Definition tag Enter the tag number to denies access. Range is 1-30.
PAGE 166
Global Configuration Mode Global Configuration Commands no host-filter Use the no host-filter command to remove a IP host name filter entry. To add a IP host name, see host-filter command on page 4-19. Syntax: (config)# no host-filter name Field Definition name Name of an existing IP host name to remove.
PAGE 167
Global Configuration Mode Global Configuration Commands no ipsec log ipsec Use the no ipsec log ipsec command to disable IPSec related logs. To enable IPSec logging, see ipsec log ipsec command on page 4-23 Syntax: (config)# no ipsec log ipsec {atc|emvc|etc|ip-ctc|irtmc|mirl |rc|rtmc|satmc|tc|tsmc|ttc|usc|vrp} Field Definition atc Authentication Transforms Code. emvc Even More Verbose Output. etc Encryption Transforms Code. ip-ctc IP Compression Transforms Code.
PAGE 168
Global Configuration Mode Global Configuration Commands no ipsec vpn_ipsec Use the no ipsec vpn_ipsec command to delete an IPSec connection. To create an IPSec connection, see ipsec net-to-host command on page 4-23 or ipsec net-to-net command on page 4-24 To enter an IPSec connection, for configuration see ipsec vpn_ipsec command on page 4-24. Syntax: (config)# no ipsec ipsec connection-id Field Definition connection-id Enter the name of a connection.
PAGE 169
Global Configuration Mode Global Configuration Commands no ip dhcp pool ethernet Use the DHCP Pool no ip dhcp pool ethernet command to disable the DHCP server for the interface defined. To enter the DHCP configuration mode, see ip dhcp pool ethernet command on page 4-25. Syntax: (config)# no ip dhcp pool ethernet port Field Definition port Ethernet port number. 1 or 2.
PAGE 170
Global Configuration Mode Global Configuration Commands no local-server Use the no local-server command to disable a local server. To enable a local server, see localserver command on page 4-27. Syntax: (config)# no local-server name Field Definition name Enter a name of the server to remove. Example: (config)# no local-server BoulderServer Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR no log sip Use the no log sip command to stop SIP logging.
PAGE 171
Global Configuration Mode Global Configuration Commands no network-object Use the no network-object command to remove network objects. To enable a network object, see network-object command on page 4-35. Syntax: (config)# no network-object id object-id type {hostname hostname|ip-address address|mac-address mac-address} Field Definition object-id Enter the numerical ID of the Network Object. hostname Enter the host name of the Network Object. address Enter the IP address of the Network Element.
PAGE 172
Global Configuration Mode Global Configuration Commands no pptps Use the no pptps command to disable the VPN PPTP server. To enter the VPN PPTPS configuration mode, see the pptps command on page 4-53. Syntax: (config)# no pptps Example: (config)# no pptps Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR no radius-client Use the no radius-client command disables the RADIUS configuration. To enter the RADIUS configuration mode, see radius-client command on page 4-54.
PAGE 173
Global Configuration Mode Global Configuration Commands no remote-admin telnet Use the no remote-admin telnet command to remove remote administration via Telnet. To enable remote access via telnet, see remote-admin telnet command on page 4-55.
PAGE 174
Global Configuration Mode Global Configuration Commands no remote-admin web Use the no remote-admin web command to remove remote administration via Web-management. To enable remote access via the web, see remote-admin web command on page 4-56.
PAGE 175
Global Configuration Mode Global Configuration Commands no security-log Use the no security-log command to remove a security policy. To add a security policy, see security-log command on page 4-58. Syntax: (config)# no security-log setting Field Definition setting Accepted Events accepted-in-connects Blocked Events Other Events Log Buffer Disable incoming connections logging. accepted-out-connects Disable outgoing connections logging. block-conn-attempts Disable block connection attempts logging.
PAGE 176
Global Configuration Mode Global Configuration Commands no service Use the no service command to disable named services. To enable services, see service command on page 4-59. Syntax: (config)# no service service-id Field Definition service-id Enter the service number to apply the rule to.
PAGE 177
Global Configuration Mode Global Configuration Commands no static-dns Use the no static-dns command to remove DNS Static entries. To add a DNS static entry, see staticdns command on page 4-62. Syntax: (config)# no static-dns hostname hostname ip-address address Field Definition hostname Enter a DNS static host name of the server. address Enter the DNS static IP address. Example: (config)# no static-dns hostname server1 ip-address 192.168.100.
PAGE 178
Global Configuration Mode Global Configuration Commands no vlan Use the no vlan command to clear all VLANs. To enter the VLAN configuration mode, see vlan (global) command on page 4-63. Syntax: (config)# no vlan Example: (config)# no vlan Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR no voice-codec Use the no voice-codec command to remove a voice codec. To set the voice codecs, see voice-codec command on page 4-64.
PAGE 179
Global Configuration Mode Global Configuration Commands port-trigger service Use the port-trigger service command to configure the port-triggering entries. To delete a port trigger service, see no port-trigger-service command on page 4-45. Syntax: (config)# port-trigger service name enable Field Definition name Enter service name.
PAGE 180
Global Configuration Mode Global Configuration Commands radius-client Use the radius-client command to allow access to the RADIUS configuration commands. See Chapter 19, Configuration - RADIUS Mode for commands in this mode. For the no counterpart of this command, see no radius-client command on page 4-46.
PAGE 181
Global Configuration Mode Global Configuration Commands remote-admin telnet Use the remote-admin telnet command to allow remote administration via Telnet. To deny telnet remote access, see no remote-admin telnet command on page 4-47. CAUTION! Syntax: ALLOWING REMOTE ADMINISTRATION IS A SECURITY RISK.
PAGE 182
Global Configuration Mode Global Configuration Commands remote-admin web Use the remote-admin web command to allow remote administration via Web-management. To deny Web remote access, see no remote-admin web command on page 4-48. CAUTION! Syntax: ALLOWING REMOTE ADMINISTRATION IS A SECURITY RISK.
PAGE 183
Global Configuration Mode Global Configuration Commands security-default Use the security-default command to configure the security policy. Syntax: (config)# security-default {maximum|minimum|typical} [block-ip-frag] Field Definition The following security levels are described in detail. Requests Originating in the WAN Requests Originating in the LAN maximum Blocked: No access to network from Internet, except as configured in the Local Servers, DMZ host and Remote Access screens.
PAGE 184
Global Configuration Mode Global Configuration Commands security-log Use the security-log command to configure the security policy. To delete a security policy, see no security-log command on page 4-49. Syntax: (config)# security-log setting enable Field Definition Accepted Events accepted-in-connections Sessions originated from the Internet that have been allowed by the firewall. accepted-outconnections Sessions originated from the network that have been allowed by the firewall.
PAGE 185
Global Configuration Mode Global Configuration Commands service Use the service command to create/modify User-Defined Services. To delete a service policy, see no service command on page 4-50. Syntax: (config)# service id {service-id|new} name service-name description text protocol {protocol-number|ah|esp|gre|icmp|tcp |udp} [server-src-port|open-src-port] Field Definition service-id Enter a User-Defined Service number to modify.
PAGE 186
Global Configuration Mode Global Configuration Commands server-src-port Defines the server source/destination port. Syntax: server-src-port {port|port-port|any} server-dst-port {port|portport|any} server-src-port port - Enter the server source port to apply the service to. port-port - Enter a range of ports to apply the service to. any - Apply to any port. server-dst-port port - Enter the server destination port to apply the service to. port-port - Enter a range of ports to apply the service to.
PAGE 187
Global Configuration Mode Global Configuration Commands snmp-server host Use the snmp-server host command to set a SNMP host. Syntax: (config)# snmp-server host address {community community-name|version {1|2c} Field Definition address Enter an destination IP address. community-name Enter the SNMP community name. version 1 - SNMPv1 2c - SNMPv2c Example: (config)# snmp-server host 192.168.1.
PAGE 188
Global Configuration Mode Global Configuration Commands static-dns Use the static-dns command to configure the DNS Static entries. To delete static DNS entries, see no static-dns command on page 4-51. Syntax: (config)# static-dns hostname hostname ip-address address Field Definition hostname Enter a DNS static host name of the server. address Enter the DNS static IP address. Example: (config)# static-dns hostname server1 ip-address 192.168.100.
PAGE 189
Global Configuration Mode Global Configuration Commands username Use the username command to create/modify a user profile for CLI. To delete a username, see no username command on page 4-51. Syntax: (config)# username name password password {admin|monitor |operator} Field Definition name Enter a User name, with a maximum of 15 characters. password Password for the user, with a maximum of 15 characters. This is an optional parameter. Default is "password".
PAGE 190
Global Configuration Mode Global Configuration Commands vlan (vlan-id) Use the vlan command to allow access to the VLAN port configuration commands. See Chapter 21, Configuration - VLAN Port Mode for commands in this mode. Syntax: (config)# vlan v-id Field Definition v-id VLAN identifier. Range 2-4096.
PAGE 191
Global Configuration Mode Global Configuration Commands voice-port (global) Use the voice-port fxs command to allow access to the Voice Port (global) configuration commands. See Chapter 22, Configuration - Voice Port Mode for commands in this mode. Syntax: (config)# voice-port Example: (config)# voice-port (config-vport)# Supported Platforms: Adit 3104, Adit 3500, MSR voice-port fxs Use the voice-port fxs command to allow access to the Voice Port FXS configuration commands.
PAGE 192
Global Configuration Mode Global Configuration Commands voice-port trunk Use the voice-port trunk command to allow access to the Voice Port Trunk configuration commands. See Chapter 24, Configuration - Voice Port Trunk Mode for commands in this mode. To remove access to a Voice Port Trunk, see no voice-port trunk command on page 4-52. Syntax: (config)# voice-port trunk port Field Definition port FXS voice port trunk number. Value must be 1.
PAGE 193
CHAPTER 5 Configuration - LCC Controller Mode The LCC (Link Cross-Connect) Controller Configuration commands allow the user to configure the Link Cross-Connect parameters for the MSR card. Note: The LCC Controller Configuration mode is supported by the MSR card only. For Controller Configuration commands for the Adit 3000 series, see Chapter 6, Configuration - T1 Controller Mode. This sub-group is entered with the (config)# controller lcc command from the Configuration mode.
PAGE 194
Configuration - LCC Controller Mode description Use the Controller LCC description command to enter a description for the LCC. Syntax: (config-cont-lcc-{n})# description text Field Definition text Enter a description for the LCC. Example: (config-cont-lcc-1)# description LCC#1 Supported Platforms: MSR 5-2 Adit 3000 (Rel. 1.6) and MSR Card (Rel 2.
PAGE 195
Configuration - LCC Controller Mode do Use the do commands to run User and Privileged mode commands. The following are links to the User and Privileged do commands.
PAGE 196
Configuration - LCC Controller Mode end Use the end command to exit the current configuration mode, and must be used to mark the end of any configuration file. This command can be entered in any configuration mode with the same result. Syntax: (config-cont-lcc-{n})# end Example: (config-cont-lcc-1)# end # Supported Platforms: MSR exit Use the exit command to close your current connection if you are in the User mode, or Privileged mode.
PAGE 197
Configuration - LCC Controller Mode history Use the history command to display commands that have been entered in this session. This command can be entered in any configuration mode. Syntax: (config-cont-lcc-{n})# history Example: (config-cont-lcc-1)# history history description Test-LCC no shutdown history Supported Platforms: MSR no command no shutdown Use the Controller LCC no shutdown command to set the LCC up (in-service). To set the LCC down (Out-of-Service), see the shutdown command on page 5-6.
PAGE 198
Configuration - LCC Controller Mode shutdown Use the Controller LCC shutdown command to set the LCC interface down (out-of-service). To set the LCC up (in-service), see the no shutdown command on page 5-5. Syntax: (config-cont-lcc-{n})# shutdown Example: (config-cont-lcc-1)# shutdown Supported Platforms: MSR 5-6 Adit 3000 (Rel. 1.6) and MSR Card (Rel 2.
PAGE 199
CHAPTER 6 Configuration - T1 Controller Mode The T1 Controller Configuration commands allow the user to configure the T1 parameters on the Adit 3000 series. Note: The T1 Controller Configuration mode is supported by the Adit 3000 series only. For Controller Configuration commands for the MSR card, see Chapter 5, Configuration - LCC Controller Mode. This sub-group is entered with the (config)# controller t1 command from the Configuration mode.
PAGE 200
Configuration - T1 Controller Mode description Use the Controller T1 description command to set the circuit ID of the T1. Syntax: (config-cont-t1-{n})# description text Field Definition text Enter a description for the Controller T1. Example: (config-cont-t1-1)# description T1#1 Supported Platforms: Adit 3104, Adit 3200, Adit 3500 6-2 Adit 3000 (Rel. 1.6) and MSR Card (Rel 2.
PAGE 201
Configuration - T1 Controller Mode do Use the do commands to run User and Privileged mode commands. The following are links to the User and Privileged do commands.
PAGE 202
Configuration - T1 Controller Mode ds0-group Use the Controller T1 ds0-group command to create a group of T1s. To delete a DS0 group, see no ds0-group command on page 6-9. Syntax: (config-cont-t1-{n})# ds0-group timeslots range Field Definition range DS0 timeslot range, in the format n-n (1-4). Range is 1 - 24.
PAGE 203
Configuration - T1 Controller Mode fdl Use the Controller T1 fdl command to set line Facilities Data Link (FDL) capabilities the T1 interface. Syntax: (config-cont-t1-{n})# fdl {none|t1.403} Field Definition none Disable FDL output messages. Default. t1.403 Enable T1.403 FDL performance messages. Example: (config-cont-t1-1)# fdl none Supported Platforms: Adit 3104, Adit 3200, Adit 3500 framing Use the Controller T1 framing command to set the framing option for the designated T1.
PAGE 204
Configuration - T1 Controller Mode history Use the history command to display commands that have been entered in this session. This command can be entered in any configuration mode.
PAGE 205
Configuration - T1 Controller Mode lbo lbo long Use the Controller T1 lbo long command to set Line Build Out on the T1. Syntax: (config-cont-t1-{n})# lbo long {-7.5db|-15db|-22.5db} Field Definition -7.5db CSU attenuation for LBO of 7.5dB -15db CSU attenuation for LBO of 15dB -22.5db CSU attenuation for LBO of 22.5dB Example: (config-cont-t1-1)# lbo long -15db Supported Platforms: Adit 3104, Adit 3200, Adit 3500 lbo short Use the Controller T1 lbo short command to set Line Build Out on the T1.
PAGE 206
Configuration - T1 Controller Mode linecode Use the Controller T1 linecode command to set the line coding for the designated T1. Syntax: (config-cont-t1-{n})# linecode {ami|b8zs} Field Definition ami Alternate Mark Inversion line coding (AMI). b8zs Binary 8 Zero Substitution line coding (B8ZS). Default. Example: (config-cont-t1-1)# linecode ami Supported Platforms: Adit 3104, Adit 3200, Adit 3500 loopback Use the Controller T1 loopback command enables a loopback on the T1.
PAGE 207
Configuration - T1 Controller Mode loopdetect Use the Controller T1 loopdetect command to enable the detection of CSU or NIU loop code. Syntax: (config-cont-t1-{n})# loopdetect {csu|niu|none} Field Definition csu Enable detection of CSU loop codes (10000 for loop up, 100 for loop down) niu Enable detection of NIU loop codes none Disable detection. Default.
PAGE 208
Configuration - T1 Controller Mode no shutdown Use the Controller T1 no shutdown command to set the T1 up (In-Service). To set the T1 down (Out-of-Service), see shutdown command on page 6-11. Syntax: (config-cont-t1-{n})# no shutdown Example: (config-cont-t1-1)# no shutdown Supported Platforms: Adit 3104, Adit 3200, Adit 3500 no tdm-group Use the Controller T1 no tdm-group command to ungroup TDM timeslots. To group TDM timeslots, see tdm-group command on page 6-11.
PAGE 209
Configuration - T1 Controller Mode shutdown Use the Controller T1 shutdown command to set the T1 interface down (out-of-service). To set the T1 up (in-service) see no shutdown command on page 6-10. Syntax: (config-cont-t1-{n})# shutdown Example: (config-cont-t1-1)# shutdown Supported Platforms: Adit 3104, Adit 3200, Adit 3500 tdm-group Use the Controller T1 tdm-group command to create a group and define its direction. To delete a TDM group, see no tdm-group command on page 6-10.
PAGE 210
Configuration - T1 Controller Mode threshold Use the Controller T1 threshold command to define the interval and threshold levels for this T1. Syntax: (config-cont-t1-{n})# threshold {daily|min15} {bes|css|dm|es|lcv|les|pcv|sefs|ses|uas} {value} Threshold Settings Minute 15 Daily BES - Bursty Errored Seconds Default is 0. Defect Threshold Range is 0 - 900 Default is 0. Range is 0 - 86400 CSS - Controller Slip Seconds Defect Threshold Default is 0. Range is 0 - 900 Default is 0.
PAGE 211
CHAPTER 7 Configuration - DHCP Pool Ethernet Mode The DHCP Pool Configuration commands allow the user to configure the DHCP parameters for each interface. This sub-group is entered with the (config)# ip dhcp pool ethernet command from the Configuration mode. The DHCP Pool commands are represented by the (config-dhcp-eth-{n})# prompt.
PAGE 212
Configuration - DHCP Pool Ethernet Mode do Use the do commands to run User and Privileged mode commands. The following are links to the User and Privileged do commands.
PAGE 213
Configuration - DHCP Pool Ethernet Mode end Use the end command to exit the current configuration mode, and must be used to mark the end of any configuration file. This command can be entered in any configuration mode with the same result. Syntax: (config-dhcp-eth-{n})# end Example: (config-dhcp-eth-1)# end # Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR end-address Use the DHCP end-address command to define the DHCP end address.
PAGE 214
Configuration - DHCP Pool Ethernet Mode history Use the history command to display commands that have been entered in this session. NOTE: This command can be entered in any configuration mode. Syntax: (config-dhcp-eth-{n})# history Example: (config-dhcp-eth-1)# history end-address 192.168.1.250 lease 900 relay 192.168.1.120 start-address 192.168.1.1 subnet-mask 255.255.255.
PAGE 215
Configuration - DHCP Pool Ethernet Mode no commands no option Use the DHCP Pool no option command to delete a DHCP option. To add a DHCP pool, see option command on page 7-6. Syntax: (config-dhcp-eth-{n})# no option {66|67} Field Definition 66 Remove/Disable option 66 (TFTP server name). 67 Remove/Disable option 67 (Boot file name). Example: (config-dhcp-eth-1)# no option 66 Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR no relay Use the DHCP Pool no relay command to disable DHCP relay.
PAGE 216
Configuration - DHCP Pool Ethernet Mode option Use the option command to configure DHCP options per RFC 2132. To delete an option, see no option command on page 7-5. Syntax: (config-dhcp-eth-{n})# option {66 {enable|value {address|hostname}|67 {enable|value filename} Field Definition 66 66 - Send the TFTP server name. address - Enter the IP address of the TFTP server. hostname - Enter the host name of the TFTP server. 67 67 - Send the Boot file name. filename - Enter the boot file name.
PAGE 217
Configuration - DHCP Pool Ethernet Mode start-address Use the DHCP Pool start-address command to define the DHCP start IP address. This command works with the end-address (end IP address) to define the number of IP addresses in the DHCP pool. This also limits the number of hosts that may be connected to the network in this subnet. Start defines the first IP address that may be assigned in this subnet.
PAGE 218
Configuration - DHCP Pool Ethernet Mode subnet-mask Use the DHCP Pool subnet-mask command to define the subnet mask for the DHCP pool. Syntax: (config-dhcp-eth-{n})# subnet-mask mask Field Definition mask Enter the DHCP pool subnet mask, using the form xxx.xxx.xxx.xxx, where xxx is a number from 0 to 255. This is an optional setting. Example: (config-dhcp-eth-1)# subnet-mask 255.255.255.
PAGE 219
CHAPTER 8 Configuration - Dial Peer FXS Mode The Dial Peer FXS Configuration commands allow the user to configure the Dial Peer FXS parameters. Enter this sub-group with the (config)# dial-peer voice pots fxs port command from the Configuration mode. The Dial Peer FXS commands are represented by the (config-dpeer-fxs)# prompt.
PAGE 220
Configuration - Dial Peer FXS Mode block-out-caller-id Use the Dial Peer block-out-caller-id command to enable the blocking of outgoing Caller ID. To disable blocking, see no block-out-caller-id command on page 8-8. Syntax: (config-dpeer-fxs)# block-out-caller-id enable Example: (config-dpeer-fxs)# block-out-caller-id enable Supported Platforms: Adit 3104, Adit 3500, MSR call-wait-caller-id Use the Dial Peer call-wait-caller-id command to enable Call Waiting and Caller ID.
PAGE 221
Configuration - Dial Peer FXS Mode codec preference Use the Dial Peer codec preference command to set the codec preferences used to establish the codec list offered during media negotiation. To delete a codec, see no codec preference command on page 8-9. Syntax: (config-dpeer-fxs)# codec preference {1|2|3} {g711alaw| g711ulaw|g729} Field Definition 1|2|3 Enter the preference number. #1 being the first preference. g711alaw Set the codec preference to G.711 A-law.
PAGE 222
Configuration - Dial Peer FXS Mode do Use the do commands to run User and Privileged mode commands. The following are links to the User and Privileged do commands.
PAGE 223
Configuration - Dial Peer FXS Mode end Use the end command to exit the current configuration mode, and must be used to mark the end of any configuration file. Syntax: (config-dpeer-fxs}# end Example: (config-dpeer-fxs)# end # Supported Platforms: Adit 3104, Adit 3500, MSR exit Use the exit command to close your current connection if you are in the User mode, or Privileged mode.
PAGE 224
Configuration - Dial Peer FXS Mode fax-protocol Use the Dial Peer fax-protocol command to configure the fax protocol. Syntax: (config-dpeer-fxs)# fax-protocol {none|pass-through|t38} Field Definition none A Fax call would be treated as a normal voice call. Default. pass-through Will cause the line to transmit in G.711 mode, with echo cancellation and silence suppression disabled, on detection of Fax tone. t38 Upon detection of a Fax tone on the port, will cause the gateway to negotiate a T.
PAGE 225
Configuration - Dial Peer FXS Mode modem-protocol Use the Dial Peer modem-protocol command to configure the modem protocol. Syntax: (config-dpeer-fxs)# modem-protocol {none|pass-through} Field Definition none A Modem call would be treated as a normal voice call. Default. pass-through Will cause the line to transmit in G.711 mode, with echo cancellation and silence suppression disabled, on detection of Modem tone.
PAGE 226
Configuration - Dial Peer FXS Mode no commands no block-out-caller-id Use the Dial Peer no block-out-caller-id command to disable the Caller ID blocking. To enable blocking, see block-out-caller-id command on page 8-2. Syntax: (config-dpeer-fxs)# no block-out-caller-id Example: (config-dpeer-fxs)# no block-out-caller-id Supported Platforms: Adit 3104, Adit 3500, MSR no call-wait-caller-id Use the Dial Peer no call-wait-caller-id command to disable Call Waiting Caller ID.
PAGE 227
Configuration - Dial Peer FXS Mode no codec preference Use the Dial Peer no codec preference command to remove a codec preference. To set the codec preferences, see codec preference command on page 8-3. Syntax: (config-dpeer-fxs)# no codec preference {1|2|3} Field Definition 1|2|3 Remove a specific codec preference.
PAGE 228
Configuration - Dial Peer FXS Mode sip-authentication Note: To disable this SIP authentication, see the no sip-authentication command on page 8-9. sip-authentication enable Use the Dial Peer sip-authentication enable command to enable SIP. Syntax: (config-dpeer-fxs)# sip-authentication enable Example: (config-dpeer-fxs)# sip-authentication enable Supported Platforms: Adit 3104, Adit 3500, MSR sip-authentication password Use the Dial Peer sip-authentication password command to set the SIP password.
PAGE 229
CHAPTER 9 Configuration - Dial Peer Trunk Mode The Dial Peer Trunk Configuration commands allow the user to configure the Dial Peer Trunk parameters. Enter this sub-group with the (config)# dial-peer voice pots trunk trunk dest-port command from the Configuration mode. The Dial Peer Trunk commands are represented by the (config-dpeer-trk)# prompt. Note: The Dial Peer Trunk option is not supported on the Adit 3104.
PAGE 230
Configuration - Dial Peer Trunk Mode codec preference Use the Dial Peer codec preference command to set the codec preferences used to establish the codec list offered during media negotiation. To delete a preference, see no codec preference command on page 9-6. Syntax: (config-dpeer-trk)# codec preference {1|2|3} {g711alaw| g711ulaw|g729} Field Definition 1|2|3 Enter the preference number. #1 being the first preference. g711alaw Set the codec preference to G.711 A-law.
PAGE 231
Configuration - Dial Peer Trunk Mode do Use the do commands to run User and Privileged mode commands. The following are links to the User and Privileged do commands.
PAGE 232
Configuration - Dial Peer Trunk Mode end Use the end command to exit the current configuration mode, and must be used to mark the end of any configuration file. Syntax: (config-dpeer-trk)# end Example: (config-dpeer-trk)# end # Supported Platforms: Adit 3500, MSR exit Use the exit command to close your current connection if you are in the User mode, or Privileged mode.
PAGE 233
Configuration - Dial Peer Trunk Mode history Use the history command to display commands that have been entered in this session. Syntax: (config-dpeer-trk)# history Example: (config-dpeer-trk)# history destination-pattern fax-protocol none modem-protocol pass-through sip-authentication enable strip-digits history Supported Platforms: Adit 3500, MSR modem-protocol Use the Dial Peer modem-protocol command to configure the modem protocol.
PAGE 234
Configuration - Dial Peer Trunk Mode no commands no codec preference Use the Dial Peer no codec preference command to remove a codec preference. To set the preferences, see codec preference command on page 9-2. Syntax: (config-dpeer-trk)# no codec preference {1|2|3} Field Definition 1|2|3 Set the preference level. Range 1 - 3.
PAGE 235
Configuration - Dial Peer Trunk Mode prefix Use the Dial Peer prefix command to define the prefix of the phone number. Syntax: (config-dpeer-trk)# prefix prefix Field Definition prefix Prefix is the digits or a name to be added to the phone number after the stripping process has been applied. Up to 10 digits may be entered. Example: (config-dpeer-trk)# prefix 1303 Supported Platforms: Adit 3500, MSR sip-authentication Note: To delete SIP authentication, see no sip-authentication command on page 9-6.
PAGE 236
Configuration - Dial Peer Trunk Mode sip-authentication username Use the Dial Peer sip-authentication username command to set the SIP ID. Syntax: (config-dpeer-trk)# sip-authentication username username Field Definition username The User ID to be used when responding to authentication requests. Default is the User ID of the line.
PAGE 237
CHAPTER 10 Configuration - Dial Peer VoIP Mode The Dial Peer VoIP Configuration commands allow the user to configure the Dial Peer VoIP parameters. Enter this sub-group with the (config)# dial-peer voice voip port command from the Configuration mode. The Dial Peer VoIP commands are represented by the (config-dpeer-voip)# prompt.
PAGE 238
Configuration - Dial Peer VoIP Mode destination-pattern Use the Dial Peer destination-pattern command to define the full telephone number to be used for a dial peer. To delete a preference, see no destination-pattern command on page 10-5. Syntax: (config-dpeer-voip)# destination-pattern number Field Definition number Enter the phone number to be used for a dial peer. Example: (config-dpeer-voip)# destination-pattern 5551212 Supported Platforms: Adit 3104, Adit 3500, MSR 10-2 Adit 3000 (Rel. 1.
PAGE 239
Configuration - Dial Peer VoIP Mode do Use the do commands to run User and Privileged mode commands. The following are links to the User and Privileged do commands.
PAGE 240
Configuration - Dial Peer VoIP Mode end Use the end command to exit the current configuration mode, and must be used to mark the end of any configuration file. Syntax: (config-dpeer-voip) end Example: (config-dpeer-voip)# end # Supported Platforms: Adit 3104, Adit 3500, MSR exit Use the exit command to close your current connection if you are in the User mode, or Privileged mode.
PAGE 241
Configuration - Dial Peer VoIP Mode no commands no destination-pattern Use the Dial Peer no destination-pattern command to remove a destination pattern. To set the destination pattern, see destination-pattern command on page 10-2. Syntax: (config-dpeer-voip)# no destination-pattern Example: (config-dpeer-voip)# no destination-pattern Supported Platforms: Adit 3104, Adit 3500, MSR no prefix Use the Dial Peer no prefix command to remove the prefix of the phone number.
PAGE 242
Configuration - Dial Peer VoIP Mode prefix Use the Dial Peer prefix command to define the prefix of the phone number. To delete a prefix, see no prefix command on page 10-5. Syntax: (config-dpeer-voip)# prefix prefix Field Definition prefix Prefix is the digits or a name to be added to the phone number after the stripping process has been applied. Up to 10 digits may be entered.
PAGE 243
Configuration - Dial Peer VoIP Mode strip-digits Use the Dial Peer strip-digits command to configure the number of digits (or characters) to be stripped off from the left most digits in the phone number. Possible usages include stripping off the area code, or the 3-digit office prefix. Syntax: (config-dpeer-voip)# strip-digits number Field Definition number Range is based on the defined phone number. Default is set to 0.
PAGE 244
Configuration - Dial Peer VoIP Mode 10-8 Adit 3000 (Rel. 1.6) and MSR Card (Rel 2.
PAGE 245
CHAPTER 11 Configuration - Ethernet Interface Mode The Ethernet Interface Configuration commands allow the user to configure the Ethernet interface parameters. Enter this sub-group with the (config)# interface ethernet command from the Configuration mode. The Ethernet Interface commands are represented by the (config-int-eth-{n})# prompt.
PAGE 246
Configuration - Ethernet Interface Mode description Use the Ethernet Interface description command to set the description for this Ethernet interface. Syntax: (config-int-eth-{n})# description text Field Definition text Enter a description for the Ethernet interface with a maximum of 64 characters. Example: (config-int-eth-1)# description Eth#1 Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR 11-2 Adit 3000 (Rel. 1.6) and MSR Card (Rel 2.
PAGE 247
Configuration - Ethernet Interface Mode do Use the do commands to run User and Privileged mode commands. The following are links to the User and Privileged do commands.
PAGE 248
Configuration - Ethernet Interface Mode end Use the end command to exit the current configuration mode, and must be used to mark the end of any configuration file. This command can be entered in any configuration mode with the same result. Syntax: (config-int-eth-{n})# end Example: (config-int-eth-1)# end # Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR exit Use the exit command to close your current connection if you are in the User mode, or Privileged mode.
PAGE 249
Configuration - Ethernet Interface Mode full-duplex Use the Ethernet Interface full-duplex command to specify the Ethernet PHY (physical specifications) mode to full duplex. Syntax: (config-int-eth-{n})# full-duplex Example: (config-int-eth-1)# full-duplex Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR half-duplex Use the Ethernet Interface half-duplex command to specify the Ethernet PHY (physical specifications) mode to half duplex.
PAGE 250
Configuration - Ethernet Interface Mode history Use the history command to display commands that have been entered in this session. This command can be entered in any configuration mode.
PAGE 251
Configuration - Ethernet Interface Mode ip default-gateway Use the Ethernet Interface ip default-gateway command to set the default gateway for the Ethernet port. Syntax: (config-int-eth-{n})# ip default-gateway address Field Definition address Enter a default gateway address to the Ethernet port. Example: (config-int-eth-1)# ip default-gateway 192.168.100.
PAGE 252
Configuration - Ethernet Interface Mode ip mtu Use the Ethernet Interface ip mtu command to set the Maximum Transmission Unit. Sets the largest packet size (bytes) the network will allow to transmit. Syntax: (config-int-eth-{n})# ip mtu {size|auto} Field Definition size Allows the user to set the Maximum Transmission Unit (MTU). size = range of 576 to 1500 bytes. auto Auto sets the MTU at 1500 bytes.
PAGE 253
Configuration - Ethernet Interface Mode ip ospf authentication Use the Ethernet Interface ip ospf authentication command to enable the authentication method (either message-digest or simple authentication) for this Ethernet interface. To remove the authentication type for this interface set the parameter to null or see no ip ospf authentication command on page 11-18. Note: If an optional parameter is not entered, the authentication method of simple authentication is applied to the interface.
PAGE 254
Configuration - Ethernet Interface Mode ip ospf authentication-key Use the Ethernet Interface ip ospf authentication-key command to assign a password to be used by neighboring routers, that are using OSPF’s simple password authentication.To remove a previously assigned password, see no ip ospf authentication-key command on page 11-18. Syntax: (config-int-eth-{n})# ip ospf authentication-key password Field Definition password Enter a password, with up to 8 characters.
PAGE 255
Configuration - Ethernet Interface Mode ip ospf disable Use the Ethernet Interface ip ospf disable command to disable OSPF processing on this interface. To enable OSPF on this interface, see no ip ospf disable command on page 11-19.
PAGE 256
Configuration - Ethernet Interface Mode ip ospf priority Use the Ethernet Interface ip ospf priority command to set the router priority, which determines the designated router for this network. To restore the default setting of priority 1, see no ip ospf priority command on page 11-20. Syntax: (config-int-eth-{n})# ip ospf priority priority Field Definition priority Enter an ID for this key. Range is 0-255.
PAGE 257
Configuration - Ethernet Interface Mode ip primary-dns Use the Ethernet Interface ip primary-dns command to configure the primary DNS. To delete a primary DNS, see no ip primary-dns command on page 11-20. Syntax: (config-int-eth-{n})# ip primary-dns address Field Definition address Enter the IP address of the primary server. Example: (config-int-eth-1)# ip primary-dns 192.168.1.
PAGE 258
Configuration - Ethernet Interface Mode ip rip ip rip enable Use the Ethernet Interface ip rip enable command to enable RIP on this interface. To disable RIP, see no ip rip command on page 11-21. Syntax: (config-int-eth-{n})# ip rip enable Example: (config-int-eth-1)# ip rip enable Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR ip rip receive-version Use the Ethernet Interface ip rip receive-version command to configure the RIP receive messages on this interface.
PAGE 259
Configuration - Ethernet Interface Mode ip route Use the Ethernet Interface ip route command to configure the static routes on this interface. To delete a route, see no ip route command on page 11-21. Syntax: (config-int-eth-{n})# ip route dest-ip-addr mask mask gateway gateway metric metric Field Definition dest-ip-addr Enter the destination IP address. mask Enter the mask of the above address. gateway Enter the gateway IP address.
PAGE 260
Configuration - Ethernet Interface Mode ip secondary-dns Use the Ethernet Interface ip secondary-dns command to configure the secondary DNS. To delete a secondary DNS address, see no ip secondary-dns command on page 11-21. Syntax: (config-int-eth-{n})# ip secondary-dns address Field Definition address Enter the IP address of the secondary Domain Name Server (DNS). Example: (config-int-eth-1)# ip secondary-dns 192.168.1.
PAGE 261
Configuration - Ethernet Interface Mode no commands no firewall Use the no firewall command to disable the configured firewall. To enable the firewall, see firewall command on page 11-4. Syntax: (config-int-eth-{n})# no firewall Example: (config-int-eth-1)# no firewall Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR no ip address Use the Ethernet Interface no ip address command to remove the IP address from the alias. To set the Ethernet IP address, see ip address command on page 11-6.
PAGE 262
Configuration - Ethernet Interface Mode no ip ospf authentication Use the Ethernet Interface no ip ospf authentication command to disable the authentication method for this Ethernet interface. To enable the authentication type for this interface see ip ospf authentication command on page 11-9.
PAGE 263
Configuration - Ethernet Interface Mode no ip ospf disable Use the Ethernet Interface no ip ospf disable command to enable OSPF processing on this interface. To disable OSPF on this interface, see ip ospf disable command on page 11-11.
PAGE 264
Configuration - Ethernet Interface Mode no ip ospf priority Use the Ethernet Interface no ip ospf priority command to set the router priority to the default setting of priority 1. To set the router priority, which determines the designated router for this network, see ip ospf priority command on page 11-12.
PAGE 265
Configuration - Ethernet Interface Mode no ip proxy-arp Use the Ethernet Interface no ip proxy-arp command to disable the proxy ARP on this interface. To enable proxy ARP, see ip proxy-arp command on page 11-13. Syntax: (config-int-eth-{n})# no ip proxy-arp Example: (config-int-eth-1)# no ip proxy-arp Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR no ip rip Use the Ethernet Interface no ip rip command to disable RIP on this interface. To enable RIP, see ip rip command on page 11-14.
PAGE 266
Configuration - Ethernet Interface Mode no remote-admin Use the Ethernet Interface no remote-admin command to disable remote access on this interface. To enable remote access, see remote-admin command on page 11-23. Syntax: (config-int-eth-{n})# no remote-admin Example: (config-int-eth-1)# no remote-admin Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR no schedule-availability Use the Ethernet Interface no schedule-availability command to disable a schedule rule.
PAGE 267
Configuration - Ethernet Interface Mode no tos ip Use the Ethernet Interface no tos ip command to disable IP TOS marking. To enable TOS marking, see tos command on page 11-25. Syntax: (config-int-eth-{n})# no tos ip Example: (config-int-eth-1)# no tos ip Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR release Use the Ethernet Interface release command to release the DHCP lease.
PAGE 268
Configuration - Ethernet Interface Mode schedule-availability Use the Ethernet Interface schedule-availability command to apply a schedule rule to this interface. To delete a schedule, see no schedule-availability command on page 11-22. Syntax: (config-int-eth-{n})# schedule-availability time-range schedule-id Field Definition schedule-id Enter an existing schedule rule name.
PAGE 269
Configuration - Ethernet Interface Mode speed Use the Ethernet Interface speed command to specify the Ethernet PHY (physical specifications) speed. Syntax: (config-int-eth-{n})# speed {10|100|auto} Field Definition 10 10 Mbps speed . 100 100 Mbps speed. auto Auto-negotiate the speed for the interface. Default. Note: Setting speed to auto will set the duplex to auto.
PAGE 270
Configuration - Ethernet Interface Mode 11-26 Adit 3000 (Rel. 1.6) and MSR Card (Rel 2.
PAGE 271
CHAPTER 12 Configuration - Multilink Interface Mode The Multilink Interface Configuration commands allow the user to configure the MLPPP parameters. Enter this sub-group with the (config)# interface multilink number command from the Configuration mode. The Multilink Interface commands are represented by the (config-int-mlink-{n})# prompt. Note: Before configuring MLPPP parameters, you must create a multilink group from the corresponding Serial interface.
PAGE 272
Configuration - Multilink Interface Mode description Use the Multilink Interface description command to set the description for this Multilink interface. Syntax: (config-int-mlink-{n})# description text Field Definition text Enter a description for the Multilink interface with a maximum of 64 characters. Example: (config-int-mlink-1)# description MLPPP1 Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR 12-2 Adit 3000 (Rel. 1.6) and MSR Card (Rel 2.
PAGE 273
Configuration - Multilink Interface Mode do Use the do commands to run User and Privileged mode commands. The following are links to the User and Privileged do commands.
PAGE 274
Configuration - Multilink Interface Mode end Use the end command to exit the current configuration mode, and must be used to mark the end of any configuration file. This command can be entered in any configuration mode with the same result. Syntax: (config-int-mlink-{n})# end Example: (config-int-mlink-1)# end # Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR exit Use the exit command to close your current connection if you are in the User mode, or Privileged mode.
PAGE 275
Configuration - Multilink Interface Mode history Use the history command to display commands that have been entered in this session. This command can be entered in any configuration mode.
PAGE 276
Configuration - Multilink Interface Mode ip default-route Use the Multilink Interface ip default-route command to enable the default route. To disable the default route, see no ip default-route command on page 12-14. Syntax: (config-int-mlink-{n})# ip default-route enable Example: (config-int-mlink-1)# ip default-route enable Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR ip mtu Use the Multilink Interface ip mtu command to set the Maximum Transmission Unit.
PAGE 277
Configuration - Multilink Interface Mode ip ospf authentication Use the Multilink Interface ip ospf authentication command to enable the authentication method (either message-digest or simple authentication) for this Multilink interface. To remove the authentication type for this interface set the parameter to null or see no ip ospf authentication command on page 12-14. Note: If an optional parameter is not entered, the authentication method of simple authentication is applied to the interface.
PAGE 278
Configuration - Multilink Interface Mode ip ospf authentication-key Use the Multilink Interface ip ospf authentication-key command to assign a password to be used by neighboring routers, that are using OSPF’s simple password authentication.To remove a previously assigned password, see no ip ospf authentication-key command on page 12-15. Syntax: (config-int-mlink-{n})# ip ospf authentication-key password Field Definition password Enter a password, with up to 8 characters.
PAGE 279
Configuration - Multilink Interface Mode ip ospf disable Use the Multilink Interface ip ospf disable command to disable OSPF processing on this interface. To enable OSPF on this interface, see no ip ospf disable command on page 12-15.
PAGE 280
Configuration - Multilink Interface Mode ip ospf priority Use the Multilink Interface ip ospf priority command to set the router priority, which determines the designated router for this network. To restore the default setting of priority 1, see no ip ospf priority command on page 12-16. Syntax: (config-int-mlink-{n})# ip ospf priority priority Field Definition priority Enter an ID for this key. Range is 0-255.
PAGE 281
Configuration - Multilink Interface Mode ip primary-dns Use the Multilink Interface ip primary-dns command to configure the primary DNS. To delete a primary DNS, see no ip primary-dns command on page 12-17. Syntax: (config-int-mlink-{n})# ip primary-dns address Field Definition address Enter the IP address of the primary server. Example: (config-int-mlink-1)# ip primary-dns 10.10.5.
PAGE 282
Configuration - Multilink Interface Mode ip rip send-version Use the Multilink Interface ip rip send-version command to configure the send RIP messages on this interface. Syntax: (config-int-mlink-{n})# ip rip send-version {1|2-bcast|2-mcast |none} Field Definition 1 Send RIP version 1. 2-bcast Send RIP version 2 - Broadcast. 2-mcast Send RIP version 2 - Multicast. none Set RIP version to none.
PAGE 283
Configuration - Multilink Interface Mode ip route-mode Use the Multilink Interface ip route-mode command to configure the routing mode. Syntax: (config-int-mlink-{n})# ip route-mode {napt|route} Field Definition napt Set to NAPT mode. Default. NAPT is used if doing private IPs on the Ethernet side or if you want to hide specific publics on the internal side. route Set to Route mode. Routing is used if public is visible on both sides.
PAGE 284
Configuration - Multilink Interface Mode no commands no firewall Use the Multilink Interface no firewall command to disable the configured firewall. To enable the firewall on this interface, see firewall command on page 12-4. Syntax: (config-int-mlink-{n})# no firewall Example: (config-int-mlink-1)# no firewall Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR no ip address Use the Multilink Interface no ip address command to remove the IP address assigned to the port.
PAGE 285
Configuration - Multilink Interface Mode no ip ospf authentication-key Use the Multilink Interface no ip ospf authentication-key command to remove a password to be used by neighboring routers, that are using OSPF’s simple password authentication. To assign a password, see ip ospf authentication-key command on page 12-8.
PAGE 286
Configuration - Multilink Interface Mode no ip ospf hello-interval Use the Multilink Interface no ip ospf hello-interval command to reset the interval of time to the default setting of the path cost to the default setting of 10 seconds. To define the interval of time between hello packets sent on the interface, see ip ospf hello-interval command on page 12-9.
PAGE 287
Configuration - Multilink Interface Mode no ip ospf retransmit-interval Use the Multilink Interface ip ospf retransmit-interval command to restore the default value of 5 seconds. To define the interval of time between link state advertisement retransmissions for adjacencies belonging to the interface, see ip ospf retransmit-interval command on page 12-10.
PAGE 288
Configuration - Multilink Interface Mode no ip route Use the Multilink Interface no ip route command remove an IP route. To add a route, see ip route command on page 12-12. Syntax: (config-int-mlink-{n})# no ip route dest-ip-addr gateway Field Definition dest-ip-addr Enter destination IP address to remove. gateway Enter gateway IP address to remove. Example: (config-int-mlink-1)# no ip route 192.168.100.200 192.168.100.
PAGE 289
Configuration - Multilink Interface Mode no ppp on-demand Use the Multilink Interface no ppp on-demand command to disable PPP on-demand. To enable PPP on demand, see ppp on-demand command on page 12-22. Syntax: (config-int-mlink-{n})# no ppp on-demand Example: (config-int-mlink-1)# no ppp on-demand Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR no ppp password Use the Multilink Interface no ppp password command to remove the PPP password.
PAGE 290
Configuration - Multilink Interface Mode no schedule-availability Use the Multilink Interface no schedule-availability command to disable a schedule rule. To add a rule, see schedule-availability command on page 12-24. Syntax: (config-int-mlink-{n})# no schedule-availability Example: (config-int-mlink-1)# no schedule-availability Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR no shutdown Use the Multilink Interface no shutdown command to set the Multilink port up (In-Service).
PAGE 291
Configuration - Multilink Interface Mode ppp authentication Use the Multilink Interface ppp authentication command to configure the support of authentication types for the password. To disable PPP authentication, see no ppp authentication command on page 12-18. Syntax: (config-int-mlink-{n})# ppp authentication {chap|ms-chapv1| ms-chapv2|pap} Field Definition chap Support Challenge Handshake Authentication (CHAP) ms-chapv1 Support Microsoft CHAP (MS-CHAP).
PAGE 292
Configuration - Multilink Interface Mode ppp link-fragmentation Use the Multilink Interface ppp link-fragmentation command to configure the threshold byte size of the packet, for Interleaving. Note: If the packet is > the set threshold, the packet will be split in half and sent. Syntax: (config-int-mlink-{n})# ppp link-fragmentation number Field Definition number Range 320 - 1600, with a default of 1600 bytes.
PAGE 293
Configuration - Multilink Interface Mode ppp qos-interleaving Use the Multilink Interface ppp qos-interleaving command enable PPP Quality of Service Interleaving. To disable PPP QoS Interleaving, see no ppp qos interleaving command on page 12-19.
PAGE 294
Configuration - Multilink Interface Mode ppp username Use the Multilink Interface ppp username command set the PPP Login User Name. To delete a PPP user, see no ppp qos interleaving command on page 12-19. Syntax: (config-int-mlink-{n})# ppp username username Field Definition username Enter the Username, with a maximum of 19 characters.
PAGE 295
Configuration - Multilink Interface Mode sip-alg Use the Multilink Interface sip-alg command to enable SIP ALG. To disable SIP ALG, see no sip-alg command on page 12-20. Syntax: (config-int-mlink-{n})# sip-alg enable Example: (config-int-mlink-1)# sip-alg enable Supported Platforms: Adit 3104, Adit 3500, MSR Adit 3000 (Rel. 1.6) and MSR Card (Rel 2.
PAGE 296
Configuration - Multilink Interface Mode 12-26 Adit 3000 (Rel. 1.6) and MSR Card (Rel 2.
PAGE 297
CHAPTER 13 Configuration - Serial Interface Mode The Serial Interface Configuration commands allow the user to configure the serial interface parameters. Enter this sub-group with the (config)# interface serial number command from the Configuration mode. The Serial Interface commands are represented by the (config-int-ser-{n})# prompt. Note: Before configuring serial interface parameters, you must enable PPP encapsulation on the interface using the encapsulation ppp command.
PAGE 298
Configuration - Serial Interface Mode description Use the Serial Interface description command to set the description for this serial interface. Syntax: (config-int-ser-{n})# description text Field Definition text Enter a description for the serial interface with a maximum of 64 characters. Example: (config-int-ser-1)# description Serial1 Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR 13-2 Adit 3000 (Rel. 1.6) and MSR Card (Rel 2.
PAGE 299
Configuration - Serial Interface Mode do Use the do commands to run User and Privileged mode commands. The following are links to the User and Privileged do commands.
PAGE 300
Configuration - Serial Interface Mode encapsulation ppp Use the Serial Interface encapsulation ppp command to enable PPP encapsulation. To disable encapsulation, see no encapsulation ppp command on page 13-14. Syntax: (config-int-ser-{n})# encapsulation ppp Example: (config-int-ser-1)# encapsulation ppp Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR end Use the end command to exit the current configuration mode, and must be used to mark the end of any configuration file.
PAGE 301
Configuration - Serial Interface Mode firewall Use the Serial Interface firewall command to enable the configured firewall. To delete a preference, see no firewall command on page 13-14. Syntax: (config-int-ser-{n})# firewall enable Example: (config-int-ser-1)# firewall enable Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR history Use the history command to display commands that have been entered in this session. This command can be entered in any configuration mode.
PAGE 302
Configuration - Serial Interface Mode ip address Use the Serial Interface ip address command to configure the IP address for the serial interface. To remove an IP address, see no ip address command on page 13-15. Syntax: (config-int-ser-{n})# ip address {address mask mask|auto |unnumbered} [secondary] Field Definition address Enter an IP address to assign to the port. mask Enter a subnet mask for the IP address. auto Uses IPCP to assign an IP address.
PAGE 303
Configuration - Serial Interface Mode ip ospf authentication Use the Serial Interface ip ospf authentication command to enable the authentication method (either message-digest or simple authentication) for this serial interface. To remove the authentication type for this interface set the parameter to null or see no ip ospf authentication command on page 13-15. Note: If an optional parameter is not entered, the authentication method of simple authentication is applied to the interface.
PAGE 304
Configuration - Serial Interface Mode ip ospf authentication-key Use the Serial Interface ip ospf authentication-key command to assign a password to be used by neighboring routers, that are using OSPF’s simple password authentication.To remove a previously assigned password, see no ip ospf authentication-key command on page 13-15. Syntax: (config-int-ser-{n})# ip ospf authentication-key password Field Definition password Enter a password, with up to 8 characters.
PAGE 305
Configuration - Serial Interface Mode ip ospf disable Use the Serial Interface ip ospf disable command to disable OSPF processing on this interface. To enable OSPF on this interface, see no ip ospf disable command on page 13-16.
PAGE 306
Configuration - Serial Interface Mode ip ospf priority Use the Serial Interface ip ospf priority command to set the router priority, which determines the designated router for this network. To restore the default setting of priority 1, see no ip ospf priority command on page 13-17. Syntax: (config-int-ser-{n})# ip ospf priority priority Field Definition priority Enter an ID for this key. Range is 1-255.
PAGE 307
Configuration - Serial Interface Mode ip primary-dns Use the Serial Interface ip primary-dns command to configure the primary DNS. To delete a primary DNS, see no ip primary-dns command on page 13-18. Syntax: (config-int-ser-{n})# ip primary-dns address Field Definition address Enter the IP address of the primary server. Example: (config-int-ser-1)# ip primary-dns 192.168.1.
PAGE 308
Configuration - Serial Interface Mode ip rip send-version Use the Serial Interface ip rip send-version command to configure the send RIP messages on this interface. Syntax: (config-int-ser-{n})# ip rip send-version {1|2-bcast|2-mcast |none} Field Definition 1 Send RIP version 1. 2-bcast Send RIP version 2 - Broadcast. 2-mcast Send RIP version 2 - Multicast. none Set RIP version to none.
PAGE 309
Configuration - Serial Interface Mode ip route-mode Use the Serial Interface ip route-mode command to configure the routing mode. Syntax: (config-int-ser-{n})# ip route-mode {napt|route} Field Definition napt Set to NAPT mode. Default. NAPT is used if doing private IPs on the Ethernet side or if you want to hide specific publics on the internal side. route Set to Route mode. Routing is used if public is visible on both sides.
PAGE 310
Configuration - Serial Interface Mode multilink-group Use the Serial Interface multilink-group command to configure a MLPPP group. Syntax: (config-int-ser-{n})# multilink-group group-number Field Definition group-number Enter multilink group. Adit 3104, Adit 3200, Adit 3500: Value must be 1. MSR: Range = 1-8.
PAGE 311
Configuration - Serial Interface Mode no ip address Use the Serial Interface no ip address command to remove the IP address assigned to the serial interface. To set the Serial IP address, see ip address command on page 13-6. Syntax: (config-int-ser-{n})# no ip address address Field Definition address Enter the IP address to remove. Example: (config-int-ser-1)# no ip address 192.168.1.
PAGE 312
Configuration - Serial Interface Mode no ip ospf cost Use the Serial Interface no ip ospf cost command to reset the cost path to the default setting of 0. To define the cost of sending a packet on this serial interface, see ip ospf cost command on page 13-8.
PAGE 313
Configuration - Serial Interface Mode no ip ospf message-digest-key Use the Serial Interface no ip ospf message-digest-key command to remove an old MD5 key. To enable OSPF MD5 (Message-Digest) authentication, see ip ospf message-digest-key command on page 13-9. Syntax: (config-int-ser-{n})# no ip ospf message-digest-key key-id Field Definition key-id Enter an ID for this key. Range is 1-255.
PAGE 314
Configuration - Serial Interface Mode no ip primary-dns Use the Serial Interface no primary-dns command to disable the primary DNS. To set the DNS primary IP address, see ip primary-dns command on page 13-11. Syntax: (config-int-ser-{n})# no ip primary-dns Example: (config-int-ser-1)# no ip primary-dns Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR no ip rip Use the Serial Interface no ip rip command to disable RIP on this interface. To enable RIP, see ip rip command on page 13-11.
PAGE 315
Configuration - Serial Interface Mode no ppp authentication Use the Serial Interface no ppp authentication command disable PPP authentication. To enable PPP authentication, see ppp authentication command on page 13-21. Syntax: (config-int-ser-{n})# no ppp authentication Example: (config-int-ser-1)# no ppp authentication Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR no ppp encryption Use the Serial Interface no ppp encryption command to disable PPP encryption.
PAGE 316
Configuration - Serial Interface Mode no ppp username Use the Serial Interface no ppp username command remove the PPP username. To set a PPP user, see ppp username command on page 13-23. Syntax: (config-int-ser-{n})# no ppp username username Example: (config-int-ser-1)# no ppp username test-user-name Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR no schedule-availability Use the Serial Interface no schedule-availability command to disable a schedule rule.
PAGE 317
Configuration - Serial Interface Mode ppp authentication Use the Serial Interface ppp authentication command to configure the support of authentication types for the password. To disable PPP authentication, see no ppp authentication command on page 13-19. Syntax: (config-int-ser-{n})# ppp authentication {chap|ms-chap| ms-chapv2|pap} Field Definition chap Support Challenge Handshake Authentication (CHAP) ms-chap Support Microsoft CHAP (MS-CHAP).
PAGE 318
Configuration - Serial Interface Mode ppp link-fragmentation Use the Serial Interface ppp link-fragmentation command to configure the threshold byte size of the packet, for Interleaving. Note: If the packet is > the set threshold, the packet will be split in half and sent. Syntax: (config-int-ser-{n})# ppp link-fragmentation number Field Definition number Range 320 - 1600, with a default of 1600 bytes.
PAGE 319
Configuration - Serial Interface Mode ppp restart-timer Use the Serial Interface ppp restart-timer command to configure the PPP restart timer. Syntax: (config-int-ser-{n})# ppp restart-timer seconds Field Definition seconds Range is 1 - 65535 seconds. Default is 3 seconds.
PAGE 320
Configuration - Serial Interface Mode schedule-availability Use the Serial Interface schedule-availability command to apply a schedule rule to this interface. To delete a schedule, see no schedule-availability command on page 13-20. Syntax: (config-int-ser-{n})# schedule-availability time-range schedule-id Field Definition schedule-id Enter an existing schedule rule name.
PAGE 321
CHAPTER 14 Configuration - IPSec Mode The IPSecConfiguration commands allow the user to configure the VPN IPSec parameters. Enter this sub-group with the (config)# ipsec vpn_ipsec command from the Configuration mode. The IPSec commands are represented by the (config-ipsec-n)# prompt. Note: First a connection must be created. See ipsec net-to-host command on page 4-23, or ipsec net-tonet command on page 4-24.
PAGE 322
Configuration - IPSec Mode aggressive-mode Use the IPSec aggressive-mode command to set to aggressive mode, instead of main mode. To set to main mode, see no aggressive-mode command on page 14-12. Syntax: (config-ipsec {n})# aggressive-mode Example: (config-ipsec-1)# aggressive-mode Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR authentication Use the IPSec authentication command to specify a peer authentication method.
PAGE 323
Configuration - IPSec Mode do Use the do commands to run User and Privileged mode commands. The following are links to the User and Privileged do commands.
PAGE 324
Configuration - IPSec Mode dpd-delay Use the IPSec dpd-delay command to set the Dead Period Detection delay. To set the DPD delay back to the default settings, see no dpd-delay command on page 14-12. Syntax: (config-ipsec {n})# dpd-delay seconds Field Definition seconds Set the delay time in seconds. Range 1-3600 seconds, with a default of 60.
PAGE 325
Configuration - IPSec Mode encryption Use the IPSec encryption command to specify an encryption algorithm. To disable encryption, see no group command on page 14-13. Syntax: (config-ipsec {n})# encryption {des|3des|aes|aes192|aes256} Field Definition des Set to 56-bit Data Encryption Standard (DES). 3des Set to 168-bit DES. Default. aes Set 128-bit Advanced Encryption Standard (AES) as the encryption algorithm. aes192 Set 192-bit AES as the encryption algorithm.
PAGE 326
Configuration - IPSec Mode group Use the IPSec group command to define the Diffie-Hellman (DH) group identifier for phase-1. Note: More than one group can be enabled. To disable a DH identifier, see no group command on page 14-13. Syntax: (config-ipsec {n})# group {1|2|5} Field Definition 1 Set to DH group 1 (768 bit). 2 Set to DH group 2 (1024 bit). Default is enabled. 5 Set to DH group 25 (1536 bit). Default is enabled.
PAGE 327
Configuration - IPSec Mode history Use the history command to display commands that have been entered in this session. This command can be entered in any configuration mode.
PAGE 328
Configuration - IPSec Mode ipsec-conn Use the IPSec mode ipsec-conn command to enable or disable an IPSec connection without removing it. Syntax: (config-ipsec {n})# ipsec-conn {disable|enable} Field Definition disable Disable the IPSec connection. enable Enable the IPSec connection. Example: (config-ipsec-1)# ipsec-conn enable Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR ipsec-manual Use the IPSec mode ipsec-manual command to select manual key exchange method.
PAGE 329
Configuration - IPSec Mode lifetime Use the IPSec mode lifetime command to set the connection lifetime. Syntax: (config-ipsec {n})# lifetime time seconds Field Definition seconds Set the connection lifetime. Range 1-86400 seconds, with a default of 86400. Example: (config-ipsec-1)# lifetime time 70000 Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR local-subnet Use the IPSec mode local-subnet command to set the local subnet IP address.
PAGE 330
Configuration - IPSec Mode max-retries Use the IPSec mode max-retries command to set a maximum number of negotiation attempts. Syntax: (config-ipsec {n})# max-retries number Field Definition number Valid values: 0, 1, 2, 3, 4, 8, 16, 24, 32, 48, 64. Default is 3. 0 = infinite negotiation attempts. Example: (config-ipsec-1)# max-retries 16 Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR mode Use the IPSec mode mode command to modify an IPSec security association mode.
PAGE 331
Configuration - IPSec Mode net-type Use the IPSec mode net-type command to define the network type. Syntax: (config-ipsec {n})# network-type {dmz|lan|wan} Field Definition dmz lan wan Demilitarized Zone. Local Area Network. Wide Area Network. Example: (config-ipsec-1)# net-type lan Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR netbios remote-brc-addr Use the IPSec netbios remote-brc-addr command to set the remote broadcast address for NetBIOS.
PAGE 332
Configuration - IPSec Mode no commands no aggressive-mode Use the IPSec mode no aggressive-mode command to set to main mode, instead of aggressive mode. To set to aggressive mode, see aggressive-mode command on page 14-2. Syntax: (config-ipsec {n})# no aggressive-mode Example: (config-ipsec-1)# no aggressive-mode Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR no dpd-delay Use the IPSec no dpd-delay command to reset the Dead Period Detection (DPD) delay back to the default settings.
PAGE 333
Configuration - IPSec Mode no encryption Use the IPSec no encryption command to disable encryption. To configure encryption, see encryption command on page 14-5. Syntax: (config-ipsec-{n})# no encryption {des|3des|aes|aes192| aes256} Field Definition des Disable 56-bit Data Encryption Standard (DES). 3des Disable 168-bit DES. Default. aes Disable 128-bit Advanced Encryption Standard (AES) as the encryption algorithm. aes192 Disable 192-bit AES as the encryption algorithm.
PAGE 334
Configuration - IPSec Mode no hash Use the IPSec no hash command to disable a hash algorithm. To set a hash algorithm, see hash command on page 14-6. Syntax: (config-ipsec-{n})# no hash {md5|sha} Field Definition md5 Disable the MD5 algorithm. sha Disable SHA1. SHA = Secure Hash Algorithm. Example: (config-ipsec-1)# no hash md5 Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR no ip rip Use the IPSec no ip rip command to disable RIP.
PAGE 335
Configuration - IPSec Mode no reconnect Use the IPSec no reconnect command to disable automatic reconnection. To enable reconnection, see reconnect command on page 14-17. Syntax: (config-ipsec-{n})# no reconnect Example: (config-ipsec-1)# no reconnect Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR no schedule-availability Use the IPSec no schedule-availability command to set schedule availability to the default value. To set a schedule rule, see schedule-availability command on page 14-18.
PAGE 336
Configuration - IPSec Mode no transform-set Use the IPSec no transform-set command to disable Perfect Forward Secrecy. To enable PFS, see transform-set command on page 14-20. Syntax: (config-ipsec-{n})# no transform-set {ah-md5|ah-sha|esp-3des| esp-aes|esp-aes192|esp-aes256|esp-des|esp-md5|esp-null|esp-sha |ipcomp} Field Definition ah-md5 Authentication Header transform using MD5 authentication. Default. ah-sha Authentication Header transform using Secure Hash Algorithm (SHA1) authentication.
PAGE 337
Configuration - IPSec Mode reconnect Use the IPSec reconnect command to enable the automatic reconnection option. To disable reconnection, see no reconnect command on page 14-15. Syntax: (config-ipsec-{n})# reconnect Example: (config-ipsec-1)# reconnect Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR rekey Use the IPSec rekey command to set the rekey lifetime, rekey margin and rekey fuzz percent.
PAGE 338
Configuration - IPSec Mode remote-subnet Use the IPSec remote-subnet command to set the remote subnet IP address. Syntax: Syntax: (config-ipsec-{n})# remote-subnet {none|range {start-address address end-address address}|single ip address|subnet ip address} Field Definition none No IP address. range Enter an IP address range. start-address - Enter the start IP address of the range. end-address - Enter the end IP address of the range. single ip Enter a single IP address.
PAGE 339
Configuration - IPSec Mode session-key Use the IPSec session-key command to specify the parameters needed during manual key exchange (ipsec-manual). Syntax: (config-ipsec-{n})# session-key {inbound|outbound} ah spi authentication [md5|sha] hex-key-data Field Definition inbound Set the inbound (local) IPSec key. outbound Set the outbound (remote) IPSec key. ah spi Set the Authentication Header Security Parameter Index. 100-FFF md5 Set authentication to MD5.
PAGE 340
Configuration - IPSec Mode transform-set Use the IPSec transform-set command to set the allowable encryption methods, authentication protocols and to enable compression during automatic key exchange. To disable encryption/ authentication/compression, see no transform-set command on page 14-16.
PAGE 341
Configuration - IPSec Mode Example of IPSec Connection Configuration Example of IPSec Connection Configuration Adit 3104(config)#ipsec VPN_IPSEC 0 Adit 3104(config-ipsec-0)#dev-name VPNIPSec0 Adit 3104(config-ipsec-0)#net-type WAN Adit 3104(config-ipsec-0)#aggressive-mode Adit 3104(config-ipsec-0)#authentication pre-share ocho Adit 3104(config-ipsec-0)#no encryption des Adit 3104(config-ipsec-0)#no encryption 3des Adit 3104(config-ipsec-0)#no encryption aes Adit 3104(config-ipsec-0)#encryption aes192 Adit
PAGE 342
Configuration - IPSec Mode Example of IPSec Connection Configuration Adit 3104(config-ipsec-0)#transform-set esp-null Adit 3104(config-ipsec-0)#transform-set esp-des Adit 3104(config-ipsec-0)#transform-set esp-3des Adit 3104(config-ipsec-0)#transform-set esp-aes Adit 3104(config-ipsec-0)#transform-set esp-aes192 Adit 3104(config-ipsec-0)#transform-set esp-aes256 Adit 3104(config-ipsec-0)#transform-set esp-md5 Adit 3104(config-ipsec-0)#transform-set esp-sha Adit 3104(config-ipsec-0)#transform-set ah-md5 Adi
PAGE 343
CHAPTER 15 Configuration - L2TPC Mode The L2TPC Configuration commands allow the user to configure the VPN Layer 2 Tunneling Protocol Connection (L2TPC) parameters. Enter this sub-group with the (config)# l2tpc command from the Configuration mode. The VPN L2TPC commands are represented by the (config-l2tpc-1)# prompt.
PAGE 344
Configuration - L2TPC Mode do Use the do commands to run User and Privileged mode commands. The following are links to the User and Privileged do commands.
PAGE 345
Configuration - L2TPC Mode end Use the end command to exit the current configuration mode, and must be used to mark the end of any configuration file. This command can be entered in any configuration mode with the same result. Syntax: (config-l2tpc-{n})# end Example: (config-l2tpc-1)# end # Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR exit Use the exit command to close your current connection if you are in the User mode, or Privileged mode.
PAGE 346
Configuration - L2TPC Mode history Use the history command to display commands that have been entered in this session. This command can be entered in any configuration mode. Syntax: (config-l2tpc-{n})# history Example: (config-l2tpc-1)# history firewall enable exit host-ip 192.168.1.10 ip default-route enable ip rip enable ip rip send-version none ip primary-dns 192.168.2.10 ip route 192.168.1.
PAGE 347
Configuration - L2TPC Mode ip address Use the L2TPC ip address command to configure the IP address for the port. To remove an IP address, see no ip address command on page 15-13. Syntax: (config-l2tpc-{n})# ip address {address mask mask|auto |unnumbered} [secondary] Field Definition address Enter an IP address to assign to the port. mask Enter a subnet mask for the IP address. auto Uses IPCP to assign an IP address. unnumbered Treat this as an un-numbered interface, as per RFC 1812.
PAGE 348
Configuration - L2TPC Mode ip ospf authentication Use the L2TPC ip ospf authentication command to enable the authentication method (either messagedigest or simple authentication) for this interface. To remove the authentication type for this interface set the parameter to null or see no ip ospf authentication command on page 15-14. Note: If an optional parameter is not entered, the authentication method of simple authentication is applied to the interface.
PAGE 349
Configuration - L2TPC Mode ip ospf authentication-key Use the L2TPC ip ospf authentication-key command to assign a password to be used by neighboring routers, that are using OSPF’s simple password authentication.To remove a previously assigned password, see no ip ospf authentication-key command on page 15-14. Syntax: (config-l2tpc-{n})# ip ospf authentication-key password Field Definition password Enter a password, with up to 8 characters.
PAGE 350
Configuration - L2TPC Mode ip ospf disable Use the L2TPC ip ospf disable command to disable OSPF processing on this interface. To enable OSPF on this interface, see no ip ospf disable command on page 15-15. Syntax: (config-l2tpc-{n})# ip ospf disable all Example: (config-l2tpc-1)# ip ospf disable all Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR ip ospf hello-interval Use the L2TPC ip ospf hello-interval command to define the interval of time between hello packets sent on the interface.
PAGE 351
Configuration - L2TPC Mode ip ospf priority Use the L2TPC ip ospf priority command to set the router priority, which determines the designated router for this network. To restore the default setting of priority 1, see no ip ospf priority command on page 15-16. Syntax: (config-l2tpc-{n})# ip ospf priority priority Field Definition priority Enter an ID for this key. Range is 0-255.
PAGE 352
Configuration - L2TPC Mode ip primary-dns Use the L2TPC ip primary-dns command to configure the primary DNS. To delete a primary DNS, see no ip primary-dns command on page 15-17. Syntax: (config-l2tpc-{n})# ip primary-dns address Field Definition address Enter the IP address of the primary server. Example: (config-l2tpc-1)# ip primary-dns 192.168.2.100 Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR ip rip ip rip enable Use the L2TPC ip rip enable command to enable RIP on this interface.
PAGE 353
Configuration - L2TPC Mode ip rip send-version Use the L2TPC ip rip send-version command to configure the send RIP messages on this interface. Syntax: (config-l2tpc-{n})# ip rip send-version {1|2-bcast|2-mcast |none} Field Definition 1 Send RIP version 1. 2-bcast Send RIP version 2 - Broadcast. 2-mcast Send RIP version 2 - Multicast. none Set RIP version to none.
PAGE 354
Configuration - L2TPC Mode ip route-mode Use the L2TPC ip route-mode command to configure the routing mode. Syntax: (config-l2tpc-{n})# ip route-mode {napt|route} Field Definition napt Set to NAPT mode. Default. NAPT is used if doing private IPs on the Ethernet side or if you want to hide specific publics on the internal side. route Set to Route mode. Routing is used if public is visible on both sides.
PAGE 355
Configuration - L2TPC Mode metric Use the L2TPC metric command to configure the Metric of the IP network on this interface. Syntax: (config-l2tpc-{n})# metric metric Field Definition metric Range is 0-255, with a default is 10. Example: (config-l2tpc-1)# metric 150 Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR no commands no firewall Use the L2TPC no firewall command to disable the configured firewall. To enable the firewall, see firewall command on page 15-3.
PAGE 356
Configuration - L2TPC Mode no ip default-route Use the L2TPC no ip default-route command to disable the default route. To set the default IP address, see ip default-route command on page 15-5. Syntax: (config-l2tpc-{n})# no ip default-route Example: (config-l2tpc-1)# no ip default-route Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR no ip ospf authentication Use the L2TPC no ip ospf authentication command to disable the authentication method for this serial interface.
PAGE 357
Configuration - L2TPC Mode no ip ospf dead-interval Use the L2TPC no ip ospf dead-interval command to reset the interval of time to the default setting of 40 seconds. To define the interval of time that no hello packets have been seen before neighbors declare the router down, see ip ospf dead-interval command on page 15-7.
PAGE 358
Configuration - L2TPC Mode no ip ospf message-digest-key Use the L2TPC no ip ospf message-digest-key command to remove an old MD5 key. To enable OSPF MD5 (Message-Digest) authentication, see ip ospf message-digest-key command on page 15-8. Syntax: (config-l2tpc-{n})# no ip ospf message-digest-key key-id Field Definition key-id Enter an ID for this key. Range is 1-255.
PAGE 359
Configuration - L2TPC Mode no ip ospf transmit-delay Use the L2TPC no ip ospf transmit-delay command to restore the default value of 1 second. To define the estimated time to transmit a link state update packet on the interface, see ip ospf transmitdelay command on page 15-9.
PAGE 360
Configuration - L2TPC Mode no ip secondary-dns Use the L2TPC no secondary-dns command to disable the secondary DNS. To enable the secondary DNS, see ip secondary-dns command on page 15-12. Syntax: (config-l2tpc-{n})# no ip secondary-dns Example: (config-l2tpc-1)# no ip secondary-dns Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR no ppp authentication Use the L2TPC no ppp authentication command disable PPP authentication.
PAGE 361
Configuration - L2TPC Mode no ppp on-demand Use the L2TPC no ppp on-demand command to disable PPP on-demand. To enable PPP on demand, see ppp on-demand command on page 15-22. Syntax: (config-l2tpc-{n})# no ppp on-demand Example: (config-l2tpc-1)# no ppp on-demand Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR no ppp password Use the L2TPC no ppp password command to remove the PPP password. To set the PPP password, see ppp password command on page 15-22.
PAGE 362
Configuration - L2TPC Mode no ppp username Use the L2TPC no ppp username command remove the PPP username. To set a PPP user, see ppp username command on page 15-23. Syntax: (config-l2tpc-{n})# no ppp username username Example: (config-l2tpc-1)# no ppp username test-user-name Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR no schedule-availability Use the L2TPC no schedule-availability command to disable a schedule rule. To add a rule, see schedule-availability command on page 15-23.
PAGE 363
Configuration - L2TPC Mode ppp authentication Use the L2TPC ppp authentication command to configure the support of authentication types for the password. To disable PPP authentication, see no ppp authentication command on page 15-18. Syntax: (config-l2tpc-{n})# ppp authentication {chap|ms-chap| ms-chapv2|pap} Field Definition chap Support Challenge Handshake Authentication (CHAP) ms-chap Support Microsoft CHAP (MS-CHAP). ms-chapv2 Support Microsoft CHAP Version 2 (MS-CHAPv2).
PAGE 364
Configuration - L2TPC Mode ppp on-demand Use the L2TPC ppp on-demand command to enable on demand the feature. On demand attempts to connect only when packets are sent. To disable PPP on demand, see no ppp encryption command on page 15-18. Syntax: (config-l2tpc-{n})# ppp on-demand Example: (config-l2tpc-1)# ppp on-demand Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR ppp password Use the L2TPC ppp password command set the PPP password.
PAGE 365
Configuration - L2TPC Mode ppp time-btwn-reconnect Use the L2TPC ppp time-btwn-reconnect command configure the time between reconnect attempts. To reset to default value, see no ppp time-btwn-reconnect command on page 15-19. Syntax: (config-l2tpc-{n})# ppp time-btwn-reconnect seconds Field Definition seconds Set the interval of time between reconnect attempts. Range is 0 - 99999 seconds with a default of 0.
PAGE 366
Configuration - L2TPC Mode shutdown Use the L2TPC shutdown command to disable the interface. To set the interface up (In-Service), see no shutdown command on page 15-20. Syntax: (config-l2tpc-{n})# shutdown Example: (config-l2tpc-1)# shutdown Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR sip-alg Use the L2TPC sip-alg command to enable SIP ALG. To disable SIP ALG, see no sip-alg command on page 15-20.
PAGE 367
CHAPTER 16 Configuration - OSPF Mode The Router OSPF Configuration commands allow the user to configure the OSPF parameters. OSPF (Open Shortest Path First) is a protocol based on the link-states of routers within a network. OSPF supports hierarchical routing by segmenting a larger network into smaller more manageable networks called areas. Enter this sub-group with the (config)# router ospf command from the Configuration mode. The Router OSPF commands are represented by the (config-ospf)# prompt.
PAGE 368
Configuration - OSPF Mode area commands Note: For the following area commands, the first command that enters the area ID will set this parameter. The no area command will remove a specific area from the configuration. See the no area command on page 16-7. area authentication Use the Router OSPF area authentication command to enable authentication method (either message-digest or simple authentication) for an OSPF area. The default setting is no authentication.
PAGE 369
Configuration - OSPF Mode compatible rfc1583 Use the Router OSPF compatible rfc1583 command to restore the method used to calculate summary route costs per RFC 1583. To disable RFC 1583 compatibility, see the no compatible rfc1583 command on page 16-8. Syntax: (config-ospf)# compatible rfc1583 Example: (config-ospf)# compatible rfc1583 Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR Adit 3000 (Rel. 1.6) and MSR Card (Rel 2.
PAGE 370
Configuration - OSPF Mode do Use the do commands to run User and Privileged mode commands. The following are links to the User and Privileged do commands.
PAGE 371
Configuration - OSPF Mode end Use the end command to exit the current configuration mode, and must be used to mark the end of any configuration file. This command can be entered in any configuration mode with the same result. Syntax: (config-ospf)# end Example: (config-ospf)# end # Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR exit Use the exit command to close your current connection if you are in the User mode, or Privileged mode.
PAGE 372
Configuration - OSPF Mode network area Use the Router OSPF network area command to define the interfaces on which OSPF will run and set the ID for those interfaces. To disable OSPF routing for the interface defined, see no network area command on page 16-8. Syntax: (config-ospf)# network address wildcard-mask area area-id Field Definition address IP address wildcard-mask IP address-type mask that includes "don’t care" bits.
PAGE 373
Configuration - OSPF Mode no commands no area Use the Router OSPF no area command to remove a specific area from the OSPF configuration. To set an area, see the area commands command on page 16-2, or area stub command on page 16-2, the first use of either command will set the area. Syntax: (config-ospf)# no area area-id Field Definition area-id ID of area to be removed, in the form: area number - Range 0-4294967295 area IP address - IP address of the area.
PAGE 374
Configuration - OSPF Mode no compatible rfc1583 Use the Router OSPF no compatible rfc1583 command to disable RFC 1583 compatibility. To restore RFC 1583 compatibility, see compatible rfc1583 command on page 16-3 Syntax: (config-ospf)# no compatible rfc1583 Example: (config-ospf)# no compatible rfc1583 Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR no network area Use the Router OSPF no network area command to disable OSPF routing for the interface defined.
PAGE 375
Configuration - OSPF Mode router-id Use the Router OSPF router-id command to use a fixed router ID. To force OSPF to use the previous OSPF router ID behavior use the no form of this command, see no router-id command on page 16-8. Syntax: (config-ospf)# router-id address Field Definition address Router ID in IP address format. Example: (router-ospf)# router-id 10.1.1.1 Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR Adit 3000 (Rel. 1.6) and MSR Card (Rel 2.
PAGE 376
Configuration - OSPF Mode Sample Configuration Sample Configuration ospf router ospf no compatible rfc1583 router-id 192.168.3.251 network 192.168.3.0 0.0.0.255 area 0.0.0.1 interface ethernet 1 ip address 192.168.2.251 mask 255.255.255.0 description Ethernet 1 ip mtu auto no tos ip tos ip value 0x0 ip default-gateway 0.0.0.
PAGE 377
Configuration - OSPF Mode Sample Configuration ip ospf priority 2 exit interface ethernet 2 ip address 192.168.3.251 mask 255.255.255.0 description Ethernet 2 ip mtu auto ip default-gateway 192.168.3.
PAGE 378
Configuration - OSPF Mode Sample Configuration 16-12 Adit 3000 (Rel. 1.6) and MSR Card (Rel 2.
PAGE 379
CHAPTER 17 Configuration - PPTPC Mode The PPTPC Configuration commands allow the user to configure the VPN (Virtual Private Network) Point-to-Point Tunneling Protocol Client parameters. Enter this sub-group with the (config)# pptpc command from the Configuration mode. The VPN PPTPC commands are represented by the (config-pptpc-n)# prompt.
PAGE 380
Configuration - PPTPC Mode do Use the do commands to run User and Privileged mode commands. The following are links to the User and Privileged do commands.
PAGE 381
Configuration - PPTPC Mode end Use the end command to exit the current configuration mode, and must be used to mark the end of any configuration file. This command can be entered in any configuration mode with the same result. Syntax: (config-pptpc-{n})# end Example: (config-pptpc-1)# end # Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR exit Use the exit command to close your current connection if you are in the User mode, or Privileged mode.
PAGE 382
Configuration - PPTPC Mode history Use the history command to display commands that have been entered in this session. This command can be entered in any configuration mode.
PAGE 383
Configuration - PPTPC Mode ip address Use the PPTP Client ip address command to configure the IP address for the port. To remove an IP address, see no ip address command on page 17-13. Syntax: (config-pptpc-{n})# ip address {address mask mask|auto |unnumbered} [secondary] Field Definition address Enter an IP address to assign to the port. mask Enter a subnet mask for the IP address. auto Uses IPCP to assign an IP address. unnumbered Treat this as an un-numbered interface, as per RFC 1812.
PAGE 384
Configuration - PPTPC Mode ip ospf authentication Use the PPTP Client ip ospf authentication command to enable the authentication method (either message-digest or simple authentication) for this interface. To remove the authentication type for this interface set the parameter to null or see no ip ospf authentication command on page 17-13. Note: If an optional parameter is not entered, the authentication method of simple authentication is applied to the interface.
PAGE 385
Configuration - PPTPC Mode ip ospf authentication-key Use the PPTP Client ip ospf authentication-key command to assign a password to be used by neighboring routers, that are using OSPF’s simple password authentication.To remove a previously assigned password, see no ip ospf authentication-key command on page 17-14. Syntax: (config-pptpc-{n})# ip ospf authentication-key password Field Definition password Enter a password, with up to 8 characters.
PAGE 386
Configuration - PPTPC Mode ip ospf disable Use the PPTP Client ip ospf disable command to disable OSPF processing on this interface. To enable OSPF on this interface, see no ip ospf disable command on page 17-14.
PAGE 387
Configuration - PPTPC Mode ip ospf priority Use the PPTP Client ip ospf priority command to set the router priority, which determines the designated router for this network. To restore the default setting of priority 1, see no ip ospf priority command on page 17-15. Syntax: (config-pptpc-{n})# ip ospf priority priority Field Definition priority Enter an ID for this key. Range is 0-255.
PAGE 388
Configuration - PPTPC Mode ip primary-dns Use the PPTP Client ip primary-dns command to configure the primary DNS. To delete a primary DNS, see no ip primary-dns command on page 17-16. Syntax: (config-pptpc-{n})# ip primary-dns address Field Definition address Enter the IP address of the primary server. Example: (config-pptpc-1)# ip primary-dns 192.168.2.
PAGE 389
Configuration - PPTPC Mode ip rip send-version Use the PPTP Client ip rip send-version command to configure the send RIP messages on this interface. Syntax: (config-pptpc-{n})# ip rip send-version {1|2-bcast|2-mcast |none} Field Definition 1 Send RIP version 1. 2-bcast Send RIP version 2 - Broadcast. 2-mcast Send RIP version 2 - Multicast. none Set RIP version to none.
PAGE 390
Configuration - PPTPC Mode ip route-mode Use the PPTP Client ip route-mode command to configure the routing mode. Syntax: (config-pptpc-{n})# ip route-mode {napt|route} Field Definition napt Set to NAPT mode. Default. NAPT is used if doing private IPs on the Ethernet side or if you want to hide specific publics on the internal side. route Set to Route mode. Routing is used if public is visible on both sides.
PAGE 391
Configuration - PPTPC Mode no commands no firewall Use the PPTP Client no firewall command to disable the configured firewall. To enable the firewall, see firewall command on page 17-3. Syntax: (config-pptpc-{n})# no firewall Example: (config-pptpc-1)# no firewall Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR no ip address Use the PPTP Client no ip address command to remove the IP address assigned to the port. To set the Serial IP address, see ip address command on page 17-5.
PAGE 392
Configuration - PPTPC Mode no ip ospf authentication-key Use the PPTP Client no ip ospf authentication-key command to remove a password to be used by neighboring routers, that are using OSPF’s simple password authentication.To assign a password, see ip ospf authentication-key command on page 17-7.
PAGE 393
Configuration - PPTPC Mode no ip ospf hello-interval Use the PPTP Client no ip ospf hello-interval command to reset the interval of time to the default setting of the path cost to the default setting of 10 seconds. To define the interval of time between hello packets sent on the interface, see ip ospf hello-interval command on page 17-8.
PAGE 394
Configuration - PPTPC Mode no ip ospf retransmit-interval Use the PPTP Client ip ospf retransmit-interval command to restore the default value of 5 seconds. To define the interval of time between link state advertisement retransmissions for adjacencies belonging to the interface, see ip ospf retransmit-interval command on page 17-9.
PAGE 395
Configuration - PPTPC Mode no ip route Use the PPTP Client no ip route command remove an IP route. To add a route, see ip route command on page 17-11. Syntax: (config-pptpc-{n})# no ip route dest-ip-addr gateway Field Definition dest-ip-addr Enter destination IP address to remove. gateway Enter gateway IP address to remove. Example: (config-pptpc-1)# no ip route 192.168.100.200 192.168.100.
PAGE 396
Configuration - PPTPC Mode no ppp exec-timeout Use the PPTP Client no ppp exec-timeout command to disable PPP idle time. To set the PPP maximum idle time before hangup, see ppp exec-timeout command on page 17-21. Syntax: (config-pptpc-{n})# no ppp exec-timeout Example: (config-pptpc-1)# no ppp exec-timeout Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR no ppp on-demand Use the PPTP Client no ppp on-demand command to disable PPP on-demand.
PAGE 397
Configuration - PPTPC Mode no ppp time-btwn-reconnect Use the PPTP Client no ppp time-btwn-reconnect command to set the time between reconnect attempts to the default setting. To configure the time between reconnect attempts, see ppp timebtwn-reconnect command on page 17-22.
PAGE 398
Configuration - PPTPC Mode no sip-alg Use the PPTP Client no sip-alg command to disable SIP ALG on this interface. To enable SIP ALG, see sip-alg command on page 17-23. Syntax: (config-pptpc-{n})# no sip-alg Example: (config-pptpc-1)# no sip-alg Supported Platforms: Adit 3104, Adit 3500, MSR ppp authentication Use the PPTP Client ppp authentication command to configure the support of authentication types for the password. To disable PPP authentication, see no ppp authentication command on page 17-17.
PAGE 399
Configuration - PPTPC Mode ppp exec-timeout Use the PPTP Client ppp exec-timeout command to set the PPP maximum idle time before hangup.To disable PPP idle time, see no ppp exec-timeout command on page 17-18. Syntax: (config-pptpc-{n})# ppp exec-timeout minutes Field Definition minutes Range is 0 - 99999 minutes.
PAGE 400
Configuration - PPTPC Mode ppp restart-timer Use the PPTP Client ppp restart-timer command to configure the PPP restart timer. To reset to the default setting, see no ppp restart-timer command on page 17-18. Syntax: (config-pptpc-{n})# ppp restart-timer seconds Field Definition seconds Range is 1 - 65535 seconds. Default is 3 seconds.
PAGE 401
Configuration - PPTPC Mode schedule-availability Use the PPTP Client schedule-availability command to apply a schedule rule to this interface. To delete a schedule, see no schedule-availability command on page 17-19. Syntax: (config-pptpc-{n})# schedule-availability time-range scheduleid Field Definition schedule-id Enter an existing schedule rule name.
PAGE 402
Configuration - PPTPC Mode 17-24 Adit 3000 (Rel. 1.6) and MSR Card (Rel 2.
PAGE 403
CHAPTER 18 Configuration - PPTPS Mode The PPTP Server Configuration commands allow the user to configure the VPN (Virtual Private Network) Point-to Point Tunneling Protocol Server parameters. Enter this sub-group with the (config)# pptps command from the Configuration mode. The VPN PPTP Server commands are represented by the (config-pptps)# prompt.
PAGE 404
Configuration - PPTPS Mode do Use the do commands to run User and Privileged mode commands. The following are links to the User and Privileged do commands.
PAGE 405
Configuration - PPTPS Mode end Use the end command to exit the current configuration mode, and must be used to mark the end of any configuration file. This command can be entered in any configuration mode with the same result. Syntax: (config-pptps)# end Example: (config-pptps)# end # Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR end-address Use the PPTP Server end-address command to set the PPTP remote host IP address range end.
PAGE 406
Configuration - PPTPS Mode history Use the history command to display commands that have been entered in this session. This command can be entered in any configuration mode. Syntax: (config-pptps)# history Example: (config-pptps)# history ppp end-address 192.168.1.175 ppp encryption ppp authentication pap idle-time 99999 start-address 192.168.1.
PAGE 407
Configuration - PPTPS Mode no commands no idle-time Use the PPTP Server no idle-time command to reset the idle time to the default setting. To set the maximum idle time for a PPTP connection, see idle-time command on page 18-4. Syntax: (config-pptps)# no idle-time Example: (config-pptps)# no idle-time Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR no ppp authentication Use the PPTP Server no ppp authentication command to disable PPP authentication.
PAGE 408
Configuration - PPTPS Mode no shutdown Use the PPTP Server no shutdown command to set the admin state of the server up (in-service). To set the admin state of the server down (out-of-service), see shutdown command on page 18-7. Syntax: (config-pptps)# no shutdown Example: (config-pptps)# no shutdown Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR ppp authentication Use the PPTP Server ppp authentication command to configure the support of authentication types for the password.
PAGE 409
Configuration - PPTPS Mode shutdown Use the PPTP Server shutdown command to set the admin state of the server down (out-of-service). To set the admin state up (in-service), see no shutdown command on page 18-6. Syntax: (config-pptps)# shutdown Example: (config-pptps)# shutdown Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR start-address Use the PPTP Server start-address command to set the PPTP remote host IP address range start.
PAGE 410
Configuration - PPTPS Mode 18-8 Adit 3000 (Rel. 1.6) and MSR Card (Rel 2.
PAGE 411
CHAPTER 19 Configuration - RADIUS Mode The RADIUS Configuration commands allow the user to configure the RADIUS parameters for each interface. This sub-group is entered with the (config)# radius-client command from the Configuration mode. The RADIUS commands are represented by the (config-radius)# prompt.
PAGE 412
Configuration - RADIUS Mode authentication Use the RADIUS authentication command to set the RADIUS client authentication method. Syntax: (config-radius)# authentication {chap|ms-chap|ms-chapv2|pap} Field Definition chap CHAP - Challenge Handshake Authentication ms-chap MS-CHAP - Microsoft CHAP ms-chapv2 MS-CHAPv2 - Microsoft CHAP Version 2 pap PAP - Unencrypted Password.
PAGE 413
Configuration - RADIUS Mode do Use the do commands to run User and Privileged mode commands. The following are links to the User and Privileged do commands.
PAGE 414
Configuration - RADIUS Mode end Use the end command to exit the current configuration mode, and must be used to mark the end of any configuration file. This command can be entered in any configuration mode with the same result. Syntax: (config-radius)# end Example: (config-radius)# end # Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR exit Use the exit command to close your current connection if you are in the User mode, or Privileged mode.
PAGE 415
Configuration - RADIUS Mode host Use the RADIUS host command to set the RADIUS server IP address on the system. Syntax: (config-radius)# host address auth-port port Field Definition address Enter the IP address of the RADIUS server. port Enter the port number to use for RADIUS authentication. Range is 0 65535 with a default of 1812. Example: (config-radius)# host 192.168.1.
PAGE 416
Configuration - RADIUS Mode 19-6 Adit 3000 (Rel. 1.6) and MSR Card (Rel 2.
PAGE 417
CHAPTER 20 Configuration - VLAN Mode The VLAN Configuration commands allow the user to configure the global VLAN parameters. This sub-group is entered with the (config)# vlan command from the Configuration mode. The global VLAN commands are represented by the (config-vlan)# prompt.
PAGE 418
Configuration - VLAN Mode do Use the do commands to run User and Privileged mode commands. The following are links to the User and Privileged do commands.
PAGE 419
Configuration - VLAN Mode end Use the end command to exit the current configuration mode, and must be used to mark the end of any configuration file. This command can be entered in any configuration mode with the same result. Syntax: (config-vlan)# end Example: (config-vlan)# end # Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR exit Use the exit command to close your current connection if you are in the User mode, or Privileged mode.
PAGE 420
Configuration - VLAN Mode no commands no port-dot1q Use the VLAN no port-dot1q command to disable dot1q tagging for the port. By default, VLAN tagging is disabled on a LAN port. In this default state, if the port receives a VLAN tagged frame, it will ignore the VLAN header and will process the ingress frames as a regular Ethernet frame. The VLAN tag will not be altered. Note: Ingress port is a port receiving frames from a source external to the switch.
PAGE 421
Configuration - VLAN Mode port-dot1q Use the VLAN port-dot1q command to enable dot1q tagging for the port. If VLAN tagging is enabled on a port, the port will forward any untagged or priority tagged frames with a VID equal to the ingress port’s PVID and the priority of the tagged frame will remain unchanged. See the port-priority command, on page 20-5, to set the priority of the port. Note: Ingress port is a port receiving frames from a source external to the switch.
PAGE 422
Configuration - VLAN Mode port-protocol-filter Use the VLAN port-protocol-filter command to enable VLAN filtering for the port. Note: The vlan-feature command, on page 20-7, must be executed before this command. Syntax: (config-vlan)# port-protocol-filter {disable|enable} ethernet port Field Definition disable Disable VLAN filtering on defined Ethernet port. enable Enable VLAN filtering on defined Ethernet port. port Ethernet port in the form {port}.{sub-interface}. Adit 3104 and Adit 3200: 1.
PAGE 423
Configuration - VLAN Mode tag-all Use the VLAN tag-all command to enable dot1q tagging for all ports. If VLAN tagging is enabled on all ports, an ingress port should forward any untagged or priority tagged frames with a VID equal to the ingress port’s PVID and set the priority of the untagged frame to that of the ingress port. The priority of the tagged frame remain unchanged. See the port-priority command, on page 20-5, to set the priority of the port.
PAGE 424
Configuration - VLAN Mode 20-8 Adit 3000 (Rel. 1.6) and MSR Card (Rel 2.
PAGE 425
CHAPTER 21 Configuration - VLAN Port Mode The VLAN Port Configuration commands allow the user to configure the VLAN port parameters. This sub-group is entered with the (config)# vlan {vlan-id} command from the Configuration mode. The VLAN Port commands are represented by the (config-vlan-{n})# prompt.
PAGE 426
Configuration - VLAN Port Mode do Use the do commands to run User and Privileged mode commands. The following are links to the User and Privileged do commands.
PAGE 427
Configuration - VLAN Port Mode end Use the end command to exit the current configuration mode, and must be used to mark the end of any configuration file. This command can be entered in any configuration mode with the same result. Syntax: (config-vlan-{n})# end Example: (config-vlan-100)# end # Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR exit Use the exit command to close your current connection if you are in the User mode, or Privileged mode.
PAGE 428
Configuration - VLAN Port Mode no commands no port Use the VLAN no port command to remove this port’s membership from the VLAN. To set the preferences, see port command on page 21-4. Syntax: (config-vlan-{n})# no port ethernet port Field Definition port Ethernet port in the form {port}.{sub-interface}. Adit 3104 and Adit 3200: 1.1, 1.2, 1.3, 1.4, 2.1 Adit 3500 and MSR: 1.1 and 2.1 Example: (config-vlan-100)# no port ethernet 1.
PAGE 429
Configuration - VLAN Port Mode priority Use the VLAN priority command to set the VLAN priority level. Syntax: (config-vlan-{n})# priority priority Field Definition priority Set priority level. Range = 0 - 7. Example: (config-vlan-100)# priority 0 Supported Platforms: Adit 3104, Adit 3200, Adit 3500, MSR voip-interface Use the VLAN voip-interface command to set the VLAN tagging for the originating VoIP traffic.
PAGE 430
Configuration - VLAN Port Mode 21-6 Adit 3000 (Rel. 1.6) and MSR Card (Rel 2.
PAGE 431
CHAPTER 22 Configuration - Voice Port Mode The Voice Port Configuration commands allow the user to configure the Voice Port parameters. Enter this sub-group with the (config)# voice-port command from the Configuration mode. The Voice Port commands are represented by the (config-vport)# prompt. Note: There are two additional Voice Port groups (FXS-Chapter 23 and Trunk-Chapter 24), please see their respective chapters for information.
PAGE 432
Configuration - Voice Port Mode digit-map (global) Use the Voice Port digit-map global command to configure the Digit Map on a global level. To disable digit map, see no digit-map (global) command on page 22-5. Syntax: (config-vport)# digit-map mode {long-timeout seconds |pattern number pattern |short-timeout seconds} Field Definition long-timeout seconds Range is 4-60 seconds, with a default of 16. pattern number - Enter pattern number to modify. Range is 1-30.
PAGE 433
Configuration - Voice Port Mode do Use the do commands to run User and Privileged mode commands. The following are links to the User and Privileged do commands.
PAGE 434
Configuration - Voice Port Mode end Use the end command to exit the current configuration mode, and must be used to mark the end of any configuration file. This command can be entered in any configuration mode with the same result. Syntax: (config-vport)# end Example: (config-vport)# end # Supported Platforms: Adit 3104, Adit 3500, MSR exit Use the exit command to close your current connection if you are in the User mode, or Privileged mode.
PAGE 435
Configuration - Voice Port Mode no digit-map (global) Use the Voice Port no digit-map command to remove a digit map pattern. To configure digit map, see digit-map (global) command on page 22-2. Syntax: (config-vport)# no digit-map pattern number Field Definition pattern number Enter pattern number to remove. Range is 1-30. See show digit-map command on page 3-37, to display the current list of Digit Map numbers.
PAGE 436
Configuration - Voice Port Mode 22-6 Adit 3000 (Rel. 1.6) and MSR Card (Rel 2.
PAGE 437
CHAPTER 23 Configuration - Voice Port FXS Mode The Voice Port FXS Configuration commands allow the user to configure the Voice Port FXS parameters. Enter this sub-group with the (config)# voice-port fxs number command from the Configuration mode. The Voice Port FXS commands are represented by the (config-vport-fxs-{n})# prompt.
PAGE 438
Configuration - Voice Port FXS Mode comfort-noise Use the Voice Port FXS comfort-noise command to enable the comfort noise feature. To disable comfort noise, see no comfort-noise command on page 23-6. Syntax: (config-vport-fxs-{n})# comfort-noise enable Example: (config-vport-fxs-1)# comfort-noise enable Supported Platforms: Adit 3104, Adit 3500, MSR description Use the Voice Port FXS description command to change the description of the voice port.
PAGE 439
Configuration - Voice Port FXS Mode do Use the do commands to run User and Privileged mode commands. The following are links to the User and Privileged do commands.
PAGE 440
Configuration - Voice Port FXS Mode echo-cancel Use the Voice Port FXS echo-cancel command to enable Echo Cancellation on this trunk. To to disable Echo Cancellation, see no echo-cancel command on page 23-6 Syntax: (config-vport-fxs-{n})# echo-cancel enable Example: (config-vport-fxs-1)# echo-cancel enable Supported Platforms: Adit 3104, Adit 3500, MSR end Use the end command to exit the current configuration mode, and must be used to mark the end of any configuration file.
PAGE 441
Configuration - Voice Port FXS Mode history Use the history command to display commands that have been entered in this session. Syntax: (config-vport-fxs-{n})# history Example: (config-vport-fxs-1)# history description tests echo-cancel enable input-gain 4 output-gain 4 signal ground-start history Supported Platforms: Adit 3104, Adit 3500, MSR input-gain Use the Voice Port FXS input-gain command to set the gain on the receive side voice path for the specified voice channel(s).
PAGE 442
Configuration - Voice Port FXS Mode no commands no comfort-noise Use the Voice Port FXS no comfort-noise command to disable comfort noise. To enable remote access, see comfort-noise command on page 23-2. Syntax: (config-vport-fxs-{n})# no comfort-noise Example: (config-vport-fxs-1)# no comfort-noise Supported Platforms: Adit 3104, Adit 3500, MSR no echo-cancel Use the Voice Port FXS no echo-cancel command disable echo cancellation on this port.
PAGE 443
Configuration - Voice Port FXS Mode output-gain Use the Voice Port FXS output-gain command to set the gain on the transmit side voice path for the specified voice channel(s). Syntax: (config-vport-fxs-{n})# output-gain value Field Definition value Range -12 to +6dB. Default is 0. Example: (config-vport-fxs-1)# output-gain 4 Supported Platforms: Adit 3104, Adit 3500, MSR per-line-logging Use the Voice Port FXS per-line-logging command to enable the logging per line feature.
PAGE 444
Configuration - Voice Port FXS Mode signal Use the Voice Port FXS signal command to set the signaling protocol. Syntax: (config-vport-fxs-{n})# signal {ground-start|loop-start} Field Definition ground-start Sets the line to Ground Start signaling loop-start Sets the line to Loop Start signaling Example: (config-vport-fxs-1)# signal ground-start Supported Platforms: Adit 3104, Adit 3500, MSR 23-8 Adit 3000 (Rel. 1.6) and MSR Card (Rel 2.
PAGE 445
CHAPTER 24 Configuration - Voice Port Trunk Mode The Voice Port Trunk Configuration commands allow the user to configure the Voice Port Trunk parameters. Enter this sub-group with the (config)# voice-port trunk number command from the Configuration mode. Note: The Trunk option is not supported on the Adit 3104 or the Adit 3200. The Voice Port Trunk commands are represented by the (config-vport-trk-{n})# prompt.
PAGE 446
Configuration - Voice Port Trunk Mode comfort-noise Use the Voice Port Trunk comfort-noise command to enable the comfort noise feature. To disable this feature, see no comfort-noise command on page 24-8. Syntax: (config-vport-trk-{n})# comfort-noise enable Example: (config-vport-trk-1)# comfort-noise enable Supported Platforms: Adit 3500, MSR connection lcc Use the Voice Port Trunk connection lcc command to connect an MSR Link Cross Connect (LCC).
PAGE 447
Configuration - Voice Port Trunk Mode description Use the Voice Port Trunk description command to change the description of the trunk. Syntax: (config-vport-trk-{n})# description text Field Definition text Enter a description for the trunk, with a maximum of 64 characters. Example: (config-vport-trk-1)# description VoiceP-#4 Supported Platforms: Adit 3500, MSR digit-map Use the Voice Port Trunk digit-map command to configure the Digit Map on the trunk level.
PAGE 448
Configuration - Voice Port Trunk Mode do Use the do commands to run User and Privileged mode commands. The following are links to the User and Privileged do commands.
PAGE 449
Configuration - Voice Port Trunk Mode echo-cancel Use the Voice Port Trunk echo-cancel command to enable Echo Cancellation on this trunk. To disable Echo Cancellation, see no echo-cancel command on page 24-9. Syntax: (config-vport-trk-{n})# echo-cancel enable Example: (config-vport-trk-1)# echo-cancel enable Supported Platforms: Adit 3500, MSR end Use the end command to exit the current Configuration mode.
PAGE 450
Configuration - Voice Port Trunk Mode history Use the history command to display commands that have been entered in this session. Syntax: (config-vport-trk-1)# history Example: (config-vport-trk-1)# history exit description VoiceP-#1 digit-map mode custom history Supported Platforms: Adit 3500, MSR input-gain Use the Voice Port Trunk input-gain command to set the gain on the receive side voice path for the specified voice channel(s).
PAGE 451
Configuration - Voice Port Trunk Mode isdn switch-type (PRI) Use the Voice Port Trunk isdn switch-type command to configure the switching type (protocol) on this trunk. Note: Hunt sequence of the PRI is a Round-Robin type, and is not configurable. Syntax: (config-vport-trk-{n})# isdn switch-type {pri-dms100|pri-4ess |pri-5ess|pri-ni2} Field Definition pri-4ess PRI-4ess - The class 4 US AT&T proprietary version of ISDN.
PAGE 452
Configuration - Voice Port Trunk Mode no commands no comfort-noise Use the Voice Port Trunk no comfort-noise command to disable comfort noise. To enable remote access, see comfort-noise command on page 24-2. Syntax: (config-vport-trk-{n})# no comfort-noise Example: (config-vport-trk-1)# no comfort-noise Supported Platforms: Adit 3500, MSR no connection lcc Use the Voice Port Trunk no connection lcc command to remove a Link Cross Connection (LCC).
PAGE 453
Configuration - Voice Port Trunk Mode no digit-map Use the Voice Port Trunk no digit-map command to disable digit map on the trunk. To configure digit map, see digit-map command on page 24-3. Syntax: (config-vport-trk-{n})# no digit-map Example: (config-vport-trk-1)# no digit-map Supported Platforms: Adit 3500, MSR no echo-cancel Use the Voice Port Trunk no echo-cancel command disable echo cancellation on this port. To enable echo cancellation, see echo-cancel command on page 24-5.
PAGE 454
Configuration - Voice Port Trunk Mode no registration line Use the Voice Port Trunk no registration line command remove a registration line. To add a registration line, see registration line enable command on page 24-13. Syntax: (config-vport-trk-{n})# no registration line number Field Definition number Enter line number to Remove. Range 1 -300. Note: This line must be enabled for this command to be accepted.
PAGE 455
Configuration - Voice Port Trunk Mode output-gain Use the Voice Port Trunk output-gain command to set the gain on the transmit side voice path for the specified voice channel(s). Syntax: (config-vport-trk-{n})# output-gain value Field Definition value Range -12 to +6dB. Default is 0. Example: (config-vport-trk-1)# output-gain 6 Supported Platforms: Adit 3500, MSR Adit 3000 (Rel. 1.6) and MSR Card (Rel 2.
PAGE 456
Configuration - Voice Port Trunk Mode registration The registration command enables the user to Add, Edit, Remove, Enable, Disable PBX line number behind a voice trunk that will register to the SIP proxy. registration enable Use the Voice Port Trunk registration enable command to enable the Voice Port registration feature. To disable Voice Port registration, see no registration enable command on page 24-9.
PAGE 457
Configuration - Voice Port Trunk Mode registration line enable Use the Voice Port Trunk registration line enable command to enable registration. To disable registration, see no registration line enable command on page 24-10. Syntax: (config-vport-trk-{n})# registration line value line-numbers value enable Field Definition line value Enter the PBX line number to configure. Range is 1 - 300. line-numbers value Define the number of lines in this block that are going to be registered.
PAGE 458
Configuration - Voice Port Trunk Mode registration line logging Use the Voice Port Trunk registration line authentication command to enable logging on this line. To disable logging, see no registration line logging command on page 24-10. Syntax: (config-vport-trk-{n})# registration line value line-numbers value logging Field Definition line value Enter the PBX line number to configure. Range is 1 - 300. line-numbers value Define the number of lines in this block that is going to be registered.
PAGE 459
Configuration - Voice Port Trunk Mode trunk Use the Voice Port Trunk trunk command to set the Trunk ID. Syntax: (config-vport-trk-{n})# trunk trunk-id Field Definition trunk-id Enter a trunk ID. Maximum of 20 characters. Example: (config-vport-trk-1)# trunk VPtrunk1 Supported Platforms: Adit 3500, MSR Adit 3000 (Rel. 1.6) and MSR Card (Rel 2.
PAGE 460
Configuration - Voice Port Trunk Mode 24-16 Adit 3000 (Rel. 1.6) and MSR Card (Rel 2.
PAGE 461
CHAPTER 25 Configuration - Voice Service SIP Mode The Voice Service SIP Configuration commands allow the user to configure the Voice Trunk SIP parameters. Enter this sub-group with the (config)# voice-service sip command from the Configuration mode. The Voice Port commands are represented by the (config-voice-serv-sip)# prompt.
PAGE 462
Configuration - Voice Service SIP Mode calling-party-disc Use the Voice Service SIP calling-party-disc command to configure the call party disconnect feature. Syntax: (config-voice-serv-sip)# calling-party-disc duration Field Definition duration Range 500 - 3000 ms. Example: (config-voice-serv-sip)# calling-party-disc 600 Supported Platforms: Adit 3104, Adit 3500, MSR conference Use the Voice Service SIP conference command to enable the conference calling feature.
PAGE 463
Configuration - Voice Service SIP Mode do Use the do commands to run User and Privileged mode commands. The following are links to the User and Privileged do commands.
PAGE 464
Configuration - Voice Service SIP Mode dtmf Use the Voice Service SIP dtmf command to configure the DTMF events. Syntax: (config-voice-serv-sip)# dtmf {inband|rfc2833} Field Definition inband Configure the DTMF in-band, as part of the RTP packets. rfc2833 Configure the DTMF events out-of-band, as RTP event packets. Example: (config-voice-serv-sip)# dtmf inband Supported Platforms: Adit 3104, Adit 3500, MSR early-media Use the Voice Service SIP early-media command to configure the SIP early media.
PAGE 465
Configuration - Voice Service SIP Mode end Use the end command to exit the current configuration mode, and must be used to mark the end of any configuration file. This command can be entered in any configuration mode with the same result. Syntax: (config-voice-serv-sip)# end Example: (config-voice-serv-sip)# end # Supported Platforms: Adit 3104, Adit 3500, MSR exit Use the exit command to close your current connection if you are in the User mode, or Privileged mode.
PAGE 466
Configuration - Voice Service SIP Mode fax-protocol-t38 ecs Use the Voice Service SIP fax-protocol-t38 ecs command to configure the fax Error Correction Scheme parameter. Note: For the MSR, T.38 will be supported in a future release. Syntax: (config-voice-serv-sip)# fax-protocol-t38 ecs {none|redundant} Example: (config-voice-serv-sip)# fax-protocol-t38 ecs redundant Syntax Descriptions: Variable Definition none Set error correction to none. redundant Set error correction to redundant. Default.
PAGE 467
Configuration - Voice Service SIP Mode fax-protocol-t38 signaling Use the Voice Service SIP fax-protocol-t38 signaling command to configure fax signaling. Note: For the MSR, T.38 will be supported in a future release.
PAGE 468
Configuration - Voice Service SIP Mode gateway-ip Use the Voice Service SIP gateway-ip command to set the IP address to be used as the source IP for VoIP. Syntax: (config-voice-serv-sip)# gateway-ip address Field Definition address The IP address to be used as the source IP for VoIP services when it matches one of our up or running interfaces’ IP addresses, otherwise our VoIP source IP address is determined by the previous automatic algorithm. Example: (config-voice-serv-sip)# gateway-ip 10.10.2.
PAGE 469
Configuration - Voice Service SIP Mode no commands no conference Use the Voice Service SIP no conference command to disable the conference feature. To enable conference, see conference command on page 25-2. Syntax: (config-voice-serv-sip)# no conference Example: (config-voice-serv-sip)# no conference Supported Platforms: Adit 3104, Adit 3500, MSR no outbound-proxy Use the Voice Service SIP no outbound-proxy command to disable the outbound proxy.
PAGE 470
Configuration - Voice Service SIP Mode no redundancy filter-incoming Use the Voice Service SIP no redundancy-filter-incoming command to disable the incoming redundancy filter. To enable filter, see redundancy filter-incoming command on page 25-14.
PAGE 471
Configuration - Voice Service SIP Mode outbound-proxy Use the Voice Service SIP outbound-proxy command to configure the SIP outbound proxy. To disable outbound proxy, see no outbound-proxy command on page 25-9. Syntax: (config-voice-serv-sip)# outbound-proxy {hostname hostname| ip-address address} Field Definition hostname Enter the host name of the outbound proxy. address Enter the IP address of the outbound proxy. Example: (config-voice-serv-sip)# outbound-proxy ip-address 192.168.1.
PAGE 472
Configuration - Voice Service SIP Mode privacy-mode Use the Voice Service SIP privacy-mode command to configure the SIP privacy mode. Syntax: (config-voice-serv-sip)# privacy-mode {none|rfc3325} Field Definition none Disables the Privacy Mode. Default is None. rfc3325 Enables support for RFC 3325, as supported on the Sylantro Application Server.
PAGE 473
Configuration - Voice Service SIP Mode proxy-type Use the Voice Service SIP proxy-type command to configure the SIP proxy type. Syntax: (config-voice-serv-sip)# proxy-type {broadsoft-info|generic| sylantro} Field Definition broadsoft-info Sets the SIP proxy type to BroadSoft. generic Sets the SIP proxy type to generic. sylantro Sets the SIP proxy type to Sylantro.
PAGE 474
Configuration - Voice Service SIP Mode redundancy advance-timeout Use the Voice Service SIP redundancy advance-timeout command to set the interval of time before moving onto the next proxy, when the first is not reachable. Syntax: (config-voice-serv-sip)# redundancy advance-timeout number Field Definition number Range 0 - 10 seconds, with a default of 2.
PAGE 475
Configuration - Voice Service SIP Mode redundancy rollback-timer Use the Voice Service SIP redundancy rollback-timer command to set the interval of time between the time the primary proxy fails, and when a rollback is performed back to the primary proxy. To disable rollback timer, see no redundancy rollback-timer command on page 25-10. Syntax: (config-voice-serv-sip)# redundancy rollback-timer number Field Definition number Range 60 - 3600 seconds, or 0 (disabled), with a default of 300 (5 min).
PAGE 476
Configuration - Voice Service SIP Mode redundancy ttl Use the Voice Service SIP redundancy ttl command to set the set the SRV Time To Live (TTL) option. The TTL is a set interval of time between flushing the SRV cache. Syntax: (config-voice-serv-sip)# redundancy ttl seconds Field Definition seconds Range 0 - 3600 seconds, with a default of 3600.
PAGE 477
Configuration - Voice Service SIP Mode registration Use the Voice Service SIP registration command to configure the SIP registration, which allows trunk registration for each user of a PBX. To disable ignore negotiated registration timeout, see no registration ignore-negotiated command on page 25-10.
PAGE 478
Configuration - Voice Service SIP Mode session-timer session-timer mode Use the Voice Service SIP session-timer mode command to configure the timer mode. To disable the timer mode, see no session-timer mode command on page 25-10. Syntax: (config-voice-serv-sip)# session-timer mode {requested|supported} Field Definition requested System shall initiate Session Timer procedures in outgoing initial INVITE’s by including a Session-Expires header.
PAGE 479
Configuration - Voice Service SIP Mode session-timer timeout Use the Voice Service SIP session-timer timeout command to configure the interval of idle time to pass before timeout. Syntax: (config-voice-serv-sip)# session-timer timeout seconds Field Definition seconds Range 90 - 7200 seconds, with a default of 1800.
PAGE 480
Configuration - Voice Service SIP Mode 25-20 Adit 3000 (Rel. 1.6) and MSR Card (Rel 2.
PAGE 481
INDEX Index A access lan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-4 access wan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-4 access-control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-4 access-list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-5 add user . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-63 aggressive-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 482
Index domain-name . . . . . . . . . . . . . . . . . . . . . . . . . . host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ipsec . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ipsec authentication-retries . . . . . . . . . . . . . . . . ipsec key generate key . . . . . . . . . . . . . . . . . . . ipsec log ike . . . . . . . . . . . . . . . . . . . . . . . . . . . ipsec log ipsec . . . . . . . . . . . . . . . . . . . . . . . . . . ipsec vpn_ipsec . . . . . . . . .
PAGE 483
Index snmp-server community . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-60 enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-60 host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-61 traps enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-61 trusted-ip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-61 static-dns . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-62 time-range . . . . . . . . . . . .
PAGE 484
Index ip ospf authentication . . . . . . . . . . . . . . . . . . . . . . . . . . 11-9 authentication-key . . . . . . . . . . . . . . . . . . . . . 11-10 cost . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-10 dead-interval . . . . . . . . . . . . . . . . . . . . . . . . . . 11-10 disable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-11 hello-interval . . . . . . . . . . . . . . . . . . . . . . . . . . 11-11 message-digest-key . . . . . . . . . . . . . . . . . . . . .
PAGE 485
Index Configuration-L2TPC do commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-2 end . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-3 exit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-3 firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-3 history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15-4 host-ip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 486
Index ip primary-dns . . . . . . . . . . . . . . . . . . . . . . . . . . . ip rip enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ip rip receive-version . . . . . . . . . . . . . . . . . . . . . ip rip send-version . . . . . . . . . . . . . . . . . . . . . . . . ip route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ip route-mode . . . . . . . . . . . . . . . . . . . . . . . . . . . ip secondary-dns . . . . . . . . . . . . . . . . . . . . . . . . . metric . . . . . . . .
PAGE 487
Index authentication . . . . . . . . . . . . . . . . . . . . . . . 17-13 authentication-key . . . . . . . . . . . . . . . . . . . . 17-14 cost . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17-14 dead-interval . . . . . . . . . . . . . . . . . . . . . . . . 17-14 disable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17-14 hello-interval . . . . . . . . . . . . . . . . . . . . . . . . 17-15 message-digest-key . . . . . . . . . . . . . . . . . . . 17-15 priority . . . . . . . . . .
PAGE 488
Index authentication-key . . . . . . . . . . . . . . . . . . . 13-15 cost . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-16 dead-interval . . . . . . . . . . . . . . . . . . . . . . . . 13-16 disable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-16 hello-interval . . . . . . . . . . . . . . . . . . . . . . . 13-16 message-digest-key . . . . . . . . . . . . . . . . . . 13-17 priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-17 retransmit-interval . . . . .
PAGE 489
Index no comfort-noise . . . . . . . . . . . . . . . . . . . . . . . . . . . 23-6 echo-cancel . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23-6 per-line-logging . . . . . . . . . . . . . . . . . . . . . . . . . 23-6 shutdown . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23-6 output-gain . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23-7 per-line-logging . . . . . . . . . . . . . . . . . . . . . . . . . . . 23-7 shutdown . . . . . . . . . . . . . . . . . . . . . . .
PAGE 490
Index date (clock) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-2, 3-4 debug . . . . . . . . 3-5, 3-6, 3-7, 3-8, 3-9, 3-10, 3-11, 3-12 delete local-server . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-10 description . 5-2, 6-2, 11-2, 12-2, 13-2, 14-2, 23-2, 24-3 destination-pattern . . . . . . . . . . . . . . . . . . . .8-3, 9-2, 10-2 dial-peer pots fxs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-11 trunk . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 491
Index ip rip enable . . . . . . . . . . . . . . . . 11-14, 13-11, 15-10, 17-10 receive-version . . . . . . . . . 11-14, 13-11, 15-10, 17-10 send-version . . . . . . . . . . . . . . . . . 11-14, 15-11, 17-11 ip rip enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-11 ip rip receive-version . . . . . . . . . . . . . . . . . . . . . . . . 12-11 ip rip send-version . . . . . . . . . . . . . . . . . . . . . . . . . . 12-12 ip rip"send-version . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 492
Index fxs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-38 trunk . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-38 voip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-39 digit-map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24-9 digit-map (global) . . . . . . . . . . . . . . . . . . . . . . . . . 22-5 dmz-host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-39 dpd-delay . . . . . . . . . . . . . . . . . . .
PAGE 493
Index session-timer mode . . . . . . . . . . . . . . . . . . . . . . . 25-10 set-pfs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14-15 shutdown . . . . 5-5, 6-10, 11-22, 12-20, 13-20, 15-20, 17-19, 18-6, 23-6 sip-alg . . . . . . . . . 11-22, 12-20, 13-20, 15-20, 17-20 sip-authentication . . . . . . . . . . . . . . . . . . . . . . . 8-9, 9-6 snmp-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-50 snmp-server traps . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 494
Index access-list . . . . . . . . . . . . . . . . . . . . . . . . . . . controller t1 . . . . . . . . . . . . . . . . . . . . . . . . . dmz-host . . . . . . . . . . . . . . . . . . . . . . . . . . . . host-filter . . . . . . . . . . . . . . . . . . . . . . . . . . . interface ethernet . . . . . . . . . . . . . . . . . . . . . . . . . . . multilink . . . . . . . . . . . . . . . . . . . . . . . . . . serial . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ip dhcp ethernet . . . . . . . . . . . . . .
PAGE 495
Index refresher . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25-18 timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25-19 set-pfs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14-19 show . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-6, 3-19 alarms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-7, 3-20 arp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-8, 3-21 caclkcd . . . . .
PAGE 496
Index U upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-67 User Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-1 date (clock) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-2 enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-2 end . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-2 exit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-3 help . .