3Com 10014302 инструкция обслуживания

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101

Идти на страницу of

Хорошее руководство по эксплуатации

Законодательство обязывает продавца передать покупателю, вместе с товаром, руководство по эксплуатации 3Com 10014302. Отсутствие инструкции либо неправильная информация, переданная потребителю, составляют основание для рекламации в связи с несоответствием устройства с договором. В законодательстве допускается предоставлении руководства в другой, чем бумажная форме, что, в последнее время, часто используется, предоставляя графическую или электронную форму инструкции 3Com 10014302 или обучающее видео для пользователей. Условием остается четкая и понятная форма.

Что такое руководство?

Слово происходит от латинского "instructio", тоесть привести в порядок. Следовательно в инструкции 3Com 10014302 можно найти описание этапов поведения. Цель инструкции заключается в облегчении запуска, использования оборудования либо выполнения определенной деятельности. Инструкция является набором информации о предмете/услуге, подсказкой.

К сожалению немного пользователей находит время для чтения инструкций 3Com 10014302, и хорошая инструкция позволяет не только узнать ряд дополнительных функций приобретенного устройства, но и позволяет избежать возникновения большинства поломок.

Из чего должно состоять идеальное руководство по эксплуатации?

Прежде всего в инструкции 3Com 10014302 должна находится:
- информация относительно технических данных устройства 3Com 10014302
- название производителя и год производства оборудования 3Com 10014302
- правила обслуживания, настройки и ухода за оборудованием 3Com 10014302
- знаки безопасности и сертификаты, подтверждающие соответствие стандартам

Почему мы не читаем инструкций?

Как правило из-за нехватки времени и уверенности в отдельных функциональностях приобретенных устройств. К сожалению само подсоединение и запуск 3Com 10014302 это слишком мало. Инструкция заключает ряд отдельных указаний, касающихся функциональности, принципов безопасности, способов ухода (даже то, какие средства стоит использовать), возможных поломок 3Com 10014302 и способов решения проблем, возникающих во время использования. И наконец то, в инструкции можно найти адресные данные сайта 3Com, в случае отсутствия эффективности предлагаемых решений. Сейчас очень большой популярностью пользуются инструкции в форме интересных анимаций или видео материалов, которое лучше, чем брошюра воспринимаются пользователем. Такой вид инструкции позволяет пользователю просмотреть весь фильм, не пропуская спецификацию и сложные технические описания 3Com 10014302, как это часто бывает в случае бумажной версии.

Почему стоит читать инструкции?

Прежде всего здесь мы найдем ответы касательно конструкции, возможностей устройства 3Com 10014302, использования отдельных аксессуаров и ряд информации, позволяющей вполне использовать все функции и упрощения.

После удачной покупки оборудования/устройства стоит посвятить несколько минут для ознакомления с каждой частью инструкции 3Com 10014302. Сейчас их старательно готовят или переводят, чтобы они были не только понятными для пользователя, но и чтобы выполняли свою основную информационно-поддерживающую функцию.

Содержание руководства

  • Страница 1

    3Com R outer Command R eference Guide Addendum for V1.20 http://www.3com.com/ Part No. 100143 02 Published Janu ary 2004[...]

  • Страница 2

    1.1. Intr oduction 1.1.1. Scope This manual provides command ref erence information f or new software features foun d in V1.20 of the 3Com Router op erating system. Use this addend um to supplem ent command reference information found i n the 3Com Rout er Comm and Reference Gui de . 1.1.2. Online Re sources Download the Ro uter 3000 Installati on G[...]

  • Страница 3

    Chapter 1 CBQ Configuration Commands 1.1 af Syn tax af bandwid th { bandwidth | pct percent age } undo af View Policy-class v iew Parameter bandwid th : Bandwidt h in kbit/s in the range of 8 to 1000000. percentag e : Percentage o f available bandwid th in the range of 1 to 100. Description Using the af command, you can configure the class to perfo[...]

  • Страница 4

    1.2 car Syn tax car cir rate [ cbs size ebs size ] [ conform action [ exceed action ] ] undo car View Policy-class v iew Parameter cir rate : Committed information rate in the ra nge of 8 000 to 155000000 bit/s. cbs size : Committed burst size, that is, the number of bit s that can be sent in each interval in the range of 15000 to 155000 000 bit s.[...]

  • Страница 5

    For the related command, see qos policy , qos-clas s . Example Configure traf fic monitoring for a class. The normal traf fic of packet s is 38400bit/s. Burst traffic twice of the normal traf fic can pass initially and later the traffic is transmitted normally when the rate does not exceed 38 400bit/s. When the rate exceeds 38400bit/s, the preceden[...]

  • Страница 6

    Description Using the debugging qos command, you can enable the debu gging of QoS. Using the undo debugging qos command, you ca n disable the debugging of Qos. By default, the debugging of QoS is disabled. Example Enable the debugging of the CBQ class in formation on the interfa c e Serial0. [Router] debugging qos cbq class interface serial 0 1.4 d[...]

  • Страница 7

    1.5 display qos class Syn tax display qos class [ class-name ] View All views Parameter class- name : Name of the class. By default, the information of all classes are displayed. Description Using the display qos class command, you can browse the class info rmation concerning router configu ra tion. Example [3Com] display qos class QoS Class Config[...]

  • Страница 8

    Parameter policy-name : Name of policy . By default, the configuration information of all policies are displayed. class- name : Class name in the policy . Description Using the display qos policy command, you can b rowse the configuration information of the specified or all classe s of the specifi ed or all policies. Example [3Com] display qos poli[...]

  • Страница 9

    Committed Access Rate: CIR 8000 (Bps), CBS15000 (Bit), EBS 0 (Bit) Conform Action: remark mpls exp 3 and pass Exceed Action: discard Class: SH APE Behavior(s): Traffic Shape: CIR 8000 (Bps), CBS 15000 (Bit), EBS 0 (Bit) Queue Length 1024 (Packet) 1.7 display qos policy interface Syn tax display qos policy interface [ { type number } [ inbound | out[...]

  • Страница 10

    Behavior(s): Default Queue: Flow Based Fair Queueing Max number of hashed queues 256 Matched: 0/0 (Packets/Bytes) Enqueued: 0/0 (Packets/Bytes) Discarded: 0/0 (Packets/Bytes) Discard Method: Tail Class: 3C OM Matched: 0/0 (Packets/Bytes) Operator: Logical AND Rule(s): If-match ip-precedence 5 Behavior(s): Expedited Forwarding Bandwidth 8 (Kbps), Bu[...]

  • Страница 11

    General Traffic Shaping: CIR 8000 (Bps), CBS 15000 (Bit), EBS 0 (Bit) Queue Length: 1024 (Packets) Queue Size: 0 (Packets) Pass : 0/0 (Pa ckets/Bytes) Discard : 0/0 (Packets/Bytes) Delay : 0/0 (Packets/Bytes) Interface: Serial0 Direction: Inbound Policy: te st Class: de fault-class Matched: 0/0 (Packets/Bytes) Rule(s): If-match any Behavior(s): -no[...]

  • Страница 12

    View Policy-class v iew Parameter bandwid th : Bandwidt h in kbit/s in the range of 8 to 1000000. size : S pecify the allowed burst size in byte in the range of 32 to 2000000. By default, it is bandwidt h * 25. Description Using the ef command, you can co nfigure cert ain class to perfo rm expedited-forwarding to send the pa ckets of this class int[...]

  • Страница 13

    Parameter cir rate : Committed information rate. cbs size : Burst size in the range of 15000 to 155000000 bits. By default, it is equal to half of cir rate . ebs size : Excessive burst size in the range of 0 to 155 0000 00 bits. By default, it is 0. queue-length length : Queue length in t he range of 1 to 1024. By default, it is 50. Description Usi[...]

  • Страница 14

    View Class view Parameter access-list-number : ACL number . logic-not : Do not match the class. Description Using the if-match acl command, you can d efine an ACL match rule. Using the undo if-match acl command, you can delete an ACL match rule. For the related command, see qos clas s . Example Define a class to match ACL101. [3Com] qos class class[...]

  • Страница 15

    Example Define match rule for all packet s . [3Com] qos class class1 [3Com-qosclass-class1] if-match any 1.12 if-match class Syn tax if-match [ logic-not ] class class-name undo if-match [ logic-not ] class class-name View Class view Parameter class- name : Class name. Description Using the if-match class command, you can defin e the match rule for[...]

  • Страница 16

    Example Define class2 by invoking class1. Define match rule for class2. As class1 w ill be invoked, you shou ld configure cl ass1 first.The match rule for class1 is: IP precedence is 5. [3Com] qos class class1 [3Com-qosclass-class1] if-match ip-precedence 5 Define class2 pa ckets with the match rule as clas s1 and destinatio n MAC address as 0050-B[...]

  • Страница 17

    1.14 if-match inbound-interface Syn tax if-match [ logic-not ] inbound-inter fa ce { type number } undo if-match [ logic-not ] inbound-interface { type number } View Class view Parameter interface - type : Interface type. number : Interface number . Description Using the if-match inbound-interface comma nd, you can define input interface match rule[...]

  • Страница 18

    Parameter ip-dscp value : DSCP value in the range of 0 to 63. Description Using the if-match dscp command, you can defin e DSCP match rule. Usin g the undo if-match dscp command, you can delete DS CP match rule. Y ou can configure this command for a cla ss for several times. When a command is configured, the ip-dscp-val ue will be sorted in the asc[...]

  • Страница 19

    Description Using the if-match ip-pr ecedence command, you can define IP precedence match rule. Using the undo if-match ip-precedence command, you can delete IP precedence match rule. When the command is configured, the ip-precedence-valu e will be sorted automatically in ascending order . Up to 8 precedence value s can be specified. If several ide[...]

  • Страница 20

    The match rule for source MAC address is ef fective only for input p olicies and Ethernet interfaces. For the related command, see qos clas s . Example Define the match rule of class1 as follows: match the p ackets with the destination MAC address as 0050-ba27-b ed3. [3Com] qos class class1 [3Com-qosclass-class1] if-match destination-mac 00-50-ba-2[...]

  • Страница 21

    1.19 if-match rtp Syn tax if-match [ logic-not ] rtp st art-port starting-po rt-number end-po rt end-por t-number undo if-match [ logic-not ] rtp st art-port st arting-port-num ber end-port end-port-number View Class view Parameter starting-port-num ber : S tarting R TP port number in the range of 200 0 to 65535. end-port-number : Endin g R TP port[...]

  • Страница 22

    View Interface view Parameter token- number : The number of sending toke ns, in the range from 1 to 50. Description Using the qmtoke n command, you can configure the number of Q oS sending tokens. Using the undo qmtok en command, you can di sable the sendin g token function of QoS. By default, disable QoS sending token functio n. In such operation [...]

  • Страница 23

    View Interface view Parameter inbound : Inbound direction. outbound : Outbound direction. policy-name : Policy name. Description Using the qos apply policy command, you can att ach an associated QoS policy to an interface. Using the undo qos a pply policy command, you can delete associated QoS policy from an interface. If the sum of the bandwidths [...]

  • Страница 24

    View System view . Parameter logic-and : S pecify the relation between the rules in the class as logic AND. That is, the packet that matches al l t he rules belongs to this cl ass. logic-or : S pecify the relation between the rules in the cla ss as logic OR. That is, the packet that matches any o ne of the rules belongs to this class. class- name :[...]

  • Страница 25

    Description Using qos max-bandwid t h command, you can set the maximum band width of an interface. Using undo qos max-band wid th command, you can remove the setting of the maximum bandwidt h. By default, the maximum bandwidth i s not configured for all interfaces. The bandwidt h set by this command is only a logic value, not the actual band width [...]

  • Страница 26

    Description Using qos policy command, you can define a poli cy and enter map vi e w . U s ing undo qos policy command, you can delete a policy . The policy cannot be deleted if it is applied on an interface. It is nece ssary to remove application of the policy on the current interface b efore deleting it via the undo qos policy command. For the rel[...]

  • Страница 27

    Example Set the percentage of the maximum re served bandwid th allocated to the R TP queue application to 70% of the available bandwid th. [3Com-Serial0] qos reserved-bandwidth pct 70 1.26 qos-class Syn tax qos-class class-name undo qos-class class-name View Class view Parameter class- name : Name of class. It is a pr edefined class name and can be[...]

  • Страница 28

    View Policy-class v iew Parameter queue-length : Maximum threshol d value of the queue in the range of 1 to 1024. The default drop mode is tail d rop. Description Using queue-length command, you can configure maximum queue length. Usin g undo queue-length command, you can delete configuratio n. This command can be use d only af ter the af or wfq co[...]

  • Страница 29

    Parameter value : DSCP value in the range of 0 to 63, whi ch can be any of the followi ng keys: ef , af1 1 , af12 , af13 , af21 , af22 , af23 , af31 , af32 , af33 , af41 , af42 , af43 , cs1 , cs2 , cs3 , cs4 , cs5 or cs7 . Description Using remark ip - dscp command, you can configure t he DSCP value for a cla ss to identify the matched p ackets. Us[...]

  • Страница 30

    Example Configure precedence value to 6 to identify p a ckets. [3Com] qos policy 3Com [3Com-qospolicy-3Com] qos-class database [3Com-qospolicy-c-3Com database] remark ip-precedence 6 1.30 wfq Syn tax wfq [ queue-number total -qu eue-number ] undo w fq View Policy-class v iew Parameter total-queu e-number : Number of fair queue, whi ch can be 16, 32[...]

  • Страница 31

    undo w red [ ip-dscp | ip-precedence ] View Policy-class v iew Parameter ip - dscp : Indicate that DSCP value is used when calculating dro p proportion for a pack et. ip-precedence : Indicate that IP prece dence value is used when cal culating drop proportion for a packet. By default, ip-precedence i s configured. Description Using wre d command, y[...]

  • Страница 32

    View Policy-class v iew Parameter value : DSCP value in the range of 0 to 63, which ca n be any of the following keys: ef , af1 1 , af12 , af13 , af21 , af22 , af23 , af31 , af32 , af33 , af41 , af42 , af43 , cs1 , cs2 , cs3 , cs4 , cs5 or cs7 . low-limit : Lower threshold value in the range of 1 to 10 24. It is 10 by default. high-limit : Upper th[...]

  • Страница 33

    1.33 wred ip-precedence Syn tax wred ip-precedence value low-limit low-limit high-limit high-limit [ discard-probability discard-prob ] undo wred ip-precedence valu e View Policy-class v iew Parameter value : Precedence of IP packet s in the range of 0 to 7. low-limit : Lower threshold value in the range of 1 to 10 24. It is 10 by default. high-lim[...]

  • Страница 34

    1.34 wred weighting-constant Syn tax wred weighting-const ant exponent undo w red weighting-const ant View Policy-class v iew Parameter exponent : Exponential in the ra nge of 1 to 16. It is 6 by default. Description Using wred w eighting-const ant command, you can set exponential for the calculation of average queue length by WRE D. Using undo wre[...]

  • Страница 35

    Chapter 2 TACACS+ Configuration Commands 2.1 debugging hwtacacs Syn tax debugging hwt acacs { authentication | authoriza tion | accounting } [ packet ] [ user user-nam e ][ interface inter face-name ] undo debugging hwt acacs { authentication | aut horization | accou nting } [ packet ] [ user user-name ][ interface interface-name | { interface-type[...]

  • Страница 36

    Using debugging hwt acacs authentication command, you can display the authentication information and th e authorizatio n st ate of the current users. If the command is not configured with any argume nt, the information of all the users will be displayed. If the argument user ha s been configured, only the authentication information of the specified[...]

  • Страница 37

    Example # Display the accounting information of AAA users. [3Com] display hwtacacs accounting Hwtacacs Accounting Statistics Accounting Packet Wait-Queue Length: 0 Username don Accounting time=00:01:19 Accounting type=Login,Service=SHELL ----------------------------------------------------------- Username don Accounting time=00:00:12 Accounting typ[...]

  • Страница 38

    Table 2-1 Field description of the display hwtacacs accounting command Item Description interface Interface used by a user, which can be any type of i nterfaces listed as follows: Physical interfac es: Synchronous s erial interface, asynchronous serial i nterface, Ethernet interface, AUX interface, console i nterface, Asy nchronous Modem (AM) inter[...]

  • Страница 39

    AUTHENTICA TION TERMINA TE packets sent by the router , the received and transmitted packet s, and the number of connection failures. Using the display h wtacacs serv e r verbose command, you can display the size of the accounting, authori zati on and accounting que ues of AAA users, whether the queue has been fully occupied, and the messa ge displ[...]

  • Страница 40

    View Hwtacacs vie w Parameter None Description Using domain command, you can configure a spec ifi ed T ACACS+ server to permit a user to directly specify the domain na me when entering the user name. Using undo domain command, you can disallo w a specified T ACACS+ serv er to permit the user to directly specify the domain name wh en entering the us[...]

  • Страница 41

    Parameter ip ip-address : IP address o f the T ACACS+ server to be added. name host-name : Name of the T ACACS+ server to be added, which h as been configured by the IP host comman d. It is a string of 1 to 20 print able characters except for the space. port port-number : The se rvice port number on the T ACACS+ server , which is in the range of 1 [...]

  • Страница 42

    Each T ACACS+ server group allo ws only one primary authe ntication server , one primary authorization serv er , and one primary accounting server . When you configure a second primary server , there will be prompt information, the previous primary AAA server will be changed i nto a common server , and the newly configured server will be taken as t[...]

  • Страница 43

    2.6 hwtacacs-server template Syn tax hwtacacs-server template template-name undo hwta ca cs-server template template-name View System view Parameter template-name : The string naming a server g roup, which cont ains 1 to 20 printable characters except for the sp ace. Description Using hwtac acs-server template co mmand, you can create a T ACACS+ se[...]

  • Страница 44

    2.7 reset hwtacacs accounting statistics Syn tax reset hwt acacs accounting st atistics View All views Parameter None Description Using reset h w tac acs accounting st atistics command, you can clear all acco unting statist i cs for AAA users. For a related command, see display h wtaca cs ac counting . Example # Clear all accounting st atistics for[...]

  • Страница 45

    Example # Clear all the st atisti cs of T ACACS+ servers. [Router] reset hwtacacs server statistics 2.9 shared-key Syn tax shared-key key- str in g undo shared-key View Hwtacacs vie w Parameter key-strin g : The encrypted key used for t he AAA negotiation between the router and a T ACACS+ server . It is a string of 1 to 64 print able chara cters (e[...]

  • Страница 46

    2.10 source-ip Syn tax source-ip { ip-address | interface interface -type inte rface-n umber } undo source-ip View Hwtacacs vie w Parameter ip-address : T he source IP address of all the T ACACS+ pa ckets. interface-type : Interface type, such as serial. interface-number : Interface numbe r , including the main inte rface number and the sub-interfa[...]

  • Страница 47

    2.11 timer quiet Syn tax timer quiet minute s undo timer quiet View Hwtacacs vie w Parameter minutes : Switchover interval, which must be in the range of 1 to 255 minutes and defaults to 5 minutes. Description Using the timer quiet command, you can configure a stan dby/primary server switchover int erval in case the cur rent AAA service is provided[...]

  • Страница 48

    Chapter 3 SSH Configuration Commands 3.1 debugging rsa Syn tax debugging rsa undo debugging rsa View All views Parameter None Description Using the debugging rsa comma nd, you can enable RSA debugging and send the details of all the processes and the p acket structu re of the RSA algorithm to the info-center in the form of debu gging information. U[...]

  • Страница 49

    View User view Parameter VTY index : The SSH ch annel being de bugged. Its v alue is a VTY number an d is in the range of 0 to 4 by default. all : All the SSH channels. Description Using the debugging ssh serv er command, you can send the information such as the negotiation procedure provisione d in SSH 1.5 to the info-center in the form of debuggi[...]

  • Страница 50

    View All views Parameter None Description Using the display rsa local-k ey-p air public command, you can display the publi c key portion of the server-end host key-p air and server key-pair . If no key has ever been created, the system will inform you that it has not found any keys by displaying “RSA keys not found” for example. For related com[...]

  • Страница 51

    CF8EBE33 42C71357 FC241E4F DEB64C09 DA06995C 99859934 25F6800A AB8859BE 0F83FC63 15A3115C BD3A15E7 D52DCE19 324DBBF9 58DB936B 0203 010001 3.4 display rsa peer-public-key Syn tax display rsa peer-public-key [ brief | name keyname ] View All views Parameter brief : Displays the brief information of all the remote p ublic keys. keyname : Name of the k[...]

  • Страница 52

    Key Code: 308186 028180 E75E3D7C 11923D33 143FB829 470EA018 889147F6 6F27A98A D6C54A36 C7DB17E1 647DC2BE F1C54116 641CD690 E5F7B492 A059BD6A B86A7D18 1040765C 978AF7C9 12807EAE 819B4A65 787CDE9C 940F74C8 BC4EFD81 6CC3EBDA 51E75D1B D073AA69 1F646A81 035496AC 6F98A730 D8C44931 598682EF EA40DF88 5DD98D45 2670231D 0201 2 5 3.5 display ssh server Syn ta[...]

  • Страница 53

    VTY0 1.5 DES Session started 3Com VTY3 1.5 DES Session started router 3.6 display ssh user-information Syn tax display ssh user-information [ usernam e ] View All views Parameter userna me : A valid SSH user name defined by AAA. Description Using the display ssh user-information command, you can display information of the current SSH users, includi[...]

  • Страница 54

    View Public key edit view Parameter hex-data : Public key dat a, which is a hexadecimal character string cod ed in the public key format. Description Using the hex command, you can in put the public ke y dat a. The public key that you input must be th e one randomly generate d by the SSH client program. Y ou are allowed to input spaces in the chara[...]

  • Страница 55

    [3Com-rsa-key-code] hex C7DB17E1 647DC2BE F1C54116 641CD690 E5F7B492 A 059BD6A B86A7D18 [3Com-rsa-key-code] hex 1040765C 978AF7C9 12807EAE 819B4A65 787CDE9C 9 40F74C8 BC4EFD81 [3Com-rsa-key-code] hex 6CC3EBDA 51E75D1B D073AA69 1F646A81 035496AC 6 F98A730 D8C44931 [3Com-rsa-key-code] hex 598682EF EA40DF88 5DD98D45 2670231D [3Com-rsa-key-code] hex 02[...]

  • Страница 56

    Close the SSH process of task 36 on the route r . [3Com] kill ssh userid 36 3.9 protocol inbound Syn tax protocol inbound { ssh | telnet } numbers [ acl acl-number ] View System view Parameter ssh : Support s SSH. telnet : Supports T elnet.. numbers : S pecifies the maximum number of connec tion s that the protocol is allowed to set up. It is in th[...]

  • Страница 57

    3.10 public-key-code begin Syn tax public-key-code begin View Public key view Parameter None Description Using the public-key-code begin command, you can access the public key edi t view to input the public key data gene rated by the client program.. Before using this command, you must specify a key name usin g the command rsa peer-public-key and a[...]

  • Страница 58

    3.11 public-key-code end Syn tax public-key-code end View Public key view Parameter None Description Using the public-key -code end command, you can end the pub lic key editing and save the configure d public key . Besides, you can also u se this command to return from the public key view to the system view . After ending the publi c key editing by[...]

  • Страница 59

    [3Com-rsa-public-key] public-key-code begin [3Com-rsa-key-code] hex 308186 [3Com-rsa-key-code] hex 028180 [3Com-rsa-key-code] hex E75E3D7C 11923D33 143FB829 470EA018 889147F6 6 F27A98A D6C54A36 [3Com-rsa-key-code] hex C7DB17E1 647DC2BE F1C54116 641CD690 E5F7B492 A 059BD6A B86A7D18 [3Com-rsa-key-code] hex 1040765C 978AF7C9 12807EAE 819B4A65 787CDE9C[...]

  • Страница 60

    An essential operation underlying a succes sful SSH login is generating local RSA key-pairs by configuring rsa local-key -p air create . It is only necessary for you to execute this command on ce and you do not ha ve to execute it again af ter rebooting the router .. For related command, see rsa local-key-p air destroy . Example Generate the host k[...]

  • Страница 61

    Description Using the rsa local-key-p air destroy command, yo u can des troy all the se rver-end RSA keys (including host key-p airs and server key-pairs). After inputting this command, you are req uired to confirm whet her to destroy all the server-end RSA keys. In addition, this comma nd will not be saved in the configuration file. For related co[...]

  • Страница 62

    When executing the undo rsa peer-pu blic-key command to delet e a specified public key , the system will prompt the following in formation in case the specified key does not exist. % Public key not found. For related commands, see public-key -code begin , and public-key-code end . Example Access the public key view . [3Com] rsa peer-public-key 3Com[...]

  • Страница 63

    3.16 ssh server rekey-interval Syn tax ssh server rekey-interv al hours undo ssh server rekey -interval View System view Parameter hours : Updating interval which i s in the range of 1 to 24 hou rs. Description Using the ssh serv er rekey-interv al command, you can set the interval for up dating the SSH server key . Using the undo ssh serv er rekey[...]

  • Страница 64

    Parameter seconds : Login timeout time, which is in the rang e of 1 to 120 seconds and default s t o 60 seconds. Description Using the ssh server timeout command, you can set the login authentication timeout time at the SSH server end. Using the undo ssh se rver timeout command, you ca n restore the default login authenticati on timeout time at the[...]

  • Страница 65

    The public key that you assign to a user by using this command will replace t he one that you have assigned last time. The AAA module is responsible for the creati on and deletion of lo cal usernames in the system. Whenever creating an SSH user , The AAA module will inform SSH whenever it creates an SSH user , and SSH will add the usernam e into th[...]

  • Страница 66

    authentication-ty pe command, you can disable the login authentication mode for the user , in which case the user will be unable to log into the syste m. By default, no login authentication mode is spec ified, that is, the user is unable to log into the system. Y ou must specify an aut hentication mode for a new user , otherwise, the user will be u[...]

  • Страница 67

    Chapter 4 NTP Configuration Commands 4.1 debugging ntp-service Syn tax debugging ntp-service { acce ss | adjustment | authentication | ev ent | filter | p acket | p arameter | refclock | selection | synchronization | vali dit y | all } undo debugging ntp-service { access | adjustment | authenti cation | event | filter | p acket | p arameter | refcl[...]

  • Страница 68

    Description Using the debugging ntp-serv ice command, you can debug all the information of the NTP servi ce. Using the undo debugging ntp-serv ice command, you can disable the specified debugging. By default, debugging of all the information is di sabl ed. Example Enable NTP access cont rol debuggin g. [3Com] debugging ntp-service access 4.2 displa[...]

  • Страница 69

    ******************************************************************** [12345]127.127.1.0 LOCAL(0) 7 26 64 1 0.0 0.0 15.6 [5]10.110.101.20 0.0.0.0 16 - 64 0 0.0 0.0 0.0 note: 1 source(master),2 source(peer),3 selected,4 candidate,5 configured 4.3 display ntp-service status Syn tax display ntp-service st atus View All views Parameter None Description [...]

  • Страница 70

    Item Description root delay Total roundtrip delay to the master r eference source root disper The maximum error (dispersion) rela tive to the master reference source peer disper The dispersion of t he remote NTP serv er 4.4 display ntp-service trace Syn tax display ntp-service trace [ X.X.X.X ] View All views Parameter X.X.X.X : IP address of the N[...]

  • Страница 71

    4.5 ntp-service access Syn tax ntp-service access { query | synchronization | server | peer } acl-number undo ntp-service access { query | synchronization | serv er | peer } View System view Parameter query : Assigns the controlled query right. synchronization : Allows only the server to ac cess. server : Allows the server and query to access. peer[...]

  • Страница 72

    4.6 ntp-service authentication enable Syn tax ntp-service authentic ation enable undo ntp-service authen tication enable View System view Parameter None Description Using the ntp-service authen tication enable command, you can enabl e authentication of NTP services. Using the undo ntp-serv ice authentication enable command, you can disable authenti[...]

  • Страница 73

    Description Using the ntp-servi ce authentication-key id command, you can set an NTP authentication key . Using the undo ntp-service authentica tion-key id command, you can remove the NTP authentication key . By default, there is no authentication key . This command enables you to set an NTP authentication key . So far , only MD5 authentication is [...]

  • Страница 74

    client mode to assume the wo rk of detecting the incoming b roadcast message packet s with which it can synch roni ze the local clo ck. Example Receive NTP broa dcast messages on the interface Ethernet 1. [3Com] interface Ethernet 1 [3Com-Ethernet1] ntp-service broadcast-client 4.9 ntp-service broadcast-server Syn tax ntp-service broadcas t-server [...]

  • Страница 75

    [3Com] interface Ethernet 0 [3Com-Ethernet0] ntp-service broadcast-server authentication-key 4 version 3 4.10 ntp-service max-dynamic-sessions Syn tax ntp-service max-dy namic-sessions numb er undo ntp-service max-dy namic-s essions View System view Parameter number : The number of sessions allowed at the local, which is i n the range of 0 to 128. [...]

  • Страница 76

    Parameter X.X.X.X : Multicast IP address, that is, Cl ass D address. Description Using the ntp-servi ce multicast-client command, you can enable the NTP multicast client mode. Using the undo ntp-service multicas t-client command, you can disable the NTP multica st client mode. By default, multicast client se rvice is not configured and X.X.X.X is 2[...]

  • Страница 77

    keyid : The key ID carried in the messag es transmitted to the multicast client s, which is in the range of 1 to 4294967295. ttl : Defines the Time-T o-Live (TTL) period of multicast packet s. ttl-number : The TTL perio d of multicast packet s, which is in the range of 1 to 255. vers io n : Defines an NTP version. number : NTP version number in the[...]

  • Страница 78

    stratum : The stratum level at which the local clo ck op erates, which is in the rang e of 1 to 15. Description Using the ntp-serv ice refclock-master command, yo u can set an external reference clock or the l ocal clock to be t he NTP master cloc k. Using the undo ntp -service refclock-master comm and, you can remove the settings of NTP master clo[...]

  • Страница 79

    In the event that authentic ation has been en abled, this com mand can be used fo r specifying one or more keys to be reliabl e. In other words, client s will only synchronize it s clock to the server providing a reliable key . Otherwise, clie nts will refuse synchronization. Example Enable NTP authenti catio n, adopt MD5 encryption, set key ID to [...]

  • Страница 80

    destination addresses for receiving the response messages except for the specified one. Example S pecify the interface Ethernet 0 so that its IP address can be u sed as the source IP address carri ed by all the outbou nd NTP message p ackets. [3Com] ntp-service source-interface Ethernet 0 4.16 ntp-service source-interface disable Syn tax ntp-servic[...]

  • Страница 81

    undo ntp-service unicast-peer X.X.X.X View System view Parameter X.X.X.X : IP address of the remote server . vers io n : Defines NTP version numbe r . number : NTP version number in the range of 1 to 3. authentication-k eyid : Defines an auth entication key . keyid : The key ID carried i n the messages transmitted to the remo te server , which is i[...]

  • Страница 82

    Example Set the peer at 128.108.22.44 to be the synchronization source of the local d evice, allowing the remote peer to synchronize with the local clock. In addition, version 3 is adopted, and IP address of Ethernet 0 is us ed as the IP source address carried by the NTP me ssag es. [3Com] ntp-service unicast-peer 128.108.22.44 version 3 source-int[...]

  • Страница 83

    Description Using the ntp-serv ice unicast-server command, you can enabl e the NTP server mode. Using the undo ntp-se rvice unicast-serv er command, you can disabl e the NTP se rver mode. By default, version number is 3, authentication i s enabled, and the server is not the preferred choice. This command declare s that the local time se rver is the[...]

  • Страница 84

    Chapter 5 X2T Configuration Commands 5.1 debugging x25 x2t Syn tax debugging x25 x2t { all | event | p acket } View All views Parameter all : Enables all X2T debug ging. event : Enables the X2T event debugging. p acket : Enables the X2T packet debugging. Description Using the debugging x25 x2t comman d, you can en able X2T de b ugging. Example Enab[...]

  • Страница 85

    Description Using the display x25 x2t route command, you can display the X2T static routing table. Example Display the X2T st atic routing table maint ained by the router . [Router] display x25 x2t route SID X.121 Ip Address ============================================== 1 12 321 10.110.54.18 5.3 display x25 x2t switch-table Syn tax display x25 x2t[...]

  • Страница 86

    undo translate ip ip-address port po rt-number View System view Parameter ip-address : Local IP address. port port-num ber : TCP port number . x25 x.121-a ddress : The destination X.121 address af ter the address translation. Description Using the translate ip command, you can configure an X2T forwardi ng route from an IP network t o an X.25 networ[...]

  • Страница 87

    port port-num ber : TCP port number . Description Using the translate x25 comman d, you can configure an X2T forwarding route from the X.25 network to the IP network. Usi n g the undo translate x25 comm and, you can disable the configuration that has been made. Whenever receiving the X.25 p ackets des tine d to a specified X.121 addre ss, the route[...]

  • Страница 88

    Chapter 6 Additional ISDN Configuration Commands 6.1 isdn ignore callednum Syn tax isdn ignore callednum undo isdn ignore calle dnum View ISDN BRI interface view , CE1/PRI inte rface view , CT1/PRI interface view Parameter None Description Using the isdn ignore callednum co mmand, the user can disable the SETUP ACK messages if the received SETUP me[...]

  • Страница 89

    Example Disable the E1 0 interface on the router to send SET UP ACK messages. [3Com] controller e1 0 [3Com-E1-0] pri-set [3Com-E1-0] interface serial 2:15 [3Com-serial2:15] isdn ignore callednum 6.2 isdn ignore hlc Syn tax isdn ignore hlc undo isdn ignore hl c View ISDN interface view Parameter None Description Using the isdn ignore hlc com mand, t[...]

  • Страница 90

    6.3 isdn ignore llc Syn tax isdn ignore llc undo isdn ignore llc View ISDN interface view Parameter None Description Using the isdn ignore llc command, the user can configure the SETUP message to ignore the low-level compatib ility information unit when a data call is initiated. Using the undo isdn ignore llc command , you can enable the low-level [...]

  • Страница 91

    View ISDN BRI interface view , CE1/PRI inte rface view , CT1/PRI interface view Parameter None Description Using isdn waitconnect ack command, the user can configure the route r to wait for CONNECT ACK message replies from the connected exchange until switching to the ACTIVE state. Using undo isdn waitconnect ack command, the user can configure the[...]

  • Страница 92

    information of SPI on all the SPID-supported BRI interfa ces. Y ou may view one interface by specifying its type and nu m ber . Example Display the related information of SPID on the NI-supp orted inte rface bri 0/0/0. [3Com] display isdn spid interface bri 0 Interface bri 0/0/0: SPID Type: AUTO SPID B1: SPID Num 124345 Neg State SPID_ASSIGNED Init[...]

  • Страница 93

    View ISDN PRI interface view Parameter None Description Using the isdn ignore dchan comman d, you can configure the ISDN protocol to use consecutive numbering of B channel s during call ini tiation. 1 will be subtracted from all channel numbers after slot 17, to keep the contin uity of the channel serial number . Channels are allocate d fro m 1 to [...]

  • Страница 94

    Parameter dss1 : DSS1 (Digital Subscribe r Signaling No.1) signa ling is u sed. ni: National ISDN signaling is used. Description Using the isdn protocol-type command, you can config ure signaling to be used at the ISDN interface. By default, DSS1 signaling is used. When this command is us ed in System view , it will set the default signaling for th[...]

  • Страница 95

    Parameter timer-nam e : Name of Q931 timer . Refer to the following t able for a description in detail. time-interval : Interval of timer . Refer to the followi ng table for a description in deta il. all : T o be used to restore the default interval values of all the Q931 timers. Description Using the isdn q931-timer command, you can co nfigure the[...]

  • Страница 96

    Parameter None Description Using the isdn spid auto-trigger command, you can enable S PID auto-negotiation once on the BRI interface running the NI protocol. On a BRI interface compliant with the No rth American ISDN protocol, the router can place a call only af ter SPID negotiation or initiali zation. SPID information can be obtained via st atic c[...]

  • Страница 97

    By default, NIT mode does not appl y on BRI interfaces. Instead, static SPID or dynamic SPID negotiation is applied. On an NI-compliant BRI interface, calls can be pla ced only after the SPID negotiation or initialization is finished. Whe n the router is communicating with an NI-compliant exchange that does not su pport SPID negotiation, you can u [...]

  • Страница 98

    This command applies only on NI-compliant BRI interfaces. Example Set the duration of TSPID on the interfa ce bri0 to 50 seconds. [3Com-bri0] isdn spid timer 50 6.12 isdn spid resend Syntax isdn spid resend times undo isdn spid re sen d View ISDN BRI Interface view Parameter times : An integer in the range of 1 to 255 times, which default s to 1. D[...]

  • Страница 99

    6.13 isdn spid service Syntax isdn spid service [audi o | dat a | speech] undo isdn spid se rvice View ISDN BRI interface view Parameter audio : Supports a udio service. dat a : Support s data se rvice. speech : Support s voice service. Description Using the isdn spid service command, you can conf igure the service ty pes t hat must be supported in[...]

  • Страница 100

    6.14 isdn spid1 Syntax isdn spid1 spid undo isdn spid1 View ISDN BRI Interface view Parameter spid : S tring comprising 9 to 20 digit s. Description Using the isdn spid1 command, you can configure SPID information for t he B1 channel on an NI-compliant BRI interface. Using the undo isdn spid1 comm and, you can remove the SPID information form the B[...]

  • Страница 101

    View ISDN BRI Interface view Parameter spid : S tring comprising 9 to 20 digit s. Description Using the isdn spid2 command, you can configure SPID information for t he B1 channel on an NI-compliant BRI interface. Using the undo isdn spid2 comm and, you can remove the SPID information from the B1 ch annel on the interface. On a BRI interface complia[...]