1. Manuals
  2. Brands
  3. ADC Manuals
  4. Gateway
  5. SG-1
  6. User manual

ADC SG-1 User Manual

Adc telecommunication user manual service gateway system sg-1
Hide thumbs
Table of Contents

Advertisement

Quick Links

Download this manual
SG-1 Service Gateway System
User Manual
Document Number: SG1-UM-8500-03

Advertisement

Table of Contents
loading

Summary of Contents for ADC SG-1

  • Page 1 SG-1 Service Gateway System User Manual Document Number: SG1-UM-8500-03...
  • Page 2 Contents herein are current as of the date of publication. ADC reserves the right to change the contents without prior notice. In no event shall ADC be liable for any damages resulting from loss of data, loss of use, or loss of profits, and ADC further disclaims any and all liability for indirect, incidental, special, consequential or other similar damages.

  • Page 3: Table Of Contents

    Site Preparations ... 1-2 Unpacking and Checking the Contents of Your Shipment ... 1-3 Required Tools and Equipment ... 1-5 Specific SG-1 Chassis Installation Requirements ... 1-5 Power Requirements ... 1-6 Blank Faceplate Requirement ... 1-6 Environmental Requirements ... 1-6 System Cabling Requirements ...
  • Page 4 L2TP and PPP Commands ... 7-40 DHCP Commands ... 7-48 IGMP Commands ... 7-51 Routing Command ... 7-52 Debug Commands ... 7-71 Appendix A: SG-1 Vendor-Specific Attributes ... A-1 Overview ... A-1 User Group ... A-6 dhcp group ... A-16 protocol group ... A-18 service group ...
  • Page 5 June 30, 2006 Appendix B: Redirection Server ... B-1 ORUP Commands ... B-3 Service Name Commands ... B-4 TFTP Commands ... B-5 Show Commands ... B-8 Ethernet Commands ... B-10 Default Gateway Commands ... B-12 Using Reload Command ... B-13 Write Commands ...
  • Page 6 Table of Contents June 30, 2006 SG1-UM-8500-03...

  • Page 7: List Of Figures

    List of Figures Figure 1-1. SG-1 10U ... 1-2 Figure 2-1. Straight-Through and Cross-Over Cable Pin-Outs ... 2-3 SG1-UM-8500-03...
  • Page 8 List of Figures June 30, 2006 viii SG1-UM-8500-03...
  • Page 9 Table 1-2. System Installation Notes ... 1-4 Table 1-3. Possible SG-1 Options ... 1-6 Table 2-1. RJ-45 Pin-Outs ... 2-3 Table 3-1. SG-1 Sub-Menus and Associated Commands ... 3-1 Table 3-2. General Commands ... 3-2 Table 3-3. Navigation Commands ... 3-3 Table 4-1.
  • Page 10 List of Tables June 30, 2006 SG1-UM-8500-03...

  • Page 11: About This Manual

    BOUT ANUAL NTRODUCTION This manual applies to ADC's Service Gateway (SG) system, hereafter referred to as "SG-1." This document includes an overview of the platform, installation procedures, and an SG-1 commands reference. RGANIZATION This manual includes the following chapters: Chapter...

  • Page 12: Conventions

    • Unpack each container and visually inspect the contents for signs of damage. If the equipment has been dam- aged in transit, immediately report the extent of damage to the transportation company and to ADC. Order replacement equipment, if necessary.

  • Page 13: Chapter 1: Overview

    The SG-1 can provide services over existing infrastructure, integrating smoothly with leading network access servers, RADIUS servers, databases, and billing systems. The SG-1 can be deployed to meet the requirements of Internet Service Providers (ISPs), Digital Subscriber Loop (DSL) providers, cable providers, or "hot spot" (802.11) wireless Local Area Network (LAN) providers.

  • Page 14: Before You Begin

    Chapter 1: Overview The SG-1 comprises two types of system chassis: 1U and 10U. The 1U chassis (or Mini System Chassis) has 2 service creation slots and 1 power supply slot built into the chassis. The 10U chassis (or Full-Size System Chassis)

  • Page 15: Unpacking And Checking The Contents Of Your Shipment

    June 30, 2006 • Identify any required procedures and tests. • On an equipment plan, make a preliminary decision that locates each of the SG-1 chassis that you plan to install. • Read this manual, whether you are replacing or adding a SG-1 chassis that is being installed.
  • Page 16 Chapter 1: Overview SG-1 Service Gateway System Chassis SG-1 Service Gateway System User Manual SG-1 Service Gateway System Installation Kit • Ten (10) 6-32 x 3/16 screws: • Two (2) 8-32 x 5/16 screws: • Eight (8) 12-24 x 3/8 screws: •...

  • Page 17: Required Tools And Equipment

    • Gigabit Ethernet card in slots 1 through 16 • ATM card in slots 1 through 16 • Rear I/O card on the rear of the chassis in slots 1 through 16 When selecting system components, consider future expansion of your SG-1 with items in options. SG1-UM-8500-03...

  • Page 18: Power Requirements

    ACEPLATE EQUIREMENT When slots in an SG-1 chassis do not contain a card, the slot must be covered with a blank faceplate to prevent personnel contact with back panel connectors and to maintain proper air flow within the chassis. NVIRONMENTAL EQUIREMENTS The SG-1 chassis has an ambient operating temperature range of +32 to +104°...
  • Page 19 The recommended cabling to ground the SG-1 chassis is 6 AWG (minimum) stranded copper wire. For the SG-1 chassis, the recommended cabling is 14 AWG (1.88 mm diameter) stranded copper or 14 AWG (1.628 mm diameter) solid wire to connect the DC terminal block to the facility provided power.
  • Page 20 Chapter 1: Overview June 30, 2006 SG1-UM-8500-03...

  • Page 21: Chapter 2: Installation

    Procedures marked with an ESD symbol require you to use the antistatic wrist strap to complete the step. ONNECTING THE OWER The SG-1 AC chassis (SG1-400-005) supports 110 to 240 Vac (50 to 60 Hz) power. Connect facility power to the chassis as described in the following section. SG1-UM-8500-03 Action...

  • Page 22: Installing Interface Cables

    This section provides procedures for installing the cabling for the network, subscriber, and management interfaces. Connecting Network Cards Connect the SG-1 system, through a network card interface, to an ATM backbone network, WAN, or LAN for a network uplink. Refer to the following sections to complete cabling for the network interface connectors for these network cards: •...
  • Page 23 June 30, 2006 MDI Pin Number MDI-X Pin Number case case a.NC = no connection. Figure 2-1 shows the pin-outs for straight-through and cross-connect cabling. MDI-X port (data network device) Transmit Receive MDI port (data network device) Receive Transmit Figure 2-1. Straight-Through and Cross-Over Cable Pin-Outs SG1-UM-8500-03 Table 2-1.

  • Page 24: Connecting The Craft Port Interface

    On each AC power supply, verify that the power LED lights green, indicating that the power supply is receiving power. NSTALLING ARDS AND Install SG-1 cards in the appropriate slots in the SG-1 chassis as indicated below. When slots do not have cards installed, use blank faceplates as indicated below. Installing Cards Note: SG-1 cards are inserted under power (hot inserted).

  • Page 25: Serial Cable

    Installing Blank Faceplates Use the blank faceplate identified in the Install blank faceplates in the SG-1 chassis to cover unused slots. Unused slots must be covered IMPORTANT to prevent personnel contact with back panel connectors under power and to maintain proper airflow within the chassis.
  • Page 26 Chapter 2: Installation June 30, 2006 SG1-UM-8500-03...
  • Page 27 OMMAND NTERFACE This chapter describes the SG-1 Command-Line Interface (CLI), the steps to access the CLI, and the steps to perform initial configuration using the CLI. VERVIEW The SG-1 Service Gateway System management interface is accessed using a CLI, which provides comprehensive SG-1 system management including configuration, performance monitoring, and system maintenance and administration.

  • Page 28: Chapter 3: Command-Line Interface (Cli)

    Exit Command Path Navigation For each command that provides configuration or management of a SG-1 system, a path is provided in the applicable section of the user document to help locate that command in the command-line interface structure. The path will be displayed in a box before the description of the command.

  • Page 29: Command-Line Editing

    June 30, 2006 OMMAND DITING The command-line interface provides a DOS-like environment for editing. It provides special key functions and other special functions developed for a VT100-type terminal. Note: Commands may not be recognized under some vendor's versions of Telnet. With Microsoft® Windows®...
  • Page 30 Chapter 3: Command-Line Interface (CLI) June 30, 2006 SG1-UM-8500-03...

  • Page 31: Connecting To The Craft Port

    OMMAND The initial step for managing the SG-1 Service Gateway System is to log on locally to an SCC or rear I/O port (if a rear I/O card option is used) and set an IP address to allow for remote management via a Telnet session. This IP address should place the SG-1 system on the same subnet as a router or other device to which it connects upstream through its Ethernet port.

  • Page 32: Setting The Ip Address

    Set the management card IP address, subnet mask, and default gateway (if a gateway exists) to enable communication with external networks and to enable access to the SG-1 CLI for Telnet sessions. To set a new IP address and subnet mask for the SCC, do the following.
  • Page 33 <ipaddr> The SCC IP address for interface in question. This address is set up to be on the same subnet as the Ethernet network to which the SG-1 system is attached (format xxx.xxx.xxx.xxx). <netmask> The subnet mask associated with the SCC IP address. This address is based on the Ethernet network to which the SG-1 system is attached (format xxx.xxx.xxx.xxx).

  • Page 34: Displaying The Ip Address

    0\1 192.168.0.1 255.255.255.0 mode auto ip default-gateway 192.168.0.253 … When the show configuration command is entered, A screen similar to the one above displays the SG-1 SCC card’s Ethernet port IP address, subnet mask, and default gateway (if applicable). June 30, 2006...

  • Page 35: Chapter 5: Using The Command Line Interface

    System (EMS). The EMS uses SNMP to modify and view the SG-1 MIB objects. OGGING In addition to logging on to an SG-1 locally through the Craft port, up to four additional remote users can log on through a Telnet session.

  • Page 36: What To Do Next

    Chapter 5: Using the Command Line Interface HAT TO From the command-line interface, use the procedures in this manual to (among other things): • Configure the network card ports, followed by services for the network connections, including Automatic Pro- tection Switching (APS) for the OC3 card. •...

  • Page 37: Chapter 6: First-Level Commands

    IRST EVEL OMMANDS This chapter describes the commands available at the first command level of each SCC. You can enter the entire command or the first two letters of most commands and command-line arguments. If there are two commands with the same first two letters, enter enough letters to differentiate between the two commands. The remaining letters can be displayed, if you wish to see the complete command, by pressing TAB after the first two letters.

  • Page 38: Showing A List Of Available Parameters

    Chapter 6: First-Level Commands HOWING A IST OF VAILABLE Using the GREP command The GREP command may be operated on any of the system commands. Usage system-command | grep "string" Example(s) Host> show users | grep "moshe" <cr> ANet moshe Host>...
  • Page 39 - copy-TFTP file from server - Ping command - Reload the system - Disconnect line - Traceroute command - Exit SG-1 management session - Modify running configuration - Show debug information - Display running configuration and status - Write running configuration...
  • Page 40 Chapter 6: First-Level Commands These commands are discussed below. Using the show version command Host> show version Enter show version to see version levels of hardware and software. Usage show version <software|hardware|pack> show version software <SCC> show version hardware <2> Parameter(s) <software|hardware|pack>...
  • Page 41 June 30, 2006 Example(s) Host> show version software Module Application ______ ___________ SCC-ATM155 10.0T2.05 Jun 08 2006 17:18:19 Host> Host> show version hardware Module Part No. _________ _____________________ Backplane SCC-ATM155 650-038 Rev 1 Host> Host> show version hardware 2 Service Creation Card with 256MByte memory module Module Part No.
  • Page 42 Chapter 6: First-Level Commands June 30, 2006 Displaying the configuration in NVRAM Host> show configuration Usage show configuration SG1-UM-8500-03...
  • Page 43 June 30, 2006 Example(s) Host> show configuration # version: 10.0T2.05 Jun 08 2006 17:25:51 interface ethernet 0\1 172.16.1.13 255.255.255.128 auto interface ethernet 0\2 172.16.13.193 255.255.255.128 auto password viewer Tw)wtx- password operator Tw)wtx- password superuser +5z!#r-MGA password technician Koz!# password pre-authentication +k(~#i+^#43\,6 def-service-auth ppp-auto multilink-mode multi-cage radius-server host 172.16.1.15 auth-port 1812 acct-port 1813 m priority 3...
  • Page 44 Chapter 6: First-Level Commands ip local-pool pool1 162.10.1.1 162.10.1.254 internal ip domain-name POPmaestro ip primary-name-server 62.90.133.233 ip secondary-name-server 0.0.0.0 ip default-gateway 172.16.1.1 ip tcp adjust-mss ip dhcp relay server Ethernet 0\2 debug watchdog-TimeValue 60 time-server-ip 0.0.0.0 error-level default 3 output-device console event-level default 5 output-device console trace default off sysLog-server-ip 192.168.1.1...
  • Page 45 June 30, 2006 Displaying Ethernet port configurations Host> show terminal Displaying Ethernet Port Statistics Host> show ethernet 0 \ 1 Use the show ethernet command to display the Ethernet port parameters for the Rear I/O Ethernet port. Note: When keying in the command, the backward slash ‘\’ is optional. The command will work with just a space between the slot number and port number.
  • Page 46 Chapter 6: First-Level Commands Example(s) Host> show ethernet 0 \ 1 Interface Slot 0 Port 1 is up, line protocol is up Hardware address is 008042195FB7 Internet address is 10.0.1.220 Mask is 255.255.255.0 Gateway IP address is 10.0.1.253 Duplex mode sensed by auto-negotiation is full-duplex Ethernet speed is 1 Gbps MTU 1500 bytes, BW 1000 Mbps 23778 packets input, 1997552 bytes...
  • Page 47 June 30, 2006 Displaying SONET port status Host> show port sonet Usage show port sonet Parameter(s) None. Example(s) Host> show port sonet ATM_SCC> show port sonet Slot Port Status ____ ______ ________ ATM_SCC> SG1-UM-8500-03 Capacity Redundant Redundant Conf Status ___________ ______ working active...
  • Page 48 Chapter 6: First-Level Commands Displaying ATM Port Status Host> show atm pvc Usage show atm pvc Parameter(s) None. Example(s) Host> show atm pvc Name ______ ____ ____ none test test test test next next next Host> 6-12 Slot Port Sub-port ____ ______ ________...
  • Page 49 June 30, 2006 Displaying User Status Host> show user Usage show [<cr>|<number>] Parameter(s) [<number>] The line number of the user to be viewed. Example(s) Host> show users Line Line User User Name Type Type ____ ____ ____ __________ status Total number of Network connected lines: 1 ANet (Analog source) lines: 0, INet (ISDN source) lines: 0 Eth (Ethernet source) lines: 1 ATM (ATM source) lines: 0...
  • Page 50 Chapter 6: First-Level Commands Host> show users 704 Line number: 702 Line type: ANet User name: 0_220 IP address: 10.220.3.191, IP pool name: 1 Next Hop: 10.0.1.253 Tunnel ID(in): 4798 Tunnel Session ID(in): 21182 LAC source IP Session duration/timeout: 00:00:39 / 17:59:21 Idle duration/timeout: 00:00:35 / 00:30:00 Slot: 0 Port: 1 Calling number: <N/A>...
  • Page 51 June 30, 2006 Displaying Routing Tables Host> show ip-route Use this command to display the configured routes. Usage show ip-route Parameter(s) None. Example(s) Host> show ip-route Network NetMask Address ___________ _____________ 155.226.21.0 255.255.255.0 155.226.22.128 255.255.255.128 0.0.0.0 Host> Displaying System Administrators Host>...
  • Page 52 Chapter 6: First-Level Commands Displaying System Parameters Host> show system Usage show system show system <load> Parameter(s) <load> Calculates the throughput through each interface in Mbps. Example(s) Host> show system Up-time: 1 Hours, 56 Minutes, 58 Seconds Total number of network incoming calls: 702 Total number of network connected calls: 702 Current number of Network connected lines: 1 ANet (Analog source) lines: 1, INet (ISDN source) lines: 0...
  • Page 53 June 30, 2006 Host> show system load Calculating load ... Total current connected users: 0 Total sessions' capacity: 2000 System load: 0% CPU usage: 1% Interface 0/2 Throughput [5 sec. Avg.]: 0.0 Mbit/s In, 0.0 Mbit/sec Out Total available throughput: 100 Mbit/s In, 100 Mbit/sec Out Traffic Usage: In 0.0%, Out 0.0% Interface 1/1 Throughput [6 sec.
  • Page 54 Chapter 6: First-Level Commands June 30, 2006 Displaying License Attributes Host> show license This command displays the system license information. Usage show license Parameter(s) None. 6-18 SG1-UM-8500-03...
  • Page 55 June 30, 2006 Example(s) Host> show license Working license : permanent Temp License Magic: T001001086 [CREATION] DATE=December 22 2005 16:03:57 [VERSION] MAJOR=10 [SN] SNSOURCE=1 SNNUM=1 SN1=6046838 [MAGIC] Magic String=C000000067 MaxAllowedDays=30 [OPTIONS] Allow Maximum 500 Users=off Allow Maximum 1000 Users=off Allow Maximum 2000 Users=on Allow Maximum 4000 Users=off Gigabit Ethernet=on ATM=on...
  • Page 56 Chapter 6: First-Level Commands Filter Redirection=on Location Based Service=on Service Selection=on Native IP=on Dynamic IP Changing=on Application Awareness=on MPLS=on Native IP Roaming=on Host> 6-20 June 30, 2006 SG1-UM-8500-03...
  • Page 57 June 30, 2006 Displaying VRRP attributes Host> show vrrp interface Use this command to display the configured Virtual Router Redundancy Protocol (VRRP) status on the specified interfaces. Usage show vrrp interface (<ethernet>|<vlan>) <slot number> <port number> <number> Parameter(s) (<ethernet>|<vlan>) The interface will be either an Ethernet or VLAN interface. <slot number>...
  • Page 58 Chapter 6: First-Level Commands For the backup: Host> show vrrp interface Ethernet 0\1 Ethernet 0\1 - Group 1 State is Backup Virtual IP address is 192.168.1.1 Master router is 192.168.1.2 Virtual MAC address is 00-00-5E-00-01-01 Advertisement interval is 1 seconds Priority 100 Preemption mode: on Host>...
  • Page 59 June 30, 2006 Example(s) Host> show ip-tunnel <cr> Tunnel IP Tunnel Endpoint --------------- ---------- -------- ------- ------ 192.168.1.1 remote 10.10.2.234 remote 10.10.1.20 remote Host> Host> show ip-tunnel ip-in-ip <cr> Tunnel IP Tunnel Endpoint --------------- ---------- -------- ------- ------ 10.10.2.234 remote 10.10.1.20 remote Host>...
  • Page 60 Chapter 6: First-Level Commands Displaying show mpls-labels commands Host> show mpls-labels It displays the incoming labels binding received from the neighbors and the out-going label binding distributed by the system. When no specific FEC is defined, the system shows all FECs. Usage Show mpls-labels <standard | vc>...
  • Page 61 June 30, 2006 VC in for Martini draft: Host> show labels vc in VC ID VC Type Group ID 0xc2010000 0xc2010000 VLAN 0xc2010001 0xc2010002 VC OUT for Martini draft: Host> show labels vc OUT VC ID VC Type Standard in specific FEC lable: Host>...
  • Page 62 Chapter 6: First-Level Commands Displaying show mpls l2transport vc commands Host> show mpls l2transport vc It shows confine redirected interface traffic through MPLS l2vpn tunnel based on Martini draft. Example(s) Host> show mpls l2transport vc Dest address VC ID 194.90.1.4 194.90.1.4 Displaying a list of available write commands Host>...
  • Page 63 June 30, 2006 Example(s) Host> write terminal # version: 10 May 21 2006 15:14:31 password viewer Tw)wtx- password operator Tw)wtx- password superuser +5z!#r-MGA password technician Koz!# password pre-authentication +k(~#i+^#43\,6 def-service-auth ppp-auto multilink-mode multi-cage radius-server key netix SNMP-server community get T}y||g SNMP-server community set T}y||g banner BannerString session-timeout 64800...
  • Page 64 [<IP address> | <license>] <ip address> <file name> Note: The SG-1 as a service creation machine uses a license mechanism, which enables the activation and deactivation of specific services. Use the [license] parameter to upgrade the current version of the license file running on the SCC.
  • Page 65 June 30, 2006 The destination ip address to ping. [-c <number>] The number of echoes. [-i <number>] The number of wait seconds. [-s <number>] The number of bytes. [atm] The ATM interface. [atm <slot number>] The ATM slot number (ATM uses slot 2). [atm <atm port number>] The ATM port number (either port 1 or port 2).
  • Page 66 Chapter 6: First-Level Commands Using the reload command to restart the system Host> reload non-graceful Use the reload non-graceful command to reset the system and reload the software. Using this command will terminate all sessions. Usage reload non-graceful Parameter(s) None. Example(s) Host>...
  • Page 67 June 30, 2006 Clearing Users Host> clear user A specific user can be disconnected from the SG-1 by writing the clear user command followed by its line number. Usage clear user <line number> Note: You can use the show user command to determine the list of connected users.
  • Page 68 Chapter 6: First-Level Commands Using the Traceroute Command Host> traceroute Use the traceroute command to track the route a packet takes to a network host. Usage traceroute <ip address> [-h <number>| -i <seconds>] Parameter(s) <ip address> The IP address to which the trace is to be performed. [ -h <number>] The maximum number of hops to be attempted (max = 30).
  • Page 69 June 30, 2006 Using the exit command Host> exit This command exits the user from the current configuration level. When used at the first level, the user is logged out of the session. Usage exit Parameter(s) None. Example(s) Host> (config-debug)# exit Host>...

  • Page 70: Using Debug Mode

    Chapter 6: First-Level Commands SING EBUG This section provides information on the commands and options available in debug mode. Switching to Debug Mode Host> debug Use the debug command at the first-level prompt (Host>) to switch the system to the second-level debug prompt: Host(debug)#.
  • Page 71 June 30, 2006 Chapter 6: First-Level Commands Using the show command in debug mode Host(debug)# show Use the show command to display memory, system, and fragmentation information. Usage show [memory | system |log-modules | statistics | arp] Parameter(s) [memory] Display memory allocation. [system] Display connection information.
  • Page 72 Chapter 6: First-Level Commands Example(s) Host(debug)# show statistics fragmentation Total number of packets that were fragmented: Total number of packets that were reassembled: Total number of upstream packets in which the MSS field was adjusted: Total number of downstream packets in which the MSS field was adjusted: Host(debug)# Host(debug)# show system Up-time: 4 Days, 20 Hours, 56 Minutes, 12 Seconds...
  • Page 73 June 30, 2006 Host(debug)# show log-modules Group Error Error Event Event Name User Route System Service NativeIP Interface L2TP SG1-UM-8500-03 Trace Chapter 6: First-Level Commands 6-37...
  • Page 74 Chapter 6: First-Level Commands Module Group Error Error Name Name User AbmFSM User AbmIpPool User AbmMlPPP User AbmRadius AbmService User AbmRadiusProxy AAA Service PPPWrapper PPPService NativeIP NativeIP L2TP L2TP Telnet User System System DataPoller System Interface Interface DHCP NativeIP Router Route OSPFv2 Route...
  • Page 75 June 30, 2006 show arp command This command displays the arp table information. Host(debug)# show arp Usage Show arp [<index><NextAddress>] Parameter(s) <index> The interface on which this entry’s equivalence is effective. Numbers are 1 to 65,000. <NextAddress> This is the IP address corresponding to the media-dependent “physical address. It should be a legal IP address. Example Host(debug)# show arp IfIndex...
  • Page 76 Chapter 6: First-Level Commands Clear arp command It clears the arp table entry (only dynamic entries), the clear arp specific, clears any entry except the static ones. Note: when deleting a non-volatile arp entry the system might re-creates it as a dynamic entry. Usage Clear arp [arp-specific <ifindex><NetAddress>] Parameter(s)
  • Page 77 June 30, 2006 Host(debug)# show memory Free memory: region 0: 9583616 region 1: 56918016 Largest memory region 0 buffer: 9583616 region 1 buffer: 56901632 pNA statistics: Number of classes: blocks: Buffer size blocks: Buffer size 32 - blocks: Buffer size 64 - blocks: Buffer size...
  • Page 78 Chapter 6: First-Level Commands Defining port-ethernet redundancy-mode command Host(debug)# port-ethernet redundancy-mode It immediately activates the Ethernet redundancy operation. Usage port-ethernet redundancy-mode <working slot>\<working port> [<auto | force- protecting | force-working>] Parameter(s) [working slot] It is the working, Ethernet interface slot number; legal values include 0 and 1. [working port] It is the working, Ethernet interface physical port number;...
  • Page 79 June 30, 2006 Checking the system RADIUS interface Host(debug)# radius-server check This command checks the system RADIUS interface, by authenticating user-name and password the same way the system authenticates a connected call (including retries and RADIUS redundancy). Usage radius-server check <user-name> <password> auth-type [<PAP>] Parameter(s) <user-name>...
  • Page 80 Chapter 6: First-Level Commands June 30, 2006 6-44 SG1-UM-8500-03...

  • Page 81: Chapter 7: Second Level Commands

    ECOND EVEL OMMANDS This chapter describes the primary commands available at the second command level. For additional second level commands, refer to Appendix B: Redirection Note: Some non-applicable information was removed from sample screens for ease of viewing. Using the configure command Use the configure terminal command at the first level prompt to switch the system to the second-level configuration prompt, Host(config)#.
  • Page 82 Chapter 7: Second Level Commands Example(s) Host> configure network 155.226.20.250 filename Loading file ... Preparing TFTP download...Done. Starting the TFTP download...completed(downloaded size is Converting file ... File loaded successfully Host> Host> configure terminal Host(config)# June 30, 2006 SG1-UM-8500-03...

  • Page 83: Banner Command

    You may create a greeting message or banner, to be displayed on the user's terminal when they log in. The banner may be a string of up to 32 alphanumeric characters. To set "Welcome to SG-1" as a banner: At the second level command prompt, type: banner Welcome to SG-1 (then press ENTER). Configuring Banner command Host(config)# banner command Usage Host(config)# banner <Alpha numeric string>...
  • Page 84 Chapter 7: Second Level Commands <ethernet mode> The operating mode of the interface to be configured (see (mtu) The maximum transmission unit. Select either: • 1500 (default) • 1544 Example 1 Host(config)# interface ethernet 0 \ 2 12.3.66.211 255.255.255.0 auto mtu 1500 interface ethernet 0 \ 2 12.3.66.211 255.255.255.0 auto mtu 1500 Note: The system should refuse to assign an address to an Ethernet interface which is in the subnet of the...
  • Page 85 June 30, 2006 Value 10 H 10 F 100 H 100 F 1000 H 1000 F auto Host(config)# no interface Ethernet Usage no interface Ethernet <slot number>\<port number> Parameter(s) <slot number> This is the interface slot number you want to configure. <port number>...
  • Page 86 Chapter 7: Second Level Commands Configuring Ethernet Redundancy The system supports redundancy between 0\1 and 0\2 ethernet interface or between 1\1 or 1\2 Ethernet interface. The system, automatically while detects a malfunction in the working Ethernet (for example link down), switches to the protecting (redundant) Ethernet interface.
  • Page 87 June 30, 2006 Example(s) Host (config) # port-ethernet redundancy-enable 1\1 1\2 non-revertive Note: The system should refuse to enable Ethernet redundancy mode in case the protecting Ethernet interface is configured. It should indicate such kind of command failure to the system log and to the user interface (telnet/console).

  • Page 88: Loopback Commands

    Chapter 7: Second Level Commands June 30, 2006 OOPBACK OMMANDS Configuring interface loopback Host(config)# interface loopback This command enables the administrator to either add or change the loopback interface. Note: The loopback interface can be part of the IP route lines/commands. Usage interface loopback <interface number>...

  • Page 89: Vlan Commands

    (for example, by PVC, type of user, or primary application). VLANs are likely to be used with Gigabit Ethernet networks. The SG-1 supports virtual LAN as specified in the IEEE 802.1Q standard. It allows the LAN to be divided into several, disparate LANs and to serve each virtual LAN differently. The SG-1 handles both incoming and outgoing VLAN traffic and supports the full VLAN range (2 - 4095).
  • Page 90 This is the start QinQ VLAN ID; valid number range is 2 to 4095. <range> This is the QinQ VLAN range; valid number range is 1 to 4095. Example(s) Host(config)# interface vlan 1\2\32 192.168.3.4 255.255.255.0 name ADC-R Host(config)# interface vlan 1\2\233 24.36.1.12 255.255.255.0 name Kenvelo Host(config)# interface vlan 3 1\1 192.168.1.1 Note: The system should refuse the VLAN command when wrong slot\port parameters are configured.

  • Page 91: Authentication Commands

    June 30, 2006 Using no interface VLAN command Host(config)# no interface vlan This command deletes a VLAN definition for the Ethernet interface. Usage no interface vlan <slot number> \ <port number> < id> Parameter(s) <slot number> This is the slot number of the physical card. <port number>...
  • Page 92 Chapter 7: Second Level Commands Setting the default-service authentication mode Host(config)# def-service-auth When using authentication by username and password two protocols are available: • PAP (Password Authentication Protocol)–the most basic form of authentication. In PAP, a user's name and password are transmitted over the network and compared to a table of name-password pairs. The main disad- vantage of PAP is that both the username and password are transmitted without encryption.
  • Page 93 Changing domain authentication settings Host(config)# domain-authentication In a SG-1 system, virtual private tunnels (VPNs) are created upon RADIUS request. The tunneling service is always enabled within the SG-1 (there is no configuration command for turning it on or off). The domain-authentication configuration command is used to enable and disable authentication of the user's domain.

  • Page 94: Atm Commands

    Chapter 7: Second Level Commands Example 1: Host(config)# authentication web-auth-method CHAP <cr> Host(config)# end <cr> Host # write terminal. authentication web-auth-method CHAP The “no” command set the system web authentication mode to PAP. Host(config)# no authentication web-auth-method Example 2: Host(config)# no authentication web-auth-method <cr> Host(config)# end <cr>...
  • Page 95 June 30, 2006 Usage port sonet <slot> \ <port> type (OC3c|STM1) Parameter(s) <slot> The line card slot to be configured. Use the value 2 to indicate the configuration of the SONET/SDH port. <port> The line card port to be configured (either 1 or 2). (OC3c|STM) The type of physical interface: •...
  • Page 96 Chapter 7: Second Level Commands <protect port> The port number to be designated as the protect port (valid value = 1 or 2). [SFBER (value)] Signal Fail Bit Error Rate Threshold. Valid values = 3 to 12, Default = 3. [SDBER (value)] Signal Degrade Bit Error Rate Threshold.
  • Page 97 June 30, 2006 [loopback] Places a logical loopback on the bridge-route interface. <loopback number> Numeric value assigned to the bridge-route loopback. [mtu] Used to set the interface's Maximum Transmission Unit (MTU) (valid values are 1500 or 1544). Example(s) Host(config)# interface atm 2 \ 1 \ 1 type bridge-route point-to-point ip 192.168.10.1 255.255.255.0 mtu 1544 Added item Host(config)#...
  • Page 98 Chapter 7: Second Level Commands Using the no pppoa enable command Host(Config)# no pppoa enable interface The no pppoa enable interface command disables PPPoA negotiation for a specific interface in the system. Usage No pppoa enable interface <slot number>\<port number\[sub-interface number]> For parameters see Table 7-6.
  • Page 99 June 30, 2006 Table 7-6. interface atm command parameters Parameter <slot > <port number> <sub-interface number> <ppp | routed-bridge | routed routed-bridge- ppp> point-to-point | point-to-multipoint <ip address> <mask> <loopback interface number> <1500 | 1544> Example(s) Host(config)# interface atm 2\1\1 <cr> Host(config)# interface atm 2\1\1 type routed point-to-point ip 192.168.1.2 255.255.255.0 <cr>...
  • Page 100 Chapter 7: Second Level Commands June 30, 2006 Configuring a single PVC Host(config)# atm pvc This command creates a permanent virtual circuit (PVC) on an ATM interface. Usage atm pvc <vpi> <vci> <slot> <port> <sub-interface> [name <pvc name>] | [ OAM <on|off|on-cc>...
  • Page 101 June 30, 2006 [OAM] Operation And Management mode • on - Enable OAM mode • off - Disable OAM mode • on-cc - Enable OAM mode with continuity check Example(s) Host(config)# atm pvc 0 \ 60 \ 2 \ 1 \ 1 Added item Host(config)# Configuring a range of PVC’s...

  • Page 102: Radius Commands

    Host(config)# atm pvc range 2 34 38 1 \ 2 \ 65 name arttt oam on ubr 120 RADIUS C OMMANDS Configuring the RADIUS server in the SG-1 configuration Host(config)# radius-server Each RADIUS server should be configured in the system. The radius-server command is used to configure the RADIUS server settings.
  • Page 103 Host(config)# radius-proxy client The proxy RADIUS capability is part of the Native IP support in the SG-1. It enables the SG-1 to serve users being terminated by different access devices (such as, AP or GGSN), and to enable for them the SG-1 services. The SG-1 acts as a RADIUS server to the access devices and proxy the RADIUS requests to its configured RADIUS server.
  • Page 104 Using the service cache command Host(config)# service cache The SG-1 is able to cache each received service's information based on a configured aging time. Operating this capability via the service cache command causes the system to authenticate a service once during the specified aging period.

  • Page 105: Access List Commands

    Host(config)# access list An access list is a mechanism that filters the requests to the SG-1, by reading the source IP address and its net mask. This mechanism allows you to grant certain workstations access to a SG-1 for administrative purposes. The access list command is used to create and modify access lists.
  • Page 106 There are two options for the first command line argument following the access list command: • Telnet-permit - to allow Telnet access to a SG-1 from a certain IP address. If no Telnet access list exists, the IP address is added to it. This command must be followed by the IP address.
  • Page 107 June 30, 2006 Parameter(s) <source ip address> This is the allowed network source IP; it must be a legal network IP address. <source mask> This is the allowed network source mask; it must be a legal network IP address. Example(s) Host(config)# access-list native-ip 192.168.1.0 Using the no access-list native-ip command Host(congfig)# no access-list native-ip...

  • Page 108: Snmp Commands

    Chapter 7: Second Level Commands Example(s) Note: In the following example the whole network 192.168.1.0 is configured as native-ip potential users except for 192.168.1.1, which is probably a server in this network and not a potential user. Host(config)# access-list native-ip 192.168.1.0 255.255.255.0 Host(config)# access-list native-ip-pass-through 192.168.1.1 255.255.255.255 Note: In order to activate the native-ip-pass-through, IP forward command should be defined.
  • Page 109 June 30, 2006 When using the group parameter, there are three options for the first command line argument: • aaa–Major alarm. Any defined RADIUS server marked in the system DB as dead (inactive) will be reported via SNMP. Any defined RADIUS server marked in the system as ALIVE after being DEAD sends trap indication and log indication.

  • Page 110: Tunnel Commands

    Chapter 7: Second Level Commands UNNEL COMMANDS Host(config)# interface tunnel This command defines a remote (the tunnel initiator) tunnel endpoint IP address, which allowed opening ip-in-ip or GRE tunnels to the system. The local tunnel endpoint ip address (tunnel destination) should be one of the system IP addresses (Ethernet, VLAN, Loopback, or ATM).
  • Page 111 June 30, 2006 Note: The system should refuse changing a tunnel interface parameter that is already carrying user data. Host(config)# interface tunnel 1 192.168.0.1 10.0.1.7 ip-in-ip Operation error: The tunnel interface parameters cannot be changed since users already using it. You should delete it first The tunnel interface should appear in the ifTable with type tunnel (131) and should include the standard interface information.
  • Page 112 Chapter 7: Second Level Commands Example(s) Host(config)# no interface tunnel 1 Note: The system should refuse the interface tunnel command when an existing interface already includes the same remote tunnel endpoint IP address, local tunnel IP address, and tunnel type. Host(config)# interface tunnel 1 192.168.0.1 10.0.1.7 ip-in-ip Operation error: A tunnel interface with the same parameters already configured...

  • Page 113: Timeouts Commands

    The idle timeout is used to disconnect a connection without any traffic from the user to the network (upstream). The user will be disconnected if the SG-1 doesn't detect any data traffic after the specified number of seconds. idle-timeout command Usage idle-timeout <number>...

  • Page 114: Native Ip Commands

    Chapter 7: Second Level Commands IP C ATIVE OMMANDS Using the native-ip dhcp pre-auth-mode command Host(config)# native-ip dhcp pre-auth-mode The system should enable upon configuration to pre-authenticate a Native IP session, which uses DHCP (DHCP discover) for IP allocation based on its MAC address. A successful pre-authentication will forward the DHCP discover message to the DHCP server.
  • Page 115 June 30, 2006 Example(s) Host(config)# native-ip def-service-auth werbcvxsaq Using the native-ip enable command Host(config)# native-ip enable interface This command enables native ip service on a specific interface. It enables the native IP for a specific VLAN or interface. Phase 1 should include Ethernet interface and VLAN-Id only. Phase 2 should include interface atm.
  • Page 116 Chapter 7: Second Level Commands Example(s) Host(config)# native-ip enable Host(config)# native-ip enable Host(config)# native-ip enable The system should disable the native-ip enable command in case Native IP capability is not licensed (set to off). The system should report an operation error with the following message format: Host(config)# native-ip enable interface 0\2 Operation Error: License is required...
  • Page 117 June 30, 2006 Using native-ip realm command Host(config)# native-ip realm The native-ip realm command specifies the realm string the system should use in the native-ip authenticating, accounting, and service operations. The realm should be added to the user-name field in all native-ip user's authentication and accounting radius messages, except for web-authentication, regardless of its native-ip type (DHCP, Proxy radius, Plain IP).
  • Page 118 Chapter 7: Second Level Commands Parameter(s) <slot\port> The Ethernet slot number (valid number range is 0 to 2). The Ethernet port number (1 or 2). <slot\port\sub-interface> The Ethernet slot number (valid number range is 0 to 2), The Ethernet port number (1 or 2), and VLAN identifier, sub-interface (valid number range is 1 to 4095).

  • Page 119: Maximum Segment Size (Mss) Changing

    June 30, 2006 AXIMUM EGMENT Using the ip tcp adjust-mss command Host(config)# ip tcp adjust-mss The system, when configured so that ip tcp adjust-mss is set to on, should adjust the TCP MSS option value on SYN packets to 1436 (for MSS option larger than 1436) in both directions for each connected user. (Note: When the mtu is configured to 1544, there is no need to adjust the mss.) •...

  • Page 120: L2Tp And Ppp Commands

    Chapter 7: Second Level Commands L2TP PPP C OMMANDS The L2TP commands are used for configuring the L2tp source-address. When the l2tp source-address is configured, the system sets the l2tp source address in the response packets regardless of the original l2tp LAC request.
  • Page 121 Host(config)# tunnel-server Each IAS (Internet Access Switch) which will send its users to the SG-1 must be configured in the SG-1 (or several IAS which are in the same Mask and use the same tunnel password). The tunnel-server host command is used to configure the tunnel server (IAS) settings.
  • Page 122 (in this scenario there is only one SCC card). • none–no Multi link operation is allowed in the SG-1. All the PPP links port limit definitions are 1. This means the MLP protocol negotiation is allowed (MLP user), but only one link is available.
  • Page 123 June 30, 2006 Parameter(s) <pool_name> The IP pool name (an alpha-numeric string). <starting_IP> Starting IP address. <last_IP> Ending IP address. <internal | external> This fourth command-line argument is optional and has two options: • internal–For internal use only. • external–Only when specifically requested. For users receiving their IP addresses from the RADIUS using the Token-Pool RADIUS attribute.
  • Page 124 Chapter 7: Second Level Commands Using the lcp echo command Host(config)# lcp echo This command configures the LCP echo behavior in all PPP sessions. • The system default LCP configuration is off. • The system LCP echo retries value is 3. •...
  • Page 125 June 30, 2006 Using the service internal command Host(config)# service internal The system default internal service is Framed-PPP. When configured to the default value, write terminal does not present the configuration line. Usage service internal <Framed-PPP | VPDN <tunnel id> <l2tp tunnel password> <Primary IP address>...
  • Page 126 This feature of the SG-1, provides the ability to connect a network of hosts over a simple bridging access device to a remote Access Concentrator. With this model, each host utilizes its own PPP stack and the user is presented with a familiar user interface.
  • Page 127 2.SG-1 as xDSL aggregator using Gigabit Ethernet network In this scenario, a PPP session is initiated on an Ethernet-connected client through a standard ADSL modem. The session is transported over the Ethernet and terminated by the SG-1, which is acting as an xDSL aggregator.

  • Page 128: Dhcp Commands

    The SG-1 enables in this feature the DHCP relay capabilities. It acts as a DHCP relay agent and forwards the DHCP request to a DHCP server, which handles the IP-addresses allocation for the connected peers.
  • Page 129 June 30, 2006 Using the ip dhcp relay information option command Host(config)# ip dhcp relay information option The ip dhcp relay information option command enables the system to insert a DHCP relay agent information option in forwarded BOOT REQUEST messages to the DHCP server. Usage ip dhcp relay information option <Ethernet | VLAN | ATM | default>...
  • Page 130 DHCP Agent ID Overwrite When configured, the SG-1 should overwrite the DHCP agent ID and the server identifier to its ID (IP address) in the DHCP reply messages. The system does not overwrite the DHCP agent ID in its default behavior.

  • Page 131: Igmp Commands

    June 30, 2006 IGMP C OMMANDS Using the ip igmp proxy command Host(config)# ip igmp proxy upstream-interface The ip igmp proxy upstream-interface command enables the IGMP Proxy capabilities on a specific upstream interface. When the upstream interface is not configured, the system does not support the IGMP proxy capability. Additionally, the command enables you to add or change the IGMP Proxy upstream interface.

  • Page 132: Routing Command

    Using the IP route command Host(config)# ip route The ip route command is used for establishing static routes. A static route is appropriate when the SG-1 is not dynamically building the routes to the destinations. Usage ip route <[nip <destination prefix> <destination prefix mask> <forwarding router's>] | [<destination prefix>...
  • Page 133 June 30, 2006 Parameter <loopback interface> <tunnel interface ip> Example(s) Add an IP route: Host(config)#ip route 192.168.3.0 255.255.255.0 194.90.1.12 <cr> Host(config)# end Host> write terminal . . . ip route 192.168.3.0 255.255.255.0 194.90.1.12 . . . Modify an Existing IP route: Host(config)# ip route 192.168.3.0 255.255.255.0 194.90.1.22 <cr>...
  • Page 134 Chapter 7: Second Level Commands Route network 192.168.4.0 to Loopback interface 2: Host(config)# ip route 192.168.4.0 255.255.255.0 194.90.1.22 loopback 3 <cr> Host(config)# end Host> write terminal ip route 192.168.4.0 255.255.255.0 194.90.1.22 loopback 3 Route network 192.168.4.0 to Ethernet interface 0\2: Host(config)# ip route 192.168.4.0 255.255.255.0 ethernet 0\2 <cr>...
  • Page 135 June 30, 2006 Host(config)# ip route 192.168.1.0. 255.255.255.0 192.168.1.2 Deleting an IP route line Host(config)# no ip route This command deletes the existing route. Usage no ip route [nip] <destination prefix> <network mask> <next-hop IP-address> Parameter(s) Table 7-15. no ip route command parameters Parameter [nip] <destination prefix>...
  • Page 136 Chapter 7: Second Level Commands Usage no ip default-gateway Example(s) Host(config)# no ip default-gateway When assigning a default-gateway that is not in the subnet of the primary or secondary Ethernet interfaces, the system provides a warning. Host(config)# ip default-gateway 194.90.2.1 Operation Warning: The default gateway is out of subnet Using the router command...
  • Page 137 June 30, 2006 Example(s) Host(config)# router id 10.33.21.88 Host(config)# no router This command disables the system default routing process. Usage no router Using the IP rip authentication key command Host(config)# ip rip authentication key The ip rip command is located beneath the "configure terminal" menu. It is used to define the password for the Router Information Protocol (RIP) authentication process.
  • Page 138 Chapter 7: Second Level Commands Example(s) Host(config)# ip ospf interface Ethernet 1 \ 2 area 12.3.5.6 Host(config)# ip ospf interface ATM 2 \ 1 \ 32 area 12.5.45.8 Host(config)# ip ospf interface VLAN 1 \ 2 \ 33 area 44.55.2.15 Using the no ip ospf interface command Host(config)# no ip ospf interface This command disables OSPF on an interface.
  • Page 139 June 30, 2006 Using the ip ospf interface dead-interval command Host(config)# ip ospf interface ... dead-interval The command specifies the number of seconds that a device's hello packets must not have been seen before its neighbor declares the OSPF router down. Usage ip ospf interface <Ethernet | VLAN | ATM>...
  • Page 140 Chapter 7: Second Level Commands Parameter(s) <simple-pass | message-digest | null> This is the authentication type specified for neighboring OSPF routers. Options include: • simple-pass–using simple password authentication; to configure see tion-key command” on page • message-digest–using Message Digest 5 (MD5) authentication; to configure see message-digest-key command”...
  • Page 141 June 30, 2006 Usage no ip ospf interface <Ethernet | VLAN | ATM> <slot number>\<port number> [\<sub-interface>] authentication-key For parameters and examples, refer to Using the ip ospf interface message-digest-key command Host(config)# no ip ospf interface ... message-digest-key This command configures the OSPF MD5 (Message Digest 5) authentication parameters. Usage ip ospf interface <Ethernet | VLAN | ATM>...
  • Page 142 Chapter 7: Second Level Commands Using the ip ospf area stub command Host(config)# ip ospf area This command configures an OSPF area as a stub area. The system default stubbing option is no-stub and the system default advertisement behavior is summary. Usage ip ospf area <area-id>...
  • Page 143 June 30, 2006 Using the no ip ospf advertise network command Host(config)# no ip ospf advertise network This command deletes advertisement of a network. Usage no ip ospf advertise network <area-id> <Network> For parameters and examples, refer to Using the mpls ip interface command Host(config)# mpls ip interface This command enables MPLS forwarding of Ipv4 packets for a specific system interface.
  • Page 144 Chapter 7: Second Level Commands Parameter(s) <slot number> This is the SCC slot number; valid number range is 0 to 2. <port number> This is the SCC port number; valid values are 1 or 2. <sub-interface> This is the SCC for ATM sub-interface number; valid number range is 1 to 4095. Example(s) Host(config)# no mpls ip Ethernet 0\1 Using the mpls l2transport interface command...
  • Page 145 June 30, 2006 Example 1: create mpls L2 VPN based on Martini draft for redirection Host(config)# mpls ip Ethernet 0\1 Host(config)# mpls l2transport interface 194.90.1.4 Example 2: create mpls L2 VPN based on Martini draft for ternination Host(config)# mpls ip Ethernet 0\1 Host(config)# mpls l2transport interface 194.90.1.4 Using the no mpls l2transport interface command Host(config)# no mpls l2transport interface...
  • Page 146 Chapter 7: Second Level Commands <vc-id> This assigns a VC ID to the virtual circuit between the system and the remote PE. Example: Route VLAN interface through an MPLS L2 VPN based on Martini draft Host(config)# mpls ip Ethernet 0\1 Host(config)# mpls l2transport interface 194.90.1.4 200 Host(config)# mpls l2transport route interface VLAN 0\1\100 194.90.1.4 200 Note:...
  • Page 147 June 30, 2006 Using mpls ip default-route command Host(config)# mpls ip default-route It enables the distribution of labels associated with the IP default route. Usage mpls ip default-route Example Host(config)# mpls ip default-route Using no mpls ip default-route command Host(config)# no mpls ip default-route It disables the distribution of labels associated with the IP default route.
  • Page 148 Chapter 7: Second Level Commands Parameter <Ethernet | VLAN> <slot number> <port number> <VLAN ID> <number> IP address <priority value> <on | off> The following examples use two SCCs (Service Creation Cards): Example 1 (SCC1 configuration): Host(config)# vrrp interface Ethernet 0\1 1 ip 192.168.1.3 priority 200 Example 2 (SCC2 configuration): Host(config)# vrrp interface Ethernet 0\1 1 ip 192.168.1.3 priority 100 The following two examples show the configuration with preemption capabilities:...
  • Page 149 June 30, 2006 Example 1 (SCC1 configuration): Host(config)# vrrp interface Ethernet 0\1 1 ip 192.168.1.100 priority 200 preempt- mode on Host(config)# vrrp interface Ethernet 0\1 2 ip 192.168.1.101 priority 201 preempt- mode on Example 2 (SCC2 configuration): Host(config)# vrrp interface Ethernet 0\1 1 ip 192.168.1.101 priority 200 preempt- mode on Host(config)# vrrp interface Ethernet 0\1 2 ip 192.168.1.100 priority 201 preempt- mode on...
  • Page 150 Chapter 7: Second Level Commands Using the no vrrp command Host(config)# no vrrp interface This command deletes the virtual router configuration in the system. Usage no vrrp interface <Ethernet | VLAN> <slot number> \ <port number> [\ <VLAN ID>] <number> Parameter(s) Parameter <Ethernet | VLAN>...

  • Page 151: Debug Commands

    Host(config-debug)#. This indicates that the user is now in the second level debug mode and has access to the commands in the debug menu. There are three types of messages sent by the POPmaestro/SG-1 system to its logger. They are: Error Log, Event Log and Trace Log.
  • Page 152 Chapter 7: Second Level Commands Configure time server (config-debug)# time-server-ip Usage (config-debug)# time-server-ip <IP address> Parameter <IP address> It is timer host IP address, legal IP address. Example (config-debug)# time-server-ip 10.6.1.71 (cr) (config-debug)# Configure error level commands (config-debug)# error-level (config-debug)# error-level < default | Module | Group> Parameters <default>...
  • Page 153 June 30, 2006 Example (config-debug)# error-level default (config-debug)# error-level default [ set-all <number>] Parameters set-all Will set all modules back to default <number> value of default maximum error level , numbers are …. Examples (config-debug)# error-level default 4 output-device console (config-debug)# (config-debug)# error-level default 3 output-device console (config-debug)#...
  • Page 154 Chapter 7: Second Level Commands Debug modules (config-debug)# error-level Module <cr> - ABM - AbmFSM - AbmIpPool - AbmMlPPP - AbmRadius - AbmService - AbmRadiusProxy - EDS - PPP - PPPWrapper - PPPService - NativeIP - L2TP - Telnet - CPM - System - DataPoller - BSP...
  • Page 155 June 30, 2006 Examples (config-debug)# error-level Module ABM default (cr) (config-debug)# (config-debug)# error-level Module ABM max 3 (cr) (config-debug)# Usage (config-debug)# error-level Group AAA < max | min | default > < max > Maximum level < min > Minimum level <...
  • Page 156 Chapter 7: Second Level Commands Examples (config-debug)# event-level default 2 output-device console (cr) (config-debug)# (config-debug)# error-level default set-all (cr) (config-debug)# (config-debug)# event-level default set-all (cr) (config-debug)# Trace commands (config-debug)# trace Usage (config-debug)# trace < <default < set-all | off | on > | Module | Group >> Parameters <default>...
  • Page 157 June 30, 2006 Examples (config-debug)# trace default on (cr) (config-debug)# (config-debug)# trace default off (cr) (config-debug)# Configure (config-debug)# sysLog-server-ip Usage (config-debug)# sysLog-server-ip <IP address> Parameter <IP address > It is the SysLogger IP address. (config-debug)# exit Usage (config-debug)# exit This command will cause exit current configuration level. Example (config-debug)# exit <cr>...
  • Page 158 Chapter 7: Second Level Commands Usage (config-debug)# end This command will cause Return to first configuration level. Example (config-debug)# end <cr> (config)# 7-78 June 30, 2006 SG1-UM-8500-03...

  • Page 159: Overview

    SG-1 V ENDOR PECIFIC This appendix describes the vendor-specific attributes related to SG-1 EDS architecture. VERVIEW The vendor-specific attributes are based on RFC-2865 RADIUS recommendation. The first 4 octets are the vendor id (supported vendor ID 2454, 2014). The next two octets are the vendor-type and length as recommended in the RFC.
  • Page 160 Appendix A: SG-1 Vendor-Specific Attributes service-name user personal-site user mac-address user group user max-allowed- user sessions class user eds-enc-key user eds-cookie user original-url-prefix user dhcp-server dhcp opt82-relay- dhcp remote-id discover-action dhcp type protocol V5.0 Contains the information of the service name, which was given to the connected peer or the peer requested service name.
  • Page 161 SG1-UM-8500-03 Appendix A: SG-1 Vendor-Specific Attributes V5.0 Defines the service session timeout measured in seconds. V5.0 Defines the name of the next service to provide when a service "session timeout" expires. V5.0...
  • Page 162 Appendix A: SG-1 Vendor-Specific Attributes nip-pipe-next-hop route advertise- route protocol forward-addr route acl-tcp-nat- route redirect tunnel-id vpdn l2tp-tunnel- vpdn password ip-address vpdn tunnel- vpdn assignment-id tunnel-client-ip- vpdn address nativeip vpdn ip-tunnel vpdn up-mean-rate down-mean-rate acl-up-mean-rate V7.0 Defines the next-hop router to be used for the traffic destined to a native IP user.
  • Page 163 June 30, 2006 acl-down-mean- rate acl-priority ip-primary ip-secondary SG1-UM-8500-03 Appendix A: SG-1 Vendor-Specific Attributes V7.0 Specifies the average number of bits per second allowed to the user in the downstream direction per a specified access list. V7.0 Defines the class of service that should be set for a specified access list.

  • Page 164: User Group

    Appendix A: SG-1 Vendor-Specific Attributes Hierarchical Attribute Mode Most of the EDS attributes are operated in hierarchy mode. In this mode, each session includes per each attribute 3 hierarchy-operating level spaces. The first level space is the system default that is being configured, either by management or statically.
  • Page 165 • General: Operation Mode: Vendor-type: Vendor-length = SG1-UM-8500-03 Appendix A: SG-1 Vendor-Specific Attributes RADIUS definition User definition in the No accounting information RADIUS includes the is sent (Start and Stop). user:accounting=disable sub-attribute.
  • Page 166 Appendix A: SG-1 Vendor-Specific Attributes Format: adc-avpair = "user:accounting=[disable | enable | lastpacket |enable-on-ip-update | interim-update;<accounting update in seconds>]", Example 1: adc-avpair = "user:accounting=disable", Example 2: gcon-avpair = "user:accounting=interim-update;600", user:orig-name sub-attribute The user:orig-name sub-attribute contains the original user name as received during PPP negotiation. The sub- attribute is sent in Access Request messages, only in operation modes that overwrite or that do not send the original user name.
  • Page 167 June 30, 2006 General: Operation Mode: Vendor-type: Vendor-length = Format: adc-avpair = "user:auth-type=<pre-auth | service-selection | web-auth>", Example: adc-avpair = "user:auth-type=pre-auth", user:action sub-attribute The user:action sub-attribute defines the action that should be taken by the system. The actions are: a. Reject – Reject an authenticated peer or disconnect a connected peer.
  • Page 168 General: Operation Mode: Vendor-type: Vendor-length = Format: adc-avpair = "user:action=<Reject | echo | macantispoof | user_space_overwrite | user_space_overwrite_on_next_service >">", Example: adc-avpair = "user:action=Reject", user: SSC-host sub-attribute This vendor-specific sub-attribute contains the SSC (Service Selection Center) host IP address at which the user activated the service.
  • Page 169 Radius attribute for use in EDS query response. The personal-site information maximum size is 256 characters. General: Operation Mode: Vendor-type: Vendor-length = SG1-UM-8500-03 Appendix A: SG-1 Vendor-Specific Attributes Access-Accept message Access-Request message 2 + name length + (1-128) Access-Accept message Service-Accept message 2 + name length + (1 - 256)
  • Page 170 Appendix A: SG-1 Vendor-Specific Attributes Format: adc-avpair = "user:personal-site=<site URL>", Example: adc-avpair = "user:personal-site=www.walla.co.il", user:mac-address sub-attribute The user:mac-address sub-attribute contains the MAC address information of a connected user as learned by the DHCP relay or by the proxy RADIUS. General:...
  • Page 171 General: Operation Mode: Vendor-type: Vendor-length = Format: adc-avpair = "user:max-allowed-sessions=<maximum number of sessions per blade>", Example: adc-avpair = "user:max-allowed-sessions=1", user:class sub-attribute The user:class sub-attribute contains the user class information, a string of maximum size of 256 characters. It is available to be sent by the Radius server to the system in an Access-Accept or Service-Accept messages. The system sends it unmodified to the Radius server as part of the Authentication and Accounting-Requests packets.
  • Page 172 Appendix A: SG-1 Vendor-Specific Attributes user:eds-enc-key sub-attribute The user:eds-enc-key sub-attribute contains an encryption key for EDS operation. The encryption key should be exactly 16 characters long, comprised solely of characters from the set (“0 - 9”, “a - f”, “A - F”). Every two characters in the key represent a hexadecimal byte.
  • Page 173 The user tries to connect to The user is being redirected to:www.cnn.com?url=www.yahoo.com Operation Mode: Access-Accept message Vendor-type: Vendor-length = Format: adc-avpair = "user:original-url-prefix=<prefixed string>", Example: adc-avpair = "user:original-url-prefix=?url=", SG1-UM-8500-03 www.yahoo.com Service-Accept message up to 64 + attribute-name length Appendix A: SG-1 Vendor-Specific Attributes A-15...

  • Page 174: Dhcp Group

    Appendix A: SG-1 Vendor-Specific Attributes DHCP GROUP dhcp:dhcp-server sub-attribute The dhcp:dhcp-server attribute defines the DHCP server IP address, which the system should relay the user's DHCP requests. It may be activated dynamically, enabling the change of DHCP server IP of a connected user on the fly.
  • Page 175 General: Operation Mode: Vendor-type: Vendor-length = Format: adc-avpair = "dhcp:opt82-relay-remote-id=<Option 82 relay remote ID sub-option>", Example: adc-avpair = "dhcp:opt82-relay-remote-id=01844400660300", dhcp:discover-action sub-attribute The dhcp:discover-action attribute defines the action to be taken when a new dhcp discover message is transmitted in a connected session. The discover actions are: a.

  • Page 176: Protocol Group

    Appendix A: SG-1 Vendor-Specific Attributes PROTOCOL GROUP protocol:type sub-attribute There is a need in Access Request messages to receive a hint of the protocol negotiated with the peer. The protocol:type sub-attribute fulfills this need and enables the operator to manage the connections. The system sends this sub-attribute to the RADIUS when detecting a connection-negotiating multilink.
  • Page 177 Vendor-type: Vendor-length = Format: adc-avpair = "service:auto-service-name=<service name>", Example: adc-avpair = "service:auto-service-name=SRV12", SG1-UM-8500-03 Appendix A: SG-1 Vendor-Specific Attributes Access-Accept message Service-Accept message 2 + name length + (1 - 128) Access-Accept message Service-Accept message 2 + name length + (1-128)
  • Page 178 General: Operation Mode: Vendor-type: Vendor-length = Format: adc-avpair = "service:auth-source=<service | user | CLI>", Example: adc-avpair = "service:auth-source=CLI", service:data-quota This sub-attribute defines the service session data quota measured in bytes. The POPmaestro monitors the session to track the data quota usage. When a service runs out of quota (session quota termination event occurs), the system activates the next-service-name if defined (see next-service-name definition).
  • Page 179 Operation Mode: Vendor-type: Vendor-length: Values: Format: adc-avpair = "service:data-quota-used=<used data quota in bytes>", Example: adc-avpair = "service:data-quota-used=5000000", service:acl-data-quota The service:acl-data-quota sub-attribute defines the service session data quota per a specified access-list measured in bytes. This attribute enables to define different data quota per each access-list of a session. The POPmaestro monitors the session to track the data quota usage for the defined access lists.
  • Page 180 Operation Mode: Vendor-type: Vendor-length = Values: Format: adc-avpair = "service:acl-data-quota=<access-list number>;<data quota in bytes>", Example: adc-avpair = "service:acl-data-quota=101;5000000", service:service-cache The service:service-cache sub-attribute contains the service caching operation mode of the received service. The system when receiving this attribute along with the service definition clears the service cached information if exists.
  • Page 181 A service:accessl-list-packet-quota attribute with a zero value indicates to the SG-1 that the connected ses- sion has no access-list packet credit left. The SG-1 then redirects all the session packets that match the specific access-list, to the redirection server if one is configured. Otherwise, it discards the packets.
  • Page 182 The service:acl-packet-quota-used attribute is being sent only if quota have been established for the ses- sion. b. The attribute is being sent in SG-1 authorization requests, Accounting-Stop, Accounting-Off and interim messages. c. It should include the access-list name for access-list-packet-quota attributes.
  • Page 183 Vendor-type: Vendor-length: Format: adc-avpair = "service:roaming=<disable>", Example: adc-avpair = "service:roaming=disable", SG1-UM-8500-03 Appendix A: SG-1 Vendor-Specific Attributes Access-Request message Service-Request message Accounting-Stop, off and interim request messages 1 - 19 + attribute-name length Min = 0; Max = 2^31 - 1 Min = 0;...

  • Page 184: Route Group

    Appendix A: SG-1 Vendor-Specific Attributes ROUTE GROUP route:remote-filter-redirect-gw This vendor specific sub-attribute defines the remote redirection gateway for redirecting the packets that did not pass the defined filters. It also works dynamically and allows changing the user-redirected gateway on the fly. Upon receipt of this sub-attribute the system tunnels the user data to the remote Redirection Gateway using the IP in IP tunnel protocol.
  • Page 185 This attribute is valid only when route:advertise-protocol attribute is defined, otherwise the system should ignore it. The forward-addr default value is 0.0.0.0. This attribute is supported only for OSPF advertising protocol. SG1-UM-8500-03 Appendix A: SG-1 Vendor-Specific Attributes Access-Accept message Service-Accept message...
  • Page 186 Appendix A: SG-1 Vendor-Specific Attributes General: Operation Mode: Vendor-type: Vendor-length = Format: adc-avpair = "route:forward-addr=<IP address>", Example: adc-avpair = "route:forward-addr=192.168.1.4” A-28 Access-Accept message Service-Accept message 2 + 7-15 + attribute length June 30, 2006 SG1-UM-8500-03...

  • Page 187: Vpdn Group

    General: Operation Mode: Vendor-type: Vendor-length = Format: adc-avpair = "route:acl-tcp-nat-redirect=<access list name>;<IP address>", Example: adc-avpair = "route:acl-tcp-nat-redirect=SMTP;192.168.1.4” VPDN GROUP vpdn:tunnel-id attribute This attribute defines the tunnel ID, used for LAC purpose. This attribute is mandatory for opening a tunnel session.
  • Page 188 Appendix A: SG-1 Vendor-Specific Attributes General: Operation Mode: Vendor-type: Vendor-length = Format: adc-avpair = "vpdn:l2tp-tunnel-password=<password>", Example: adc-avpair = "vpdn:l2tp-tunnel-password=test", vpdn:ip-address attribute This attribute indicates the address of the server end of the tunnel. This attribute is mandatory for opening a tunnel session.
  • Page 189 This attribute contains the address of the initiator end of the tunnel (LAC IP address). It enables the operator to distinguish between users that accessed the network from different access servers. General: Operation Mode: Vendor-type: Vendor-length = SG1-UM-8500-03 Appendix A: SG-1 Vendor-Specific Attributes Access-Request message 2 + name length + (7-15) A-31...
  • Page 190 Appendix A: SG-1 Vendor-Specific Attributes Format: adc-avpair = "vpdn:tunnel-client-ip-address-=<tunnel client ip address>", Example: adc-avpair = "vpdn:tunnel-server-client-ip-address=192.168.3.5", vpdn:nativeip sub-attribute This attribute defines a session as a native IP pipe, meaning the session acts as a tunnel for native IP traffic. It is currently used for PPP sessions only.

  • Page 191: Qos Group

    It is sent in Access-Accept message and it overwrites the current access list upstream rate of the user. This attribute may be operated during the session lifetime (EDS). SG1-UM-8500-03 Appendix A: SG-1 Vendor-Specific Attributes Access-Accept message Service-Accept message...
  • Page 192 General: Operation Mode: Vendor-type: Vendor-length: Format: adc-avpair = "qos:acl-up-mean-rate=<access list name>;<up mean rate in Kbits>", Example: adc-avpair = "qos:acl-up-mean-rate=acl1;128", qos:acl-down-mean-rate sub attribute The qos:acl-down-mean-rate sub-attribute specifies the average number of bits per second allowed to the user in the downstream direction per a specified access list. It is sent in Access-Accept message and overwrites the current access list downstream rate of the user.
  • Page 193 To prevent lower priority traffic starvation, the higher priority access list bandwidth limitation should be smaller that the session one. General: Operation Mode: Vendor-type: Vendor-length: Format: adc-avpair = "qos:acl-priority=<access list name>;<priority number>, Parameter <access list name> <Priority value> Mandatory Example: adc-avpair = "qos:acl-priority=acl1;1",...

  • Page 194: Dns Group

    Appendix A: SG-1 Vendor-Specific Attributes DNS GROUP dns:ip-primary The dns:ip-primary attribute defines the primary DNS server to be used by the connected peer. General: Operation Mode: Vendor-type: Vendor-length = Format: adc-avpair = "dns:ip-primary=<Primary DNS IP>", Example: adc-avpair = "dns:ip-primary=194.90.1.5", dns:ip-secondary The dns:ip-secondary attribute defines the secondary DNS server to be used by the connected peer.

  • Page 195: Appendix B: Redirection Server

    EDIRECTION ERVER The Redirection Server (RDS) is an ADC’s product that redirects all peers’ Http requests to their personal-sites as pre-defined in the Radius server. The RDS uses ADC’s EDS (Enhanced Dynamic Services) policy to redirect the connected peers and it actually acts as a sophisticated SSC.
  • Page 196 Appendix B: Redirection Server Usage password <user type> <password> Parameter(s) <user type> It is the user type to change the password by operator or technician. <password> It is the new password, 6 to 64 alphanumeric characters. Example: RDSHost> configure terminal <cr> RDSHost(config)# password operator test11 Using default-redirection-site command •...

  • Page 197: Orup Commands

    June 30, 2006 ORUP C OMMANDS Using ORUP (Original Requested URL Prefix) Usage <user personal site><ORUP field><original URL request> Parameter: <ORUP field> This is the ORUP field value. Example • The ORUP field value is: ?url= • The user tries to connect to •...

  • Page 198: Service Name Commands

    Appendix B: Redirection Server ERVICE OMMANDS Using service-name command • The service-name command defines the service to be operated for all sessions. • The command located at the “configure terminal” menu. Usage service-name <service name> Example: RDSHost> configure terminal <cr> RDSHost(config)# service-name srv17 Using no service-name command •...

  • Page 199: Tftp Commands

    June 30, 2006 Usage event-level <NUM> output-device <Logging media> Parameter(s) <NUM> It is the event level number. It is a number between 0-1000 Initial value 0. <Logging media> The media to use for logging, console: sys-Logger none, Initial value none Example: RDSHost>...
  • Page 200 Appendix B: Redirection Server Example 1: Successful software download RDSHost> copy-TFTP flash 192.168.1.4 RDS.pack <cr> Download in progress ... Pack loaded successfully In order to use new software, please reload the system RDSHost> Example 2: Unsuccessful software download RDSHost> copy-TFTP flash 192.168.1.4 test.doc <cr> Download in progress ...
  • Page 201 June 30, 2006 Example 1: Successful software download RDSHost> copy-TFTP flash def-redirection-page 192.168.1.4 RDS.pack <cr> Download in progress ... File loaded successfully RDSHost> Example 2: Unsuccessful software download RDSHost> copy-TFTP flash def-redirection-page 192.168.1.4 test.doc <cr> Download in progress ... File loaded unsuccessfully due to: Download pack file is corrupted RDSHost>...

  • Page 202: Show Commands

    Appendix B: Redirection Server OMMANDS Using show version command • The show version command displays the software and hardware versions. • It is located at the “main” menu. Usage show version <software | hardware | pack> Parameter(s) <software> It shows the current system software version. <hardware>...
  • Page 203 June 30, 2006 Example 3: RDSHost> show version pack <cr> Pack Image Name: V1.0_RDS_pack Version: V1.0_RDS October 29 2001 19:53:37 Size: 1537790 byte Pack Components: Kernel Version: V2.4 October 29 2001 15:00:10 EDS.php Version: V1.0 October 29 2001 19:49:43 RDSHost> Using show configuration command •...

  • Page 204: Ethernet Commands

    Appendix B: Redirection Server Example: RDSHost> RDSHost> show system Up-time: 0 Hours, 38 Minutes, 23 Seconds CPU usage: 50 % Average Http hits per minute:8681 Accumulated Http hits on port 80:19993456 Accumulated Http hits on EDS port:39986912 RDSHost> THERNET OMMANDS Using interface Ethernet command •...
  • Page 205 June 30, 2006 Using no interface Ethernet command • The command is located at the “configure terminal” menu. • It deletes the configured interface. • The change is affecting immediately. Usage no interface Ethernet <Interface number> Parameter <Interface number> It is the interface number 1. Example: Host(config)# no interface Ethernet 1 <cr>...

  • Page 206: Default Gateway Commands

    Appendix B: Redirection Server EFAULT ATEWAY OMMANDS Using ip default-gateway command • The command is located at the “configure terminal” menu. • It configures the system default gateway. • The change is affecting immediately. Usage ip default-gateway <gateway IP address> Parameter <gateway IP address>...

  • Page 207: Using Reload Command

    June 30, 2006 Format Operation Error: Default-gateway is out of subnet. Example 1: Host(config)# ip default-gateway 194.90.2.1 <cr> Operation Error:# The default gateway is out of subnet SING ELOAD OMMAND • The reload command restarts the RDS. • The command is located at the “main” menu. Usage reload <non-graceful>...

  • Page 208: Write Commands

    Appendix B: Redirection Server RITE OMMANDS Using write terminal command • The write terminal command displays the running RDS configuration. • It is located at the “main” menu. Usage write terminal Example 1: RDSHost> RDSHost> write terminal <cr> # version: V1.0_RDS Apr 25 2002 15:44:56 password operator r^dfit password technician ^-e3t event-level 1 output-device sys-logger...

  • Page 209: Using Poweroff Command

    June 30, 2006 Using write memory command • The write memory command writes the running RDS configuration to the NV memory. • It is located at the “main” menu. Usage write memory Example: RDSHost> RDSHost> write memory <cr> RDSHost> SING OWEROFF OMMAND •...
  • Page 210 Appendix B: Redirection Server Parameter(s) <IP address> It is the Permitted source IP address. <source mask> It is the Permitted source mask. Example: RDSHost(config)> access-list SNMP-permit 192.168.1.0 255.255.255.0 <cr> RDSHost(config)> end RDSHost> write terminal <cr> access-list SNMP-permit 192.168.1.0 255.255.255.0 Using no access-list SNMP-permit command •...

  • Page 211: Using Reset Configuration Command

    RDSHost> write terminal <cr> SNMP-server community set test SING ESET ONFIGURATION • The reset configuration command deletes the RDS stored configuration. • It is located at the “ADC” menu. Usage reset configuration HTTP C OMMANDS Using http-proxy-server port command • The http-proxy-server port command defines the supported Http-proxy server posts in the system.
  • Page 212 Appendix B: Redirection Server Usage http-proxy-server port <port number> Parameter <port number> It is the supported HTTP proxy port number. Legal port number (1 – 65,000). Example: RDSHost(config)> http-proxy-server port 8080 <cr> RDSHost(config)> http-proxy-server port 8090 <cr> RDSHost(config)> end RDSHost> write terminal <cr> http-proxy-server port 8080 http-proxy-server port 8090 Using no http-proxy-server port command...

  • Page 213: Name Server

    June 30, 2006 ERVER Using ip primary-name-server command • The ip primary-name-server command defines the primary DNS server IP address the RDS should use for the Http proxy functionality. • The command is located in the “configure terminal” menu. Usage ip primary-name-server <IP address>...
  • Page 214 Appendix B: Redirection Server Using ip remote-proxy command • The ip remote-proxy command defines the Http proxy and port to be used in the Http proxy functionality. • The command is located in the “configure terminal” menu. Usage ip remote-proxy <IP address> <port number> Parameter <IP address>...

  • Page 215: Using Hostname Command

    June 30, 2006 SING OSTNAME OMMAND • The hostname command defines the system hostname name. • The command is located in the “configure terminal” menu. • The default hostname is “RDSHost”. Usage hostname <host name> Parameter <host name> Example: RDSHost(config)> hostname rds_test <cr> RDSHost>...

  • Page 216: Using No Eds-Url-Identity Command

    Appendix B: Redirection Server EDS-URL-IDENTITY C SING • The no eds-url-identity command deletes the eds name configuration to be used in the EDS URL. The system uses its default value (system primary IP address). • The command is located in the “configure terminal” menu. Usage no eds-url-identity Example 1:...
  • Page 217 June 30, 2006 Example: RDSHost(config)> remote-ip-in-ip 192.168.1.4 <cr> RDSHost(config)> remote-ip-in-ip 192.168.1.5 <cr> RDSHost(config)> remote-ip-in-ip 192.168.1.6 <cr> RDSHost> write terminal <cr> remote-ip-in-ip 192.168.1.4 remote-ip-in-ip 192.168.1.4 remote-ip-in-ip 192.168.1.4 Using no remote-ip-in-ip command • The no remote-ip-in-ip command deletes the remote endpoint definition. •...

  • Page 218: Show User Commands

    Appendix B: Redirection Server OMMANDS Using show users command • The command displays connected users information. • The command is located at ADC menu. Usage show users Output format: Default of Linux w command. Using show proc command • The command display running processes information.

  • Page 219: Using Debug Protocol Command

    • The command enables the sniffing of tcp, udp, ether, fddi, ip, arp, rarp, decent, lat, sca, moprc, mopdl, icmp, igrp, nd. • The command is located at ADC menu. Usage debug protocol [ [<protocol name>] [source | dest <IP>]] Parameter(s) <protocol name>...

  • Page 220: Using Date Command

    Appendix B: Redirection Server SING OMMAND • The command sets RDS date. • The command is located at ADC menu. Usage date <time> <date> Parameter(s) <time> It is Time of the day in H24:MM:SS format. <date> It is the Date in DD/MM/YYYY format.

  • Page 221: Appendix C: Product Support

    UPPORT ADC Customer Service Group provides expert pre-sales support and training for all of its products. Technical support is available 24 hours a day, 7 days a week by contacting the ADC Technical Assistance Center. Sales Assistance: 800.366.3891 Systems Integration: 800.366.3891 ADC Technical Assistance Center: 800.366.3891...
  • Page 222 Appendix C: Product Support June 30, 2006 SG1-UM-8500-03...

  • Page 223: Glossary

    PNNI – Private Network to Node Interface PVC – Permanent Virtual Circuit PPP – Point-to-Point Protocol SCC – Service Creation Cards SG-1 – Service Gateway System (ADC product) SNMP – Simple Network Management Protocol SPVC – Semi-Permanent Virtual Circuit TFTP – Trivial File Transport Protocol VRRP –...
  • Page 224 Glossary June 30, 2006 GL-2 SG1-UM-8500-03...
  • Page 225 The FCC requires the user to be notified that any changes or modifications made to this device that are not expressly approved by ADC voids the user’s warranty. All wiring external to the products should follow the provisions of the current edition of the National Electrical Code.

  • Page 226: User Manual

    World Headquarters ADC Telecommunications, Inc. PO Box 1101 Minneapolis, MN 55440-1101 USA For Technical Assistance Tel: 800.366.3891 SG-1 Service Gateway System User Manual Document Number: SG1-UM-8500-03 ´-jv¶4£¨ 1374864...

Table of Contents