Page 5
Reference Guide Contents 6.3.15 show data ethernet ....................112 6.3.16 show data f-path rate .................... 113 6.3.17 show data hosts ....................115 6.3.18 show data interface ....................116 6.3.19 show data ip ......................119 6.3.20 show data ipv6 ...................... 124 6.3.21 show data l2tp-server ....................
Page 6
Command-Line Interface 6.12.4 show voip cpu-stats....................162 6.12.5 show voip dsp ....................... 163 6.12.5.1 show voip dsp perf ................. 163 6.12.5.2 show voip dsp status ................163 6.12.6 show voip e911 ..................... 164 6.12.7 show voip ids ......................165 6.12.8 show voip interface ....................166 6.12.9 show voip ip-group ....................
Page 20
Command-Line Interface This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Page 21
Please contact your local recycling authority for disposal of this product. Customer Support Customer technical support and services are provided by AudioCodes or by an authorized AudioCodes Service Partner. For more information on how to buy technical support for AudioCodes products and for contact information, please visit our Web site at https://www.audiocodes.com/services-support/maintenance-and-support.
Page 22
Updates: clear voip ids blacklist entry; "prefix" changed to "pattern"; parent-child tables structure update Documentation Feedback AudioCodes continually strives to produce high quality documentation. If you have any comments (suggestions or errors) regarding this document, please fill out the Documentation Feedback form on our Web site at https://online.audiocodes.com/documentation-feedback.
Some AudioCodes products referred to in this document may not have been released in Version 7.2 so commands that apply only to them should be ignored. For a list of the AudioCodes products released in Version 7.2, refer to the SBC- Gateway-MSBR Series Release Notes Ver. 7.2.
Page 24
Command-Line Interface This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Reference Guide 2. Accessing the CLI Accessing the CLI You can access the device's CLI through the following: RS-232: The device can be accessed through RS-232 by connecting a VT100 terminal to the device or using a terminal emulation program (e.g., HyperTerminal®) with a PC. Once you have connected via a VT100 terminal and started the emulation program, set the program settings as follows: •...
Page 28
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Reference Guide 3. CLI Structure CLI Structure This section describes the CLI structure. CLI Command Modes Before you begin your CLI session, you should familiarize yourself with the CLI command modes. Each mode provides different levels of access to commands, as described below. 3.1.1 Basic User Mode The Basic User command mode is accessed upon a successful CLI login authentication.
Switching from Privileged User to Basic User mode: # disable > CLI Configuration Wizard AudioCodes CLI Wizard provides a quick-and-easy tool for configuring your device with basic, initial management settings: Login passwords of the Security Administrator ("Admin") and User Monitor user accounts for accessing the device's embedded Web and CLI servers.
Reference Guide 3. CLI Structure CLI Shortcut Keys The device's CLI supports the following shortcut keys to facilitate configuration. Table 3-1: CLI Shortcut Keys Shortcut Key Description ↑ (Up arrow key) Retypes the previously entered command. Continuing to press the key cycles through all commands entered, starting with the most recent command.
Mediant MSBR Common CLI Commands The table below describes common CLI commands. Table 3-2: Common CLI Commands Command Description | <filter> Filters a command's output by matching the filter string or expression, and thereby displaying only what you need. The syntax includes the command, the vertical bar (|) and the filter expression: <command>|<filter string or expression>...
Page 33
Reference Guide 3. CLI Structure Command Description pattern "Header.User-Agent.content prefix 'friendly-scanner'" activate exit count: Displays the number of output lines. | tail Filters the command output to display a specified number of lines from <number of the end of the output. The syntax includes the command of whose output lines>...
Page 34
Mediant MSBR Command Description Undoes an issued command, disables a feature or deletes a table row. Enter the no before the command, for example: Disables the debug log feature: # no debug log Deletes the table row at Index 2: <config-voip># no sbc routing ip2ip-routing 2 Displays the full path to the current CLI command, for example: (auto-update)# pwd...
Reference Guide 3. CLI Structure Working with Tables This section describes general commands for configuring tables in the CLI. 3.5.1 Adding New Rows When you add a new row to a table, it is automatically assigned to the next consecutive, available index.
Mediant MSBR 3.5.2 Adding New Rows to Specific Indices You can add a new row to any specific index number in the table, even if a row has already been configured for that index. The row that was assigned that index is incremented to the next consecutive index number, as well as all the index rows listed below it in the table.
Reference Guide 3. CLI Structure 3.5.3 Changing Index Position of Rows You can change the position (index) of a table row, by moving it one row up or one row down in the table. Syntax # <table name> <row index> move-up|move-down Note The command is applicable only to certain tables.
Mediant MSBR CLI Error Messages The table below lists and configures common error messages given in the CLI. Table 3-3: CLI Error Messages Message Helpful Hints "Invalid command" The command may be invalid in the current command mode, or you may not have entered sufficient characters for the command to be recognized.
Reference Guide 4. Introduction Introduction This part describes commands located at the root level, which includes the following main commands: debug (see Section 5) show (see Section 6) clear (see Section 7) Maintenance commands (see Section 8) Version 7.2 Mediant MSBR...
Page 42
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Reference Guide 5. Debug Commands Debug Commands This section describes the debug commands. Syntax # debug Command Description adsl-connection See Section 5.1 adsl-firmware See Section 5.2 auxilary-files See Section 5.3 See Section 5.4 See Section 5.5 capture See Section 5.6 cli delayed-command See Section 5.7 cwmp...
Page 44
Mediant MSBR Command Description See Section 5.30 speedtest See Section 5.31 syslog See Section 5.32 syslog-server See Section 5.33 test-call See Section 5.34 See Section 5.35 usb-3g See Section 5.36 voip See Section 5.37 See Section 5.38 zebra See Section 5.39 Reference Guide Document #: LTRT-17939...
Reference Guide 5. Debug Commands debug adsl-connection This command displays the ADSL line synchronization status (Physical Interface). The output can be displayed in the CLI as well as in the Syslog viewer after Syslog is enabled. Syntax # debug adsl-connection Command Mode Privileged User Note...
Mediant MSBR debug adsl-firmware This command configures the method for copying the firmware file. Syntax # debug adsl-firmware <tftp | usb> Command Description [A.B.C.D] = Configures the TFTP server address tftp old-image = Configures using the old-image for copying the firmware file ...
Reference Guide 5. Debug Commands 5.3.1 debug auxilary-files dial-plan This command debugs the Dial Plan file. Syntax # debug auxilary-files dial-plan {info|match-number <Dial Plan Number> <Prefix Number>} Command Description info Displays the loaded Dial Plan file and lists the names of its configured Dial Plans.
Mediant MSBR 5.3.2 debug auxilary-files user-info This command displays the name of the User-Info file installed on the device. Syntax # debug auxilary-files user-info info Command Mode Privileged User Example Displaying the name of the User-Info file installed on the device: # debug auxilary-files user-info info User Info File Name UIF_SBC.txt Reference Guide...
Reference Guide 5. Debug Commands debug bfd The Bidirectional Forwarding Detection (BFD) debug command configures the logging of debugging information for critical BFD events, normal BFD events, and BFD packets. The command configures BFD event traces and BFD event logs. The command helps administrators identify and analyze issues with BFD sessions.
Reference Guide 5. Debug Commands 5.6.1 debug capture data This command debugs data-routing functionality. The captured files are saved to a pcap file. You can also send the file to an FTP or a TFTP server or save the file to a USB device connected to the MSBR. You can also save the file locally on the MSBR, but in this case, the file size is limited to 20 MB.
Page 52
Mediant MSBR Arguments Description capture is stopped (using ctrl-c), the capture file is uploaded, via TFTP, to the TFTP server specified in this argument. The TFTP server IP address specified in this argument must be accessible from one of the data sub-system network interfaces, so that the capture file will be uploaded to the server successfully.
Reference Guide 5. Debug Commands 5.6.1.2 debug capture data physical clear The command deletes debug captured files from the device’s RAM.. Syntax debug capture data physical clear Command Mode Enable Related Commands Examples The following example deletes debug captured files from the device’s RAM. # debug capture data physical clear 5.6.1.3 debug capture data physical start...
Mediant MSBR sent to a PC via TFTP/FTP. Please make sure that VLAN 1 is defined and the PC is accessible through it. 5.6.1.4 debug capture data physical stop vrf This command stops capturing files. Syntax debug capture data physical stop server-ip vrf <vrf name> Arguments Description server-ip...
Reference Guide 5. Debug Commands Examples The debug capture is de-activated using the following existing commands: # debug capture data physical stop 192.168.0.3 vrf vrf1 Trying to send capture to TFTP/FTP server , filename debug- capture-data-16032014-154400 Finished 5.6.1.5 debug capture data physical insert-pad This command makes a manual mark in the captured file.
Mediant MSBR Arguments Description Saves the capture to USB storage. Default By default, capture is inactive. Note: The usb option is only applicable when a USB stick is connected to the device. This applies only to Mediant 5xx and Mediant 8xx devices. Command Mode Enable Related Commands...
Page 57
Reference Guide 5. Debug Commands Arguments Description <interface> Use one of the following: • eth-lan • eth-wan • cellular-wan • shdsl-wan • t1-wan • dsl-wan depending on the hardware capabilities of the device. This command may be issued multiple times to capture data from several interfaces at once.
Mediant MSBR 5.6.1.8 debug capture data physical <interface> This command records all traffic on the device's interfaces, saving the result in a PCAP- format file (suitable for Wireshark) on a TFTP server. This command provides support for debug capturing of Asynchronous Transfer Mode (ATM) packets over ADSL through the ADSL/VDSL PHY (physical layer) chipset.
Reference Guide 5. Debug Commands 5.6.2 debug capture trim This command trims captured network traffic for USB captures. Syntax # debug capture trim {in-file <File>|offset <Time>} Command Description in-file Trims captured traffic. Uses the existing file on USB storage. offset After a capture has been saved on an attached USB stick, you can trim the capture to include only a relevant time-slice.
Mediant MSBR 5.6.3.1 debug capture voip interface This command captures network traffic on a VoIP network interface (VLAN). Syntax # debug capture voip interface vlan <VLAN ID> proto <Protocol Filter> host <Host Filter> {port <Port Filter> [tftp-server <TFTP Server IP Address>|ftp-server <FTP Server IP Address>]} ...
Reference Guide 5. Debug Commands Command Description file to be successfully uploaded to the server. Ping the server to make sure it's accessible. Command Mode Privileged User Examples Starting a debug capture on network interface VLAN 12, no host filter, and no port filter; the captured traffic is displayed in the CLI console: # debug capture voip interface vlan 12 proto all host any Starting a debug capture on network interface VLAN 1 with a protocol filter (IP), no host filter,...
Page 62
Mediant MSBR Command Description insert-pad Before running this command, the debug capture must be started. Inserts a PAD packet. A marked packet is shown with black background regardless of the configured coloring rules. Benefit: A marked packet can easily be located later when analyzing in a large capture file.
Reference Guide 5. Debug Commands debug cli delayed-command This command allows you to run a specified command after a user-defined duration. Syntax # debug cli delayed-command Command Description <Delay Time> Configures how much time (in minutes or seconds) to wait {minutes|seconds} before running a specific command.
Mediant MSBR VLAN 1 unassigned Connected Internal-LAN 1 169.254.254.253 Connected BVI 1 192.168.0.1 Connected dot11radio 1 unassigned Disabled Down Cellular 0/0 0.0.0.0 Disabled Down After the timer expires, the commands are executed: # sh d ip int br Interface IP Address Status Protocol GigabitEthernet 0/0...
This command enables debug recording. To collect debug recording packets, use Wireshark open-source packet capturing program. AudioCodes' proprietary plug-in files are required. They can be downloaded from https://www.audiocodes.com/library/firmware. Once downloaded, copy the plug-in files to the directory in which you installed Wireshark, as follows: ...
Mediant MSBR Command Description SIP signaling messages, Syslog messages, CDRs, and the <device>'s internal processing messages signaling-media Configures the debug recording capture type signaling media. The debug recording includes signaling, Syslog messages, and media (RTP/RTCP/T.38). signaling-media- Configures the debug recording capture type as signaling, media PCM.
Reference Guide 5. Debug Commands Example This example configures debugging DHCP v6 client functioning: # debug dhcpv6_client 5.12 debug dhcpv6_server This command configures debugging Dynamic Host Configuration Protocol (DHCP) version 6 server processing. Syntax # debug dhcpv6_server Command Mode Privileged User Note This command is applicable only to data-router functionality.
Mediant MSBR 5.16 debug ethernet This command configures loopback testing on specific WAN interfaces, for monitoring and troubleshooting (debugging). Loopback debugging can be activated on any WAN interface (name or type) and allows the remote side to loop traffic back through the device's WAN interface (typically used to check traffic flow).
Reference Guide 5. Debug Commands 5.17 debug exception-info This command displays debug information about the exceptions. Syntax # debug exception-info <Exception Number> Command Description folder <Exception Displays debug information concerning the specified Number 1-9> exception number. Command Mode Privileged User Note This command is applicable only to data-router functionality.
Mediant MSBR 5.18 debug fax This command debugs fax modem with a debug level. Syntax # debug fax {basic|detail} [num of next sessions for debug] Command Description basic Sets debug fax level to Basic. • num of next sessions for debug (Configures the number of next sessions for debug) detail Sets debug fax level to Detail.
Reference Guide 5. Debug Commands 5.19 debug ipv6-ra This command debugs Internet Protocol Version 6 (IPv6) Router Advertisement (RA), which enables the MSBR device to advertise its presence. Syntax # debug ipv6-ra <Debug Level> Command Description Debug Level Configures the IP Version 6 RA debug level. ...
Mediant MSBR 5.20 debug log This command displays debugging messages (e.g., Syslog messages). Also displays activities performed by management users in the devices' management interfaces (CLI and Web interface). Syntax # debug log Command Description full (Optional) Displays more information than the regular debug messages, for example, 'SID' (Session ID) and 'S' (Syslog message sequence).
Reference Guide 5. Debug Commands 5.21 debug ospf This command debugs Open Shortest Path First (OSPF) routing protocol for Internet Protocol (IP) networks. Syntax # debug ospf Command Description event Displays OSPF event information. ism {events|status|timers} Debugs the OSPF Interface State Machine (ISM Event Information, ISM Status Information and ISM TImer Information).
Mediant MSBR 5.22 debug ospf6 This command debugs the Open Shortest Path First (OSPF) routing protocol for Internet Protocol (IP) Version 6 networks. Syntax # debug ospf6 Command Description Debugs the OSPF Version 6 Area Border Router (ABR) function. ABRs connect one or more areas to the main backbone network.
Page 77
Reference Guide 5. Debug Commands Command Description route {inter- Debugs the calculation of the route table: area|intra-area| inter-area (Debugs the calculation of the inter- memory|table} area route) intra-area (Debugs the calculation of the intra- area route) memory (Debugs route memory use) ...
Mediant MSBR 5.23 debug phy-err-injection This command debugs the Rx physical error injection. Syntax # debug phy-err-injection Command Description set delay-depth <Value> Configures the delay depth, in packets set delay-rate <Value> Configures the delay rate set drop-rate <Value> Configures the drop rate set interface Configures the interface to run the Rx {atm|efm|fiber|gigabitethernet}...
Reference Guide 5. Debug Commands 5.24 debug pstn This command activates PSTN debugging. Syntax # debug pstn Note To deactivate PSTN debugging, type no debug pstn. Command Mode Privileged User Related Commands debug voip interface Example This example shows how to activate PSTN debugging: # debug pstn PSTN debug has been turned on.
Mediant MSBR 5.25 debug reset-history This command displays a history (last 20) of device resets and their causes. Syntax # debug reset-history Command Mode Privileged User Example This example debugs reset history: # debug reset-history Reset History : Reset History [00]: Number Of Times Data Configuration File Saved To Flash 0 Reset Reason: SW Automatic Update Time : 13-3-2017 13:54:29...
Mediant MSBR 5.27 debug ripng This command RIPng (RIP next generation), defined in RFC 2080, is an extension of RIPv2 for support of IPv6 - next generation Internet Protocol. Syntax # debug ripng Command Description events Debugs RIPng events packet {recv Debugs RIPng packets: [detail]|send ...
Reference Guide 5. Debug Commands 5.28 debug rmx-serial This command configures serial debugging of the RMX (Real-Time Multitasking Executive) real-time operating system, used with the Intel 8080 and 8086 family of processors. Syntax # debug rmx-serial Command Description clear-logs Clears all logs. copy-logs-usb Copies all saved RMX logs to USB storage.
Mediant MSBR 5.29 debug serial-port This command debugs the serial port. Syntax # debug serial-port Command Description configuration Displays the configuration of the second serial port: {show} RMX (default), DSL1 or DSL2. dsl {burn-to-flash} Configures the second serial port to DSL. dsl2 {burn-to- Configures the second serial port to DSL2.
Mediant MSBR 5.31 debug speedtest This command tests the upload and download speed (in bps) to and from a specified URL, respectively. Syntax # debug speedtest set {upload|download} <URL> # debug speedtest set upsize <Upload Transfer Bytes> # debug speedtest {run|show|stop} Command Description upload...
Reference Guide 5. Debug Commands 5.32 debug syslog This command verifies that Syslog messages sent by the device are received by the Syslog server. After you run the command, you need to check the Syslog server to verify whether it has received your Syslog message.
Mediant MSBR 5.33 debug syslog-server This command configures the IP address and port of the Syslog server. Syntax # debug syslog-server <IP Address> port <Port Number> Command Description IP Address Configures the IP address of the Syslog server. Configures the port number of the Syslog server. port Note To disable Syslog server debugging, use the following command:...
Reference Guide 5. Debug Commands 5.34 debug test-call This command initiates and terminates a call from the device to a remote destination to test whether connectivity, media, etc., are correct. Sends a SIP INVITE message and then manages the call with the call recipient. Syntax # debug test-call ip ...
Mediant MSBR Command Mode Privileged User Note The command is applicable only to the SBC application. Test calls can be made with the following two recommended commands: • (Basic) Making a call from one phone number to another, without performing any configuration: debug test-call ip dial from * to * dest-address * [sip- interface *]...
Mediant MSBR 5.37 debug voip This command debugs voice over IP channels. # debug voip Command Description activate-channel Configures a specific channel. {analog|digital|virtual} <Channel ID> close-channels Closes channels. To view the orientation of the {analog|digital|virtual} device's hardware, use the command, show system assembly.
Reference Guide 5. Debug Commands 5.38 debug vrf This command debugs the MSBR's VRF (Virtual Routing and Forwarding) table which determines what routes to import/export. Syntax # debug vrf <VRF table name> Command Mode Privileged User Note This command is applicable only to data-router functionality. Example This example debugs the VRF table: # debug vrf table1...
Mediant MSBR 5.39 debug zebra This command debugs Zebra routing software. Zebra provides TCP/IP based routing services with support from routing protocols RIP, OSPF and BGP. Zebra also supports IPv4 and IPv6 routing protocols. Syntax # debug zebra Command Description events Debug option set for Zebra events kernel...
Reference Guide 6. Show Commands Show Commands This section describes the show commands. Syntax show Command Description activity-log See Section 6.1 admin state See Section 6.2 data See Section 6.3 ini-file See Section 6.4 last-cli-script-log See Section 6.5 network See Section 6.6 running-config See Section 6.7 startup-script...
Mediant MSBR Note If you have not enabled logging of user activities in the management interface, nothing is displayed in the output of this show command. To enable logging, see the following command: configure troubleshoot > activity-log Related Command configure troubleshoot > activity-log – enables logging of activities Example This example displays the logged messages: show system log...
Page 97
Reference Guide 6. Show Commands Command Description access-lists See Section 6.3.1 See Section 6.3.2 backup-group See Section 6.3.3 See Section 6.3.4 See Section 6.3.5 bridge- See Section 6.3.6 configuration See Section 6.3.7 cellular See Section 6.3.8 crypto See Section 6.3.9 ddns See Section 6.3.10 debugging...
Mediant MSBR Note This command is applicable only to data-router functionality. 6.3.1 show data access-lists This command displays configured access lists. Syntax show data access-lists Command Mode Basic User and Privileged User Note This command is applicable only to data-router functionality. Example This example demonstrates how to view configured access lists: show data access-lists...
Page 99
Reference Guide 6. Show Commands This command displays the configuration of a set of interfaces in a backup group. Syntax show data backup-group Command Mode Basic User and Privileged User Related Commands (config-data)backup-group Note This command is applicable only to data-router functionality. Example This example displays the configuration of a set of interfaces in a backup group: show data backup-group...
Mediant MSBR 6.3.4 show data bfd neighbors This command displays details about Bidirectional Forwarding Detection (BFD) neighbors. Syntax show data bfd neighbors Command Description details [vrf <VRF Displays detailed status of all configured BFD neighbors Table Name>] or, optionally, of a specified VRF table. vrf <VRF Table Displays the status of configured BFD neighbors for a Name>...
Reference Guide 6. Show Commands 6.3.5 show data bgp This command displays information about Border Gateway Protocol (BGP) processing. Syntax show data bgp Command Description memory Displays statistics on global BGP memory. view <BGP View Displays information about BGP. Name> ...
Mediant MSBR 6.3.6 show data bridge-configuration This command displays the Ethernet bridging configuration. Syntax show data bridge-configuration Command Mode Basic User and Privileged User Note This command is applicable only to data-router functionality. Example This example displays the Ethernet bridging configuration: show data bridge-configuration 6.3.7 show data cellular...
Reference Guide 6. Show Commands 6.3.8 show data crypto This command displays information about the encryption module. Syntax show data crypto Command Description conf Displays the configuration of the IPSec VPN. debug Displays diagnostic information about the IPSec VPN. server Displays information about the active VPN server.
Reference Guide 6. Show Commands 6.3.9 show data ddns This command displays the configuration of the Dynamic Domain Name System (DNS). Syntax show data ddns Command Mode Basic User and Privileged User Note This command is applicable only to data-router functionality. Example This example displays the configuration of the DDNS: show data ddns...
Mediant MSBR 6.3.10 show data debugging This command displays debugging information. Syntax show data debugging Command Description Displays debugging information about BGP. ospf Displays debugging information about OSPF. ospf6 Displays debugging information about OSPF6. Displays debugging information about Routing Information Protocol (RIP) which enables routing information to be exchanged between routers.
Reference Guide 6. Show Commands Zebra packet debugging is on Zebra kernel debugging is on Zebra RIB debugging is on Zebra RIB queue debugging is on 6.3.11 show data dns-views This command displays the configuration of the DNS (Domain Name System) server's view feature which allows binding DNS queries source to a specified DNS server destination.
Mediant MSBR 6.3.12 show data dot11radio This command displays status information about the MSBR router's wireless module. Syntax show data dot11radio Command Description associations Displays the stations associated with this WiFi access {all|interface|stats point: interface} all (Displays all stations associated with this access point) ...
Page 109
Reference Guide 6. Show Commands ssid MSBR broadcast security mode NONE no security mac mode mode ngb channel width 40/20 channel auto power 100 beacon dtim-period 1 beacon period 100 fragment threshold 2346 cts mode none cts type burst num 3 burst time rts threshold 2346 country code 0x178 (376)
Mediant MSBR 6.3.13 show data dot1x-status This command displays the status of the 802.1x port. Syntax show data dot1x-status Command Mode Basic User and Privileged User Note This command is applicable only to data-router functionality. The RADIUS server must be configured for EAP. Example This example displays the stations associated with this access point: show data dot1x-status...
Reference Guide 6. Show Commands 6.3.14 show data dsl This command displays information about digital subscriber line (DSL) connectivity. DSL includes both ADSL (asymmetric digital subscriber line) and VDSL (very-high-bit-rate digital subscriber line). Syntax show data dsl Command Description status Displays status information about the ADSL/VDSL connection.
Mediant MSBR 6.3.15 show data ethernet This command displays status information about CFM (Connectivity Fault Management). Syntax show data ethernet Command Description cfm {legend} Displays the status of the CFM (IEEE 802.1ag) standard defined by IEEE for local and metropolitan area networks virtual bridged local area networks.
Reference Guide 6. Show Commands Error legend: VLAN : The local logical interface is down. RmtRDI: One of the remote MEPs is not receiving all CCMs. : One of the remote MEPs has a blocked port status. Remote: There are no known remote MEPs. XCON : The MEP is receiving CCMs from different domains or services.
Page 114
Mediant MSBR Command Description show data f-path Displays throughput counters of traffic using fast-path or rate full-path. show data f-path Displays throughput counters of traffic using fast-path or rate refreshing full-path, and refreshes the output every three seconds until the CTRL+C keys are pressed. Command Mode Basic User and Privileged User Note...
Reference Guide 6. Show Commands 6.3.17 show data hosts This command displays the configured DNS server entries and current DNS entries in cache for all Layer 3 interfaces. This includes A/SRV/NAPTR records, and their parameters. Syntax show data hosts Command Mode Basic User and Privileged User Note This command is applicable only to data-router functionality.
Mediant MSBR 6.3.18 show data interface This command displays information about each MSBR interface. Syntax show data interface Command Description Displays information about the ATM on xDSL interfaces <Group/Subinterface> (per DSL line group and ATM sub-interface ID). bvi <Bridge Displays information about the bridge interface. Interface ID>...
Page 117
Reference Guide 6. Show Commands Command Description L2TP is used to support VPNs and for ISP services delivery. loopback <ID> Displays information about the Loopback interfaces, according to interface ID. The MSBR's loopback interface is logical and virtual rather than physical like the Fast Ethernet interface or the Gigabit Ethernet interface.
Page 118
Mediant MSBR This example displays a description of the interfaces: show data interfaces description Interface Status Protocol Description GigabitEthernet 0/0 Connected Copper Fiber 0/1 Enabled Fiber EFM 0/2 Disabled Down VDSL FastEthernet 1/1 Disconnected Down FastEthernet 1/2 Disconnected Down FastEthernet 1/3 Disconnected Down FastEthernet 1/4...
Reference Guide 6. Show Commands 6.3.19 show data ip This command displays configured access lists. Syntax show data ip Command Description access-list Configures the name or number of the access-list to display. arp <vrf> Displays the Address Resolution Protocol (ARP) table entries. ...
Page 120
Mediant MSBR Command Description pool (Displays DHCP pools information) zone (Displays DHCP server zones) dhcp-server all Displays information on all DHCP server interfaces. extcommunity-list Displays information about the Extended Community Lists. firewall {max-conn- Displays firewall statistics: statistics|states} firewall max-conn-statistics {last-72-hours|last-hour} Displays firewall states: firewall states [brief]...
Page 121
Reference Guide 6. Show Commands Command Description brief (Displays IP NAT summary) pools (Displays IP NAT pools) rules (Displays IP NAT rules) translations (Displays currently active translations) ospf {border- Displays Open Shortest Path First routers|database|interface|neig (OSPF). hbor<[A.B.C.D]|all|atm|bvi|cell ular|dot11radio|efm|fiber|gigab itethernet|gre|ipip|ipipv6|ipv6...
Page 122
Mediant MSBR Relay Server is disabled. DHCP relay server of interface GigabitEthernet 0/0 : Relay Server is disabled. DHCP relay server of interface EFM 0/2 : Relay Server is disabled. DHCP relay server of interface GigabitEthernet 0/2 : Relay Server is disabled. DHCP relay server of interface Fiber 0/1 : Relay Server is disabled.
Page 123
Reference Guide 6. Show Commands ip port-map ftp port[21] active[Y] ip port-map dns port[53] active[Y] ip port-map dhcp port[67] active[Y] ip port-map ike port[500] active[Y] ip port-map pptp port[1723] active[N] ip port-map aim port[5190] active[Y] ip port-map msn Messenger port[1863] active[Y] ip port-map sip port[5060] active[N] ip port-map h323 cs port[1720] active[Y] ip port-map h323 ras port[1719] active[Y]...
Mediant MSBR 6.3.20 show data ipv6 This command displays information related to Internet Protocol version 6. Syntax show data ipv6 Command Description bgp {neighbors <IP address> Displays information about |summary|vrf} Border Gateway Protocol (BGP) processing. neighbors <IP address> (Displays detailed information about the connections of the TCP and BGP neighbor router whose...
Page 125
Reference Guide 6. Show Commands Command Description dot11radio|efm|fiber|gigabitethernet| gre|ipip|ipipv6|ipv6ip|l2tp|loopback| pppoe|pptp|vlan|prefix>|linkstate<detai |network router>|neighbor<detail| drchoice>|redistribute|route<IP Version 6 Address in X:X::X:X format|detail|external-1|external- 2|inter-area|intra- area|summary>|simulate<SPF Tree>|spf<SPF Tree>|vrf<VRF Table Name>} prefix-list {Prefix List Name|detail| Displays a prefix list. summary|vrf} ripng {status|vrf<VRF Table Name>} Displays RIPng (RIP next generation) routes.
Mediant MSBR 6.3.21 show data l2tp-server This command displays the Layer 2 Tunneling Protocol (L2TP) server connections. Syntax show data l2tp Command Mode Basic User and Privileged User Note This command is applicable only to data-router functionality. Example This example displays displays incoming L2TP connections: show data l2tp-server 6.3.22 show data lldp This command displays information about Link Layer-2 Discovery Protocol (LLDP) which...
Reference Guide 6. Show Commands 6.3.23 show data mac-address-table This command displays information about the Ethernet switch's MAC addresses table. Syntax show data mac-address-table Command Description address Finds an Ethernet switch's MAC address in the MAC address table. Use format XX:XX:XX:XX:XX:XX when searching.
Mediant MSBR 6.3.24 show data port-monitor This command displays the monitoring status for all ports. Syntax show data port-monitor wan Command Mode Basic User and Privileged User Note This command is applicable only to data-router functionality. Example This example displays the monitoring status for all ports: show data port-monitor wan There is no active Port Monitor session.
Reference Guide 6. Show Commands 6.3.25 show data port-security This command displays information about port security according to interface. Syntax show data port-security interface Command Description fastethernet Displays information about security for the Fast Ethernet <Slot/Port> interface. gigabitethernet Displays information about port security for the Gigabit <Slot/Port>...
Mediant MSBR 6.3.26 show data pptp-server This command displays information about the Point-to-Point Tunneling Protocol (PPTP) VPN server. Syntax show data pptp-server Command Mode Basic User and Privileged User Note This command is applicable only to data-router functionality. Example This example displays information about the Point-to-Point Tunneling Protocol (PPTP) VPN server: show data pptp-server ConnUsername...
Reference Guide 6. Show Commands 6.3.27 show data qos This command displays quality of service statistics according to specified criteria. Syntax show data qos Command Description match-map Displays QoS statistics for a group of match-maps or a {atm|cellular|efm| specific match-map. fiber|gigabitether net|gre|input|ipip |ipipv6|ipv6ip|l2t...
Mediant MSBR EFM 0/2: No available queue statistics. ATM 0/2: No available queue statistics. Global statistics for Cellular 0/0 Queues: No available queue statistics. Note: Queue name may be truncated (limited to 20 characters). 6.3.28 show data route-map This command displays the route map. Syntax show data route-map <Route-Map Name>...
Reference Guide 6. Show Commands 6.3.29 show data spanning-tree This command displays the status and parameters of Spanning Tree Protocol including system status and all the relevant interfaces. Syntax show data spanning-tree Command Description info <Slot/Port> Displays only system Spanning Tree information, per Slot/Port.
Mediant MSBR 6.3.30 show data tacacs This command displays information about TACACS (Terminal Access Controller Access Control System) authentication protocol, used for centralized username and password verification. Syntax show data tacacs config Command Mode Basic User and Privileged User Note This command is applicable only to data-router functionality.
Reference Guide 6. Show Commands 6.3.31 show data track This command displays all active tracks status, including Configured ID and Probe Type, the state (up/down) and maximum probe trip time. Syntax show data <Track ID> <brief> Command Mode Basic User and Privileged User Related Commands clear counters track Note...
Mediant MSBR 6.3.32 show data vrrp This command displays the status of Virtual Router Redundancy Protocol (VRRP). Syntax show data vrrp Command Description brief Displays a brief status of VRRP. interface Displays VRRP status per interface. {atm|bvi|cellular|dot11radio| efm|fiber|gigabitethernet|gre| ipip|ipipv6|ipv6ip|l2tp|loopback| pppoe|pptp|vlan|vti} Command Mode Basic User and Privileged User Note...
Reference Guide 6. Show Commands show ini-file This command displays the device's current configuration in ini-file format. Syntax show ini-file Command Mode Basic User and Privileged User Example show ini-file ;************** ;** Ini File ** ;************** ;Board: Mxx ;HW Board Type: 69 FK Board Type: 84 ;Serial Number: 8906721 ;Customer SN:...
Mediant MSBR [SYSTEM Params] SyslogServerIP = 10.31.2.44 EnableSyslog = 1 TelnetServerIdleDisconnect = 120 --MORE-- show last-cli-script-log This command displays the contents of the latest CLI Script file that was loaded (i.e., copy cli-script from) to the device. The device always keeps a log file of the most recently loaded CLI Script file.
Reference Guide 6. Show Commands show network This command displays networking information. Syntax show network Command Description access-list See Section 6.6.1 See Section 6.6.2 dhcp clients See Section 6.6.3 interface See Section 6.6.4 network-dev See Section 6.6.5 See Section 6.6.6 route See Section 6.6.7 See Section 6.6.8...
Mediant MSBR 6.6.2 show network arp This command displays the ARP table entries. Syntax show network arp Command Mode Basic User and Privileged User Example show network arp IP Address MAC Address Interface Type 10.15.0.1 00:1c:7f:3f:a9:5d eth0.1 reachable End of arp table, 1 entries displayed 6.6.3 show network dhcp clients This command displays DHCP server leases.
Mediant MSBR Command Mode Basic User and Privileged User Note This command is applicable only to data-router functionality. Example This example displays the latest results of previous Network Quality Monitoring (NQM) probing sessions: show network nqm 0 2 Probe Time | Valid | RTT | | Total | Jit.
Reference Guide 6. Show Commands Syntax show tls Command Description certificate Displays certificate information. contexts Displays TLS security context information. trusted-root Displays trusted certificates. {detail detail (Displays a specific trusted certificate) <Index>|summary} summary (Displays all trusted certificates) Command Mode Basic User and Privileged User Example show tls contexts...
Mediant MSBR show running-config This command displays the device's current configuration. Syntax show running-config Command Description (Carriage Return) Displays the device's full configuration in the format of a CLI command script. You can copy and paste the displayed output in a text-based file (e.g., using Notepad), and then upload the file to another device, or the same device if you want to make configuration changes, as a CLI script file.
Reference Guide 6. Show Commands show startup-script This command displays the Startup Script file log. Syntax show startup-script Command Description recovery-log Displays the logs generated during the failed Startup Script process. If the startup process fails, the device is rolled back to its previous configuration.
Mediant MSBR show storage-history This command displays the CDRs stored on the device. Syntax show storage-history {services|unused} Command Description services Displays registered storage services, e.g., for CDRs. unused Displays stored files that are not used. Command Mode Basic User and Privileged User Related Command clear storage-history Reference Guide...
Reference Guide 6. Show Commands 6.10 show system This command displays system information. Syntax show system Command Description See Section 6.10.1 alarms See Section 6.10.2 alarms-history See Section 6.10.3 assembly See Section 6.10.4 clock See Section 6.10.5 cpu-util cwmp status See Section 6.10.6 fax-debug-status See Section 6.10.7...
Mediant MSBR 2. Board#1/EthernetGroup#2 major 11.6.2010 , 14:19:46 Ethernet Group alarm. Ethernet Group 2 is Down. 6.10.2 show system alarms-history This command displays the system alarms history. Syntax show system alarms-history Command Mode Basic User and Privileged User Example show system alarms-history Seq.
Reference Guide 6. Show Commands 6.10.4 show system clock This command displays the device's time and date. Syntax show system clock Command Mode Basic User and Privileged User Example show system clock 14:12:48 01/02/2017 (dd/mm/yyyy) 6.10.5 show system cpu-util This command displays the voice CPU utilization (in percentage). Syntax show system cpu-util Command...
Mediant MSBR Command Description deviceinfo hardwareversion Displays the ACS hardware version. status Display the status of the ACS connection. Command Mode Basic User and Privileged User Note This command is applicable only to data-router functionality. Example This example displays the status of the ACS connection: show system cwmp status CPE Connection-Request URL: ACS URL:...
Mediant MSBR Command Description Displays all logged message history. (Carriage Return) Displays the log history in a readable format. Displays the recent history of logged messages. You can tail <Number of also specify the number of most recent logged messages Recent Messages>...
Reference Guide 6. Show Commands Example show system radius servers status servers 0 ip-address 10.4.4.203 auth-port 1812 auth-ha-state "ACTIVE" acc-port 1813 acc-ha-state "ACTIVE" servers 1 ip-address 10.4.4.202 auth-port 1812 auth-ha-state "STANDBY" acc-port 1813 acc-ha-state "STANDBY" This example shows the following fields per server: ...
Mediant MSBR Command Description Displays CPU utilization (in percentage) of voice or data- history {data|voice} router in the last 72 and 60 hours. Displays CPU and memory utilization (in percentage) refreshing <Refresh every user-defined refresh rate. To stop the display, Rate>...
Mediant MSBR 6.11 show users This command displays and terminates users that are currently logged into the device's CLI and applies to users logged into the CLI through RS-232 (console), Telnet, or SSH. For each logged-in user, the command displays the type of interface (console, Telnet, or SSH), user's username, remote IP address from where the user logged in, and the duration (days and time) of the session.
Reference Guide 6. Show Commands 6.12 show voip This command displays VoIP-related information. Syntax show voip Command Description calls See Section 6.12.1. channel-stats See Section 6.12.2. coders-stats See Section 6.12.3. cpu-stats See Section 6.12.4. See Section 6.12.5 e911 See Section 6.12.6. See Section 6.12.7.
Mediant MSBR Command Description statistics See Section 6.12.1.3. Command Mode Basic User and Privileged User 6.12.1.1 show voip calls active This command displays active calls. Syntax show voip calls active [<Session ID> |descending|gw|sbc|summary] Command Description Displays the total number of active calls and detailed call information.
Reference Guide 6. Show Commands 6.12.1.2 show voip calls history This command displays CDR history information. Syntax show voip calls history {gw|sbc} [<Session ID>] Command Description Displays historical Gateway CDRs. Displays historical SBC CDRs. Session ID (Optional) Displays historical SBC or Gateway CDRs of a specified SIP session ID.
Page 160
Mediant MSBR Command Mode Basic User and Privileged User Example The examples display various SIPRec sessions: • Eight recorded calls (Gateway and/or SBC) without SRS redundancy: show voip calls statistics siprec SIPRec number of active sessions: 8 (redundant sessions: 0) •...
Reference Guide 6. Show Commands Calls abnormally terminated: 0 Incoming calls abnormally terminated: 0 Outgoing calls abnormally terminated: 0 6.12.2 show voip channel-stats This command displays statistics associated with a specific VoIP channel. Syntax show voip channel-stats {analog|channel-count|digital|jitter- threshold|pl|pl-threshold|rtt-threshold|virtual} Command Description analog Displays an analog channel's statistics (FXS or FXO).
Mediant MSBR 6.12.3 show voip coders-stats This command displays the number and percentage of active channels using each audio coder. Syntax show voip coders-stats Command Mode Basic User and Privileged User Example Showing that 67 channels (25.18%) of the 266 active channels are using the G.729e coder, 76 (28.57%) are using the G.726 coder, and 123 (46.24%) are using the G.722 coder: show voip coders-stats There are 266 active channels.
Reference Guide 6. Show Commands 6.12.5 show voip dsp This command displays DSP information. 6.12.5.1 show voip dsp perf This command displays performance monitoring of DSP data. Syntax show voip dsp perf Command Mode Basic User and Privileged User Example Displaying performance monitoring of DSP data: show voip dsp perf DSP Statistics (statistics for 144 seconds):...
Reference Guide 6. Show Commands 6.12.7 show voip ids This command displays the Intrusion Detection System (IDS) blacklist of remote hosts (IP addresses / ports) considered malicious. Syntax # show voip ids {blacklist active|active-alarm} # show voip ids active-alarm {all|match <ID> rule <ID>} Command Description active-alarm...
Mediant MSBR 6.12.8 show voip interface This command displays information (basic configuration, status and Performance Monitoring) of a specified telephony interface (E1/T1, BRI or FXS/FXO). Syntax show voip interface {e1-t1|bri|fxs-fxo} <Module>/<Port> Command Description e1-t1 Displays information on a specified E1/T1 interface. Displays information on a specified BRI interface.
Mediant MSBR Delay color Gray remote Delay color Gray PL color Gray remote PL color Gray Jitter color Gray remote Jitter color Gray color is not relevant Media Realm -1. BWProfile -1, QoEProfile: -1 6.12.10 show voip ldap This command displays the number of 'internal AD search requests', i.e., routings requiring information from the AD, including requests answered via the cache and directly from the AD.
Reference Guide 6. Show Commands Displaying the cache (by key and group): show voip ldap print-cache-entry servers' group number 0 Hash size 0 aged 0 servers' total Hash size 16384 servers' group number 1 Hash size 0 aged 0 6.12.11 show voip other-dialog statistics This command displays the number of current incoming and outgoing SIP dialogs (e.g., REGISTER), except for INVITE and SUBSCRIBE messages.
Mediant MSBR 6.12.13 show voip realm This command displays statistics relating to Media Realms and Remote Media Subnets. Syntax Displaying Media Realms: show voip realm <Media Realm Table Index> statistics Displaying Remote Media Subnets: show voip realm <Media Realm Table Index> remote-media-subnet <Remote Media Subnet Table Index>...
Page 171
Reference Guide 6. Show Commands Command Description • list (Displays detailed information about users, including registration status (REGISTERED / NOT REGISTERED). Note: The command is applicable only to the Gateway application. user-info Displays registration status of users in the User Info table. ...
Page 172
Mediant MSBR Displaying detailed information about users in the Supplementary Services table: show voip register suppserv gw list *** GW Supp Serv Users Registration Status *** Index Type Status Contact ================================================= EndPoint NOT REGISTERED sip:4000@10.15.7.96:5060 Reference Guide Document #: LTRT-17939...
Reference Guide 6. Show Commands 6.12.15 show voip subscribe This command displays active SIP SUBSCRIBE dialog sessions. Syntax {list|statistics} show voip subscribe show voip subscribe list [<Session ID>|descending|summary] Command Description list Displays SUBSCRIBE dialog information. One of three options can be selected: ...
Mediant MSBR 6.12.16 show voip tdm This command displays TDM status. Syntax show voip tdm Command Mode Basic User and Privileged User Example The command is applicable only to devices supporting PSTN interfaces. Example show voip tdm Clock status: TDM Bus Active Clock Source Internal Configuration: PCM Law Select 3 TDM Bus Clock Source 1...
Reference Guide 7. Clear Commands Clear Commands This section describes the clear commands. Syntax # clear Command Description clear alarms-history See Section 7.1 clear counters See Section 7.2 clear data See Section 7.3 clear debug-file See Section 7.4 clear ip See Section 7.5 clear ipv6 See Section 7.6...
Page 176
Mediant MSBR Command Description (Carriage Return) Deletes all counters. Deletes the counters of Asynchronous Transfer Mode <Group/Subinterface> (ATM) on xDSL interface counters (per DSL line group and ATM sub-interface ID). bvi <Bridge Deletes the counters of the Bridge group Virtual Interface Interface>...
Reference Guide 7. Clear Commands Command Description vti <Interface ID Deletes the counters of the Virtual Tunnel Interface (VTI), Number> per VTI number. Command Mode Privileged User Note This command is applicable only to data-router functionality. Example This example clears all counters: # clear counters This example clears the counter of the PPTP interface whose ID is 0: # clear counters pptp 0...
Mediant MSBR # clear data log-history clear debug-file This command deletes the debug file (core dump). Syntax # clear debug-file Command Mode Privileged User clear ip This command deletes IP information. Syntax # clear Command Description access-list {counters} Deletes IP access list counters. arp {<A.B.C.D.>|all|interface} Deletes a specific dynamic ARP entry in the format A.B.C.D., or the entire ARP...
Reference Guide 7. Clear Commands Note This command is applicable only to data-router functionality. Example This example deletes # clear ip nat translations All NAT translations cleared. This example deletes access list counters: # clear access-list clear ipv6 This command deletes IP version 6 configuration. Syntax # clear ipv6 Command...
Mediant MSBR Note This command is applicable only to data-router functionality. Example This example deletes counters for IP prefix lists: # clear ip prefix-list clear l2tp-server This command deletes Layer 2 Tunneling Protocol (L2TP) server connections. Syntax # clear l2tp-server Command Description Clears all L2TP server connections...
Reference Guide 7. Clear Commands Command Mode Privileged User Note This command is applicable only to data-router functionality. Example This example deletes incoming PPTP server connection number 1: # clear # clear pptp-server conn 1 clear qos counters This command deletes counter data related to quality of service. Syntax # clear qos counters Command Mode...
Mediant MSBR Example Deleting all stored CDR files: # clear storage-history cdr-storage-history all Deleting all unused stored CDR files: # clear storage-history cdr-storage-history unused 7.11 clear system This command deletes the history of the CPU utilization. Syntax # clear system cpu-util history Command Mode Privileged User Note...
Reference Guide 7. Clear Commands 7.13 clear user This command terminates CLI users who are currently logged in through RS-232 (console), Telnet, or SSH. When run, the command drops the Telnet/SSH session or logs out the RS- 232 session, and displays the login prompt. Syntax # clear user <Session ID>...
Mediant MSBR 7.14 clear voip This command deletes VoIP-related information. Syntax # clear voip {calls|register|statistics} Command Description calls See Section 7.14.1. ids blacklist See Section 7.14.2 register See Section 7.14.3. statistics See Section 7.14.4. Command Mode Privileged User 7.14.1 clear voip calls This command deletes all active calls.
Reference Guide 7. Clear Commands |326433737 |3005 |2000 |Outgoin g|10.8.6.36 |FXS-3/3 |00:00:06|Connected # clear voip calls 326433737 1 Active Calls were Manually disconnected 7.14.2 clear voip ids blacklist This command deletes active blacklisted remote hosts in the IDS Active Black List table. Syntax # clear voip ids blacklist {all|entry <Removal Key>} Command...
Mediant MSBR Command Mode Privileged User Note The command is applicable only to the SBC application. Example Clearing John@10.33.2.22 from the registration database: # clear voip register db sbc user John@10.33.2.22 7.14.4 clear voip statistics This command deletes calls statistics. Syntax # clear voip statistics Command Mode...
Reference Guide 8. General Root Commands General Root Commands This section describes the following general root commands: admin (see Section 8.1) copy (see Section 8.2) dir (see Section 8.3) erase (see Section 8.4) ethernet (see Section 8.5) ...
Reference Guide 8. General Root Commands Command Description lock graceful Gracefully locks the device after a user-defined interval, <timeout> during which new calls are rejected and existing calls continue. If the existing calls do not end on their own accord during the interval, the device terminates them when the timeout expires.
Mediant MSBR copy This command downloads / uploads files to / from the device. Syntax # copy <File Type> {from|to} {<URL>|console|usb:///<Filename>} Command Description File Type aux-package Configures the type of file as an auxiliary package file, allowing you to download or upload a batch of auxiliary files, using a TAR (Tape ARchive) file (.tar).
Page 191
Reference Guide 8. General Root Commands Command Description Note: The file can only be uploaded to the device (see the command 'from' below). firmware Configures the type of file as a firmware file (.cmp). Note: After the .cmp file is loaded to the device, it's automatically saved to the device's flash memory with a device reset.
Page 192
Mediant MSBR Command Description File Location Configures the URL from which / to which to upload / download the file. Can be: HTTP HTTPS TFTP console Displays the current .ini configuration file on the CLI console. Note: The command is applicable only to the .ini configuration file (voice-configuration).
Reference Guide 8. General Root Commands The displayed information includes: • %: Percentage of total bytes downloaded and uploaded; downloaded is displayed only when downloading a file (i.e., copy from command) • Total: Total bytes downloaded and uploaded. • %: Percentage of downloaded bytes (copy from command only). •...
Mediant MSBR tls-private-key [pkey.pem] 940 Bytes tls-cert [server.pem] 643 Bytes erase This command deletes an Auxiliary file. Syntax # erase <Auxiliary File> Command Description Auxiliary File Configures the type of Auxilliary file to be erased. Note View files using the dir command. ...
Mediant MSBR nslookup This command queries the Domain Name System (DNS) to obtain domain name mapping or IP address mapping. Syntax nslookup <Hostname> [source voip interface vlan <VLAN ID>] [type {a|aaaa|naptr|srv} nslookup <Hostname> [source data vrf <VRF Name>] [force] Command Description Hostname Configures the host name.
Reference Guide 8. General Root Commands output-format This command enables the output of certain show commands to be displayed in JSON format. Syntax output-format Command Description json Displays the output in JSON format. plain Displays the output in regular plain text format. Note The JSON format is supported only by certain show commands.
Mediant MSBR "SessionId": "3c71d9:152:621" ping This command sends (pings) an ICMP echo request messages to a remote destination to check connectivity. Pings have an IP and ICMP header, followed by a struct timeval and then an arbitrary number of "pad" bytes used to fill out the packet. Ping works with both IPv4 and IPv6.
Mediant MSBR pstn nfas-group-switch-activity This command initiates a manual switchover between D-channels (primary and backup) pertaining to the same Non-Facility Associated Signaling (NFAS) group. Syntax # pstn nfas-group-switch-activity [ NFAS Group Number ] Command Description NFAS Group Number Configures the NFAS group number (1-12). Note The command is applicable only devices supporting digital PSTN interfaces.
Reference Guide 8. General Root Commands Command Mode Privileged User Related Command write 8.11 run-startup-script This command executes a loaded startup script. Syntax # run-startup-script Command Mode Privileged User 8.12 srd-view This command access a specific SRD (tenant) view. To facilitate configuration of the Multi- Tenancy feature through the CLI, the administrator can access a specific tenant view.
Mediant MSBR 8.13 telnet This command invokes a Telnet session from the device towards a remote host for remote management. A remote administrator can access the device’s CLI from the WAN leg while performing the full authentication process. The administrator can then invoke Telnet sessions towards other devices in the LAN to manage them.
Reference Guide 8. General Root Commands 8.14 traceroute This command performs a traceroute and displays the route (path) and packet transit delays across an IP network, for diagnostic purposes. Syntax traceroute {<Destination IP Address|Hostname>} [interface name <Interface Name>|vlan <VLAN ID> <Source IP Address>] Command Description Destination IP Address or...
Reference Guide 8. General Root Commands 8.16 This command allows maintenance on USB sticks plugged into the device. Syntax # usb Command Description list Displays files located on the USB. remove Safely removes a USB stick that is plugged into the device. Command Mode Privileged User Note...
Mediant MSBR Related Commands reload now Example Saving the configuration to flash memory: # write Writing configuration…done 8.18 write-and-backup This command saves the device's configuration file to flash memory and uploads it to a specified destination. The feature provides a method to back up your saved configuration. Syntax # write-and-backup to {<URL>|usb} Command...
Reference Guide 9. Introduction Introduction This part describes the commands located on the System configuration level. The commands of this level are accessed by entering the following command at the root prompt: Syntax # configure system (config-system)# This level includes the following commands: ...
Page 210
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Reference Guide 10. automatic-update automatic-update This command configures the Automatic Update feature. Syntax (config-system)# automatic-update (auto-update)# Command Description File Automatically uploads specified files to the device from a remote server. For more information, see Section 10.1. aupd-graceful-shutdown Enables the graceful lock period for Automatic Update and <Seconds>...
Mediant MSBR Command Description verify-ssl-subject- Enables verification of the SSL Subject Name in the server's name {off|on} certificate when using HTTPS. Command Mode Privileged User 10.1 Files This command automatically uploads specified files to the device from a remote server. Syntax (config-system)# automatic-update (auto-update)#...
Page 213
Reference Guide 10. automatic-update Command Description user-info Configures the URL path to a remote server from where the User Info file can be loaded. voice-configuration Configures the URL path to a remote server from where the voice configuration file can be loaded. voice-prompts Configures the URL path to a remote server from where the Voice Prompts file can be loaded.
Mediant MSBR 10.2 http-user-agent This command configures the information sent in the HTTP User-Agent header in HTTP Get requests. Syntax (config-system)# automatic-update (auto-update)# http-user-agent <String> Command Mode Privileged User Note Refer to the User's Manual for detailed information on configuring the string using placeholders (e.g., "<NAME>", "<MAC>", "<VER>", and "<CONF>").
Reference Guide 10. automatic-update Command Description cas: CAS file (applies only to Digital PSTN supporting devices) dpln: Dial Plan file amd: Answering Machine Detection (AMD) file sslp: SSL/TLS Private Key file sslr: SSL/TLS Root Certificate file ...
Page 216
Mediant MSBR Command Description init deviceTemplate.ini cliScript.txt clis cliStartupScript.txt acmp autoFirmware.cmp usrinf userInfo.txt firmware.cmp fk.ini cpt.dat prt.dat cas.dat (applies only to Digital PSTN devices) dpln dialPlan.dat amd.dat sslp pkey.pem sslr root.pem sslc cert.pem Command Mode Privileged User Related Commands template-files-list Example Specifying the URL of an HTTP server at 10.8.8.20 from which the files specified in the file template can be downloaded:...
Reference Guide 11. cli-settings cli-settings This command configures various CLI settings. Syntax (config-system)# cli-settings (cli-settings)# Command Description default-window- Defines the number (height) of output lines displayed height in the CLI terminal window. This applies to all new CLI sessions and is preserved after device resets. The valid value range is -1 (default) and 0-65535: ...
Page 218
Mediant MSBR Command Description ssh-max-login- Configures the maximum number of SSH login attempts attempts. ssh-max-payload-size Configures the maximum size of the SSH payload (in bytes). ssh-max-sessions Configures the maximum number of SSH sessions. ssh-port Configures the local port for SSH. ssh-require-public- Enables SSH authentication via RSA public key.
Reference Guide 12. clock clock This command configures the date and time of the device. Syntax (config-system)# clock (clock)# Command Description date Configures the date in the format dd/mm/yyyy (i.e., day/month/year). summer-time Configures daylight saving time. time Configures the current time in the format hh:mm:ss (i.e., hour:minutes:seconds).
Page 220
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Reference Guide 13. configuration-version configuration-version This command configures the ini file version number when saving the device's configuration to an ini file. The version number appears in the file as: "INIFileVersion = <number>" Syntax (config-system)# configuration-version <Number> Command Mode Privileged User Example This example configures the ini file version to 72101: (config-system)# configuration-version 72101...
Page 222
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Reference Guide 14. cwmp cwmp This command configures TR-069. Syntax (config-system)# cwmp (cwmp-tr069)# Command Description acs-password Defines the login password that the <device> uses for authenticated access to the ACS. acs-url Defines the URL address of the ACS to which the <device> connects. For example, http://10.4.2.1:10301/acs/.
Page 224
Mediant MSBR Command Description service {off|on} Enables <device> management through TR-069. socket-receive-timeout TR-069 socket receive timeout. tls-context <TLS Context ID> Assigns a TLS Context for TR-069 management. tr069-cwmp-wait-interval Defines the minimum interval (in seconds) that the <device> waits before attempting again to communicate with the ACS after the previous communication attempt failed.
Reference Guide 15. feature-key feature-key This command updates the License Key. Syntax (config-system)# feature-key <"License Key"> Command Mode Privileged User Note You must enclose the License Key string in quotes ("…"). Example This example updates the License Key: (config-system)# feature-key "r6wmr5to25smaB12d21aiSl94yMCf3lsfjBjagcch1kq9AZ9MJqqCOw44ywFcMlIb iBaeNcsjh878ld1f2wKbY3IXJj1SOlcbiBfc6FBj1fROlJ9XvAw8k1IXdoFcOpeQJp 2e0sti1s0blNecypomhgU5yTlPREPQtl2e1wpiNgx7lRfeyXV?2s9@coFcOhdayWjW...
Page 226
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Reference Guide 16. floating-license floating-license This command enables the Floating License feature and configures an Allocation Profile for Syntax (config-system)# floating-license (floating-license)# Command Description allocation-media-sessions Defines media session capacity for the customized Allocation Profile. allocation-profile Defines the Allocation Profile type. {custom|registered- users|sip-trunking} allocation-registered-...
Page 228
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Reference Guide 17. http-services http-services This command configures Web (HTTP) services. Syntax (config-system)# http-services (http-client-services)# Command Description http-remote-services Configures the HTTP Remote Services table for REST. For more information, see Section 17.1. rest-debug-mode {0-3} Configures the level of debug messages of HTTP services, which are sent to Syslog.
Mediant MSBR 17.1 http-remote-services This command configures the Remote Web Services table, which lets you define Web-based (HTTP/S) services provided by third-party, remote HTTP/S hosts. Syntax (config-system)# http-services (http-client-services)# http-remote-services <Index> (http-client-services-<Index>)# Command Description http-login-needed Enables the use of proprietary REST API {disable|enable} Login and Logout commands for connecting to the remote host.
Reference Guide 17. http-services Command Description rest-verify-certificates Enables certificate verification when {disable|enable} connection with the host is based on HTTPS. Command Mode Privileged User Example This example configures an HTTP service for routing: (config-system)# http-services (http-client-services)# http-remote-services 0 (http-client-services-0)# rest-message-type routing (http-client-services-0)# rest-name ARM 17.1.1 http-remote-hosts This command configures the HTTP Remote Hosts table, which lets you define remote HTTP...
Reference Guide 18. ldap ldap This command configures LDAP and includes the following subcommands: ldap-configuration (see Section 18.1) ldap-server-groups (see Section 18.1.1) settings (see Section 18.3) 18.1 ldap ldap-configuration This command configures the LDAP Servers table, which lets you define LDAP servers. Syntax (config-system)# ldap ldap-configuration <Index>...
Mediant MSBR Command Description queries) using TLS when sending them to the LDAP server. verify-certificate Enables certificate verification when the connection {no|yes} with the LDAP server uses TLS. Command Mode Privileged User Example This example configures an LDAP server with IP address 10.15.7.8 and password "itsp1234": (config-system)# ldap ldap-configuration 0 (ldap-configuration-0)# server-ip 10.15.7.8 (ldap-configuration-0)# password itsp1234...
Reference Guide 18. ldap 18.1.2 ldap mgmt-ldap-groups This command configures the Management LDAP Groups table, which lets you define an access level per management groups, per LDAP Servers table. Syntax (config-system)# ldap ldap-configuration <Index> (ldap-configuration-<Index>)# mgmt-ldap-groups <Index> (mgmt-ldap-groups-<Index>/<Index>)# Command Description Index Defines the table row index.
Mediant MSBR 18.2 ldap ldap-server-groups This command configures the LDAP Server Groups table, which lets you define LDAP Server Groups. An LDAP Server Group is a logical configuration entity that contains up to two LDAP servers. Syntax (config-system)# ldap ldap-server-groups <Index> (ldap-server-groups-<Index>)# Command Description...
Reference Guide 18. ldap 18.3 ldap settings This command configures various LDAP settings. Syntax (config-system)# ldap settings (ldap)# Command Description auth-filter Configures the filter (string) to search the user during the authentication process. cache {clear-all|refresh- Configures LDAP cache actions. entry} enable-mgmt-login Enables the device to use LDAP for authenticating {off|on}...
Page 238
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Reference Guide 19. mgmt-access-list mgmt-access-list This command configures the Access List table, which lets you restrict access to the device's management interfaces (Web and CLI) by specifying IP addresses of management clients that are permitted to access the device. Syntax (config-system)# mgmt-access-list <Index>...
Page 240
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Reference Guide 20. mgmt-auth mgmt-auth This command configures various management settings. Syntax (config-system)# mgmt-auth (mgmt-auth)# Command Description default-access-level Configures the device's default access level when the LDAP/RADIUS response doesn't include an access level attribute for determining the user's management access level. local-cache-mode {absolute- Configures the password's local cache timeout to expiry-timer|reset-expiry-...
Page 242
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Reference Guide 21. ntp This command configures Network Time Protocol (NTP) for updating the device's date and time. Syntax (config-system)# ntp (ntp)# Command Description auth-key-id Configures the NTP authentication key identifier (string) for authenticating NTP messages. auth-key-md5 Configures the authentication key (string) shared between the <device>...
Page 244
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Reference Guide 22. packetsmart packetsmart This command configures the device to send voice traffic data to BroadSoft’s BroadCloud PacketSmart solution for monitoring and assessing the network in which the device is deployed. Syntax (config-system)# packetsmart Command Description enable Privileged Users the PacketSmart feature. Takes effect only after reseting the device.
Page 246
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Reference Guide 23. performance-profile performance-profile This command configures the Performance Profile table, which configures thresholds of performance-monitoring call metrics for Major and Minor severity alarms. Syntax (config-system)# performance-profile <Index> (performance-profile-<Index>)# Command Description entity {global|ip- Configures the entity. group|srd} hysteresis Configures the amount of fluctuation (hysteresis) from the configured threshold in order for the threshold to be considered as crossed.
Page 248
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Reference Guide 24. radius radius This command configures Remote Authentication Dial-In User Service (RADIUS) settings to enhance device security and includes the following subcommands: radius servers (see Section 24.1) radius settings (see Section 24.2) 24.1 radius servers This command configures the RADIUS Servers table, which configures RADIUS servers. Syntax (config-system)# radius servers <Index>...
Page 250
Mediant MSBR Command Description enable-mgmt-login Uses RADIUS for authentication of management {off|on} interface access. local-cache-mode Configures the capability to reset the expiry time of the {0|1} local RADIUS password cache. local-cache-timeout Configures the expiry time, in seconds of the locally stored RADIUS password cache.
Reference Guide 25. snmp snmp This command configures Simple Network Management Protocol (SNMP) and includes the following subcommands: settings (see Section 25.1) trap (see Section 25.2) trap-destination (see Section 25.3) v3-users (see Section 25.4) 25.1 snmp settings This command configures various SNMP settings.
Mediant MSBR Command Description Note: This command is applicable only to data- router functionality. Command Mode Privileged User Example This example configures the SysOID: (config-system)# snmp settings (snmp)# sys-oid 1.3.6.1.4.1.5003.10.10.2.21.1.3 25.2 snmp trap This command configures SNMP traps. Syntax (config-system)# snmp trap (snmp-trap)# Command Description...
Mediant MSBR 25.4 snmp v3-users This command configures the SNMPv3 Users table, which configures SNMPv3 users. Syntax (config-system)# snmp v3-users <Index> (v3-users-<Index># Command Description auth-key Configures the authentication key. The hex string should be in xx:xx:xx... format (string). auth-protocol Configures the authentication protocol. {md5|none|sha-1} group {read- Configures the group that this user is associated with.
Reference Guide 26. user user This command configures the Local Users table, which configures management user accounts. Syntax (config-system)# user <Username> (user-<Username># Command Description block-duration <Time> Configures the duration (in seconds) for which the user is blocked when the user exceeds a user-defined number of failed login attempts.
Page 256
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Reference Guide 27. web This command configures various Web interface settings. Syntax (config-system)# web (web)# Command Description enforce-password- Enforces definition of a complex password. complexity {0|1} http-auth-mode Selects HTTP basic (clear text) or digest (MD5) {basic|digest-http-only| authentication for the Web interface. digest-when-possible} http-port Configures the device's LAN HTTP port for Web...
Page 258
Mediant MSBR Example This example enables requirement of client certificates for HTTPS Web interface connections: (config-system)# web (web)# req-client-cert on Reference Guide Document #: LTRT-17939...
Reference Guide 28. welcome-msg welcome-msg This command configures a banner message, which is displayed when you connect to the device's management interfaces (Web and CLI). Syntax (config-system)# welcome-msg <Index> (welcome-msg-<Index>)# text <Message> Command Description <Index> The message can include up to 20 lines (0 to 19). text <Message>...
Page 260
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Reference Guide 29. Introduction Introduction This part describes the commands located on the Troubleshoot configuration level. The commands of this level are accessed by entering the following command at the root prompt: Syntax # configure troubleshoot (config-troubleshoot)# This level includes the following commands: ...
Page 264
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Reference Guide 30. activity-log activity-log This command configures event types performed in the management interface (Web and CLI) to report in syslog messages or in an SNMP trap. Syntax (config-troubleshoot)# activity-log (activity-log)# Command Description action-execute {on|off} Enables logging notifications on actions executed events.
Page 266
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Reference Guide 31. activity-trap activity-trap This command enables the device to send an SNMP trap to notify of Web user activities in the Web interface. Syntax (config-troubleshoot)# activity-trap {on|off} Command Mode Privileged User Related Command activity-log - configures the activity types to report. Example This example demonstrates configuring the activity trap: (config-troubleshoot)# activity-trap on...
Page 268
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Reference Guide 32. cdr This command configures CDRs. Syntax (config-troubleshoot)# cdr (cdr)# Command Description aaa-indications {accounting- Configures which Authentication, only|none} Authorization and Accounting indications to use. call-duration-units {centi- Configures the units of measurement for the seconds|deci- call duration field in CDRs. seconds|milliseconds|seconds} cdr-format Customizes the CDR format (see Section...
Mediant MSBR Example This example configures the call stage at which CDRs are generated: (config-troubleshoot)# cdr (cdr)# cdr-report-level start-and-end-call 32.1 cdr-format This command customizes the format of CDRs for gateway (Gateway CDR Format table) and SBC (SBC CDR Format table) calls. Syntax (config-troubleshoot)# cdr (cdr)# cdr-format...
Reference Guide 34. logging logging This command configures logging and includes the following subcommands: logging-filters (see Section 34.1) settings (see Section 34.2) 34.1 logging-filters This command configures the Logging Filters table. Syntax (config-troubleshoot)# logging logging-filters <Index> (logging-filters-<Index>)# Command Description filter-type Type of logging filter.
Reference Guide 35. pstn-debug pstn-debug This command enables or disables PSTN debugging. Syntax (config-troubleshoot)# pstn-debug {on|off} Command Mode Privileged User Example This example enables PSTN debugging: (config-troubleshoot)# pstn-debug on Version 7.2 Mediant MSBR...
Page 278
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Reference Guide 37. test-call test-call This command configures test calls and includes the following subcommands: settings (see Section 37.1) test-call-table (see Section 37.2) 37.1 settings This command configures various test call settings. Syntax (config-troubleshoot)# test-call settings (test-call)# Command Description testcall-dtmf-string Configures a DTMF string (tone) that is played for...
Page 282
Mediant MSBR Command Description call-duration Call duration in seconds (-1 for auto, 0 for infinite). call-party {called|caller} Test call party. called-uri Called URI. calls-per-second Calls per second. dst-address Destination address and optional port. dst-transport Destination transport type. endpoint-uri Endpoint URI ('user' or 'user@host'). ip-group-name IP Group.
Reference Guide 38. Introduction Introduction This part describes the commands located on the Network configuration level. The commands of this level are accessed by entering the following command at the root prompt: Syntax # configure network (config-network)# This level includes the following commands: ...
Page 286
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Reference Guide 39. access-list access-list This command configures the Firewall table, which lets you define firewall rules that define network traffic filtering rules. Syntax (config-network)# access-list <Index> (access-list-<Index>)# Command Description allow-type Configures the firewall action if the rule is matched. {allow|block} byte-burst Configures the allowed traffic burst in bytes.
Page 288
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Reference Guide 40. bind vrf bind vrf This command provides support for binding the management servers (Web HTTP and HTTPS, Telnet, SSH, and SNMP) to a network source which can be a defined VRF, source address, or network interface. Syntax bind vrf <VRF Name>...
Page 290
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Reference Guide 41. dhcp-server dhcp-server This command configures DHCP and includes the following subcommands: delete-client (see Section 291) option (see Section 292) server (see Section 293) static-ip (see Section 295) vendor-class (see Section 295) 41.1 dhcp-server delete-client This command removes IP addresses of DHCP clients leased from a DHCP server.
Mediant MSBR 41.2 dhcp-server option This command configures the DHCP Option table, which lets you define additional DHCP Options that the DHCP server can use to service the DHCP client. These DHCP Options are included in the DHCPOffer response sent by the DHCP server. The table is a "child" of the DHCP Servers table.
Reference Guide 41. dhcp-server 41.3 dhcp-server server This command configures the DHCP Servers table, which defines DHCP servers. Syntax (config-network)# dhcp-server server <Index> (server-<Index>)# Command Description boot-file-name Configures the name of the boot file image for the DHCP client. dns-server-1 Configures the IP address (IPv4) of the primary DNS server that the DHCP server assigns to the DHCP client.
Page 294
Mediant MSBR Command Description tftp-server-name Configures the IP address or name of the TFTP server that the DHCP server assigns to the DHCP client. time-offset Configures the Greenwich Mean Time (GMT) offset (in seconds) that the DHCP server assigns to the DHCP client.
Reference Guide 41. dhcp-server 41.4 dhcp-server static-ip This command configures the DHCP Static IP table, which lets you define static IP addresses for DHCP clients. The table is a "child" of the DHCP Servers table. Syntax (config-network)# dhcp-server static-ip <Index> (static-ip-<Index<)# Command Description...
Mediant MSBR 41.5 dhcp-server vendor-class This command configures the DHCP Vendor Class table, which lets you define Vendor Class Identifier (VCI) names (DHCP Option 60). Syntax (config-network)# dhcp-server vendor-class <Index> (vendor-class-<Index>)# Command Description dhcp-server-number Associates the DHCP Vendor Class entry with a DHCP server that you configured.
Reference Guide 42. dns This command configures DNS and includes the following subcommands: dns-to-ip (see Section 42.1) override (see Section 42.2) settings (see Section 42.3) srv2ip (see Section 42.4) Syntax (config-network)# dns <Index> Command Description dns-to-ip Configures the internal DNS table for resolving host names into IP addresses.
Mediant MSBR 42.1 dns dns-to-ip This command configures the Internal DNS table, which lets you resolve hostnames into IP addresses. Syntax (config-network)# dns dns-to-ip <Index> (dns-to-ip-<Index>)# Command Description domain-name Configures the host name to be translated. first-ip-address Configures the first IP address (in dotted-decimal format notation) to which the host name is translated.
Reference Guide 42. dns 42.2 dns override This command configures the DNS override interface, which overrides the Internal DSN table settings. Syntax (config-network)# dns override interface <String> data interface <ID> Command Mode Privileged User Example This example configures the DNS override interface: configure network (config-network)# dns override interface [STRING]...
Mediant MSBR 42.4 dns srv2ip This command configures the Internal SRV table, which lets you resolve hostnames into DNS A-Records. Syntax (config-network)# dns srv2ip <Index> (srv2ip-<Index>)# Command Description dns-name-1 Configures the first, second or third DNS A- dns-name-2 Record to which the host name is translated. dns-name-3 domain-name Configures the host name to be translated.
Reference Guide 43. hostname hostname This command configures the product name, which is displayed in the management interfaces (as the prompt in CLI, and in the Web interface). Syntax (config-network)# hostname <String> Command Mode Privileged User Example This example configures the product name from "Mediant" to "routerABC": Mediant(config-network)# hostname routerABC routerABC(config-network)# Version 7.2...
Page 302
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Reference Guide 44. http-proxy http-proxy This command configures HTTP proxy and includes the following subcommands: ems-serv (see Section 44.1) http-interface (see Section 44.2) http-proxy-host (see Section 44.3) http-proxy-serv (see Section 44.4) settings (see Section 44.5) 44.1 http-proxy ems-serv This command configures the EMS Services table, which lets you define a single HTTP-...
This command configures the HTTP Interfaces table, which lets you define HTTP Interfaces. An HTTP Interface represents a local, listening interface for receiving HTTP/S requests from HTTP-based (Web) clients such as managed equipment (e.g., IP Phones) and AudioCodes EMS management tool for HTTP/S-based services.
Reference Guide 44. http-proxy 44.3 http-proxy http-proxy-host This command configures the HTTP Proxy Hosts table, which lets you define HTTP Proxy hosts for HTTP Proxy services. An HTTP Proxy Host represents the HTTP-based managed equipment (e.g., IP Phone). The table is a "child" of the HTTP Proxy Services table. Syntax (config-network)# http-proxy http-proxy-host <Index of http-proxy- serv>/<Index of http-proxy-host>...
Mediant MSBR 44.4 http-proxy http-proxy-serv This command configures the HTTP Proxy Services table, which lets you define HTTP Proxy Services. Syntax (config-network)# http-proxy http-proxy-serv <Index> (http-proxy-serv-<Index>)# Command Description keep-alive-mode Enables a keep-alive mechanism (using HTTP OPTIONS) {disable|options} with the managed equipment. listening-int Assigns an HTTP Interface (see Section 44.2) to the HTTP Proxy service.
Reference Guide 44. http-proxy 44.5 http-proxy settings This command configures HTTP proxy settings. Syntax (config-network)# http-proxy settings (http-proxy)# Command Description http-proxy-app Enables the HTTP Proxy application. {off|on} http-proxy-debug-level Configures different debug levels for the HTTP application. {basic|detailed|no- debug} Command Mode Privileged User Example This example enables the HTTP Proxy application:...
Page 308
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Reference Guide 45. interface interface This command configures network interfaces and includes the following subcommands: network-interface (see Section 45.1) osn (see Section 45.2) 45.1 interface network-interface This command configures the IP Interfaces table, which lets you define local IP network interfaces.
Mediant MSBR Example This example configures the OAMP, Media and Control network interface: (config-network)# interface network-if 0 (network-if-0)# application-type oamp-media-control (network-if-0)# mode ipv4-manual (network-if-0)# ip-address 10.15.7.96 (network-if-0)# prefix-length 16 (network-if-0)# gateway 10.15.0.1 (network-if-0)# underlying-dev vlan1 45.2 interface osn This command configures the Open Solutions Network (OSN) interface. Syntax (config-network)# interface osn (conf-sys-if-OSN)#...
Reference Guide 46. nat-translation nat-translation This command configures the NAT Translation table, which lets you define network address translation (NAT) rules for translating source IP addresses per VoIP interface (SIP control and RTP media traffic) into NAT IP addresses (global - public) when the device is located behind NAT.
Page 312
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Reference Guide 47. network-dev network-dev This command configures the Ethernet Devices table, which lets you define Ethernet Devices. An Ethernet Device represents a Layer-2 bridging device and is assigned a unique VLAN ID and an Ethernet Group (Ethernet port group). Syntax (config-network)# network-dev <Index>...
Page 314
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Reference Guide 48. network-settings network-settings This command configures the network settings. Syntax (config-network)# network-settings (network-settings)# Command Description icmp-disable-redirect {0|1} Enables sending and receiving of ICMP Redirect messages. icmp-disable-unreachable Enables sending of ICMP Unreachable messages. {0|1} osn-internal-vlan {off|on} Enables a single management platform when the device is deployed as a Survivable Branch Appliance (SBA) in a Microsoft Skype for Business environment.
Page 316
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
This command configures the device to monitor the quality of the network path (network quality monitoring - NQM) between it and other AudioCodes devices. The path monitoring is done by sending packets from a "sender" device to a "responder" device and then calculating the round-trip time (RTT), packet loss (PL), and jitter.
Mediant MSBR 49.2 nqm responder-table This command adds a responder (IP address and port). Syntax (config-network)# nqm responder-table < Index > (responder-table-<Index>)# < Command> Command Description active {0|1} Enables the Responder. local-port Configures the local transport layer port number. {3900|3910|3920|3930|3 940|3950|3960|3970|398 0|3990} responder-name...
Reference Guide 49. nqm 49.3 nqm sender-table This subcommand adds a sender (including RTT, PL, and jitter thresholds; associates probing definition; responder address; local interface). Syntax (config-network)# nqm sender-table < Index > (sender-table-<Index>)# < Command> Command Description active {0|1} Enables the Sender. cq-mos-threshold Configures the minimum allowable Conversation Quality MOS.
Page 320
Mediant MSBR Note: A responder termination defined by the pair <target IP address, target port> can be defined only once for a single sender line; multipile senders can’t be defined to send packets to the same responder termination. (sender-table-0)# probe-name voip_probe_1 Note: A single row in the Probing table may be shared by several senders, thereby sharing and simplifying common attributes.
Reference Guide 50. poe-table poe-table This command configures the Power Over Ethernet Settings table, which lets you enable power on the Ethernet lines (PoE). Syntax (config-network)# poe-table < Index > (poe-table-<Index>)# < Command > Command Description port-at-enable {disable|enable} Enables PoE according to IEEE 802.3at. port-enable {disable|enable} Enables PoE port.
Page 322
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Reference Guide 51. qos This command configures Quality of Service (QoS) and includes the following subcommands: application-mapping (see Section 51.1) vlan-mapping (see Section 51.2) 51.1 qos vlan-mapping This command configures the QoS Mapping table, which lets you define DiffServ-to-VLAN priority mapping (IEEE 802.1p) for Layer 3 and Layer-2 QoS.
Mediant MSBR 51.2 qos application-mapping This command configures the QoS Settings table, which lets you define Layer-3 Class-of- Service QoS. Syntax (config-network)# qos application-mapping (app-map)# Command Description bronze-qos {0-63} Configures the DiffServ value for the Bronze CoS content (OAMP applications). control-qos {0-63} Configures the DiffServ value for Premium Control CoS content (Call Control applications).
Reference Guide 52. security-settings security-settings This command configures various TLS certificate security settings. Syntax (config-network)# security-settings (network-security)# Command Description PEERHOSTNAMEVERIFICATI Enables the device to verify the Subject Name of a TLS ONMODE {0|1|2} certificate received from SIP entities for authentication and establishing TLS connections: ...
Page 326
Mediant MSBR Example This example enables the device to verify the Server certificate with the Root CA information: (config-network)# security-settings (network-security)# tls-vrfy-srvr-cert on Reference Guide Document #: LTRT-17939...
Reference Guide 53. static static This command configures the Static Routes table, which lets you define static IP routing rules. Syntax (config-network)# static <Index> (static-<Index>)# Command Description description Configures a name for the rule. destination Configures the IP address of the destination host/network. device-name Associates an IP network interface through which the static route's Gateway is reached.
Page 328
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Reference Guide 54. tftp-server tftp-server This command configures the device's TFTP server. Syntax (config-network)# tftp-server Command Description enable Enables the TFTP server. files Manages TFTP files. Command Mode Privileged User Note This command is applicable only to data-router functionality. Example This example enables the TFTP server: (config-network)# tftp-server enable Version 7.2...
Page 330
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Reference Guide 55. tls This command configures the TLS Contexts table, which lets you define TLS certificates, referred to as TLS Contexts. Syntax (config-network)# tls <Index> (tls-<Index>)# Command Description certificate Certification actions - see Section 55.1. ciphers Displays ciphers. ciphers-client Defines the supported cipher suite for TLS clients.
Mediant MSBR Command Mode Privileged User Example This example configures a TLS Context with TLS Ver. 1.2: (config-network)# tls 1 (tls-1)# name ITSP (tls-1)# tls-version tls-v1.2 (tls-1)# activate 55.1 certificate This subcommand lets you do various actions on TLS certificates. Syntax (tls-<Index>)# certificate Command...
Mediant MSBR Command Description import Imports a private key. Type the private key in the console. {password|without- password} Example This example deletes a private key: (config-network)# tls 0 (tls-0)# private-key delete Private key deleted. 55.3 trusted-root This subcommand lets you do various actions on the Trusted Root Certificate Store. Syntax (tls-<Index>)# trusted-root Command...
Reference Guide 56. Introduction Introduction This part describes the commands located on the Voice-over-IP (VoIP) configuration level. The commands of this level are accessed by entering the following command at the root prompt: Syntax # configure voip (config-voip)# This level includes the following commands: ...
Page 338
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Reference Guide 57. application application This command enables various applications. Syntax (config-voip)# application (sip-application)# Command Description enable-sbc{off|on} Enables / disables the SBC application. Command Mode Privileged User Example This example shows how to enable the SBC application: (config-voip)# application (sip-application)# enable-sbc on Version 7.2 Mediant MSBR...
Page 340
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Reference Guide 58. coders-and-profiles coders-and-profiles This command configures coders and profiles. Syntax (config-voip)# coders-and-profiles Command Description Configures the Allowed Audio Coders Groups table. See allowed-audio-coders- groups Section 58.1. allowed-video-coders- Configures the Allowed Video Coders Groups table. groups See Section 58.2. audio-coders-groups Configures the Coders-Groups Table.
Mediant MSBR 58.1.1 allowed-audio-coders This command configures the Allowed Audio Coders table, which lets you define Allowed Audio Coders for SBC calls. The table is a "child" of the Allowed Audio Coders Groups table. Syntax (config-voip)# coders-and-profiles allowed-audio-coders-groups <Index> (allowed-audio-coders-groups-<Index>)# allowed-audio-coders <Index>...
Reference Guide 58. coders-and-profiles Command Mode Privileged User Example This example configures the Allowed Video Coders table with G.711: (config-voip)# coders-and-profiles allowed-video-coders-groups 0 (allowed-video-coders-groups-0)# allowed-video-coders 1 (allowed-video-coders-0/1)# user-defined-coder mpeg2 (allowed-video-coders-0/1)# activate 58.2.1 allowed-video-coders-groups This command configures the Allowed Video Coders Groups table, which lets you define Allowed Video Coders Groups for SBC calls.
Mediant MSBR Command Description coders-group-name Defines a name for the Coders Group. audio-coders Defines the Coder Groups table, which lets you define audio coders. For more information, see Section 58.3.1. Command Mode Privileged User Example This example configures the name "ITSP" for the Coders Group table: (config-voip)# coders-and-profiles audio-coders-groups 0 (audio-coders-groups-0)# coders-group-name ITSP (audio-coders-groups-0)# activate...
Reference Guide 58. coders-and-profiles (audio-coders-groups-0)# audio-coders 1 (audio-coders-0/1)# name g711-alaw (audio-coders-0/1)# rate 64 (audio-coders-0/1)# p-time 20 (audio-coders-0/1)# silence-suppression enable (audio-coders-0/1)# activate 58.4 ip-profile This command configures the IP Profiles table, which lets you define IP Profiles. Syntax (config-voip)# coders-and-profiles ip-profile <Index (ip-profile-<Index>)# Command Description...
Page 346
Mediant MSBR Command Description early-media Enables Early Media. echo-canceller Enables echo cancellation (i.e., echo from voice calls is removed). enable-early-183 Enables Early 183. enable-hold Enables Call Hold service. enable-qsig-tunneling Enables QSIG Tunneling over SIP. enable-symmetric-mki Enables symmetric MKI negotiation. fax-sig-method Configures using H.323/Annex D procedure for real time FAX relay.
Page 347
Reference Guide 58. coders-and-profiles Command Description remote-hold-Format Configures the SBC Remote Hold Format. reset-srtp-upon-re-key Resets SRTP State Upon Re-key. rtp-ip-diffserv Configures the RTP IP DiffServ. rtp-redundancy-depth Configures the RTP Redundancy Depth - enables the device to generate RFC 2198 redundant packets. rx-dtmf-option Configures the supported receive DTMF negotiation method.
Page 348
Mediant MSBR Command Description sbc-jitter- Configures the SBC Jitter Compensation. compensation sbc-keep-routing- Keeps the Record-Route and in-dialog Route headers from headers incoming request in the outgoing request. sbc-keep-user-agent Keeps the User-Agent header from the incoming request in the outgoing request. sbc-keep-via-headers Keeps the VIA headers from incoming request in the outgoing request.
Page 349
Reference Guide 58. coders-and-profiles Command Description sbc-rmt-rfc3960-supp Configures the SBC remote RFC 3960 gateway model support. sbc-rmt-rprsntation Configures how to represent the SBC's contact information to the remote side. sbc-rmt-update-supp Configures SBC remote update support. sbc-rtcp-feedback Configures RTCP feedback support. sbc-rtcp-mode Configures the SBC RTCP mode.
Mediant MSBR Example This example shows how to configure an IP Profile: (config-voip)# coders-and-profiles ip-profile 0 (ip-profile-0)# group-name ITSP (ip-profile-0)# activate 58.5 tel-profile This command configures the Tel Profiles table, which lets you define Tel Profiles. Syntax (config-voip)# coders-and-profiles tel-profile <Index> (tel-profile-<Index>)# Command Description...
Page 351
Reference Guide 58. coders-and-profiles Command Description fxo-ring-timeout Configures the delay (in 100 msec) for generating an INVITE after RING_START is detected. input-gain Configures the TDM input gain. ip2tel- Enables a call connection without an On-Hook/Off-Hook cutthrough_call_behavio process. is-two-stage-dial Configures Dialing Mode - One-Stage (PBX Pass-thru) or Two-Stage.
Reference Guide 59. gateway gateway This command configures the gateway and includes the following subcommands: advanced (see Section 59.1) analog (see Section 59.2) digital (see Section 59.3) dtmf-supp-service (see Section 59.4) manipulation (see Section 59.5) ...
Mediant MSBR 59.2 analog This command configures analog parameters. Syntax (config-voip)# gateway analog Command Description authentication See Section 59.2.1. automatic-dialing See Section 59.2.2. call-forward See Section 59.2.3. call-waiting See Section 59.2.4. caller-display-info See Section 59.2.5. charge-code See Section 59.2.6. enable-caller-id See Section 59.2.7.
Reference Guide 59. gateway Command Mode Privileged User Note To view the port-module numbers and port type, enter the display command at the index prompt, for example: (authentication-0)# display Example This example configures authentication credentials for a port: (config-voip)# gateway analog authentication 0 (authentication-0)# password 1234 (authentication-0)# user-name JDoe 59.2.2 automatic-dialing...
Mediant MSBR (automatic-dialing-0)# auto-dial-status enable (automatic-dialing-0)# dst-number 9764401 59.2.3 call-forward This command configures the Call Forward table, which lets you define call forwarding per FXS or FXO port for IP-to-Tel calls. Syntax (config-voip)# gateway analog call-forward <Index> (call-forward-<Index>)# Command Description destination Defines the telephone number or URI (<number>@<IP address>) to where the call is forwarded.
Reference Guide 59. gateway Command Description enable-call-waiting Enables call waiting for the port. {disable|enable|not- configure} Command Mode Privileged User Note To view the port-module numbers and port type, enter the display command at the index prompt, for example: (call-waiting-0)# display Example This example enables call waiting: (config-voip)# gateway call-waiting 0...
Mediant MSBR Example This example configures caller ID as "Joe Do": (config-voip)# gateway caller-display-info 0 (caller-display-info-0)# display-string Joe Doe (caller-display-info-0)# presentation allowed (caller-display-info-0)# activate 59.2.6 charge-code This command configures the Charge Codes table, which lets you define metering tones. Syntax (config-voip)# gateway analog charge-code <Index>...
Reference Guide 59. gateway Syntax (config-voip)# gateway analog enable-caller-id <Index> (enable-caller-id-<Index>)# Command Description caller-id Enables Caller ID. {disable|enable|not- configured} Command Mode Privileged User Note To view the port-module numbers and port type, enter the display command at the index prompt, for example: (enable-caller-id-0)# display Example This example enables caller ID:...
Mediant MSBR (enable-did-0)# display Example This example enables Japan DID: (config-voip)# gateway enable-did 0 (enable-did-0)# did enable (enable-did-0)# activate 59.2.9 fxo-setting This command configures various FXO parameters. Syntax (config-voip)# gateway analog fxo-setting (gw-analog-fxo)# Command Description answer-supervision Enables sending a SIP 200 OK when speech, fax {disable|enable} or modem is detected.
Reference Guide 59. gateway Command Description reorder-tone-duration Global parameter configuring the duration (in seconds) that the device plays a busy or reorder tone before releasing the line ring-detection-tout Configures the timeout (in seconds) for detecting the second ring after the first detected ring. rings-b4-det-callerid Number of rings after which the Caller ID is detected.
Mediant MSBR Example This example configures a maximum of 10 streaming sessions for MoH: (config-voip)# gateway fxs-setting (gw-analog-fxs)# max-streaming-calls 10 (gw-analog-fxs)# activate 59.2.11 keypad-features This command configures phone keypad features. Syntax (config-voip)# gateway analog keypad-features (gw-analog-keypad)# Command Description blind-transfer Configures the keypad sequence to activate blind transfer for established Tel-to-IP calls caller-id-restriction-act Configures the keypad sequence to activate the...
Reference Guide 59. gateway Command Description reject-anony-call-deactivate Configures the keypad sequence that de-activates the reject anonymous call option. Command Mode Privileged User Example This example configures the call forwarding on-busy or no answer keypad sequence: (config-voip)# gateway keypad-features (gw-analog-keypad)# fwd-busy-or-no-ans 567 (gw-analog-keypad)# activate 59.2.12 metering-tones This command configures metering tones settings.
Mediant MSBR 59.2.13 reject-anonymous-calls This command configures the Reject Anonymous Call Per Port table, which lets the device reject incoming anonymous calls per FXS port. Syntax (config-voip)# gateway analog reject-anonymous-calls <Index> (reject-anonymous-calls-<Index>)# Command Description reject-calls Enables rejection of anonymous calls. {disable|enable} Command Mode Privileged User...
Reference Guide 59. gateway Command Description src-pattern Defines the prefix of the calling number. Command Mode Privileged User Example This example configures distinctive tone Index 12 for FXS ports 1-4 for called prefix number "976": (config-voip)# gateway analog tone-index 0 (tone-index-0)# fxs-port-first 1 (tone-index-0)# fxs-port-last 4 (tone-index-0)# dst-pattern 976...
Mediant MSBR Command Description ip-to-tel-interworking Enables IP-to-Tel Interworking. {disable|enable} name Defines a name. Command Mode Privileged User Example This example configures supplementary service for port 2: (config-voip)# gateway digital rp-network-domains 0 (rp-network-domains-0)# ip-to-tel-interworking enable (rp-network-domains-0)# name dsn (rp-network-domains-0)# activate 59.3.2 settings This command configures various digital settings.
Page 367
Reference Guide 59. gateway Command Description cisco-sce-mode In use with G.729 - if enabled and SCE=2 then AnnexB=no. clir-reason-support Enables sending of Reason for Non Notification of Caller connect-on-progress- FXS: generate Caller Id signals during ringing FXO: collect CallerId and use it in Setup message. copy-dst-on-empty-src In case there is an empty source number from PSTN the source number will be the same as the destination.
Page 368
Mediant MSBR Command Description epn-as-cpn-ip2tel Use endpoint number as calling number for IP-to-Tel. epn-as-cpn-tel2ip Use endpoint number as calling number for Tel-to-IP. etsi-diversion Use supplementary service ETSI Diverting Leg Information 2 to send redirect number. fallback-transfer-to- Disable fallback from ISDN call transfer to TDM. fax-rerouting-delay Defines the time interval (in sec) to wait for CNG detection to re-route call to fax destinations.
Page 369
Reference Guide 59. gateway Command Description mlpp-dflt-srv-domain MLPP Default Service Domain String (6 Hex Digits). mlpp-norm-ser-dmn MLPP Normalized Service Domain String (6 Hex Digits). mlpp-nwrk-id Sets the Network identifier value which is represented as the first 2 octets in the MLPP service domain field. values are [1-999].
Page 370
Mediant MSBR Command Description rtcp-act-mode RTCP activation policy. rtp-only-mode immediately. -1 - takes the RTPONLYMODE global value per gatewa0 - regular call establishment. 1 - The RTP channel open for Rx & Tx. 2-The RTP channel open only for Tx 3 -The RTP cha nel open only fo Rx send-screen-to-ip Override screening indicator value in Setup messages to...
Reference Guide 59. gateway Command Description 'encoding=hex' at the end, (3): format: User-to-User with text presentation uui-ie-for-ip2tel Enable User-User IE to pass in Setup from IP to ISDN uui-ie-for-tel2ip Enable User-User IE to pass in Setup from ISDN to IP wait-befor-pstn-rel- Defines the timeout (in milliseconds) to wait for the release ACK from the PSTN before releasing the channel.
Page 372
Mediant MSBR Command Description char-conversion Configures Unicode-to-ASCII character conversion rules. dflt-dest-nb Configures the default destination phone number which is used if the received message doesn't contain a called party number and no phone number is configured in the Trunk Group table. dial-plan-index Configures the Dial Plan Index.
Reference Guide 59. gateway 59.4.2 isdn-supp-serv This command configures the Supplementary Services table, which lets you define supplementary services for endpoints (FXS and ISDN BRI) connected to the device. Syntax (config-voip)# gateway dtmf-supp-service isdn-supp-serv <Index> (isdn-supp-serv-<Index>)# Command Description caller-id-enable {allowed|not- Enables the receipt of Caller ID.
Page 375
Reference Guide 59. gateway Command Description cfu-deactivation-code Supplementary Service code for deactivating Call Forward Unconditional. conf-id Identification of conference call used by SIP INVITE. connected-number-plan Enforces Q.931 Connected Number Type. connected-number-type Enforces Q.931 Connected Number Type. dtmf-during-hold Enables playing DTMF to Tel during hold. enable-3w-conf Enables 3-way conferencing feature.
Mediant MSBR Command Description mwi-subs-rtry-time MWI service subscriptions retry time after last subscription failure, in seconds. mx-3w-conf-onboard Max on-board conference calls. nb-of-cw-ind Number of call waiting indications to be played to the user. nrt-sub-retry-time NRT subscribe retry time. nrt-subscription Enable subscription for Call forward ringtone indicator services.
Reference Guide 59. gateway Command Description calling-name-map- See Section 59.5.1. ip2tel calling-name-map- See Section 0. tel2ip cause-map-isdn2isdn See Section 0. cause-map-isdn2sip See Section 59.5.4. cause-map-sip2isdn See Section 59.5.5. dst-number-map-ip2tel See Section 59.5.6. dst-number-map-tel2ip See Section 0. phone-context-table See Section 0. redirect-number-map- See Section 59.5.9.
Mediant MSBR Command Description num-of-digits-to-leave Defines the number of characters that you want to keep from the right of the calling name. prefix-to-add Defines the number or string to add at the front of the calling name. remove-from-left Defines the number of characters to remove from the left of the calling name.
Reference Guide 59. gateway Command Description remove-from-right Defines the number of characters to remove from the right of the calling name. src-pattern Defines the source (calling) telephone number prefix and/or suffix. src-trunk-group-id Defines the source Trunk Group ID from where the Tel-to- IP call was received.
Reference Guide 59. gateway 59.5.6 dst-number-map-ip2tel This command configures the Destination Phone Number Manipulation for IP-to-Tel Calls table, which lets you define manipulation rules for manipulating the destination number for IP-to-Tel calls. Syntax (config-voip)# gateway manipulation dst-number-map-ip2tel <Index> (dst-number-map-ip2tel-<Index>)# Command Description dst-host-pattern Defines the Request-URI host name prefix of the incoming...
Mediant MSBR 59.5.7 dst-number-map-tel2ip This command configures the Destination Phone Number Manipulation for IP-to-Tel Calls table, which lets you define manipulation rules for manipulating the destination number for Tel-to-IP calls. Syntax (config-voip)# gateway manipulation dst-number-map-tel2ip <Index> (dst-number-map-tel2ip-<Index>)# Command Description dest-ip-group-name Defines the IP Group to where the call is sent.
Mediant MSBR Command Description npi {e164-public|not- Defines the Numbering Plan Indicator (NPI). included|private|unkno num-of-digits-to-leave Defines the number of digits that you want to retain from the right of the redirect number. prefix-to-add Defines the number or string that you want added to the front of the redirect number.
Reference Guide 59. gateway Command Description is-presentation- Enables caller ID. restricted {allowed|not- configured|restricted} manipulation-name Defines a descriptive name, which is used when associating the row in other tables. npi {e164-public|not- Defines the Numbering Plan Indicator (NPI). included|private|unkno num-of-digits-to-leave Defines the number of digits that you want to retain from the right of the redirect number.
Mediant MSBR Command Description add-cic If add carrier identification code as prefix. add-ph-cntxt-as-pref Adds the phone context to src/dest phone number as prefix. add-prefix-for-isdn- If set and incoming ISDN SETUP contains High Layer hlc-fax Compatability IE with Facsimile, prefix FAX will be added to received Calling number.
Page 387
Reference Guide 59. gateway Syntax (config-voip)# gateway manipulation src-number-map-ip2tel <Index> (src-number-map-ip2tel-<Index>)# Command Description dst-host-pattern Defines the Request-URI host name prefix of the incoming SIP INVITE message. dst-pattern Defines the destination (called) telephone number prefix and/or suffix. is-presentation- Enables caller ID. restricted {allowed|not- configured|restricted}...
Mediant MSBR Command Mode Privileged User 59.5.13 src-number-map-tel2ip This command configures the Source Phone Number Manipulation for Tel-to-IP Calls table, which lets you define manipulation rules for manipulating the source number for Tel-to-IP calls. Syntax (config-voip)# gateway manipulation src-number-map-tel2ip <Index> (src-number-map-tel2ip-<Index>)# Command Description...
Mediant MSBR Command Description rel-cause Defines a Q.931 release code. Command Mode Privileged User Example This example configures an ISDN release code 17 for alternative routing: (config-voip)# gateway routing alt-route-cause-ip2tel 0 (alt-route-cause-ip2tel-0)# rel-cause 17 (alt-route-cause-ip2tel-0)# activate 59.6.2 alt-route-cause-tel2ip This command configures the Reasons for Tel-to-IP Alternative Routing table, which lets you define SIP response codes that if received from the IP side, the device reroutes the call to an alternative destination.
Reference Guide 59. gateway Command Description forward-dst Defines the alternative IP destination for the call used if the Trunk Group is busy or unavailable. trunk-group-id Defines the Trunk Group ID to where the IP call is destined. Command Mode Privileged User Example This example configures 10.15.7.96 as the alternative destination for calls destined for Trunk Group 1:...
Mediant MSBR Example This example configures a Routing Policy "ITSP", which uses LDAP Servers Group "ITSP- LDAP": (config-voip)# gateway routing gw-routing-policy 0 (gw-routing-policy-0)# name ITSP (gw-routing-policy-0)# ldap-srv-group-name ITSP-LDAP (gw-routing-policy-0)# activate 59.6.5 ip2tel-routing This command configures the IP-to-Tel Routing table, which lets you define IP-to-Tel routing rules.
Reference Guide 59. gateway Example This example configures a routing rule that routes calls from IP Group "ITSP" to Trunk Group (config-voip)# gateway routing ip2tel-routing 0 (ip2tel-routing-0)# name PSTN-to-ITSP (ip2tel-routing-0)# src-ip-group-name ITSP (ip2tel-routing-0)# trunk-group-id 1 (ip2tel-routing-0)# activate 59.6.6 settings This command configures gateway routing parameter. Syntax (config-voip)# gateway routing settings (gw-routing-settings)#...
Mediant MSBR Command Description probability-on-qos- If QoS problem, a call has this probability (in percentage) problem to continue to reevaluate the QoS. redir-nb-si-to-tel Override screening indicator value of the redirect number in Setup messages to PSTN interface.. src-ip-addr-input Source IP address input. src-manipulation Describes the hdrs containing source nb after manipulation.
Reference Guide 59. gateway Command Description dst-port Defines the destination port to where you want to route the call. forking-group Defines a Forking Group number for the routing rule. ip-profile-name Assigns an IP Profile to the routing rule in the outgoing direction.
Mediant MSBR 59.8 trunk-group This command configures the Trunk Group table, which lets you define Trunk Groups. Syntax (config-voip)# gateway trunk-group <Index> (trunk-group-<Index>)# Command Description first-b-channel Defines the first channel/port (analog module) or Trunk B- channel (digital module). first-phone-number Defines the telephone number(s) of the channels. first-trunk-id Defines the starting physical Trunk number in the Trunk Group.
Page 397
Reference Guide 59. gateway Command Description channel-select-mode Defines the method by which IP-to-Tel calls are assigned {always- to the channels of the Trunk Group. ascending|always- descending|channel- cyclic- ascending|cyclic- descending|dst-number- ascending|dst-number- cyclic-ascending|dst- phone-number|not- configured|ring-to- hunt-group|select- trunk-by-supp-serv- table|src-phone- number|trunk-channel- cyclic- ascending|trunk- cyclic-ascending} contact-user Defines the user part for the SIP Contact URI in INVITE messages, and the From, To, and Contact headers in...
Mediant MSBR (trunk-group-setting-0)# trunk-group-name PSTN (trunk-group-0)# trunk-group-id 1 (trunk-group-0)# channel-select-mode always-ascending (trunk-group-0)# activate 59.10 voice-mail-setting This command configures the voice mail parameters. Syntax (config-voip)# gateway voice-mail-setting (gw-voice-mail)# Command Description dig-to-ignore-dig- A digit (0-9,A-D,* or #) that if received as Src (S) or pattern Redirect (R), the digit is ignored and not added to that number.
Page 399
Reference Guide 59. gateway Command Description mwi-on-dig-ptrn Digit pattern to notify PBX about messages waiting for extension (added as prefix) mwi-source-number Phone number sent as source number toward PSTN for MWI setup. mwi-suffix-pattern MWI suffix code to notify PBX about messages waiting for extension (added as suffix to the extension number) smdi-timeout SMDI timeout.
Page 400
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Reference Guide 60. ids This command configures the Intrusion Detection System (IDS) feature, which detects malicious attacks on the device and reacts accordingly. Syntax (config-voip)# ids Command Description match See Section 60.1. policy See Section 60.2. Command Mode Privileged User 60.1 match This command configures the IDS Matches table, which lets you implement your configured...
Mediant MSBR 60.2 policy This command configures the IDS Policies table, which lets you define IDS Policies. The table is a parent of the IDS Rule table. Syntax (config-voip)# ids policy <Index> (policy-<Index>)# Command Description description Defines a brief description for the IDS Policy. name Defines a descriptive name, which is used when associating the row in other tables.
Page 403
Reference Guide 60. ids Command Description major-alrm-thr Defines the threshold that if crossed a major severity alarm is sent. minor-alrm-thr Defines the threshold that if crossed a minor severity alarm is sent. reason {abnormal- Defines the type of intrusion attack. flow|any|auth- failure|connection- abuse|establish-...
Page 404
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Mediant MSBR Command Description local-isdn-rbt-src If the ringback tone source is not IP, who should supply the Ringback tone. ovrlp-rcving-type Select reception type of overlap dialing from ISDN side pi-in-rx-disc-msg Configure PIForDisconnectMsg to overwrite PI value received in ISDN Disconnect message pi-to-isdn Override the value of progress indicator to ISDN side in ALERT PROGRESS and PROCEEDING messages...
Page 407
Reference Guide 61. interface Command Description call-re-rte-mode Call Rerouting Mode for Trunk. cas-channel-index Sets the CAS Protocol Table index per channel. cas-delimiters-types Defines the digits string delimiter padding usage for the specific trunk. cas-dial-plan-name Sets the Dial Plan name that will be used on the specific trunk.
Page 408
Mediant MSBR Command Description ovrlp-rcving-type Select reception type of overlap dialing from ISDN side pi-in-rx-disc-msg Configure PIForDisconnectMsg to overwrite PI value received in ISDN Disconnect message pi-to-isdn Override the value of progress indicator to ISDN side in ALERT PROGRESS and PROCEEDING messages play-rbt-to-trk Enable ringback tone playing towards trunk side.
Reference Guide 61. interface 61.3 fxs-fxo This command configures FXS and FXO interfaces. Syntax (config-voip)# interface fxs-fxo (fxs-fxo)# Command Description analog-port-enable Enables the analog port. bellcore-callerid- Selects the sub-standard of the Bellcore Caller ID type. type-one-sub-standard bellcore-vmwi-type- Defines the Bellcore VMWI standard. one-standard caller-id-timing-mode Defines the Analog Caller ID Timing Mode.
Page 410
Mediant MSBR Command Description fxs-tx-gain-control Defines gain\attenuation of the FXS Tx path between - 22db and 10db. metering-on-time Defines the metering signal duration to be detected metering-type Defines the metering method for charging pulses. min-flash-hook-time Defines the minimal time (in msec) for detection of a flash hook event (for FXS only).
Reference Guide 62. ip-group ip-group This command configures the IP Groups table, which lets you define IP Groups. Syntax (config-voip)# ip-group <Index> (ip-group-<Index>)# Command Description always-use-route-table Defines the Request-URI host name in outgoing INVITE {disable|enable} messages. always-use-source-addr Enables the <device> to always send SIP requests and {disable|enable} responses, within a SIP dialog, to the source IP address received in the previous SIP message packet.
Page 412
Mediant MSBR Command Description media-realm-name Assigns a Media Realm to the IP Group. msg-man-user-defined- Defines a value for the SIP user part that can be used in string1 Message Manipulation rules configured in the Message Manipulations table. msg-man-user-defined- Defines a value for the SIP user part that can be used in string2 Message Manipulation rules configured in the Message Manipulations table.
Page 413
Reference Guide 62. ip-group Command Description src-uri-input Defines the SIP header in the incoming INVITE that is used for call matching characteristics based on source URIs. srd-name Assigns an SRD to the IP Group. tags Assigns a Dial Plan tag used for routing and/or manipulation.
Page 414
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Reference Guide 63. media media This command configures media. Syntax (config-voip)# media Command Description fax-modem See Section 63.1. ipmedia See Section 63.2. rtp-rtcp See Section 63.3. security See Section 63.4. settings See Section 63.5. See Section 63.6. voice See Section 63.7. Command Mode Privileged User 63.1...
Page 416
Mediant MSBR Command Description enhanced-redundancy- Defines the number of repetitions to be applied to control depth packets when using T.38 standard. fax-cng-mode 0-Does not send a SIP re-INVITE, 1-Sends T.38 re-INVITE upon detection of fax CNG tone, 2-Sends T.38 re-INVITE upon detection of fax CNG tone or v8-cn signal fax-transport-mode Defines the Fax over IP transport method.
Reference Guide 63. media Example This example configures the fax transport type to T.38: (config-voip)# media fax-modem (media-fax-modem)# fax-transport-mode t.38-relay (media-fax-modem)# activate 63.2 ipmedia This command configures various IP-media parameters. Syntax (config-voip)# media ipmedia (media-ipmedia)# Command Description agc-disable-fast- Disables the AGC (Automatic Gain Control) Fast adaptation Adaptation mode.
Mediant MSBR Command Description ipm-detectors-enable Enables DSP IP Media Detectors. Command Mode Privileged User Example This example enables AD: (config-voip)# media ipmedia (media-ipmedia)# answer-detector-enable on (media-ipmedia)# activate 63.3 rtp-rtcp This command configures various RTP-RTCP parameters. Syntax (config-voip)# media rtp-rtcp (media-rtp-rtcp)# Command Description AnalogSignalTransportT...
Page 419
Reference Guide 63. media Command Description com-noise-gen-nego CN payload type is used and being negotiate disable-rtcp- Defines the RTCP report intervals. randomization fax-bypass-payload- Defines the Fax Bypass (VBD) Mode payload type. type jitter-buffer-minimum- Defines the Dynamic Jitter Buffer Minimum Delay [msec] delay jitter-buffer- Defines the Dynamic Jitter Buffer attack/decay...
Mediant MSBR 63.4 security This command configures various security parameters. Syntax (config-voip)# media security (media-security)# Command Description aria-protocol-support Enables ARIA media encryption algorithm. {off|on} media-sec-bhvior Defines the device behavior when receiving offer/response {mandatory|preferable| for media encryption. preferable-single- media} media-security-enable Enables the media security protocol (SRTP). {off|on} offer-srtp-cipher Defines the offered SRTP cipher suite.
Reference Guide 63. media Example This example enables SRTP: (config-voip)# media security (media-security)# media-security-enable on (media-security)# activate 63.5 settings This command configures various media settings. Syntax (config-voip)# media settings (media-settings)# Command Description AmrOctetAlignedEnable Defines the AMR payload format. G729EVLocalMBS Defines the maximum generation bitrate of the G729EV coder for a specific channel.
Mediant MSBR Command Description cot-detector-enable Enables COT (Continuity Tones) detection and generation. disable-nat-traversal Defines the NAT mode. {0|1|2|3} inbound-media-latch- Defines the handling of incoming media packets from non- mode expected address/port. silk-max-average- Defines the SILK coder maximal average bit rate. bitrate silk-tx-inband-fec Enables the SILK FEC (Forward Error Correction).
Reference Guide 63. media Command Description idle-pcm-pattern Defines the PCM pattern applied to the E1/T1 timeslot (B- channel) when the channel is closed and during silence periods when Silence Compression is used. pcm-law-select Defines the type of PCM companding law in the input/output TDM bus.
Page 424
Mediant MSBR Command Description acoustic-echo- Defines acoustic echo suppressor min reference delay [10 suppressor-min- ms]. reference-delay caller-id-transport- Defines the Caller ID Transport type. type default-dtmf-signal- Defines the time to play DTMF (in msec). duration dtmf-generation-twist Defines a delta between the high and low frequency components in the DTMF signal [db].
Reference Guide 64. message message This command configures SIP message manipulation tables. Syntax (config-voip)# message Command Description call-setup-rules See Section 64.1. message-manipulations See Section 64.2. message-policy See Section 64.3. pre-parsing-manip-sets See Section 64.4. Command Mode Privileged User 64.1 call-setup-rules This command configures the Call Setup Rules table, which lets you define Call Setup rules. Call Setup rules define various sequences that are run upon the receipt of an incoming call (dialog) at call setup, before the device routes the call to its destination.
Mediant MSBR Command Description query-target Defines the query target. query-type {dial- Defines the type of query. plan|ldap|none} row-role {use-current- Determines which condition must be met in order for this condition|use- rule to be performed. previous-condition} rules-set-id Defines a Set ID for the rule. Command Mode Privileged User Example...
Reference Guide 64. message Command Description action-type {add|add- Defines the type of manipulation. prefix|add- suffix|modify|normaliz e|remove|remove- prefix|remove-suffix} action-value Defines a value that you want to use in the manipulation. condition Defines the condition that must exist for the rule to be applied.
Page 428
Mediant MSBR Command Description body-list-type Defines the policy (blacklist or whitelist) for the SIP body {policy- specified in the 'Body List' parameter (above). blacklist|policy- whitelist} max-body-length Defines the maximum SIP message body length. max-header-length Defines the maximum SIP header length. max-message-length Defines the maximum SIP message length.
Reference Guide 64. message 64.4 pre-parsing-manip-sets This command configures the Pre-Parsing Manipulation Set table, which lets you define Pre- Parsing Manipulation Sets. The table is a parent of the Pre-Parsing Manipulation Rules table. Syntax (config-voip)# message pre-parsing-manip-sets <Index> (pre-parsing-manip-sets-<Index>)# Command Description name Defines a descriptive name, which is used when...
Page 430
Mediant MSBR Command Description replace-with Defines a pattern, based on regex, to replace the matched pattern. Command Mode Privileged User Example This example replaces the user part (if exists) in the From header URL with "1000", for INVITE messages: (config-voip)# message pre-parsing-manip-sets 0 (pre-parsing-manip-sets-0)# pre-parsing-manip-rules 1 (pre-parsing-manip-rules-0/1)# message-type invite.request (pre-parsing-manip-rules-0/1)# pattern From: *<sip:([^@]+)(@\S*)
Reference Guide 65. proxy-set proxy-set This command configures the Proxy Sets table, which lets you define Proxy Sets. The table is a parent of the Proxy Address table. Syntax (config-voip)# proxy-set <Index> (proxy-set-<Index>)# Command Description classification-input Defines how the <device> classifies incoming IP calls to {ip-only|ip-port- the Proxy Set.
Mediant MSBR Command Description proxy-name Defines a descriptive name, which is used when associating the row in other tables. proxy-redundancy-mode Determines whether the <device> switches from a {homing|not- redundant proxy to the primary proxy when the primary configured|parking} proxy becomes available again. sbcipv4-sip-int-name Assigns an IPv4-based SIP Interface for SBC calls to the Proxy Set.
Page 433
Reference Guide 65. proxy-set Command Description proxy-address Defines the address of the proxy. transport-type {not- Defines the transport type for communicating with the configured|tcp|tls|udp proxy. Command Mode Privileged User Example This example configures address 201.10.5.1 for the Proxy Set: (config-voip)# proxy-set 0 (proxy-set-0)# proxy-ip 1 (proxy-ip-0/1)# proxy-address 201.10.5.1 (proxy-ip-0/1)# transport-type udp...
Page 434
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Reference Guide 66. qoe This command configures Quality of Experience (QoE). Syntax (config-voip)# qoe Command Description bw-profile See Section 66.1. call-flow-report See Section 66.2 qoe-profile See Section 66.3. quality-of-service-rules See Section 66.4. settings See Section 66.5. Command Mode Privileged User 66.1 bw-profile This command configures the Bandwidth Profile table, which lets you define Bandwidth...
Mediant MSBR Command Description minor-threshold Defines the Minor threshold value, which is the lower threshold located between the Yellow and Green states. name Defines a descriptive name, which is used when associating the row in other tables. total-egress-bandwidth Defines the major (total) threshold for video and audio outgoing bandwidth (in Kbps).
Reference Guide 66. qoe 66.3 qoe-profile This command configures the Quality of Experience Profile table, which defines a name for the Quality of Experience Profile. The table is a parent of the Quality of Experience Color Rules table. Syntax (config-voip)# qoe qoe-profile <Index> (qoe-profile-<Index>)# Command Description...
Mediant MSBR Command Description Direction {device- Defines the monitoring direction. side|remote-side} major-hysteresis-red Defines the amount of fluctuation (hysteresis) from the Major threshold, configured by the 'Major Threshold (Red)' parameter in order for the threshold to be considered as crossed. major-threshold-red Defines the Major threshold value, which is the upper threshold located between the Yellow and Red states.
Reference Guide 66. qoe Command Description alt-ip-profile-name Assigns a different IP Profile to the IP Group or call (depending on the 'Rule Metric' parameter) if the rule is matched. calls-reject-duration Defines the duration (in minutes) for which the <device> rejects calls to the IP Group if the rule is matched. ip-group-name Assigns an IP Group.
Page 440
Mediant MSBR Command Description server-ip Defines the IP address of the primary Session Experience Manager (SEM) server to where the quality experience reports are sent. tls-context Assigns a TLS Context (configured in the TLS Contexts table) for the TLS connection with the SEM server. tls-enable {off|on} Enables a TLS connection with the SEM server.
Reference Guide 67. realm realm This command configures the Media Realms table, which lets you define a pool of SIP media interfaces, termed Media Realms. Syntax (config-voip)# realm <Index> (realm-<Index># Command Description bw-profile Assigns a Bandwidth Profile to the Media Realm. ipv4if Assigns an IPv4 network interface to the Media Realm.
Reference Guide 67. realm 67.1 realm-extension This command configures the Media Realm Extension table, which lets you define Media Realm Extensions. A Media Realm Extension defines a port range with the number of sessions for a specific Media-type network interface (configured in the IP Interfaces table). The table is a child of the Media Realm table.
Mediant MSBR 67.2 remote-media-subnet This command configures the Remote Media Subnets table, which lets you define destination subnets for media (RTP/SRTP) traffic on a specific Media Realm. The table is a child of the Media Realm table. Syntax (config-voip)# realm <Index> (realm-<Index># remote-media-subnet <Index>...
Mediant MSBR Command Description message-condition-name Assigns a Message Condition rule to the Classification rule as a matching characteristic for the incoming SIP dialog. src-host Defines the prefix of the source URI host name as a matching characteristic for the incoming SIP dialog. src-ip-address Defines a source IP address as a matching characteristic for the incoming SIP dialog.
Reference Guide 68. sbc Command Description dial-plan-rule Defines the Dial Plan Rule table, which defines the dial plans (rules) per Dial Plan. The table is a child of the Dial Plan table. For more information, see Section 68.2.1. Command Mode Privileged User Example This example configures a Dial Plan with the name "ITSP":...
Mediant MSBR 68.3 external-media-source This command configures the External Media Source table, which defines an external media source for playing Music on Hold (MoH) to call parties that have been placed on-hold. Syntax (config-voip)# sbc external-media-source <Index> (external-media-source-<Index>)# Command Description Index Defines the table row index.
Reference Guide 68. sbc Command Mode Privileged User Example This example configures a Malicious Signature for the SIP scan attack: (config-voip)# sbc malicious-signature-database 0 (malicious-signature-database-0)# name SCAN (malicious-signature-database-0)# pattern header.user- agent.content prefix 'sip-scan' (malicious-signature-database-0)# activate 68.5 manipulation This command configures SBC manipulation tables. Syntax (config-voip)# sbc manipulation Command...
Page 450
Mediant MSBR Command Description is-additional- Determines whether additional SIP URI user part manipulation manipulation is done for the table entry rule listed directly {disable|enable} above it. leave-from-right Defines the number of characters that you want retained from the right of the user name. manipulated-uri Determines whether the source or destination SIP URI {destination|source}...
Reference Guide 68. sbc (ip-inbound-manipulation-0)# activate 68.5.2 ip-outbound-manipulation This command configures the Outbound Manipulations table, which lets you define IP-to-IP Outbound Manipulation rules. An Outbound Manipulation rule defines a manipulation action for the SIP Request-URI user part (source or destination) or calling name of outbound SIP dialog requests.
Mediant MSBR Command Description remove-from-right Defines the number of digits to remove from the right of the manipulated item prefix. request-type Defines the SIP request type to which the manipulation {all|invite|invite- rule is applied. and-register|invite- and- subscribe|register|sub scribe} routing-policy-name Assigns a Routing Policy to the rule. src-host Defines the source SIP URI host name - full name, typically in the From header.
Reference Guide 68. sbc Command Description condition-table See Section 68.6.1. ip-group-set See Section 68.6.2. ip2ip-routing See Section 68.6.3. sbc-alt-routing-reasons See Section 68.6.4. sbc-routing-policy See Section 68.6.5. Command Mode Privileged User 68.6.1 condition-table This command configures the Message Conditions table, which lets you define Message Condition rules.
Mediant MSBR Syntax (config-voip)# sbc routing ip-group-set <Index> (ip-group-set-<Index>)# Command Description name Defines a descriptive name, which is used when associating the row in other tables. ip-group-set-member conf Defines igures the IP Group Set Member table, which lets you assign IP Groups to IP Group Sets. The table is a child of the IP Group Set table.
Reference Guide 68. sbc Example This example configures an IP Group Set Member with IP Group "SIP-Trunk": (config-voip)# sbc routing ip-group-set 0 (ip-group-set-0)# ip-group-set-member 1 (ip-group-set-member-0/1)# ip-group-name SIP-Trunk (ip-group-set-member-0/1)# weight 9 (ip-group-set-member-0/1)# activate 68.6.3 ip2ip-routing This command configures the IP-to-IP Routing table, which lets you define SBC IP-to-IP routing rules.
Page 456
Mediant MSBR Command Description dst-type {all- Determines the destination type to which the outgoing SIP users|destination- dialog is sent. tag|dial-plan|dst- address|enum|gateway|h unt-group|internal|ip- group|ip-group- set|ldap|request- uri|routing-server] dst-user-name-pattern Defines the prefix of the incoming SIP dialog's destination URI (usually the Request URI) user part. You can use special notations for denoting the prefix.
Reference Guide 68. sbc Command Description trigger {3xx|3xx-or- Defines the reason (i.e., trigger) for re-routing (i.e., refer|any|broken- alternative routing) the SIP request. connection|fax- rerouting|initial- only|refer} Command Mode Privileged User Example This example configures a routing rule for calls from IP Group "IPBX" to IP Group "ITSP": (config-voip)# sbc routing ip2ip-routing 0 (ip2ip-routing-0)# route-name IPPBX-TO-SIPTRUNK (ip2ip-routing-0)# src-ip-group-name IPBX...
Mediant MSBR Command Mode Privileged User Example This example configures a SIP response code 400 for alternative routing: (config-voip)# sbc routing sbc-alt-routing-reasons 0 (sbc-alt-routing-reasons-0)# ip-group-name SIP-Trunk (sbc-alt-routing-reasons-0)# activate 68.6.5 sbc-routing-policy This command configures the Routing Policies table, which lets you define Routing Policy rules.
Reference Guide 68. sbc 68.7 cac-profile This command configures the Call Admission Control Profile table, which lets you define CAC profiles for call admission control (CAC) rules. Syntax (config-voip)# sbc cac-profile <Index> (cac-profile-<Index>)# Command Description Index Defines the table row index. cac-rule Defines the Call Admission Control Rule table, which lets you define CAC rules per Call Admission Control Profile.
Mediant MSBR Command Description max-burst Defines the maximum number of tokens (SIP dialogs) that the "bucket" can hold. max-burst-per-user Defines the maximum number of tokens (SIP dialogs) that the "bucket" can hold per user. rate Defines the maximum number of SIP dialogs per second for the token bucket.
Page 461
Reference Guide 68. sbc Command Description end-point-call- Defines the ports call priority. priority enforce-media-order Arrange media lines according to the previous offer- answer (required by RFC 3264). enforce-media-order Enforces media order according to RFC 3264. gw-direct-route-prefix Defines the prefix for call redirection from SBC to Gateway.
Page 462
Mediant MSBR Command Description sbc-emerg-rtp-diffserv Defines the RTP DiffServ value for Emergency calls. sbc-emerg-sig-diffserv Defines the Signaling DiffServ value for Emergency calls. sbc-fax-detection- Defines the maximum time for fax detection (seconds). timeout sbc-forking-handling- Defines the handling method for 18X response to forking. mode sbc-gruu-mode Defines the GRUU behavior.
Page 463
Reference Guide 68. sbc Command Description session-expires-time Defines the SIP session - refreshed (using INVITE) each time this timer expires (seconds). transcoding-mode Defines the transcoding mode. unclassified-calls Allows unclassified incoming calls. xfer-success-time-out Defines the maximum time (in msec) to wait for release an original call on transfer.
Page 464
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Reference Guide 69. sip-definition sip-definition This command configures various SIP settings. Syntax (config-voip)# Command Description account See Section 69.1. least-cost-routing cost-group See Section 69.2. proxy-and-registration See Section 69.3. settings See Section 69.4. sip-recording See Section 69.5. Command Mode Privileged User 69.1 account This command configures the Accounts table, which lets you define user registration...
Mediant MSBR Command Description registrar-search-mode Defines the method for choosing an IP address (registrar) {by-ims-spec|current- in the Proxy Set (associated with the Serving IP Group) to server} which the Account initially registers and performs registration refreshes, when the Register Stickiness feature is enabled.
Reference Guide 69. sip-definition Command Description cost-group-name Defines a descriptive name, which is used when associating the row in other tables. cost-group-time-bands Defines the Time Band table, which lets you define Time Bands per Cost Group. The table is a child of the Cost Groups table.
Mediant MSBR Command Mode Privileged User Example This example configures an LCR time band between Saturday 1 am to Sunday midnight with connection cost of 1 and minute cost of 0.5: (config-voip)# sip-definition least-cost-routing cost-group 0 (cost-group-0)# cost-group-time-bands 1 (cost-group-time-bands-0/1)# start-time SAT:01:00 (cost-group-time-bands-0/1)# end-time SUN:23:59 (cost-group-time-bands-0/1)# connection-cost 1 (cost-group-time-bands-0/1)# minute-cost 0.5...
Page 469
Reference Guide 69. sip-definition Command Description max-gen-reg-rate Defines the max. generated Register requests per interval. max-registration- Defines the Backoff mechanism that is applied between backoff-time failed registration attempts initiated by the device. mutual-authentication Defines the Mutual Authentication mode. nb-of-rtx-b4-hot-swap Defines the number of retransmissions before Hotswap is done.
Mediant MSBR Command Description trusted-proxy Defines whether the proxy is a trusted node. use-gw-name-for-opt Enables use of Gateway name (instead of IP address) in Keep-Alive OPTIONS messages. use-proxy-ip-as-host Enables use of the Proxy IP as Host in From and To headers.
Reference Guide 69. sip-definition Command Mode Privileged User Example This example searches for the user "Joe": (config-voip)# sip-definition proxy-and-registration (sip-def-proxy-and-reg)# user-info sbc-user-info find-by local- user Joe sbc-user-info 2 local-user "Joe" username "" password "" ip-group-name "MoH Users" 69.4 settings This command configures various SIP settings. Syntax (config-voip)# sip-definition settings (sip-def-settings)#...
Page 472
Mediant MSBR Command Description app-sip-transport-type Defines the SIP transport type. application-profile Defines the Application Profile. broken-connection- Defines the duration the RTP connection should be broken event-timeout before the Broken Connection event is issued [100ms]. busy-out Enables trunks to be taken out of service in case of LAN down.
Page 473
Reference Guide 69. sip-definition Command Description display-default-sip- Enables default port 5060 shown in the headers. port e911-callback-timeout Defines the maximum time for an E911 ELIN callback to be valid (minutes). e911-gateway Enables E911 to NG911 gateway and ELIN handling. emerg-calls-regrt-t- Defines the regret time for Emergency calls.
Page 474
Mediant MSBR Command Description ldap-pbx-nm-attr Defines the name of the attribute which represents the user PBX number in the Microsoft AD database. ldap-primary-key Defines the name of the query primary key in the Microsoft AD database. ldap-private-nm-attr Defines the name of the attribute which represents the user Private number in the Microsoft AD database.
Page 475
Reference Guide 69. sip-definition Command Description prog-ind-2ip Defines the whether to send the Progress Indicator to IP. pstn-alert-timeout Defines the max time (in seconds) to wait for connect from PSTN. q850-cause-for-sit-ic Defines the release cause for SIT IC. q850-cause-for-sit-ro Defines the release cause for SIT RO. q850-cause-for-sit-vc Defines the release cause for SIT VC.
Page 476
Mediant MSBR Command Description retry-aftr-time Retry After time for the proxy to be in state Unavailable. rfc4117-trnsc-enbl Enables transcoding call. rport-support Enables Rport option in Via header. rtcp-attribute Enables RCTP attribute in the SDP. rtcp-xr-coll-srvr Defines the RTCP-XR server IP address. rtcp-xr-rep-mode 0:rtcpxr is not sent over SIP at all{@}1:rtcpxr is sent over sip when call ended{@}2:rtcpxr is sent over sip when on...
Page 477
Reference Guide 69. sip-definition Command Description sip-t38-ver Defines the SIP T.38 Version. sip-uri-for-diversion- Use Tel uri or Sip uri for Diversion header. header sit-q850-cause Defines the release cause for SIT. skype-cap-hdr-enable 0 (default): Disable, 1:Add special header with capabilities for Skype src-hdr-4-called-nb Select source header for called number (IP->TEL), either from the user part of To header or the P-Called-Party-ID...
Mediant MSBR Command Description use-dst-as-connected- Enables use of destination as connected number. use-dtg Enables use of DTG parameter. use-tgrp-inf Enables use of Tgrp information. user-agent-info Defines the string that is displayed in the SIP Header 'User-Agent' or 'Server'. user-inf-usage Enables User-Information usage. user-phone-in-from Adds 'User=Phone' to From header.
Reference Guide 69. sip-definition Command Mode Privileged User 69.5.1 settings This command configures various SIPRec settings. Syntax (config-voip)# sip-definition sip-recording settings (sip-rec-settings)# Command Description enable-sip-rec Enables SIPRec. {off|on} siprec-server-dest- Defines the username of the SIPRec server (SRS). username Command Mode Privileged User Example This example enables SIPRec:...
Page 480
Mediant MSBR Command Description peer-ip-group-name Defines the peer IP Group that is participating in the call. peer-trunk-group-id Defines the peer Trunk Group that is participating in the call (applicable only to Gateway calls). recorded-dst-pattern Defines calls to record based on destination number or URI.
Reference Guide 70. sip-interface sip-interface This command configures the SIP Interfaces table, which lets you define SIP Interfaces. A SIP Interface represents a Layer-3 network in your deployment environment, by defining a local, listening port number and type (e.g., UDP), and assigning an IP network interface for SIP signaling traffic.
Page 482
Mediant MSBR Command Description sbc-direct-media Enables direct media (RTP/SRTP) flow (i.e., no Media {disable|enable|enable Anchoring) between endpoints associated with the SIP -same-nat} Interface. srd-name Assigns an SRD to the SIP Interface. tcp-keepalive-enable Enables the TCP Keep-Alive mechanism with the IP entity {disable|enable} on this SIP Interface.
Reference Guide 71. srd This command configures the SRDs table, which lets you define signaling routing domains (SRD). The SRD is a logical representation of an entire SIP-based VoIP network (Layer 5) consisting of groups of SIP users and servers. Syntax (config-voip)# srd <Index>...
Reference Guide 72. Introduction Introduction This part describes the commands located on the Data configuration level, which configures the data-router functionality. The commands of this level are accessed by entering the following command at the root prompt: Syntax # configure data (config-data)# Command Mode Privileged User...
Page 488
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Reference Guide 73. WAN Access Commands WAN Access Commands 73.1 General WAN Commands 73.1.1 interface This command enters a specific interface configuration. Use the no form of this command to delete a specific interface. Syntax interface atm <group/subinterface[.vlanID[.vlanID]]> interface bvi <bridge interface> interface cellular <slot/port>...
Page 490
Mediant MSBR Command Description Defines the E1 slot and port. Defines the EFM interface slot and port (Vlan ID is optional). fastEthernet Defines the FastEthernet interface slot and port. fiber interface Defines the fibre interface (Vlan ID and second vlanID are optional).
Reference Guide 73. WAN Access Commands 73.1.1.1 interface vti This command defines the VTI interface. Syntax interface vti <vti interface id> Command Description vti interface id Defines the VTI interface ID (1-255). Default Command Mode Privileged User Example This example defines the VTI interface. (config-data)#interface vti 10 73.1.1.2 interface vlan This command defines the VLAN ID.
Mediant MSBR 73.1.1.3 interface t1 This command defines the T1 interface slot and port. Syntax interface t1 [slot/port] Command Description Defines the T1 interface slot and port. Default Command Mode Privileged User Example This example defines the T1 slot and port. (config-data)#interface t1 2/2 73.1.1.4 interface serial This command defines the serial interface slot and port.
Reference Guide 73. WAN Access Commands 73.1.1.5 interface loopback This command defines the loopback interface identifier. Syntax interface loopback <loopback interface id> Command Description loopback interface id Defines the loopback interface identifier (1-20). Default Command Mode Privileged User Example This example defines the loopback interface identifier. (config-data)#interface loopback 10 73.1.1.6 interface multilink This command defines the multilink interface identifier.
Mediant MSBR 73.1.1.7 interface gpon This command defines the Gigabit Passive Optical Network (GPON) interface. Syntax interface gpon [slot/port.vlanID] Command Description slot/port.vlanID Defines the GPON interface. Default Command Mode Privileged User Example This example defines the GPON interface. (config-data)#interface gpon 1/3.2 73.1.1.8 interface gigabitethernet This command defines the GigabitEthernet interface slot and port.
Reference Guide 73. WAN Access Commands (config-data)#interface gigabitEthernet 0/0.3 This example enters a specific interface configuration for the GigabitEthernet Physical Port 3 menu. (config-data)#interface gigabitEthernet 4/3 73.1.1.9 interface fastethernet This command defines the FastEthernet interface slot and port. Syntax interface fastethernet [slot/port] Command Description...
Mediant MSBR Command Mode Privileged User Example This example defines the EFM interface slot and port. (config-data)#interface efm 5/3.1 73.1.1.11 interface e1 This command defines the E1 interface slot and port. Syntax interface E1 [slot/port] Command Description slot/port.vlanID Defines the E1 interface slot and port. Default Command Mode Privileged User...
Reference Guide 73. WAN Access Commands Command Mode Privileged User Example This example configures a bridge interface. (config-data)#interface bvi 10 73.1.1.13 interface pppoe This command creates a PPP-over-Ethernet (RFC 2516) interface. Syntax interface pppoe <PPPoE Interface ID> Command Description PPPoE Interface ID Defines the PPPoE Interface ID in the range of 0-7.
Mediant MSBR 73.1.2 ip address This command defines the primary IP address on the specified Layer 3 interface. Use the no form of this command to remove a configured IP address. Syntax ip address <ip address> <subnet mask> Command Description ip address Specifies a valid IPv4 address.
Reference Guide 73. WAN Access Commands Command Description secondary Sets secondary IP address for the VRID. priority Sets the priority for VRID. The range is 1-254. preempt Sets preemption for lower priority Master. time in seconds Sets interval timer for advertising the Master VRID Default Command Mode Privileged User...
Mediant MSBR Example This example sets the description on VLAN 6. (conf-if-VLAN 6)# description vlan 6 interface 73.1.5 duplex This command configures the duplex mode on the specified Layer 2 interface. Syntax duplex half duplex full duplex auto Command Description half Forces half duplex operation.
Page 501
Reference Guide 73. WAN Access Commands ifname Interface Type Interface ID gigabitethernet GigabitEthernet interface slot [SLOT/PORT.VLANID] and port (VLAN ID is optional) cellular Cellular interface ID Tunnel GRE ID [1-255] ipip Tunnel IPIP ID [1-255] l2tp L2TP ID [0-99] pppoe PPPoE interface ID [1-3] pptp...
Mediant MSBR 73.2 Cellular 3G Modem Configuration Commands This section defines Cellular 3G Modem Configuration. 73.2.1 interface cellular 0/0 On Mediant 800 MSBR devices with the appropriate hardware revision, this command allows defining an Internet connection via a cellular 3G modem connected to the USB port. The command creates the cellular interface and enters the “conf-cellular”...
Reference Guide 73. WAN Access Commands Command Description ms-chap2 Defines the Microsoft Challenge Handshake Authentication Protocol 2 as PPP authentication protocol. Default All 4 authentication protocols are set as ON. You can disable some protocol using “no ppp authentication <protocol>” command Command Mode Privileged User Example...
Mediant MSBR Syntax phone <phone-string> Default The default phone number is “*99#”. Command Mode Privileged User Example This example sets the phone number: (config-data)# interface cellular 0/0 (conf-cellular)# phone *99# 73.2.5 initstr This command sets the initialization string for the cellular modem and is available in the “conf- cellular”...
Reference Guide 73. WAN Access Commands Syntax tty <tty-value> Command Description <tty-value> Defines the “first”, “last” or a number between 0 and 11. If set to first, the first responsive serial interface is used. If set to last, the highest numbered interface is used. Default The default TTY value is “last”.
Mediant MSBR 73.2.8 pcui This command sets the PCUI port index for communication with the MSBR. Syntax pcui <port index> pcui send <send text> expect <expect text> reboot Command Description port index Defines the TTY port index. send text Defines the AT command format. expect text Defines the expected string to match.
Reference Guide 73. WAN Access Commands Syntax hdlc asynchronous | synchronous Command Description asynchronous Sets the HDLC asynchronous framing. synchronous Set HDLC synchronous framing (default) Default The default setting is "synchronous". Command Mode Privileged User Example This example sets the HDLC asynchronous framing: (config-data)# interface cellular 0/0 (conf-cellular)# adv (adv-cell-config)# hdlc asynchronous...
Page 508
Mediant MSBR Example This example sets the supported Vendor ID: (config-data)# interface cellular 0/0 (conf-cellular)# adv (adv-cell-config)# modem-details vendor-id AAFF 73.2.9.3 option This command sets the "option" serial driver support using the parameters set in the modem- details sub-menu (Vendor-id/Modem product-id). The USB device manufacturer should advise that it is able to work with the "option"...
Reference Guide 73. WAN Access Commands 73.2.9.4 usb-modeswitch This command sets the USB modeswitch settings. When a USB device is plugged in for the first time, it might perform like a flash storage. The MSBR should make the storage device disappear and changes it to a communications device to work with it under the Cellular interface.
Mediant MSBR 73.2.10 backup monitoring This command selects which of the device's other interfaces, needs to be monitored. This command configures the cellular 3G connection in “backup” mode, where the connection is initiated only if another interface goes down. To return to “primary” mode – where the cellular 3G connection is always up – use the “no” form of this command.
Reference Guide 73. WAN Access Commands 73.2.11 sms This command provides support for sending an SMS text message through a 3G cellular connection. Cellular connectivity is achieved by attaching a third-party, 3G cellular modem to the device's USB port. Syntax sms <mobile number>...
Mediant MSBR 73.3 ADSL/VDSL Commands The following describes ADSL/VDSL commands. 73.3.1 interface dsl 0/0 Asymmetric Digital Subscriber Line (ADSL) and VDSL (Very high-speed DSL) are popular WAN access technologies using copper wire pairs. On appropriate hardware variants of the device, this command defines the physical properties of the ADSL/VDSL interface.
Reference Guide 73. WAN Access Commands 73.3.2 Fiber Optic Commands The commands below describe Fiber Optic. 73.3.3 interface fiber This command enters a specific interface configuration. Use the no form of this command to delete a specific interface. Syntax interface fiber <slot/port> interface fiber <slot/port[.vlanID]>...
Mediant MSBR 73.4 SHDSL Commands The commands below describe SHDSL. 73.4.1 interface SHDSL 0/0 Symmetric High-speed Digital Subscriber Line (SHDSL, sometimes called G.SHDSL) is a popular WAN access technology using copper wire pairs. The purpose of this command is to configure physical-layer properties of SHDSL, such as the number of wire-pairs in use.
Mediant MSBR Example This example defines one group: (conf-shdsl)# group 0 73.4.4 pairs This command selects the wire-pairs which participate in an SHDSL group. Syntax interface shdsl 0/0 group <group-id> pairs <list of wire-pair numbers> Command Description Defines the wire-pair numbers (0 to 3), separated by commas. Examples: list of wire-pair pairs 0...
Reference Guide 73. WAN Access Commands Command Description Selects STU-R mode (SHDSL Remote Terminal) Selects STU-C mode (SHDSL Central Office Terminal) Note: CO mode is unsupported and available for diagnostic purposes only; the system cannot be used as a DSLAM. Default The default is CPE mode.
Mediant MSBR Example This example selects automatic line rate: (conf-shdsl-0)# linerate auto 73.4.7 annex This command selects the regional annex (as defined in ITU-T Recommendation G.991.2) for an SHDSL group. Syntax interface shdsl 0/0 group <group-id> annex {a|b} Command Description Selects G.991.2 regional annex A / F.
Reference Guide 73. WAN Access Commands Command Description group-id Defines the number of the SHDSL group (0-3) defined by the "group" command. sub-id Defines the sub-interface number (0 to 7). Note: The system supports up to a total of eight ATM interfaces in all SHDSL groups.
Mediant MSBR 73.4.10 encapsulation This command defines the type of IP encapsulation used on an ATM sub-interface. Syntax interface atm <group-id>/<sub-id> encapsulation {ipoa|ethoa|pppoa -{mux|snap} encapsulation pppoe encapsulation pppoe-mux Command Description ipoa Selects the IP-over-ATM, in RFC 2684 "Routed" mode. ethoa Selects the Ethernet-over-ATM, in RFC 2684 "Bridged"...
Reference Guide 73. WAN Access Commands 73.4.11 ubr / cbr / vbr This command defines the ATM service class for an ATM sub-interface. Syntax interface atm <group-id>/<sub-id> ubr <peak-kbps> cbr <peak-kbps> vbr <peak-kbps> <sustained-kbps> <burst-cells> Command Description Defines Unspecified Bit Rate; no bandwidth is reserved for this interface.
Mediant MSBR 73.4.12 ppp user This command defines the PPPoA / PPPoE username and password for an ATM sub- interface. Syntax interface atm <group-id>/<sub-id> ppp user <username> pass <password> Command Description <username> Defines the PPP user name. <password> Defines the PPP password. Default This command has no defaults.
Reference Guide 73. WAN Access Commands 73.4.13 T1 WAN Commands This section describes the commands for the T1 WAN interface. The T1 WAN interface is one of three WAN interfaces of the Mediant 500 MSBR and Mediant 800 MSBR. The other WAN interfaces are SHDSL (see Section 41.5 on page 514)
Mediant MSBR Example This example sets active slots 2, 4 and 17, 18, 19 on t1 port 0/0. (conf-if-t1 0/0)# channel-group 2, 4, 17-19 73.4.14.2 clock-source This command specifies the clock source on the current T1 interface. Syntax clock-source <source> Command Description <source>...
Reference Guide 73. WAN Access Commands Command Mode Privileged User Example This example sets the framing method to superframe (D4) on t1 port 0/0: (conf-if-t1 0/0)# framing-method sf 73.4.14.4 line-code This command specifies the line coding on the current T1 interface. Syntax line-code <line code>...
Mediant MSBR Command Description -22.5 dB Default By default, the line buildout loss is 0 dB. Command Mode Privileged User Example This example sets the line buildout loss to -7.5 dB on t1 port 0/0: (conf-if-t1 0/0)# line-buildout-loss -7.5 73.4.14.6 max-cable-loss This command specifies the loss due to cable length on the current T1 interface.
Reference Guide 73. WAN Access Commands 73.4.15 Serial Interfaces This section describes the WAN serial interface commands. Note: You can configure the WAN serial interface and the WAN T1 physical interface on the same physical WAN port, where the same identifier <slot>-<port> is specified for both interfaces.
Mediant MSBR This example sets MLP as the encapsulating protocol on the serial interface 0/1 and associates the serial interface to a logical bundle identified by id 0: (conf-if-serial 0/1)#serial-protocol mlp 0 To remove the protocol, type ‘no’ at the command prefix. 73.4.15.2 ip address (HDLC over T1) This command specifies the IP address and subnet mask of the HDLC serial interface.
Reference Guide 73. WAN Access Commands Command Mode Privileged User Example This example sets IP address 223.4.5.6 on the HDLC encapsulated serial interface 0/0: (conf-if-serial-hdlc 0/0)# ip dns-server 10.1.1.10 10.1.1.11 73.4.15.4 ip mtu (HDLC over T1) This command specifies the maximum transfer unit value to be used by this HDLC serial interface.
Mediant MSBR Command Description Mode Defines the PPP IP addressing modes: ‘automatic’ – IP address will be accepted from peer during IPCP negotiation. ‘manual’ – set local static IP address and optional subnet mask. ‘unnumbered’ – use unnumbered mode (PPP serial interface uses LAN interface ip address).
Reference Guide 73. WAN Access Commands Default By default no DNS servers are defined for the PPP serial interface. Command Mode Privileged User Example This example sets the static DNS servers’ IP addresses on the PPP encapsulated serial interface 0/0: (conf-if-serial-ppp 0/0)# ip dns-server manual 10.1.1.10 10.1.1.11 73.4.15.7 ip mtu (PPP over T1)
Mediant MSBR Command Description ‘no’ at prefix of command Disables CHAP on this PPP/MLP serial interface. Default By default CHAP is enabled Command Mode Privileged User Example This example enables CHAP: (conf-if-serial-ppp 0/0)# authentication chap 73.4.15.9 authentication pap (PPP/MLP over T1) This command enables Password Authentication Protocol (PAP) to be used by this PPP/MLP serial interface.
Reference Guide 73. WAN Access Commands Command Description ‘no’ at prefix of command Disables MS-CHAP on this PPP/MLP serial interface. Default By default, MS-CHAP is enabled. Command Mode Privileged User Example This example enables MS-CHAP: (conf-if-serial-ppp 0/0)# authentication ms-chap 73.4.15.11 authentication ms-chap2 (PPP/MLP over T1) This command enables Microsoft Challenge Handshake Authentication Protocol Version 2 (MS-CHAP2) to be used by this PPP/MLP serial interface.
Mediant MSBR Syntax authentication username <username> Command Description username Defines the username string Default By default, the username is set to ‘user’. Command Mode Privileged User Example This example sets the username on the PPP serial interface 0/0: (conf-if-serial-ppp 0/0)# authentication username JohnA 73.4.15.13 authentication password (PPP/MLP over T1) This command sets the password to be used by this PPP/MLP serial interface during the...
Reference Guide 73. WAN Access Commands 73.4.15.14 multilink bundle-id (MLP over T1) This command associates the current MLP serial interface to a virtual bundle id. Setting more than one serial interface to the same bundle id bonds both interfaces under the same virtual bundle.
Mediant MSBR 73.4.16 Multilink Interfaces (MLP over T1 WAN) This section describes the Multilink interfaces commands. The multilink interface holds all relevant data characteristics for a virtual bundle of MLP interface/s. 73.4.16.1 napt This command sets the NAPT (Network Address Port Translation) on the Multilink interface. Syntax napt Default...
Reference Guide 73. WAN Access Commands Example This example associates a multilink interface 1 with virtual bundle id 8: (conf-if-multilink 1)# ppp bundle-id 8 73.4.16.3 ppp fragments-enable This command will cause each transmitted packet to be fragmented among the virtual bundle’s serial interfaces, thus reaching maximum bandwidth utilization.
Mediant MSBR Command Mode Privileged User Example This example sets the mrru to 500 bytes on multilink interface 1: (conf-if-multilink 1)# ppp mrru 500 73.4.16.5 ip address This command specifies the IP addressing mode of this multilink interface. Syntax ip address <mode> <a.b.c.d> <e.f.g.h> Command Description mode...
Reference Guide 73. WAN Access Commands 73.4.16.6 ip dns-server This command specifies the primary and secondary DNS servers to be used by this multilink interface. Syntax ip dns-server <mode> <a.b.c.d> <e.f.g.h> Command Description mode The DNS servers addressing modes are: ...
Mediant MSBR 73.5 Backup Group Commands The commands below describe Backup Group. 73.5.1 backup-group A backup group defines a set of interfaces so that only one of the interfaces is active at any given moment. Other interfaces in the group are automatically disabled. By default, the interface marked as "priority 1"...
Reference Guide 73. WAN Access Commands 73.5.2 backup monitoring group This command associates an interface with a backup group. Interfaces in a backup group are automatically enabled and disabled based on the connectivity status of other interfaces in the group. See the command "backup-group" for additional information. To remove an interface from a backup group, use the "no"...
Page 544
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Reference Guide 74. Layer-2 (LAN) Commands Layer-2 (LAN) Commands 74.1 Wi-Fi Commands The following describes Wi-Fi commands. 74.1.1 radio shutdown This command provides support for enabling or disabling Wi-Fi functionality. The no radio shutdown disables the Wi-Fi interface. Syntax radio shutdown no radio shutdown Default This command is applicable to Mediant 500 MSBR and Mediant 800/B MSBR.
Mediant MSBR 74.2 Data Services Commands The following describes Data Services commands. 74.2.1 DNS Server The following describes the DNS Server commands. 74.2.1.1 ip dns server This command enables the DNS server on all Layer 3 interfaces. Use the no form of this command to disable the DNS server on all Layer 3 interfaces.
Reference Guide 74. Layer-2 (LAN) Commands 74.2.1.2 ip host This command adds an entry to the IP hostname table for all Layer 3 interfaces. Use the no form of this command to delete an entry from the IP Hostname table for all Layer 3 interfaces. The following are the relevant specifications: ...
Mediant MSBR Default Related Commands ip dns server Command Mode Privileged User Examples: This example adds an entry with name ‘abcd’ and ip address ‘10.44.1.1’ to the IP Hostname table for all Layer 3 interfaces: (config data)# ip host abcd 10.44.1.1 3600 This example (taken from RFC 2782) for adding SRV entry to the DNS server table for all Layer 3 interfaces: (config data)# ip host _foobar._tcp srv 0 1 9 old-slow-...
Reference Guide 74. Layer-2 (LAN) Commands Command Description version number Enables NetFlow version number (5 or 9). a.b.c.d Defines the Netflow IP address. Interface Name Interface Type Interface ID gigabitethernet GigabitEthernet interface slot [SLOT/PORT.VLANID] and port (VLAN ID is optional) cellular Cellular interface ID Tunnel GRE ID...
Mediant MSBR Default Command Mode Privileged User Example This example sets the connections so that they don't time out. (config-data)# ip fastpath unilateral-timeout 0 74.2.1.5 dns-view This command defines a DNS view. Syntax dns-view <view name> Command Description view name Defines the DNS view name.
Reference Guide 74. Layer-2 (LAN) Commands Default Command Mode Privileged User Example This example defines the DNS server to where the queries matching this DNS view are forwarded. (config-data)# dns-view view1 (dns-view-view1)# set server interface 1.10.1.1 74.2.1.7 match source-address This command defines the DNS queries by source address for the DNS view. Syntax # match source address <source IP address of DNS query>...
Mediant MSBR Command Description (static or dynamic). This allows configuration of name servers received dynamically by DHCP or PPP. Default Command Mode Privileged User Example This example defines the interface. (config-data)# dns-view view1 (dns-view-view1)# set server interface gigabitethernet 0/0 74.2.1.9 ip name-server This command defines the DNS relay server’s address on all Layer 3 interfaces.
Reference Guide 74. Layer-2 (LAN) Commands Example This example defines DNS relay servers 10.4.1.1 and 10.4.1.2 for all Layer 3 interfaces: (config data)# ip name-server 10.4.1.1 10.4.1.2 74.2.1.10 ip max-conn This command defines the maximum number of firewall connections per IP address. Syntax ip max-conn <number>...
Mediant MSBR 74.2.2 DHCP Server The following describes DHCP Server commands. 74.2.2.1 ip dhcp-server This command enables the specified address of the DHCP relay server to be used on the specified interface or on all Layer 3 interfaces. It also provides support for the device to act as a DHCP server for Lync-enabled IP phones, by supporting DHCP Options 120 and 43.
Page 555
Reference Guide 74. Layer-2 (LAN) Commands # ip dhcp-server provide-host-name # no ip dhcp-server provide-host-name # ip dhcp-server sip-server <FQDN of SIP server – Option 120) # ip dhcp-server lync-cert-provisioning <Microsoft Lync Server Certificate Provisioning service – Option 43> Command Description ip address Specifies a valid IPv4 address.
Page 556
Mediant MSBR Command Description time offset Specifies the offset of the client's subnet in seconds from Coordinated Universal Time (UTC). A positive offset indicates a location east of the zero meridian and a negative offset indicates a location west of the zero meridian.
Page 557
Reference Guide 74. Layer-2 (LAN) Commands Example This example configures the DHCP relay address of 10.1.2.3 on VLAN 5: # config data (config-data)# ip dhcp-server 10.1.2.3 vlan 5 The following is an example of how to use tr069-acs-server-name parameter. # config data (config-data)# interface vlan 10 (conf-if-VLAN 10)# ip dhcp-server tr069-acs-server-name...
Page 558
Mediant MSBR are also called options. The current set of DHCP options are documented in RFC 2131, Dynamic Host Configuration Protocol. Examples: This example configures DHCP Option 19, which specifies whether the client should configure its IP layer for packet forwarding. A value of “0” means disable IP forwarding; a value of “1”...
Reference Guide 74. Layer-2 (LAN) Commands 74.2.2.3 service dhcp This command enables the DHCP server on the specified interface or on all Layer 3 interfaces. Use the no form of this command to disable DHCP server on a specific interface or on all Layer 3 interfaces.
Mediant MSBR 74.2.3 DHCP Client The following describes DHCP Client commands 74.2.3.1 ip address dhcp This command enables a DHCP client on the specified interface. Use the no form of this command to disable DHCP client functionality. Syntax ip address dhcp no ip address dhcp Default Note...
Reference Guide 74. Layer-2 (LAN) Commands Related Commands ip address dhcp Example This example configures a new vlan interface, enables dhcp and sets vendor class string to “MSBR”. (config-data)# interface vlan 3 (conf-if-VLAN 3)# ip address dhcp (conf-if-VLAN 3)# ip dhcp-client class-id “MSBR” (conf-if-VLAN 3)# no shutdown (conf-if-VLAN 3)# exit 74.2.3.3 ip dhcp-client default-route...
Mediant MSBR (conf-if-VLAN 3)# no shutdown (conf-if-VLAN 3)# exit 74.2.3.4 ip dhcp-source-address This command allows the user to configure the DHCP relay source address. This command is valid only in case of DHCP relay (remote). Syntax ip dhcp-source-address all <ip address> ip dhcp-source-address <interface name>...
Reference Guide 74. Layer-2 (LAN) Commands 74.2.3.5 ip dhcp pool This command assigns a pool on a specified interface and enters the pool configuration. Syntax ip dhcp pool <interface name> <interface ID> Command Description <interface name> Defines interface naming on the interface command. Interface Name Interface Type Interface ID...
Page 564
Mediant MSBR 74.2.3.5.1 boot-file-name This command defines the name of the configuration file that the DHCP client should download from the TFTP server on the specified interface. Syntax boot-file-name <boot file name> no boot-file-name Command Description boot file name Specifies the name of the configuration file that the DHCP client .
Page 565
Reference Guide 74. Layer-2 (LAN) Commands 74.2.3.5.2 domain-name This command defines the domain name that client should use when resolving hostnames via DNS on the specified interface. Syntax domain-name <domain name> no domain-name Command Description domain name Specifies the domain name that client should use when resolving hostnames via DNS.
Page 566
Mediant MSBR 74.2.3.5.3 dns-s rver This command defines the DNS servers for the DHCP pool on the specified interface. Syntax dns-server <ip address> Command Description <ip address> Specifies a valid IPv4 address. IP addresses should be expressed in dotted decimal notation (for example, 10.1.2.3).
Page 567
Reference Guide 74. Layer-2 (LAN) Commands Command Mode Privileged User Example This example enters ip dhcp pool on VLAN 5 and sets the lease time to 5 hours and 15 minutes. (dhcp-conf-VLAN 5)# lease 0 5 15 74.2.3.5.5 netbios-name-server This command defines a NetBIOS Windows Internet Naming Service (WINS) name servers assigned to the DHCP pool on the specified interface.
Page 568
Mediant MSBR 74.2.3.5.6 netbios-node-type This command specifies the NetBIOS (WINS) node type (i.e. 1 = B-node, 2 = P-node, 4 = M- node, 8 = H-node) on the specified interface. Syntax netbios-node-type <wins node type> no netbios-node-type Command Description <wins node type> Specifies the NetBIOS (WINS) node type (i.e.
Page 569
Reference Guide 74. Layer-2 (LAN) Commands Command Description <first ip> First IP address in the range for this pool. Specifies a valid IPv4 address. IP addresses should be expressed in dotted decimal notation (for example, 10.1.2.3). <last ip> Last IP address in the range for this pool. Specifies a valid IPv4 address.
Page 570
Mediant MSBR Command Mode Privileged User Related Commands This command is also available from the interface configuration sub-directory. Examples: This example overrides the router address to 10.1.2.3. (dhcp-conf-VLAN 5)# override-router-address 10.1.2.3 74.2.3.5.9 provide-host-name This command enables the device to provide host name if not specified by client on the specified interface.
Page 571
Reference Guide 74. Layer-2 (LAN) Commands 74.2.3.5.10 tftp-server This command defines a TFTP server assigned to the DHCP pool on the specified interface. Syntax tftp-server <tftp ip address> Command Description tftp ip address Specifies a valid IPv4 address for TFTP server. IP addresses should be expressed in dotted decimal notation (for example, 10.1.2.3).
Page 572
Mediant MSBR Defaults Functional notes Command Mode Privileged User Related Commands This command is also available from the interface configuration sub-directory. See ip dhcp-server on page 554. Example This example sets the TFTP server name. (dhcp-conf-VLAN 5)# tftp-server-name servername This example clears the TFTP server name. (dhcp-conf-VLAN 5)# no tftp-server-name 74.2.3.5.12 time-offset...
Page 573
Reference Guide 74. Layer-2 (LAN) Commands Related Commands This command is also available from the interface configuration sub-directory. See ip dhcp-server on page 554. Example This example sets the offset time to 500 seconds. (dhcp-conf-VLAN 5)# time-offset 500 This example removes this parameter. (dhcp-conf-VLAN 5)# no time-offset Version 7.2 Mediant MSBR...
Mediant MSBR 74.2.3.6 service dhcp This command enables the DHCP server on the interface. Use the no form of this command to disable the DHCP server. Syntax service dhcp no service dhcp Default The DHCP server is disabled. Note This command enables/disables the DHCP server created via the ip dhcp pool and ip dhcp-server commands.
Reference Guide 74. Layer-2 (LAN) Commands Example This example enables VLAN 6. (conf-if-VLAN 6)# no shutdown 74.2.5 mtu This command configures the Maximum Transmission Unit (MTU) on the specified interface. Syntax mtu auto mtu dhcp mtu <mtu value> Command Description auto Sets MTU automatically.
Mediant MSBR Command Description mss value Sets the MSS value. Range is 68 to 1500. Default MSS is set to auto (usually 1500). Command Mode Privileged User Example This example sets the MSS value to 770 bytes on VLAN 6. (config-data)# interface vlan 6 (conf-if-VLAN 6)# mss 770 74.2.6.1 ip tcp adjust-mss...
Mediant MSBR 74.2.8 Switch Port Interface Commands The following describes Switch Port Interface commands. 74.2.8.1 switchport mode This command configures the VLAN Trunking mode. Syntax switchport mode access switchport mode trunk switchport mode transparent Command Description access Sets the port to access mode. trunk Sets the port to trunk mode.
Reference Guide 74. Layer-2 (LAN) Commands Note If the port is in the trunk mode, this command will not alter the switchport mode to ‘Access’. Instead it will save the value to be applied when the port does switch to Access mode. Command Mode Privileged User Related Commands...
Mediant MSBR Related Commands switchport mode Example This example adds VLAN 3 to the VLAN trunk defined for GigabitEthernet 4/2: (conf-if-GE 4/2)# switchport trunk allowed vlan add 3 74.2.8.4 switchport trunk native vlan This command sets the native VLAN to the interface when set to Trunking mode. Syntax switchport trunk native vlan <vlan id>...
Reference Guide 74. Layer-2 (LAN) Commands 74.2.9 network This command allows selecting whether an interface is logically part of the LAN or part of the WAN. QoS and NAPT functions handle traffic routed from LAN interfaces to WAN interfaces; port forwarding rules (static NAPT) work only on WAN interfaces;...
Mediant MSBR 74.2.10 IP Destination Reachability The following describes IP Destination Reachability commands. 74.2.10.1 track This command is used to define a tracking destination to be used by static routes or other configured elements. The configured track is testing the reachability of the defined destination through the defined source interface by sending probe packets to the destination and wait for replies.
Page 583
Reference Guide 74. Layer-2 (LAN) Commands Interface Type (ifname) Interface ID loopback Loopback ID [1-5] Bridge interface [1-255] Default Command Mode Privileged User Related Commands show data track brief, ip route Examples: This example defines Track ID 5 for destination 10.30.4.5 from interface GigabitEthernet 0/0.
Mediant MSBR 74.2.10.2 bfd neighbor This command is used to define a BFD neighbor. To set BFD OSPF timers, see Section 75.2.2.79.3.11 on page 712. Syntax bfd neighbor <neighbor id> <ip address> <interface ID> interval <value> min_rx <value> multiplier <value> [multihop] Command Description neighbor id...
Reference Guide 74. Layer-2 (LAN) Commands 74.2.11 ip reassembly This command defragments received fragmented IP packets from an interface and then reassembles the packets before forwarding them. The Wireshark packet analyzer is typically used to identify fragmented frames. This capability is applied per interface and therefore, the CLI command must be set for the relevant IP interface.
Mediant MSBR 74.2.12 service tcp keepalives This command controls the tcp keepalive functionality of newly created sockets. Syntax service tcp keepalives enable service tcp keepalives interval <interval> service tcp keepalives probe <probe> service tcp keepalives time <time> Command Description enable Enables the TCP keepalive.
Reference Guide 74. Layer-2 (LAN) Commands 74.2.13 ip dns randomization This command supports DNS queries source port and Query ID randomization. The purpose is to prevent DNS spoofing attacks. There are two modes of operation: Forwarding Plan DNS proxy. In Forwarding Plan mode (where an external DNS server on the MSBR’s WAN side is advertised), only the source port will be randomized.
Mediant MSBR 74.3 Port Monitoring Commands Port monitoring allows the user to reflect traffic from each Ethernet LAN port to any other single LAN or microprocessor port. Monitoring of traffic is useful when trying to analyze the traffic or when debugging network problems. The Mediant 800 MSBR allows monitoring of egress traffic, ingress traffic, or both directions.
Reference Guide 74. Layer-2 (LAN) Commands 74.4 Spanning Tree Commands The section below describes Spanning Tree commands. 74.4.1 Spanning Tree General Commands The sub-section below describes Spanning Tree General commands. 74.4.1.1 spanning-tree This command enables / disables the spanning tree in the system. Syntax spanning-tree no spanning-tree...
Mediant MSBR Example This example sets the device priority to 4096. (config data)# spanning-tree priority 4096 74.4.1.3 spanning-tree hello-time This command sets the hello_time spanning-tree parameter of the device. Syntax spanning-tree hello-time <value> Command Description <value> The range is 1-10 seconds. Default 2 seconds Note...
Reference Guide 74. Layer-2 (LAN) Commands (FORWARD_DELAY-1)X2 >= MAX_AGE Command Mode Privileged User Example This example sets the max-age to 10: (config data)# spanning-tree max-age 10 74.4.1.5 spanning-tree forward-delay This command sets the forward-delay spanning-tree parameter of the device. Syntax spanning-tree forward-delay <value>...
Mediant MSBR 74.4.2 Spanning Tree Interface Commands The sub-section below describes Spanning Tree Interface commands. 74.4.2.1 spanning-tree This command enables/disables the spanning tree on a specific interface. Syntax spanning-tree no spanning-tree Default Note Under configure terminal Command Mode Privileged User Examples: To enable the spanning-tree on interface 5/1: (conf-if-FE 5/1)# spanning-tree...
Reference Guide 74. Layer-2 (LAN) Commands Command Mode Privileged User Example This example sets the device priority to 16. (conf-if-FE 5/1)# spanning-tree priority 16 74.4.2.3 spanning-tree cost This command sets the cost of the interface. Syntax spanning-tree cost <value> Command Description <value>...
Mediant MSBR 74.4.2.4 spanning-tree edge This command sets the edge configuration of the interface. Syntax spanning-tree edge auto spanning-tree edge enable spanning-tree edge disable Command Description auto/enable/disable Defines the value as: • auto – auto detect • enable – enable edge •...
Page 595
Reference Guide 74. Layer-2 (LAN) Commands Note Under configure terminal. Command Mode Privileged User Example This example sets the unit point-to-point to auto: (conf-if-FE 5/1)# spanning-tree point-to-point auto Version 7.2 Mediant MSBR...
Mediant MSBR 74.5 LLDP and LLDP-MED Commands The Link Layer Discovery Protocol (LLDP) is a Layer-2 protocol that advertises or discovers neighbors on IEEE 802 local area networks. LLDP for Media Endpoint Devices (LLDP-MED) is an extension to LLDP that functions between endpoint devices and network devices.
Reference Guide 75. Layer-3 Commands Layer-3 Commands 75.1 IPv6 Commands This version provides support for IPv6 (voice and data-routing functionalities) on the MSBR product series. This support is provided only if the Software License Key installed on the device includes the new Feature Key "IPv6" for enabling IPv6. 75.1.1 ipv6 enable This command provides support for enabling IPv6 per data-router interface.
Page 601
Reference Guide 75. Layer-3 Commands Interface Type (ifname) Interface ID pppoe PPPoE interface ID [1-3] pptp PPTP ID [0-99] vlan Vlan ID [1-3999] loopback Loopback ID [1-5] Bridge interface [1-255] Interface Description a.b.c.d Defines the IP address. Note This command is applicable only to data-router functionality. ...
Page 603
Reference Guide 75. Layer-3 Commands Command Description port desc Can be any of the following: • eq - Defines a single port • range - Defines a range of ports • dscp - Match by Differentiated Services Code Point value and mask •...
Mediant MSBR 75.1.3 Acquiring IPv6 Address from DHCPv6 Server 75.1.3.1 ipv6 address dhcp This command provides support for configuring the device as a DHCPv6 client to obtain an IPv6 address from a DHCPv6 server, according to RFC 3315. The device as a DHCPv6 client also supports the Rapid Commit option.
Reference Guide 75. Layer-3 Commands 75.1.4 Acquiring IPv6 Address from Router Advertisement 75.1.4.1 ipv6 address autoconfig This command provides support for automatically acquiring an IPv6 address using stateless auto-configuration on a specified WAN interface. This is instead of using a DHCPv6 server for acquiring an IPv6 address.
Mediant MSBR 75.1.5 IPv6 Router Advertisement Daemon Commands This command provides support for the Router Advertisement Daemon for automatic configuration of IPv6 addresses, according to RFC 4861. The IPv6 Router Advertisement (RA) implements link-local advertisements of IPv6 router addresses and IPv6 routing prefixes, using the Neighbor Discovery Protocol (NDP), as specified in RFC 4861.
Mediant MSBR Example This example sets the advertised “Reachability time" value. (config-data)# interface gigabitethernet 0/0 (conf-if-GE 0/0)# ipv6 nd reachable-time 2000 75.1.5.5 ipv6 nd router-preference This command sets advertised “Router preference” value. The no option sets the value to default (Medium). Syntax # ipv6 nd router-preference {High|Low|Medium (default)} # no ipv6 nd router-preference...
Reference Guide 75. Layer-3 Commands 75.1.5.7 ipv6 nd ra suppress This command suppresses IPv6 Router Advertisements. The no version of this command enables IPv6 Router Advertisements. Syntax ipv6 nd ra suppress no ipv6 nd ra suppress Note This command is applicable only to data-router functionality. Command Mode Privileged User Example...
Mediant MSBR 75.1.5.9 ipv6 nd ra interval This command sets the IPv6 Router Advertisement minimum / maximum interval. Syntax # ipv6 nd ra interval <4-1800 sec> # ipv6 nd ra interval <4-1800 sec> <[3-(0.75*MaxRAInterval) sec]> Note This command is applicable only to data-router functionality. ...
Reference Guide 75. Layer-3 Commands parameters can have the symbolic ‘infinity’ value. Command Mode Privileged User Example This example sets the IPv6 prefix. (config-data)# interface gigabitethernet 0/0 (conf-if-GE 0/0)# ipv6 nd prefix 8/64 10000 50000 on-link autonomous 75.1.5.11 ipv6 nd prefix <X:X::X:X> no-advertise This command saves this prefix, but does not advertise it.
Mediant MSBR Command Mode Privileged User Example: The following example saves the IPv6 prefix but does not advertise it. (config-data)# interface vlan 1 (conf-if-GE 0/0)# ipv6 dhcp-server dns-server 2001::1 75.1.6 interface This command enters the WAN interface that is connected to the WAN. The DHCPv6 client’s default behavior is to set a default route through the interface running the client and connected to DHCPv6 server.
Reference Guide 75. Layer-3 Commands 75.1.7 QoS Commands The QoS Configuration commands include the following: 75.1.7.1 bandwidth (queue) This command sets the maximum bandwidth of a queue. Syntax bandwidth <minimum bandwidth in kbps> bandwidth <minimum bandwidth in kbps> <maximum bandwidth in kbps> bandwidth percent <minimum bandwidth in percent>...
Mediant MSBR Command Description < bandwidth in kbps > Defines the maximum bandwidth of the service-map. unlimited Defines the bandwidth is unlimited. automatic Defines the bandwidth is set automatically. Default Command Mode Privileged User Example This example configures the wan output service map maximum bandwidth to 100000 kbps. (conf-s-map)# bandwidth 100000 75.1.7.3 qos match-map This command enters a specific match-map configuration.
Reference Guide 75. Layer-3 Commands Interface Type (ifname) Interface ID pppoe PPPoE interface ID [1-3] pptp PPTP ID [0-99] vlan Vlan ID [1-3999] loopback Loopback ID [1-5] Bridge interface [1-255] Default Command Mode Privileged User Example This example enters a specific match-map input configuration that will apply to all interfaces. (config data)# qos match-map input sip_incoming This example enters a specific match-map input configuration that will apply only to the vlan 7 interface.
Mediant MSBR # configure data (config-data)# qos match-map input qqq (conf-m-map)# match priority 5 75.1.7.5 match precedence This command defines the precedence to match on the specified match-map. Use the no form of this command to remove a match precedence. Syntax match precedence routine match precedence priority...
Reference Guide 75. Layer-3 Commands 75.1.7.6 match length packet This command defines the packet length to match on the specified match-map. Use the no form of this command to remove a match packet length. Syntax match length packet <min packet length> <max packet length> Command Description min packet length...
Mediant MSBR Examples: This example configures the match-map to match traffic with data length between 40 to 150 bytes. (conf-m-map)# match length data 40 150 75.1.7.8 match dscp This command defines the dscp to match on the specified match-map. Use the no form of this command to remove a match dscp.
Mediant MSBR 75.1.7.10 match access-list This command defines the access-list to match on the specified match-map. Use the no form of this command to remove a match access list. Syntax match access-list <access-list name> Command Description < access-list > Defines the name of the access-list this match-map should match.
Mediant MSBR Command Mode Privileged User Example This example does not adjust 802.1p priority bits per the DSCP values. (config-data)# qos priority-retain 75.1.7.14 set precedence This command defines the precedence to set on the specified match-map. Use the no form of this command to remove a set precedence.
Reference Guide 75. Layer-3 Commands # configure data (config-data)# qos match-map input mmap2 (conf-m-map)# set precedence flash 75.1.7.15 set dscp This command defines the dscp to set on the specified match-map. Use the no form of this command to remove a set dscp. Syntax set dscp ef set dscp default...
Reference Guide 75. Layer-3 Commands Command Mode Privileged User Example This example configures the match-map priority value to 5. # configure data (config-data)# qos match-map input mmap3 (conf-m-map)# set priority 5 75.1.7.17 This command defines the policy of the specified queue. Syntax policy fairness policy fifo...
Mediant MSBR Syntax priority <priority value> Command Description priority value Defines the priority value in the range of 0 to 7. Default Note This command is applicable only to data-router functionality. Command Mode Privileged User Example This example configures the wan output service map priority to 4. (conf-s-map-q)# priority 4 75.1.7.19 queue...
Reference Guide 75. Layer-3 Commands (conf-s-map)# queue sip_wan_outgoing This example enters a lan output service map default queue configuration menu. (conf-s-map)# queue default 75.1.7.20 priority This command provides support for scenarios where the device is used as a bridging device (Layer 2) and IEEE 802.1p priority marking for the bridged traffic is required.
Mediant MSBR 75.2 Data Routing Commands Each routing protocol is available only if it is included in the Feature key supplied with the system. Border Gateway Protocol (BGP) is the main routing protocol of the Internet. It is used to distribute routing information among Autonomous Systems.
Reference Guide 75. Layer-3 Commands Interface Type (ifname) Interface ID gigabitethernet GigabitEthernet interface slot [SLOT/PORT.VLANID] and port (VLAN ID is optional) cellular Cellular interface ID Tunnel GRE ID [1-255] ipip Tunnel IPIP ID [1-255] l2tp L2TP ID [0-99] pppoe PPPoE interface ID [1-3] pptp PPTP ID...
Page 630
Mediant MSBR Command Description MSBR in single network mode can also be set with local- voip to define the route source address to all VoIP packets generated locally by the MSBR IP source prefix Defines the ip destination prefix (a.b.c.d/p) next-hop Defines the next hop for routing metric value...
Mediant MSBR Command Mode Privileged User Example This example enables l2tp port-triggering: (config-data)# ip port-triggering l2tp 75.2.1.5 ip port-map This command enables Application-Level Gateway (ALG) configuration commands. Syntax ip port-map sip disable ip port-map sip <start_dest_port> [end_dest_port] ip port-map rtsp disable ip port-map rtsp <start_dest_port>...
Page 633
Reference Guide 75. Layer-3 Commands Command Mode Privileged User Example The following is an example of how this command is used: (config-data)# ip port-map sip 1000 1200 Version 7.2 Mediant MSBR...
Reference Guide 75. Layer-3 Commands Command Description line Defines regular expression to match the BGP as-path. Default Command Mode Privileged User Example This example defines a new as-path access list. (config data) # ip as-path access-list acc_list1 permit line 1 75.2.2.3 ip community-list This command adds a community list entry.
Mediant MSBR Command Mode Privileged User Example This example adds a community list entry. (config data) # ip community-list standard comm1 permit 75.2.2.4 ip extcommunity-list standard This command defines a new standard extcommunity-list. Syntax ip extcommunity-list standard name {permit|deny} [AA:NN][AA:NN] [AA:NN][AA:NN] no ip extcommunity-list name no ip extcommunity-list standard name...
Page 637
Reference Guide 75. Layer-3 Commands ip extcommunity-list vrf <VRF name> standard <extended list name> {permit|deny} [AA:NN][AA:NN][AA:NN][AA:NN] ip extcommunity-list vrf <VRF name> <expanded list number> {permit|deny} [line] ip extcommunity-list vrf <VRF name> expanded <extended list name> {permit|deny} [line] no ip extcommunity-list <VRF name> <standard list number> {permit|deny} [AA:NN] no ip extcommunity-list <VRF name>...
Mediant MSBR Example This example defines a new standard extcommunity-list. (config data) ip extcommunity-list vrf VRF_list1 18 permit 2 75.2.2.6 ip extcommunity-list expanded This command defines a new expanded extcommunity-list. Syntax ip extcommunity-list expanded name {permit|deny} line ip extcommunity-list number-range-1 {permit|deny} line ip extcommunity-list number-range-2 {permit|deny} line ip extcommunity-list number-range-1 {permit|deny} [AA:NN][AA:NN] [AA:NN][AA:NN]...
Page 639
Reference Guide 75. Layer-3 Commands Syntax Sets static RP address for router, should be configured on all related PIM routers. ip pim rp-address <ip> group <Multicast group prefix> Sets router to be a candidate RP, chosen by priority. Sets router to be a candidate RP, Advertising Interval in seconds. When the interface is used, the RP candidate will be set to interface IP.
Mediant MSBR 75.2.2.8 ip prefix-list This command configures the IPv4 prefix-based filtering mechanism. Syntax ip prefix-list <prefix list name> {permit|deny} [a.b.c.d/m|any] ip prefix-list <prefix list name> description ip prefix-list <prefix list name> seq <seqnumber> [permit|deny] [a.b.c.d/m|any] ip prefix-list <prefix list name> [vrf <VRF name>] [seq <prefix- list seq number>] {permit|deny}<prefix to filter>...
Mediant MSBR Command Description deny Specifies the packets to reject. permit Specifies the packets to accept. le <len> The prefix list is applied if the prefix length is less than or equal to the le prefix length. Not used if "prefix to filter" is set to "any".
Reference Guide 75. Layer-3 Commands 75.2.2.11 router-id This command specifies the router ID (as an IP address) Syntax router-id <a.b.c.d> [vrf <vrf name>] no ip router-id Command Description a.b.c.d Defines the local IP address VRF name Defines the vrf name (up to 64 bytes). Default Command Mode Privileged User...
Mediant MSBR Command Description x:x::x:x/m Defines an IPv6 aggregate address. as-set Resulting routes include As Set. summary-only Defines aggregated routes are not announced. Default Command Mode Privileged User Example This example specifies an aggregate address. # configure data (config-data)# router bgp 1 (conf-router)# aggregate-address 10.21.3.150 255.255.0.0 75.2.2.13 redistribute kernel...
Mediant MSBR # configure data (config-data)# router bgp 2 (conf-router)# bgp router-id 10.13.12.2 75.2.2.16 bgp log-neighbor-changes This command logs BGP neighbor status changes (up or down) and resets for troubleshooting network connectivity problems. Syntax bgp log-neighbor-changes Default Command Mode Privileged User Example This example logs BGP neighbor status changes.
Reference Guide 75. Layer-3 Commands (conf-router)# bgp graceful-restart 75.2.2.18 bgp fast-external-failover This command immediately resets a session if a link to a directly connected external peer goes down. Syntax bgp fast-external-failover Default Command Mode Privileged User Example This example resets a session if a link to a directly connected external peer goes down. # configure data (config-data)# router bgp 2 (conf-router)# bgp fast-external-failover...
Mediant MSBR 75.2.2.20 bgp deterministic-med This command selects the best Multi_Exit_Disc (MED) path from paths advertised from the neighboring AS. Syntax bgp deterministic-med Default Command Mode Privileged User Example This example is an example of how this command is used. # configure data (config-data)# router bgp 2 (conf-router)# bgp deterministic-med...
Reference Guide 75. Layer-3 Commands 75.2.2.22 bgp dampening This command enables route-flap dampening. Flapping routes trigger instability in the routing table. Routers running BGP have a mechanism designed to reduce the destabilizing effect of flapping routes. Syntax bgp dampening bgp dampening <half life time> bgp dampening [<half life time>] <re-use limit>...
Mediant MSBR 75.2.2.23 bgp confederation peers This command splits an autonomous system into smaller autonomous systems or combines several autonomous systems into one. Syntax bgp confederation peers <AS number> bgp confederation peers <AS number> [<AS number>] [<AS number>][<AS number>] Command Description AS number Defines the Autonomous System numbers for BGP peers that...
Reference Guide 75. Layer-3 Commands Example This example specifies confederation 200 belongs to autonomous system 18. # configure data (config-data)# router bgp 200 (conf-router)# bgp confederation identifier 18 75.2.2.25 bgp router-id This command specifies the router-ID. Syntax bgp router-id a.b.c.d no bgp router-id Command Description...
Mediant MSBR Default Router identifier value is selected as the largest IP address of the interfaces. Command Mode Privileged User Example This example sets the Cluster ID. (config-data)# router bgp 1 (conf-router)# bgp cluster-id 10.13.22.130 75.2.2.27 bgp client-to-client reflection This command configures client-to-client route reflection. Syntax bgp client-to-client reflection Default...
Mediant MSBR Example The following is an example of how to use the command. (config data) # bgp med confed missing-as-worst 75.2.2.31 bgp bestpath med missing-as-worst This command treats the missing Multi Exit Discriminator (MED) attribute in a path as having a value of infinity and as the least preferred one.
Reference Guide 75. Layer-3 Commands 75.2.2.33 distance This command defines an administrative distance. Syntax distance <admin distance> <a.b.c.d/M> Command Description admin distance Defines the Administrative Distance [1-255]. a.b.c.d/M Defines the IP source prefix. Default Command Mode Privileged User Example This example sets the Administrative Distance to 90. (config data) # distance 90 75.2.2.34 distance bgp...
Mediant MSBR Example The following is an example of how to use this command. (config data) # distance bgp 200 200 100 75.2.2.35 redistribute static This command redistributes the static route to the BGP process. Syntax redistribute static Default Command Mode Privileged User Example This example redistributes the static route to the BGP process.
Mediant MSBR Command Mode Privileged User Note In all neighbor commands, the neighbor ip-address/word maybe described as peer. Example In This example, the router in AS-1, is trying to peer with AS-2 at 10.0.0.1. (config-data)# router bgp 1 (conf-router)# neighbor 10.0.0.1 remote-as 2 75.2.2.39 neighbor shutdown This command shuts down the peer.
Reference Guide 75. Layer-3 Commands 75.2.2.40 neighbor enforce-multihop This command enforces BGP neighbors to perform a multihop. Syntax neighbor {<neighbor tag>|a.b.c.d|x:x::x:x} enforce-multihop neighbor string enforce-multihop Command Description a.b.c.d|X:X::X:X Defines the IP address of the neighbor (IPv4 or IPv6). neighbor tag Defines the neighbor tag.
Mediant MSBR Example The following is an example of how to use this command. (config-data)# router bgp 1 (conf-router)# neighbor 10.21.5.120 dont-capability-negotiate 75.2.2.42 neighbor disable-connected-check This command enables one-hop away EBGP peer using a loopback address. Syntax neighbor {<neighbor tag>|a.b.c.d|X:X::X:X} disable-connected- check Command...
Reference Guide 75. Layer-3 Commands Command Mode Privileged User Example This example allows an ebgp neighbor. (config-data)# router bgp 1 (conf-router)# neighbor 10.21.5.120 ebgp-multihop 75.2.2.44 neighbor description This command sets the description of the peer. Syntax neighbor {<neighbor tag>|a.b.c.d|X:X::X:X} description line Command Description a.b.c.d|X:X::X:X...
Mediant MSBR Command Description neighbor tag Defines the neighbor tag. version Defines the version. It can be either 4 or 4-. BGP version 4- is similar but the neighbor speaks the old Internet-Draft revision 00’s Multiprotocol Extensions for BGP-4. Default Command Mode Privileged User Example...
Reference Guide 75. Layer-3 Commands (conf-router)# neighbor 10.5.20.100 interface vlan 4 75.2.2.47 neighbor next-hop-self This command specifies an announced route’s next hop as being equivalent to the address of the bgp router. Syntax neighbor {<neighbor tag>|a.b.c.d|X:X::X:X} next-hop-self no neighbor peer next-hop-self Command Description a.b.c.d|X:X::X:X...
Mediant MSBR Interface Type (ifname) Interface ID cellular Cellular interface ID Tunnel GRE ID [1-255] ipip Tunnel IPIP ID [1-255] l2tp L2TP ID [0-99] pppoe PPPoE interface ID [1-3] pptp PPTP ID [0-99] vlan Vlan ID [1-3999] loopback Loopback ID [1-5] Bridge interface [1-255]...
Reference Guide 75. Layer-3 Commands Command Mode Privileged User Example This is an example of how this command can be used. (config-data)# router bgp 1 (conf-router)# neighbor 10.14.3.118 unsuppress-map gmap 75.2.2.50 neighbor transparent-nexthop This command is used to keep the nexthop value of the route, even if the peer is an external BGP peer.
Mediant MSBR Command Description neighbor tag Defines the neighbor tag. Default Command Mode Privileged User Example This is an example of how this command can be used. (config-data)# router bgp 1 (conf-router)# neighbor 10.14.3.11 transparent-as 75.2.2.52 neighbor timers This command sets the timers for a specific BGP neighbor. Keepalive messages are sent by a router to inform another router that the BGP connection between the two is still active.
Mediant MSBR Command Mode Privileged User Example This example announces default routes to the peer. (config-data)# router bgp 1 (conf-router)# neighbor 10.14.3.118 default-originate 75.2.2.55 neighbor capability route-refresh This command advertises the route-refresh capability to this neighbor Syntax neighbor {<neighbor tag>|a.b.c.d|X:X::X:X} capability route- refresh|dynamic neighbor {<neighbor tag>|a.b.c.d|X:X::X:X} capability orf prefix- list {both|receive|send}...
Reference Guide 75. Layer-3 Commands 75.2.2.56 neighbor port This command defines the neighbor’s BGP port. Syntax neighbor {<neighbor tag>|a.b.c.d|X:X::X:X} port <port number> no neighbor a.b.c.d port <port number> Command Description a.b.c.d|X:X::X:X Defines the IP address of the neighbor (IPv4 or IPv6). neighbor tag Defines the neighbor tag.
Mediant MSBR Default Command Mode Privileged User Example This example sends the community attribute to this neighbor. (config-data)# router bgp 1 (conf-router)# neighbor 10.15.3.111 send-community 75.2.2.58 neighbor route-server-client This command configures a neighbor as a Route Server client. Syntax neighbor {<neighbor tag>|a.b.c.d|X:X::X:X} route-server-client Command Description a.b.c.d|X:X::X:X...
Reference Guide 75. Layer-3 Commands Command Description neighbor tag Defines the neighbor tag. Default Command Mode Privileged User Example This example configures a neighbor as a Route Reflector client. (config-data)# router bgp 1 (conf-router)# neighbor 10.15.3.111 route-reflector-client 75.2.2.60 neighbor remove-private-AS This command removes the private AS number from outbound updates.
Mediant MSBR Syntax neighbor {<neighbor tag>|a.b.c.d|X:X::X:X} weight weight neighbor peer {<neighbor tag>|a.b.c.d|X:X::X:X} weight weight Command Description a.b.c.d|X:X::X:X Defines the IP address of the neighbor (IPv4 or IPv6). neighbor tag Defines the neighbor tag. weight Defines the weight value in the range of 0 – 65535. Default Command Mode Privileged User...
Reference Guide 75. Layer-3 Commands (conf-router)# neighbor 10.15.5.110 passive 75.2.2.63 neighbor password This command sets the password for the secured BGP session. Syntax neighbor {<neighbor tag> | a.b.c.d | X:X::X:X} [password String] Command Description a.b.c.d | X:X::X:X Defines the IP address of the neighbor (IPv4 or IPv6). neighbor tag Defines the neighbor tag.
Mediant MSBR Command Mode Privileged User Example This example enables the override capability negotiation result. (config-data)# router bgp 1 (conf-router)# neighbor 10.15.5.110 override-capability 75.2.2.65 neighbor maximum-prefix This command specifies a maximum number of prefixes accepted from this peer. Syntax neighbor {<neighbor tag>|a.b.c.d|X:X::X:X} <prefix limit> [<threshold>] [restart <restart interval>|warning-only] Command Description...
Reference Guide 75. Layer-3 Commands Syntax neighbor {<neighbor tag>|a.b.c.d|X:X::X:X} route-map name {in|out|export|import} Command Description a.b.c.d|X:X::X:X Defines the IP address of the neighbor (IPv4 or IPv6). neighbor tag Defines the neighbor tag. name Defines the name of the route-map. Applies a map to incoming routes. Applies a map to outbound routes.
Mediant MSBR Default Command Mode Privileged User Example This example joins a specific peer to group1. (config-data)# router bgp 1 (conf-router)# neighbor 10.12.5.101 peer-group group1 75.2.2.68 neighbor local-as This command specifies a local Autonomous System number. Syntax neighbor {<neighbor tag>|a.b.c.d|X:X::X:X} local-as <AS number> [no-prepend] Command Description...
Page 677
Reference Guide 75. Layer-3 Commands Syntax neighbor {<neighbor tag>|a.b.c.d|X:X::X:X} interface <if name> <interface ID> Command Description a.b.c.d|X:X::X:X Defines the IP address of the neighbor (IPv4 or IPv6). neighbor tag Defines the neighbor tag. Interface Type (ifname) Interface ID gigabitethernet GigabitEthernet interface slot [SLOT/PORT.VLANID] and port (VLAN ID is optional) cellular...
Reference Guide 75. Layer-3 Commands Command Description neighbor tag Defines the neighbor tag. as-path Defines the AS-path attribute. next-hop Defines the Next Hop attribute. Defines the Med attribute. Default Command Mode Privileged User Example The following is an example of how to use this command. (config-data)# router bgp 1 (conf-router)# neighbor 15.13.4.15 attribute-unchanged 75.2.2.72...
Mediant MSBR (conf-router)# neighbor 15.13.4.15 allowas-in 5 75.2.2.73 neighbor advertisement-interval This command defines the minimum interval between sending BGP routing updates. Syntax neighbor {<neighbor tag>|a.b.c.d|X:X::X:X} advertisement-interval <time> Command Description a.b.c.d|X:X::X:X Defines the IP address of the neighbor (IPv4 or IPv6). neighbor tag Defines the neighbor tag.
Reference Guide 75. Layer-3 Commands Command Mode Privileged User Example The following is an example of how to use this command. (config-data)# router bgp 1 (conf-router)# neighbor 15.13.4.15 activate 75.2.2.75 neighbor prefix-list name This command specifies a prefix-list for the peer. Syntax neighbor {<neighbor tag>|a.b.c.d|X:X::X:X} prefix-list name {in|out}...
Mediant MSBR Command Description a.b.c.d|X:X::X:X Defines the IP address of the neighbor (IPv4 or IPv6). neighbor tag Defines the neighbor tag. Filters incoming updates. Filters outgoing updates. name Defines the as-path access list name. Default Command Mode Privileged User Example This example establishes BGP filters.
Page 683
Reference Guide 75. Layer-3 Commands Command Mode Privileged User Example The following is an example of how to use this command. (config-data)# router bgp 1 (conf-router)# network 15.13.4.15 backdoor Version 7.2 Mediant MSBR...
Mediant MSBR 75.2.2.78 BGP Protocol The following commands relate to BGP Protocol. 75.2.2.78.1 Route Map Configuration BGP Route Map Configuration includes the following commands: 75.2.2.78.1.1 route-map This command configures the order entry in route map name with a match policy of "permit" or "deny".
Page 685
Reference Guide 75. Layer-3 Commands Default Command Mode Privileged User Example This example configures the static route-map. (config-data)# route-map-static srmap 75.2.2.78.1.3 match as-path This command defines the AS path access-list name. Syntax match as-path word Command Description word Defines the as-path access-list name. Default Command Mode Privileged User...
Page 686
Mediant MSBR Default Command Mode Privileged User Example This example sets the as-path prepend string for the BGP as-path attribute. (config-data)# route-map qqq permit 1 (conf-route-map)# set as-path prepend 1 Reference Guide Document #: LTRT-17939...
Reference Guide 75. Layer-3 Commands 75.2.2.79 OSPFv2 Protocol The following describes OSPF Version 2 protocol commands. 75.2.2.79.1 General Configuration OSPF Version 2 is a routing protocol which is described in RFC 2328. OSPF is an IGP (Interior Gateway Protocol). Compared with RIP, OSPF can provide scalable network support and faster convergence times.
Page 688
Mediant MSBR Command Description a.b.c.d Defines the Router-ID in IP address format. Default Command Mode Privileged User Example This example sets router-ID of the OSPF process. (config-data)# router ospf (conf-router)# ospf router-id 10.24.5.100 75.2.2.79.2.2 ospf abr-type This command sets the ospf abr-type. Syntax ospf abr-type type no ospf abr-type type...
Page 689
Reference Guide 75. Layer-3 Commands 75.2.2.79.2.3 ospf rfc1583compatibility This command enables the rfc1583compatibility flag. Syntax ospf rfc1583compatibility no ospf rfc1583compatibility Default Command Mode Privileged User Example This example enables the rfc1583compatibility flag. (config-data)# router ospf (conf-router)# ospf rfc1583compatibility 75.2.2.79.2.4 log-adjacency-changes This command configures OSPF to log changes in adjacency.
Page 690
Mediant MSBR 75.2.2.79.2.5 passive-interface This command suppresses routing updates on an interface. Syntax passive-interface GigabitEthernet <slot/port[.vlanID]> passive-interface GigabitEthernet <slot/port> passive-interface vlan <vlanID> no passive-interface interface Interface Type (ifname) Interface ID gigabitethernet GigabitEthernet interface slot [SLOT/PORT.VLANID] and port (VLAN ID is optional) cellular Cellular interface ID Tunnel GRE ID...
Page 691
Reference Guide 75. Layer-3 Commands 75.2.2.79.2.6 timers throt le spf This command sets the initial delay, the initial-holdtime and the maximum-holdtime between when SPF is calculated and the event which triggered the calculation. Syntax timers throttle spf delay initial-holdtime max-holdtime no timers throttle spf Command Description...
Page 692
Mediant MSBR Command Description number Defines the time (seconds) in the range of 5 – 86400. Default Command Mode Privileged User Example This example sets the time (seconds) to advertise self as stub-router. (config-data) router ospf (conf-router) # max-metric router-lsa administrative 75.2.2.79.2.8 auto-cost reference-bandwidth This command sets the reference bandwidth for cost calculations, where this bandwidth is considered equivalent to an OSPF cost of 1, specified in Mbits/s.
Page 693
Reference Guide 75. Layer-3 Commands 75.2.2.79.2.9 network This command specifies the OSPF enabled interface(s). If the interface has an address from range 192.168.1.0/24 then the command below enables ospf on this interface so the router can provide network information to the other ospf routers via this interface. Syntax network a.b.c.d/m area a.b.c.d network a.b.c.d/m area number...
Page 694
Mediant MSBR Command Description a.b.c.d Defines the OSPF area in IP address format. number Defines the OSPF area ID as a decimal value in the range of 0 – 4294967295. range Summarizes routes matching address/mask (border routers only). a.b.c.d/M Defines the area range prefix. Default Command Mode Privileged User...
Page 695
Reference Guide 75. Layer-3 Commands Example This example filters intra area paths and is not advertised into other areas. (config-data)# router ospf (conf-router)# area ip-address 10.21.5.100 range 10.0.0.0/8 not- advertise 75.2.2.79.2.12 area ip-address|number range a.b.c.d/m substitute a.b.c.d/M This command substitutes a summarized prefix with another prefix. Syntax area ip-address a.b.c.d range a.b.c.d/m substitute a.b.c.d/m area number number range a.b.c.d/m substitute a.b.c.d/m...
Page 696
Mediant MSBR 75.2.2.79.2.13 area ip-address|number shortcut This command configures the area as Shortcut capable. Syntax area ip-address a.b.c.d shortcut {default|enable|disable} area number <number> shortcut no area ip-address a.b.c.d shortcut no area number <number> shortcut Command Description a.b.c.d Defines the OSPF area in IP address format. number Defines the OSPF area ID as a decimal value in the range of 0 –...
Page 697
Reference Guide 75. Layer-3 Commands Default Command Mode Privileged User Example This example configures the area to be a stub area. (config-data)# router ospf (conf-router)# area number 1000 stub 75.2.2.79.2.15 area ip-address|number stub no-summary This command prevents an OSPFD ABR from injecting inter-area summaries into the specified stub area.
Page 698
Mediant MSBR 75.2.2.79.2.16 area ip-address|number default-cost This command sets the cost of default-summary LSAs announced to stubby areas. Syntax area ip-address <a.b.c.d> default-cost <0-16777215> area number number default-cost <0-16777215> no area ip-address <a.b.c.d> default-cost <0-16777215> Command Description a.b.c.d Defines the OSPF area in IP address format. number Defines the OSPF area ID as a decimal value in the range of 0 –...
Page 699
Reference Guide 75. Layer-3 Commands Command Description NAME Defines the IP prefix list name. Filters networks – sent out to this area Filters networks – sent out from this area Default Command Mode Privileged User Example This example filters Type-3 summary-LSAs to/from area using prefix lists. (config-data)# router ospf (conf-router)# area number 1000 filter-list prefix NAME in 75.2.2.79.2.18 area ip-address|number authentication...
Page 700
Mediant MSBR (conf-router)# area number 1000 authentication 75.2.2.79.2.19 area ip-address|number authentication message-digest This command specifies that OSPF packets must be authenticated with MD5 HMACs within the given area. Syntax area ip-address <a.b.c.d> authentication message-digest area number number authentication message-digest Command Description a.b.c.d Defines the OSPF area in IP address format.
Page 701
Reference Guide 75. Layer-3 Commands Command Description Sets the OSPF exterior type - 1- metric, 2-metrics word Describes the pointer to route-map entries Default Command Mode Privileged User Example This example redistributes routes of the specified protocol or kind into OSPF. (config-data)# router ospf (conf-router)# redistribute kernel 75.2.2.79.2.21 redistribute rip...
Page 702
Mediant MSBR 75.2.2.79.2.22 redistribute connected This command redistributes routes of the specified protocol or kind into OSPF. Syntax redistribute connected redistribute connected route-map redistribute connected metric-type {1|2} redistribute connected metric-type {1|2} route-map word redistribute connected metric <0-16777214> redistribute connected metric-type {1|2} metric <0-16777214> metric <0-16777214>...
Page 703
Reference Guide 75. Layer-3 Commands Command Description metric Defines the metric for redistributed routes. Metric-type Defines the OSPF exterior metric type for registered routes. Sets the OSPF exterior type - 1- metric, 2-metrics. word Describes the pointer to route-map entries. Default Command Mode Privileged User...
Page 704
Mediant MSBR Command Mode Privileged User Example This example redistributes routes of the specified protocol or kind into OSPF. (config-data)# router ospf (conf-router)# redistribute bgp 75.2.2.79.2.25 timers bgp This command adjusts the BGP routing timers. Syntax timers bgp <keepalive interval> <hold time> Command Description keepalive interval...
Page 705
Reference Guide 75. Layer-3 Commands default-information originate always metric <0-16777214> metric- type {1|2}route-map word no default-information originate Command Description always Sets always advertise default route. Default Command Mode Privileged User Example This command distributes a default route. (config-data)# router ospf (conf-router) # default-information originate 75.2.2.79.2.27 default-metric This command sets the metric of redistributed routes.
Page 706
Mediant MSBR 75.2.2.79.2.28 distance This command defines an OSPF administrative distance. Syntax distance <1-255> no distance <1-255> distance ospf {intra-area|inter-area|external} <1-255> no distance ospf Command Description <1-255> Defines the administrative distance. Default Command Mode Privileged User Example This example defines an OSPF administrative distance of 100. (config-data)# router ospf (conf-router)# distance 100 75.2.2.79.3...
Page 707
Reference Guide 75. Layer-3 Commands Command Mode Privileged User Example This example sets the OSPF authentication key to a simple password. (config-data)# interface vlan1 (conf-if-VLAN 1)# ip ospf authentication-key passx 75.2.2.79.3.2 ip ospf authentication message-digest This command specifies that MD5 HMAC authentication must be used on this interface. Syntax ip ospf authentication message-digest [a.b.c.d] Arguments...
Page 708
Mediant MSBR Default Command Mode Privileged User Example This example sets the OSPF authentication key to a cryptographic password. (config-data)# interface vlan1 (conf-if-VLAN 1)# ip ospf message-digest-key 100 md5 ABCD1234 75.2.2.79.3.4 ip ospf cost This command sets the link cost for the specified interface. Syntax ip ospf cost number [a.b.c.d] no ip ospf cost <cost>...
Page 709
Reference Guide 75. Layer-3 Commands Command Description number Defines the seconds in the range of 1- 65535. <2-20> Defines the number of hellos to send each second. a.b.c.d Address of the interface. Default Command Mode Privileged User Example This example sets the number of seconds for RouterDeadInterval timer value to 1000. (config-data)# interface vlan1 (conf-if-VLAN 1)# ip ospf dead-interval 1000 75.2.2.79.3.6 ip ospf hello-interval...
Page 710
Mediant MSBR 75.2.2.79.3.7 ip ospf network This command explicitly sets the network type for the specified interface. Syntax ip ospf network {broadcast|non-broadcast|point-to-multipoint |point-to-point} no ip ospf network Command Description broadcast Specifies the OSPF broadcast multi-access network. non-broadcast Specifies the OSPF NMBA network. point-to-multipoint Specifies the OSPF point-to-multipoint network.
Page 711
Reference Guide 75. Layer-3 Commands Command Mode Privileged User Example This example sets the RouterPriority integer value to 100. (config-data)# interface vlan1 (conf-if-VLAN 1)# ip ospf priority 100 75.2.2.79.3.9 ip ospf retransmit-interval This command sets the number of seconds for RxmtInterval timer value. This value is used when retransmitting Database Description and Link State Request packets.
Page 712
Mediant MSBR Command Description number Defines number of seconds for the InfTransDelay value in the range of <1-65535>. a.b.c.d Address of the interface Default 1 second Command Mode Privileged User Example This example sets the number of seconds for InfTransDelay value to 1000. (config-data)# interface vlan1 (conf-if-VLAN 1)# ip ospf transmit-delay 1000 75.2.2.79.3.11 ip ospf bfd...
Reference Guide 75. Layer-3 Commands 75.2.2.80 OSPF6 Protocol OSPF protocol for IPv6 The following describes commands. 75.2.2.80.1 router ospf6 This command enables or disables the OSPF6 process. Syntax router ospf6 [vrf <VRF name>] no router ospf Command Description VRF name Defines the VRF name.
Page 714
Mediant MSBR Command Description The IPv6 prefix list is applied to IPv6 prefixes advertised out of the relevant area to other areas. advertise Set the address range status to “advertise” and generates a Type 3 summary link-state advertisement (LSA). (Optional) not-advertise Set the address range status to “DoNotAdvertise”.
Page 715
Reference Guide 75. Layer-3 Commands Default Command Mode Privileged User Example This example selects an interface to configure. # configure data (config-data)# router ospf6 (conf-router)# interface gre 1 area 10.21.5.100 75.2.2.80.4 redistribute This command redistributes routes of the specified protocol or kind into OSPF6. Syntax redistribute {bgp|connected|kernel|ripng|static} [route-map <route-map name>]...
Mediant MSBR 75.2.2.81 Routing Information Protocol (RIP) The following commands relate to Routing Information Protocol. 75.2.2.81.1 General Configuration RIP General Configuration includes the following commands: 75.2.2.81.1.1 router rip This command enables IPv4 RIP. Syntax router rip [vrf <VRF name>] no router rip Command Description VRF name...
Page 717
Reference Guide 75. Layer-3 Commands Command Mode Privileged User Example This example enables RIPng configuration mode. (config-data)# router ripng 75.2.2.81.1.3 passive-interface This command sets the specified interface to passive mode. On passive mode interfaces, all receiving packets are processed as normal and ripd does not send either multicast or unicast RIP packets except to RIP neighbors specified with the neighbor command.
Page 718
Mediant MSBR (conf-router)# passive-interface vlan 2 75.2.2.81.1.4 ip split-horizon This command controls the split-horizon on the interface. A Split horizon is a way of preventing a routing loop in a network. Information about the routing for a specific packet is never sent back in the direction from which it was received.
Page 719
Reference Guide 75. Layer-3 Commands Command Mode Privileged User Example This example sets the RIP enable interface by network. (conf-router)# network network 10.4.4.10/16 75.2.2.81.2.2 network ifname This command sets a RIP enabled interface by ifname. Both the sending and receiving of RIP packets will be enabled on the port specified in the network ifname command.
Page 720
Mediant MSBR 75.2.2.81.2.3 neighbor a.b.c.d This command is used to specify neighbors when a neighbor can’t process multicast. In some cases, not all routers are able to understand multicasting, where packets are sent to a network or a group of addresses. In a situation where a neighbor cannot process multicast packets, it is necessary to establish a direct link between routers.
Page 721
Reference Guide 75. Layer-3 Commands Example This example sets RIP Version 2. (conf-router) # version 2 75.2.2.81.2.5 redistribute kernel This command redistributes routing information from kernel route entries into the RIP tables. The no redistribute kernel disables the routes. Syntax redistribute kernel redistribute kernel metric <0-16>...
Page 722
Mediant MSBR Command Description metric Defines the metric value (0 - 4294967295). route-map Defines the pointer to route-map entries. Default Command Mode Privileged User Example This example redistributes routing information from static route entries. # configure data (config-data)# router ospf (conf-router) # redistribute static 75.2.2.81.2.7 redistribute connected This command redistributes connected routes into the RIP tables.
Page 723
Reference Guide 75. Layer-3 Commands 75.2.2.81.2.8 redistribute ospf This command redistributes routing information from ospf route entries into the RIP tables. no redistribute ospf disables the routes. Syntax redistribute ospf redistribute ospf metric <default metric> redistribute ospf route-map [route-map] no redistribute ospf Command Description metric...
Page 724
Mediant MSBR Command Mode Privileged User Example This example redistributes bgp routes into the RIP tables. (conf-router) # redistribute bgp 75.2.2.81.2.10 default-information originate This command distributes a default route. Syntax default-information originate Default Command Mode Privileged User Example This example distributes a default route. (conf-router)# default-information originate 75.2.2.81.2.11 distribute-list prefix This command filters the RIP path and can apply access-lists to a chosen interface.
Page 725
Reference Guide 75. Layer-3 Commands Interface Type (ifname) Interface ID pptp PPTP ID [0-99] vlan Vlan ID [1-3999] loopback Loopback ID [1-5] Bridge interface [1-255] Default Command Mode Privileged User Example This example filters the RIP path for input packets of vlan 1. (conf-router)# distribute-list prefix prefix1 in vlan 1 75.2.2.81.2.12 distance This command sets the default RIP distance to a specified value.
Page 726
Mediant MSBR Syntax timers basic [5-2147483647] no timers basic Command Description 5-2147483647 Defines the Routing Table update timer value in seconds. Default The default Routing table update timer value in seconds is 30. Command Mode Privileged User Example This example updates the timer value to 50 seconds. (conf-router)# timers basic 50 75.2.2.81.3 RIP –...
Page 727
Reference Guide 75. Layer-3 Commands Syntax ip rip send version version Command Description version Defines the RIP version number – “1” or “2”. Default Send packets according to the global version (Version 2). Command Mode Privileged User Example This example sets RIP Version 2 to send packets with. (conf-if-VLAN 1)# ip rip send version 2 75.2.2.81.3.3 ip rip receive version version This command overrides the global RIP version setting and selects which version of RIP...
Page 728
Mediant MSBR Syntax ip rip authentication mode md5 no ip rip authentication mode md5 Default Command Mode Privileged User Example This example sets the interface with RIPv2 MD5 authentication. (conf-if-VLAN 1)# ip rip authentication mode md5 75.2.2.81.3.5 ip rip authentication mode text This command sets the interface with RIPv2 simple password authentication.
Page 729
Reference Guide 75. Layer-3 Commands Example This example sets the authentication string. (conf-if-VLAN 1)# ip rip authentication string ripauthent 75.2.2.81.3.7 ip rip authentication key-chain This command sets the authentication key-chain. Syntax ip rip authentication key-chain key-chain no ip rip authentication key-chain key-chain Command Description key-chain...
Page 730
Mediant MSBR Command Mode Privileged User Example This example matches a BGP community list. (config-data)# route-map ww permit 1 (conf-route-map)# match community commlist1 75.2.2.81.4.2 match extcommunity This command matches BGP/VPN extended community list. Syntax match extcommunity {<comm list std number>|<comm list exp number> |<comm list name>} Command Description...
Page 731
Reference Guide 75. Layer-3 Commands Interface Type (ifname) Interface ID ipip Tunnel IPIP ID [1-255] l2tp L2TP ID [0-99] pppoe PPPoE interface ID [1-3] pptp PPTP ID [0-99] vlan Vlan ID [1-3999] loopback Loopback ID [1-5] Bridge interface [1-255] Command Mode Privileged User Example This example matches values from vlan 1.
Page 732
Mediant MSBR Command Description plistname Defines the prefix-list string. Command Mode Privileged User Example This example matches the next-hop address of a route. (conf-route-map)# match ip next-hop prefix-list plist 75.2.2.81.4.6 match metric This command matches the metric value of RIP updates. Syntax match metric <0-4294967295>...
Page 733
Reference Guide 75. Layer-3 Commands Example This example sets a BGP community list. (config-data)# route-map ww permit 1 (conf-route-map)# set comm-list 100 75.2.2.81.4.8 set ip next-hop This command sets the next hop value in the RIPv2 protocol. Syntax set ip next-hop a.b.c.d Command Description a.b.c.d...
Page 734
Mediant MSBR Syntax redistribute connected redistribute connected metric <0-16> redistribute connected route-map [route-map] no redistribute connected Command Description metric Defines the metric value (0 -16). route-map Defines the pointer to route-map entries. Command Mode Privileged User Example This example redistributes connected routes into the RIPng tables. # configure data (config-data)# router ripng (conf-router)# redistribute connected...
Page 735
Reference Guide 75. Layer-3 Commands Syntax default-metric <0-16777214> no default-metric Command Description <0-16777214> Defines the default metric. Default Command Mode Privileged User Example This example sets the metric of redistributed routes to 1000. # configure data (config-data)# router ripng (conf-router)# default-metric 1000 75.2.2.81.5.3 distribute-list prefix This command filters the RIP path and can apply access-lists to a chosen interface.
Page 736
Mediant MSBR Interface Type (ifname) Interface ID vlan Vlan ID [1-3999] loopback Loopback ID [1-5] Bridge interface [1-255] Default Command Mode Privileged User Example This example filters the RIP path for input packets of vlan 1. # configure data (config-data)# router ripng (conf-router)# distribute-list prefix prefix1 in vlan 1 75.2.2.81.5.4 network ifname This command enables RIPng on a specified interface or network.
Page 737
Reference Guide 75. Layer-3 Commands Default Command Mode Privileged User Example This example sets the RIP enable interface by ifname. # configure data (config-data)# router ripng (conf-router)# network vlan 1 75.2.2.81.5.5 passive-interface This command suppresses routing updates on an interface. Syntax passive-interface ifname no passive-interface ifname...
Page 738
Mediant MSBR Example This example sets the specified interface to passive mode. # configure data (config-data)# router rip (conf-router)# passive-interface vlan 1 75.2.2.81.5.6 route This command sets up a static route. Syntax route <route map tag> deny <sequence> route <route map tag> permit <sequence> route <route map tag>...
Page 739
Reference Guide 75. Layer-3 Commands Command Mode Privileged User Example The following is an example of how this command can be used. # configure data (config-data)# router ripng (conf-router)# route AAAtag deny 10 75.2.2.81.5.7 route-map This command sets up a route-map. Syntax route <rmap_name>...
Page 740
Mediant MSBR Command Description routing_table_timer Defines the Routing Table Update Timer value in seconds. Range is 5-2147483647. routing_timeout_timer Defines the Routing Information Timeout Timer. Range is 0- 65535. garbage_collection_timer Defines the Garbage Collection Timer. Range is 0-65535. Default The default Routing Table Update Timer value in seconds is 30. ...
Page 741
Reference Guide 75. Layer-3 Commands Example This example redistributes bgp routes into the RIPng tables. # configure data (config-data)# router ripng (conf-router)# redistribute bgp 75.2.2.81.5.10 redistribute kernel This command redistributes routing information from kernel route entries into the RIPng tables. The no redistribute kernel disables the routes. Syntax redistribute kernel redistribute kernel metric <0-16>...
Page 742
Mediant MSBR Command Description metric Defines the metric value (0 -16). route-map Defines the pointer to route-map entries. Default Command Mode Privileged User Example This example redistributes ospf6 routes into the RIPng tables. # configure data (config-data)# router ripng (conf-router)# redistribute ospf6 75.2.2.81.5.12 redistribute static This command redistributes routing information from static route entries into the RIPng tables.
Reference Guide 75. Layer-3 Commands 75.2.2.82 Virtual Routing and Forwarding (VRF) Commands These commands implement dynamic routing protocols (BGP, OSPF, PIM, and RIP) with Virtual Routing and Forwarding (VRF) tagging. One BGP, one OSPF, one PIM, and one RIP protocol can be enabled per VRF table. Up to five dynamic routing protocols can be enabled in all defined VRF tables.
Page 744
Mediant MSBR Command Description string Defines the VRF name. Default Interface is not associated with vrf. Note This command is supported on all MSBR devices. The maximum number of interfaces per vrf is 20. The following interfaces are supported: ...
Page 745
Reference Guide 75. Layer-3 Commands 75.2.2.82.3 ip route vrf The command adds a static route into a VRF. Syntax The syntax of this command can include several interface types. The most common are as follows: ip route vrf <vrf table name> <ip address> <prefix mask>...
Page 746
Mediant MSBR Interface Type (ifname) Interface ID pptp PPTP ID [0-99] vlan Vlan ID [1-3999] loopback Loopback ID [1-5] Bridge interface [1-255] Default Note A route that points to an interface that is not associated with the given vrf will be disabled. Command Mode Privileged User Related Commands...
Reference Guide 75. Layer-3 Commands 75.3 GRE and IPIP Tunnel Interface Commands The section describes the GRE and IPIP Tunnel Interface commands. 75.3.1 interface gre|ipip This command enters a specific WAN tunnel interface configuration. Use the no form of this command to delete the interface.
Mediant MSBR Command Mode Privileged User Example This example sets the NAPT on GRE 6. # configure data (config-data)# interface gre 6 (conf-if-GRE 6)# napt 75.3.1.2 ip address This command defines the local IP address of the specified tunnel interface. Use the no form of this command to remove a configured IP address.
Page 749
Reference Guide 75. Layer-3 Commands Command Description ip address Specifies a valid IPv4 address. IP addresses should be expressed in dotted decimal notation (for example, 10.1.2.3). Default Command Mode Privileged User Example This example configures the tunnel destination IP address of 10.4.2.50 on interface GRE 6. (config-data)# interface gre 6 (conf-if-GRE 6)# tunnel destination 10.4.2.50 Version 7.2...
Mediant MSBR 75.4 GARP Commands This section describes the GARP commands. 75.4.1 garp timer This command configures the GARP timer. Syntax garp timer <Time> Command Description timer Defines the time in seconds (1-3600, default is 60). Default 60 (seconds) Note ...
Page 751
Reference Guide 75. Layer-3 Commands Note This command is applicable only to data-router functionality. This command is applicable only to Gigabit Ethernet and fiber WAN interfaces (VLAN 1 only). Command Mode Privileged User Related Commands garp timer Example This example enables the GARP timer on the Gigabit 0/0 WAN interface: (config-data)# interface gigabitethernet 0/0 (conf-if-GE 0/0)# garp enable...
Page 752
Mediant MSBR This page is intentionally left blank. Reference Guide Document #: LTRT-17939...
Reference Guide 76 Security Security The following describes Security commands. 76.1 ip synflood-protection This command enables TCP SYN-flood protection. Syntax ip synflood-protection {enable|rate} Command Description enable Enables this command. rate Defines the rate The rate (your number is multiples by ten) Default Command Mode Privileged User...
Mediant MSBR Example This example blocks access to the Website "google.com". (config-data)# web-restrict google.com 76.3 VPN Commands The following describes VPN commands. 76.3.1 IPSec (crypto) The sub-section below describes the IPSec commands. 76.3.1.1 crypto isakmp key This command, when used in global configuration mode, configures a preshared authentication key.
Reference Guide 76 Security 76.3.1.2 crypto isakmp policy This command, when used in global configuration mode, defines an Internet Key Exchange (IKE) policy. IKE policies define a set of parameters to be used during the IKE negotiation. To delete an IKE policy, use the no form of this command. This command invokes the Internet Security Association Key Management Protocol (ISAKMP) policy configuration (config-isakmp) command mode.
Mediant MSBR Command Description 1|2|3 Specifies the Diffie-Hellman group identifier within an IKE policy. Table 76-1: Algorithms Table Algorithms type Command Description Defines ESP with the 56-bit DES esp-des encryption algorithm. Defines ESP with the 168-bit DES esp-3des encryption algorithm (3DES or Triple DES).
Reference Guide 76 Security Command Description profile name Defines the profile name. Command Mode The crypto isakmp key is defined in enabled configuration mode. Example This example configures an IPSec policy profile. (config-data)# crypto ipsec profile p1name 76.3.1.4 crypto ipsec transform-set This command, when used in global configuration mode, defines a transform set as acceptable combination of security protocols and algorithms.
Mediant MSBR esp-sha-hmac Defines ESP with the SHA (HMAC variant) authentication algorithm. AH Transform ah-md5-hmac Defines AH with the MD5 (HMAC variant) authentication algorithm. ah-sha-hmac Defines AH with the SHA (HMAC variant) authentication algorithm. This command puts you into the cfg-crypto-trans command mode (cfg-crypto-trans)# mode <encapsulation-type>...
Page 759
Reference Guide 76 Security (config-crypto-map)# set peer <peer-ip> (config-crypto-map)# set transform-set <set-name> (config-crypto-map)# set pfs {group1|group2|group5|same} (config-crypto-map)# set security-association lifetime seconds <#> (config-crypto-map)# match address <acl-name> Command Description peer-ip Specifies an IPSec peer in a crypto map entry. set-name Specifies which transform sets can be used with the crypto map entry.
Mediant MSBR 76.3.2 L2TP and PPTP Tunnel Interface Commands The following describes the L2TP and PPTP Tunnel Interface commands. 76.3.2.1 description This command sets the description on the specified tunnel interface. Syntax description <string> Command Description string Specifies the interface description using an alphanumerical string (up to 255 characters).
Reference Guide 76 Security Example This example enables the firewall on l2tp. # configure data (config-data)# interface l2tp 1 (conf-if-L2TP 6)# firewall enable 76.3.2.3 lcp-echo This command configures the interface echo parameters. The echo is needed to keep the fw state alive, otherwise it is deleted after two minutes idle time and the connection will be blocked.
Mediant MSBR Command Description Assigns the tunnel interface id in the range of 0-99. Default Note This command is applicable only to data-router functionality. Command Mode Privileged User Example This example enters an l2tp id 5 tunnel interface configuration: (config data)# interface l2tp 5 76.3.2.5 mtu This command configures the interface Maximum Transmission Unit (MTU) on the specified tunnel interface.
Reference Guide 76 Security 76.3.2.6 napt This command sets the NAPT (Network Address Port Translation) on the specified tunnel interface. Use the no form of this command to set route mode. Syntax napt Default By default, NAPT is used. Command Mode Privileged User Example This example sets napt on l2tp 6.
Mediant MSBR 76.3.2.8 ppp authentication pap|chap|ms-chap|ms-chap-v2 This command enables several authentication protocols on the ppp protocol of the specified tunnel interface. Use the no form of this command to disable a specific authentication protocol. Syntax ppp authentication pap ppp authentication chap ppp authentication ms-chap ppp authentication ms-chap-v2 Command...
Reference Guide 76 Security Default When creating a new interface, it is disabled by default. Command Mode Privileged User Example This example enables L2TP 3. # configure data (config data) # interface l2tp 3 (conf-if-L2TP 3)# no shutdown 76.3.2.10 tunnel destination This command defines the end point host/ip address of the specified tunnel interface.
Mediant MSBR 76.3.3 l2tp-server This command defines the L2TP VPN server. Syntax l2tp-server Command Mode Privileged User Example This example defines the L2TP VPN server: (config data)# l2tp-server no ppp encryption ip range 192.168.0.70 192.168.0.80 ipsec key 123456 no shutdown exit 76.3.4 pptp-server This command enables the Point-to-Point Tunneling Protocol (PPTP) VPN server.
Reference Guide 76 Security 76.3.5 vpn-users This command defines a VPN user. Syntax vpn-users Command Mode Privileged User Example This example defines a VPN user: (config data)# vpn-users (conf-vpnusers)user tom pass testpass Version 7.2 Mediant MSBR...
Mediant MSBR 76.4 Port Security based on MAC Address The following provides support for port access security based on MAC address. Only clients whose MAC addresses are defined for the device's port interface are allowed access to the port. 76.4.1 authentication static This command defines a MAC address to allow access to one of the device's interfaces.
Reference Guide 76 Security 76.5 Access Control List (ACL) Commands The following describes ACL commands. 76.5.1 access-list Access lists are used in several system components for classifying IP traffic based on parameters such as addresses, protocols and ports. The primary usage of access lists is for filtering unwanted traffic on the system's interfaces.
Page 770
Mediant MSBR Command Description Select an address or a name from the list to apply the rule on the corresponding host, or Any to apply the rule on all the device's LAN hosts. Select traffic by IP addresses and ports, in one of the following formats: •...
Reference Guide 76 Security Default The default access list behavior is "deny", i.e. if a flow doesn't match any of the rules it is assumed to be unwanted traffic. Related Commands SNMP Community strings can be associated with an ACL rule using the snmp-acl command. Command Mode Privileged User Example...
Mediant MSBR 76.5.3 ip access-list standard This command provides support for assigning a sequence number (ID) to an IP Access List rule and re-sorting the order of rules within an Access List. Syntax ip access-list standard <access list id> Command Description access list id Defines the standard IP access-list number.
Reference Guide 76 Security (config-std-nacl)# 1 permit any 76.5.5 ip access-list resequence This command re-sequences rule numbering of a specific Access List. Syntax ip access-list resequence <access list id> <starting rule number> <step increment> Command Description access list id Defines the Starting Rule Number. The range is 1-2147483647. Note This command is applicable only to data-router functionality.
Mediant MSBR 76.5.6 ip access-group This command associates an access list with an IP interface. Refer to the "access-list" command documentation for more information. To remove an access list association, use the no format of the command. Syntax ip access-group <acl-id> in ip access-group <acl-id>...
Reference Guide 76 Security 76.6 Firewall Commands The following describes the Firewall commands. 76.6.1 firewall enable This command enables the firewall protection on the specified tunnel interface. Use the no form of this command to disable the firewall. Syntax firewall enable Default By default, firewall is enabled.
Mediant MSBR Command Mode Privileged User Example This example sets the MTU value to 770 bytes on GRE 6. # configure data (config-data)# interface gre 6 (conf-if-GRE 6)# mtu 770 76.6.3 desc This command sets the description on the specified tunnel interface. Syntax desc <string>...
Reference Guide 76 Security 76.6.4 shutdown This command disables the specified tunnel interface. Use the no form of this command to enable the interface. Syntax shutdown no shutdown No arguments exist for this command. Default When creating a new interface, it is disabled by default. Command Mode Privileged User Example...
Mediant MSBR 76.7 NAT Commands The following describes NAT commands. 76.7.1 ip nat inside source static NAT port-forwarding exposes a LAN service (IP address and port) to WAN users. The command creates a static translation rule, which maps a WAN port (on one or all WAN interfaces) to a LAN service.
Reference Guide 76 Security Command Description range Performs port forwarding on a range of ports, rather than a single port. acl-name Access-list defining the LAN hosts affected by the NAT rule. if-name WAN interface name and index, to which NAT will be performed.
Page 780
Mediant MSBR Syntax ip nat inside source list <acl-name> interface <if-name> ip nat inside source list <acl-name> interface <if-name> pool <pool-name> ip nat inside source list <acl-name> interface <if-name> pool <pool-name> port <wan-port-start> <wan-port-end> Command Description Defines forwarding for a TCP port. Defines forwarding for a UDP port.
Reference Guide 76 Security Command Mode Privileged User Example The following example defines a port forwarding rule: (config-data)# ip nat inside source list NAT-ACL-NAME interface GigabitEthernet 0/0 76.7.3 ip nat inside destination This command defines a load-balancing configuration, where several LAN hosts are handling access requests from the WAN.
Mediant MSBR Syntax ip nat pool <pool-name> <start-ip> <end-ip> ip nat pool <pool-name> <start-ip> <end-ip> rotary Command Description pool-name Defines the name of the pool. start-ip Defines the starting IP address of the NAT address pool. end-ip Defines the last IP address of the NAT address pool. rotary Indicates that the pool refers to LAN hosts participating in a load- balancing scheme.
Page 783
Reference Guide 76 Security Example This example defines the lifetime of idle UDP connections: (config-data)# ip nat translation udp-timeout 360 Version 7.2 Mediant MSBR...
Mediant MSBR 76.8 802.1x LAN Port-based Authentication Commands The 802.1x commands provide the support for functioning as an IEEE 802.1X authenticator. IEEE 802.1X (EAP-over-LAN, or EAPOL) is a standard for port-level security on secure Ethernet switches (wired or wireless). When equipment is connected to a secure port, no traffic is allowed until the identity of the equipment is authenticated.
Reference Guide 76 Security Example This example defines an external RADIUS server. (config-data)# dot1x radius-server host 10.3.4.250 auth-port 1812 key 123456 76.8.3 dot1x reauth-time This command enables each port to be re-authenticated after a user-defined interval (in seconds), following a successful authentication. Syntax dot1x reauth-time <seconds>...
Mediant MSBR 76.8.4 authentication dot1x This command determines which client (based on MAC address) is allowed through a specific port after 802.1X authentication succeeds. Syntax authentication dot1x {single-host|multi-host} Command Description single-host Allows only the MAC address that successfully passed 802.1x authentication. multi-host Any MAC address is allowed after 802.1x authentication succeeds.
Reference Guide 76 Security 76.9 802.1X On-board RADIUS Server Authentication Commands The commands below provide support for an on-board RADIUS server that can be used for 802.1X wired (LAN) and wireless (Wi-Fi Protected Access II / WPA2) authentication. This supports both password-based authentication and certificate-based authentication. 76.9.1 dot1x local-user This command defines the username and password.
Mediant MSBR 76.9.3 security 802.1x This command enables on-board RADIUS server for 802.1X security. Syntax # security 802.1x radius server local Command Mode Privileged User Example This example enables on-board RADIUS server for 802.1X security. (config-data)# interface dot11radio 1 (config-if-dot11radio 1)# security 802.1x radius server local 76.9.4 security wpa This command enables Wi-Fi security mode.
Reference Guide 76 Security 76.9.5 security mode This command defines Wi-Fi security mode to WPA2. Syntax # security mode wpa2 Command Mode Privileged User Example This example defines Wi-Fi security mode to WPA2. (config-data)# interface dot11radio 1 (config-if-dot11radio 1)# security mode wpa2 76.9.6 no shutdown This command enables the interface.
Mediant MSBR 76.11 TACACS+ Commands TACACS+ is a security protocol for centralized username and password verification. The following describes the TACACS+ commands. 76.11.1 tacacs-server This command provides support for communicating with a TACACS+ server through the device's WAN interface. Syntax tacacs-server timeout <seconds>...
Page 793
Reference Guide 76 Security Interface Type (ifname) Interface ID gigabitethernet GigabitEthernet interface slot [SLOT/PORT.VLANID] and port (VLAN ID is optional) cellular Cellular interface ID Tunnel GRE ID [1-255] ipip Tunnel IPIP ID [1-255] l2tp L2TP ID [0-99] pppoe PPPoE interface ID [1-3] pptp PPTP ID...
Mediant MSBR 76.11.2 aaa authentication login tacacs+ This command enables usage of a TACACS+ server on the network to verify access to the device's Command-Line Interface. To disable TACACS+ and return to local username/password verification, use the no form of this command.
Reference Guide 76 Security Command Mode Privileged User Example The example below enables TACACS+ usage for session accounting. (config-data)# aaa accounting exec start-stop tacacs+ 76.11.4 aaa authentication login tacacs+ allow-console-bypass authentication This command allows bypassing TACACS+ authentication when a user is connected using the serial port.
Mediant MSBR Default TACACS+ is disabled. Command Mode Privileged User Example The example below allows bypassing TACACS+ enable authorization (privileged mode) when a user is connected using the serial port. (config-data)# aaa authentication login tacacs+ allow-console- bypass authentication authorization 76.11.6 aaa accounting command start-stop tacacs+ This command enables reporting of CLI start/stop times to a TACACS+ server on the network.
Page 797
Reference Guide 76 Security Command Mode Privileged User Example The example below enables TACACS+ usage for per-command authorization. (config-data)# aaa authorization command tacacs+ Version 7.2 Mediant MSBR...
Mediant MSBR 76.11.8 aaa authorization enable if-authenticated tacacs+ This command enters Privileged User mode automatically if authenticated by TACACS+. Syntax aaa authorization enable if-authenticated tacacs+ Default TACACS+ is disabled. Command Mode Privileged User Example The example below enters Privileged User mode automatically if authenticated by TACACS+.