Page 1
3Com Router Command Reference Guide Addendum for V1.20 http://www.3com.com/ Part No. 10014302 Published January 2004...
Page 2
1.1.1. Scope This manual provides command reference information for new software features found in V1.20 of the 3Com Router operating system. Use this addendum to supplement command reference information found in the 3Com Router Command Reference Guide. 1.1.2. Online Resources Download the Router 3000 Installation Guide from: http://support.3com.com/infodeli/tools/routers/R3000Install.pdf...
For the related command, see qos policy, qos-class. Example Configure the "database" class of the "3Com" policy to perform assured-forwarding with the minimum bandwidth as 200kbit/s. [3Com] qos policy 3Com [3Com-qospolicy-3Com] qos-class database...
Page 4
3Com Router Command Reference Guide Addendum for V1.2 1.2 car Syntax car cir rate [ cbs size ebs size ] [ conform action [ exceed action] ] undo car View Policy-class view Parameter cir rate: Committed information rate in the range of 8000 to 155000000 bit/s.
Page 5
38400bit/s, the precedence of the packet turns to 0 and the packet is transmitted. [3Com] qos policy 3Com [3Com-qospolicy-3Com] qos-class database [3Com-qospolicy-c-3Com database] car cir 38400 cbs 76800 ebs 0 conform pass exceed remark-prec-pass 0 1.3 debugging qos Syntax...
3Com Router Command Reference Guide Addendum for V1.2 Description Using the debugging qos command, you can enable the debugging of QoS. Using the undo debugging qos command, you can disable the debugging of Qos. By default, the debugging of QoS is disabled.
3Com Router Command Reference Guide Addendum for V1.2 1.5 display qos class Syntax display qos class [ class-name ] View All views Parameter class-name: Name of the class. By default, the information of all classes are displayed. Description Using the display qos class command, you can browse the class information concerning router configuration.
Page 8
3Com Router Command Reference Guide Addendum for V1.2 Parameter policy-name: Name of policy. By default, the configuration information of all policies are displayed. class-name: Class name in the policy. Description Using the display qos policy command, you can browse the configuration information of the specified or all classes of the specified or all policies.
Page 12
3Com Router Command Reference Guide Addendum for V1.2 View Policy-class view Parameter bandwidth: Bandwidth in kbit/s in the range of 8 to 1000000. size: Specify the allowed burst size in byte in the range of 32 to 2000000. By default, it is bandwidth * 25.
38400bit/s can be transmitted normally under normal conditions and that larger than 38400bit/s enters queue buffer lately; the buffer queue length is 100. [3Com] qos policy 3Com [3Com-qospolicy-3Com] qos-class database [3Com-qospolicy-c-3Com database] gts cir 38400 cbs 76800 ebs 0 queue-length 1.10 if-match acl Syntax if-match [ logic-not ] acl acl-number...
Page 14
3Com Router Command Reference Guide Addendum for V1.2 View Class view Parameter access-list-number: ACL number. logic-not: Do not match the class. Description Using the if-match acl command, you can define an ACL match rule. Using the undo if-match acl command, you can delete an ACL match rule.
Page 15
3Com Router Command Reference Guide Addendum for V1.2 Example Define match rule for all packets. [3Com] qos class class1 [3Com-qosclass-class1] if-match any 1.12 if-match class Syntax if-match [ logic-not ] class class-name undo if-match [ logic-not ] class class-name View...
Page 16
3Com Router Command Reference Guide Addendum for V1.2 Example Define class2 by invoking class1. Define match rule for class2. As class1 will be invoked, you should configure class1 first.The match rule for class1 is: IP precedence is 5. [3Com] qos class class1...
Page 17
3Com Router Command Reference Guide Addendum for V1.2 1.14 if-match inbound-interface Syntax if-match [ logic-not ] inbound-interface { type number } undo if-match [ logic-not ] inbound-interface { type number } View Class view Parameter : Interface type. interface type number: Interface number.
Page 18
3Com Router Command Reference Guide Addendum for V1.2 Parameter ip-dscp value: DSCP value in the range of 0 to 63. Description Using the if-match dscp command, you can define DSCP match rule. Using the undo if-match dscp command, you can delete DSCP match rule.
Page 19
3Com Router Command Reference Guide Addendum for V1.2 Description Using the if-match ip-precedence command, you can define IP precedence match rule. Using the undo if-match ip-precedence command, you can delete IP precedence match rule. When the command is configured, the ip-precedence-value will be sorted automatically in ascending order.
Page 20
3Com Router Command Reference Guide Addendum for V1.2 The match rule for source MAC address is effective only for input policies and Ethernet interfaces. For the related command, see qos class. Example Define the match rule of class1 as follows: match the packets with the destination MAC address as 0050-ba27-bed3.
Page 21
3Com Router Command Reference Guide Addendum for V1.2 1.19 if-match rtp Syntax if-match [ logic-not ] rtp start-port starting-port-number end-port end-port-number undo if-match [ logic-not ] rtp start-port starting-port-number end-port end-port-number View Class view Parameter starting-port-number: Starting RTP port number in the range of 2000 to 65535.
3Com Router Command Reference Guide Addendum for V1.2 View Interface view Parameter token-number: The number of sending tokens, in the range from 1 to 50. Description Using the qmtoken command, you can configure the number of QoS sending tokens. Using the undo qmtoken command, you can disable the sending token function of QoS.
Sub-interface does not support queue (ef, af and wfq) feature but support TS (gts) and TP (car). Therefore, the policy configured with TS and TP only can be applied to a sub-interface. Example Apply the policy 3COM in the outbound direction of Ethernet0. [3Com-Ethernet0] qos apply policy outbound 3COM 1.22 qos class Syntax...
3Com Router Command Reference Guide Addendum for V1.2 View System view. Parameter logic-and: Specify the relation between the rules in the class as logic AND. That is, the packet that matches all the rules belongs to this class. logic-or: Specify the relation between the rules in the class as logic OR. That is, the packet that matches any one of the rules belongs to this class.
3Com Router Command Reference Guide Addendum for V1.2 Description Using qos max-bandwidth command, you can set the maximum bandwidth of an interface. Using undo qos max-bandwidth command, you can remove the setting of the maximum bandwidth. By default, the maximum bandwidth is not configured for all interfaces.
3Com Router Command Reference Guide Addendum for V1.2 Description Using qos policy command, you can define a policy and enter map view. Using undo qos policy command, you can delete a policy. The policy cannot be deleted if it is applied on an interface. It is necessary to remove application of the policy on the current interface before deleting it via the undo qos policy command.
Page 27
Using qos-class command, you can configure a class in QoS policy. Using undo qos-class command, you can delete the specified class. For the related command, see qos policy. Example Configure the class "database" in the QoS policy "3Com", and enter map view. [3Com] qos policy 3Com [3Com-qospolicy-3Com] qos-class database [3Com-qospolicy-c-3Com database] 1.27 queue-length...
Page 28
3Com Router Command Reference Guide Addendum for V1.2 View Policy-class view Parameter queue-length: Maximum threshold value of the queue in the range of 1 to 1024. The default drop mode is tail drop. Description Using queue-length command, you can configure maximum queue length. Using undo queue-length command, you can delete configuration.
3Com Router Command Reference Guide Addendum for V1.2 Parameter value: DSCP value in the range of 0 to 63, which can be any of the following keys: ef, af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, cs1, cs2, cs3, cs4, cs5 or cs7.
Page 30
3Com Router Command Reference Guide Addendum for V1.2 Example Configure precedence value to 6 to identify packets. [3Com] qos policy 3Com [3Com-qospolicy-3Com] qos-class database [3Com-qospolicy-c-3Com database] remark ip-precedence 6 1.30 wfq Syntax wfq [ queue-number total-queue-number ] undo wfq View...
Page 31
3Com Router Command Reference Guide Addendum for V1.2 undo wred [ ip-dscp | ip-precedence ] View Policy-class view Parameter ip-dscp: Indicate that DSCP value is used when calculating drop proportion for a packet. ip-precedence: Indicate that IP precedence value is used when calculating drop proportion for a packet.
Page 32
Set the queue lower-limit to 20, upper-limit to 40 and discard probability to 15 for the packet whose DSCP is 3. [3Com] qos policy 3Com [3Com-qospolicy-3Com] qos-class database [3Com-qospolicy-c-3Com database] wred ip-dscp [3Com-qospolicy-c-3Com database] wred ip-dscp 3 low-limit 20 high-limit 40 discard-probability 15...
3Com Router Command Reference Guide Addendum for V1.2 1.33 wred ip-precedence Syntax wred ip-precedence [ discard-probability discard-prob ] undo wred ip-precedence value View Policy-class view Parameter value: Precedence of IP packets in the range of 0 to 7. low-limit: Lower threshold value in the range of 1 to 1024. It is 10 by default.
3Com Router Command Reference Guide Addendum for V1.2 1.34 wred weighting-constant Syntax wred weighting-constant exponent undo wred weighting-constant View Policy-class view Parameter exponent: Exponential in the range of 1 to 16. It is 6 by default. Description Using wred weighting-constant command, you can set exponential for the...
Page 36
3Com Router Command Reference Guide Addendum for V1.2 Using debugging hwtacacs authentication command, you can display the authentication information and the authorization state of the current users. If the command is not configured with any argument, the information of all the users will be displayed.
Page 37
3Com Router Command Reference Guide Addendum for V1.2 Example # Display the accounting information of AAA users. [3Com]display hwtacacs accounting Hwtacacs Accounting Statistics Accounting Packet Wait-Queue Length: 0 Username don Accounting time=00:01:19 Accounting type=Login,Service=SHELL ----------------------------------------------------------- Username don Accounting time=00:00:12 Accounting type=Login,Service=SHELL ----------------------------------------------------------- # Display the accounting verbose of AAA users.
Page 38
3Com Router Command Reference Guide Addendum for V1.2 Table 2-1 Field description of the display hwtacacs accounting command Item interface Username Accounting type Accounting time Service Protocol Address Login Outbound Command System Starts Stops Realtimes Active Drops 2.3 display hwtacacs server...
Page 39
3Com Router Command Reference Guide Addendum for V1.2 AUTHENTICATION TERMINATE packets sent by the router, the received and transmitted packets, and the number of connection failures. Using the display hwtacacs server verbose command, you can display the size of the accounting, authorization and accounting queues of AAA users, whether the queue has been fully occupied, and the message displayed when the queues are full.
Page 40
TACACS+ server configured in the scheme as the user name. For example, if a user enters username@3com.com, the router will send the whole string as the user name to the TACACS+ server specified in the scheme.
Page 41
3Com Router Command Reference Guide Addendum for V1.2 Parameter ip ip-address: IP address of the TACACS+ server to be added. name host-name: Name of the TACACS+ server to be added, which has been configured by the IP host command. It is a string of 1 to 20 printable characters except for the space.
Page 42
3Com Router Command Reference Guide Addendum for V1.2 Each TACACS+ server group allows only one primary authentication server, one primary authorization server, and one primary accounting server. When you configure a second primary server, there will be prompt information, the previous primary AAA server will be changed into a common server, and the newly configured server will be taken as the primary one.
Page 43
3Com Router Command Reference Guide Addendum for V1.2 2.6 hwtacacs-server template Syntax hwtacacs-server template template-name undo hwtacacs-server template template-name View System view Parameter template-name: The string naming a server group, which contains 1 to 20 printable characters except for the space.
Page 44
3Com Router Command Reference Guide Addendum for V1.2 2.7 reset hwtacacs accounting statistics Syntax reset hwtacacs accounting statistics View All views Parameter None Description Using reset hwtacacs accounting statistics command, you can clear all accounting statistics for AAA users. For a related command, see display hwtacacs accounting.
Page 45
3Com Router Command Reference Guide Addendum for V1.2 Example # Clear all the statistics of TACACS+ servers. [Router] reset hwtacacs server statistics 2.9 shared-key Syntax shared-key key-string undo shared-key View Hwtacacs view Parameter key-string: The encrypted key used for the AAA negotiation between the router and a TACACS+ server.
Page 46
3Com Router Command Reference Guide Addendum for V1.2 2.10 source-ip Syntax source-ip { ip-address | interface interface-type interface-number } undo source-ip View Hwtacacs view Parameter ip-address: The source IP address of all the TACACS+ packets. interface-type: Interface type, such as serial.
3Com Router Command Reference Guide Addendum for V1.2 2.11 timer quiet Syntax timer quiet minutes undo timer quiet View Hwtacacs view Parameter minutes: Switchover interval, which must be in the range of 1 to 255 minutes and defaults to 5 minutes.
3Com Router Command Reference Guide Addendum for V1.2 Chapter 3 SSH Configuration Commands 3.1 debugging rsa Syntax debugging rsa undo debugging rsa View All views Parameter None Description Using the debugging rsa command, you can enable RSA debugging and send the details of all the processes and the packet structure of the RSA algorithm to the info-center in the form of debugging information.
3Com Router Command Reference Guide Addendum for V1.2 View User view Parameter VTY index: The SSH channel being debugged. Its value is a VTY number and is in the range of 0 to 4 by default. all: All the SSH channels.
Page 50
3Com Router Command Reference Guide Addendum for V1.2 View All views Parameter None Description Using the display rsa local-key-pair public command, you can display the public key portion of the server-end host key-pair and server key-pair. If no key has ever been created, the system will inform you that it has not found any keys by displaying “RSA keys not found”...
3Com Router Command Reference Guide Addendum for V1.2 VTY0 VTY3 3.6 display ssh user-information Syntax display ssh user-information [ username ] View All views Parameter username: A valid SSH user name defined by AAA. Description Using the display ssh user-information command, you can display information of the current SSH users, including usernames, key names associated with the users, and the authentication types of the user.
Page 54
% Invalid key string, the length is zero. Input a valid character string when configuring a public key. [3Com] rsa peer-public-key mykey [3Com-rsa-public-key] public-key-code begin [3Com-rsa-key-code] hex 308186 [3Com-rsa-key-code] hex 028180 [3Com-rsa-key-code] hex E75E3D7C 11923D33 143FB829 470EA018 889147F6 6 F27A98A D6C54A36...
3Com Router Command Reference Guide Addendum for V1.2 3.11 public-key-code end Syntax public-key-code end View Public key view Parameter None Description Using the public-key-code end command, you can end the public key editing and save the configured public key. Besides, you can also use this command to return from the public key view to the system view.
3Com Router Command Reference Guide Addendum for V1.2 An essential operation underlying a successful SSH login is generating local RSA key-pairs by configuring rsa local-key-pair create. It is only necessary for you to execute this command once and you do not have to execute it again after rebooting the router..
3Com Router Command Reference Guide Addendum for V1.2 Description Using the rsa local-key-pair destroy command, you can destroy all the server-end RSA keys (including host key-pairs and server key-pairs). After inputting this command, you are required to confirm whether to destroy all the server-end RSA keys.
3Com Router Command Reference Guide Addendum for V1.2 When executing the undo rsa peer-public-key command to delete a specified public key, the system will prompt the following information in case the specified key does not exist. % Public key not found.
3Com Router Command Reference Guide Addendum for V1.2 3.16 ssh server rekey-interval Syntax ssh server rekey-interval hours undo ssh server rekey-interval View System view Parameter hours: Updating interval which is in the range of 1 to 24 hours. Description Using the ssh server rekey-interval command, you can set the interval for updating the SSH server key.
Page 64
3Com Router Command Reference Guide Addendum for V1.2 Parameter seconds: Login timeout time, which is in the range of 1 to 120 seconds and defaults to 60 seconds. Description Using the ssh server timeout command, you can set the login authentication timeout time at the SSH server end.
3Com Router Command Reference Guide Addendum for V1.2 The public key that you assign to a user by using this command will replace the one that you have assigned last time. The AAA module is responsible for the creation and deletion of local usernames in the system.
Page 66
3Com Router Command Reference Guide Addendum for V1.2 authentication-type command, you can disable the login authentication mode for the user, in which case the user will be unable to log into the system. By default, no login authentication mode is specified, that is, the user is unable to log into the system.
3Com Router Command Reference Guide Addendum for V1.2 Description Using the debugging ntp-service command, you can debug all the information of the NTP service. Using the undo debugging ntp-service command, you can disable the specified debugging. By default, debugging of all the information is disabled.
3Com Router Command Reference Guide Addendum for V1.2 ******************************************************************** [12345]127.127.1.0 [5]10.110.101.20 0.0.0.0 note: 1 source(master),2 source(peer),3 selected,4 candidate,5 configured 4.3 display ntp-service status Syntax display ntp-service status View All views Parameter None Description Using the display ntp-service status command, you can display the state information of the NTP service.
3Com Router Command Reference Guide Addendum for V1.2 4.6 ntp-service authentication enable Syntax ntp-service authentication enable undo ntp-service authentication enable View System view Parameter None Description Using the ntp-service authentication enable command, you can enable authentication of NTP services. Using the undo ntp-service authentication enable command, you can disable authentication.
3Com Router Command Reference Guide Addendum for V1.2 Description Using the ntp-service authentication-keyid command, you can set an NTP authentication key. Using the undo ntp-service authentication-keyid command, you can remove the NTP authentication key. By default, there is no authentication key.
3Com Router Command Reference Guide Addendum for V1.2 client mode to assume the work of detecting the incoming broadcast message packets with which it can synchronize the local clock. Example Receive NTP broadcast messages on the interface Ethernet 1. [3Com] interface Ethernet 1 [3Com-Ethernet1] ntp-service broadcast-client 4.9 ntp-service broadcast-server...
3Com Router Command Reference Guide Addendum for V1.2 [3Com] interface Ethernet 0 [3Com-Ethernet0] ntp-service broadcast-server authentication-key 4 version 3 4.10 ntp-service max-dynamic-sessions Syntax ntp-service max-dynamic-sessions number undo ntp-service max-dynamic-sessions View System view Parameter number: The number of sessions allowed at the local, which is in the range of 0 to 128.
3Com Router Command Reference Guide Addendum for V1.2 Parameter X.X.X.X: Multicast IP address, that is, Class D address. Description Using the ntp-service multicast-client command, you can enable the NTP multicast client mode. Using the undo ntp-service multicast-client command, you can disable the NTP multicast client mode.
3Com Router Command Reference Guide Addendum for V1.2 keyid: The key ID carried in the messages transmitted to the multicast clients, which is in the range of 1 to 4294967295. ttl: Defines the Time-To-Live (TTL) period of multicast packets. ttl-number: The TTL period of multicast packets, which is in the range of 1 to 255.
3Com Router Command Reference Guide Addendum for V1.2 stratum: The stratum level at which the local clock operates, which is in the range of 1 to 15. Description Using the ntp-service refclock-master command, you can set an external reference clock or the local clock to be the NTP master clock. Using the undo ntp-service refclock-master command, you can remove the settings of NTP master clock.
3Com Router Command Reference Guide Addendum for V1.2 In the event that authentication has been enabled, this command can be used for specifying one or more keys to be reliable. In other words, clients will only synchronize its clock to the server providing a reliable key. Otherwise, clients will refuse synchronization.
3Com Router Command Reference Guide Addendum for V1.2 destination addresses for receiving the response messages except for the specified one. Example Specify the interface Ethernet 0 so that its IP address can be used as the source IP address carried by all the outbound NTP message packets.
Page 81
3Com Router Command Reference Guide Addendum for V1.2 undo ntp-service unicast-peer X.X.X.X View System view Parameter X.X.X.X: IP address of the remote server. version: Defines NTP version number. number: NTP version number in the range of 1 to 3. authentication-keyid: Defines an authentication key.
3Com Router Command Reference Guide Addendum for V1.2 Example Set the peer at 128.108.22.44 to be the synchronization source of the local device, allowing the remote peer to synchronize with the local clock. In addition, version 3 is adopted, and IP address of Ethernet 0 is used as the IP source address carried by the NTP messages.
Page 83
3Com Router Command Reference Guide Addendum for V1.2 Description Using the ntp-service unicast-server command, you can enable the NTP server mode. Using the undo ntp-service unicast-server command, you can disable the NTP server mode. By default, version number is 3, authentication is enabled, and the server is not the preferred choice.
3Com Router Command Reference Guide Addendum for V1.2 Description Using the display x25 x2t route command, you can display the X2T static routing table. Example Display the X2T static routing table maintained by the router. [Router]display x25 x2t route X.121...
Page 86
3Com Router Command Reference Guide Addendum for V1.2 undo translate ip ip-address port port-number View System view Parameter ip-address: Local IP address. port port-number: TCP port number. x25 x.121-address: The destination X.121 address after the address translation. Description Using the translate ip command, you can configure an X2T forwarding route from an IP network to an X.25 network.
Page 87
3Com Router Command Reference Guide Addendum for V1.2 port port-number: TCP port number. Description Using the translate x25 command, you can configure an X2T forwarding route from the X.25 network to the IP network. Using the undo translate x25 command, you can disable the configuration that has been made.
3Com Router Command Reference Guide Addendum for V1.2 Chapter 6 Additional ISDN Configuration 6.1 isdn ignore callednum Syntax isdn ignore callednum undo isdn ignore callednum View ISDN BRI interface view, CE1/PRI interface view, CT1/PRI interface view Parameter None Description Using the isdn ignore callednum command, the user can disable the SETUP ACK messages if the received SETUP messages in data service calls do not carry the called number information..
3Com Router Command Reference Guide Addendum for V1.2 Example Disable the E1 0 interface on the router to send SETUP ACK messages. [3Com] controller e1 0 [3Com-E1-0] pri-set [3Com-E1-0] interface serial 2:15 [3Com-serial2:15] isdn ignore callednum 6.2 isdn ignore hlc...
Page 90
3Com Router Command Reference Guide Addendum for V1.2 6.3 isdn ignore llc Syntax isdn ignore llc undo isdn ignore llc View ISDN interface view Parameter None Description Using the isdn ignore llc command, the user can configure the SETUP message to ignore the low-level compatibility information unit when a data call is initiated.
3Com Router Command Reference Guide Addendum for V1.2 View ISDN BRI interface view, CE1/PRI interface view, CT1/PRI interface view Parameter None Description Using isdn waitconnectack command, the user can configure the router to wait for CONNECT ACK message replies from the connected exchange until switching to the ACTIVE state.
Page 92
3Com Router Command Reference Guide Addendum for V1.2 information of SPI on all the SPID-supported BRI interfaces. You may view one interface by specifying its type and number. Example Display the related information of SPID on the NI-supported interface bri 0/0/0.
3Com Router Command Reference Guide Addendum for V1.2 View ISDN PRI interface view Parameter None Description Using the isdn ignore dchan command, you can configure the ISDN protocol to use consecutive numbering of B channels during call initiation. 1 will be subtracted from all channel numbers after slot 17, to keep the continuity of the channel serial number.
Page 94
3Com Router Command Reference Guide Addendum for V1.2 Parameter dss1: DSS1 (Digital Subscriber Signaling No.1) signaling is used. ni: National ISDN signaling is used. Description Using the isdn protocol-type command, you can configure signaling to be used at the ISDN interface.
3Com Router Command Reference Guide Addendum for V1.2 Parameter timer-name: Name of Q931 timer. Refer to the following table for a description in detail. time-interval: Interval of timer. Refer to the following table for a description in detail. all: To be used to restore the default interval values of all the Q931 timers.
3Com Router Command Reference Guide Addendum for V1.2 Parameter None Description Using the isdn spid auto-trigger command, you can enable SPID auto-negotiation once on the BRI interface running the NI protocol. On a BRI interface compliant with the North American ISDN protocol, the router can place a call only after SPID negotiation or initialization.
3Com Router Command Reference Guide Addendum for V1.2 By default, NIT mode does not apply on BRI interfaces. Instead, static SPID or dynamic SPID negotiation is applied. On an NI-compliant BRI interface, calls can be placed only after the SPID negotiation or initialization is finished.
3Com Router Command Reference Guide Addendum for V1.2 This command applies only on NI-compliant BRI interfaces. Example Set the duration of TSPID on the interface bri0 to 50 seconds. [3Com-bri0] isdn spid timer 50 6.12 isdn spid resend Syntax isdn spid resend times...
3Com Router Command Reference Guide Addendum for V1.2 6.14 isdn spid1 Syntax isdn spid1 spid undo isdn spid1 View ISDN BRI Interface view Parameter spid: String comprising 9 to 20 digits. Description Using the isdn spid1 command, you can configure SPID information for the B1 channel on an NI-compliant BRI interface.
Page 101
3Com Router Command Reference Guide Addendum for V1.2 View ISDN BRI Interface view Parameter spid: String comprising 9 to 20 digits. Description Using the isdn spid2 command, you can configure SPID information for the B1 channel on an NI-compliant BRI interface. Using the undo isdn spid2 command, you can remove the SPID information from the B1 channel on the interface.
Need help?
Do you have a question about the 3012 and is the answer not in the manual?
Questions and answers