Router User Manual

ManualsBrandsPanasonic ManualsNetwork RouterNN46240-501

Nortel Secure Router 8000 Series

Configuration Guide - Basic

Configuration

Release:

Document Revision:

5.3

01.01

www.nortel.com

NN46240-501 324555-A Rev01

Summary of content (237 pages)

PAGE 1
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration Release: Document Revision: 5.3 01.01 www.nortel.
PAGE 2
Nortel Secure Router 8000 Series Release: 5.3 Publication: NN46240-501 Document Revision: 01.01 Document status: Standard Document release date: 30 March 2009 Copyright © 2009 Nortel Networks All Rights Reserved.
PAGE 3
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration Contents About this document .......................................................................................................................1 1 Product overview........................................................................................................................1-1 1.1 Introduction ...............................................................................................................................
PAGE 4
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 2.3 Establishing the configuration environment through Telnet........................................................................2-4 2.3.1 Establishing the configuration task ...................................................................................................2-4 2.3.2 Establishing the physical connection.................................................................................................2-5 2.3.
PAGE 5
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 4.2 Configuring the basic system environment .................................................................................................4-2 4.2.1 Establishing the configuration task ...................................................................................................4-2 4.2.2 Configuring the device name ............................................................................................................
PAGE 6
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 5.4.6 Configuring the local user priority ..................................................................................................5-17 5.4.7 Configuring the access restriction of the local user.........................................................................5-17 5.4.8 Checking the configuration .............................................................................................................5-17 5.
PAGE 7
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 7.5 Comparing configuration files.....................................................................................................................7-4 8 FTP, TFTP, and Xmodem ..........................................................................................................8-1 8.1 Introduction ...................................................................................................................................
PAGE 8
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 8.8.2 Example of configuring FTP ACL ..................................................................................................8-17 8.8.3 Example of configuring the FTP client ...........................................................................................8-19 8.8.4 Example of configuring TFTP.........................................................................................................8-20 8.8.
PAGE 9
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 10.3.3 Restarting the router ......................................................................................................................10-5 10.3.4 Performing the master/slave switchover........................................................................................10-6 10.4 Monitoring the router status .................................................................................................................
PAGE 10
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 12.6 Removing the RPU patch ........................................................................................................................12-7 12.6.1 Establishing the configuration task ...............................................................................................12-7 12.6.2 Deleting the RPU patch................................................................................................................
PAGE 11
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration Figures Figure 1-1 Architecture.....................................................................................................................................1-3 Figure 2-1 Networking diagram of logging on through the console port .........................................................2-8 Figure 2-2 New connection ................................................................................................................
PAGE 12
PAGE 13
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration Tables Table 1-1 System service features.....................................................................................................................1-3 Table 3-1 Command line views ........................................................................................................................3-5 Table 3-2 Common CLI error messages ......................................................................................
PAGE 14
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration Contents About this document .......................................................................................................................1 Issue 5.3 (30 March 2009) Nortel Networks Inc.
PAGE 15
PAGE 16
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration About this document About this document Overview This section describes the organization of this document, product version, intended audience, conventions, and update history. Related versions The following table lists the product versions related to this document.
PAGE 17
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration About this document Chapter Content 3 CLI overview This chapter describes the command line interface (CLI), command levels, command views, and hot keys. 4 Basic configuration This chapter describes how to configure the basic system environment on the router. 5 User management This chapter describes the basic concepts of the user interface and user management.
PAGE 18
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration Symbol About this document Description Indicates a hazard with a medium or low level of risk that, if not avoided, can result in minor or moderate injury. Indicates a potentially hazardous situation that, if not avoided, can cause equipment damage, data loss, and performance degradation, or unexpected results. Indicates a tip that may help you solve a problem or save time.
PAGE 19
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration About this document Convention Description &<1-n> The parameter before the ampersand sign (&) can be repeated 1 to n times. # A line starting with the number sign (#) contains comments. GUI conventions Convention Description Boldface Buttons, menus, parameters, tabs, windows, and dialog box titles are in boldface. For example, click OK.
PAGE 20
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration About this document Update history Updates between document versions are cumulative. Therefore, the latest document version contains all updates made to previous versions. Updates in Issue 01(2008-06-06) This is the first release of this document. Issue 5.3 (30 March 2009) Nortel Networks Inc.
PAGE 21
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration Contents 1 Product overview........................................................................................................................1-1 1.1 Introduction ...................................................................................................................................................1-2 1.1.1 Secure Router 8000 Series .....................................................................................
PAGE 22
PAGE 23
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration Figures Figure 1-1 Architecture ......................................................................................................................................1-3 Issue 5.3 (30 March 2009) Nortel Networks Inc.
PAGE 24
PAGE 25
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration Tables Table 1-1 System service features ......................................................................................................................1-3 Issue 5.3 (30 March 2009) Nortel Networks Inc.
PAGE 26
PAGE 27
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 1 Product overview 1 Product overview About this chapter The following table shows the contents of this chapter. Section Description 1.1 Introduction This section describes the characteristics of the Secure Router 8000 Series. 1.2 Functional features This section describes the functional features of the Secure Router 8000 Series. 1.3 Functions This section describes the main functions of the Secure Router 8000 Series.
PAGE 28
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 1 Product overview 1.1 Introduction This section describes the characteristics of the Secure Router 8000 Series: z Secure Router 8000 Series z Architecture z Versatile Routing Platform 1.1.1 Secure Router 8000 Series The Secure Router 8000 Series routers are grouped into SR8002, SR8004, SR8008, and SR8012 routers based on the number of slots. The equipment structure and the system of the SR8012 are similar to the SR8008.
PAGE 29
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 1 Product overview Figure 1-1 Architecture Service Control Plane(SCP) Protocol Client AAA/Local-MCM Data Forwarding Plane(DFP) FE API FEC FE DRV FE General Control Plane(GCP) System Manage Plane(SMP) Routing VPN Config Management URP4/6 MRP4/6 VPN_ExTE_Ex RM4/6 L2VPN/L3VPN CLI/SNMP/WebUI CMO IP Stack CSPF/CR-LDP/ RSVP-TE MPLS Application Layer Socket Layer TCP4/6 UDP4/6 IP4/6 ICMP4/6 Security FireWall/ACL/ NAT Net
PAGE 30
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 1 Product overview Service features Description Link layer protocol PPP and MP HDLC (High-level Data Link Control) Frame Relay ATM PPPoE, IPoA, PPPoA, and PPPoEoA Network protocol IP service ARP Domain name resolution NAT IP unnumbered address DHCP relay and DHCP server IP policy-based routing IP packet filtering Protocol stacks IPv4 and IPv6 dual protocol stacks IPv4 routing Static route management IPv6 forwarding throug
PAGE 31
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 1 Product overview Service features Description VPN L2VPN MPLS L2VPN (Martini, Kompella, CCC and SVC) VPLS L2TP PWE3 Single- and multi-hop PWs in LDP mode Static PW, dynamic PW, and RSVP-PW LSP, GRE, and TE tunnels Pseudo wire templates Interconnection with different media PW QoS Encapsulation modes: Ethernet, VLAN, FR, PPP, HDLC, ATM-n-to-1, ATM-1-to-1, and ATM-SDU Multi-hop LDP-PW loop detection PWE3 inter-AS Interworking b
PAGE 32
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 1 Product overview Service features Description NetStream Making a NetStream flow with a septet, including the source IP address, destination IP address, source port number, destination port number, IP protocol type, IP TOS, and ingress information Recording and measuring traffic information Routing and peer entity information: next-hop address, source AS number, destination AS number, source address mask, destination address mas
PAGE 33
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration Service features 1 Product overview Description Other security features Terminal access security IP packet filtering (interface-based ACL and time-range based ACL) Firewall (packet filtering firewall and state firewall) Port mirroring Unicast Reverse Path Forwarding (URPF) Hierarchical protection of commands to ensure that unauthorized users have no access to the router Device reliability Redundancy hot backup 1:1 backup of RP
PAGE 34
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 1 Product overview Service features Description QoS Traffic classification Simple traffic classification Traffic policing and shaping Traffic policing and shaping based on srTCM and trTCM Complex traffic classification, based on the port number and Layer 2, Layer 3, and Layer 4 packet information Services such as EF and AF based on Diff-Serv GTS 1-8 Congestion management LLS, LLQ, NLS, PQ, CQ, WFQ, and CBWFQ Congestion
PAGE 35
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 1 Product overview Service features Description Configuration management Command line interface Local configuration through the console port Local configuration or remote configuration through the AUX port Local configuration or remote configuration through Telnet Local configuration or remote configuration through SSH logon Hierarchical command protection to prevent unauthorized users from accessing the router Detailed debuggi
PAGE 36
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 1 Product overview z File system z SNMP configuration z Terminal services z High Availability z Link layer protocols z IP services z Multicast routing protocols z VPN services z QoS z Security features 1.3.
PAGE 37
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 1 Product overview Telnet service The Secure Router 8000 Series supports the Telnet server and Telnet client services. You can log on to a specified router port from your PC by running the Telnet client, and then initiate communication with the device connecting to the asynchronous serial port of the router. You can use this method to remotely configure and maintain the device.
PAGE 38
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 1 Product overview Graceful Restart Graceful Restart (GR) is a key technology for providing HA. Network administrators or faults can trigger GR. GR due to network faults does not delete the routing information in the routing or forwarding table or reset the LPU, so services are not interrupted. The Secure Router 8000 Series supports system-based GR and protocol-based GR.
PAGE 39
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 1 Product overview Flexible IP address configuration The Secure Router 8000 Series provides rich applications based on IP address: z Support for multiple secondary IP addresses: Each interface can be configured with a primary IP address and several subordinate IP addresses to connect to different subnets. This improves networking efficiency.
PAGE 40
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 1 Product overview z varying routing policies and sharing of routes discovered by both static and dynamic routing protocols In networking practice, the routing table is always large, while the memory of the router is limited. To resolve this issue, the Secure Router 8000 Series provides a size control mechanism for routing tables.
PAGE 41
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 1 Product overview z accelerated packet forwarding z MPLS VPN applications, interworking between various types of VPNs, and networking applications such as traffic engineering, QoS, and Diff-Serv The Secure Router 8000 Series MPLS function supports Layer 3 and Layer 2 protocols such as IP, FR, ATM, and Ethernet.
PAGE 42
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 1 Product overview Traffic policing The Secure Router 8000 Series supports parameters such as the committed rate, the peak rate, the committed burst size, and the maximum burst size for every type of flow according to the Service Level Agreements (SLA). For traffic beyond the SLA, the router can pass or drop the flow.
PAGE 43
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 1 Product overview Hierarchical QoS Hierarchical QoS (HQoS) is a QoS technology that can control traffic and perform queue scheduling simultaneously on the basis of the user’s priority. HQoS uses a two-level scheduling mode: z Priority Queue (PQ) z Confirmed Bandwidth Priority Queue (CBPQ) HQoS supports complete traffic statistics.
PAGE 44
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration Contents 2 Configuration environment setup ..........................................................................................2-1 2.1 Introduction ...................................................................................................................................................2-2 2.1.1 Console port configuration...................................................................................................
PAGE 45
PAGE 46
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration Figures Figure 2-1 Networking diagram of logging on through the console port ...........................................................2-8 Figure 2-2 New connection ................................................................................................................................2-8 Figure 2-3 Setting the port...............................................................................................................
PAGE 47
PAGE 48
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 2 2 Configuration environment setup Configuration environment setup About this chapter The following table shows the contents of this chapter. Section Description 2.1 Introduction This section describes the three methods for establishing the configuration environment. 2.
PAGE 49
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 2 Configuration environment setup 2.1 Introduction This section describes the following three methods for establishing the configuration environment: z Console port configuration z Telnet configuration z AUX port configuration 2.1.1 Console port configuration Applicable environment You can configure the router by local logon.
PAGE 50
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 2 Configuration environment setup NOTE If you modify the IP address of the router when you configure the router through Telnet, the modification can disconnect Telnet. If necessary, set up the connection again after you enter a new IP address. 2.1.3 AUX port configuration Applicable environment You can configure the router by remote logon.
PAGE 51
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 2 Configuration environment setup Configuration procedures No. Procedure 1 Establishing the physical connection 2 Configuring terminals 3 Logging on to the router 2.2.2 Establishing the physical connection Do as follows on the router: Step 1 Connect the COM port on the PC and the console port on the router by cable. Step 2 Power on all devices to perform a self-check. ----End 2.2.
PAGE 52
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 2 Configuration environment setup Data preparation To configure the router through Telnet, you need the following data. No. Data 1 IP address of the PC 2 IP address of the Ethernet interface on the router 3 User information accessed through Telnet (including the user name, password, and authentication mode) Configuration procedures No.
PAGE 53
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 2 Configuration environment setup 2.4 Establishing the configuration environment through the AUX port 2.4.1 Establishing the configuration task Applicable environment If you cannot configure the router by local logon and no reachable route to other routers exists, connect the serial port of the PC and the AUX port of the router through the modem.
PAGE 54
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 2 Configuration environment setup 2.4.3 Initializing and configuring the modem on the interface Do as follows on the router: Step 1 Configure the authentication mode of logon users. Step 2 Configure the authority limitation of logon users. For more information, see Nortel Secure Router 8000 Series Configuration – Security (NN46240-600). ----End 2.4.
PAGE 55
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 2 Configuration environment setup Figure 2-1 Networking diagram of logging on through the console port PC Router Configuration roadmap z Connect the PC and the router through the console port. z Configure the parameters on the PC end. z Log on to the router.
PAGE 56
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 2 Configuration environment setup Figure 2-3 Setting the port Figure 2-4 Setting the port communication parameters Power on the router to perform a self-check. The system performs automatic configuration. When the self-check finishes, you are prompted to press Enter until a command line prompt such as Nortel appears. Issue 5.3 (30 March 2009) Nortel Networks Inc.
PAGE 57
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 2 Configuration environment setup Enter the command to check the running status of the router or configure the router, or enter ? for help. For more information, see the following chapters in this document. ----End 2.5.2 Example of logging on through Telnet Networking requirements You can log on to the router on other network segments through the PC or other terminals to perform remote maintenance.
PAGE 58
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 2 Configuration environment setup [Nortel-aaa] local-user nortel password cipher test2 [Nortel-aaa] local-user nortel service-type telnet [Nortel-aaa] local-user nortel level 3 [Nortel-aaa] quit [Nortel] user-interface vty 0 4 [Nortel-ui-vty0-14] authentication-mode aaa Step 3 Configure the client logging on to the router. Run Telnet on the PC, as shown in Figure 2-6.
PAGE 59
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 2 Configuration environment setup Configuration roadmap z Establish the physical connection. z Configure modem parameters. z Configure the AUX port to support modem dial-up. Data preparation z type of terminals z terminal communication parameters z modem communication parameters Configuration procedure Step 1 Establish the physical connection as shown in Figure 2-7.
PAGE 60
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration Contents 3 CLI overview...............................................................................................................................3-1 3.1 Introduction ...................................................................................................................................................3-2 3.1.1 CLI characteristics ........................................................................................
PAGE 61
PAGE 62
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration Tables Table 3-1 Command line views ..........................................................................................................................3-5 Table 3-2 Common CLI error messages .............................................................................................................3-8 Table 3-3 Access the command history ........................................................................................
PAGE 63
PAGE 64
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 3 CLI overview 3 CLI overview About this chapter The following table shows the contents of this chapter. Section Description 3.1 Introduction This section describes the basic concepts of the command line interface (CLI). 3.2 Configuring the command line view This section describes the command view. 3.3 CLI online Help This section describes how to use the CLI online Help. 3.
PAGE 65
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 3 CLI overview 3.1 Introduction This section describes the concepts you should know before you configure the command line interface (CLI). z CLI characteristics z Command levels z Command line views z Regular expressions 3.1.1 CLI characteristics The appearance of a command line prompt indicates entry to the CLI. Users can configure and manage routers by entering a series of configuration commands in the CLI.
PAGE 66
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 3 CLI overview NOTE z The system supports commands with a maximum of 256 characters. The command can be in an incomplete form. z The system saves an incomplete command to the configuration files in the complete form; therefore, the command may have more than 256 characters. However, when the system is restarted, the incomplete command cannot be restored, so note the length of incomplete commands. 3.1.
PAGE 67
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 3 CLI overview You can also specify the filtering mode when the information is displayed on the screen. If a large amount of information is output and displayed on the screen, you can specify the filtering mode in the prompt ---- More ----. z /regular-expression: Displays information that begins with the line that matches regular expression.
PAGE 68
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 3 CLI overview Table 3-1 Command line views View Description aaa AAA view aaa-accounting AAA accounting view aaa-authen AAA authentication view aaa-author AAA authorization view aaa-domain AAA domain view aaa-recording AAA recording view acl-adv Advanced ACL view acl-basic Basic ACL view acl-if ACL view based on interface aspf-policy ASPF policy view Atm ATM interface view Atm-class ATM view Atm-pvc ATM P
PAGE 69
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 3 CLI overview 3-6 View Description ipsec-policy-isakmp IPSec policy Isakmp view ipsec-policy-manual IPSec policy manual view ipsec-policy-template IPSec policy template view ipsec-proposal IPSec view isis IS-IS view l2tp Layer 2 TP view loopback Loopback interface view mp-group Mp-group interface view mpls MPLS view mpls-l2vpn MPLS-Layer 2 VPN view mpls-ldp MPLS-LDP view null Null interface view ospf OS
PAGE 70
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 3 CLI overview View Description virtual-ethernet Virtual Ethernet interface view virtual-template Virtual template interface view vpn-instance VPN instance view 3.3 CLI online Help The CLI provides two online Help systems: full help and partial help. You can obtain help in these systems as follows: z Full help # Enter ? in any command line view to display all the commands and their simple descriptions.
PAGE 71
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 3 CLI overview 3.4 CLI error messages If a user enters incorrect commands, the grammar check fails and the CLI reports error messages to the user. If all of the commands are correct, the grammar check passes. Table 3-2 describes common error messages. Table 3-2 Common CLI error messages Error messages Cause of the error Unrecognized command The command cannot be found. The key word cannot be found.
PAGE 72
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 3 CLI overview z The saved history commands are the same as those entered by users. For example, if the user enters an incomplete command, the saved command is also incomplete. z If the user runs the same command several times, the earliest command is saved. If the command is entered in different forms, each form is considered a different command.
PAGE 73
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 3 CLI overview z When the information displayed exceeds a full screen, the CLI provides a pause function. Table 3-5 describes the three display functions. Table 3-5 Display functions Key Function Ctrl+C Stops the display and running of the command. Space Continues to display the information on the next screen. Enter Continues to display the information on the next line. 3.8 Outputting the display 3.8.
PAGE 74
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 3 CLI overview Metacharacter Connotation * Characters on the left of this metacharacter appear 0 or many times continuously in the target object. + Characters on the left of this metacharacter appear 1 or many times continuously in the target object. | An OR relationship exists between characters on the left and right of this metacharacter.
PAGE 75
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 3 CLI overview NOTE Different terminal software programs define these keys differently. Therefore, the shortcut keys on the terminal may be different from those listed in this section. Table 3-7 System-defined shortcut keys 3-12 Key Function CTRL_A The cursor moves to the beginning of the current line. CTRL_B The cursor moves to the left one character space. CTRL_C Terminates the running function.
PAGE 76
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 3 CLI overview Key Function ESC_SHIFT_< Sets the position of the cursor to the beginning of the clipboard. ESC_SHIFT_< Sets the position of the cursor to the end of the clipboard. 3.10.2 Defining shortcut keys NOTE When you define shortcut keys, use double quotation marks to define the command if it contains several command words (that is, spaces exist in the command). Configure shortcut keys as follows in the system view.
PAGE 77
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 3 CLI overview 3.11 Configuration examples 3.11.1 Example for using shortcut keys Defining shortcut keys Step 1 Associate Ctrl_G with the display ip routing-table command and run the shortcut keys. system-view [Nortel] hotkey ctrl_g display ip routing-table Step 2 Press Ctrl+G when the prompt Nortel appears.
PAGE 78
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration Contents 4 Basic configuration ....................................................................................................................4-1 4.1 Introduction ...................................................................................................................................................4-2 4.1.1 Extension of command levels ...................................................................................
PAGE 79
PAGE 80
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 4 Basic configuration 4 Basic configuration About this chapter The following table shows the contents of this chapter. Section Description 4.1 Introduction This section provides an introduction to basic configuration. 4.2 Configuring the basic system environment This section describes how to configure the basic system environment on the router. Issue 5.3 (30 March 2009) Nortel Networks Inc.
PAGE 81
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 4 Basic configuration 4.1 Introduction Before you configure the services, you need to configure the basic system environment, including the system name and system time. 4.1.1 Extension of command levels By default, the product supports command levels 0 to 3, which correspond to visit, monitoring, configuration, and management respectively.
PAGE 82
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 4 Basic configuration Data preparation To configure the basic system environment, you need the following data. No. Data 1 Language mode 2 System time 3 Host name 4 Password for switching user levels 5 Command level 6 Logon information Configuration procedures No.
PAGE 83
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 4 Basic configuration You can change the name of the router that appears in the command prompt. 4.2.3 Configuring the system clock Do as follows on the router: Step 1 Run: clock datetime HH:MM:SS YYYY-MM-DD This command configures the Universal Time Coordinate (UTC) standard time. Step 2 Run: clock timezone time-zone-name { add | minus } offset This command configures the time zone.
PAGE 84
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 4 Basic configuration Header text is the prompt displayed by the system when users connect to the router, log on, or begin configuration. Configure the header text to provide detailed information. 4.2.5 Configuring the password for switching user levels z When simple password is used, the password is saved in the configuration files in simple text.
PAGE 85
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 4 Basic configuration NOTE When a logon user of a lower level switches to a higher level through super, the system automatically sends trap messages and records the switchover in the log. When the user switches to a lower level, the system only records the switchover in the log. 4.2.7 Locking the user interface Do as follows on the router: Run: lock This command locks the user interface.
PAGE 86
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 4 Basic configuration The following sections show only the system display commands. For information about display commands for protocols and interfaces, see the related sections in this document. You can run the following commands in all views. Commands displaying system configuration Run the following commands as required: z display version: displays the system edition. z display clock: displays the system time.
PAGE 87
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration Contents 5 User management.......................................................................................................................5-1 5.1 Introduction ...................................................................................................................................................5-2 5.1.1 User interface view .............................................................................................
PAGE 88
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 5.4.7 Configuring the access restriction of the local user ...........................................................................5-17 5.4.8 Checking the configuration................................................................................................................5-18 5.5 Configuration examples ..........................................................................................................................
PAGE 89
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration Tables Table 5-1 Examples of absolute numbering........................................................................................................5-2 Issue 5.3 (30 March 2009) Nortel Networks Inc.
PAGE 90
PAGE 91
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 5 User management 5 User management About this chapter The following table shows the contents of this chapter. Section Description 5.1 Introduction This section describes the basic concepts of the user interface and user management. 5.2 Configuring a user interface This section describes how to configure and manage the physical and logical interfaces in asynchronous interactive mode. 5.
PAGE 92
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 5 User management 5.1 Introduction This section describes the concepts you need to know before you configure user management: z User interface view z User management 5.1.1 User interface view The user interface view is a command line view that you can use to configure and manage all the physical and logical interfaces in asynchronous mode.
PAGE 93
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 5 User management Absolute number User interface 34 The first virtual interface (VTY0) 35 The second virtual interface (VTY1) 36 The third virtual interface (VTY2) 37 The fourth virtual interface (VTY3) 38 The fifth virtual interface (VTY4) NOTE For different types of devices, the absolute numbers of the AUX interface and the VTY interface may vary. The numbers from 1 to 32 are reserved for TTY user interfaces.
PAGE 94
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 5 User management A user can access commands with a level equal to or lower than the user’s level. For example, if the user level is 2, the user can access commands with the level 0, 1, or 2. A user with the level 3 can access all the commands. NOTE For information about command levels, see Chapter 3, “CLI Overview.” User authentication After user configuration, the system authenticates users when they access the router.
PAGE 95
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 5 User management Preconfiguration tasks Before you configure a user interface, complete the following tasks: z Power on the router. z Connect the PC with the router. Data preparation To configure a user interface, you need the following data. No.
PAGE 96
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 5 User management NOTE You can configure one or more user interfaces simultaneously in any view. 5.2.2 Transmitting messages between user interfaces Do as follows on the router that the user logs on to: Run: send { all | ui-number | ui-type ui-number1 } The message is transmitted between the user interfaces. 5.2.
PAGE 97
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 5 User management By default, the data bit is 8. ----End 5.2.4 Setting terminal attributes Do as follows on the router that the user logs on to: Step 1 Run: system-view The system view appears. Step 2 Run: user-interface [ ui-type ] first-ui-number [ last-ui-number ] The user interface view appears. Step 3 Run: Shell The terminal service starts.
PAGE 98
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 5 User management Step 3 Run: user privilege level level This command configures the priority of the user interface. ----End 5.2.6 Configuring modem attributes Do as follows on the router that the user logs on to: Step 1 Run: system-view The system view appears. Step 2 Run: user-interface aux 0 The user interface view appears.
PAGE 99
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 5 User management Step 1 Run: system-view The system view appears. Step 2 Run: user-interface aux 0 The user interface view appears. Step 3 Run: auto-execute command command This command configures the auto-execute command. ----End 5.2.8 Configuring the redirection function Do as follows on the router that the user logs on to: Step 1 Run: system-view The system view appears.
PAGE 100
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 5 User management Step 3 Run: acl acl-number { inbound | outbound } This command configures the call-in and call-out restrictions of the VTY user interface. ----End 5.2.10 Configuring the maximum number of VTY user interfaces Do as follows on the router that the user logs on to: Step 1 Run: system-view The system view appears.
PAGE 101
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 5 User management Step 2 Run: user-interface [ ui-type ] first-ui-number [ last-ui-number ] The user interface view appears. Step 3 Run: authorization-cmd timeout timeout-value This command configures the authorization and authentication timeout for the command line. ----End The Secure Router 8000 Series supports HWTACACS command line authentication based on the logon user level or the name of the SSH user.
PAGE 102
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 5 User management 5.3 Configuring user management 5.3.1 Establishing the configuration task Applicable environment This section describes how to configure user priority and authentication. Remote users can log on to the router to access networks through Telnet or establish a PPP connection with the router, if the router is configured with the IP address of the MCU or that of the interface board.
PAGE 103
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 5 User management system-view The system view appears. Step 2 Run: user-interface [ ui-type ] first-ui-number [ last-ui-number ] The user interface view appears. Step 3 Run: authentication-mode { simple | cipher } This command configures the user password authentication mode. ----End 5.3.
PAGE 104
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 5 User management Step 3 Run: set authentication password { cipher | simple } password This command configures the password for local authentication. Step 4 Run: system-view The system view appears. Step 5 Run: aaa The AAA view appears. Step 6 Run: local-user user-name password { simple | cipher } password This command configures the local user name and password. ----End 5.3.
PAGE 105
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 5 User management Data preparation To configure local user management, you need the following data. No. Data 1 User name and password 2 Service type of the local user 3 FTP directory of the local user 4 The status of the local user 5 The maximum number of local users Configuration procedures No.
PAGE 106
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 5 User management 5.4.3 Configuring the service type of the local user Do as follows on the broadband access router: Step 1 Run: system-view The system view appears. Step 2 Run: aaa The AAA view appears. Step 3 Run: local-user user-name service-type { ftp | ppp | ssh | telnet | terminal } * This command configures the service type of the local user.
PAGE 107
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 5 User management Step 2 Run: aaa The AAA view appears. Step 3 Run: local-user user-name state { active | block } This command configures the local user status. ----End 5.4.6 Configuring the local user priority Do as follows on the broadband access router: Step 1 Run: system-view The system view appears. Step 2 Run: aaa The AAA view appears.
PAGE 108
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 5 User management 5.4.8 Checking the configuration Run the following command to check the previous configuration. Action Command Check the attributes of the local user. display local-user [ domain domain-name | user-name user-name ] 5.5 Configuration examples After you complete the following two configuration examples, the current user VTY0 cannot run commands at levels higher than 2.
PAGE 109
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 5 User management Configuration procedure system-view [Nortel] user-interface vty 0 [Nortel-ui-vty0] user privilege level 2 [Nortel-ui-vty0] authentication-mode password [Nortel-ui-vty0] set authentication password simple nortel [Nortel-ui-vty0] idle-timeout 30 # Use the display this command to check all configurations.
PAGE 110
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 5 User management Configure the priority of VTY0 to 2, and perform AAA authentication on the user that logs on through VTY 0. The logon user must enter the user name Nortel and the password Nortel. After logon, if the user does not operate the router within 30 minutes, the connection with the router is disabled. Configuration roadmap 1.
PAGE 111
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration Contents 6 File system management ..........................................................................................................6-1 6.1 Introduction ...................................................................................................................................................6-2 6.1.1 File system ..........................................................................................................
PAGE 112
PAGE 113
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 6 File system management 6 File system management About this chapter The following table shows the contents of this chapter. Section Description 6.1 Introduction This section provides an overview of file system concepts. 6.2 Managing directories This section describes how to configure directory management. 6.3 Managing files This section describes how to configure file management. 6.
PAGE 114
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 6 File system management 6.1 Introduction This section describes the concepts that you need to know before you configure a file system: z File system z Storage devices z Files z Directories 6.1.1 File system The file system manages the files and directories in the storage devices. It can create, delete, modify, and rename a file or directory and display the contents of a file.
PAGE 115
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 6 File system management Data preparation To configure a file system, you need the following data. No. Data 1 Name of the directory to create 2 Name of the directory to delete Configuration procedures No. Procedure 1 Viewing the current directory 2 Switching the directory 3 Displaying the files in a directory 4 Creating a directory 5 Deleting a directory 6.2.
PAGE 116
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 6 File system management 6.2.4 Displaying the files in a directory Step 1 Enter the user view. Step 2 Run: cd directory This command displays the specified directory. Step 3 Run: dir [ /all ] [ filename ] This command displays the file list in the directory. By default, the dir command displays only the file information for the current directory. ----End 6.2.
PAGE 117
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 6 File system management 6.3 Managing files Applicable environment Configure the file system to transfer files between the client and the server. Preconfiguration tasks Before you configure the file system, complete the following tasks: z Power on the router. z Connect the client with the server. Data preparation To configure a file system, you need the following data. No.
PAGE 118
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 6 File system management Step 3 Run: more filename This command displays the file contents. ----End 6.3.2 Copying a file Do as follows on the router: Step 1 Enter the user view. Step 2 Run: cd directory This command displays the file directory. Step 3 Run: copy source-filename destination-filename This command copies the file. ----End The length of the file must exceed 0 (zero) bytes; otherwise, the file cannot be copied. 6.
PAGE 119
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 6 File system management This command displays the file directory. Step 3 Run: rename source-filename destination-filename This command renames the file. ----End 6.3.5 Deleting a file Do as follows on the router: Step 1 Enter the user view. Step 2 Run: cd directory This command displays the file directory. Step 3 Run: delete [ /unreserved ] filename This command deletes the file. ----End 6.3.
PAGE 120
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 6 File system management 6.4 Configuring batch configuration Applicable environment You can run established batched files to perform fixed tasks automatically. Preconfiguration tasks Before you configure the batch process, complete the following tasks: z Power on the router. z Log on to the router. z Upload the batched files on the client end to the router.
PAGE 121
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration z 6 File system management Log on to the router at the client end. Data preparation To configure storage devices, you need the following data. No. Data 1 Device name Configuration procedure Do as follows on the router: Step 1 Enter the user view. Step 2 Run: format device-name This command formats the storage device. Step 3 Run: fixdisk device-name This command fixes the storage device of the faulty file system. ----End 6.
PAGE 122
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 6 File system management Data preparation To configure the prompt mode, you need the following data. No. Data 1 Name of the command Configuration procedure Do as follows on the router: Step 1 Enter the user view. Step 2 Run: system-view The system view appears. Step 3 Run: file prompt { alert | quiet } This command configures the prompt mode of the file system. ----End 6.
PAGE 123
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 6 File system management Directory of flash:/ 0 -rw- 1 -rw- 35260 Mar 24 2006 10:46:09 28 Jan 19 2007 11:18:14 2 -rw- 98776 Jan 19 2007 11:18:46 3 -rw- 540 Jul 18 2006 11:43:03 4 -rw- 21614652 Jan 13 2007 18:04:42 5 -rw- 0 Dec 08 2006 15:03:59 private-data.txt exception.dat matnlog.dat vrpcfg.zip SR8012V2R5.bin patchnpstate.dat 63881 KB total (21753 KB free) Step 2 Copy files from flash:/log.
PAGE 124
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration Contents 7 Configuration file management..............................................................................................7-1 7.1 Introduction ...................................................................................................................................................7-2 7.1.1 Configuration file..........................................................................................................
PAGE 125
PAGE 126
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 7 7 Configuration file management Configuration file management About this chapter The following table shows the contents of this chapter. Section Description 7.1 Introduction This section describes the basic concepts of the configuration file. 7.2 Displaying the configuration of the router This section describes how to display the router configuration. 7.
PAGE 127
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 7 Configuration file management 7.1 Introduction This section provides an overview of configuration file concepts. 7.1.1 Configuration file Configuration files are configuration items uploaded at the current startup or next startup of the router. The configuration file is a text file in the following format: z It is saved in the command format. z To save space, default parameters are not saved.
PAGE 128
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 7 Configuration file management Run: display saved-configuration [ last ] The initial configuration of the router is displayed. Using the display saved-configuration last command, you can view the configuration files saved during in the previous startup. That is, the configuration files of the current startup are displayed. 7.2.
PAGE 129
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 7 Configuration file management 7.5 Comparing configuration files Do as follows on the router: Run: compare configuration [ line-number1 line-number2 ] This command compares the current configuration to the contents of the configuration file saved on the storage device. 7-4 Nortel Networks Inc. Issue 5.
PAGE 130
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration Contents 8 FTP, TFTP, and Xmodem ..........................................................................................................8-1 8.1 Introduction ...................................................................................................................................................8-5 8.1.1 FTP ...................................................................................................................
PAGE 131
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 8.6.1 Establishing the configuration task ....................................................................................................8-19 8.6.2 Configuring the basic ACL ................................................................................................................8-20 8.6.3 Configuring the basic TFTP ACL ......................................................................................................
PAGE 132
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration Figures Figure 8-1 Using FTP to download files ..........................................................................................................8-22 Figure 8-2 FTP ACL.........................................................................................................................................8-24 Figure 8-3 Configuring the FTP client ................................................................................
PAGE 133
PAGE 134
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 8 FTP, TFTP, and Xmodem 8 FTP, TFTP, and Xmodem About this chapter The following table shows the contents of this chapter. Section Description 8.2 Introduction This section describes basic concepts of File Transfer Protocol (FTP), Trivial File Transfer Protocol (TFTP), and Xmodem. 8.3 Configuring the router to be the FTP server This section describes how to configure the basic functions of the FTP server. 8.
PAGE 135
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 8 FTP, TFTP, and Xmodem Section Description 8.1.1 8.4.6 Checking the Configuration This section describes how to configure a router as an FTP client and log on to the FTP server. Run the following commands to check the preceding configuration. Action Command Check the configuration and running information about the FTP server. display ftp-server After configuring the FTP server, run the display ftp-server command.
PAGE 136
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration Section 8 FTP, TFTP, and Xmodem Description 8.1.2 8.6.2 Configuring the source address of TFTP Client This section describes how to limit client access to the TFTP router. Do as follows on the router that serves as the TFTP server: Step 1 Run: system-view The system view is displayed.
PAGE 137
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 8 FTP, TFTP, and Xmodem 8-4 Section Description 8.8 Configuring Xmodem This section describes how to transfer files through Xmodem. 8.9 Configuration examples This section provides examples for configuring FTP, TFTP, and Xmodem. Nortel Networks Inc. Issue 5.
PAGE 138
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 8 FTP, TFTP, and Xmodem 8.2 Introduction This section describes basic FTP, TFTP, and Xmodem concepts. 8.2.1 FTP File Transfer Protocol (FTP) is an application layer protocol in the TCP/IP protocol suite. It implements file transfer between remote hosts based on corresponding file systems. The router provides the following FTP services: z FTP server service.
PAGE 139
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 8 FTP, TFTP, and Xmodem z If the check fails, the receiving program sends the deny character and the sending program retransmits the packet. The Secure Router 8000 Series provides the Xmodem receiving program function, which can be applied to the AUX port and supports 128-byte packets and CRC. The Xmodem sending program function is automatically included in HyperTerminal.
PAGE 140
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration No. 8 FTP, TFTP, and Xmodem Procedure 2 8.3.2 Configuring the source address of FTP server Do as follows on the router that serves as the FTP server: Step 1 Run: system-view The system view is displayed. Step 2 Run: ftp server-source {-a source-ip-address | -i { interface-name | interface-type interface-num } } The source address of FTP server is started.
PAGE 141
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 8 FTP, TFTP, and Xmodem ftp server enable This command enables the FTP server. ----End 8.3.5 Configuring the timeout period Do as follows on the router that serves as the FTP server: Step 1 Run: system-view The system view appears. Step 2 Run: ftp timeout minutes This command configures the timeout time of the FTP server. ----End 8.3.
PAGE 142
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 8 FTP, TFTP, and Xmodem This command configures the FTP service type. Step 3 Run: local-user user-name ftp-directory directory This command configures the authorized directory of the FTP user. ----End 8.3.8 Checking the configuration Run the following commands to check the previous configuration. Action Command Check the configuration and running information of the FTP server. display ftp-server Check the FTP logon user.
PAGE 143
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 8 FTP, TFTP, and Xmodem z Power on the router. z Connect the FTP client with the server. Data preparation To configure FTP, you need the following data. No. Data 1 FTP user name and password 2 The file directory authorized to the FTP user 3 The timeout time of the FTP server Configuration procedures No. Procedure 1 Enabling the FTP server 2 8.4.
PAGE 144
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 8 FTP, TFTP, and Xmodem ftp server enable This command enables the FTP server. ----End 8.4.4 Configuring the basic ACL Do as follows on the router that serves as the FTP server: Step 1 Run: system-view The system view appears. Step 2 Run: acl acl-number The ACL view appears.
PAGE 145
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 8 FTP, TFTP, and Xmodem Action Command Check the configuration and running information about the FTP server. display ftp-server After configuring the FTP server, run the display ftp-server command. You can view that the FTP ACL is 2345. display ftp-server FTP server is running Max user number 5 User count 1 Timeout value(in minute) 30 Acl Number 2345 8.5 Configuring the router to be the FTP client 8.5.
PAGE 146
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration No. 8 FTP, TFTP, and Xmodem Procedure 2 8.5.2 Configuring the source address of FTP Client Do as follows on the router that serves as the FTP server: Step 1 Run: system-view The system view is displayed. Step 2 Run: ftp client-source {-a source-ip-address | -i { interface-name | interface-type interface-num }} The source address of FTP client is started.
PAGE 147
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 8 FTP, TFTP, and Xmodem 8.5.4 Logging on to the FTP server Perform the following steps, as required, on the router that serves as the client. In different views, the connection methods for the FTP server vary. z In the user view, run: ftp [-a source-ip-address | -i { interface-name | interface-type interface-num } ] [ host [ port-number ] ] [ vpn-instance vpn-instance-name ] This command connects the router to the FTP server.
PAGE 148
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 8 FTP, TFTP, and Xmodem 8.5.7 Uploading or downloading files Do as follows on the router that serves as the client: Step 1 Run: ftp [-a source-ip-address | -i { interface-name | interface-type interface-num } ] [ host [ port-number ] ] [ vpn-instance vpn-instance-name ] The router is connected to the FTP server, and the FTP client view appears. Step 2 Perform the following steps, as required.
PAGE 149
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 8 FTP, TFTP, and Xmodem z Run: rmdir remote-directory This command deletes a directory on the FTP server. ----End 8.5.9 Managing files Do as follows on the router that serves as the client: Step 1 Run: ftp [-a source-ip-address | -i { interface-name | interface-type interface-num } ] [ host [ port-number ] ] [ vpn-instance vpn-instance-name ] This command connects the router to the FTP server.
PAGE 150
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 8 FTP, TFTP, and Xmodem 8.5.11 Disconnecting FTP Perform the following steps, as required, on the router that serves as the client: z To disconnect the FTP connection and return to the user view, run: bye or quit This command disconnects the remote FTP connection. z To disconnect the FTP connection and return to the FTP view, run: disconnect or close 8.5.
PAGE 151
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 8 FTP, TFTP, and Xmodem No. Data 2 Name of the specific file in the TFTP server 3 File directory 4 ACL number Configuration procedures No. Procedure 1 Configuring the source address of TFTP Client 2 Downloading Files Through TFTP 3 Uploading Files Through TFTP 8.6.
PAGE 152
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 8 FTP, TFTP, and Xmodem ----End 8.6.4 Uploading Files Through TFTP Do as follows on the router that serves as the TFTP client: Step 1 Run the following commands according to different type of the server IP addresses.
PAGE 153
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 8 FTP, TFTP, and Xmodem No. Procedure 2 Configuring the basic TFTP ACL 8.7.2 Configuring the basic ACL Do as follows on the router that serves as the TFTP client: Step 1 Run: system-view The system view appears. Step 2 Run: acl acl-number The ACL view appears.
PAGE 154
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 8 FTP, TFTP, and Xmodem 8.8 Configuring Xmodem 8.8.1 Establishing the configuration task Applicable environment Configure Xmodem to transfer files through serial interfaces. Preconfiguration tasks Before you configure Xmodem, complete the following tasks: z Power on the router. z Connect the router and the PC through an AUX port or a console port.
PAGE 155
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 8 FTP, TFTP, and Xmodem NOTE z Before you retrieve the file, confirm the path and name of the file. z For filename, an absolute path name is required. z If the filename value is similar to an existing file name, the system sends a prompt asking you whether to overwrite. 8.9 Configuration examples 8.9.1 Example of configuring the FTP server Networking requirements As shown in Figure 8-1, the IP address of the FTP server is 172.
PAGE 156
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 8 FTP, TFTP, and Xmodem [Server] ftp timeout 30 [Server] aaa [Server -aaa] local-user nortel password simple nortel Step 2 Configure the authorization mode and directory of the FTP user on the FTP server. [Server -aaa] local-user nortel service-type ftp [Server -aaa] local-user nortel ftp-directory flash: [Server -aaa] quit Step 3 Assign an IP address to the FTP server.
PAGE 157
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 8 FTP, TFTP, and Xmodem local-user nortel ftp-directory flash:/ftp/system authentication-scheme default # authorization-scheme default # accounting-scheme default # domain default # Return 8.9.2 Example of configuring FTP ACL Networking requirements As shown in Figure 8-2, the IP address of the FTP server is 172.16.104.110/24. At the client side, PC1, PC2, and the FTP server are reachable.
PAGE 158
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 8 FTP, TFTP, and Xmodem Step 2 Configure the basic ACL. system-view [Nortel] acl 2001 [Nortel-acl-basic-2001]rule permit source 172.16.104.111 0.0.0.255 [Nortel-acl-basic-2001]quit Step 3 Configure the basic FTP ACL. [nortel]ftp acl 2001 Step 4 Connect to the FTP server from PC1. c:\ ftp 172.16.104.110 Connected to 172.16.104.110 220 FTP service ready. User (100.2.150.
PAGE 159
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 8 FTP, TFTP, and Xmodem 8.9.3 Example of configuring the FTP client Networking requirements As shown in Figure 8-3, the router that serves as the FTP client can access the FTP server and download system software and configuration software from the FTP server. Figure 8-3 Configuring the FTP client GE2/0/0 IP Network Router Server 172.16.105.111/24 172.16.104.
PAGE 160
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 8 FTP, TFTP, and Xmodem [ftp] get vrpv5r3d031.cc [ftp] quit ----End 8.9.4 Example of configuring TFTP Networking requirements As shown in Figure 8-4, the IP address of the TFTP server is 10.111.16.160/24. Log on to the router from the HyperTerminal and then download the file vrp.cc from the TFTP server. Figure 8-4 Using TFTP to download files TFTP Server 10.111.16.160/24 Quidw ay PC Configuration roadmap 1.
PAGE 161
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 8 FTP, TFTP, and Xmodem Figure 8-5 Setting the base directory of the TFTP server NOTE The interface may be different depending on the TFTP server software used by the computer. Step 2 Log on to the router through the HyperTerminal and enter the following command to download files. tftp 10.111.16.160 get vrp.cc flash:/vrp.cc Step 3 Check the configuration.
PAGE 162
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 8 FTP, TFTP, and Xmodem 8.9.5 Example of configuring XModem Networking requirements The router is connected with the PC through the AUX port. Log on to the router through the AUX port to receive files from the AUX port and save the received packets to flash memory. Configuration roadmap 1. Run the HyperTerminal on the PC and log on to the router. 2. Use the xmodem command to download the files on the router. 3.
PAGE 163
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 8 FTP, TFTP, and Xmodem available! ---- ******* ---Proceed?[Y/N]y Destination filename [flash:/ test.txt]? Before press ENTER you must choose 'YES' or 'NO'[Y/N]:y Download with XMODEM protocol.... CCCCC After the system indicates that the file transmission is successful, you can view the flash memory directory.
PAGE 164
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration Contents 9 Telnet and SSH...........................................................................................................................9-1 9.1 Introduction ...................................................................................................................................................9-2 9.1.1 Overview of user logon........................................................................................
PAGE 165
PAGE 166
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration Figures Figure 9-1 Telnet client services.........................................................................................................................9-3 Figure 9-2 Telnet redirection services ................................................................................................................9-3 Figure 9-3 Usage of Telnet shortcut keys ..........................................................................
PAGE 167
PAGE 168
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 9 Telnet and SSH 9 Telnet and SSH About this chapter The following table lists the contents of this chapter. Section Describes 9.1 Introduction This section describes the basic concepts of user logon through Telnet and Secure Shell (SSH). 9.2 Configuring Telnet terminal services This section describes how to log on to a router through Telnet and configure the router. 9.
PAGE 169
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 9 Telnet and SSH 9.1 Introduction This section provides an overview of the concepts that you need to know before you configure Telnet and Secure Shell (SSH): z Overview of user logon z Telnet terminal services z SSH terminal services 9.1.
PAGE 170
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 9 Telnet and SSH Figure 9-1 Telnet client services Telnet Session 1 Telnet Session 2 Telnet Server z RouterB RouterA PC Redirection terminal services: You can run the Telnet client program on a PC to log on to the router through a specified interface. Then, connect with the serial interface devices that are connected with the asynchronous interface of the router, as shown in Figure 9-2.
PAGE 171
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 9 Telnet and SSH Ctrl_]: The server interrupts the connection. If the network connection is normal, when you press Ctrl+], the Telnet server interrupts the current Telnet connection. For example: (Press to return to the prompt of RouterB. Note: The max number of VTY users is 5, and the current number of VTY users on line is 0.
PAGE 172
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 9 Telnet and SSH Figure 9-4 Establishing an SSH channel in a LAN WorkStation Router Ethernet 100BASE-TX Server LapTop PC PC running SSH client Figure 9-5 Establishing an SSH channel in a WAN Local LAN Remote LAN WAN Router SSH router PC run SSH client PC Setup process for SSH connections This section describes the process for setting up SSH connections.
PAGE 173
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 9 Telnet and SSH In this way, the server and the client have the same session keys to guarantee session security. z Negotiating authentication mode After the session key is calculated, the server must authenticate the client. The client sends identity information to the server. If nonauthentication mode is configured on the server, a session request is performed.
PAGE 174
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 9 Telnet and SSH Data preparation To configure Telnet terminal services, you need the following data. No. Data 1 IP address of the router 2 VPN instance name 3 IPv4/IPv6 address or host name of the remote router 4 Number of the TCP port that provides Telnet services on the remote router 5 Timeout period of the user interface Configuration procedures No.
PAGE 175
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 9 Telnet and SSH Step 1 Run: system-view The system view appears. Step 2 Run: user-interface [ ui-type ] first-ui-number [ last-ui-number ] The user interface view appears. Step 3 Run: idle-timeout minutes [ seconds ] This command enables the scheduled Telnet disconnection. ----End 9.2.4 Checking the configuration Run the following commands to check the previous configuration.
PAGE 176
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 9 Telnet and SSH Preconfiguration tasks Before you configure SSH terminal services, complete the following tasks: z Power on the router. z Connect the router with the PC. z Configure a reachable route between the PC and the router. Data preparation To configure SSH terminal services, you need the following data. No.
PAGE 177
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 9 Telnet and SSH The system view appears. Step 2 Run: user-interface [ vty ] first-ui-number [ last-ui-number ] This command displays the VTY user interface. Step 3 Run: authentication-mode aaa This command configures AAA authentication mode. Step 4 Run: protocol inbound ssh This command configures SSH for VTY. ----End NOTE Configure the authentication mode for the VTY user interface to AAA.
PAGE 178
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 9 Telnet and SSH This command configures password authentication for the SSH client. Step 3 Run: ssh authentication-type default password This command configures the default password authentication for the SSH client. ----End 9.3.5 Authenticating the SSH client through RSA Do as follows on the logon router: Step 1 Run: system-view The system view appears.
PAGE 179
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 9 Telnet and SSH NOTE In the public key editing view, you can send the RSA public key generated on the client software that supports SSH1.5 to the server. Copy and paste the RSA public key to the router that serves as the SSH server. 9.3.6 Configuring basic authentication information for the SSH user Do as follows on the logon router: Step 1 Run: system-view The system view appears.
PAGE 180
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 9 Telnet and SSH Action Command Check information about an SSH user. display ssh user-information [ user-name ] 9.4 Maintaining Telnet and SSH This section describes the following topics: z Debugging Telnet terminal services z Debugging SSH terminal services 9.4.1 Debugging Telnet terminal services When a Telnet fault occurs, run the following debugging command in the user view to locate the fault.
PAGE 181
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 9 Telnet and SSH Debugging SSH Debugging affects the performance of the system. After you debug SSH, run the undo debugging all command to disable debugging. When a fault occurs, run the debugging command in the user view to locate the fault. For information about displaying debugging information, see Nortel Secure Router 8000 SeriesConfiguration - System Management (NN46240-601).
PAGE 182
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 9 Telnet and SSH Data preparation To complete the configuration, you need the following data: z host address of Router B z authentication mode and password Configuration procedure Step 1 Configure the IP address. # Configure Router A. system-view [RouterA] interface gigabitethernet1/0/0 [RouterA-GigabitEthernet1/0/0] ip address 1.1.1.1 24 # Configure Router B.
PAGE 183
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 9 Telnet and SSH # sysname RouterB # user-interface vty 0 4 set authentication password simple 123456 # return 9.5.2 Example of configuring password authentication Networking requirements z The SSH client must establish a local connection with the router. The terminal runs the client software that supports SSH1.5. z The user interface supports only SSH. z SSH Client001 logs on to the router in password authentication mode.
PAGE 184
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 9 Telnet and SSH ......++++++++ Step 2 Generate the SSH client. NOTE If password authentication mode is configured for SSH users, you must configure the same local user name. # Configure the VTY user interface.
PAGE 185
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 9 Telnet and SSH z Run the client software that supports SSH1.5 on the terminal. z Configure the user name of the logon user to client002 and RSA authentication. z Assign the public key nortel002 to the logon user. z The user interface supports only SSH. Figure 9-9 Networking diagram of RSA SSH Client002 GE1/0/0 1.1.1.
PAGE 186
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 9 Telnet and SSH Step 3 Configure the RSA public key. # Generate the RSA public key on the client software that supports SSH1.5. NOTE For details, see the related documentation for the client software. # Send the RSA public key generated on the client software that supports SSH1.5 to the server. [Nortel] rsa peer-public-key nortel002 Enter "RSA public key" view, return system view with "peer-public-key end".
PAGE 187
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 9 Telnet and SSH BB94B8AA 49DF27C5 55BFE5A1 9762B975 0203 010001 # Display the RSA public key of the client.
PAGE 188
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 9 Telnet and SSH ip address 1.1.1.1 255.255.255.
PAGE 189
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration Contents 10 Router maintenance...............................................................................................................10-1 10.1 Introduction ...............................................................................................................................................10-2 10.1.1 Device operation management..........................................................................................
PAGE 190
PAGE 191
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 10 Router maintenance 10 Router maintenance About this chapter The following table lists the contents of this chapter. Section Describes 10.1 Introduction This section describes the principles and concepts of router maintenance. 10.2 Powering off the FIC/HIC This section describes how to power off the Routing Process Unit (RPU). 10.3 Managing the device operation This section describes how to manage device operation. 10.
PAGE 192
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 10 Router maintenance 10.1 Introduction This chapter describes some common Secure Router 8000 Series maintenance commands, which you can use when you change the Flexible Interface Card (FIC) or High-speed Interface Card (HIC), restart the router, or check the operation status of the router. This chapter includes the following topics: z Device operation management z Electronic label 10.1.
PAGE 193
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 10 Router maintenance Configuration procedures No. Procedure 1 Powering off the FIC/HIC 2 Checking the configuration 10.2.2 Powering off the FIC/HIC Do as follows on the router to configure. Step 1 Run: system-view The system view appears. Step 2 Run: preplug slot slot-id This command powers off the FIC/HIC. ----End 10.2.3 Checking the configuration Action Command Check the registration of the FIC/HIC.
PAGE 194
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 10 Router maintenance 10.3 Managing the device operation 10.3.1 Establishing the configuration task Applicable environment The following operations are common for daily router maintenance: 1. Specifying the slave RPU Secure Routers 8002, 8004, and 8008 contain only one RPU, so they do not support this function. When Secure Router 8012 restarts, the master and slave RPUs are not fixed.
PAGE 195
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 10 Router maintenance Configuration procedures No. Procedure 1 Specifying the slave RPU 2 Restarting the router 3 Performing the master/slave switchover 10.3.2 Specifying the slave RPU Secure Routers 8002, 8004, and 8008 contain only one RPU, so they do not support this function. Do as follows on the router to configure. Step 1 Run: system-view The system view appears.
PAGE 196
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 10 Router maintenance reboot z To restart the router at a specific time, run: schedule reboot { at exact-time | delay interval } 10.3.4 Performing the master/slave switchover Secure Routers 8002, 8004, and 8008 contain only one RPU, so they do not support this function. Do as follows on the router. Step 1 Run: system-view The system view appears.
PAGE 197
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 10 Router maintenance 10.4 Monitoring the router status For daily maintenance of the router, you can use the display commands to view the status of the router. This section describes the following topics: z Displaying the basic device information z Displaying the system version information z Displaying RPU restart information 10.4.
PAGE 198
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 10 Router maintenance Software Version : Secure Router 8000 Series (R) Software, Version 5.30(SR8012 V200R005C03B200) Slot8: 1CE3 (pcb)C (logic)002 (board)RTB21CE3 Uptime is 0day, 0hour, 26minutes Startup time : 2007/03/28 13:52 Master Npu (11,NPU1)'s version information: Uptime is 0day, 0hour, 30minutes Startup time : 2007/03/28 13:48 Pico code Version : 0 Pcb Version : VER.
PAGE 199
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 10 Router maintenance 10.5 Configuring the electronic label 10.5.1 Establishing the configuration task Applicable environment To query the electronic label information of all boards including the optical module and individual entities on the boards, or to back up the electronic label information to a specified FTP server, you must configure the electronic label function. Preconfiguration tasks None. Data preparation None.
PAGE 200
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration Contents 11 System software upgrade .....................................................................................................11-1 11.1 Introduction ............................................................................................................................................... 11-2 11.1.1 System software upgrade ................................................................................................
PAGE 201
PAGE 202
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 11 System software upgrade 11 System software upgrade About this chapter The following table shows the contents of this chapter. Section Description 11.1 Introduction This section provides an overview of system software upgrades. 11.2 Uploading the system software and license files This section describes how to upload the system software and license files. 11.
PAGE 203
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 11 System software upgrade 11.1 Introduction This section describes the concepts that you need to know before you upgrade the system software: z System software upgrade z License 11.1.1 System software upgrade z When you upgrade the system software, you must upgrade the license that is integrated with the system software. z Upgrade the system software and license under the guidance of technical support engineers.
PAGE 204
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 11 System software upgrade 11.2 Uploading the system software and license files 11.2.1 Establishing the configuration task Applicable environment z Before you upload the system software, reserve at least 25M (25120K) of disk space for flash memory to ensure sufficient space for the system software package. z Place the license files at the root directory of the flash memory of the master and slave RPUs.
PAGE 205
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 11 System software upgrade 11.2.3 Copying the system software and license to the slave RPU Do as follows on the router you want to upgrade. Step 1 Run: copy source-filename slave#flash:/destination-filename This command copies the system software and license to the flash memory of the slave RPU. ----End If you need to copy multiple files to the flash memory of the slave RPU, repeat the preceding steps.
PAGE 206
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 11 System software upgrade 11.3 Specifying the system software for the next router startup 11.3.1 Establishing the configuration task Applicable environment Specify the same system software for the master and slave RPUs. Otherwise, the system does not function. After the files are uploaded, you need to instruct the system to use the newly loaded system software the next time the router is restarted.
PAGE 207
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 11 System software upgrade 11.3.3 Specifying the system software for the next startup of the slave RPU Do as follows on the router you want to upgrade. Run: startup system-software file-name slave-board This command specifies the system software package for the next startup of the slave RPU. This command only applies to the Secure Router 8012. 11.3.
PAGE 208
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration Contents 12 Patch management .................................................................................................................12-1 12.1 Introduction ...............................................................................................................................................12-2 12.2 Checking the system for running patches...............................................................................
PAGE 209
PAGE 210
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration Figures Figure 12-1 Conversion of patch status............................................................................................................12-2 Issue 5.3 (30 March 2009) Nortel Networks Inc.
PAGE 211
PAGE 212
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 12 Patch management 12 Patch management About this chapter The following table shows the contents of this chapter. Section Description 12.1 Introduction This section provides an overview of patch management concepts. 12.2 Checking the system for running patches This section describes how to check the running of a patch in the system. 12.3 Uploading a patch This section describes how to load a patch. 12.
PAGE 213
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 12 Patch management 12.1 Introduction After a patch runs successfully, a patchstate.dat file is created at the root directory of the flash memory. Do not delete the file; if you delete the file, the patch remains invalid after restart. Carrier service must provide long-term operation without interruption. You can upgrade and maintain the router by installing patches. This does not affect the operation of the router.
PAGE 214
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 12 Patch management 12.2 Checking the system for running patches 12.2.1 Establishing the configuration task Applicable environment The system permits you to run only one patch at a time. You must confirm that no patch is running in the current system before you install a new patch. If a patch is currently running, you must delete it before you install the new patch.
PAGE 215
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 12 Patch management common patch number : 0 current patch number : 0 running patch number : 0 active patch number : 0 patch area length : 0x100000 patch area start address : 0x100000 The patch information: The value of the bold items in the preceding output is 0. This indicates that no patch is running in the current system. 12.3 Uploading a patch 12.3.
PAGE 216
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 12 Patch management 12.3.3 Copying a patch to the root directory of the flash of the slave RPU Do as follows on the router you want to upgrade. Run: copy source-filename slave#flash:/destination-filename This command copies the patch to the root directory of the flash memory of the slave RPU. If you need to copy multiple files to the flash memory of the slave RPU, repeat the preceding step.
PAGE 217
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 12 Patch management 12.4.2 Uploading the RPU patch Do as follows on the router you want to upgrade. Run: patch load [ slave | all ] This command uploads the RPU patch. When a patch is uploaded, the system checks that the patch version is the same as the system version. If the two versions are not the same, the system prompts that the patch upload failed. 12.4.
PAGE 218
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 12 Patch management Preconfiguration tasks None. Data preparation None. Configuration procedures No. Procedure 1 Deactivating the RPU patch 12.5.2 Deactivating the RPU patch Do as follows on the router you want to upgrade. Run: patch deactive [ slave | all } This command deactivates the RPU patch. 12.6 Removing the RPU patch 12.6.
PAGE 219
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration 12 Patch management 12.6.2 Deleting the RPU patch Do as follows on the router you want to upgrade. Run: patch delete [ slave | all ] This command deletes the RPU patch. 12-8 Nortel Networks Inc. Issue 5.
PAGE 220
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration Contents A Glossary .................................................................................................................................... A-1 B Acronyms and abbreviations .................................................................................................B-1 Issue 5.3 (30 March 2009) Nortel Networks Inc.
PAGE 221
PAGE 222
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration A Glossary A Glossary A Accounting A network security service that records the user’s access to the network. Agent A process that resides in all managed devices. It receives request packets from the Network Manager (NM) Station and performs the Read or Write operation on managed variables according to packet types and generates response packets and sends them to the NM Station. AH Authentication Header.
PAGE 223
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration A Glossary C CLI Command line interface. An interface that allows the user to interact with the operating system. Users can configure and manage the Secure Router 8000 Series by entering commands through the CLI. Congestion avoidance A flow control mechanism that is used to relieve network overload by adjusting the network traffic.
PAGE 224
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration A Glossary I Information center The information hinge in the Secure Router 8012 that can classify and filter the output information. Interface mirroring A method of copying the packet of a mirrored interface to the other mirroring interfaces to forward the packet. IP negotiated An attribute of the interface.
PAGE 225
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration A Glossary displays the information. NTDP A protocol that is used to collect information about the adjacency and the backup switch of each device in the network. NTP Network Time Protocol. An application protocol that is used to synchronize the distributed server and the client side. O OSPF-TE Traffic engineering of OSPF. (For information about OSPF, see Appendix B Acronyms and abbreviations.
PAGE 226
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration A Glossary language mode, and system time. After configuration, the system environment coincides with the actual environment. T Telnet An application protocol of the TCP/IP stack that provides virtual terminal services for a variety of remote systems. Terminal A device that is connected with other devices through the serial port. The keyboard and the display have no disk drives.
PAGE 227
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration A Glossary X.25 A protocol applied on the data link layer that defines how connections between Data Terminal Equipment (DTE) and Data Circuit-terminal Equipment (DCE) are maintained for remote terminal access and computer communications in Packet Data Networks (PDN). Xmodem A transmission protocol in binary code format. XOT X.25 over TCP. A protocol that implements the interconnection between two X.
PAGE 228
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration B B Acronyms and abbreviations Acronyms and abbreviations A AAA Authentication, Authorization and Accounting ACL Access Control List AF Assured Forwarding AMB Active Main Board ARP Address Resolution Protocol ASPF Application-Specific Packet Filter ATM Asynchronous Transfer Mode AUX Auxiliary port B BGP Border Gateway Protocol C CBQ Class-based Queue CBWFQ Class-based WFQ CCC Circuit Cross Connect CF Comp
PAGE 229
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration B Acronyms and abbreviations CR-LDP Constraint-based Routing LDP D DCE Data Circuit-terminal Equipment DTE Data Terminal Equipment DHCP Dynamic Host Configuration Protocol DNS Domain Name System E EF Expedited Forwarding ESP Encapsulating Security Payload F FIC Flexible Interface Card FR Frame Relay G GRE Generic Routing Encapsulation H HDLC High-level Data Link Control HIC High-speed Interface Card I IETF
PAGE 230
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration B Acronyms and abbreviations L L2TP Layer 2 Tunneling Protocol LAN Local Area Network LAPB Link Access Procedure Balanced LDP Label Distribution Protocol LPU Line Processing Unit LSP Label Switched Path M MAC Media Access Control MBGP Multiprotocol Extensions for BGP-4 MFR Multiple Frame Relay MP Multilink PPP MPLS Multiprotocol Label Switching MSDP Multicast Source Discovery Protocol MTU Maximum Transmissi
PAGE 231
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration B Acronyms and abbreviations PPPoA PPP over AAL5 PPPoE Point-to-Point Protocol over Ethernet PPPoEoA PPPoE on AAL5 PQ Priority Queuing PVC Permanent Virtual Path PW Pseudo Wire Q QoS Quality of Service QPPB QoS Policy Propagation through the Border Gateway Protocol R RADIUS Remote Authentication Dial-In User Service RED Random Early Detection RIP Routing Information Protocol RPR Resilient Packet Ring RPU Ro
PAGE 232
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration B Acronyms and abbreviations VPN Virtual Private Network VRP Versatile Routing Platform VRRP Virtual Router Redundancy Protocol W WAN Wide Area Network WFQ Weighted Fair Queuing WRED Weighted Random Early Detection X XOT Issue 5.3 (30 March 2009) X.25 Over TCP Nortel Networks Inc.
PAGE 233
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration Contents Index ................................................................................................................................................ i-1 Issue 5.3 (30 March 200 9) Nortel Networks Inc.
PAGE 234
PAGE 235
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration Index Index overview, 1-9 B basic configuration command privilege level, 4-6 super password, 4-5 system status, 4-6 C command line characteristics, 3-2 command level, 3-3 displaying, 3-9 editing, 3-9 error message, 3-8 history command, 3-8 on-line help, 3-7 views, 3-3 configuration file overview, 7-2 configuring authentication mode, 5-12 configuring command privilege level, 4-6 configuring FTP, 8-3 configuring SSH terminal servic
PAGE 236
Nortel Secure Router 8000 Series Configuration Guide - Basic Configuration Index T Telnet configuration, 9-6 overview, 9-2 TFTP configuration, 8-12 example, 8-20 overview, 8-2 U user-interface configuration, 5-4 numbering, 5-2 terminal attribute, 5-7 user-management configuration, 5-11 X XModem configuration, 8-14 example, 8-22 overview, 8-2 i. i-2 Nortel Networks Inc. Issue 5.
PAGE 237
Nortel Secure Router 8000 Series Configuration — Basic Configurations Copyright © 2009 Nortel Networks All Rights Reserved. Printed in Canada, India, and the United States of America Release: 5.3 Publication: NN46240-501 Document Revision: 01.01 Document status: Standard Document release date: 30 March 2009 To provide feedback or to report a problem in this document, go to www.nortel.com/documentfeedback. www.nortel.