1. Manuals
  2. Brands
  3. 3Com Manuals
  4. Network Router
  5. OfficeConnect Remote 812
  6. Cli user's manual

3Com OfficeConnect Remote 812 Cli User's Manual

Release 1.0
Hide thumbs Also See for OfficeConnect Remote 812:
Table of Contents

Advertisement

Quick Links

Download this manual See also: Cli User's Manual
OfficeConnect
Remote 812
TM

ADSL Router

®
CLI User's Guide
Release 1.0
http://www.3com.com/

Advertisement

Table of Contents
loading

Related Manuals for 3Com OfficeConnect Remote 812

Summary of Contents for 3Com OfficeConnect Remote 812

  • Page 1: Adsl Router

    OfficeConnect Remote 812 ADSL Router ® CLI User’s Guide Release 1.0 http://www.3com.com/...
  • Page 2 95052-8145 3Com Corporation reserves the right to revise this documentation and to make changes in content from time to time without obligation on the part of 3Com Corporation to provide notification of such revision or change. 3Com Corporation provides this documentation without warranty of any kind, either implied or expressed, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose.

  • Page 3: Table Of Contents

    ONTENTS CCESSING THE ONFIGURATION Establishing Communications with the OfficeConnect Remote 812 Local Connection IBM-PC Compatible Computers Macintosh Computers UNIX-Based Computers Remote Connection CLI C OMMAND ONVENTIONS AND Command Structure Format Parameters Values Names or Strings Network Address Formats Abbreviation and Command Completion...
  • Page 4 Instructions Setup Script Password Protection Which portions of the network do you want to configure? Quick Setup Identification information Quick Setup Management Information TELNET information Quick Setup IP information Quick Setup IPX information Quick Setup Bridge Information Sample Identification Information VC S UICK ETUP...
  • Page 5 Configuring Network Service Information Configuring ATM Information IP Routing Enabling IP Routing show ip settings show ip routing settings Configuring an IP Network over the LAN Configuring IP RIP on the LAN Configuring IP for the Remote Site Connection Configuring IP RIP for a Remote Site Configuring Static and Framed IP Routes IP Tools Address Translation...
  • Page 6 Setting Date and Time Setting System Identification Configuring Web Browser and TELNET Login Access Providing TFTP Access Setting Password Protection Introduction Filtering Overview OfficeConnect Remote 812 Filtering Capabilities Filter Classes Filter Types Data Filters Advertisement Filters Generic Filters Creating Filters Overview...
  • Page 7 Removing a Filter from a VC/Remote Site Profile Using CLI Deleting a Packet Filter Using CLI Verifying Filter File Syntax Using CLI Showing Filter File Contents Using CLI OFFICECONNECT REMOTE 812 SAMPLE CONFIGURATION Global Configuration LAN IP Network Configuration DHCP and DNS Configuration...
  • Page 8 add ip route <ip_net_address> add ipx network <network_name> add ipx route <ipx_net_address> add ipx service [service_name] add ipx_route vc <name> add ipx_service vc <name> add nat tcp vc <user_name> add nat udp vc <vc_name> add network service <service_name> Status Add network service example: add snmp community <community_name>...
  • Page 9 delete user <name> B-11 delete vc <name> B-11 DIAL B-12 dial <vc_name> B-12 DISABLE B-12 disable bridge network <name> disable bridge spanning_tree disable icmp B-12 disable interface <interface_name> disable ip forwarding B-12 disable ip network <network_name> disable ip rip B-12 disable ip routing B-12 disable ip static_remote_routes...
  • Page 10 enable snmp authentication traps enable telnet escape B-14 enable user <user name> B-15 enable vc <vc name> B-15 exit CLI B-15 HANGUP B-15 hangup interface <interface_name> hangup vc <vc_name> B-15 HELP B-15 help <command> B-15 HISTORY B-15 history B-15 KILL B-15 kill <“process name”>...
  • Page 11 list services B-19 list snmp communities or list snmp trap_communities list syslog B-20 list tcp connections B-20 list tftp clients B-20 list udp listeners B-20 list users B-20 list vc B-20 login_required B-21 password B-21 PAUSED COMMANDS B-21 PING B-21 ping <ip_name_or_addr>...
  • Page 12 set ipx network <network_name> set ipx system B-29 set network service <admin_name> set ppp receive_authentication [NONE | PAP | CHAP | EITHER] set ppp echo_retries <number> set snmp community <community_name> set system B-30 set syslog <IP_address> loglevel [level] set time <time> B-31 set user <user_name>...
  • Page 13 show interface <interface_name> settings show ip counters B-41 INPUT COUNTERS B-41 OUTPUT COUNTERS B-42 show ip settings B-42 show ip network <network_name> settings show ipx counters B-43 INPUT COUNTERS B-43 OUTPUT COUNTERS B-43 show ipx network <network_name> counters show ipx network <network_name> settings show ipx rip B-44 show ipx sap...
  • Page 14 show system B-49 show telnet B-50 show tcp counters B-50 TCP COUNTERS B-50 show tcp settings B-50 TCP SETTINGS B-50 show udp B-50 INPUT COUNTERS B-50 OUTPUT COUNTERS B-50 show user <name> settings show vc <vc_name> settings TELNET B-51 telnet <ip_name_or_addr> telnet <ip_name_or_addr>...
  • Page 15 ORPORATION IMITED FCC C LASS ERIFICATION FCC C LASS TATEMENT FCC D ECLARATION OF ONFORMITY ARRANTY TATEMENT...

  • Page 17: Ccessing The

    Remote 812 Local Connection If you want to attach locally to the OfficeConnect Remote 812 via the console (serial) port, you will need to connect the supplied serial cable to the Console Port located on the unit and the Serial Port on your computer. In addition, you will also need a terminal emulation program appropriate for your computer.

  • Page 18: Unix-Based Computers

    Remote Connection If you want to attach to the OfficeConnect Remote 812 via the LAN or WAN interface of the unit, you will need to establish a Telnet connection to the unit. The OfficeConnect Remote 812 must have an IP address and an administrative login profile (username and password) in order to connect to it with Telnet.

  • Page 19: Cli Command Conventions And Terminology

    CLI C This chapter describes the command syntax, conventions and terminology used within the Command Line Interface. Reviewing and understanding this chapter is essential for you to understand subsequent chapters. Command Structure Format Commands can be followed by values and/or parameters and values. For example: add ip network <network_name>...

  • Page 20: Names Or Strings

    The current command can be killed by pressing <ctrl>c [^ c]. A partially completed command line can be reprinted - a useful function if, due to interrupted output, you’re unsure what OfficeConnect Remote 812 has “seen” up to now - by pressing <ctrl>l [^ l] (for last).

  • Page 21: Conventions

    Conventions Conventions Most commands are not case sensitive. As a rule, only <name> and [password] values require typing the correct case. Configuration changes occur immediately but are lost on reboot unless you save them. The save all command places configuration changes in FLASH ROM (permanent memory).
  • Page 22 2: CLI C HAPTER OMMAND ONVENTIONS AND ERMINOLOGY...

  • Page 23: Configuration Methods

    The Quick Setup program for the CLI is designed to get your OfficeConnect Instructions Remote 812 up and running fast. To ensure that you have all the information you need on hand before you engage Quick Setup, we have supplied a script to jot down system, management, and LAN configuration information.

  • Page 24: Manual Setup Instructions

    Once you become familiar with the CLI interface, you might find it more efficient Instructions to manage the OfficeConnect Remote 812 manually. Manual configuration is most versatile in that you only enter commands that need to effectively change from the current configuration. Also, many of the advanced features can only be...

  • Page 25: Quick Setup

    The CLI Quick Setup program automatically executes when the OfficeConnect Remote 812 is powered on with no configuration and all DIP switches in the back of the unit are in the OFF position. This boot mode is called Unconfigured Mode.

  • Page 26: Password Protection

    HAPTER UICK ETUP The OfficeConnect Remote 812 Quick Setup allows you to setup a simple configuration for IP, IPX, and bridging. Please answer the following questions with "yes" or "no" to indicate which portions of the system you want to configure.

  • Page 27: Telnet Information

    What user name will be allowed to manage this system? What password will be used for this user ? Quick Setup IP information The OfficeConnect Remote 812 uses a network name to identify the network for future managment commands. Question...

  • Page 28: Quick Setup Ipx Information

    Question Do you want to run RIP? Choose the version of RIP to run: The OfficeConnect Remote 812 can act as a DHCP server, providing IP addresses to other stations on the local lan. Question Do you want the OfficeConnect Remote 812 to act...

  • Page 29: Quick Setup Bridge Information

    “ethernet_ii”, “snap”, “dsap”, “novell_8023.” Question What is the framing for the IPX network ? Quick Setup Bridge Information The network name is used by the OfficeConnect Remote 812 to identify your bridging setup. Question Enter the network name: The spanning tree algorithm is used to eliminate loops in a network that is linked together with bridges.
  • Page 30 4: Q HAPTER UICK ETUP Management Information: Console Login Required: Console Login Password: SNMP Management: SNMP Community: SNMP IP Address: SNMP Read&Write: TELNET Management: TELNET User: TELNET Password: IP Information: IP Network Name: IP Network Address: IP Mask: IP Frame Type: IP RIP: DHCP Server: DHCP Pool Start IP Address:...
  • Page 31 Quick Setup (CLI) is designed only for initial set up of the OfficeConnect Remote 812. When setup is complete, this one-time program will alter your configuration files, which the program cannot edit. If you make an error and need to restart, use...
  • Page 32 4: Q HAPTER UICK ETUP...

  • Page 33: Quick Vc Setup

    This chapter will describe in detail the operations of the OfficeConnect Remote 812 VC Setup Wizard program. It will identify the required information, steps involved, and sample output scripts from the execution of this program. CLI QuickVC Setup Script Introduction The CLI QuickVC Setup program allows you to quickly configure remote site profiles (virtual channel connections) for your OfficeConnect Remote 812.

  • Page 34: Network Service

    The Category of Service and cell rate parameters only affect data transmitted from the OfficeConnect Remote 812 to the remote site (upstream direction). The default value of UBR with a Peak Cell Rate of 0 will attempt to use all available upstream bandwidth when transmitting to the remote site.

  • Page 35: Ip Configuration (Network Service Rfc1483)

    If you choose to run NAT the WAN interface must be Numbered. (i.e., there must be a local WAN-side IP address specified that must be on a different IP network than the LAN-side IP address). See Appendix B of the OfficeConnect Remote 812 ADSL Router User’s Guide for a discussion of Numbered and Unnumbered interfaces.

  • Page 36: Ipx Routing (Network Service Ppp)

    Question Do you want to Bridge any traffic over VC “name”? The OfficeConnect Remote 812 can be configured to send and receive the routed (IP and IPX) packets using bridged encapsulation (i.e., Bridged-1483 or BRCP or PP), where the MAC-header is included in each packet. The routing rules for [IP and IPX] will be applied to each packet.

  • Page 37: Sample Output Display As Quick Setup Executes

    Category of Service: Peak Cell Rate: Local WAN IP Address: Remote WAN IP Address: WAN Interface Type: Address Translation (NAT): RIP: Remote is Default Gateway: IPX: IPX WAN Network Number: IPX WAN RIP: Bridging: Question Do you want to change any answers ? Do you want to actually execute these commands? Sample Output Display OCR-DSL>...
  • Page 38 5: Q VC S HAPTER UICK ETUP...

  • Page 39: Manual Setup

    Overview OfficeConnect Remote 812 to route or bridge to remote networks. 1 Determine how the OfficeConnect Remote 812 will be used (as an IP, IPX Router and/or Bridge) and gather information about your remote site connection using the Configuration Planning Forms provided with the unit.

  • Page 40: Remote Site Management

    <vc name> The OfficeConnect Remote 812 always has a default profile. Any value that is not set in a profile that you create will assume the values that are present in the default profile. The default profile can not be created or deleted, but it can be modified using the set vc command.

  • Page 41: Configuring Network Service Information

    OfficeConnect Remote 812 and the remote site. The OfficeConnect Remote 812 supports two types of Network Services: PPP and RFC 1483. The OfficeConnect Remote 812 and the remote site must both use the same Network Service in order for a connection to established and maintained.

  • Page 42: Ip Routing

    ATM Category of Service parameters specify characteristics (sometimes called traffic shaping parameters) for data transmitted from the OfficeConnect Remote 812 to the remote site. They have no effect on data transmitted from the remote site to the OfficeConnect Remote 812.

  • Page 43: Enabling Ip Routing

    OfficeConnect Remote 812 so that your changes will be written to permanent FLASH memory. Enabling IP Routing When the OfficeConnect Remote 812 is to be used for IP Routing, IP forwarding must be enabled. This is a global setting for the entire router. To enable IP routing, use the command:...

  • Page 44: Show Ip Settings

    The reconfigure ip network command can be used to modify an existing IP network’s address or frame type. Configuring IP RIP on IP RIP is configurable on each LAN IP network. The OfficeConnect Remote 812 the LAN supports two versions of RIP, V1 or V2. You can also disable RIP completely.

  • Page 45: Configuring Ip For The Remote Site Connection

    255.255.255.255 for the <ip address> parameter. To specify that the interface is Unnumbered you must enter 0.0.0.0 for the <ip address> parameter. (See Appendix B of the OfficeConnect Remote 812 ADSL Router User’s Guide for a discussion of Unnumbered interfaces.) Optionally, you can specify that the remote site should be used as the default gateway.

  • Page 46: Configuring Ip Rip For A Remote Site

    Validation is enabled, the source address of all IP frames received from the remote site will be validated. A packet’s source address is valid if the OfficeConnect Remote 812 will route an IP frame destined to the source address on the same VC it came in on.

  • Page 47: Address Translation

    Remember to disable and then re-enable the VC profile for the change to take effect. IP Tools The OfficeConnect Remote 812 CLI provides a standard set of IP utility programs including Ping, TELNET and RLOGIN. Address Public IP addresses are registered and can be used within a public network (e.g., Translation the Internet).

  • Page 48: Configuring Nat

    For example, if you want to support a Web Server on the LAN and be able to manage your OfficeConnect Remote 812 with the Web Browser, you would define 2 static ports for the Web Server (TCP port 80).

  • Page 49: Monitoring Nat

    Remember to save your configuration using the save all command before rebooting your OfficeConnect Remote 812 so that your changes will be written to permanent FLASH memory. Monitoring NAT The NAT configuration is displayed when viewing the remote site configuration using the show vc command.

  • Page 50: Monitoring The Dhcp Server

    WINS and DNS Servers specified. If this functionality is to be disabled, an IP address of 0.0.0.0 is entered. If the OfficeConnect Remote 812 is functioning as the DNS Proxy, the OfficeConnect Remote 812’s LAN IP address should be configured as the first (primary) DNS address.

  • Page 51: Configuring The Dhcp Relay

    Internet and the other to a corporate site which has a domain name of 3com.com. Two DNS remote servers can be configured, one which uses the corporate site for 3com.com and the other to use the Internet as the default.

  • Page 52: Configuring Dns

    <host name> Managing the DNS When resolving a DNS name, the OfficeConnect Remote 812 first searches for a Proxy match in the Static Host table. If a match is not found it will perform a proxy function.

  • Page 53: Ipx Routing

    <domain name> IPX Routing The OfficeConnect Remote 812 can be configured as an IPX router to forward IPX packets between the local LAN interface and one or more remote sites. A forwarding table is maintained which specifies which interface to route an IPX packet based on the destination IPX network number.

  • Page 54: Configuring Ipx For Remote Site Connections

    6-16 6: M HAPTER ANUAL ETUP delete ipx network <network name> Configuring IPX for In order to enable IPX to be routed to a remote site, you must configure the Remote Site following items in the VC profile associated with the remote site connection. Connections set vc <vc name>...

  • Page 55: Configuring Ipx Static And Framed Services

    To add a Static IPX route over the LAN, use the command: add ipx route <ipx network address> The route will appear in the IPX routing table. You can display all IPX routes with the list ipx routes command. To delete an IPX Static route, use the command: delete ipx route <ipx network address>...

  • Page 56: Configuring Ipx Rip And Sap

    6-18 6: M HAPTER ANUAL ETUP The service will appear in the IPX Services table. For example: add ipx service Serv411 gateway 98.0:0:0:0:0:0 ipx_net 31ab17c9 You can display all IPX Services with the list ipx services command. delete ipx service <name> type <hex number> add ipx_service vc <vc name>...

  • Page 57: Bridging

    Bridging A bridge connects two or more physical networks together to function as one big network. The OfficeConnect Remote 812 can be configured to be a learning bridge. A learning bridge does more than just link networks; it separates network traffic and forwards only the packets that need to be forwarded.

  • Page 58: Configuring Bridging For The Lan

    <vc name> Bridging IP Traffic By default the OfficeConnect Remote 812 is set up to route IP traffic. To bridge IP traffic you must turn off IP Forwarding. IP Forwarding refers to the routing of IP packets from one interface to another. It does not affect communicating to the OfficeConnect Remote 812 itself.

  • Page 59: Mac-Encapsulated Routing

    To the remote site, the packets appear as if they had been bridged. This feature allows the routing features of the OfficeConnect Remote 812 (i.e., address translation, DHCP Server, DNS Proxy, etc.) to be employed in a bridged environment.

  • Page 60: Simultaneous Bridging And Routing

    LAN that is not addressed to the MAC address of the OfficeConnect Remote 812, it is bridged. Additionally, ARP broadcasts for IP addresses other than that of the OfficeConnect Remote 812 are also bridged. Other broadcasts for the configured protocol are not bridged. To configure the...

  • Page 61: System Administration

    Administration administration tasks: Remember to save your configuration using the save all command before rebooting your OfficeConnect Remote 812 so that your changes will be written to permanent FLASH memory. Setting Date and Time You can obtain the current date, time and system uptime using the command:...

  • Page 62: Configuring Web Browser And Telnet Login Access

    Trivial File Transfer Protocol (TFTP) provides a simple way to transfer files from one machine to another. The OfficeConnect Remote 812 has a TFTP server that allows you to copy files to or from the unit. All you have to do is set up TFTP access on the OfficeConnect Remote 812 and run a TFTP client program on a workstation.

  • Page 63: Setting Password Protection

    Be sure to save your configuration after entering a new password. Care should be taken to remember the configured password. If the password is forgotten, the unit must be sent back to 3Com support to have the feature disabled. Introduction The OfficeConnect Remote 812 provides an extensive set of data filtering capabilities.

  • Page 64: Filtering Overview

    A filter then lets the packet pass through or discards it. OfficeConnect Remote The OfficeConnect Remote 812 provides an extensive set of data and call filtering 812 Filtering capabilities. The OfficeConnect Remote 812 supports the following filtering...

  • Page 65: Filter Types

    Filter IP-RIP IPX-SAP IPX-RIP OfficeConnect Remote 812 Filtering Capabilities Action Controls network access based on the protocol and source/destination address. IP filter rules allow filtering based on the source address, destination address, protocol type, source port, and port designation of the IP packet.

  • Page 66: Generic Filters

    Creating Filters Filters can be set one of two ways in the OfficeConnect Remote 812: Using CLI or Overview using the OfficeConnect Remote 812 Manager.

  • Page 67: Protocol Sections

    The remainder of the filter file is partitioned into protocol sections. Each protocol section has a descriptive header and contains the filter rules for that protocol. Protocol Sections A single filter file can contain all valid protocol sections in any order, but the sections cannot be repeated.
  • Page 68 6-30 6: M HAPTER ANUAL ETUP Field line # Verb Keyword Operator value The OR operation can be implemented by successive rules. For example, to accept a packet if the source address is xxx, or the destination address is yyy, the following rules are used: 1 ACCEPT src-addr=xxx;...

  • Page 69: Generic Filter Rule

    IPX-RIP IPX-SAP BR-ETH Generic Filter Rule The syntax for generic filters is slightly different than that for other filters: <line #> <verb> GENERIC => ORIGIN = <FRAME > DATA>/OFFSET = <# of bytes>/ LENGTH = <# of bytes>/MASK = < 0x Mask>/VALUE = <0x value> ORIGIN - The location in the packet to start the offset count.

  • Page 70: Ip Source And Destination Port Filtering Using Cli

    6-32 6: M HAPTER ANUAL ETUP 1 ACCEPT src-addr = 192.77.200.203/16; 999 DENY; The following rule example rejects IP packets with a source address: 144.133.20.1. 1 REJECT src-addr =144.133.20.1; The following rule example allows forwarding of only IP packets with source address 192.77.100.32 and destination address 201.128.11.34: 1 AND src-addr = 192.77.100.32;...

  • Page 71: Ipx Source And Destination Network Filtering Using Cli

    Creating Filters Using Command Line Interface 6-33 IPX Source and Destination Network Filtering Using CLI IPX network numbers must be specified as an network number no greater than 8-digits in hexadecimal format. The following rule example rejects IPX packets with a source address: 00-03-42-BF. IPX: 1 REJECT src-net = 00-03-42-BF;...

  • Page 72: Ipx Sap Packet Filtering Using Cli

    6-34 6: M HAPTER ANUAL ETUP IPX SAP Packet Filtering Using CLI SAP packets are used to identify the services and addresses of servers attached to the network. The responses are used to update a table in the router known as the Server Information Table.
  • Page 73 TFTP client <hostname or IP address>. To use CLI, see the CLI User’s Guide for instructions for connecting the console cable and communicating with the OfficeConnect Remote 812 using a terminal emulator like Microsoft’s HyperTerminal. 11 From a machine that has access to the same network as the router, use a TFTP command to transfer the filter file to the router FLASH memory.

  • Page 74: Assigning Filters

    (IP, IPX, or bridge) that the filter affects goes down and comes back up. This occurs when a network is disabled, the WAN connection goes down then up, or when the OfficeConnect Remote 812 is rebooted. Interfaces VC / Remote Site Profile A packet is prevented from entering the router, keeping potential intruders from attacking the unit itself.

  • Page 75: Applying A Filter To An Interface Using Cli

    Applying Filters Using CLI 6-37 Do not apply a filter to more than one interface or VC / remote site profile. Also, do not apply an input and an output filter to more than one Ethernet interface. Applying a Filter to an To configure an input or output filter on an interface, use the following CLI Interface Using CLI commands:...

  • Page 76: Managing Filters Using Cli

    6-38 6: M HAPTER ANUAL ETUP Managing Filters This section provides information about how to perform filter management tasks. Using CLI Displaying the Managed To display the list of managed filters, use the following command: Filter List Using CLI list filters <filter_name> The resulting display might look like this: Filter Name ip.fil...

  • Page 77: Deleting A Packet Filter Using Cli

    Deleting a Packet Filter To delete a specific packet filter, removing the filter file permanently from the Using CLI FLASH memory, use the CLI command delete filter <filter_name> Verifying Filter File The verify filter command must be used if you make changes to a filter file that has Syntax Using CLI already been added to the managed list and re-TFTP it back to the router’s FLASH memory (using the same filename).
  • Page 78 6-40 6: M HAPTER ANUAL ETUP...

  • Page 79: Aofficeconnect Remote 812 Sample Configuration

    IP LAN Network DHCP and DNS IPX LAN Network Bridge LAN Network Remote Sites Remember to save your configuration using the save all command before rebooting your OfficeConnect Remote 812 so that your changes will be written to permanent FLASH memory.

  • Page 80: Lan Ip Network Configuration

    DNS Server addresses are set to the OfficeConnect Remote 812’s LAN address. The DNS proxy is enabled and a Host statement is added for the OfficeConnect Remote 812 to simplify access from the Web Browser.

  • Page 81: Lan Ipx Network Configuration

    When a DNS request is received from a locally attached workstation, the OfficeConnect Remote 812 will search the local static table to find an entry. If one is not found, the request will be forwarded to a Remote DNS Server. The DNS Server is selected by comparing the domain name within the Request.

  • Page 82: Remote Site: Corporate Access

    A: OFFICECONNECT REMOTE 812 SAMPLE CONFIGURATION PPENDIX set vc Internet ip enable ipx disable bridging disable set vc Internet network_service ppp set vc Internet send_name internet-user send_password 1a2b3c set vc Internet atm vpi 0 vci 32 category_of_service unspecified pcr 0 set vc Internet address_selection negotiate set vc Internet local_ip_address 255.255.255.255...

  • Page 83: Cli Command Description

    CLI COMMAND DESCRIPTION CLI Commands Use the ADD command to define: Note that some parameters have default values. add bridge network <network_name> Defines a bridge network connection, so your LAN users can bridge to other LANs across the WAN. bridging is supported over the WAN. Note that routing takes precedence over bridging, so that bridging will not occur unless you disable routing for the protocols you wish to bridge.

  • Page 84: Add Filter

    B: CLI COMMAND DESCRIPTION PPENDIX secondary_address [ip_address] vc_name [vc_name] Adds the IP Address of a remote DNS Server for the specified Domain Name to the Domain Name Server Table. The first specified server is sent the IP Host Name to be resolved, first without, and then with the default domain name (see set dns for more information about the default domain name).

  • Page 85: Add Ip Network

    Parameters <IP_address > metric add ip network address [ip_net_address] <network_name> frame [ETHERNET_II | SNAP | LOOPBACK] { interface [eth:1] } { enabled [yes] } Adds an IP network to the list of IP networks available over the specified interface. Parameters <network_name>...

  • Page 86: Add Ipx Route

    B: CLI COMMAND DESCRIPTION PPENDIX Adds an IPX network to the list of IPX networks available over the specified interface. Parameters <network_name> Name of IPX network. A unique ASCII string of up to 32 characters; space address interface enabled frame add ipx route gateway [ipx_host_address] <ipx_net_address>...

  • Page 87: Add Ipx_Route Vc

    node type socket Below is a partial list of the IPX services available: add ipx_route vc ipx_net [ipx_address] <name> metric [hop_count] ticks [tick_number] Adds an IPX route for the a user over the WAN. Parameters <name> Ipx_net Metric ticks add ipx_service vc ipx_net [ipx_address] <name>...
  • Page 88 B: CLI COMMAND DESCRIPTION PPENDIX name [name] node [internal_node_number] socket [socket_number] type [service_type] Adds a static IPX service (for the WAN) to the IPX services table. You must supply the name, internal ipx network number, node number, socket, and type of service for this service.

  • Page 89: Add Nat Tcp Vc

    add nat tcp vc <user_name> Parameters <vc_name> private_address private_port public_port Note: Typically, the private and public port numbers are set to the same value. See “Configuring Network Address Translation’ in Chapter 6 for an example in which they differ. add nat udp vc <vc_name>...

  • Page 90: Add Network Service Example

    B: CLI COMMAND DESCRIPTION PPENDIX socket enabled data close_active_ connections The table below shows configurable parameters for TELNET services, which are specified with the data parameter. Ancillary Data Parameters auth login_prompt login_banner Add network service example: To configure a TELNET service to offer CLI access on port 23, doing authentication upon connect: add snmp community address [IP_address]...

  • Page 91: Add Syslog Loglevel [Loglevel

    Adds to the list of community name/IP address pairs that are allowed to receive SNMP traps. You can see the list of authorized users with the list snmp communities command. Parameters <name> address add syslog Adds an IP host to the list of IP hosts that will receive syslog entries. You can see <ip_name_or_addr>...

  • Page 92: Arp

    B-10 B: CLI COMMAND DESCRIPTION PPENDIX <ip_name_or_addr> Prints the IP address (and Media Access Control Address [MAC] if on a locally connected network) of a network node to a file or the CLI (default). If a node is not in the ARP cache, an ARP request will be sent out. Parameters <ip_name_or_addr>...

  • Page 93: Delete Ipx Route

    status. Be sure to use the disable ipx network command before deleting the network. delete ipx route Deletes an IPX route on the interface you specified with the add ipx route <ipx_net_address> command. The list ipx routes command displays the current IPX routes. delete ipx service type [service_type] <service_name>...

  • Page 94: Dial

    B-12 B: CLI COMMAND DESCRIPTION PPENDIX DIAL dial <vc_name> Generates an outgoing connection to the location specified by the vc name. You can use list vcs to list the defined vc profiles, and their current status. DISABLE disable bridge network Disables the bridge network you previously defined using the add bridge network <name>...

  • Page 95: Disable Network Service

    disable network service Disables a network service, such as TELNET or TFTP. If close_active_connection’ <service_name> was specified as TRUE in the add network_service command, then all active connections will be closed when the server is disabled. disable security_option Turns off SNMP access to the CLI. This prevents remote users from using SNMP snmp user_access and possibly damage the configuration.

  • Page 96: Enable Interface

    B-14 B: CLI COMMAND DESCRIPTION PPENDIX enable interface Enables the specified interface. Enabling an interface enables it to transmit and <interface_name> receive data. You can use list interfaces to see which interfaces are defined, and whether they are currently disabled. enable ip forwarding Enables all IP networks to forward (route) packets.

  • Page 97: Enable User

    CLI Commands B-15 By default the escape character is control-]. A TELNET user can change it using set escape in the TELNET program. enable user <user Enables a user to establish TELNET sessions for remote management. You must name> have previously added the user using the add user command, where enabled is the default.

  • Page 98: List

    B-16 B: CLI COMMAND DESCRIPTION PPENDIX LIST list active interfaces Displays the index, name, operational status, and administration status of all active interfaces. The output is the same as the list interfaces command, except non-active interfaces are not displayed. Inactive interfaces are interfaces with no current connections.

  • Page 99: List Facilities

    list facilities Displays the system facilities (processes) currently running, plus the default log level. The log level is the severity of error that facility will produce syslog entries for. You can change the log level using the set facility loglevel command. list filters Displays all the filter names in the filter table, which you previously defined using the add filter command.

  • Page 100: List Ip Networks

    B-18 B: CLI COMMAND DESCRIPTION PPENDIX list ip networks Displays all the IP networks you previously defined using the add ip network command. It also lists: list ip routes Displays all the statically defined IP routes that you previously defined using the add ip route command.

  • Page 101: List Lan Interfaces

    Displays PPP bundles and links. When multiple physical links are combined to run multilink PPP (RFC1717), the group of physical links is called a bundle. With the OfficeConnect Remote 812, only a single link is supported. This command displays: Bundle Index - index number of the physical interface in the bundle...

  • Page 102: List Snmp Communities Or List Snmp Trap_Communities

    B-20 B: CLI COMMAND DESCRIPTION PPENDIX list snmp communities These commands display the defined SNMP communities, which you previously or list snmp defined using the add snmp community command. SNMP trap_communities does trap_communities not list access. list syslog Displays IP addresses which get syslog entries from the system. See add syslog for more information, and delete syslog command to remove entries.

  • Page 103: Password

    login_required enables or disables CLI password protection. password The CLI password. It must consist of 1 to 8 alphanumeric (printable) characters, inclusive. PAUSED COMMANDS More (or CR) Quit PING More (or CR) ping <ip_name_or_addr> Sends an ICMP echo request to a remote IP host. A reply from the pinged address indicates success.

  • Page 104: Resolve

    B-22 B: CLI COMMAND DESCRIPTION PPENDIX RESOLVE resolve name Returns an IP Address for the specified host name by sending it to DNS for <IP_host_name> resolution. If the Domain Name has been specified using the set DNS command, it will also be resolved, otherwise you must specify it as part of the name. This command requires either a DNS local host entry (use add DNS host) or a DNS server (use add DNS server) to resolve the host name.

  • Page 105: Set Date

    Sets console parameters for CLI commands. Parameters history <numerical range> prompt <string> local_prompt <string> login_required [YES | NO] password <alphanumeric string> set date <date> Sets the system date, and leaves the time unchanged. Use show date to see what the current settings are. The format is: dd-mmm-yyyy. The month should be the first three characters of the month name.

  • Page 106: Set Dhcp Server

    B-24 B: CLI COMMAND DESCRIPTION PPENDIX Defines the address and characteristics of the secondary DHCP Server over the WAN that should receive our relayed DHCP requests. Parameters address enabled max_hops set dhcp server Defines the characteristics of the DHCP Server and defines the pool of addresses that this facility should administer.

  • Page 107: Set Facility Loglevel [Level

    number_retries <number> timeout <seconds> Sets the global parameters for DNS; both the local DNS hosts (list DNS host) and the remote DNS servers (list DNS servers). Parameters cache_size number_retries timeout set facility Sets the severity reporting level for a facility. The hosts that will receive the error <facility_name>...

  • Page 108: Set Ip Network

    B-26 B: CLI COMMAND DESCRIPTION PPENDIX set ip network <name> Sets the broadcast algorithm, the maximum size used for reassembling fragmenting packets, the RIP authentication string, RIP policies, and the routing protocol for the specified interface. The only required parameter for this command is <name>.

  • Page 109: Set Ip Routing

    RIP V2 Receive - Controls the receipt of RIP version 2 updates. When RIP version 1 is the selected routing protocol, this policy is enabled by default, which allows RIPV1 packets to be received. When RIP version 2 is selected, this policy is enabled by default, allowing RIPV2 packets to be received.

  • Page 110: Set Ipx Network

    B-28 B: CLI COMMAND DESCRIPTION PPENDIX metric_maximum_entries rip_flags Router_id set ipx network <network_name> Sets parameters for the specified IPX network. Parameters <network_name> delay_ticks diagnostics maximum_learning_ retries netbios netbios_name_cache netbios_cache_timer netbios_max_hops packet_maximum_size Most next hop entries the system table can maintain. Flags indicate at which level a RIP instance is disabled or configured.

  • Page 111: Set Ipx System

    rip_age_multiplier rip_packet_size rip_update_interval sap_age_multiplier sap_packet_size sap_nearest_replies sap_update_interval set ipx system priority [priority level] default_gateway [ipx_host_add] initial_pool_address [ipx_addr] pool_members [number] Sets parameters for dynamic IPX networks. Parameters priority default_gateway initial_pool_address Initial IPX address used to dynamically assign IPX network. pool_members set network service server_type [server_type] <admin_name>...

  • Page 112: Set Ppp Receive_Authentication [None | Pap | Chap | Either

    B-30 B: CLI COMMAND DESCRIPTION PPENDIX data close_active_connections set ppp Sets the type of inbound authentication to be used when establishing PPP receive_authentication connections. See RFC 1334 for details about CHAP and PAP. [NONE | PAP | CHAP | Options: EITHER] Parameters NONE...

  • Page 113: Set Syslog Loglevel [Level

    from managers on the network must match the list, which you can see using list snmp communities. Parameters name location contact transmit_ authentication_name set syslog <IP_address> Sets the error reporting level for syslog entries that will be sent to the specified IP loglevel [level ] address.
  • Page 114 B-32 B: CLI COMMAND DESCRIPTION PPENDIX Specifies parameters for VCs. Parameters <vc_name> address_ selection bridging default_route_ option Destination_ address end_time [ HH:MM:SS ] header_compression [none | TCPIP] idle_timeout [seconds] input_filter [filter_name] ip [enable | disable] ip_routing [listen | send | both | none] ip_source_validation [enable | disable] ipx [ enable | disable ] ipx_address [ ipx_addr ]...
  • Page 115 End_time This field is the end time for the virtual circuit. The expected format is HH:MM:SS. The Seconds field is optional. Header_ This determines whether you will have no compression on cell headers, or compression if you will use TCP/IP compression on the cell headers transmitted across this vc.

  • Page 116: Set Vc Atm

    B-34 B: CLI COMMAND DESCRIPTION PPENDIX rip_policies _update send_name send_password Type set vc <vc_name> atm Sets ATM parameters for VCs. Parameters <vc_name> Category_of_service Type SHOW Show commands display details about system entities. Allows VC to enable or disable RIP policies. See text on the preceding page for description of keywords.

  • Page 117: Show Atm Status

    Cell Delineation - Whether or not cell delineation is currently achieved. ILMI VPI - ILMI Path Identifier used for obtaining dynamic VC’s (Not supported OfficeConnect Remote 812 1.0). ILMI VCI - ILMI Channel Identifier used for obtaining dynamic VC’s (Not supported OfficeConnect Remote 812 1.0).

  • Page 118: Show Adsl Version

    B-36 B: CLI COMMAND DESCRIPTION PPENDIX show adsl version Fields: show bridge network <name> Parameters counters settings show bridge settings Displays the settings for all bridge networks. Use set bridge to modify these values. show call_log Displays the current call status of a specified VC. Fields: Actual Negotiated Downstream Baud Rate: Actual Negotiated Upstream Baud Rate:...

  • Page 119: Show Command

    Last Clearing reason: indicates why the call was cleared. Reasons for clearing include, line down, PPP timeout, Authentication error, Network configuration error, and termination initiated from the local and remote side. IP, IPX, and Bridge status: current status of each network layer. Configured - protocol is configured for this VC and the call is being initiated Not configured - The protocol is disabled on this VC.

  • Page 120: Show Dhcp Server Counters

    B-38 B: CLI COMMAND DESCRIPTION PPENDIX show dhcp server Displays various counters for the DHCP Server. counters show dhcp server Displays the current settings for the DHCP Server. settings Responses Received from Server - number of responses received from the server. Responses Received with Error - number of responses received that were in error.

  • Page 121: Show Dns Counters

    WINS #2 - IP address of the secondary WINS server that the DHCP server will utilize. show dns counters Displays various counters for DNS. Total Queries Received - sum of DNS queries received Total Response Sent - sum of DNS responses sent Responses from Local Processing - number of DNS responses from local.

  • Page 122: Show Icmp Counters

    B-40 B: CLI COMMAND DESCRIPTION PPENDIX show icmp counters Shows the Input and Output Counters for ICMP. Two types of ICMP messages - error and query messages - are sent to syslog hosts. ICMP COUNTERS OUTPUT COUNTERS INPUT COUNTERS Messages - ICMP packets received. Errors - ICMP packets received with errors.

  • Page 123: Show Interface Settings

    Address Mask Replies - sum of these messages sent show interface Displays counters for the specified interface. <interface_name> INPUT COUNTERS counters Octets - bytes received Ucast - Unicast packets received MultiCast - Multicast packets received BroadCast - broadcast packets received Discards - Number of inbound packets which were chosen to be discarded even though no errors had been detected to prevent their being deliverable to a higher-layer protocol.

  • Page 124: Show Ip Settings

    B-42 B: CLI COMMAND DESCRIPTION PPENDIX OUTPUT COUNTERS show ip settings Displays system wide IP information. show ip network Displays parameter settings for the specified IP network. See the set ip network <network_name> command on page 29 for additional details. settings Forwarded Packets - number of packets forwarded Bad Protocol - number of packets received with bad protocol...

  • Page 125: Output Counters

    IP RIP Authentication Key - text string used for RIPv2 authentication show ipx counters Displays counters for all IPX network activity. INPUT COUNTERS Total Packets Received - sum of IPX packets received Header Errors - sum of incoming packets discarded due to errors in their headers, including any IPX packet sized less than a minimum of 30 bytes Unknown Sockets - sum of incoming packets discarded because the destination socket was not open...

  • Page 126: Show Ipx Network Settings

    B-44 B: CLI COMMAND DESCRIPTION PPENDIX show ipx network Displays parameter settings for the specified IPX network. You can modify most of <network_name> these values using the set ipx network command. settings show ipx rip Displays information about RIP for IPX. Parameters settings counters...

  • Page 127: Show Ipx Sap

    show ipx sap Displays information about SAP for IPX. Parameters settings counters show ipx settings Displays settings for dynamic IPX networks. You can modify these values using the set ipx system command. show memory Displays System DRAM Memory usage. show network <name> Displays the configured settings for the specified network.

  • Page 128: Show Ppp On Interface Counters

    B-46 B: CLI COMMAND DESCRIPTION PPENDIX show ppp on interface Displays statistics for PPP running on the specified interface. <name> counters COUNTERS for PPP BUNDLE 1 COUNTERS for PPP LINK 1 - 5 show ppp on interface Displays the settings for PPP on the specified WAN interface. <name>...

  • Page 129: Settings For Ppp Bundle 1 Compression

    Remote MMRU - MRU the local entity uses when sending packets to remote PPP entity. Default: 1514 Local Endpoint Class - type of address used as the identifier Local Endpoint Length - maximum length of the local Endpoint Discriminator Address, default is 6 Local Endpoint ID - value of the local Endpoint Discriminator Address Remote Endpoint Class - value of the remote Endpoint Discriminator Class, which indicates the type of address being used as the identifier...

  • Page 130: Settings For Ppp Link 1 - 5 Authentication

    B-48 B: CLI COMMAND DESCRIPTION PPENDIX SETTINGS for PPP LINK 1 - 5 AUTHENTICATION show ppp settings Displays global settings for PPP. You can modify inbound authentication using the set ppp receive_authentication command. show security_option Displays status for SNMP User Access and Administration by Remote Users. You settings can modify the SNMP User Access using the enable or disable security_option snmp commands.

  • Page 131: Output Counters

    Trap PDUs - sum of SNMP Trap PDUs sent from SNMP Authentication Traps - ENABLED (default) or DISABLED System Descriptor - for example: 3Com OfficeConnect™ Remote 812 V1.0.0, Built on Oct 31 1998 at 11:33:05. Object ID - identifies this system to SNMP managers...

  • Page 132: Show Telnet

    B-50 B: CLI COMMAND DESCRIPTION PPENDIX show telnet Displays the status of the TELNET escape feature (ENABLED or DISABLED). It is set using the disable and enable TELNET escape commands. show tcp counters Displays system-wide TCP statistics. TCP COUNTERS show tcp settings Displays system-wide TCP settings.

  • Page 133: Show User Settings

    show user <name> Displays the parameters defined for the specified TELNET user. You can use list settings users to see which users are defined. show vc <vc_name> Displays the parameters defined for the specified VC. You can use list vc to see which virtual channels are defined.

  • Page 134: Set_Escape

    B-52 B: CLI COMMAND DESCRIPTION PPENDIX SYNC set_escape <string> Allows changing the TELNET escape character from ^] to something else. Control characters are specified using the carat character followed by another character. For example, to set the TELNET escape character to control - X, type set_escape status Displays the IP address of the remote host and the value of the TELNET escape character.

  • Page 135: Output Pause

    Output Pause The output will pause when there is more than 24 lines of output. Type ‘more’ (or press CR) to continue, or ‘quit’ to stop. Command Kill To discontinue the current command action, and flush any commands which have been typed ahead, use ^C (control-C).
  • Page 136 B-54 B: CLI COMMAND DESCRIPTION PPENDIX...
  • Page 137 Add command 2 address filtering, source and destination 26 Address Translation Overview 9 PAT 10 ADSL reset B-22 Advertisement Filters 27 Advertisement filters 27 Applying a Filter to an Interface Using CLI 37 Applying Filters Using CLI 36 Applying the Rules Using CLI 31 Assigning Filters 36 show status B-35 ATM Information, configuring 3...
  • Page 138 data filtering, Input and output 26 Data Filters 27 Date 23 Defaults 7 DHCP Configuration set DHCP mode B-23 set DHCP relay server1 B-23 set DHCP relay server2 B-24 set DHCP server B-24 Overview 11 Relay 13 Server 11 Statistics show dhcp server counters B-38 show dhcp server settings B-38 DHCP Relay...
  • Page 139 Input data filters 27 Interface 1, 3 Interface Filters 36 Interfaces disable interface B-12 disable link_traps interface B-12 enable interface B-14 list active interfaces B-16 list interfaces B-17 list lan interfaces B-19 Internet, viewing Web resources 1 IP 3, 1, 3, 4 Configuration add ip network B-3 add user B-9...
  • Page 140 IP Source and Destination Port Filtering Using CLI 32 Configuration add ipx network B-4 delete ipx network B-10 disable ipx network B-12 enable ipx network B-14 set ipx network B-28 show ipx network settings B-44 show ipx settings B-45 ROUTING show ipx RIP settings B-44 Routing add ipx route B-4...

  • Page 141: Instructions

    Output data filters 27 Package, what’s included 1 Packet filters 26 Password 2, 3 password B-21 Password Protection 25 password protection 2 Passwords add user B-9 set ppp receive_authentication B-30 PC 1 port filtering 26 Dial-in set ppp receive_authentication B-30 show ppp settings B-48 list ppp B-19 show ppp settings B-48...
  • Page 142 add snmp trap_community B-9 delete snmp community B-11 delete snmp trap_community B-11 disable link_traps interface B-12 disable security_option snmp user_access B-13 disable snmp authentication traps B-13 enable link_traps interface B-14 enable security_option snmp user_access B-14 enable snmp authentication traps B-14 list snmp communities B-20 System Administration Overview 23...
  • Page 143 The repaired or replaced item will be shipped to Customer, at the expense of 3Com, not later than thirty (30) days after receipt of the defective product by 3Com.
  • Page 144 This booklet is available from the U.S. Government Printing Office, Washington, D.C. 20402. Stock No. 004-000-00345-4. NOTE: In order to maintain compliance with the limits of a Class B digital device, 3Com requires that you use quality interface cables when connecting to this device. Changes or modifications not expressly approved by 3Com could void the user’s authority to operate this equipment.

Table of Contents