3Com 10014302 manual

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101

Ir a la página of

Buen manual de instrucciones

Las leyes obligan al vendedor a entregarle al comprador, junto con el producto, el manual de instrucciones 3Com 10014302. La falta del manual o facilitar información incorrecta al consumidor constituyen una base de reclamación por no estar de acuerdo el producto con el contrato. Según la ley, está permitido adjuntar un manual de otra forma que no sea en papel, lo cual últimamente es bastante común y los fabricantes nos facilitan un manual gráfico, su versión electrónica 3Com 10014302 o vídeos de instrucciones para usuarios. La condición es que tenga una forma legible y entendible.

¿Qué es un manual de instrucciones?

El nombre proviene de la palabra latina “instructio”, es decir, ordenar. Por lo tanto, en un manual 3Com 10014302 se puede encontrar la descripción de las etapas de actuación. El propósito de un manual es enseñar, facilitar el encendido o el uso de un dispositivo o la realización de acciones concretas. Un manual de instrucciones también es una fuente de información acerca de un objeto o un servicio, es una pista.

Desafortunadamente pocos usuarios destinan su tiempo a leer manuales 3Com 10014302, sin embargo, un buen manual nos permite, no solo conocer una cantidad de funcionalidades adicionales del dispositivo comprado, sino también evitar la mayoría de fallos.

Entonces, ¿qué debe contener el manual de instrucciones perfecto?

Sobre todo, un manual de instrucciones 3Com 10014302 debe contener:
- información acerca de las especificaciones técnicas del dispositivo 3Com 10014302
- nombre de fabricante y año de fabricación del dispositivo 3Com 10014302
- condiciones de uso, configuración y mantenimiento del dispositivo 3Com 10014302
- marcas de seguridad y certificados que confirmen su concordancia con determinadas normativas

¿Por qué no leemos los manuales de instrucciones?

Normalmente es por la falta de tiempo y seguridad acerca de las funcionalidades determinadas de los dispositivos comprados. Desafortunadamente la conexión y el encendido de 3Com 10014302 no es suficiente. El manual de instrucciones siempre contiene una serie de indicaciones acerca de determinadas funcionalidades, normas de seguridad, consejos de mantenimiento (incluso qué productos usar), fallos eventuales de 3Com 10014302 y maneras de solucionar los problemas que puedan ocurrir durante su uso. Al final, en un manual se pueden encontrar los detalles de servicio técnico 3Com en caso de que las soluciones propuestas no hayan funcionado. Actualmente gozan de éxito manuales de instrucciones en forma de animaciones interesantes o vídeo manuales que llegan al usuario mucho mejor que en forma de un folleto. Este tipo de manual ayuda a que el usuario vea el vídeo entero sin saltarse las especificaciones y las descripciones técnicas complicadas de 3Com 10014302, como se suele hacer teniendo una versión en papel.

¿Por qué vale la pena leer los manuales de instrucciones?

Sobre todo es en ellos donde encontraremos las respuestas acerca de la construcción, las posibilidades del dispositivo 3Com 10014302, el uso de determinados accesorios y una serie de informaciones que permiten aprovechar completamente sus funciones y comodidades.

Tras una compra exitosa de un equipo o un dispositivo, vale la pena dedicar un momento para familiarizarse con cada parte del manual 3Com 10014302. Actualmente se preparan y traducen con dedicación, para que no solo sean comprensibles para los usuarios, sino que también cumplan su función básica de información y ayuda.

Índice de manuales de instrucciones

  • Página 1

    3Com R outer Command R eference Guide Addendum for V1.20 http://www.3com.com/ Part No. 100143 02 Published Janu ary 2004[...]

  • Página 2

    1.1. Intr oduction 1.1.1. Scope This manual provides command ref erence information f or new software features foun d in V1.20 of the 3Com Router op erating system. Use this addend um to supplem ent command reference information found i n the 3Com Rout er Comm and Reference Gui de . 1.1.2. Online Re sources Download the Ro uter 3000 Installati on G[...]

  • Página 3

    Chapter 1 CBQ Configuration Commands 1.1 af Syn tax af bandwid th { bandwidth | pct percent age } undo af View Policy-class v iew Parameter bandwid th : Bandwidt h in kbit/s in the range of 8 to 1000000. percentag e : Percentage o f available bandwid th in the range of 1 to 100. Description Using the af command, you can configure the class to perfo[...]

  • Página 4

    1.2 car Syn tax car cir rate [ cbs size ebs size ] [ conform action [ exceed action ] ] undo car View Policy-class v iew Parameter cir rate : Committed information rate in the ra nge of 8 000 to 155000000 bit/s. cbs size : Committed burst size, that is, the number of bit s that can be sent in each interval in the range of 15000 to 155000 000 bit s.[...]

  • Página 5

    For the related command, see qos policy , qos-clas s . Example Configure traf fic monitoring for a class. The normal traf fic of packet s is 38400bit/s. Burst traffic twice of the normal traf fic can pass initially and later the traffic is transmitted normally when the rate does not exceed 38 400bit/s. When the rate exceeds 38400bit/s, the preceden[...]

  • Página 6

    Description Using the debugging qos command, you can enable the debu gging of QoS. Using the undo debugging qos command, you ca n disable the debugging of Qos. By default, the debugging of QoS is disabled. Example Enable the debugging of the CBQ class in formation on the interfa c e Serial0. [Router] debugging qos cbq class interface serial 0 1.4 d[...]

  • Página 7

    1.5 display qos class Syn tax display qos class [ class-name ] View All views Parameter class- name : Name of the class. By default, the information of all classes are displayed. Description Using the display qos class command, you can browse the class info rmation concerning router configu ra tion. Example [3Com] display qos class QoS Class Config[...]

  • Página 8

    Parameter policy-name : Name of policy . By default, the configuration information of all policies are displayed. class- name : Class name in the policy . Description Using the display qos policy command, you can b rowse the configuration information of the specified or all classe s of the specifi ed or all policies. Example [3Com] display qos poli[...]

  • Página 9

    Committed Access Rate: CIR 8000 (Bps), CBS15000 (Bit), EBS 0 (Bit) Conform Action: remark mpls exp 3 and pass Exceed Action: discard Class: SH APE Behavior(s): Traffic Shape: CIR 8000 (Bps), CBS 15000 (Bit), EBS 0 (Bit) Queue Length 1024 (Packet) 1.7 display qos policy interface Syn tax display qos policy interface [ { type number } [ inbound | out[...]

  • Página 10

    Behavior(s): Default Queue: Flow Based Fair Queueing Max number of hashed queues 256 Matched: 0/0 (Packets/Bytes) Enqueued: 0/0 (Packets/Bytes) Discarded: 0/0 (Packets/Bytes) Discard Method: Tail Class: 3C OM Matched: 0/0 (Packets/Bytes) Operator: Logical AND Rule(s): If-match ip-precedence 5 Behavior(s): Expedited Forwarding Bandwidth 8 (Kbps), Bu[...]

  • Página 11

    General Traffic Shaping: CIR 8000 (Bps), CBS 15000 (Bit), EBS 0 (Bit) Queue Length: 1024 (Packets) Queue Size: 0 (Packets) Pass : 0/0 (Pa ckets/Bytes) Discard : 0/0 (Packets/Bytes) Delay : 0/0 (Packets/Bytes) Interface: Serial0 Direction: Inbound Policy: te st Class: de fault-class Matched: 0/0 (Packets/Bytes) Rule(s): If-match any Behavior(s): -no[...]

  • Página 12

    View Policy-class v iew Parameter bandwid th : Bandwidt h in kbit/s in the range of 8 to 1000000. size : S pecify the allowed burst size in byte in the range of 32 to 2000000. By default, it is bandwidt h * 25. Description Using the ef command, you can co nfigure cert ain class to perfo rm expedited-forwarding to send the pa ckets of this class int[...]

  • Página 13

    Parameter cir rate : Committed information rate. cbs size : Burst size in the range of 15000 to 155000000 bits. By default, it is equal to half of cir rate . ebs size : Excessive burst size in the range of 0 to 155 0000 00 bits. By default, it is 0. queue-length length : Queue length in t he range of 1 to 1024. By default, it is 50. Description Usi[...]

  • Página 14

    View Class view Parameter access-list-number : ACL number . logic-not : Do not match the class. Description Using the if-match acl command, you can d efine an ACL match rule. Using the undo if-match acl command, you can delete an ACL match rule. For the related command, see qos clas s . Example Define a class to match ACL101. [3Com] qos class class[...]

  • Página 15

    Example Define match rule for all packet s . [3Com] qos class class1 [3Com-qosclass-class1] if-match any 1.12 if-match class Syn tax if-match [ logic-not ] class class-name undo if-match [ logic-not ] class class-name View Class view Parameter class- name : Class name. Description Using the if-match class command, you can defin e the match rule for[...]

  • Página 16

    Example Define class2 by invoking class1. Define match rule for class2. As class1 w ill be invoked, you shou ld configure cl ass1 first.The match rule for class1 is: IP precedence is 5. [3Com] qos class class1 [3Com-qosclass-class1] if-match ip-precedence 5 Define class2 pa ckets with the match rule as clas s1 and destinatio n MAC address as 0050-B[...]

  • Página 17

    1.14 if-match inbound-interface Syn tax if-match [ logic-not ] inbound-inter fa ce { type number } undo if-match [ logic-not ] inbound-interface { type number } View Class view Parameter interface - type : Interface type. number : Interface number . Description Using the if-match inbound-interface comma nd, you can define input interface match rule[...]

  • Página 18

    Parameter ip-dscp value : DSCP value in the range of 0 to 63. Description Using the if-match dscp command, you can defin e DSCP match rule. Usin g the undo if-match dscp command, you can delete DS CP match rule. Y ou can configure this command for a cla ss for several times. When a command is configured, the ip-dscp-val ue will be sorted in the asc[...]

  • Página 19

    Description Using the if-match ip-pr ecedence command, you can define IP precedence match rule. Using the undo if-match ip-precedence command, you can delete IP precedence match rule. When the command is configured, the ip-precedence-valu e will be sorted automatically in ascending order . Up to 8 precedence value s can be specified. If several ide[...]

  • Página 20

    The match rule for source MAC address is ef fective only for input p olicies and Ethernet interfaces. For the related command, see qos clas s . Example Define the match rule of class1 as follows: match the p ackets with the destination MAC address as 0050-ba27-b ed3. [3Com] qos class class1 [3Com-qosclass-class1] if-match destination-mac 00-50-ba-2[...]

  • Página 21

    1.19 if-match rtp Syn tax if-match [ logic-not ] rtp st art-port starting-po rt-number end-po rt end-por t-number undo if-match [ logic-not ] rtp st art-port st arting-port-num ber end-port end-port-number View Class view Parameter starting-port-num ber : S tarting R TP port number in the range of 200 0 to 65535. end-port-number : Endin g R TP port[...]

  • Página 22

    View Interface view Parameter token- number : The number of sending toke ns, in the range from 1 to 50. Description Using the qmtoke n command, you can configure the number of Q oS sending tokens. Using the undo qmtok en command, you can di sable the sendin g token function of QoS. By default, disable QoS sending token functio n. In such operation [...]

  • Página 23

    View Interface view Parameter inbound : Inbound direction. outbound : Outbound direction. policy-name : Policy name. Description Using the qos apply policy command, you can att ach an associated QoS policy to an interface. Using the undo qos a pply policy command, you can delete associated QoS policy from an interface. If the sum of the bandwidths [...]

  • Página 24

    View System view . Parameter logic-and : S pecify the relation between the rules in the class as logic AND. That is, the packet that matches al l t he rules belongs to this cl ass. logic-or : S pecify the relation between the rules in the cla ss as logic OR. That is, the packet that matches any o ne of the rules belongs to this class. class- name :[...]

  • Página 25

    Description Using qos max-bandwid t h command, you can set the maximum band width of an interface. Using undo qos max-band wid th command, you can remove the setting of the maximum bandwidt h. By default, the maximum bandwidth i s not configured for all interfaces. The bandwidt h set by this command is only a logic value, not the actual band width [...]

  • Página 26

    Description Using qos policy command, you can define a poli cy and enter map vi e w . U s ing undo qos policy command, you can delete a policy . The policy cannot be deleted if it is applied on an interface. It is nece ssary to remove application of the policy on the current interface b efore deleting it via the undo qos policy command. For the rel[...]

  • Página 27

    Example Set the percentage of the maximum re served bandwid th allocated to the R TP queue application to 70% of the available bandwid th. [3Com-Serial0] qos reserved-bandwidth pct 70 1.26 qos-class Syn tax qos-class class-name undo qos-class class-name View Class view Parameter class- name : Name of class. It is a pr edefined class name and can be[...]

  • Página 28

    View Policy-class v iew Parameter queue-length : Maximum threshol d value of the queue in the range of 1 to 1024. The default drop mode is tail d rop. Description Using queue-length command, you can configure maximum queue length. Usin g undo queue-length command, you can delete configuratio n. This command can be use d only af ter the af or wfq co[...]

  • Página 29

    Parameter value : DSCP value in the range of 0 to 63, whi ch can be any of the followi ng keys: ef , af1 1 , af12 , af13 , af21 , af22 , af23 , af31 , af32 , af33 , af41 , af42 , af43 , cs1 , cs2 , cs3 , cs4 , cs5 or cs7 . Description Using remark ip - dscp command, you can configure t he DSCP value for a cla ss to identify the matched p ackets. Us[...]

  • Página 30

    Example Configure precedence value to 6 to identify p a ckets. [3Com] qos policy 3Com [3Com-qospolicy-3Com] qos-class database [3Com-qospolicy-c-3Com database] remark ip-precedence 6 1.30 wfq Syn tax wfq [ queue-number total -qu eue-number ] undo w fq View Policy-class v iew Parameter total-queu e-number : Number of fair queue, whi ch can be 16, 32[...]

  • Página 31

    undo w red [ ip-dscp | ip-precedence ] View Policy-class v iew Parameter ip - dscp : Indicate that DSCP value is used when calculating dro p proportion for a pack et. ip-precedence : Indicate that IP prece dence value is used when cal culating drop proportion for a packet. By default, ip-precedence i s configured. Description Using wre d command, y[...]

  • Página 32

    View Policy-class v iew Parameter value : DSCP value in the range of 0 to 63, which ca n be any of the following keys: ef , af1 1 , af12 , af13 , af21 , af22 , af23 , af31 , af32 , af33 , af41 , af42 , af43 , cs1 , cs2 , cs3 , cs4 , cs5 or cs7 . low-limit : Lower threshold value in the range of 1 to 10 24. It is 10 by default. high-limit : Upper th[...]

  • Página 33

    1.33 wred ip-precedence Syn tax wred ip-precedence value low-limit low-limit high-limit high-limit [ discard-probability discard-prob ] undo wred ip-precedence valu e View Policy-class v iew Parameter value : Precedence of IP packet s in the range of 0 to 7. low-limit : Lower threshold value in the range of 1 to 10 24. It is 10 by default. high-lim[...]

  • Página 34

    1.34 wred weighting-constant Syn tax wred weighting-const ant exponent undo w red weighting-const ant View Policy-class v iew Parameter exponent : Exponential in the ra nge of 1 to 16. It is 6 by default. Description Using wred w eighting-const ant command, you can set exponential for the calculation of average queue length by WRE D. Using undo wre[...]

  • Página 35

    Chapter 2 TACACS+ Configuration Commands 2.1 debugging hwtacacs Syn tax debugging hwt acacs { authentication | authoriza tion | accounting } [ packet ] [ user user-nam e ][ interface inter face-name ] undo debugging hwt acacs { authentication | aut horization | accou nting } [ packet ] [ user user-name ][ interface interface-name | { interface-type[...]

  • Página 36

    Using debugging hwt acacs authentication command, you can display the authentication information and th e authorizatio n st ate of the current users. If the command is not configured with any argume nt, the information of all the users will be displayed. If the argument user ha s been configured, only the authentication information of the specified[...]

  • Página 37

    Example # Display the accounting information of AAA users. [3Com] display hwtacacs accounting Hwtacacs Accounting Statistics Accounting Packet Wait-Queue Length: 0 Username don Accounting time=00:01:19 Accounting type=Login,Service=SHELL ----------------------------------------------------------- Username don Accounting time=00:00:12 Accounting typ[...]

  • Página 38

    Table 2-1 Field description of the display hwtacacs accounting command Item Description interface Interface used by a user, which can be any type of i nterfaces listed as follows: Physical interfac es: Synchronous s erial interface, asynchronous serial i nterface, Ethernet interface, AUX interface, console i nterface, Asy nchronous Modem (AM) inter[...]

  • Página 39

    AUTHENTICA TION TERMINA TE packets sent by the router , the received and transmitted packet s, and the number of connection failures. Using the display h wtacacs serv e r verbose command, you can display the size of the accounting, authori zati on and accounting que ues of AAA users, whether the queue has been fully occupied, and the messa ge displ[...]

  • Página 40

    View Hwtacacs vie w Parameter None Description Using domain command, you can configure a spec ifi ed T ACACS+ server to permit a user to directly specify the domain na me when entering the user name. Using undo domain command, you can disallo w a specified T ACACS+ serv er to permit the user to directly specify the domain name wh en entering the us[...]

  • Página 41

    Parameter ip ip-address : IP address o f the T ACACS+ server to be added. name host-name : Name of the T ACACS+ server to be added, which h as been configured by the IP host comman d. It is a string of 1 to 20 print able characters except for the space. port port-number : The se rvice port number on the T ACACS+ server , which is in the range of 1 [...]

  • Página 42

    Each T ACACS+ server group allo ws only one primary authe ntication server , one primary authorization serv er , and one primary accounting server . When you configure a second primary server , there will be prompt information, the previous primary AAA server will be changed i nto a common server , and the newly configured server will be taken as t[...]

  • Página 43

    2.6 hwtacacs-server template Syn tax hwtacacs-server template template-name undo hwta ca cs-server template template-name View System view Parameter template-name : The string naming a server g roup, which cont ains 1 to 20 printable characters except for the sp ace. Description Using hwtac acs-server template co mmand, you can create a T ACACS+ se[...]

  • Página 44

    2.7 reset hwtacacs accounting statistics Syn tax reset hwt acacs accounting st atistics View All views Parameter None Description Using reset h w tac acs accounting st atistics command, you can clear all acco unting statist i cs for AAA users. For a related command, see display h wtaca cs ac counting . Example # Clear all accounting st atistics for[...]

  • Página 45

    Example # Clear all the st atisti cs of T ACACS+ servers. [Router] reset hwtacacs server statistics 2.9 shared-key Syn tax shared-key key- str in g undo shared-key View Hwtacacs vie w Parameter key-strin g : The encrypted key used for t he AAA negotiation between the router and a T ACACS+ server . It is a string of 1 to 64 print able chara cters (e[...]

  • Página 46

    2.10 source-ip Syn tax source-ip { ip-address | interface interface -type inte rface-n umber } undo source-ip View Hwtacacs vie w Parameter ip-address : T he source IP address of all the T ACACS+ pa ckets. interface-type : Interface type, such as serial. interface-number : Interface numbe r , including the main inte rface number and the sub-interfa[...]

  • Página 47

    2.11 timer quiet Syn tax timer quiet minute s undo timer quiet View Hwtacacs vie w Parameter minutes : Switchover interval, which must be in the range of 1 to 255 minutes and defaults to 5 minutes. Description Using the timer quiet command, you can configure a stan dby/primary server switchover int erval in case the cur rent AAA service is provided[...]

  • Página 48

    Chapter 3 SSH Configuration Commands 3.1 debugging rsa Syn tax debugging rsa undo debugging rsa View All views Parameter None Description Using the debugging rsa comma nd, you can enable RSA debugging and send the details of all the processes and the p acket structu re of the RSA algorithm to the info-center in the form of debu gging information. U[...]

  • Página 49

    View User view Parameter VTY index : The SSH ch annel being de bugged. Its v alue is a VTY number an d is in the range of 0 to 4 by default. all : All the SSH channels. Description Using the debugging ssh serv er command, you can send the information such as the negotiation procedure provisione d in SSH 1.5 to the info-center in the form of debuggi[...]

  • Página 50

    View All views Parameter None Description Using the display rsa local-k ey-p air public command, you can display the publi c key portion of the server-end host key-p air and server key-pair . If no key has ever been created, the system will inform you that it has not found any keys by displaying “RSA keys not found” for example. For related com[...]

  • Página 51

    CF8EBE33 42C71357 FC241E4F DEB64C09 DA06995C 99859934 25F6800A AB8859BE 0F83FC63 15A3115C BD3A15E7 D52DCE19 324DBBF9 58DB936B 0203 010001 3.4 display rsa peer-public-key Syn tax display rsa peer-public-key [ brief | name keyname ] View All views Parameter brief : Displays the brief information of all the remote p ublic keys. keyname : Name of the k[...]

  • Página 52

    Key Code: 308186 028180 E75E3D7C 11923D33 143FB829 470EA018 889147F6 6F27A98A D6C54A36 C7DB17E1 647DC2BE F1C54116 641CD690 E5F7B492 A059BD6A B86A7D18 1040765C 978AF7C9 12807EAE 819B4A65 787CDE9C 940F74C8 BC4EFD81 6CC3EBDA 51E75D1B D073AA69 1F646A81 035496AC 6F98A730 D8C44931 598682EF EA40DF88 5DD98D45 2670231D 0201 2 5 3.5 display ssh server Syn ta[...]

  • Página 53

    VTY0 1.5 DES Session started 3Com VTY3 1.5 DES Session started router 3.6 display ssh user-information Syn tax display ssh user-information [ usernam e ] View All views Parameter userna me : A valid SSH user name defined by AAA. Description Using the display ssh user-information command, you can display information of the current SSH users, includi[...]

  • Página 54

    View Public key edit view Parameter hex-data : Public key dat a, which is a hexadecimal character string cod ed in the public key format. Description Using the hex command, you can in put the public ke y dat a. The public key that you input must be th e one randomly generate d by the SSH client program. Y ou are allowed to input spaces in the chara[...]

  • Página 55

    [3Com-rsa-key-code] hex C7DB17E1 647DC2BE F1C54116 641CD690 E5F7B492 A 059BD6A B86A7D18 [3Com-rsa-key-code] hex 1040765C 978AF7C9 12807EAE 819B4A65 787CDE9C 9 40F74C8 BC4EFD81 [3Com-rsa-key-code] hex 6CC3EBDA 51E75D1B D073AA69 1F646A81 035496AC 6 F98A730 D8C44931 [3Com-rsa-key-code] hex 598682EF EA40DF88 5DD98D45 2670231D [3Com-rsa-key-code] hex 02[...]

  • Página 56

    Close the SSH process of task 36 on the route r . [3Com] kill ssh userid 36 3.9 protocol inbound Syn tax protocol inbound { ssh | telnet } numbers [ acl acl-number ] View System view Parameter ssh : Support s SSH. telnet : Supports T elnet.. numbers : S pecifies the maximum number of connec tion s that the protocol is allowed to set up. It is in th[...]

  • Página 57

    3.10 public-key-code begin Syn tax public-key-code begin View Public key view Parameter None Description Using the public-key-code begin command, you can access the public key edi t view to input the public key data gene rated by the client program.. Before using this command, you must specify a key name usin g the command rsa peer-public-key and a[...]

  • Página 58

    3.11 public-key-code end Syn tax public-key-code end View Public key view Parameter None Description Using the public-key -code end command, you can end the pub lic key editing and save the configure d public key . Besides, you can also u se this command to return from the public key view to the system view . After ending the publi c key editing by[...]

  • Página 59

    [3Com-rsa-public-key] public-key-code begin [3Com-rsa-key-code] hex 308186 [3Com-rsa-key-code] hex 028180 [3Com-rsa-key-code] hex E75E3D7C 11923D33 143FB829 470EA018 889147F6 6 F27A98A D6C54A36 [3Com-rsa-key-code] hex C7DB17E1 647DC2BE F1C54116 641CD690 E5F7B492 A 059BD6A B86A7D18 [3Com-rsa-key-code] hex 1040765C 978AF7C9 12807EAE 819B4A65 787CDE9C[...]

  • Página 60

    An essential operation underlying a succes sful SSH login is generating local RSA key-pairs by configuring rsa local-key -p air create . It is only necessary for you to execute this command on ce and you do not ha ve to execute it again af ter rebooting the router .. For related command, see rsa local-key-p air destroy . Example Generate the host k[...]

  • Página 61

    Description Using the rsa local-key-p air destroy command, yo u can des troy all the se rver-end RSA keys (including host key-p airs and server key-pairs). After inputting this command, you are req uired to confirm whet her to destroy all the server-end RSA keys. In addition, this comma nd will not be saved in the configuration file. For related co[...]

  • Página 62

    When executing the undo rsa peer-pu blic-key command to delet e a specified public key , the system will prompt the following in formation in case the specified key does not exist. % Public key not found. For related commands, see public-key -code begin , and public-key-code end . Example Access the public key view . [3Com] rsa peer-public-key 3Com[...]

  • Página 63

    3.16 ssh server rekey-interval Syn tax ssh server rekey-interv al hours undo ssh server rekey -interval View System view Parameter hours : Updating interval which i s in the range of 1 to 24 hou rs. Description Using the ssh serv er rekey-interv al command, you can set the interval for up dating the SSH server key . Using the undo ssh serv er rekey[...]

  • Página 64

    Parameter seconds : Login timeout time, which is in the rang e of 1 to 120 seconds and default s t o 60 seconds. Description Using the ssh server timeout command, you can set the login authentication timeout time at the SSH server end. Using the undo ssh se rver timeout command, you ca n restore the default login authenticati on timeout time at the[...]

  • Página 65

    The public key that you assign to a user by using this command will replace t he one that you have assigned last time. The AAA module is responsible for the creati on and deletion of lo cal usernames in the system. Whenever creating an SSH user , The AAA module will inform SSH whenever it creates an SSH user , and SSH will add the usernam e into th[...]

  • Página 66

    authentication-ty pe command, you can disable the login authentication mode for the user , in which case the user will be unable to log into the syste m. By default, no login authentication mode is spec ified, that is, the user is unable to log into the system. Y ou must specify an aut hentication mode for a new user , otherwise, the user will be u[...]

  • Página 67

    Chapter 4 NTP Configuration Commands 4.1 debugging ntp-service Syn tax debugging ntp-service { acce ss | adjustment | authentication | ev ent | filter | p acket | p arameter | refclock | selection | synchronization | vali dit y | all } undo debugging ntp-service { access | adjustment | authenti cation | event | filter | p acket | p arameter | refcl[...]

  • Página 68

    Description Using the debugging ntp-serv ice command, you can debug all the information of the NTP servi ce. Using the undo debugging ntp-serv ice command, you can disable the specified debugging. By default, debugging of all the information is di sabl ed. Example Enable NTP access cont rol debuggin g. [3Com] debugging ntp-service access 4.2 displa[...]

  • Página 69

    ******************************************************************** [12345]127.127.1.0 LOCAL(0) 7 26 64 1 0.0 0.0 15.6 [5]10.110.101.20 0.0.0.0 16 - 64 0 0.0 0.0 0.0 note: 1 source(master),2 source(peer),3 selected,4 candidate,5 configured 4.3 display ntp-service status Syn tax display ntp-service st atus View All views Parameter None Description [...]

  • Página 70

    Item Description root delay Total roundtrip delay to the master r eference source root disper The maximum error (dispersion) rela tive to the master reference source peer disper The dispersion of t he remote NTP serv er 4.4 display ntp-service trace Syn tax display ntp-service trace [ X.X.X.X ] View All views Parameter X.X.X.X : IP address of the N[...]

  • Página 71

    4.5 ntp-service access Syn tax ntp-service access { query | synchronization | server | peer } acl-number undo ntp-service access { query | synchronization | serv er | peer } View System view Parameter query : Assigns the controlled query right. synchronization : Allows only the server to ac cess. server : Allows the server and query to access. peer[...]

  • Página 72

    4.6 ntp-service authentication enable Syn tax ntp-service authentic ation enable undo ntp-service authen tication enable View System view Parameter None Description Using the ntp-service authen tication enable command, you can enabl e authentication of NTP services. Using the undo ntp-serv ice authentication enable command, you can disable authenti[...]

  • Página 73

    Description Using the ntp-servi ce authentication-key id command, you can set an NTP authentication key . Using the undo ntp-service authentica tion-key id command, you can remove the NTP authentication key . By default, there is no authentication key . This command enables you to set an NTP authentication key . So far , only MD5 authentication is [...]

  • Página 74

    client mode to assume the wo rk of detecting the incoming b roadcast message packet s with which it can synch roni ze the local clo ck. Example Receive NTP broa dcast messages on the interface Ethernet 1. [3Com] interface Ethernet 1 [3Com-Ethernet1] ntp-service broadcast-client 4.9 ntp-service broadcast-server Syn tax ntp-service broadcas t-server [...]

  • Página 75

    [3Com] interface Ethernet 0 [3Com-Ethernet0] ntp-service broadcast-server authentication-key 4 version 3 4.10 ntp-service max-dynamic-sessions Syn tax ntp-service max-dy namic-sessions numb er undo ntp-service max-dy namic-s essions View System view Parameter number : The number of sessions allowed at the local, which is i n the range of 0 to 128. [...]

  • Página 76

    Parameter X.X.X.X : Multicast IP address, that is, Cl ass D address. Description Using the ntp-servi ce multicast-client command, you can enable the NTP multicast client mode. Using the undo ntp-service multicas t-client command, you can disable the NTP multica st client mode. By default, multicast client se rvice is not configured and X.X.X.X is 2[...]

  • Página 77

    keyid : The key ID carried in the messag es transmitted to the multicast client s, which is in the range of 1 to 4294967295. ttl : Defines the Time-T o-Live (TTL) period of multicast packet s. ttl-number : The TTL perio d of multicast packet s, which is in the range of 1 to 255. vers io n : Defines an NTP version. number : NTP version number in the[...]

  • Página 78

    stratum : The stratum level at which the local clo ck op erates, which is in the rang e of 1 to 15. Description Using the ntp-serv ice refclock-master command, yo u can set an external reference clock or the l ocal clock to be t he NTP master cloc k. Using the undo ntp -service refclock-master comm and, you can remove the settings of NTP master clo[...]

  • Página 79

    In the event that authentic ation has been en abled, this com mand can be used fo r specifying one or more keys to be reliabl e. In other words, client s will only synchronize it s clock to the server providing a reliable key . Otherwise, clie nts will refuse synchronization. Example Enable NTP authenti catio n, adopt MD5 encryption, set key ID to [...]

  • Página 80

    destination addresses for receiving the response messages except for the specified one. Example S pecify the interface Ethernet 0 so that its IP address can be u sed as the source IP address carri ed by all the outbou nd NTP message p ackets. [3Com] ntp-service source-interface Ethernet 0 4.16 ntp-service source-interface disable Syn tax ntp-servic[...]

  • Página 81

    undo ntp-service unicast-peer X.X.X.X View System view Parameter X.X.X.X : IP address of the remote server . vers io n : Defines NTP version numbe r . number : NTP version number in the range of 1 to 3. authentication-k eyid : Defines an auth entication key . keyid : The key ID carried i n the messages transmitted to the remo te server , which is i[...]

  • Página 82

    Example Set the peer at 128.108.22.44 to be the synchronization source of the local d evice, allowing the remote peer to synchronize with the local clock. In addition, version 3 is adopted, and IP address of Ethernet 0 is us ed as the IP source address carried by the NTP me ssag es. [3Com] ntp-service unicast-peer 128.108.22.44 version 3 source-int[...]

  • Página 83

    Description Using the ntp-serv ice unicast-server command, you can enabl e the NTP server mode. Using the undo ntp-se rvice unicast-serv er command, you can disabl e the NTP se rver mode. By default, version number is 3, authentication i s enabled, and the server is not the preferred choice. This command declare s that the local time se rver is the[...]

  • Página 84

    Chapter 5 X2T Configuration Commands 5.1 debugging x25 x2t Syn tax debugging x25 x2t { all | event | p acket } View All views Parameter all : Enables all X2T debug ging. event : Enables the X2T event debugging. p acket : Enables the X2T packet debugging. Description Using the debugging x25 x2t comman d, you can en able X2T de b ugging. Example Enab[...]

  • Página 85

    Description Using the display x25 x2t route command, you can display the X2T static routing table. Example Display the X2T st atic routing table maint ained by the router . [Router] display x25 x2t route SID X.121 Ip Address ============================================== 1 12 321 10.110.54.18 5.3 display x25 x2t switch-table Syn tax display x25 x2t[...]

  • Página 86

    undo translate ip ip-address port po rt-number View System view Parameter ip-address : Local IP address. port port-num ber : TCP port number . x25 x.121-a ddress : The destination X.121 address af ter the address translation. Description Using the translate ip command, you can configure an X2T forwardi ng route from an IP network t o an X.25 networ[...]

  • Página 87

    port port-num ber : TCP port number . Description Using the translate x25 comman d, you can configure an X2T forwarding route from the X.25 network to the IP network. Usi n g the undo translate x25 comm and, you can disable the configuration that has been made. Whenever receiving the X.25 p ackets des tine d to a specified X.121 addre ss, the route[...]

  • Página 88

    Chapter 6 Additional ISDN Configuration Commands 6.1 isdn ignore callednum Syn tax isdn ignore callednum undo isdn ignore calle dnum View ISDN BRI interface view , CE1/PRI inte rface view , CT1/PRI interface view Parameter None Description Using the isdn ignore callednum co mmand, the user can disable the SETUP ACK messages if the received SETUP me[...]

  • Página 89

    Example Disable the E1 0 interface on the router to send SET UP ACK messages. [3Com] controller e1 0 [3Com-E1-0] pri-set [3Com-E1-0] interface serial 2:15 [3Com-serial2:15] isdn ignore callednum 6.2 isdn ignore hlc Syn tax isdn ignore hlc undo isdn ignore hl c View ISDN interface view Parameter None Description Using the isdn ignore hlc com mand, t[...]

  • Página 90

    6.3 isdn ignore llc Syn tax isdn ignore llc undo isdn ignore llc View ISDN interface view Parameter None Description Using the isdn ignore llc command, the user can configure the SETUP message to ignore the low-level compatib ility information unit when a data call is initiated. Using the undo isdn ignore llc command , you can enable the low-level [...]

  • Página 91

    View ISDN BRI interface view , CE1/PRI inte rface view , CT1/PRI interface view Parameter None Description Using isdn waitconnect ack command, the user can configure the route r to wait for CONNECT ACK message replies from the connected exchange until switching to the ACTIVE state. Using undo isdn waitconnect ack command, the user can configure the[...]

  • Página 92

    information of SPI on all the SPID-supported BRI interfa ces. Y ou may view one interface by specifying its type and nu m ber . Example Display the related information of SPID on the NI-supp orted inte rface bri 0/0/0. [3Com] display isdn spid interface bri 0 Interface bri 0/0/0: SPID Type: AUTO SPID B1: SPID Num 124345 Neg State SPID_ASSIGNED Init[...]

  • Página 93

    View ISDN PRI interface view Parameter None Description Using the isdn ignore dchan comman d, you can configure the ISDN protocol to use consecutive numbering of B channel s during call ini tiation. 1 will be subtracted from all channel numbers after slot 17, to keep the contin uity of the channel serial number . Channels are allocate d fro m 1 to [...]

  • Página 94

    Parameter dss1 : DSS1 (Digital Subscribe r Signaling No.1) signa ling is u sed. ni: National ISDN signaling is used. Description Using the isdn protocol-type command, you can config ure signaling to be used at the ISDN interface. By default, DSS1 signaling is used. When this command is us ed in System view , it will set the default signaling for th[...]

  • Página 95

    Parameter timer-nam e : Name of Q931 timer . Refer to the following t able for a description in detail. time-interval : Interval of timer . Refer to the followi ng table for a description in deta il. all : T o be used to restore the default interval values of all the Q931 timers. Description Using the isdn q931-timer command, you can co nfigure the[...]

  • Página 96

    Parameter None Description Using the isdn spid auto-trigger command, you can enable S PID auto-negotiation once on the BRI interface running the NI protocol. On a BRI interface compliant with the No rth American ISDN protocol, the router can place a call only af ter SPID negotiation or initiali zation. SPID information can be obtained via st atic c[...]

  • Página 97

    By default, NIT mode does not appl y on BRI interfaces. Instead, static SPID or dynamic SPID negotiation is applied. On an NI-compliant BRI interface, calls can be pla ced only after the SPID negotiation or initialization is finished. Whe n the router is communicating with an NI-compliant exchange that does not su pport SPID negotiation, you can u [...]

  • Página 98

    This command applies only on NI-compliant BRI interfaces. Example Set the duration of TSPID on the interfa ce bri0 to 50 seconds. [3Com-bri0] isdn spid timer 50 6.12 isdn spid resend Syntax isdn spid resend times undo isdn spid re sen d View ISDN BRI Interface view Parameter times : An integer in the range of 1 to 255 times, which default s to 1. D[...]

  • Página 99

    6.13 isdn spid service Syntax isdn spid service [audi o | dat a | speech] undo isdn spid se rvice View ISDN BRI interface view Parameter audio : Supports a udio service. dat a : Support s data se rvice. speech : Support s voice service. Description Using the isdn spid service command, you can conf igure the service ty pes t hat must be supported in[...]

  • Página 100

    6.14 isdn spid1 Syntax isdn spid1 spid undo isdn spid1 View ISDN BRI Interface view Parameter spid : S tring comprising 9 to 20 digit s. Description Using the isdn spid1 command, you can configure SPID information for t he B1 channel on an NI-compliant BRI interface. Using the undo isdn spid1 comm and, you can remove the SPID information form the B[...]

  • Página 101

    View ISDN BRI Interface view Parameter spid : S tring comprising 9 to 20 digit s. Description Using the isdn spid2 command, you can configure SPID information for t he B1 channel on an NI-compliant BRI interface. Using the undo isdn spid2 comm and, you can remove the SPID information from the B1 ch annel on the interface. On a BRI interface complia[...]