3Com 3C13636 Configuration Manual

3Com 3C13636 Configuration Manual

Router 3000 ethernet family
Hide thumbs Also See for 3C13636:
Table of Contents

Advertisement

www.3Com.com
Part Number: 10014939 Rev. AA
February 2006
3Com Router 3000 Ethernet Family

Configuration Guide

3C13636

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the 3C13636 and is the answer not in the manual?

Questions and answers

Summary of Contents for 3Com 3C13636

  • Page 1: Configuration Guide

    3Com Router 3000 Ethernet Family Configuration Guide 3C13636 www.3Com.com Part Number: 10014939 Rev. AA February 2006...
  • Page 2 LICENSE.TXT or !LICENSE.TXT. If you are unable to locate a copy, please contact 3Com and a copy will be provided to you.
  • Page 3 Introduction...
  • Page 4: Table Of Contents

    3Com Router 3000 Ethernet Family Configuration Guide Table of Contents Table of Contents Chapter 1 v2.4x Overview ......................1-1 1.1 Introduction ........................1-1 1.2 Architecture of v2.4x ......................1-1 1.3 V2.4x Functionality and Use with Products ............... 1-2 Chapter 2 User Configuration Interface ..................2-1 2.1 Setting up Configuration Environments ................
  • Page 5: Chapter 1 V2.4X Overview

    QoS, VPN, security, and VoIP into the operating system, and offers remarkable data forwarding capability. v2.4x is a network operating system of which 3Com Technologies owns the exclusive intellectual property rights (IPR). It provides a uniform set of interfaces (network, user and management) for various hardware platforms and therefore offers a variety of flexible application solutions with hundreds of features.
  • Page 6: V2.4X Functionality And Use With Products

    V2.4x is the network system platform for 3Com 5000/6000 Routers. This manual describes the functionality available with V2.4x in detail. The features and commands restricted to the 3Com 6000 routers are declared as “Router 6000 only.” In the examples throughout this manual, most network interfaces are represented by interface-type slot-number/card-number/interface-number, Serial 0/0/0 for example.
  • Page 7 3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 v2.4x Overview Attribute Description ARP, ARP proxy Static domain name resolution IP unnumbered IP services DHCP Relay DHCP Server DHCP Client IGMP DLSw Non-IP services Static routing management Network Dynamic routing protocols:...
  • Page 8 3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 v2.4x Overview Attribute Description Authenticati RADIUS authorizatio HWTACACS CHAP authentication accounting (AAA) PAP authentication services Packet filter Interface-based ACL Time-based ACL Firewalls Firewall Packet filtering firewall ASPF (stateful firewall) Network Terminal access security...
  • Page 9 3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 v2.4x Overview Attribute Description File system management FTP Server and Client for uploading and System downloading the configuration file or application manageme File management TFTP Client for uploading and downloading files...
  • Page 10 3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 v2.4x Overview Attribute Description Multiple terminal services for entering the CLI: console port for local configuration AUX port for remote or local configuration Telnet local remote configuration Telnet for logging in directly and managing...
  • Page 11 Standby GK Server PPP-based RTP and TCP header compressions PPP-based STAC-LZS compression IPHC PPP-based link fragmentation and interleave Note: Currently, hot swap of interface cards/fans/power supplies is restricted to the 3Com Router 6000. 3Com Corporation...
  • Page 12: Chapter 2 User Configuration Interface

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 User Configuration Interface Chapter 2 User Configuration Interface 2.1 Setting up Configuration Environments The system supports both local and remote configuration. The following subsections tell you how to set up the configuration environments.
  • Page 13 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 User Configuration Interface Figure 2-2 New connection Figure 2-3 Set the connection port 3Com Corporation...
  • Page 14: Setup Through Telnet

    Step 3: The router runs Power-On Self-Test (POST), and upon its completion prompts you to press <Enter> until the command line prompt (such as <3Com>) appears. Step 4: Enter commands to configure the router or view its running state. Whenever you need help, enter "?”...
  • Page 15 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 User Configuration Interface Router Router Workstation Workstation 100BASE-TX 100BASE-TX Ethernet Ethernet Laptop Laptop Serv er Serv er Telnet-enabled PC on w hi c h the router i s configured Telnet-enabled PC on w hi c h the router i s configured...
  • Page 16: Setup Through The Aux Port

    WAN port on the remote PC) to connect with the Router. If the authentication succeeds, the system will display the command line prompt (<3Com> for example). If you see the message "All user interfaces are used, please try later!" try again later.
  • Page 17 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 User Configuration Interface RS-232 Serial port Workstation Router Modem AUX interface Tel No.12345678 Figure 2-9 Set up a remote configuration environment Step 2: Dial to connect the router remotely by using a terminal emulation program (such as Windows9X HyperTerminal).
  • Page 18: Setup Through Ssh

    Figure 2-11 Dial on the remote PC Step 3: Enter the correct username and password. When you see the command line prompt (<3Com> for example) in the HyperTerminal configure or manage the router. 2.1.4 Setup through SSH Secure Shell (SSH) provides high information security and powerful authentication to protect your router from attacks, such as, IP address spoofing or plain text password interception.
  • Page 19: Command Line Views

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 User Configuration Interface 2.2 CLI The system provides rich configuration commands and the CLI through which users can configure and manage their routers. The CLI supports: Local and remote configuration through the AUX port.
  • Page 20 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 User Configuration Interface Login users are also classified into four levels that correspond to the four command levels. After users at different levels log in, they can only use commands at their own level or lower levels.
  • Page 21 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 User Configuration Interface Table 2-2 Command view functionality Command command to Command to Function Prompt view enter exit Display basic Enter right quit information after User view about <3Com> disconnects connecting...
  • Page 22 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 User Configuration Interface Command command to Command to Function Prompt view enter exit quit Configure Subinterface [3Com-serial1/ interface subinterface returns view 0/0.1] serial 1/0/0.1 parameters system view in system view Configure...
  • Page 23: Online Help With Command Lines

    Note: The command line prompts take router name as prefix (which defaults to 3Com), view name as suffix, a pair of parentheses to denote the current view, a pair of point brackets (<>) to denote user view, and a pair of square brackets (“[]”) to denote system view or any other configuration views.
  • Page 24: Command Line Error Information

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 User Configuration Interface [3Com] interface ethernet 3? [3Com] interface ethernet 3/? <0-0> [3Com] interface ethernet 3/0? [3Com] interface ethernet 3/0/? <0-0> [3Com] interface ethernet 3/0/0 ? <cr> <cr> indicates that there is no parameter at this position. The command is then repeated in the next command line and executed if <Enter>...
  • Page 25: History Command

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 User Configuration Interface 2.2.4 History Command The CLI can automatically save the commands that have been entered. You can invoke and repeatedly execute them as needed. By default, the CLI can save up to ten commands for each user.
  • Page 26: Display Features

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 User Configuration Interface Function Pressing <Tab> after entering part of a keyword enables the fuzzy help function. If finding a unique match, the system will substitute the complete keyword for the incomplete one and Tab key display it in the next line.
  • Page 27: Regular Expressions

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 User Configuration Interface exclude text: to display information of the lines with no "text" include text: to display information of the lines with "text" For example, if you enter the display current-configuration | include ip command, the configuration information for the line with "ip"...
  • Page 28 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 User Configuration Interface Metacharacter Meaning The “n” in the brace brackets is a non-negative integer, indicating that there are consecutive n matches. The “n” in the brace brackets is a non-negative integer, {n,} indicating that there are inconsecutive n matches.
  • Page 29 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 User Configuration Interface For example, you can use the following command to view the current configuration information: <3Com> display current-configuration sysname 3Com controller E3 0/1/0 e1 1 channel-set 1 timeslot-list 1-31...
  • Page 30: Hot Keys

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 User Configuration Interface 2.3 Hot Keys 2.3.1 Classifying Hot Keys The hot keys in the system fall into two types user-configurable and system. The user-configurable shortcut keys include CTRL_G, CTRL_L, CTRL_O, CTRL_T and CTRL_U.
  • Page 31: Usage Of The Hot Keys

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 User Configuration Interface 2.3.2 Usage of the Hot Keys You can press a combined hot key wherever you are allowed to enter a command. The system will then display the corresponding command as if you had entered the complete command.
  • Page 32: Examples Of Hot Keys In Use

    Chapter 2 User Configuration Interface 2.3.3 Examples of Hot Keys in Use # Assign the hot key CTRL_U to the display ip routing-table command and execute it. [3Com] hotkey ctrl_u display ip routing-table [3Com] Press <Ctrl_u> [3Com] display ip routing-table...
  • Page 33 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 User Configuration Interface By default, the command alias function is disabled. II. Mapping an alias with a command Perform the following configuration in system view. Table 2-13 Map an alias with a command keyword...
  • Page 34: Chapter 3 V2.4X Basic Configurations

    3.1.1 Entering/Exiting System View When logging onto the router from the console port, you enter user view and see the prompt <3Com> on the screen. To enter or exit system view, use the following commands. Table 3-1 Enter/exit system view...
  • Page 35: Configuring A Banner

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 v2.4x Basic Configurations Operation Command clock summer-time summer-time-zone-name { one-off | Import daylight repeating } start-time start-date end-time end-date saving time scheme. add-time Cancel daylight undo clock summer-time saving time scheme.
  • Page 36: Locking User Interfaces

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 v2.4x Basic Configurations II. Switching user levels You must provide the correct password before you can become a higher level user. Perform the following configuration in user view. Table 3-6 Switch the user level...
  • Page 37: Displaying System Information

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 v2.4x Basic Configurations Table 3-9 Default command levels Level Privilege Command Visit ping, tracert, telnet Monitor display, debugging All configuration commands except for System those at manage level FTP, TFTP, Xmodem, and file system...
  • Page 38 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 v2.4x Basic Configurations Operation Command Display clipboard information. display clipboard Display the current status of the memory display memory in the system. display cpu-usage [ configuration | Display statistics about CPU usage.
  • Page 39: System Management

    3Com Router 3000 Ethernet Family Configuration Guide System Management 3Com Corporation Proprietary...
  • Page 40 3Com Router 3000 Ethernet Family Configuration Guide Table of Contents Table of Contents Chapter 1 System Management Overview .................. 1-1 Chapter 2 System Maintenance Management ................2-1 2.1 auto-config ......................... 2-1 2.1.1 Introduction......................2-1 2.1.2 Manually Configuring auto-config on the Router............. 2-3 2.1.3 Configuring the Central Router ................
  • Page 41 3Com Router 3000 Ethernet Family Configuration Guide Table of Contents 3.4.2 Using Auto Detect with VRRP................. 3-6 3.5 Application of Auto Detect in Interface Backup ..............3-7 3.5.1 Configuring Auto Detect for Interface Backup............3-8 3.5.2 Using Auto Detect with Interface Backup..............3-9 Chapter 4 HWPing Configurations ....................
  • Page 42 3Com Router 3000 Ethernet Family Configuration Guide Table of Contents 5.3.8 Configuration Example 2: Upgrading the V 2.41 Application Program with FTP.. 5-12 5.4 TFTP Configuration ......................5-13 5.4.1 TFTP Overview ..................... 5-13 5.4.2 TFTP Client Configuration..................5-14 5.4.3 Displaying and Debugging TFTP ................5-16 5.5 Xmodem Configuration ....................
  • Page 43 3Com Router 3000 Ethernet Family Configuration Guide Table of Contents 7.4.2 Performing User Authentication Using the Local User Database ......7-7 Chapter 8 NTP Configuration ....................... 8-1 8.1 Brief Introduction........................ 8-1 8.2 NTP Configuration ......................8-2 8.2.1 Configuring NTP Operation Mode................8-3 8.2.2 Configuring NTP ID Authentication .................
  • Page 44 3Com Router 3000 Ethernet Family Configuration Guide Table of Contents 9.4 Example of Typical Configuration ..................9-11 Chapter 10 RMON Configuration ....................10-1 10.1 Introduction ........................10-1 10.2 RMON Configuration ..................... 10-2 10.2.1 Adding/Removing an Event Entry ............... 10-2 10.2.2 Adding/Removing an Alarm Entry ............... 10-2 10.2.3 Adding/Removing a History Control Entry ............
  • Page 45 3Com Router 3000 Ethernet Family Configuration Guide Table of Contents 11.8.2 Dumb Terminal Service Features ..............11-39 11.8.3 Typical Application of Dumb Terminal .............. 11-39 11.8.4 Configuring Dumb Terminal Service ..............11-40 11.8.5 Timely Disconnecting Dumb Terminals ............11-42 11.9 Remote Shell Service ....................11-43 11.9.1 Introduction to Remote Shell................
  • Page 46: Chapter 1 System Management Overview

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 System Management Overview Chapter 1 System Management Overview After reading the first part “Getting Started” in this manual, you may read this part to learn how to further manage and service your router.
  • Page 47 3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 System Management Overview V. NTP configuration This chapter presents NTP and its configurations. The NTP service available with V 2.41 allows the system to guarantee timekeeping synchronization of the devices on the network along with other NTP-supported devices, ensuring reliability of interoperation.
  • Page 48 3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 System Management Overview Depending on network environment, three POS terminal access approaches are available: dial-up, asynchronous leased line, and POSPAD packet network. They will be discussed later in this part. 3Com Corporation...
  • Page 49 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 System Maintenance Management Chapter 2 System Maintenance Management System maintenance management includes the following functions: Use of the system maintenance and debugging tools Maintenance and management of the information center 2.1 auto-config 2.1.1 Introduction...
  • Page 50 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 System Maintenance Management Router to be configured Router to be configured Router to be Central router and configured console terminal Router to be configured Figure 2-1 Network design for auto-config configuration The router decides whether to enable the auto-config feature by checking the configuration files.
  • Page 51: Manually Configuring Auto-Config On The Router

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 System Maintenance Management 2.1.2 Manually Configuring auto-config on the Router I. Enabling auto-config Perform the following configuration in system view. Table 2-1 Enable/disable auto-config Operation Command Enable the auto-config feature auto-config enable...
  • Page 52 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 System Maintenance Management modem call-in speed 57600 authentication-mode scheme Configuring the locally authenticated default user name and password, enabling Telnet and FTP services for the default user local-user admin password cipher admin...
  • Page 53: Configuring The Central Router

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 System Maintenance Management undo shutdown 2.1.3 Configuring the Central Router The central router or console terminal needs to be configured by the network administrator, who determines which interfaces should be configured based on network connection.
  • Page 54 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 System Maintenance Management Table 2-5 Assign an IP address to the peer end Operation Command remote address { ip-address | pool Assign an IP address to the peer end [ pool-number ] } II.
  • Page 55: Switching Between Console And Aux

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 System Maintenance Management V. Connecting by dialing through AM interface First connect the AM interface on the router to be configured with the remote console terminal in the central equipment room through PSTN. Then the administrator can set up a connection at the remote teminal by dialing in flow mode using terminal emulation program.
  • Page 56 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 System Maintenance Management Step 1: Attach a modem to the AUX port. RS-232 Serial port Workstation Router Modem AUX interface Tel No.12345678 Figure 2-2 Set up a remote configuration environment Step 2: Dial to connect the router remotely by using a terminal emulation program (such as Windows9X HyperTerminal).
  • Page 57: Displaying And Debugging Auto-Config

    Figure 2-4 Dial on the remote PC Step 3: Enter the correct username and password. When you see the command line prompt (<3Com> for example) in the HyperTerminal configure or manage the router. 2.1.5 Displaying and Debugging auto-config Perform the following configuration in user view.
  • Page 58 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 System Maintenance Management III. Configuration procedure Configure R1 at the center # Configure controller interface. [3Com] controller e1 0/0/0 [3Com-e1 0/0/0] using e1 # Configure e1 interface to originate interface serial 0/0/0 and assign the IP address to the peer.
  • Page 59 III. Configuration procedure Configure central router R1 # Configure IP address pool and IP address of the interface. [3Com] dhcp server ip-pool 0 [3Com- dhcp-0] network 192.10.1.0 mask 255.255.255.0 [3Com-dhcp-0] quit [3Com] interface ethernet0/0/0 [3Com-ethernet0/0/0] ip address 192.10.1.2 255.255.255.0 # FTP the configuration file to the remote router.
  • Page 60: Configuration Example

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 System Maintenance Management service-type ftp interface ethernet 0/0/0 ip address dhcp-alloc user-interface vty 0 4 authentication-mode scheme Corresponding configuration is auto-genearted concurrently on the fixed interface of the router. 2.1.8 Configuration Example 3 I.
  • Page 61: Maintenance And Debugging Function

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 System Maintenance Management ftp server enable local-user admin password cipher admin service-type telnet terminal level 3 service-type ftp interface analogmodem 2/0/0 async mode flow country-code united-kingdom user-interface tty 0 modem call-in...
  • Page 62 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 System Maintenance Management For example: <3Com> ping 202.38.160.244 ping 202.38.160.244 : 56 data bytes, press CTRL-C to break Reply from 202.38.160.244 : bytes=56 sequence=1 ttl=255 time = 1ms Reply from 202.38.160.244 : bytes=56 sequence=2 ttl=255 time = 2ms Reply from 202.38.160.244 : bytes=56 sequence=3 ttl=255 time = 1ms...
  • Page 63 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 System Maintenance Management helios.ee.lbl.gov (128.3.112.1) 19 ms 19 ms 0 ms lilac-dmc.Berkeley.EDU (128.32.216.1) 39 ms 39 ms 19 ms ccngw-ner-cc.Berkeley.EDU (128.32.136.23) 39 ms 40 ms 39 ms ccn-nerif22.Berkeley.EDU (128.32.168.22) 39 ms...
  • Page 64: Enabling Df-Bit Check For Ip Packets

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 System Maintenance Management Table 2-11 Enable IP source routing Operation Command Enable IP source routing ip option source-routing Disable IP source routing undo ip option source-routing The router can process the packets with the IP source-route option only after IP source routing is enabled.
  • Page 65: Debugging The System

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 System Maintenance Management 2.2.5 Debugging the System The CLI of the system provides a variety of debugging functions for helping the users diagnose and isolate faults. The debugging functions are available for almost all the protocols and functions supported by the router.
  • Page 66: Rebooting The System

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 System Maintenance Management Operation Command display debugging interface Display the enabled debugging switches { interface-type interface-number } ] [ module-name ] For the use of specific debugging commands and the format of debugging information, refer to the relevant sections.
  • Page 67: Configuring The Information Center

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 System Maintenance Management Available with three types of information, which are log information, trap information, and debug information. The information is sorted into eight levels by severity and can be filtered by level.
  • Page 68 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 System Maintenance Management Table 2-17 Name an information channel Operation Command Name the information channel numbered info-center channel channel-number channel-number as channel-name name channel-name The parameter channel-number is ranging from 0 to 9, corresponding to the ten channels of the system.
  • Page 69 # Enable to output log information of IP module and allow outputting the information with the severity of warnings and lower levels only. [3Com] info-center source ip channel snmpagent log level warnings IV. Defining the contents of an information channel Perform the following operations in system view.
  • Page 70 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 System Maintenance Management Caution: When there are multiple Telnet users or terminal server users at the same time, they can share some configuration parameters, including the setting of filtering by module, language selection, and the severity threshold.
  • Page 71 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 System Maintenance Management Operation Command Set the size of the logbuffer and set the info-center logbuffer channel information channel information { channel-number | channel-name } | output to the logbuffer max-size buffersize ] *...
  • Page 72: Setting Display Terminal

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 System Maintenance Management VI. Sending source address for system information Perform the following operations in system view. Table 2-23 Send source address for logging information Operation Command info-center loghost source Send...
  • Page 73: Syslog Overview

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 System Maintenance Management Table 2-25 Set a display terminal Operation Command Enable the terminal information display terminal monitor function Enable the terminal logging information terminal logging display function Enable the terminal trapping information...
  • Page 74 The time stamp field is separated from the sysname field by a space. III. Sysname This field indicates host name; the default is 3Com. You may use the sysname command to change the name of your router. The sysname field is separated from the vendor ID field by a space.
  • Page 75: Setting A Log Host

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 System Maintenance Management VI. Severity There are eight severity levels numbered one through eight. For more information, see “Table 2-19”. The severity field is separated from the digest field by a slash (/).
  • Page 76: Information Center Configuration Example

    Configure Console log output, permitting the log output of PPP module and setting the severity level to be in the range of emergencies to debugging. [3Com] info-center console channel console [3Com] info-center source ppp channel console log level debugging Enable debugging of the PPP module. <3Com> debugging ppp all II.
  • Page 77 UNIX device local4. [3Com] info-center loghost 202.38.1.10 language english [3Com] info-center loghost 202.38.1.10 facility local4 [3Com] info-center source ppp channel loghost log level informational [3Com] info-center source ip channel loghost log level informational Step 2: Configure the loghost To implement the above functions, some configurations should also be made on the UNIX host.
  • Page 78: Displaying And Debugging The Device Running State — Ar46 Series

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 System Maintenance Management The lowest level of system information is debugging. The setting of debugging will cause all system information to be output to the loghost and this may affect system performance.
  • Page 79 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 System Maintenance Management II. Resetting device Perform the following operations in user view. Table 2-29 Reset device Operation Command Clear all the stored alarm information reset alarm urgent III. Configuring device Perform the following operations in system view.
  • Page 80 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 System Maintenance Management Before inserting or removing a hot-swappable interface card, you must first use the remove slot command for pre-processing. You can also cancel a maloperation with the undo remove slot command if you change your mind to remove the card after executing the remove slot command.
  • Page 81: Chapter 3 Auto Detect Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Auto Detect Configuration Chapter 3 Auto Detect Configuration 3.1 Introduction to Auto Detect Auto detect is a function for checking the connectivity of a network regularly by sending ICMP Request/Reply packets. It works by checking a group of destination IP addresses to see whether the hosts are reachable or unreachable.
  • Page 82: Auto Detect Configuration Example

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Auto Detect Configuration To do… Use the command… Remarks Add an IP address to the [3Com-detect-group-X] detect group. You may detect-list list-number ip command Required address ip-address multiple times to add up [ nexthop ip-address ] to 100 IP addresses.
  • Page 83 # Add IP address 10.1.1.4 with sequence number 1 to the detect group, taking 192.168.1.2 as the next hop IP address. [3Com-detect-group-10] detect-list 1 ip address 10.1.1.4 nexthop 192.168.1.2 # Add IP address 192.168.2.2 with sequence number 2 to the detect group.
  • Page 84: Application Of Auto Detect In Static Routing

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Auto Detect Configuration 3.3 Application of Auto Detect in Static Routing You may reference a detect group in a static route to control validity of the static route according to the result of auto detect as follows: When the detect group is reachable, the static route is valid.
  • Page 85: Application Of Auto Detect In Vrrp

    # Add an IP address of 10.1.1.4 with sequence number 1 to the detect group, taking 192.168.1.2 as the next hop IP address. [3Com A-detect-group-8] detect-list 1 ip address 10.1.1.4 nexthop 192.168.1.2 # Reference the detect group in a static route, having the route validated when the detect group is reachable.
  • Page 86: Using Auto Detect With Vrrp

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Auto Detect Configuration To do… Use the command… Remarks [3Com-EthernetX] vrrp vrid Reference auto virtual-router-ID track Required detect group in VRRP detect-group group-number [ reduced value-reduced ] Note: You may configure only up to eight VRRP standby groups.
  • Page 87: Application Of Auto Detect In Interface Backup

    # Set the standby group preference value of Router B to 110, making this value decrement by 20 when detect group 9 is unreachable. [3Com B-Ethernet1/0/0] vrrp vrid 1 priority 110 [3Com B-Ethernet1/0/0] vrrp vrid 1 track detect-group 9 reduced 20 # Configure interface Serial0/0/0. [3Com B-Ethernet1/0/0] interface serial0/0/0 [3Com B-Serial0/0/0] ip address 192.168.2.1 24...
  • Page 88: Configuring Auto Detect For Interface Backup

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Auto Detect Configuration For two interfaces pointing to the same destination, you can specify one of them as the main, and the other as the backup. By referencing a detect group on the backup interface, you can allow the router to do one of the following: When the detect group is reachable, use the main interface to transmit data.
  • Page 89: Using Auto Detect With Interface Backup

    # Create a detect group numbered 10. [3Com A] detect-group 10 # Add an IP address of 10.1.1.4 with sequence number 1 to the detect group, taking 192.168.1.2 as the next hop. [3Com A-detect-group-10] detect-list 1 ip address 10.1.1.4 nexthop 192.168.1.2 3Com Corporation...
  • Page 90 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Auto Detect Configuration [3Com A-detect-group-10] quit # Specify to enable Serial 1/0/0 when the detect group is unreachable. [3Com A] interface serial 1/0/0 [3Com A-serial1/0/0] standby detect-group 10 # Configure dynamic routing. (Omitted) Here, only the configurations on Router A are given.
  • Page 91: Chapter 4 Hwping Configurations

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 HWPing Configurations Chapter 4 HWPing Configurations 4.1 Introduction to HWPing HWPing is a tool used for testing performance of the protocols operating on a network. It is an enhancement to the ping function which can test the reachability of a host only by testing roundtrip delay with ICMP.
  • Page 92 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 HWPing Configurations I. Enabling HWPing Server Some testing operations of the HWPing function require the cooperation between Server and Client, such as jitter test (analysis on the delay variations in UDP datagram transmission) and UDP/TCP test on a specified port.
  • Page 93: Configuring Hwping Client

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 HWPing Configurations On the HWPing Server, a TCP listening service port cannot take a value greater than 50,000 or one reserved for special purpose, such as 1701. On the HWPing Server, a UDP listening service port cannot take a value greater than 49,999 or one reserved for special purpose, such as 1701.
  • Page 94 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 HWPing Configurations Following are the parameters included in an HWPing test group: Destination address Destination port Source interface Source address Source port Test type Number of packets sent for a test...
  • Page 95 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 HWPing Configurations Table 4-6 Configure a destination port Operation Command Configure a destination port. destination-port port-number Delete the destination port. undo destination-port By default, no destination port number is configured. Configuring a source interface When carrying out a DHCP test, you may specify a source interface, which must be an FE or GE interface, for sending a DHCP request.
  • Page 96 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 HWPing Configurations When performing an FTP test, you must specify a source port. Perform the following configurations in HWPing test group view. Table 4-9 Configure a source port Operation Command Configure a source port.
  • Page 97 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 HWPing Configurations Operation Command Restore the default number of messages undo count times sent for a test. By default, one message is sent for a test. Configuring ICMP datagram size ICMP datagram size refers to the size of the ECHO-REQUEST message transmitted for an ICMP test, excluding the IP and the ICMP headers.
  • Page 98 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 HWPing Configurations Table 4-14 Configure a test timeout time Operation Command Configure a test timeout time. timeout time Restore the default setting of test undo timeout timeout time. By default, test timeout time is set to three seconds.
  • Page 99 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 HWPing Configurations In ICMP test, the system should stuff the data field of each transmitted ICMP message. If the size of a test datagram is smaller than that of the configured stuffing character string, only a portion of the string will be used for stuffing.
  • Page 100 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 HWPing Configurations 16) Configuring username and password used in FTP operations You must provide the proper username and password before you perform FTP operations. This configuration task can be performed only in an FTP test.
  • Page 101 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 HWPing Configurations Table 4-22 Configure the number of packets sent for a jitter test Operation Command Configure the number of packets sent for jitter-packetnum number a jitter test. Restore the default setting.
  • Page 102 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 HWPing Configurations directly-attached network, an error is returned. You can use this function when pinging a local host on an interface that has no route defined. Table 4-25 Configure routing table bypass...
  • Page 103: Executing Test

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 HWPing Configurations If send-trap is enabled, a trap is sent for each probe or test failure. Perform the following configurations in HWPing test group view. Table 4-28 Enable/disable trap-sending Operation Command...
  • Page 104: Displaying Test Information

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 HWPing Configurations Table 4-30 Test Operation Command Execute test. test-enable Note: After you execute the test-enable command, the system does not display the test result. You may view the test result information by executing the display hwping command.
  • Page 105: Dhcp Test

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 HWPing Configurations II. Configuration procedure Note: Steps 1 through 3 and 6 are required for an ICMP test and the remaining three steps are optional. # Enable HWPing Client. [router] hwping-agent enable # Step 1: Create an HWPing test group, given an administrator name “administrator”...
  • Page 106: Dlsw Test

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 HWPing Configurations II. Configuration procedure Note: Steps 1 through 3 and 6 are required for a DHCP test and the remaining three steps are optional. # Enable HWPing Client. [router] hwping-agent enable # Step 1: Create an HWPing test group, given an administrator name “administrator”...
  • Page 107: Ftp Test

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 HWPing Configurations II. Configuration procedure Note: Steps 1 through 3 and 6 are required for a DLSw test and the remaining three steps are optional. In addition, on the destination router specified in Step 3, the DLSw function must have been enabled using the dlsw enable command and the appropriate DLSw pair must have been created using the commands dlsw local and dlsw remote.
  • Page 108 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 HWPing Configurations II. Configuration procedure Note: Steps 1 through 6 and step 9 are required for an FTP test and the remaining three steps are optional. # Configure the IP address of the Ethernet interface.
  • Page 109: Http Test

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 HWPing Configurations [router-hwping-administrator-ftp] display hwping result administrator ftp [router-hwping-administrator-ftp] display hwping history administrator ftp At the opposite end, you only need to enable FTP Server and configure the corresponding user. 4.5.5 HTTP Test I.
  • Page 110: Jitter Test

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 HWPing Configurations 4.5.6 Jitter Test I. Introduction Jitter test is performed to test the jitter delay in UDP packet transmission between the local end (HWPing Client) and a specified destination (HWPing Server).
  • Page 111: Snmp Test

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 HWPing Configurations Caution: At the destination end, you must perform the following configurations: [router] hwping-server enable [router] hwping-server udpecho 169.254.10.2 9000 The address and port number configured using the hwping-server udpecho command on the HWPing server for handling UDP test packets must be the same IP address and port number configured in steps 3 and 4 described above.
  • Page 112: Tcp Test Of A Specified Port

    Step 3; otherwise, it will be unable to make response. If that device is 3Com’s router, you may enable the network management function on it using the snmp-agent command. For more information about that, see the part concerning SNMP configuration in this manual.
  • Page 113: Udp Test Of A Specified Port

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 HWPing Configurations # Step 3: Configure the IP address of an HWPing server, 169.254.10.2 for example. [router-hwping-administrator- tcpprivate] destination-ip 169.254.10.2 # Step 4: Configure a destination port. [router-hwping-administrator- tcpprivate] destination-port 9000 # Step 5: Configure the number of transmitted test packets.
  • Page 114 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 HWPing Configurations # Enable HWPing Client. [router] hwping-agent enable # Step 1: Create an HWPing test group, setting administrator name to administrator and test operation tag to udpprivate. [router] Hwping administrator udpprivate # Step 2: Set the test type to UDP-private.
  • Page 115: File System

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 File Management Chapter 5 File Management 5.1 File System 5.1.1 Brief Introduction The major function of the file system is to manage storage devices and store files in these devices. Currently, the storage devices supported by the router includes Flash and hard disk.
  • Page 116 3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 File Management I. Basic operations Perform the following operations in the user view, (and the execute command is performed in system view). Table 5-2 File operations Operation Command Delete a file...
  • Page 117: Storage Device Operation

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 File Management Table 5-3 Display files and select main/backup boot file Operation Command Display all the boot files in the Flash. bootfile dir Specify the main boot file used when bootfile main main-bootfile-name booting the router.
  • Page 118: Restoring The Space Of A Storage Device

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 File Management 5.1.6 Restoring the Space of a Storage Device Perform the following configuration in user view. Table 5-6 Restore the space of a storage device Operation Command Restore the space of a storage device...
  • Page 119: File System Checking Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 File Management 6477 KBytes total (2144 KBytes free) 5.2 File System Checking Configuration 5.2.1 Introduction At present, file system checking only checks for/handles corrupted files instead of the entire Flash. After you enable file system checking, the system scans all files, checks...
  • Page 120: File System Checking Configuration Example

    Delete corrupted files and recycle the corresponding storage space. II. Configuration procedure <3Com> system-view System View: return to User View with Ctrl+Z. [3Com] vfs check check-method discard auto VFS: The space will be take back automatically after discard. [3Com] quit <3Com> vfs check file-system Checking file system, please wait...
  • Page 121: Configuring Authentication And Authorization

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 File Management FTP Client service, that is, the user can directly input the ftp command in the user view to establish a connection with a remote FTP Server to access the files in the remote host.
  • Page 122: Configuring Operating Parameters Of Ftp Server

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 File Management Operation Command Configure the authorization information service-type ftp-directory of the FTP user (in local user view) directory] Disable FTP service undo service-type ftp Restore the default directory authorized undo service-type ftp ftp-directory...
  • Page 123 3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 File Management II. Configuring idle-timeout disconnection of FTP To prevent illegal accesses, the connection with an FTP client will be disconnected if no service request from the client has been received for a certain period.
  • Page 124: Introduction To Ftp Client

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 File Management After the above configuration, execute the display command in any view to display the running of the FTP server after configuration, and to verify the configuration. Table 5-13 Commands for monitoring and maintaining the FTP server...
  • Page 125: Configuration Example 1: Upgrading The V 2.41 Application Program With Ftp

    FTP I. Network requirements Upgrade V 2.41 main software through FTP, with the router being the client. IP address of the FTP server is 172.16.104.110; FTP username is 8040 and its password is 3Com. II. Network diagram Console FTP server...
  • Page 126: Configuration Example 2: Upgrading The V 2.41 Application Program With Ftp

    I. Network requirements Upgrade V 2.41 main software through FTP, with the router being the server. IP address of the Ethernet interface on the router is 172.16.104.110; FTP username is 8040 and its password is 3Com. II. Network diagram See Figure 5-1.
  • Page 127: Tftp Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 File Management # Enable FTP server. [3Com ] ftp server enable # (Prompt) Delete the redundant files in the memory device on the router to allow enough space for storing new system files.
  • Page 128: Tftp Client Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 File Management TFTP protocol is used to obtain the memory mirror of the system when the system is started. Generally, the TFTP protocol is performed based on UDP. In TFTP, file transfer is originated by the client. When it is necessary to download files, the client end will send a reading request packet to the TFTP server, receive the respond packet from the server, and send acknowledgement to the server.
  • Page 129 3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 File Management Perform the following configuration in system view. Table 5-17 Set access control list Operation Command Specify the access control list for tftp-server acl acl-number accessing TFTP server Delete the set access control list undo tftp-server acl IV.
  • Page 130: Displaying And Debugging Tftp

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 File Management Note: You may specify a source IP address for the packets sent by the FTP server with the tftp source-interface command or with the tftp source-ip command. If both commands are configured, the one configured later overrides the former.
  • Page 131: Configuration File Management

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 File Management Caution: The xmodem get command is not supported on asynchronous serial interfaces but the AUX port. In addition, simultaneous operations are not allowed. 5.5.1 Configuring Xmodem Perform the following configuration in user view.
  • Page 132 3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 File Management II. Displaying the current and initial configurations of the router When the router is powdered on, it reads out a configuration file in the default storage path to execute the initialization. So the configuration file in the default storage path is called startup configuration.
  • Page 133 3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 File Management When the file-name argument is not specified, the configurations you made are saved to the configuration file loaded at this startup. Executing this command without the safely keyword can make the speed of saving configuration files fast, but these files cannot survive a reboot or power-off during the saving process;...
  • Page 134: Naming Configuration Files And Setting Their Selection Order At Boot

    Factory default configuration file name; v 2.41cfg.def its contents are vendor-specified. Name of the configuration files for 3Com v 2.41cfg.txt devices manufactured before. II. Selecting the configuration file Following are how configuration files are selected at a system boot: If you do not set to ignore configuration file booting, configuration files are selected in the order described in 2) and 3).
  • Page 135 Where, remotefile is a configuration file (v 2.41cfg.cfg) on the router. III. Backing up using TFTP The router is operating as TFTP Client. To upload the configuration file from the router to TFTP Server, a PC, execute the following command: <3Com> tftp x.x.x.x put localfile [remotefile] 3Com Corporation 5-21...
  • Page 136 3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 File Management Where, localfile specifies the name of the configuration file on the router and remotefile specifies the name of the uploaded configuration file to be saved on TFTP Server. 3Com Corporation...
  • Page 137: User Interface Overview

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 User Interface Configuration Chapter 6 User Interface Configuration 6.1 User Interface Overview 6.1.1 Brief Introduction User interface view is a new feature provided by the system to manage asynchronous interfaces working in the flow mode. The emergence of this kind of view allows the user to configure the login parameters of various users in a similar way, for these different kinds of interfaces are usually used for system configuration management.
  • Page 138: User Interface Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 User Interface Configuration I. Absolute numbering There are four categories of user interfaces in the system and they are ordered in certain sequence, specifically, CON, AUX, TTY, and VTY. There is only one Console port and one AUX port, but there can be several TTY and VTY user interfaces, with the interfaces of each type being numbered separately in sequence.
  • Page 139: Configuring The Current User Interface To Support The Protocol(S)

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 User Interface Configuration Table 6-1 Access user interface view Operation Command Access a single-user or multi-user user-interface [ type-keyword ] number interface view [ ending-number ] For example: Access the view of the user interface aux.
  • Page 140 3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 User Interface Configuration I. Configuring transmission speed Table 6-3 Configure transmission speed Operation Command Set a transmission speed speed speed-value Restore the default transmission speed undo speed Asynchronous serial interfaces support the transmission at the speed of...
  • Page 141: Configuring Terminal Attributes

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 User Interface Configuration III. Setting parity bit Table 6-5 Set parity bit Operation Command parity { none | even | odd | mark | Set parity bit space } Set parity bit to the default value undo parity Following are the descriptions of the parameters.
  • Page 142 3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 User Interface Configuration I. Starting the terminal service Table 6-8 Enable the terminal service Operation Command Enable the shell service shell Disable the shell service undo shell Caution: By default, the terminal service is enabled on all user interfaces.
  • Page 143 3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 User Interface Configuration Table 6-10 Configure user interface locking function Operation Command Lock user interface. lock # For example, you have accessed the router via VTY1, and you lock the user-interface vty 1 now because you will leave for a while.
  • Page 144: Configuring Modem Attributes

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 User Interface Configuration Table 6-13 Enable message transfer between user interfaces Operation Command Enable message transfer between user send { all | number | type-name interfaces. number } 6.2.5 Configuring Modem Attributes In the event of dial-in via a modem into an asynchronous interface, you can manage and configure the modem-concerned parameters in user interface view.
  • Page 145: Configuring Inbound/Outbound Call Restriction On The Vty User Interface

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 User Interface Configuration A common approach is to configure the Telnet command using the auto-execute command command on the terminal so that the user may automatically connect to the specified host.
  • Page 146: Enabling/Disabling Console Login Re-Authentication

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 User Interface Configuration Table 6-16 Configure the inbound/outbound call restriction on the VTY user interface Operation Command Configure the inbound/outbound call acl acl-number { inbound | outbound } restriction on the VTY user interface...
  • Page 147: Displaying Use Information

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 User Interface Configuration Operation Command Delete the existing shortcut key or key undo escape-key combination used to abort tasks The default shortcut key combination for aborting tasks is <CTL+C>. 6.3 Displaying and Debugging After the above configuration, execute the display command in any view to display the user interface configuration, and to verify the configuration.
  • Page 148: Chapter 7 User Management

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 7 User Management Chapter 7 User Management 7.1 User Management Overview A router is not configured with a user password when it is powered on for the first time. In that condition, any user can perform configuration on the router as long as connecting his PC with the router via a Console port.
  • Page 149: User Authentication

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 7 User Management commands at their own, or lower, levels. If password authentication or no authentication applies, the command level that a user can access depends on the level of the user interface where he logs in.
  • Page 150: User Management Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 7 User Management can upload or download files on the router from the remote, and a PPP user can access the network via the PPP connection with the router. The configuration of Telnet/HyperTerminal user will be introduced in this section. For the configuration of FTP users, refer to the section “5.3 FTP Configuration”...
  • Page 151: Configuring Username And Password

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 7 User Management 7.2.2 Configuring Username and Password I. Setting password for password authentication If you choose password authentication when configuring the authentication mode, you need to set the password. Perform the following configuration in user interface view.
  • Page 152: Configuring User Priority

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 7 User Management Operation Command Configure the user in the current ISP domain to adopt local authentication scheme (in ISP scheme local domain view) 7.2.3 Configuring User Priority The priority configuration of the user interface and the user determines the system commands that can be accessed.
  • Page 153: Displaying User Information

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 7 User Management level indicates the priority of the user, ranging from 0 to 3. 0 indicates the lowest level and 3 the highest. The default priority is 1 after the user configuration.
  • Page 154: Typical Example Of User Management

    7.4 Typical Example of User Management 7.4.1 Performing Password Authentication The user need enter the password 3Com when logging onto the system from the VTY 0 by password authentication. The user priority is 3. The operation commands are shown as follows: <3Com>...
  • Page 155: Chapter 8 Ntp Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 8 NTP Configuration Chapter 8 NTP Configuration 8.1 Brief Introduction Network time protocol is a TCP/IP protocol intended for advertising precise time throughout a network. Its transmission is based on UDP. The basic principle is...
  • Page 156: Ntp Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 8 NTP Configuration When the NTP packet leaves Router B, Router B adds its timestamp to it again, which is 11:00:02am (T3). When Router A receives the response packet, it adds a new timestamp to it, which is 10:00:03am (T4).
  • Page 157: Configuring Ntp Operation Mode

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 8 NTP Configuration Set the interface for the local to transmit the NTP messages Set the local clock as the NTP master clock Enable/disable the interface to receive the NTP messages Set the access control authority of the local server service Set the number of sessions allowed to be established locally 8.2.1 Configuring NTP Operation Mode...
  • Page 158 3Com Router 3000 Ethernet Family Configuration Guide Chapter 8 NTP Configuration Operation Command undo ntp-service unicast-server Remove NTP server mode {X.X.X.X | server-name } The range of the NTP version number is 1 to 3. It is 3 by default. The range of the authentication key ID number is 1 to 4294967295.
  • Page 159 3Com Router 3000 Ethernet Family Configuration Guide Chapter 8 NTP Configuration Table 8-3 Configure NTP broadcast server mode Operation Command ntp-service broadcast-server Configure NTP broadcast server [ authentication-keyid keyid | version number ] * Remove NTP broadcast server mode undo ntp-service broadcast-server The range of the NTP version number is 1 to 3.
  • Page 160: Configuring Ntp Id Authentication

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 8 NTP Configuration Table 8-5 Configure NTP multicast server mode Operation Command ntp-service multicast-server Configure NTP multicast server mode [ X.X.X.X ] [ authentication-keyid keyid | ttl ttl-number | version number ] *...
  • Page 161 3Com Router 3000 Ethernet Family Configuration Guide Chapter 8 NTP Configuration Table 8-7 Configure NTP ID authentication Operation Command Enable NTP ID authentication ntp-service authentication enable undo ntp-service authentication Disable NTP ID authentication enable II. Setting NTP Authentication Key The following configuration is used to set NTP authentication key.
  • Page 162: Setting The Interface For The Local To Transmit Ntp Messages

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 8 NTP Configuration Table 8-10 Associate the specified key with the NTP server Operation Command ntp-service unicast-server { X.X.X.X | In server mode, associate the specified server-name authentication-keyid key with the NTP server.
  • Page 163: Configuring An Interface To Receive Ntp Messages

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 8 NTP Configuration Table 8-13 Set the local clock as the NTP master clock Operation Command Set the local clock as the NTP master ntp-service refclock-master [ X.X.X.X ] clock [ layers-number ]...
  • Page 164: Setting Number Of Sessions Allowed To Be Established Locally

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 8 NTP Configuration Table 8-15 Set the access authority of the NTP service of the local router Operation Command ntp-service access query Set the access authority of the NTP synchronization | server | peer }...
  • Page 165: Ntp Typical Configuration Examples

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 8 NTP Configuration Table 8-17 NTP monitoring and maintenance Operation Command Display the state information of the NTP display ntp-service status service Display the association state of the NTP display ntp-service sessions...
  • Page 166 3Com Router 3000 Ethernet Family Configuration Guide Chapter 8 NTP Configuration II. Network diagram Ethernet1/0/0: 3.0.1.31 Ethernet1/0/0: Quidway3 1.0.1.11 Quidway1 Ethernet1/0/0: 1.0.1.2 3.0.1.2 3.0.1.32 Quidway0 Quidway4 Ethernet1/0/0: 1.0.1.12 Ethernet1/0/0: Quidway2 3.0.1.33 Quidway5 ..Figure 8-2 NTP typical configuration network diagram III.
  • Page 167: Configure Ntp Peer Examples

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 8 NTP Configuration The state of 3Com2 after synchronization includes: [3Com2] display ntp-service status Clock status: synchronized Clock stratum: 3 Reference clock ID: 1.0.1.11 Nominal frequency: 250.0000 Hz Actual frequency: 249.9992 Hz Clock precision: 2^19 Clock offset: 198.7425 ms...
  • Page 168 3Com Router 3000 Ethernet Family Configuration Guide Chapter 8 NTP Configuration # Enter the system view. <3Com4> system-view # Set 3Com3 as the time server and the stratum number is 3 after synchronization. [3Com4] ntp-service unicast-server 3.0.1.31 Configure 3Com5 (3Com4 has been synchronized to 3Com3) # Enter the system view.
  • Page 169: Configuring Ntp Broadcast Mode

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 8 NTP Configuration 8.4.3 Configuring NTP Broadcast Mode I. Network requirements 3Com3 sets the local clock as the NTP master clock and the stratum number is 2. It transmits broadcast packets from Ethernet 1/0/0. 3Com4 and 3Com1 are set to listen to the broadcast message from their interfaces respectively.
  • Page 170: Configuring Ntp Broadcast Mode With Id Authentication

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 8 NTP Configuration [3Com4] display ntp-service status Clock status: synchronized Clock stratum: 3 Reference clock ID: 3.0.1.31 Nominal frequency: 250.0000 Hz Actual frequency: 249.9992 Hz Clock precision: 2^19 Clock offset: 198.7425 ms Root delay: 27.47 ms...
  • Page 171 3Com Router 3000 Ethernet Family Configuration Guide Chapter 8 NTP Configuration # Set NTP authentication key. [3Com3] ntp-service authentication-keyid 88 authentication-mode md5 123456 # Set the local authentication key as reliable. [3Com3] ntp-service reliable authentication-keyid 88 # Enter the interface Ethernet1/0/0 view.
  • Page 172: Configuring Ntp Multicast Mode

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 8 NTP Configuration reference time: 17:03:32.022 UTC Sep 6 2003(BF422AE4.05AEA86C) Now 3Com4 is synchronized with 3Com3. Its stratum number is 4, higher than that of 3Com3 by one. 8.4.5 Configuring NTP Multicast Mode I.
  • Page 173: Configuring Ntp Server Mode With Id Authentication

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 8 NTP Configuration [3Com1-Ethernet1/0/0] ntp-service multicast-client In the above configuration, 3Com4 and 3Com1 are configured to listen to broadcast messages from Ethernet 1/0/0 and 3Com3 is configured to transmit broadcast packets from Ethernet 1/0/0. Because 3Com1 and 3Com3 are on different network segment, 3Com1 cannot receive the broadcast packets transmitted by 3Com3.
  • Page 174 3Com Router 3000 Ethernet Family Configuration Guide Chapter 8 NTP Configuration # Enter the system view. <3Com1> system-view # Set the local clock as the NTP master clock and the stratum number is 2. [3Com1] ntp-service refclcok-master 2 Configure 3Com2 # Enter the system view.
  • Page 175: Configuring Server/Client Time Synchronization For Mpls Vpn

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 8 NTP Configuration Clock offset: 198.7425 ms Root delay: 27.47 ms Root dispersion: 208.39 ms Peer dispersion: 9.63 ms Reference time: 17:03:32.022 UTC Thu Sep 6 2001 (BF422AE4.05AEA86C) Now 3Com2 is synchronized with 3Com1. Its stratum number is 3, higher number larger than that of 3Com1 by one.
  • Page 176 3Com Router 3000 Ethernet Family Configuration Guide Chapter 8 NTP Configuration Note: This example assumes that: MPLS VPN configuration is complete. CE 1 and PE 1 can ping each other, so can PE 1 and PE 2, and PE 2 and CE 2.
  • Page 177: Configuring Symmetric Time Synchronization For Mpls Vpn

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 8 NTP Configuration 8.4.8 Configuring Symmetric Time Synchronization for MPLS VPN I. Network requirements Configure devices to achieve these goals: PE 2 synchronizes to PE 1. PE 1 synchronizes to local clock source at stratum 1.
  • Page 178 3Com Router 3000 Ethernet Family Configuration Guide Chapter 8 NTP Configuration [PE2] display ntp-service sessions source reference stra reach poll now offset delay disper ************************************************************************** [12345]133.1.1.2 LOCL -12.0 32.0 15.6 note: 1 source(master),2 source(peer),3 selected,4 candidate,5 configured [PE2] display ntp-service trace server 127.0.0.1,stratum 2, offset -0.012000, synch distance 0.02448...
  • Page 179: Chapter 9 Snmp Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 SNMP Configuration Chapter 9 SNMP Configuration 9.1 Protocol Introduction 9.1.1 Brief Introduction Currently, the most widely used network management protocol in computer network is Simple Network Management Protocol (SNMP), which is an applicable industrial standard adopted widely.
  • Page 180 3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 SNMP Configuration Figure 9-1 MIB tree structure In the diagram above, the managed object B can be uniquely determined by a string of digits {1.2.1.1}, which is the Object Identifier of the managed object. While the MIB...
  • Page 181: Snmp Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 SNMP Configuration MIB Property Contents of MIB Standard or Specification Performance trap MIB –– Device panel MIB –– Private MIB Device resource MIB –– VLAN –– –– 9.2 SNMP Configuration The SNMP configuring includes:...
  • Page 182: Setting The Corresponding Versions Of Snmp

    Example: Enable version SNMP V2C and SNMP V3. [3Com] snmp-agent sys-info version v3 v2c Example: Disable version SNMP V2C and SNMP V1. [3Com] undo snmp-agent sys-info version v1 v2c 9.2.3 Setting the Community Name SNMPV1, SNMPV2C use community names for authentication and SNMP packets that do not match the authenticated community name of the device will be dropped.
  • Page 183: Setting The Snmp Group

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 SNMP Configuration # Set the public community to read privilege. [3Com] snmp-agent community read public # Set the private community to write privilege. [3Com] snmp-agent community write private 9.2.4 Setting the SNMP Group This configuration can be used to set and delete an SNMP group.
  • Page 184: Setting The Id And Contact Of The Administrator

    “HMAC-MD5-96”, and the authentication password being “hello”. [3Com] snmp-agent usm-user v3 John Johngroup authentication-mode md5 hello 9.2.6 Setting the ID and Contact of the Administrator System contact is a management variable of the group system in MIB II and it contains the ID and contact of relevant administrator of the managed devices (router).
  • Page 185: Setting The Engine Id Of A Local Device

    # Use the following commandFor example, to set the address of the Trap target host to 202.38.160.6, using and to use the community name public. [3Com] snmp-agent target-host trap address udp-domain 202.38.160.6 udp-port 5000 params securityname public 3Com Corporation...
  • Page 186: Setting The Router's Location (Syslocation)

    # Use the following command to take the IP address of the Ethernet interface 1/0/0 as the source address of the Trap packet. [3Com] snmp-agent trap source ethernet 1/0/0 9.2.12 Setting the SNMP View These configurations can be used to establish, update or delete the view information.
  • Page 187: Setting The Maximum Size Of Snmp Packets

    # Use the following command to establish a view named mib1 containing all the objects of Internet. [3Com] snmp-agent mib-view included mib1 1.3.6.1 9.2.13 Setting the Maximum Size of SNMP Packets This configuration can be used to set the maximum size of SNMP packets, which an Agent can receive or send.
  • Page 188: Setting The Saving Time Of Trap Packets

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 SNMP Configuration The range of the packet queue length is 1 to 1000 with the default value as 100. # Set the packet queue length of the host sending the Trap packets as 200.
  • Page 189: Example Of Typical Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 SNMP Configuration Operation Command display snmp-agent mib-view Display the MIB view of the current [ exclude | include | viewname configuration view-name ] Display the character string of system display snmp-agent sys-info contact...
  • Page 190 Figure 9-3 NMS user interface As shown in Figure 9-3, enter the instance "iso.org.dod.internet.mgnt.mib-2.system" for query. Click <Start Query>to get the following results: SysDescr.0 : STRING: HUA WEI CORP. SNMP agent for 3Com Routers 3Com Corporation 9-12...
  • Page 191 3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 SNMP Configuration SysUpTime.0 : (105300) 00:17:33:00 SysContact.0 : Mr.Wang-Tel:3306 SysName.0 : sysadm SysLocation.0 : telephone-closet,3rd-floor SysServices.0 : If you cannot understand the meanings of these management variables in the MIB, you can get the related explanations just by clicking <Describe>.
  • Page 192: Chapter 10 Rmon Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 10 RMON Configuration Chapter 10 RMON Configuration 10.1 Introduction Remote monitoring (RMON) is a kind of management information base (MIB) defined by Internet Engineering Task Force (IETF); it is the most important enhancement to MIB-II.
  • Page 193: Rmon Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 10 RMON Configuration 10.2 RMON Configuration Note: To allow an NMS to administer your router, you must configure SNMP agents before configuring RMON on the router. Then, you can retrieve alarms and logs about the router on the NMS.
  • Page 194: Adding/Removing A History Control Entry

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 10 RMON Configuration Note: Before adding an alarm entry, you need to define its associated event with the rmon event command. Perform the following configuration in system view. Table 10-2 Add/remove an alarm entry...
  • Page 195: Adding/Removing A Prialarm Entry

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 10 RMON Configuration 10.2.4 Adding/Removing a Prialarm Entry Prialarm entries can operate on the samples of the monitored variables according to the defined calculating formula and compare the resultant values with the predefined thresholds.
  • Page 196: Rmon Configuration Example

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 10 RMON Configuration Operation Command Remove a statistics entry undo rmon statistics entry-number A statistics entry holds the accumulative value since the corresponding event is defined. You can check information about the statistics table of RMON or the specified statistics entry with the display rmon statistics command.
  • Page 197 [3Com] snmp-agent target-host trap address udp-domain 129.1.1.111 params securityname 3Com # Configure a RMON alarm entry. [3Com] rmon event 1 description rising trap router1 owner 3Com-rmon [3Com] rmon event 1 description falling trap router1 owner 3Com-rmon [3Com] rmon alarm 1 1.3.6.1.2.1.16.1.1.1.4.1 5 delta rising_threshold 100 1 falling_threshold 50 2 # Assign an IP address to interface Ethernet 0/0/0.
  • Page 198: Chapter 11 Terminal Services

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services Chapter 11 Terminal Services 11.1 Terminal Services Overview System provides three types of terminal services entering the command line interface: Local configuration through the Console Local or remote configuration through AUX port...
  • Page 199: Terminal Service Characteristics Of The Remote Config On Aux Port

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services PSTN, so that the user can establish the connection between PC and the remote router by dial-up on the PC. After the dial-up is successful, the user can set the working parameters of the remote routers through entering the configuration commands on the terminal.
  • Page 200: Telnet Terminal Services

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services 11.4 Telnet Terminal Services 11.4.1 Telnet Service Types The Telnet protocol belongs to application layer protocol in the TCP/IP protocol suite, which provides the function of remote logon and virtual terminal through the network.
  • Page 201: Establishing Telnet Connection

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services III. Redirecting Telnet To use terminal redirecting function, you need to log into the router from a designated port via Telnet client program, and then to establish connection with the serial port devices connected with the asynchronous interface of the router.
  • Page 202: Establishing Redirected Telnet Connection

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services II. Configuring idle timeout for a Telnet connection Perform the following configuration in user interface view. Table 11-5 Configure idle timeout for the Telnet connection Operation Command Configure the idle timeout for the Telnet...
  • Page 203 By default, the mode of the asynchronous interface is protocol, DSR/DTR signal detect is enabled, and flow control is set to none. Note that the asynchronous interfaces available with the 3Com Series Routers use seven wires and allow DSR/DTR signal detect. You must configure the undo detect...
  • Page 204 3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services Note: To enable Telnet redirect on a port successfully after inputting the undo redirect enable command, you must wait a while to have the system close all the sockets using that port number.
  • Page 205 3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services Operation Command Disable Telnet option negotiation during redirect refuse-negotiation setup of redirected Telnet connection Enable Telnet option negotiation during undo redirect refuse-negotiation setup of redirected Telnet connection By default, a Telnet connection can be idle for 360 seconds before it times out, carriage returns are not touched, and Telnet option negotiation is enabled.
  • Page 206: Specifying A Source Interface/Ip Address For The Telnet Server

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services You may terminate the redirected connection by pressing <Ctrl+]>. 11.4.4 Specifying a Source Interface/IP Address for the Telnet Server Perform the following configuration in system view. Table 11-12 Specify a source interface or source IP address for the Telnet server...
  • Page 207 3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services By default, the user interface is not bound with any VPN instance. 11.4.6 Displaying and Debugging After completing the above configuration, execute the display commands in any view to view information on Telnet and to verify the configuration.
  • Page 208: Telnet Redirect Configuration Example I

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services II. Shortcut <Ctrl+]> When the network connection is normal, to press <Ctrl+]> is to notify Telnet server to interrupt the current Telnet login. Its effect is the same as the Quit command, that is, the server interrupts the connection initiatively.
  • Page 209: Telnet Redirect Configuration Example Ii

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services [Router-async1/0/0]] async mode flow [Router-async1/0/0] quit # Enable Telnet redirect and configure the related parameters on the user interface. [Router] user-interface tty 1 [Router-ui-tty1] undo shell [Router-ui-tty1] redirect enable...
  • Page 210: Pad Terminal Services

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services [Router] interface Ethernet0/0/0 [Router-Ethernet0/0/0] ip address 201.1.1.1 255.255.255.0 [Router-Ethernet0/0/0] quit # Configure async1/0/0 and async1/1/0. [Router] interface async1/0/0 [Router-async1/0/0] async mode flow [Router-async1/0/0] flow-control none [Router-async1/0/0] interface async1/1/0 [Router-async1/1/0] async mode flow [Router-async1/1/0] quit # Enable Telnet redirect and configure the related parameters on the user interfaces.
  • Page 211: Ssh Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services with other terminals through the X.25 network. Therefore, X.25 PAD devices actually serve as a procedure translator or network server, providing services to different terminals to help them access the X.25 network.
  • Page 212 3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services Workstation Local router Local Ethernet Laptop Server Workstation SSH client Remote Ethernet Remote router SSH server Laptop Server Figure 11-9 Establish an SSH channel through a WAN To establish an SSH connection, the server and the client must go through the following...
  • Page 213 3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services Thus, the server and the client obtain the same session key. During the session, both ends use the same session key to perform encryption and decryption, thereby guaranteeing the security of data transfer.
  • Page 214: Configuring The Ssh Server

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services I. Configuring the SSH server Set the protocols supported on the current user interface Create a local RSA key pair Configure authentication mode for SSH user Create SSH users...
  • Page 215 3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services Caution: If the protocol supported by the user interface is set to SSH, you must set the authentication mode to authentication-mode scheme to ensure a successful login; if you use authentication-mode password or authentication-mode none, the configuration of the protocol inbound ssh command fails.
  • Page 216 3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services Table 11-17 Configure authentication mode for SSH user Operation Command user username Specify an authentication mode for an authentication-type { password | rsa | SSH user all } Restore the default, where login is...
  • Page 217 3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services Note: If password authentication is adopted, the user name specified in the ssh user command must be consistent with the user name defined in AAA. If RSA authentication is adopted, the value of this argument is a local SSH user name and needs not to be defined in AAA.
  • Page 218 3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services Perform the following configuration in system view. Table 11-21 Set maximum number of SSH authentication retries Operation Command maximum number server authentication-retries authentication retries times Restore default maximum number of...
  • Page 219 3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services The client public key is a hexadecimal character string generated through PKCS coding of SSHKEY.EXE software. The following shows configuration details. [3Com] rsa peer-public-key 3Com002 [3Com-rsa-public-key] public-key-code begin [3Com-rsa-key-code] 308186028180739A291ABDA704F5D93DC8FDF84C427463...
  • Page 220 3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services Remove the association of a public key to an undo ssh user username assign SSH user rsa-key X. Configuring a service type for an SSH user Perform the following configuration in system view to configure a service type for an SSH user.
  • Page 221: Configuring The Ssh Client

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services Operation Command Delete the source IP address for the undo ssh-server source-ip packets sent by the SSH server By default, the source IP address in each packet sent by the SSH server is the IP address of the interface where the packet is sent out.
  • Page 222 3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services Table 11-29 Associate an SSH server with a public key Operation Command Associate an SSH server with its public ssh client server assign rsa-key keyname Remove an SSH server to public key...
  • Page 223 3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services By default, the source IP address in each packet sent by the SSH client is the IP address of the interface where the packet is sent out. Note: You may specify a source IP address for the packets sent by the Telnet server with the ssh2 source-interface command or with the ssh2 source-ip command.
  • Page 224: Ssh Configuration Example

    Ethernet interface. Run SSH2.0 client software on the terminal for securely logging onto the router for configuration and management. The username of the SSH client is client001@169.254.0.1 and the password is 3Com. II. Network diagram ethernet:169.254.0.5 ethernet:169.254.0.1...
  • Page 225 [3Com-key-code] BB2FC1ACF3EC8F828D55A36F1CDDC4BB45504F020125 [3Com-key-code] public-key-code end [3Com-rsa-public] public-key-code end [3Com] ssh user client002 assign rsa-key 3Com002 Configure the SSH client When password authentication applies, you need to configure at the client the IP address of a reachable interface on the SSH server or the router, 169.254.0.1 in this example, set the protocol type to SSH, use SSH version 2.
  • Page 226: Ssh Client Configuration Example

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services Sent username "client001" client001@169.254.0.1's password: ********************************************************* All rights reserved (1997-2004) Without the owner's prior written consent, *no decompiling or reverse-engineering shall be allowed.* ********************************************************* <Router> When RSA authentication applies, you must specify an RSA private key file, which is generated randomly by the client software in addition to the configuration tasks done with password authentication.
  • Page 227 3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services II. Network diagram RouterA SSH server 10.165.87.136 RouterB SSH client Figure 11-11 Network diagram for SSH client configuration III. Configuration procedure Configure the SSH server (Router A) Refer to the configuration procedure in section 11.6.6 “SSH Configuration Example”.
  • Page 228 *no decompiling or reverse-engineering shall be allowed.* ********************************************************* <3Com> When RSA authentication is adopted, do the following: [3Com] ssh2 10.165.87.136 22 perfer_kex dh_group1 perfer_ctos_cipher des perfer_stoc_cipher 3des perfer_ctos_hmac md5 perfer_stoc_hmac md5 Please input the username: client003 Trying 10.165.87.136... Press CTRL+K to abort Connected to 10.165.87.136...
  • Page 229: Sftp Service

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services 11.7 SFTP Service 11.7.1 Introduction to SFTP Secure FTP (SFTP) is a new feature introduced in SSH 2.0. SFTP is established on SSH connections to provide secured data transfer.
  • Page 230: Configuring The Sftp Client

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services Table 11-36 Enable the SFTP server Operation Command Enable the SFTP server sftp server enable Disable the SFTP server undo sftp server By default, the SFTP server is disabled.
  • Page 231 3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services To do… Use the command… In… view Remarks Rename a file on rename the SFTP server Downloa d a file from remote SFTP server Upload a File- file from...
  • Page 232 3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services II. Disabling the SFTP client Execute the following command in SFTP view to disable the SFTP client. Table 11-39 Disable the SFTP client Operation Command Disable the SFTP client...
  • Page 233 3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services Operation Command delete remote-file Delete a file from the SFTP server remove remote-file V. Specifying a source interface/IP address for the SFTP client Perform the following configuration in system view.
  • Page 234: Sftp Configuration Example

    An SSH connection is present between Router A and Router B. Use Router A as an SFTP server with IP address 10.111.27.91. Use Router B as an SFTP client. Create an SSH user account 8040 with password 3Com. II. Network diagram Router B...
  • Page 235 3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services -rwxrwxrwx 1 noone nogroup 225 Sep 01 06:55 pub -rwxrwxrwx 1 noone nogroup 0 Sep 01 08:00 z sftp-client> delete z Remove this File?(Y/N) flash:/zy File successfully Removed sftp-client> dir...
  • Page 236: Dumb Terminal Service

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services -rwxrwxrwx 1 noone nogroup 283 Aug 24 07:39 pubkey1 drwxrwxrwx 1 noone nogroup 0 Sep 01 06:22 new drwxrwxrwx 1 noone nogroup 0 Sep 02 06:33 new2 -rwxrwxrwx 1 noone...
  • Page 237: Configuring Dumb Terminal Service

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services In flow mode, the async interface directly logs in to the command-line interface of a router via the async dedicated line, and then boots Telnet Client program to log in to other remote systems.
  • Page 238 3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services Note: Set the async interface to disable Modem dial-in in the relevant user interface view. For more details, see the User Interface Configuration chapter. II. auto-execute command configuration If the async interface of the router is configured with the auto-execute command command, and a user presses two carriage enters on its external terminal, the router will automatically execute some commands to directly enter the operating state.
  • Page 239: Timely Disconnecting Dumb Terminals

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services 10.110.164.45 SCO UNIX Workstation Ethernet 10.110.164.44 Router Figure 11-14 auto-execute command configuration diagram Configuration procedure is as follows: # Configure the async interface (e.g. serial1/0/0) to work in dumb terminal mode, see the configuration in the preceding section.
  • Page 240: Remote Shell Service

    RSH daemon for the communications with the RSH client. A 3Com series router can work as the RSH client where you can use the rsh command to execute commands on the server host remotely, as shown in the following figure.
  • Page 241: Debugging Rsh

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services Table 11-46 Operate on the RSH client Operation Command rsh host [ user username ] command Execute a command remotely. remote-command 11.9.3 Debugging RSH To verify the effect after you execute the rsh command, use the debugging rsh command.
  • Page 242 3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services I. Checking that the RSH daemon has been installed and started in Windows NT/2000/XP/2003 Enter [Start/Settings/Control Panel/Administrative Tools]. (For Windows XP, when you use the classification view of the Control Panel window, select Administrative Tools from Performance and Maintenance.)
  • Page 243: Rlogin Terminal Service Connectivity

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services Double-click on the service row, and in the popup Remote Shell Daemon Properties window, click <Start> to start the service, as shown in the following figure. Figure 11-19 Remote Shell Daemon Properties window II.
  • Page 244: Rlogin Configurations

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services On the router, V 2.41 delivers the rlogin client service similar to a multi-port serial interface card, allowing the logging user terminals (digital or analog) to rlogin to a remote Unix host.
  • Page 245: Rlogin Configuration Example

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 Terminal Services 11.10.4 Rlogin Configuration Example I. Network requirements Rlogin onto a UNIX server with the IP address of 192.168.0.200 as the user zhb, and abort the local session by pressing <Ctrl+K> or by entering a tilde (~) plus a dot (.), a local terminal escape sequence.
  • Page 246 3Com Router 3000 Ethernet Family Configuration Guide Interface Operation 3Com Corporation...
  • Page 247 3Com Router 3000 Ethernet Family Configuration Guide Table of Contents Table of Contents Chapter 1 Interface Configuration Overview ................1-1 1.1 Interface Overview ......................1-1 1.2 Interface Configuration ...................... 1-1 1.2.1 Interface View......................1-1 1.2.2 Configuring Interface Description................1-2 1.2.3 Configuring an Average Interface Rate Measurement Period ........ 1-2 1.2.4 Enabling/Disabling an Interface to Send UPDOWN Traps ........
  • Page 248 3Com Router 3000 Ethernet Family Configuration Guide Table of Contents Chapter 4 Logical Interface Configuration ................. 4-1 4.1 Dialer Interface........................4-1 4.1.1 Introduction to Dialer Interface ................4-1 4.2 Loopback Interface ......................4-1 4.2.1 Introduction to Loopback Interface................4-1 4.2.2 Configuring a Loopback Interface ................4-1 4.3 Null Interface........................
  • Page 249: Interface Overview

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 Interface Configuration Overview Chapter 1 Interface Configuration Overview 1.1 Interface Overview Router interface refers to the part through which a router system exchanges data and interacts with other devices on the network. It functions to accomplish the data exchange between the router and other network devices.
  • Page 250: Configuring Interface Description

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 Interface Configuration Overview Note: In V 2.41, the command used for entering the E1/T1 interface view is controller { e1 | t1 }, which is different from those for entering other interface views.
  • Page 251: Testing Interface/Line Loops

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 Interface Configuration Overview Table 1-4 Enable/disable the interface to send UPDOWN traps Operation Command Enable the interface to send UPDOWN enable snmp trap updown traps Disable the interface to send UPDOWN...
  • Page 252: Displaying And Debugging Interfaces

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 Interface Configuration Overview If the interface supports dial-up, you should also configure parameters in Dial Control Center (DCC) operation and modem management. If the interface is working as a master interface or standby interface in the backup center, you should configure the relevant backup center operating parameters.
  • Page 253 3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 Interface Configuration Overview Note: When a physical interface on the router has no cable connection, shut down it with the shutdown command to prevent anomalies caused by interferences. 3Com Corporation...
  • Page 254: Ethernet Interface

    2.1.1 Introduction to Ethernet Interface I. Ethernet interface types Fast Ethernet (FE) interfaces supported by 3Com Routers include electrical and optical interfaces, complying with 100Base-TX and 100Base-FX physical layer criteria respectively. The supported Gigabit Ethernet (GE) interfaces also include electrical and optical interfaces.
  • Page 255 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 LAN Interface Configuration Enter specified Ethernet interface view Set the network protocol address Configure Maximum Transmission Unit (MTU) Select the operating speed of Ethernet interface Select the operating mode of Ethernet interface...
  • Page 256 QoS queue length. By default, the queue scheduling mechanism adopted on the interfaces of 3Com Routers is FIFO. You can use the qos fifo queue-length command to change the queue length. For detailed QoS queue configuration, see the section of QoS configuration in this manual.
  • Page 257 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 LAN Interface Configuration Note: By default, both operating speeds and modes of FE and GE electrical interfaces are negotiation. You can force to change the operating speeds and modes, but should keep the speed and mode the same as those of the peer end.
  • Page 258 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 LAN Interface Configuration Table 2-6 Enable or disable local loopback Operation Command Enable local loopback loopback Disable local loopback undo loopback By default, local loop is disabled. Note: Ethernet interfaces will work in full-duplex mode when loopback is enabled.
  • Page 259: Displaying And Debugging Ethernet Interface

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 LAN Interface Configuration VIII. Configuring the operating mode of a GE interface GE optical interfaces provide two operating modes: negotiation and force. In negotiation mode, the interface chip checks negotiation code, negotiating the format of the PAUSE frame and the peer state (that is, whether it is faulty).
  • Page 260: Ethernet Configuration Example

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 LAN Interface Configuration Table 2-10 Display the state of a specified Ethernet interface Operation Command Display the state of a specified Ethernet display interface ethernet interface gigabitethernet } [ interface-number ] 2.1.4 Ethernet Configuration Example...
  • Page 261 10 Mbps. In this case, the user should ensure that the remote end could work at 10 Mbps. However, when the FE interface on 3Com Series Routers is connected to the 10/100 Mbps adaptive port of the hub, this information does not mean setting is incorrect.
  • Page 262 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 LAN Interface Configuration operating mode is incorrect, i.e. one party of the connection is working in full duplex mode while the other party in half duplex mode, fault will occur. That is, when the network traffic increases, the party operating in half duplex mode shows frequent network collisions.
  • Page 263: Chapter 3 Layer 2 Ethernet Port Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Layer 2 Ethernet Port Configuration Chapter 3 Layer 2 Ethernet Port Configuration 3.1 Introduction to Layer 2 Ethernet Ports The legacy routers are only operating at layer 3. Now, the use of switching chips on...
  • Page 264: Configuring Ethernet Ports

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Layer 2 Ethernet Port Configuration VLAN A LAN Switch VLAN B VLAN A LAN Switch VLAN A VLAN B VLAN B Router Figure 3-1 VLAN VLANs port-based, MAC-based, protocol-based, map-based, multicast-based, or policy-based.
  • Page 265: Entering Ethernet Port View

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Layer 2 Ethernet Port Configuration 3.2.1 Entering Ethernet Port View Before you can configure an Ethernet port, you must enter its view first. Perform the following configuration in system view. Table 3-1 Enter Ethernet port view...
  • Page 266: Configuring Ethernet Port Description

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Layer 2 Ethernet Port Configuration 3.2.3 Configuring Ethernet Port Description To distinguish a port from others, you may configure a port description for it. Perform the following configuration in Ethernet port view.
  • Page 267: Enabling/Disabling Flow Control On The Ethernet Port

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Layer 2 Ethernet Port Configuration 3.2.6 Enabling/Disabling Flow Control on the Ethernet Port To prevent packet loss, you may enable flow control. When congestion occurs to one of the two connected routers enabled with flow control, it sends a message asking the peer to stop packet sending.
  • Page 268: Setting The Mac Address Aging Timer

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Layer 2 Ethernet Port Configuration 3.2.8 Setting the MAC Address Aging Timer An appropriately configured aging timer can effectively implement the function of MAC address aging. An inappropriate aging timer, however, either too long or too short, may cause the router to broadcast packets with unknown destination MAC addresses, degrading the performance.
  • Page 269: Enabling/Disabling Loopback On The Ethernet Port

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Layer 2 Ethernet Port Configuration By default, all broadcast traffic can pass through without suppression. 3.2.10 Enabling/disabling Loopback on the Ethernet Port You may enable loopback on an Ethernet port to test whether the port is operating normally.
  • Page 270: Assigning A Default Vlan Id To The Ethernet Port

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Layer 2 Ethernet Port Configuration After assigned to a VLAN, the Ethernet port can forward the packets from the VLAN. If the port is hybrid or trunk, you may assign it to multiple VLANs, allowing each VLAN to communicate with its counterpart on the connected router or switch.
  • Page 271: Ethernet Port Configuration Example

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Layer 2 Ethernet Port Configuration Operation Command Display hybrid or trunk ports. display port { hybrid | trunk } Clear the statistics about the specified reset counters interface [ interface-type Ethernet port or all ports.
  • Page 272: Vlans Involving Multiple Network Segments

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Layer 2 Ethernet Port Configuration III. Configuration procedure Enter the view of each involved Ethernet port, specify its link type, and assign the port to the specified VLAN. If the link type of the port is already access, you can omit the port link-type access command.
  • Page 273 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Layer 2 Ethernet Port Configuration II. Network diagram AR 18-22-24 1.1.1.3 2.2.2.2 1.1.1.2 2.2.2.3 VLAN 10 VLAN 20 Figure 3-3 VLANs involving multiple network segments III. Configuration procedure Enter the view of each involved Ethernet port, specify its link type, and assign the port to the specified VLAN.
  • Page 274: Vlans Involving Multiple Devices

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Layer 2 Ethernet Port Configuration [3Com] interface Ethernet 3/0/0.1 [3Com-Ethernet3/0/0.1] vlan-type dot1q vid 10 [3Com-Ethernet3/0/0.1] ip address 1.1.1.1 255.255.255.0 # Configure Ethernet3/0/0.2 [3Com] interface Ethernet 3/0/0.2 [3Com-Ethernet3/0/0.2] vlan-type dot1q vid 20 [3Com-Ethernet3/0/0.2] ip address 2.2.2.1 255.255.255.0...
  • Page 275: Troubleshooting Ethernet Ports

    [3Com-Ethernet3/0/2] port access vlan 20 # Configure a trunk on the router. [3Com] interface Ethernet 3/0/22 [3Com-Ethernet3/0/22] port link-type trunk [3Com-Ethernet3/0/22] port trunk permit vlan 10 20 Configure the switch # Configure Ethernet 0/0/1 [3Com] interface Ethernet 0/0/1 [3Com-Ethernet0/1] port link-type access...
  • Page 276: Dialer Interface

    The TCP/IP suite provisions that the addresses in the 127.0.0.0 segment are loopback addresses. The interfaces at such addresses are called loopback interfaces. As far as a 3Com Series Router is concerned, the interface Loopback0 is the loopback interface for receiving all the packets sent to the local routers.
  • Page 277: Null Interface

    4.3 Null Interface 4.3.1 Introduction to Null Interface 3Com Series Routers support the Null interface. Such an interface is always UP but cannot forward packets. In addition, no IP address or other link layer protocols can be configured on it.
  • Page 278: Introduction To Subinterface

    192.101.0.0 255.255.0.0 null 0. 4.4 Subinterface 4.4.1 Introduction to Subinterface Introducing the concept of subinterface into V 2.41 allows the users of 3Com Series Routers of high flexibility as the users can configure multiple subinterfaces on a single physical interface in this case.
  • Page 279 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 Logical Interface Configuration I. Creating an Ethernet subinterface Perform the following configuration in system view. Table 4-3 Create/delete an Ethernet subinterface Operation Command Create an Ethernet subinterface and interface ethernet number.sub-number...
  • Page 280: Configuring A Wan Subinterface

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 Logical Interface Configuration III. Configuring other operating parameters As an Ethernet subinterface that has not been assigned with VLAN ID can only support IPX, you can only assign an IPX address to such an Ethernet subinterface and configure the IPX operating parameters.
  • Page 281 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 Logical Interface Configuration Operation Command Delete the specified subinterface from undo interface serial number.sub-number the serial interface. If the serial subinterface (the same as sub-number) that you intend to create has existed, the system will directly enter its view.
  • Page 282: Ethernet Subinterface Configuration Example

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 Logical Interface Configuration Table 4-7 Create/delete an ATM subinterface Operation Command Create an ATM subinterface and interface atm number.sub-number [ p2mp enter its view | p2p ] Delete specified undo interface atm number.sub-number...
  • Page 283 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 Logical Interface Configuration II. Network diagram Internet Internet port1 port1 eth 4/0/0.2 eth 4/0/0.2 non-trunk non-trunk 4.0.0.1/8 4.0.0.1/8 port port Router Router LAN Switch LAN Switch port4 port4 VLAN 20 VLAN 20...
  • Page 284: Wan Subinterface Configuration Example

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 Logical Interface Configuration [3Com] max-packet-process 100000 10 [3Com] max-packet-process 200000 20 4.4.5 WAN Subinterface Configuration Example I. Network requirements As shown in the following figure, the WAN interface Serial0/0/0 on Router A is connected to Router B and Router C via a public FR network.
  • Page 285: Mp-Group And Mfr

    [3Com-Serial0/0/0.2] fr dlci 60 [3Com-Serial0/0/0.2] quit # Configure the static routes from Router A to LAN2 and LAN3. [3Com] ip route-static 129.10.0.0 255.255.0.0 202.38.160.2 [3Com] ip route-static 129.11.0.0 255.255.0.0 202.38.161.2 The configurations of Router B and Router C are omitted.
  • Page 286: Configuring A Virtual-Template

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 Logical Interface Configuration After setting up a VPN session, the system needs to create a virtual interface for exchanging data with the remote end. For this purpose, the system will choose a virtual-template according to the user’s configuration, and dynamically create a virtual...
  • Page 287: Displaying And Debugging Virtual-Template And Virtual Interface

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 Logical Interface Configuration II. Setting operating parameters of virtual-template Compared with a regular physical interface, virtual-templates only support PPP in terms of link layer protocol and IP and IPX in terms of network protocol. accordingly,...
  • Page 288: Virtual Ethernet Interface

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 Logical Interface Configuration The virtual-template had not been assigned with an IP address. Therefore, the virtual interface failed to pass the PPP negotiation and hence could not go up. The virtual-template had not been configured with the IP address (or IP address pool) intended for the peer.
  • Page 289 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 Logical Interface Configuration The user may establish as many as 1024 Virtual Ethernet interfaces. When configuring a PVC to carry PPPoEoA, you must associate a VE interface with the PVC. If the specified VE interface has not been created yet, the configuration will fail and the system will return.
  • Page 290: Link Layer Protocol

    3Com Router 3000 Ethernet Family Configuration Guide Link Layer Protocol 3Com Corporation...
  • Page 291 3Com Router 3000 Ethernet Family Configuration Guide Table of Contents Table of Contents Chapter 1 PPP and MP Configuration ..................1-1 1.1 Introduction to PPP and MP ....................1-1 1.1.1 PPP ......................... 1-1 1.1.2 Introduction to MP ....................1-3 1.2 Configuring PPP ........................ 1-3 1.2.1 Configuring PPP Encapsulation on the Interface............
  • Page 292 3Com Router 3000 Ethernet Family Configuration Guide Table of Contents 2.3.2 Configuring a PPPoE Session ................2-5 2.3.3 Enabling/Disabling the PPPoE Server to Output PPP-Related Log ....... 2-6 2.3.4 Resetting/Deleting a PPPoE Session ..............2-7 2.4 Displaying and Debugging PPPoE ..................2-7 2.5 PPPoE Configuration Example..................
  • Page 293: Introduction To Ppp And Mp

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 PPP and MP Configuration Chapter 1 PPP and MP Configuration 1.1 Introduction to PPP and MP 1.1.1 PPP Point-to-point protocol (PPP) is a link layer protocol that carries network layer packets over point-to-point links.
  • Page 294 3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 PPP and MP Configuration After receiving the Response, the authenticator looks up its local user database for a match according to the username of the authenticatee in the Response. When a match is found, it encrypts the original randomly generated packet with...
  • Page 295: Configuring Ppp

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 PPP and MP Configuration OPENED Dead Establish Authenticate FAIL FAIL SUCCESS/NONE CLOSING DOWN Network Terminate Figure 1-2 PPP operation flow chart For the details of PPP, refer to RFC1661. 1.1.2 Introduction to MP Multilink PPP (MP) provides an approach to increasing bandwidth.
  • Page 296: Configuring Ppp Encapsulation On The Interface

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 PPP and MP Configuration 1.2.1 Configuring PPP Encapsulation on the Interface Perform the following configuration in interface view. Table 1-1 Configure PPP encapsulation on the interface Operation Command Configure PPP encapsulation on the link-protocol ppp interface.
  • Page 297 3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 PPP and MP Configuration I. Configuring the local router to authenticate the peer using PAP Table 1-3 Configure the local router to authenticate the peer with the PAP approach Operation Command...
  • Page 298 3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 PPP and MP Configuration physical interface receives a DCC call request, it first initiates PPP negotiation and authenticates the dial-in user, and then passes the call to the upper layer protocol.
  • Page 299 3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 PPP and MP Configuration III. Configuring the local to be authenticated by the peer using PAP Table 1-5 Configure the local to be authenticated by the peer with the PAP approach...
  • Page 300: Configuring Ppp Negotiation Timeout Interval

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 PPP and MP Configuration At the authenticatee end, the password for CHAP authentication could be one set by the ppp chap password command or one set in local user view, with the former taking priority over the latter for encryption.
  • Page 301 3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 PPP and MP Configuration By default, the IP address of interface is not negotiable. Caution: You may configure an interface to obtain an IP address through negotiation only when the interface is encapsulated with PPP. When PPP goes down, the IP address obtained through PPP negotiation is deleted.
  • Page 302 3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 PPP and MP Configuration Table 1-10 Assign IP addresses picked from a global address pool Operation Command pool pool-number Configure a global IP address pool low-ip-address [ high-ip-address ] Remove the global IP address pool...
  • Page 303 3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 PPP and MP Configuration By default, the interface does not assign IP address to the remote end. Note: When both the remote address pool [ pool-number ] command and the remote address ip-address command are configured, the system uses the address specified by the latter for assignment.
  • Page 304: Negotiating An Dns Address Through Ppp

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 PPP and MP Configuration By default, the PPP user can use its self-configured IP address in PPP IPCP negotiation. If the PPP user explicitly requests an address, this end acts as requested;...
  • Page 305: Configuring Ppp Link Quality Control

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 PPP and MP Configuration By default, DNS address negotiation is disabled. The command is intended for the use with PPP, PPPoE, and MP and the interface view in which the command is configured varies with the adopted protocol.
  • Page 306: Configuring Mp

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 PPP and MP Configuration Table 1-17 Enable PPP LCP to negotiate MRU Operation Command Configure PPP LCP to negotiate MRU ppp lcp mru consistent Restore the default undo ppp lcp mru consistent By default, PPP LCP does not negotiate MRU;...
  • Page 307: Configuring Mp On A Virtual Template Interface

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 PPP and MP Configuration I. Configuring MP on a virtual template interface Fundamental MP configuration tasks include: Create a virtual template interface Associate a remote username with the virtual template interface...
  • Page 308 3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 PPP and MP Configuration endpoint descriptor. To ensure a successful link negotiation, you must configure the ppp mp command and two-way authentication (CHAP or PAP) on the bundled interfaces. Note: When the ppp mp virtual-template command is configured on an interface, the system does not look for a virtual template by username.
  • Page 309 3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 PPP and MP Configuration authentication, refer to the section 1.2.3 “Configuring PPP Authentication Mode and Username and User Password”. In addition, perform the following configuration in interface view to have the interface operate in MP mode.
  • Page 310 3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 PPP and MP Configuration Note: If the ppp mp binding-mode authentication command is configured to enable the router to perform MP bundling according to authenticated username, you are recommended to configure PPP PAP or CHAP authentication on physical subchannels.
  • Page 311: Configuring Mp On An Mp-Group Interface

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 PPP and MP Configuration Note: The upper limit on minimum/maximum number of bundled links is 128, a number set considering only the functionality of MP. The forwarding performance of MP is irrelevant to the number of bundled links.
  • Page 312: Configuring Ppp Link Efficiency Mechanism

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 PPP and MP Configuration Table 1-26 Assign the interface to the specified MP-group Operation Command Assign the interface to the specified ppp mp mp-group number MP-group Remove the interface from the specified...
  • Page 313 3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 PPP and MP Configuration implementations of network audio/video applications. However, there is also concern that 40-byte IP/UDP/RTP header containing a 20-byte IP header, 8-byte UDP header and 12-byte RTP header, is too large an overhead for 20-byte or 160-byte payloads.
  • Page 314: Configuring Iphc

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 PPP and MP Configuration scheduled and waiting for being transmitted, it has to wait until all the large packets have been transmitted. As for the real-time applications, large packets can cause block and delay, consequently, the remote end cannot hear continuous speech.
  • Page 315 3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 PPP and MP Configuration the TCP packets for RTP session setup. Likewise, disabling IP header compression disables the system to compress the TCP packets for RTP session setup. You must configure IP header compression at the endpoints of a link.
  • Page 316: Configuring Ppp Stac Lzs Compression

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 PPP and MP Configuration 1.4.2 Configuring PPP Stac LZS Compression Perform the following configuration in interface view. The current system version supports the Stac compression described in RFC 1974. Table 1-31 Configure PPP Stac LZS compression...
  • Page 317: Displaying And Debugging Ppp/Mp/Ppp Link Efficiency Mechanisms

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 PPP and MP Configuration I. Enabling LFI Perform the following configurations in virtual template interface view or MP-group interface view. Table 1-33 Enable LFI Operation Command Enable LFI on Virtual Template interface...
  • Page 318: Ppp And Mp Configuration Example

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 PPP and MP Configuration Table 1-35 Display and debug PPP and MP Operation Command Display PPP configuration and running display interface type number state of an interface display interface Display MP interface information...
  • Page 319: Unidirectional Chap Authentication

    [3Com-Serial3/0/0] ppp pap local-user 3Com2 password simple 3Com [3Com-Serial3/0/0] ip address 200.1.1.2 16 1.6.2 Unidirectional CHAP Authentication I. Network requirements As shown in Figure 1-6, 3Com 1 is required to use CHAP to authenticate 3Com 2. II. Network diagram Serial3/0/0: Serial3/0/0: 200.1.1.1...
  • Page 320 [3Com] interface serial 3/0/0 [3Com-Serial3/0/0] link-protocol ppp [3Com-Serial3/0/0] ppp chap user 3Com2 [3Com-Serial3/0/0] ip address 200.1.1.2 16 Approach II: 3Com 1and 3Com 2 have no users with the same password. Configure 3Com 1 [3Com] local-user 3Com2 [3Com-luser-3Com2] password simple hello...
  • Page 321: Bidirectional Chap Authentication

    1.6.3 Bidirectional CHAP Authentication I. Network requirements As shown in Figure 1-7, 3Com 1 and 3Com 2 are required to use CHAP to authenticate each other. The password for CHAP authentication is hello-1 on 3Com 1 and hello-2 on 3Com 2.
  • Page 322: Mp Configuration

    # Specify the virtual-templates for the two users and begin PPP negotiation by using the NCP information of the virtual-templates. [3Com] ppp mp user router-b bind virtual-template 1 [3Com] ppp mp user router-c bind virtual-template 2 # Configure the virtual-templates...
  • Page 323 [3Com] interface serial 2/0/0:1 [3Com-Serial2/0/0:1] link-protocol ppp [3Com-Serial2/0/0:1] ppp mp [3Com-Serial2/0/0:1] ppp authentication-mode pap domain system [3Com-Serial2/0/0:1] ppp pap local-user router-a password simple router-a # Configure the users in the domain to use the local authentication scheme. [3Com] domain system [3Com-isp-domain] scheme local...
  • Page 324: Three Types Of Mp Binding Mode

    [3Com] interface serial 2/0/0:1 [3Com-Serial2/0/0:1] ppp mp [3Com-Serial2/0/0:1] ppp authentication-mode pap domain system [3Com-Serial2/0/0:1] ppp pap local-user router-c password simple router-c # Configure the users in the domain to use the local authentication scheme. [3Com] domain system [3Com-isp-domain] scheme local 1.6.5 Three Types of MP Binding Mode...
  • Page 325 Chapter 1 PPP and MP Configuration # Configure Serial1/0/0. [3Com-Virtual-Template1] interface Serial1/0/0 [3Com-Serial1/0/0] link-protocol ppp [3Com-Serial1/0/0] ppp authentication-mode pap domain system [3Com-Serial1/0/0] ppp pap local-user RTA password simple RTA [3Com-Serial1/0/0] ppp mp virtual-template 1 [3Com-Serial1/0/0] shutdown [3Com-Serial1/0/0] undo shutdown # Configure Serial2/0/0.
  • Page 326 3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 PPP and MP Configuration [3Com-Serial2/0/0] link-protocol ppp [3Com-Serial2/0/0] ppp authentication-mode pap domain system [3Com-Serial2/0/0] ppp pap local-user RTB password simple RTB [3Com-Serial2/0/0] ppp mp virtual-template 1 [3Com-Serial2/0/0] shutdown [3Com-Serial2/0/0] undo shutdown [3Com-Serial2/0/0] quit # Configure the users in the domain to use the local authentication scheme.
  • Page 327 [3Com-luser-RTB] password simple RTB [3Com-luser-RTB] service-type ppp [3Com-luser-RTB] quit # Assign a virtual-template to user RTB [3Com] ppp mp user RTB bind virtual-template 1 # Create a virtual-template and configure the IP address [3Com] interface Virtual-Template 1 [3Com-Virtual-Template1] ip address 8.1.1.1 24 # Configure Serial1/0/0.
  • Page 328 [3Com-Serial1/0/0] undo shutdown # Configure Serial2/0/0. [3Com-Serial1/0/0] interface Serial2/0/0 [3Com-Serial2/0/0] link-protocol ppp [3Com-Serial2/0/0] ppp authentication-mode pap domain system [3Com-Serial2/0/0] ppp pap local-user RTA password simple RTA [3Com-Serial2/0/0] ppp mp [3Com-Serial2/0/0] shutdown [3Com-Serial2/0/0] undo shutdown [3Com-Serial2/0/0] quit # Configure the user in the domain to use the local authentication scheme...
  • Page 329 3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 PPP and MP Configuration [3Com-Serial2/0/0] ppp authentication-mode pap domain system [3Com-Serial2/0/0] ppp pap local-user RTB password simple RTB [3Com-Serial2/0/0] ppp mp [3Com-Serial2/0/0] shutdown [3Com-Serial2/0/0] undo shutdown [3Com-Serial2/0/0] quit # Apply user authentication to domain users.
  • Page 330 3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 PPP and MP Configuration Link layer protocol is PPP LCP opened, MP opened, IPCP opened, OSICP opened, MPLSCP opened Physical is MP, baudrate: 128000 Output queue : (Urgent queue : Size/Length/Discards)
  • Page 331 [3Com-Mp-group1] ip address 111.1.1.1 24 # Configure Serial1/0/0. [3Com-Mp-group1] interface Serial1/0/0 [3Com-Serial1/0/0] link-protocol ppp [3Com-Serial1/0/0] ppp authentication-mode pap domain system [3Com-Serial1/0/0] ppp pap local-user RTA password simple RTA [3Com-Serial1/0/0] ppp mp mp-group 1 [3Com-Serial1/0/0] shutdown [3Com-Serial1/0/0] undo shutdown # Configure Serial2/0/0.
  • Page 332 [3Com-Serial1/0/0] undo shutdown # Configure Serial2/0/0. [3Com-Serial1/0/0] interface Serial2/0/0 [3Com-Serial2/0/0] link-protocol ppp [3Com-Serial2/0/0] ppp authentication-mode pap domain system [3Com-Serial2/0/0] ppp pap local-user RTB password simple RTB [3Com-Serial2/0/0] ppp mp mp-group 1 [3Com-Serial2/0/0] shutdown [3Com-Serial2/0/0] undo shutdown [3Com-Serial2/0/0] quit # Configure the users in the domain to use the local authentication scheme.
  • Page 333: Troubleshooting

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 PPP and MP Configuration Output queue : (FIFO queuing : Size/Length/Discards) 0/75/0 Last 300 seconds input: 0 bytes/sec, 0 packets/sec Last 300 seconds output: 0 bytes/sec, 0 packets/sec 5 packets input, 58 bytes, 0 drops...
  • Page 334 3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 PPP and MP Configuration ”serial number is up, line protocol is down”, which indicates that this interface is active, but link negotiation has failed. 3Com Corporation 1-42...
  • Page 335: Introduction To Pppoe

    PPPoE Active Discovery Terminate (PADT) packets to notify the other to end this Session. For more information about PPPoE, refer to RFC2516. II. PPPoE server The PPPoE server available on 3Com AR Series Routers delivers these features: Dynamic IP address allocation. Multiple authentication...
  • Page 336: Pppoe Server Configuration

    PPPoE Server Figure 2-1 Network diagram for PPPoE client As shown in the above figure, PCs on the Ethernet are connected to the 3Com router where PPPoE client runs. The data destined to the Internet first reaches the router and is encapsulated in PPPoE there. After leaving the router, it passes through the ADSL modem attached to the router and then the ADSL access server before reaching the Internet.
  • Page 337: Creating A Virtual Template

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 PPPoE Configuration 2.2.1 Creating a Virtual Template I. Creating a virtual template Perform the following configuration in system view. Table 2-1 Create/delete a virtual template Operation Command Create a virtual template and enter its interface virtual-template number view.
  • Page 338: Configuring Pppoe Server Parameters

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 PPPoE Configuration By default, PPPoE is disabled. 2.2.3 Configuring PPPoE Server Parameters You may configure PPPoE server parameters as needed. Normally, you can use the default settings. Perform the following configuration in system view.
  • Page 339: Configuring A Dialer Interface

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 PPPoE Configuration Advanced PPP configuration task includes: Terminate a PPPoE session 2.3.1 Configuring a Dialer Interface Before configuring PPPoE session, you should first configure a dialer interface and configure a dialer bundle on the interface. Each PPPoE session uniquely corresponds to a dialer bundle and each dialer bundle uniquely corresponds to a dialer interface.
  • Page 340: Enabling/Disabling The Pppoe Server To Output Ppp-Related Log

    Delete PPPoE session number 3Com Series Routers support two kinds of PPPoE connection mode: always-on mode and packet triggering mode. Always-on mode: When the physical line is UP, the router will quickly initiate PPPoE call to create a PPPoE session. The PPPoE session will always exist unless the user deletes it via the undo pppoe-client command.
  • Page 341: Resetting/Deleting A Pppoe Session

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 PPPoE Configuration Operation Command Enable the PPPoE server to output undo pppoe-server log-information PPP-related log information By default, the PPPoE server output the PPP-related information. 2.3.4 Resetting/Deleting a PPPoE Session Execute the reset pppoe-client command and the reset pppoe-server command in user view and the undo pppoe-client command in Ethernet interface view or virtual Ethernet interface view.
  • Page 342: Pppoe Configuration Example

    2.5 PPPoE Configuration Example 2.5.1 Configuring PPPoE Server I. Network requirements In Figure 2-2, the hosts access the Internet through the router 3Com by making use of PPPoE. II. Network diagram Router 3Com is connected to the Ethernet through the interface Ethernet 1/0/0 and the Internet through Serial3/0/0.
  • Page 343: Configuring Pppoe Client

    [router-isp-domain] ip pool 1 1.1.1.2 1.1.1.10 When installed with PPPoE client software and configured with user name and password (herein as NE and 3Com respectively), every host on the Ethernet can access the Internet through the router 3Com with PPPoE.
  • Page 344 [3Com] interface dialer 1 [3Com-Dialer1] dialer user 3Com2 [3Com-Dialer1] dialer-group 1 [3Com-Dialer1] dialer bundle 1 [3Com-Dialer1] ip address ppp-negotiate [3Com-Dialer1] ppp pap local-user 3Com2 password simple 3Com [3Com-Dialer1] quit # Configure a PPPoE session. [3Com] interface ethernet 1/0/0 [3Com-Ethernet1/0/0] pppoe-client dial-bundle-number 1...
  • Page 345: Connecting A Lan To The Internet Via Adsl Modem

    [3Com] interface dialer 1 [3Com-Dialer1] dialer user 3Com2 [3Com-Dialer1] dialer-group 1 [3Com-Dialer1] dialer bundle 1 [3Com-Dialer1] ip address ppp-negotiate [3Com-Dialer1] ppp chap user 3Com2 [3Com-Dialer1] ppp chap password simple 3Com [3Com-Dialer1] quit [3Com] local-user 3Com1 3Com -luser-3Com1] password simple 3Com...
  • Page 346 [3Com] interface dialer 1 [3Com-Dialer1] dialer user huawei [3Com-Dialer1] dialer-group 1 [3Com-Dialer1] dialer bundle 1 [3Com-Dialer1] ip address ppp-negotiate [3Com-Dialer1] ppp pap local-user huawei password cipher 123456 [3Com-Dialer1] quit # Configure a PPPoE session. [3Com] interface ethernet 2/0/0 [3Com-Ethernet2/0/0] pppoe-client dial-bundle-number 1 # Configure a LAN interface and the default route.
  • Page 347 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 PPPoE Configuration Configure Router B # Configure the ATM interface. [RouterA] interface atm2/0/0 [RouterA-Atm1/0/0] pvc 0/32 [RouterA-atm-pvc-Atm1/0/0-0/32] map bridge virtual-ethernet 1 [RouterA-atm-pvc-Atm1/0/0-0/32] quit # Enable PPPoE Server on the VE interface.
  • Page 348: Accessing The Internet Through An Adsl Interface

    [3Com-Serial1/0/0] standby interface dialer 1 [3Com-Serial1/0/0] quit # Configure the static route to the peer. [3Com] ip route 0.0.0.0 0 serial 0/0/0 preference 60 [3Com] ip route 0.0.0.0 0 dialer 1 preference 70 2.5.5 Accessing the Internet through an ADSL Interface I.
  • Page 349 [3Com] interface atm 1/2/0.1 [3Com-atm1/2/0.1] pvc to_adsl_a 0/60 [3Com-atm-pvc-atm1/2/0.1-0/60-to_adsl_a] map bridge virtual-ethernet 1 # Configure a PPPoE session. [3Com]interface virtual-ethernet 1 [3Com-Virtual-Ethernet1] pppoe-client dial-bundle-number 1 idle-timeout 120 # Configure a default route. [3Com] ip route-static 0.0.0.0 0.0.0.0 dialer 1 3Com Corporation 2-15...
  • Page 350: Chapter 3 Bridge Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Bridge Configuration Chapter 3 Bridge Configuration 3.1 Introduction to Bridge Bridge is a type of network device on the data link layer, which interconnects Local Area Networks (LANs) and transfers data between them. In some small-sized...
  • Page 351 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Bridge Configuration I. Obtaining address table A bridge makes forwarding decision based on the bridging table, which consists of MAC addresses and interfaces. It should obtain the associations between MAC addresses and interfaces. When the bridge connects with a physical network segment, it will detect all the Ethernet frames on this segment.
  • Page 352 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Bridge Configuration 00e0.fcaa.aaaa 00e0.fcbb.bbbb Workstation B Workstation A Source address Destination address 00e0.fcaa.aaaa00e0.fcbb.bbbb Ethernet segment 1 Bridge port 1 Bridging table MAC address Port 00e0.fcaa.aaaa 00e0.fccc.cccc 00e0.fcdd.dddd Bridge Workstation C Workstation D...
  • Page 353 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Bridge Configuration 00e0.fcaa.aaaa 00e0.fcbb.bbbb Workstation A Workstation B Ethernet segment 1 Bridge port 1 Bridging table MAC address Port 00e0.fcaa.aaaa 00e0.fcdd.dddd 00e0.fcbb.bbbb 00e0.fccc.cccc 00e0.fccc.cccc 00e0.fcdd.dddd Bridge Workstation D Workstation C Bridge port 2...
  • Page 354 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Bridge Configuration Please be aware that the bridge will forward the broadcast or multicast frames received on one port to the other ports. Given that Workstation A sends an Ethernet frame to Workstation B, the bridge will filter this frame rather than forwarding it, for Workstation B and Workstation A are located on the same physical network segment.
  • Page 355 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Bridge Configuration 00e0.fcbb.bbbb 00e0.fcaa.aaaa Source address Destination address 00e0.fcaa.aaaa 00e0.fccc.cccc Ethernet segment 1 Bridge port 1 Bridging table MAC address Port 00e0.fcaa.aaaa 00e0.fccc.cccc 00e0.fcdd.dddd 00e0.fcbb.bbbb Bridge Bridge port 2 Ethernet segment 2 Figure 3-7 No matched MAC address is found in the bridging table III.
  • Page 356: Spanning Tree Protocol

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Bridge Configuration Forwarding broadcast frame FFFFFFFFFFFF Broadcast frame FFFFFFFFFFFF FFFFFFFFFFFF Bridge Y Forwarding broadcast frame again Ethernet segment 1 Ethernet segment 2 Bridge Z Bridge X Forwarding broadcast frame FFFFFFFFFFFF Ethernet segment 3...
  • Page 357 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Bridge Configuration Max Age of BPDU Hello Time of BPDU Forward Delay of port state transition I. Spanning tree protocol algorithm The spanning tree protocol algorithm contains enough information for a bridge to perform the following tasks: Specify the root bridge.
  • Page 358 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Bridge Configuration Bridge 3 Root Bridge/ Designated Designed Bridge Bridge Bridge 4 Bridge 1 Designated Bridge Designated Bridge 5 Bridge Bridge 2 Designated Bridge RP = Root Port DP= Designated Port Figure 3-10 Spanning tree topology II.
  • Page 359: Multi-Protocol Router

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Bridge Configuration 3.1.3 Multi-Protocol Router Generally, a router is called multi-protocol router when it can implement the routed protocols like IP and IPX, as well as the bridging protocol. For a multi-protocol router, the bridging protocol can be either enabled or disabled.
  • Page 360: Basic Bridge Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Bridge Configuration Creating and Applying Bridging ACLs Create a bridging ACL Creating a bridging ACL Applying the ACL on an interface Configuring the Routing Function of the Bridge Enabling the routing function of the bridge...
  • Page 361: Configuring Bridging Over Link Layer Protocols

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Bridge Configuration Table 3-3 Add the port to a bridge-set Operation Command Add the port to a bridge-set bridge-set bridge-set Remove the port from the bridge-set undo bridge-set bridge-set By default, the port is not added to any bridge-set.
  • Page 362 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Bridge Configuration Table 3-7 Configure bridging on HDLC Operation Command Apply a bridge-set on the HDLC interface. bridge-set bridge-set V. Configuring bridging on X.25 In setting up a bridge, you need to map the bridge address to the X.121 address of X.25.
  • Page 363: Configuring The Bridging Address Table

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Bridge Configuration Table 3-10 Configure bridging on ATM Operation Command Assign a bridge-set to an ATM bridge-set bridge-set interface (in ATM interface view) Enable a PVC to transmit and map bridge-group broadcast receive BPDUs (in PVC view) VIII.
  • Page 364 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Bridge Configuration Table 3-12 Configure a static address entry Operation Command bridge bridge-set mac-address mac-address Configure a static address entry { permit | deny } [ interface interface-type interface-number | dlsw ]...
  • Page 365: Configuring The Bridge To Support Stp

    STP has multiple standards, which are not compatible. To prevent bridging loops, the communicating parties must use the same STP standard. Currently, 3Com Routers only support IEEE STP. Perform the following configuration in system view. Table 3-16 Specify the STP version supported by a bridge-set...
  • Page 366 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Bridge Configuration Table 3-17 Assign a priority to the bridge Operation Command Assign a priority to the bridge bridge stp priority value Restore the default priority of the bridge undo bridge stp priority The default priority of the bridge is 32,768.
  • Page 367 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Bridge Configuration Operation Command Restore the default priority of the bridge undo bridge-set bridge-set stp port port priority The default priority of the bridge port is 128. VI. Setting the Hello Time timer (optional) A Hello Time timer is used to control the interval for sending BPDUs.
  • Page 368 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Bridge Configuration Table 3-21 Set the Forward Delay timer Operation Command bridge timer forward-delay Set the Forward Delay timer seconds Restore the default setting of the undo bridge stp timer forward-delay Forward Delay timer The default setting of the Forward Delay timer is 15 seconds.
  • Page 369: Creating And Applying Bridging Acls

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Bridge Configuration 3.2.5 Creating and Applying Bridging ACLs I. Creating a bridging ACL You can create MAC-based ACLs. Perform the following configuration in system view (for the command acl) and ACL view (for the command rule).
  • Page 370 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Bridge Configuration Perform the following configuration in interface view. Applying a MAC-based ACL in the inbound/outbound direction of the interface Perform the following configuration in interface view. Table 3-24 Apply a MAC-based ACL on an interface...
  • Page 371: Configuring The Routing Function Of The Bridge

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Bridge Configuration 3.2.6 Configuring the Routing Function of the Bridge I. Enabling the routing function of the bridge Bridge routing provides forwarding that integrates routing and bridging. For some particular protocol data units (PDUs), if the communication is conducted between bridging ports, they are bridged;...
  • Page 372: Displaying And Debugging Bridging Information

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Bridge Configuration Table 3-28 Configure a bridge-set to route or bridge for the network layer protocol Operation Command Enable the routing function of a bridge-set bridge bridge-set routing { ip | ipx } for the network layer protocol.
  • Page 373: Transparent Bridging Configuration Examples

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Bridge Configuration Operation Command reset bridge address-table Clear the MAC address forwarding table. [ bridge-set bridge-set | interface interface-type interface-number | dlsw ] reset bridge traffic bridge-set Reset traffic statistics on one or all bridge-set | interface interface-type interfaces in a bridge-set.
  • Page 374: Transparent Bridging On Mp

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Bridge Configuration [RouterA-Serial1/0/0] bridge-set 1 Configure Router B: [RouterB] bridge enable [RouterB] bridge 1 enable [RouterB] interface ethernet 0/0/0 [RouterB-Ethernet0/0/0] bridge-set 1 [RouterB-Ethernet0/0/0] interface Serial 1/0/0 [RouterB-Serial1/0/0] link-protocol ppp [RouterB-Serial1/0/0] bridge-set 1 3.4.2 Transparent Bridging on MP...
  • Page 375: Transparent Bridging On Frame Relay

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Bridge Configuration Configure Router B: [RouterB] bridge enable [RouterB] bridge 1 enable [RouterB] interface virtual-template 1 [RouterB-virtual-template1] bridge-set 1 [RouterB virtual-template1] interface ethernet 0/0/0 [RouterB-Ethernet0/0/0] bridge-set 1 [RouterB-Ethernet0/0/0] interface serial 1/0/0...
  • Page 376 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Bridge Configuration [RouterB] bridge 1 enable [RouterB] interface ethernet 0/0/0 [RouterB-Ethernet0/0/0] bridge-set 1 [RouterB-Ethernet0/0/0] interface serial 1/0/0 [RouterB-Serial1/O/0] link-protocol fr [RouterB-Serial1/O/0] fr interface-type dte [RouterB-Serial1/O/0] bridge-set 1 [RouterB-Serial1/O/0] fr map bridge 50 broadcast 3.4.4 Transparent Bridging on X.25...
  • Page 377: Transparent Bridging On Atm

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Bridge Configuration [RouterB-Serial1/0/0] x25 x121-address 200 [RouterB-Serial1/0/0] x25 map bridge x121-address 100 broadcast [RouterB-Serial1/0/0] bridge-set 1 3.4.5 Transparent Bridging on ATM I. Network requirements Two routers are directly connected using ATM interfaces to implement transparent bridging on ATM.
  • Page 378: Implementing Integrated Routing And Bridging

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Bridge Configuration 3.4.6 Implementing Integrated Routing and Bridging I. Network requirements Use a router, allowing routing through any interfaces in a bridge-set. II. Network diagram Bridge-template 1(1.1.1.1) Bridge-template 1(1.1.1.1) Bridge-set Bridge-set...
  • Page 379 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Bridge Configuration e1/0/0 e1/0/0 e1/0/0 e1/0/0 e0/0/0.1 e0/0/0.1 e0/0/0.1 e0/0/0.1 Router A Router A e0/0/0.2 e0/0/0.2 Router B Router B e0/0/0.2 e0/0/0.2 e2/0/0 e2/0/0 e2/0/0 e2/0/0 Figure 3-17 Network diagram for bridging on subinterfaces III.
  • Page 380: Bridging On Fr Subinterfaces

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Bridge Configuration [RouterB-Ethernet0/0/0.2] bridge-set 2 3.4.8 Bridging on FR Subinterfaces I. Network requirements Router A and Router B are connected using an FR link. Enable bridging on FR subinterfaces S0/0/0.1 and S0/0/0.2, allowing PC 1 and PC 2 to communicate through bridge-set 1 and PC 3 and PC 4 to communicate through bridge-set 2.
  • Page 381: Bridging On Dial Interface And Filtering Mac Address

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Bridge Configuration [RouterB] bridge enable [RouterB] bridge enable [RouterB] bridge 1 enable [RouterB] bridge 2 enable [RouterB] interface ethernet 1/0/0 [RouterB-Ethernet1/0/0] bridge-set 1 [RouterB-Ethernet1/0/0] interface ethernet 2/0/0 [RouterB-Ethernet2/0/0] bridge-set 2 [RouterB-Ethernet2/0/0] interface serial 0/0/0...
  • Page 382 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Bridge Configuration III. Configuration procedure Configure Router 1 # Enable the firewall. [Router1] firewall enable # Enable bridging globally. [Router1] bridge enable [Router1] bridge 1 enable # Configure a dialer ACL.
  • Page 383 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Bridge Configuration [Router1-Ethernet0/0/0] promiscuous [Router1-Ethernet0/0/0] firewall ethernet-frame-filter 4000 inbound [Router1-Ethernet0/0/0] firewall ethernet-frame-filter 4000 outbound [Router1-Ethernet0/0/0] bridge-set 1 Configure Router 2 # Enable the firewall. [Router2] firewall enable # Enable bridging globally.
  • Page 384: Ethernet Type-Code Values

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Bridge Configuration # Assign the Ethernet interface to the bridge-set and configure MAC-based filtering on the interface. [Router2] interface Ethernet0/0/0 [Router2-Ethernet0/0/0] promiscuous [Router2-Ethernet0/0/0] firewall ethernet-frame-filter 4000 inbound [Router2-Ethernet0/0/0] firewall ethernet-frame-filter 4000 outbound [Router2-Ethernet0/0/0] bridge-set 1 3.5 Ethernet Type-Code Values...
  • Page 385 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Bridge Configuration Ethernet type-code value (in Represents hexadecimal) 0BAD Banyan Systems 1000 Berkeley Trailer nego 1001 – 100F Berkeley Trailer encap/IP 1600 Valid Systems 4242 PCS Basic Block Protocol 5208 BBN Simnet 6000 DEC Unassigned (Exp.)
  • Page 386 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Bridge Configuration Ethernet type-code value (in Represents hexadecimal) 8019 Apollo Computers 802E Tymshare 802F Tigan, Inc. 8035 Reverse ARP 8036 Aeonic Systems 8038 DEC LANBridge 8039 – 803C DEC Unassigned 803D...
  • Page 387 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Bridge Configuration Ethernet type-code value (in Represents hexadecimal) 807C Merit Internodal 807D-807F Vitalink Communications 8080 Vitalink TransLAN III 8081-8083 Counterpoint Computers 809B Appletalk 809C – 809E Datability 809F Spider Systems Ltd.
  • Page 388 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Bridge Configuration Ethernet type-code value (in Represents hexadecimal) 8132 – 8136 Bridge Communications 8137 – 8138 Novell, Inc. 8139 – 813D 8148 Logicraft 8149 Network Computing Devices 814A Alpha Micro 814C...
  • Page 389 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 Bridge Configuration Ethernet type-code value (in Represents hexadecimal) 829A – 829B Inst Ind Info Tech 829C – 82AB Taurus Controls 82AC – 8693 Walker Richer & Quinn 8694 – 869D Idea Courier 869E –...
  • Page 390: Network Protocol

    3Com Router 3000 Ethernet Family Configuration Guide Network Protocol 3Com Corporation...
  • Page 391 3Com Router 3000 Ethernet Family Configuration Guide Table of Contents Table of Contents Chapter 1 IP Address Configuration ................... 1-1 1.1 IP Address Overview ......................1-1 1.2 IP Address Configuration....................1-4 1.2.1 Assigning IP Addresses to an Interface ..............1-4 1.2.2 Configuring IP Address Unnumbered for an Interface ..........
  • Page 392 3Com Router 3000 Ethernet Family Configuration Guide Table of Contents 3.2.1 Configuring Static Domain Name Resolution............3-1 3.2.2 Displaying and debugging domain name resolution table ........3-2 3.3 DNS Client Configuration....................3-2 3.3.1 Introduction to the Architecture of DNS ..............3-2 3.3.2 Configuring the DNS Client ..................
  • Page 393 3Com Router 3000 Ethernet Family Configuration Guide Table of Contents 8.2 BOOTP Client Configuration....................8-1 8.2.1 Configuring an Ethernet Interface to Obtain IP Address Using BOOTP....8-1 8.3 Displaying and Debugging BOOTP Client Configuration ..........8-1 Chapter 9 DHCP Configuration ....................9-1 9.1 DHCP Overview.........................
  • Page 394 3Com Router 3000 Ethernet Family Configuration Guide Table of Contents 9.6.3 Configuring DHCP Server Load Sharing for DHCP Relay........9-39 9.6.4 Releasing Client IP Address by DHCP Relay ............9-39 9.6.5 Configuring Option 82 Support on the DHCP Relay ..........9-40 9.6.6 Clearing DHCP Relay Information ................
  • Page 395 3Com Router 3000 Ethernet Family Configuration Guide Table of Contents 11.2.8 Multi-Instance of MPLS VPN NAT Supported............. 11-7 11.3 NAT Configuration ......................11-7 11.3.1 Configuring Address Pool ................... 11-7 11.3.2 Configuring NAT....................11-8 11.3.3 Configuring Bidirectional NAT ................11-11 11.3.4 Configuring Internal Server ................11-11 11.3.5 Configuring NAT ALG ..................
  • Page 396: Ip Address Overview

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 IP Address Configuration Chapter 1 IP Address Configuration 1.1 IP Address Overview IP addresses are unique 32-bit addresses assigned to hosts connected to Internet. An IP address is composed of two parts: network ID and host ID. Its structure enables convenient addressing on Internet.
  • Page 397 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 IP Address Configuration Table 1-1 IP address classes and ranges Network Address range Description class Network ID with the format of 127.X.Y.Z is reserved for self-loop test and the packets 0.0.0.0 sent to this address will not be output to the 127.255.255.255...
  • Page 398 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 IP Address Configuration The 1s corresponds to the network ID field and the sub-net number field, while the 0s correspond to the host ID field. Local distribution net-id host-id Class B address...
  • Page 399: Ip Address Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 IP Address Configuration net-id=209.0.0.0 Host name host-a IP=209.0.05 Host name host-b host-b Destination host name IP=209.0.06 Network adapter Destination host IP address 209.0.0.6 08002B00EE 0A Destination host physical address 08002B00EE0A Figure 1-3 Relation between host name, IP address, and physical address 1.2 IP Address Configuration...
  • Page 400 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 IP Address Configuration Table 1-2 Configure main IP address of an interface Operation Command Configure main IP address of an interface ip address ip-address net-mask A mask identifies the netid boundary of an IP address. Suppose an Ethernet interface is assigned the IP address 129.9.30.42 with the mask of 255.255.0.0.
  • Page 401 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 IP Address Configuration Table 1-4 Delete IP addresses on the interface Operation Command Delete IP addresses on the undo ip address [ ip-address net-mask [ sub ] ] interface. To delete all IP addresses on the interface, execute this command without specifying any argument.
  • Page 402: Configuring Ip Address Unnumbered For An Interface

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 IP Address Configuration Caution: Because PPP supports IP address negotiation, IP address negotiation of an interface can be set only when the interface is encapsulated with PPP. When the PPP link is down, the IP address originated from negotiation will be deleted.
  • Page 403: Displaying And Debugging Ip Address

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 IP Address Configuration II. IP Address Unnumbered configuration task list The configuration of IP Address Unnumbered can be performed in the interface view. Serial interfaces encapsulated with PPP, HDLC, Frame Relay and Tunnel can borrow the IP addresses of the Ethernet interface and other kinds of interfaces.
  • Page 404: Ip Address Configuration Example

    # Configure the main and subordinate IP address for router's interface serial1/0/1. [3Com] interface serial 1/0/1 [3Com-Serial1/0/1] ip address 129.2.2.1 255.255.255.0 [3Com-Serial1/0/1] ip address 129.1.3.1 255.255.255.0 sub 1.2.6 IP Address Unnumbered Configuration Example I. Network requirements Suppose the headquarters of a company is in Beijing, with one subsidiary in Shenzhen and Shanghai respectively and one office in Wuhan.
  • Page 405: Troubleshooting Ip Address Configuration

    Configure headquarters router R [3Com-Ethernet1/0/0] ip address 172.16.10.1 255.255.255.0 # Borrow IP address of Ethernet. [3Com-Serial2/0/0] ip address unnumbered interface ethernet 1/0/0 [3Com-Serial2/0/0] link-protocol ppp # Configure routing to Ethernet segment of Shenzhen router R1. [3Com] ip route-static 172.16.20.0 255.255.255.0 172.16.20.1 # Configure the interface routing to Shenzhen router R1 serial interface.
  • Page 406 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 IP Address Configuration The main IP address of a router Ethernet interface must be in the same network segment with the LAN to which this Ethernet interface is connected. Serial interface IP addresses of the routers at both ends of WAN must be in the same network segment.
  • Page 407: Chapter 2 Arp Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 ARP Configuration Chapter 2 ARP Configuration 2.1 Dynamic/Static ARP Configuration 2.1.1 Introduction to Dynamic ARP ARP (Address Resolution Protocol) is mainly used for resolution from IP address to Ethernet MAC address. Normally, dynamical ARP is used to resolve the mapping relation from the IP address to the Ethernet MAC address.
  • Page 408: Dynamic Arp Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 ARP Configuration Table 2-1 Manually add/delete static ARP mapping table item Operation Command Manually add static ARP mapping table arp static ip-address ethernet-address item [ vpn-instance-name ] Manually delete static ARP mapping...
  • Page 409: Displaying And Debugging Arp

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 ARP Configuration Table 2-3 Enable/disable ARP request in the scope of natural network segments Operation Command Enable ARP request in the scope of naturemask-arp enable natural segments. Disable ARP request in the scope of undo naturemask-arp enable natural segments.
  • Page 410: Proxy Arp Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 ARP Configuration 2.2 Proxy ARP Configuration 2.2.1 Introduction You can assign physically distributed computers and routers to the same network segment by assigning them IP addresses in the same network segment. Proxy ARP allows them to communicate with each other as they would in the same physical network.
  • Page 411: Configuring Proxy Arp

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 ARP Configuration On the two routers, the involved interfaces are assigned to the 192.38.0.0 segment and enabled with proxy ARP. The two routers are connected through PSTN and each configured with a static route to the network segment of the opposite end.
  • Page 412: Enabling The Address Learning Function Of Gratuitous Arp

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 ARP Configuration In addition, by sending gratuitous ARP messages, a network device can update its current hardware address to the caches on other devices if a hardware address change has occurred for example, after the device reconnected to the network with a new interface card.
  • Page 413: Introduction To Authorized Arp

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 ARP Configuration 2.4 Map between WAN Interface IP Address and Link Layer Protocol Address In a router, you shall maintain both the mapping from an Ethernet interface IP address to an MAC address, and that from a WAN interface IP address to a link layer protocol address.
  • Page 414 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 ARP Configuration During ARP translation, the ARP cache is searched at first. If no match is found, the ARP table is searched. ARP table An ARP table keeps the mappings between IP addresses and physical addresses. A mapping can be generated dynamically, statically, or by any other way.
  • Page 415: Structure Of The Arp Packet

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 ARP Configuration authorized ARP entries are allowed to be populated into the ARP table, while dynamic ARP learning is prohibited. ARP security is independent of authorized ARP, and can be employed independently.
  • Page 416: Arp Table

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 ARP Configuration Operator: Indicates whether the ARP packet is an ARP request or an ARP response. It can be 1 (for ARP request), 2 (for ARP response), 3 (for RARP request), or 4 (for RARP response).
  • Page 417: Configuring Authorized Arp

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 ARP Configuration A DHCP client broadcasts a DHCP_DISCOVER packet. When a DHCP server receives the broadcast packet, it responds with a DHCP_OFFER packet, in which the DHCP server fills the configuration parameters for the DHCP client.
  • Page 418 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 ARP Configuration Table 2-10 Enable authorized ARP for DHCP interface address pools Operation Command Remarks Enter system view system-view — Configure interfaces dhcp select interface operate in DHCP server { interface interface-type...
  • Page 419 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 ARP Configuration Operation Command Remarks interface interface-type Enter interface view — interface-number Configure the IP address address ip-address — of the interface net-mask Configure the interface to operate in DHCP server...
  • Page 420: Authorized Arp Configuration Example

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 ARP Configuration Operation Command Remarks Required. Enable authorized ARP for global DHCP address synchronize arp default, authorized pools ARP is not enabled. Exit to system view quit — interface interface-type Enter interface view —...
  • Page 421 # Configure interfaces to operate in DHCP server mode, and assign IP addreses from a global address pool. [3Com] dhcp select global interface ethernet 1/0/0 to ethernet 1/0/1 # Configure the network parameters and address pool on the DHCP server.
  • Page 422 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 ARP Configuration [3Com-Ethernet1/0/0] quit 3Com Corporation 2-16...
  • Page 423: Dns Overview

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 DNS Configuration Chapter 3 DNS Configuration 3.1 DNS Overview TCP/IP not only provides IP address to specify devices, but also specially designs a kind of host naming mechanism called DNS (Domain Name System) in the form of character string.
  • Page 424: Displaying And Debugging Domain Name Resolution Table

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 DNS Configuration Table 3-1 Add or delete mapping entry in static domain name resolution table Operation Command Add the mapping between domain name ip host hostname ip-address and IP address Delete the mapping between domain...
  • Page 425: Configuring The Dns Client

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 DNS Configuration Figure 3-1 DNS system components Figure 3-1 illustrates the process of DNS resolving: The user program queries the resolver for a domain name or IP address. Upon receipt of the query, the resolver first looks up the local cache. If the requested map entry is found, it directly replies.
  • Page 426 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 DNS Configuration Perform the following configuration in system view. Table 3-3 Enable/disable DNS resolving Operation Command Enable DNS resolving. dns resolve Disable DNS resolving. undo dns resolve By default, DNS resolving is disabled.
  • Page 427: Displaying And Debugging Dns Client Information

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 DNS Configuration Note: RFC1034, however, uses a different searching approach: when you input the ping sina command, the DNS client first queries the IP address mapped to “sina”. And if no response is received, it then queries the IP address mapped to “sina.com.cn”.
  • Page 428: Typical Dns Configuration Example

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 DNS Configuration Table 3-7 Clear the dynamic domain name cache Operation Command Clear the dynamic domain name cache. reset dns dynamic-host III. Debugging the DNS client Perform the following operation in user view.
  • Page 429: Dns Proxy Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 DNS Configuration # Configure a static route to the DNS server. [Router] ip route-static 10.110.66.66 s0 3.3.5 Troubleshooting Symptom: Domain name resolving failed. Solution: Check the software, making sure that: IP address of the domain name server is correctly configured.
  • Page 430: Dns Proxy Configuration Example

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 DNS Configuration 3.4.3 Configuring DNS Proxy I. Configuration prerequisites Before configuring DNS proxy, make sure that IP addresses of DNS servers are available on the DNS proxy. The gateway enabled with DNS proxy is specified as the DNS server on the DNS client.
  • Page 431 [3Com-Ethernet 1/0/0] ip address 10.1.1.1 255.255.255.0 # Configure NAT, allowing the client to access the Internet by using DNS proxy. [3Com] acl number 2000 [3Com-acl-basic-2000] rule 0 permit source 10.1.1.0 0.0.0.255 [3Com-acl-basic-2000] quit [3Com] interface Ethernet 1/0/1 [3Com-Ethernet1/0/0] ip address 10.1.2.1 255.255.255.0...
  • Page 432: Chapter 4 Ddns Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 DDNS Configuration Chapter 4 DDNS Configuration 4.1 Introduction to DDNS Dynamic domain name service (DDNS) is to set up bindings between static domain names and dynamic IP addresses of the hosts using the domain names.
  • Page 433: Configuring Ddns

    At present, www.3322.org is the only DDNS service provider supported by 3Com Series Routers. 3Com Series Routers implement the user side of DDNS. When DDNS users’ IP addresses change, 3Com Routers can request www.3322.org to notify DNS servers to update domain name-to-IP address mappings.
  • Page 434: Configuring Parameters For Accessing The Ddns Service Provider

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 DDNS Configuration Operation Command Remarks Configure a domain name whose domain name-to-IP address mapping on DNS ddns domainname name Required needs update by using the service of the DDNS service provider...
  • Page 435 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 DDNS Configuration II. Network diagram Server A Router A www.3322.org Ethernet 1/0/0 Figure 4-2 Network diagram for DDNS application III. Configuration procedure # Enter system view. <3Com> system-view # Set 3322.org as the DDNS service provider and enter its view.
  • Page 436: Urpf Overview

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 URPF Configuration Chapter 5 URPF Configuration 5.1 URPF Overview Unicast Reverse Path Forwarding (URPF) serves as a safeguard against source address based network attacks. In source address spoofing attacks, attackers create a series of packets with forged source addresses.
  • Page 437: Urpf Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 URPF Configuration Note: URPF does not support fast forwarding. If a fast forwarding table exists, the result of a URPF check does not take effect. Thus, even a packet fails to pass URPF check, it is forwarded all the like.
  • Page 438: Introduction To Ip Accounting

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 IP Accounting Configuration Chapter 6 IP Accounting Configuration 6.1 Introduction to IP Accounting IP Accounting counts inbound and outbound IP packets on the router. These IP packets include those sent and forwarded normally as well as those denied by the firewall.
  • Page 439 3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 IP Accounting Configuration Operation Command Remarks Enable IP accounting Required ip count enable Optional (720 minutes Set an aging time ip count timeout minutes by default) maximum ip count interior-threshold Optional...
  • Page 440: Ip Accounting Configuration Example

    # Enable IP accounting. [3Com] ip count enable # Enter system view, and configure an IP accounting rule. [3Com] ip count rule 1.1.1.1 24 # Configure the aging time as 1,440 minutes (24 hours). [3Com] ip count timeout 1440 # Set the maximum length of the interior hash table to 100.
  • Page 441: Displaying And Maintaining Ip Accounting Configuration

    [3Com-Ethernet0/0/1] ip address 2.2.2.1 24 # Configure static routes on PC1 and PC2 for them to reaching each other. Ping PC2 on PC1. # Display IP accounting information. [3Com] display ip count inbound-packets interior Inbound packets information in interior list: SrcIP DstIP...
  • Page 442: Tips For Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 IP Accounting Configuration 6.4 Tips for Configuration When configuring an interior or exterior hash table, you need to clear the table first and then make configuration if the number of the entries in the table is greater than the configured or default value.
  • Page 443: Introduction To Udp Helper

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 7 UDP Helper Configuration Chapter 7 UDP Helper Configuration 7.1 Introduction to UDP Helper UDP Helper functions to relay UDP broadcast packets to the specified server after converting them to unicast packets.
  • Page 444: Specifying By Udp Port Number Which Udp Broadcasts Are Forwarded

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 7 UDP Helper Configuration 7.2.2 Specifying by UDP Port Number which UDP Broadcasts are forwarded With UDP Helper enabled, the system by default unicasts the broadcast packets with the UDP ports listed in the following table. You can configure up to 256 UDP ports with UDP Helper.
  • Page 445: Configuring Destination Servers

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 7 UDP Helper Configuration 7.2.3 Configuring Destination Servers After enabling UDP helper in system view, you can configure one or multiple (up to 20) servers on an Ethernet interface to have the UDP broadcasts received on the interface forwarded to the server or servers.
  • Page 446: Introduction To Bootp Client

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 8 BOOTP Client Configuration Chapter 8 BOOTP Client Configuration 8.1 Introduction to BOOTP Client The bootstrap protocol (BOOTP) adopts the client/server model where the BOOTP client requests the server for an IP address.
  • Page 447 3Com Router 3000 Ethernet Family Configuration Guide Chapter 8 BOOTP Client Configuration Table 8-2 Display and debug the BOOTP client configuration Operation Command display bootp client interface Display BOOTP client information interface-type interface-number ] 3Com Corporation...
  • Page 448: Dhcp Overview

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration Chapter 9 DHCP Configuration 9.1 DHCP Overview 9.1.1 Introduction to DHCP We are in a world where the scales of networks are ever-growing and their configurations are more and more complex, computers (such as laptop computers and wireless networks) are likely to move, and the available IP addresses are far from adequate for the ever-increasing number of computers.
  • Page 449: Dhcp Server

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration Auto-allocation, with which fixed IP addresses are assigned to some hosts connected to networks for the first time and these hosts are allowed to use the addresses for a long period of time.
  • Page 450 3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration DHCP Client DHCP Client DHCP Server DHCP Client DHCP Client Figure 9-1 Network diagram for a DHCP server application In order to obtain a valid dynamic IP address, a DHCP client should exchange different...
  • Page 451 3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration Upon the receipt of the DHCP_Request packet, the DHCP server sends back a DHCP_ACK packet allowing the client to use the requested address if it is still unallocated. If the DHCP server has allocated that IP address to some other DHCP client or it is not available to the client for other reasons, the DHCP server sends back a DHCP_NAK packet.
  • Page 452: Introduction To Dhcp Accounting

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration DHCPNAK/ Discard offer INIT -/Send DHCPDISCOVER DHCPACK DHCPNAK, (not accept.)/ Lease expired/ Send DECLINE Halt network SELECTING DHCPOFFER /Collect Select offer/ replies send DHCPREQUEST REQUESTING DHCPOFFER/ Discard DHCPACK/ REBINDING...
  • Page 453 3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration Figure 9-3 Structure of the DHCP accounting packet Code: One byte for identifying the type of the DHCP accounting packet. A value of 4 indicates an accounting start request, while a value of 5 indicates an accounting stop request.
  • Page 454: Option 82 Support On The Dhcp Server

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration If the RADIUS server of the specified domain is unreachable for some reason, the DHCP server sends up to three DHCP accounting start requests (including the first sending attempt) at regular intervals. If the three start requests bring no response from the RADIUS server, the DHCP server does not send start requests any more.
  • Page 455: Bims Option Support On The Dhcp Server

    Note: Currently, DHCP from 3Com Corporation implements only part of the functions of option 82: The DHCP server supports only sub-option 5 in option 82, and the DHCP relay supports only sub-options 1 and 2 in option 82.
  • Page 456: Introduction To Option

    Option 184 is an RFC reserved option, and the information it carries can be customized. 3Com defines four proprietary sub-options for this option, enabling the DHCP server to encapsulate the information required by a DHCP client in the response packet to the client.
  • Page 457 3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration Sub-option 3: Voice VLAN configuration. Sub-option 4: Fail-over call routing. I. Meanings of the sub-options for option 184 NCP-IP The NCP-IP sub-option carries the IP address of the network call processor (NCP).
  • Page 458: Dhcp Address Allocation Support Of Wan Interfaces

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration Note: For the configurations specifying to add sub-option 2, sub-option 3, and sub-option 4 in the response packets to take effect, you must configure the DHCP server to add sub-option 1.
  • Page 459: Dhcp Relay

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration After the LCP negotiation over the PPP link succeeds, the local client (the DHCP client) sends a DHCP-Discover request packet to the peer (the DHCP server), which the DHCP server discards.
  • Page 460: Principle Of Dhcp Relay

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration 9.3.1 Principle of DHCP Relay The following figure illustrates DHCP relay networking. DHCP client DHCP client Internet DHCP Relay DHCP client DHCP client DHCP Server Figure 9-5 Network diagram for DHCP relay...
  • Page 461 3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration Option 82 provides many sub-options. Among them, only sub-option 1 and sub-option 2 are available on the DHCP relay. Option 82 allows the address information of the DHCP client and the DHCP relay such as MAC address and VLAN ID, to be recorded on the DHCP server.
  • Page 462: Dhcp Common Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration 9.4 DHCP Common Configuration DHCP common configurations refer to those configurations suitable for both DHCP server and DHCP relay. The configuration tasks include Enable/disable DHCP services Configure pseudo-DHCP server detection 9.4.1 Enabling/Disabling DHCP...
  • Page 463: Dhcp Server Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration By default, pseudo-DHCP server detection is disabled. 9.5 DHCP Server Configuration DHCP server configuration tasks include Setting interfaces to operate in DHCP server mode Adding DHCP address pool Defining allocation mode of DHCP address pool...
  • Page 464 3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration Table 9-3 Set the current interface to operate in DHCP server mode Operation Command Send DHCP packets to the local DHCP server and allocate addresses from the dhcp select global [ subaddress ]...
  • Page 465: Adding Global Dhcp Address Pool

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration Note: To use interface address pools for address allocation, you must configure the dhcp select interface command. You may configure the subaddress keyword to allow the DHCP server to assign a DHCP client an IP address belonging to a subaddress segment for the Ethernet interface.
  • Page 466: Defining Allocation Mode Of Dhcp Address Pool

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration 9.5.3 Defining Allocation Mode of DHCP Address Pool You can select static address binding or dynamic address binding accordingly, but you can only choose one of them for a given DHCP address pool.
  • Page 467: Excluding Ip Address From Auto Allocation

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration Table 9-7 Configure static address binding for interface address pool Operation Command Configure a static address binding dhcp server static-bind ip-address for the address pool of the current ip-address { mac-address mac-address |...
  • Page 468: Defining Ip Address Lease Expiry Limit

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration Table 9-9 Exclude IP address from auto allocation Operation Command dhcp server forbidden-ip Forbid auto allocation of an IP address low-ip-address [ high-ip-address ] undo dhcp server forbidden-ip Allow auto allocation of the IP address low-ip-address [ high-ip-address ] By default, all addresses in the DHCP address pool will be automatically allocated.
  • Page 469: Configuring Domain Names For Dhcp Clients

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration III. Multiple interface DHCP address pools You can also configure lease limit for DHCP address pool on multiple interfaces at one blow. Perform the following configurations in the system view.
  • Page 470: Configuring Dns Ip Address For Dhcp Client

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration Table 9-13 Configure DHCP client domain name in global DHCP address pool Operation Command Configures a domain name to DHCP client domain-name domain-name Delete the domain name to DHCP client...
  • Page 471: Configuring Netbios Ip Address For Dhcp Client

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration Table 9-16 Configure DNS IP address in global DHCP address pool Operation Command Configures a DNS IP address to DHCP client dns-list ip-address [ ip-address ] Delete the DNS IP address to DHCP client...
  • Page 472: Defining Netbios Node Type For Dhcp Client

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration Table 9-19 Configure NetBIOS IP address in global DHCP address pool Operation Command Configures a NetBIOS address to DHCP client nbns-list ip-address [ ip-address ] Deletes the NetBIOS address to DHCP client...
  • Page 473 3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration m-node: m here stands for mixed. It is the p-node embraces part of the broadcast attributes. h-node: h here stands for hybrid. It is b-node for which peer-to-peer communication is available.
  • Page 474: Configuring Dhcp Customization Items

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration 9.5.10 Configuring DHCP Customization Items With further development of DHCP technology, new optional configuration items may arise. Then you can add in custom way these items into DHCP server attribute table.
  • Page 475: Configuring Ping Packet Transfer In Dhcp Server

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration Table 9-28 Configure egress gateway router for DHCP client Operation Command Configures egress gateway router gateway-list ip-address [ ip-address ] for DHCP client Deletes the egress gateway router undo gateway-list { ip-address | all } By default, no egress gateway router is configured to DHCP client.
  • Page 476: Configuring Dhcp Accounting

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration The DHCP server detects address collisions by sending pings, while the DHCP client does that by sending ARP packets. 9.5.13 Configuring DHCP Accounting When DHCP accounting is enabled, the DHCP server sends accounting packets to the RADIUS accounting server in the specific domain when issuing and releasing leases.
  • Page 477 3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration Note: This mode applies to the scenario that the DHCP server allocates IP addresses from interface address pools. In this mode, you can configure a range of interfaces, and therefore can enable DHCP accounting on multiple interfaces at a time.
  • Page 478: Configuring Bims Option Support On The Dhcp Server

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration Operation Command Remarks Configure specified dhcp select global interfaces work [ subaddress ] { all | DHCP server mode and interface interface-type Required assign addresses from interface-number the global DHCP address...
  • Page 479: Configuring Option 184 Support On The Dhcp Server

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration Operation Command Remarks dhcp server bims-server ip-address port Enable port-number sharekey key configure BIMS { interface interface-type option system interface-number view interface-type interface-number | all } dhcp server bims-server Required.
  • Page 480 3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration II. Configuring option 184 in system view Table 9-34 Configure option 184 for the DHCP server in system view Operation Command Remarks Enter system view system-view –– Configure specified...
  • Page 481 3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration This approach allows you to configure option 184 on multiple interfaces at the same time. III. Configuring option 184 in interface view Table 9-35 Configure option 184 for the DHCP server in interface view...
  • Page 482: Configuring Option 82 Support On The Dhcp Server

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration IV. Configuring option 184 in DHCP global address pool view Table 9-36 Configure option 184 for the DHCP server in global address pool view Operation Command Remarks Enter system view system-view ––...
  • Page 483: Clearing Dhcp Information

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration The DHCP server function is enabled on your device and the network parameters of the device are configured. The network parameters, and address pool and address lease allocation policies are configured for the DHCP server.
  • Page 484: Dhcp Relay Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration Operation Command Clear conflict information of all address reset dhcp server conflict all pool Clear statistical information in DHCP reset dhcp server statistics server 9.6 DHCP Relay Configuration DHCP relay configuration tasks include:...
  • Page 485: Specifying External Dhcp Servers

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration Table 9-40 Set multiple interfaces to operate in DHCP relay mode Operation Command dhcp select relay interface Relay DHCP packets to an external interface-type interface-number [ to DHCP server for address allocation...
  • Page 486: Configuring Dhcp Server Load Sharing For Dhcp Relay

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration Perform the following configuration in system view to specify an external DHCP server address to which the DHCP broadcasts received on the specified interfaces are to be forwarded. Table 9-42 Configure an external DHCP server address for multiple interfaces...
  • Page 487: Configuring Option 82 Support On The Dhcp Relay

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration Table 9-44 Release client IP address from DHCP relay Operation Command Requests DHCP server dhcp relay release client-ip mac-address release client IP address Requests a specific DHCP server dhcp relay release client-ip mac-address...
  • Page 488: Dhcp Client Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration II. Configuring option 82 support on the DHCP relay Table 9-45 Configure option 82 support on the DHCP relay Operation Command Remarks Enter system view system-view –– Enable option...
  • Page 489: Displaying And Debugging Dhcp

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration By default, DHCP client is disabled. Note the following: After configured to obtain an IP address through DHCP, an interface cannot be configured with any subaddress. That is, the command ip address dhcp-alloc is in conflict with the command ip address ip-address mask sub, so you can only use one of them.
  • Page 490 3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration Operation Command display dhcp server expired { ip Display expired leases in DHCP address ip-address | pool [ pool-name ] | pool interface interface-type interface-number ] all } display dhcp server ip-in-use { all | ip...
  • Page 491: Dhcp Configuration Examples

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration Operation Command Display the DHCP relay address display dhcp relay address [ interface of the interface interface-type interface-num | all ] Display IP-to-MAC address associations for DHCP clients display dhcprelay-security...
  • Page 492 # Configure specified interfaces to operate in DHCP server mode and allocate IP addresses from a global address pool. [3Com] dhcp select global interface ethernet 0/0/0 to ethernet 0/0/1 # Forbid auto allocation of IP addresses (including DNS address, NetBIOS address and egress gateway address) [3Com] dhcp server forbidden-ip 10.1.1.2...
  • Page 493: Dhcp Relay Configuration Example

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration [3Com-dhcp-1] expired day 10 hour 12 # Configure attributes for DHCP address pool 2 (address pool range, egress gateway address, NetBIOS address and address lease limit). [3Com] dhcp server ip-pool 2 [3Com-dhcp-2] network 10.1.1.128 mask 255.255.255.128...
  • Page 494: Dhcp Client Configuration Example

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration [3Com-Ethernet6/0/0] ip address 10.110.1.1 255.255.0.0 # Configure IP relay address for the interface to specify the target DHCP server. [3Com-Ethernet6/0/0] dhcp select relay [3Com-Ethernet6/0/0] ip relay address 202.38.1.2 Configurations on DHCP server will not be mentioned here.
  • Page 495 3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration [server1] dhcp server ip-pool 1 [server1-dhcp1] network 200.254.0.0 mask 255.255.0.0 # Configure server2 [server2] dhcp enable [server2] interface ethernet0/0/0 [server2-Ethernet0/0/0] ip address 172.10.0.1 16 [server2] dhcp server ip-pool 2 [server2-dhcp2] network 172.10.0.0 mask 255.255.0.0...
  • Page 496: Dhcp Accounting Configuration Example

    [3Com] interface Ethernet 1/0/0 [3Com-Ethernet1/0/0] ip address 10.1.1.1 255.255.255.0 [3Com-Ethernet1/0/0] quit [3Com] interface Ethernet 1/0/1 [3Com-Ethernet1/0/1] ip address 10.1.2.1 255.255.255.0 [3Com-Ethernet1/0/1] quit # Enable DHCP server. [3Com] dhcp enable [3Com] dhcp select global interface ethernet 1/0/0 to ethernet 1/0/1 3Com Corporation 9-49...
  • Page 497: Option 184-Supported Dhcp Server Configuration Example

    9.9.5 Option 184-Supported DHCP Server Configuration Example I. Network requirements Figure 9-11 presents a scenario, where 3Com VCX is functioning as the DHCP client, 3Com Router is functioning as the DHCP server. 3Com Router supports option 184 when assigning addresses from global address pools.
  • Page 498: Option 28-Supported Dhcp Relay Configuration Example

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration III. Configuration procedure Configure the DHCP client (on 3Com VCX) Enable DHCP client, and configure it to request all suboptions of option 184 when requesting an address. Configure the DHCP server <3Com>...
  • Page 499: Dhcp Configuration Example For The Serial Interface Using Ppp

    # Enable option 82 support on the frame relay and specify the strategy for handling packets with option 82 to keep. [3Com] dhcp relay information enable [3Com] dhcp relay information strategy keep Configure the DHCP server Omitted 9.9.7 DHCP Configuration Example for the Serial Interface using PPP I.
  • Page 500 Figure 9-13 Network diagram for the DHCP support on the serial interface using PPP III. Configuration procedure Configure the DHCP server <3Com> system-view [3Com] dhcp enable [3Com] dhcp select global interface serial 2/0/0 [3Com] dhcp server ip-pool 1 [3Com-dhcp-pool-1] network 20.20.0.0 mask 255.255.255.0 [3Com-dhcp-pool-1] gateway-list 20.20.0.1 [3Com-dhcp-pool-1] domain-name huawei.com...
  • Page 501 3Com Router 3000 Ethernet Family Configuration Guide Chapter 9 DHCP Configuration [3Com] dhcp enable [3Com] interface serial 2/0/0 [3Com-serial2/0/0] link-protocol ppp [3Com-serial2/0/0] ip address dhcp-alloc [3Com-serial2/0/0] quit 3Com Corporation 9-54...
  • Page 502: Configuring Tcp Attributes

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 10 IP Performance Configuration Chapter 10 IP Performance Configuration 10.1 Configuring Maximum Transmission Unit (MTU) MTU size of the interface decides whether the IP packets on the interface need to be fragmented.
  • Page 503: Configuring The Sending Of Icmp Redirect Messages

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 10 IP Performance Configuration TCP connection will be terminated. The range of fin is 76 to 3600 seconds and the default of fin is 675 seconds. The receiving/sending buffer size of connection-oriented Socket: The range is 1 to 32 KB and the default is 8 KB.
  • Page 504: Displaying And Debugging Ip Performance

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 10 IP Performance Configuration Table 10-4 Configure the sending of ICMP Redirect messages Operation Command Enable the sending of ICMP Redirect messages icmp redirect send Disable the sending of ICMP Redirect messages undo icmp redirect send By default, the sending of ICMP Redirect messages is enabled.
  • Page 505: Configuring Broadcast Forwarding On An Interface

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 10 IP Performance Configuration Operation Command Enable UDP information debugging debugging udp packet Disable UDP connection debugging. undo debugging udp packet Clear TCP traffic statistics. reset tcp statistics Show information on all the current display ip socket socket interfaces in the system.
  • Page 506 3Com Router 3000 Ethernet Family Configuration Guide Chapter 10 IP Performance Configuration All PCs on 192.168.1.0/24 support remote wakeup and the wakeup function must work with power supplies, network adapters, and main boards. Enable broadcast forwarding on interface Ethernet 1/0/1 on the router.
  • Page 507 3Com Router 3000 Ethernet Family Configuration Guide Chapter 10 IP Performance Configuration messages, and cuts down the route finding time and improves forwarding throughput of IP messages. Since the forwarding table in the cache has been optimized, much quicker searching speed can be obtained.
  • Page 508: Displaying And Debugging Unicast Fast Forwarding

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 10 IP Performance Configuration Caution: To have an interface participate in load balancing, you must disable fast forwarding on it in the forwarding direction. If fast-forwarding is configured on an interface, the debugging information of the IP packets on the interface will not be displayed, namely, the debugging ip packet command does not work.
  • Page 509: Configuring Multicast Fast Forwarding

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 10 IP Performance Configuration For the first packet of a data stream, the router looks up the routing table for the routing decision, while for the subsequent packets of the stream, it looks up the cached fast forwarding table, which is optimized.
  • Page 510 3Com Router 3000 Ethernet Family Configuration Guide Chapter 10 IP Performance Configuration Troubleshooting: In the event of such a fault, you can enable the corresponding debugging information output to view the debugging information. Use the command debugging udp to enable the UDP debugging information output to trace the UDP packet.
  • Page 511 3Com Router 3000 Ethernet Family Configuration Guide Chapter 10 IP Performance Configuration Then the TCP packets received or sent can be checked in real time, and the formats are similar to those mentioned above. 3Com Corporation 10-10...
  • Page 512: Nat Overview

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 NAT Configuration Chapter 11 NAT Configuration 11.1 NAT Overview As described in RFC1631, Network Address Translation (NAT) is to translate the IP address in IP data packet header into another IP address, which is mainly used to implement private network accessing external network in practice.
  • Page 513: Functions Provided By Nat

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 NAT Configuration external server at 202.120.10.2, the data packet will traverse the NAT server. The NAT server checks the contents in the packet header. If the destination address in the header is an extranet address, the server will translate the source address 192.168.1.3 into a valid public address on the Internet 202.169.10.1, then forward the packet to the...
  • Page 514 3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 NAT Configuration Note: The number of public IP addresses on the NAT server is far less than the number of hosts in the intranet because not all hosts will access the extranet at one time. The public IP address number is determined based on the maximum number of intranet hosts at the rush hour of the network.
  • Page 515: Static Net-To-Net Nat

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 NAT Configuration Datagram1 Datagram1 Datagram1 Datagram1 Datagram1 Datagram1 Source IP: 192.168.1.3 Source IP: 192.168.1.3 Source IP: 202.169.10.1 Source IP: Source IP: 202.169.10.1 Source IP: Source port: 1537 Source port: 1537 Source port: 1537...
  • Page 516: Bidirectional Nat

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 NAT Configuration 11.2.4 Bidirectional NAT In comparison to conventional NAT which translates only the source or destination address, bidirectional NAT translates both addresses. It is suitable for the situation where the addresses of the hosts on your intranet overlap.
  • Page 517: Internal Server

    WWW server. Moreover, NAT can provide multiple identical servers such as WWW servers for external clients. The NAT function on 3Com Series Routers provides some servers on the intranet for some hosts on external networks. When a client on an external network accesses a...
  • Page 518: Nat Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 NAT Configuration rules. For the involved protocol, this is transparent. So far, V 2.41’s NAT ALG implementation supports point to point tunneling protocol (PPTP), DNS, FTP, Internet locator service (ILS), NetBIOS over TCP/IP (NBT), session initiation protocol (SIP), and H.323.
  • Page 519: Configuring Nat

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 NAT Configuration will be chosen as the source address. Perform the following configurations in the system view. Table 11-1 Configure address pool Operation Command Define an address pool nat address-group group-number start-addr end-addr...
  • Page 520 3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 NAT Configuration Suppose that you directly take the interface address as the public network address after NAT. If you change the interface address in order to visit the external network, you...
  • Page 521 3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 NAT Configuration Table 11-5 Configure a static net-to-net NAT map Operation Command static net-to-net Create a static net-to-net NAT map entry inside-start-address inside-end-address global global-address mask undo static net-to-net Delete a static net-to-net NAT map entry...
  • Page 522: Configuring Internal Server

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 NAT Configuration Table 11-8 Configure NAPT Operation Command Add association for access control list outbound acl-number and address pool [ address-group group-number ] Delete association for access control list undo outbound...
  • Page 523: Configuring Nat Alg

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 NAT Configuration Table 11-10 Configure internal server Operation Command nat server [ acl-number ] [ vpn-instance vpn-instance-name ] protocol pro-type global global-addr [ global-port ] inside host-addr [ host-port ] Add an internal...
  • Page 524: Configuring Address Translation Lifetimes

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 NAT Configuration Table 11-12 Configure a NAT entry for a domain name Operation Command Map a domain name to a triplet of nat dns-map domain-name global-addr external IP address, port number, and...
  • Page 525: Nat Configuration Example

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 NAT Configuration 11.4 Displaying and Debugging NAT After the above configuration, execute the display command in all views to display the running of the NAT configuration, and to verify the effect of the configuration.
  • Page 526 [3Com-Serial3/0/0] nat server protocol tcp global 202.38.160.100 inside 10.110.10.2 www # Set internal www server 2 [3Com-Serial3/0/0] nat server protocol tcp global 202.38.160.100 8080 inside 10.110.10.3 www # Set internal smtp server [3Com-Serial3/0/0] nat server protocol tcp global 202.38.160.100 inside 10.110.10.4 smtp...
  • Page 527: Configuration Example Of Nat Using Ip Address Of Loopback Interface

    I. Network requirements As shown in Figure 11-5, the intranet accesses the Internet through the serial interface 3/0/0 on the 3Com router; the internal network segment 10.110.10.0/24 can access the Internet, but other network segments cannot; the internet network segment uses the Loopback interface address 202.38.160.106 as the converted address.
  • Page 528: Static Net-To-Net Nat Configuration Example

    Chapter 11 NAT Configuration [3Com-LoopBack0] quit # Configure the internal FTP server. [3Com] interface Serial3/0/0 [3Com-Serial3/0/0] nat server protocol tcp global 202.38.160.100 inside 10.110.10.1 ftp # Configure the internal WWW server 1. [3Com-Serial3/0/0] nat server protocol tcp global 202.38.160.100 inside 10.110.10.2 www...
  • Page 529 3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 NAT Configuration On Router A create a static net-to-net NAT entry, translating network address 10.1.1.0/24 to 211.2.1.0/24; and configure dynamic routing, ensuring the route to 211.2.2.0/24 is reachable. Likewise, on Router B create a static net-to-net NAT entry, translating network address 10.1.1.0/24 to 211.2.2.0/24;...
  • Page 530: Bidirectional Nat Configuration Example

    192.168.0.1/24 10.0.0.1/24 Intranet RouterA Eth3/0/0: www.web.com 10.1.1.3/24 10.0.0.1/24 10.1.1.1/24 DNS Server 192.168.0.150/24 Figure 11-7 Network diagram for bidirectional NAT III. Configuration procedure Configure Router A # Configure a NAT address pool. [3Com] nat address-group 1 2.0.0.1 2.0.0.200 3Com Corporation 11-19...
  • Page 531: Internal Servers Combined With Ipsec Vpn

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 NAT Configuration # Create a bidirectional NAT entry. [3Com] nat overlapaddress 3 10.0.0.0 3.0.0.0 address-mask 24 # Configure an ACL. [3Com] acl number 2000 [3Com-acl-basic-2000] rule 0 permit source 10.0.0.0 0.0.0.255 [3Com-acl-basic-2000] rule 1 permit source 10.1.1.0 0.0.0.255...
  • Page 532 [3Com] acl number 2001 [3Com-acl-basic-2001] rule permit ip source 10.110.20.0 0.0.0.255 [3Com-acl-basic-2001] rule permit ip source 10.110.30.0 0.0.0.255 [3Com-acl-basic-2001] rule deny ip source any destination any # Configure an ACL to control access to internal servers. [3Com-acl-basic-2001] acl number 2002...
  • Page 533 Chapter 11 NAT Configuration [3Com-Serial1/0/0] ip address 202.38.160.1 255.255.255.0 [3Com-Serial1/0/0] nat outbound 2001 # Configure the internal FTP and WWW servers. [3Com-Serial1/0/0] nat server 2002 protocol tcp global 202.38.160.1 inside 10.110.10.3 ftp [3Com-Serial1/0/0] nat server 2002 protocol tcp global 202.38.160.1 inside 10.110.10.2 www [3Com-Serial1/0/0] quit # Configure IPSec.
  • Page 534: Domain Name-Related Nat Configuration Example

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 11 NAT Configuration [3Com-acl-basic-2003] rule permit ip source 10.110.30.0 0.0.0.255 destination 10.110.0.0 0.0.255.255 [3Com-acl-adv-2003] rule deny ip source any destination any [3Com-acl-adv-2003] quit # Configure IPSec. [3Com] ipsec proposal tran1 [3Com-ipsec-proposal-tran1] encapsulation-mode tunnel...
  • Page 535 [3Com] interface serial0/0/0 [3Com-Serial0/0/0] ip address 1.1.1.1 255.0.0.0 [3Com-Serial0/0/0] nat outbound 2000 [3Com-Serial0/0/0] nat server protocol tcp global 1.1.1.1 www inside 10.0.0.2 [3Com-Serial0/0/0] nat server protocol tcp global 1.1.1.1 ftp inside 10.0.0.3 [3Com-Serial0/0/0] quit # Configure an ACL, permitting the 10.0.0.0/8 segment to access the Internet.
  • Page 536: Troubleshooting Nat Configuration

    # Map the domain names each to a triplet of external address, port number, and protocol type. [3Com] nat dns-map www.zc.com 1.1.1.1 80 tcp [3Com] nat dns-map ftp.zc.com 1.1.1.1 21 tcp 11.6 Troubleshooting NAT Configuration...
  • Page 537: Ip Unicast Policy Routing Overview

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 12 IP Unicast Policy Routing Configuration Chapter 12 IP Unicast Policy Routing Configuration 12.1 IP Unicast Policy Routing Overview IP policy routing is a mechanism in which packets are transmitted and forwarded by strategy without going through the routing table.
  • Page 538: Ip Unicast Policy Routing Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 12 IP Unicast Policy Routing Configuration output-interface clause has a higher priority than the apply ip-address default next-hop clause. When both of them are configured and valid, the system executes only the apply default output-interface clause. Note that these two...
  • Page 539 3Com Router 3000 Ethernet Family Configuration Guide Chapter 12 IP Unicast Policy Routing Configuration permit means applying policy routing for the packets meeting the conditions, and deny means not applying policy routing for the packets meeting the conditions. By default, no route-policy and the related node configuration is defined.
  • Page 540: Enabling Policy Routing

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 12 IP Unicast Policy Routing Configuration The user can specify multiple next hops or set several outbound interfaces. In this case, the forwarding of packets will be shared among multiple parameters, namely, each packet is sent on each next hop or outbound interface in turn.
  • Page 541: Typical Configuration Of Ip Unicast Policy Routing

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 12 IP Unicast Policy Routing Configuration Table 12-6 Display and debug IP unicast policy routing Operation Command Show local policy routing and interface display ip policy policy routing Show the setting of the local policy...
  • Page 542 [3Com-acl-adv-3102] rule permit ip [3Com-acl-adv-3102] quit # Define acl 5 node to make any TCP packet matching ACL 3101 be sent to serial interface serial 1/0/0. [3Com] route-policy aaa permit node 5 [3Com-route-policy] if-match acl 3101 [3Com-route-policy] apply output-interface serial 1/0/0 [3Com-route-policy] quit # Define acl 10 node not to apply the policy routing to the packet matching ACL 3102.
  • Page 543: Configuring Policy Routing Based On Packet Size

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 12 IP Unicast Policy Routing Configuration [3Com-Ethernet3/0/0] ip policy route-policy aaa 12.4.2 Configuring Policy Routing Based on Packet Size I. Configuration requirement Router A sends the packets of 64 to 100 bytes long through serial 2/0/0, packets of 101 to 1000 bytes long through serial 2/0/1 and those of other size should be routed normally.
  • Page 544 3Com Router 3000 Ethernet Family Configuration Guide Chapter 12 IP Unicast Policy Routing Configuration [RouterA] route-policy lab1 permit node 20 [RouterA-route-policy] if-match packet-length 101 1000 [Router-route-policy] apply ip-address next-hop 151.1.1.2 # Configure Router B: [RouterB] interface serial 1/0/0 [RouterB-Serial1/0/0] ip address 150.1.1.2 255.255.255.0 [RouterB] interface serial 1/0/1 [RouterB-Serial1/0/1] ip address 151.1.1.2 255.255.255.0...
  • Page 545: Introduction To Ip Multicast Policy Routing

    3Com Router 3000 Ethernet Family Error! Reference source not found.Error! Ref Configuration Guide erence source not found. Chapter 13 IP Multicast Policy Routing Configuration 13.1 Introduction to IP Multicast Policy Routing 13.1.1 Overview of IP Multicast Policy Routing IP multicast policy routing is subsidiary and enhancement to the function that multicast forwards packets according to the routing table.
  • Page 546: Packet Forwarding Process After The Ip Multicast Policy Routing Is Applied

    3Com Router 3000 Ethernet Family Error! Reference source not found.Error! Ref Configuration Guide erence source not found. specified through an interface-based ACL (ranging from 1000 to 1999). The next hop IP address list is specified through a standard ACL (ranging from 2000 to 2999).
  • Page 547: Defining The If-Match Clause Of The Route-Policy

    3Com Router 3000 Ethernet Family Error! Reference source not found.Error! Ref Configuration Guide erence source not found. 13.2.2 Defining the if-match Clause of the Route-Policy An if-match clause defines the match rule, which is the filtering condition that should be met by the packets to pass the current route-policy.
  • Page 548: Enabling Ip Multicast Policy Routing On An Interface

    3Com Router 3000 Ethernet Family Error! Reference source not found.Error! Ref Configuration Guide erence source not found. Use the ACL to specify the output interface list and the next hop IP address list for IP multicast policy routing. The basic ACL (ranging from 2000 to 2999) is specified for the next hop IP address.
  • Page 549 3Com Router 3000 Ethernet Family Error! Reference source not found.Error! Ref Configuration Guide erence source not found. Operation Command Disable the IP multicast undo debugging ip multicast-policy policy routing debugging 3Com Corporation 13-5...
  • Page 550: Routing Protocol

    3Com Router 3000 Ethernet Family Configuration Guide Routing Protocol 3Com Corporation...
  • Page 551 3Com Router 3000 Ethernet Family Configuration Guide Table of Contents Table of Contents Chapter 1 IP Routing Protocol Overview ..................1-1 1.1 IP Route and Routing Table Overview ................1-1 1.1.1 IP Route and Route Segment ................. 1-1 1.1.2 Routing by Routing Table..................1-2 1.2 Routing Management Policy....................
  • Page 552 3Com Router 3000 Ethernet Family Configuration Guide Table of Contents 3.2.6 Configuring Route Filtering ..................3-8 3.2.7 Disabling Host Route ....................3-9 3.2.8 Configuring Route Aggregation................3-9 3.2.9 Configuring Route Exchange of Indirectly Connected RIP Neighbors....3-10 3.2.10 Configuring Traffic Sharing Across RIP Interfaces ..........3-11 3.2.11 Configuring the RIP Preference ................
  • Page 553 3Com Router 3000 Ethernet Family Configuration Guide Table of Contents 4.2.14 Setting the Interface Priority for DR Election ............4-21 4.2.15 Configuring the Cost for Sending Packets on an Interface......... 4-23 4.2.16 Setting a Shortest Path First (SPF) Calculation Interval for OSPF..... 4-23 4.2.17 Configuring an Interval Required for Sending LSU Packets.......
  • Page 554 3Com Router 3000 Ethernet Family Configuration Guide Table of Contents 5.2.14 Configuring IS-IS Authentication Password ............5-15 5.2.15 Configuring Route Aggregation................5-16 5.2.16 Configuring Overload Flag Bit ................5-16 5.2.17 Configuring to Ignore the LSP Checksum Errors..........5-16 5.2.18 Configuring to Log the Peer Changes..............5-17 5.2.19 Configuring LSP Refresh Interval................
  • Page 555 3Com Router 3000 Ethernet Family Configuration Guide Table of Contents 6.2.21 Resetting BGP Connection ................. 6-25 6.3 Displaying and Debugging BGP ..................6-26 6.4 BGP Configuration Example.................... 6-29 6.4.1 Configuring BGP AS Confederation Attribute ............6-29 6.4.2 Configuring BGP Route Reflector ................. 6-31 6.4.3 Configuring BGP Load Balancing .................
  • Page 556: Chapter 1 Ip Routing Protocol Overview

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 IP Routing Protocol Overview Chapter 1 IP Routing Protocol Overview 1.1 IP Route and Routing Table Overview 1.1.1 IP Route and Route Segment Routers are adopted for route selection on the Internet. According to the destination address of a received packet, a router selects an appropriate route (via a network) and forwards the packet to the next router.
  • Page 557: Routing By Routing Table

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 IP Routing Protocol Overview 1.1.2 Routing by Routing Table The key for a router to forward packets is the routing table. Each router saves a routing table in its memory, and each entry of this table specifies the physical port of the router through which the packet to a subnet or a host should be sent.
  • Page 558: Routing Management Policy

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 IP Routing Protocol Overview 16.0.0.1 16.0.0.3 16.0.0.0 15.0.0.2 10.0.0.2 Routing table of Router R8 16.0.0.2 15.0.0.0 Destination 10.0.0.0 Nexthop Interface Network 13.0.0.3 10.0.0.0 10.0.0.1 15.0.0.1 10.0.0.1 11.0.0.0 11.0.0.1 13.0.0.2 13.0.0.0 12.0.0.0 11.0.0.2...
  • Page 559: Load Sharing And Route Backup

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 IP Routing Protocol Overview In the table, “0” represents a directly connected route, and “255” represents a route from an unknown source. Table 1-1 Routing protocols and route discovery preferences The Preference of the Corresponding...
  • Page 560: Routes Sharing Between Routing Protocols

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 IP Routing Protocol Overview Per-packet load sharing, implemented when fast forwarding is disabled. The router then distributes the arrived packets equally on the participating routes. Bandwidth-based unbalanced load sharing. When fast forwarding is disabled, the router implements per-packet load sharing to distribute load depending on the physical bandwidth of interface.
  • Page 561: Configuring Bandwidth-Based Unbalanced Load Sharing

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 IP Routing Protocol Overview 1.3 Configuring Bandwidth-Based Unbalanced Load Sharing In general, the technology of load sharing is to send packets evenly to different interfaces. For example, with load sharing, a flow of 3 Mbps is evenly sent to two interfaces, that is, 1.5 Mbps for each interface.
  • Page 562: Displaying And Debugging Bandwidth-Based Unbalanced Load Sharing

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 IP Routing Protocol Overview Table 1-3 Assign bandwidth to the interface Operation Command Assign bandwidth to the interface loadbandwidth bandwidth Restore the default bandwidth of the undo loadbandwidth interface Different from physical bandwidth, the configuration of load bandwidth does not affect interface properties but load distribution.
  • Page 563 3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 IP Routing Protocol Overview 10.1.2.2 1193501 155000 Atm1/0/0 10.1.3.2 15914 2048 Serial2/0/0 BandWidth:48:75:1 Packets:47:74:1 Flows:0:0:0 The output indicates that load is shared on the three interfaces based on default bandwidth. View statistics about load sharing after you configure bandwidth-based unbalanced load sharing on Router A.
  • Page 564 3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 IP Routing Protocol Overview Packets:1:2:3 Flows:0:0:0 The statistics indicates that load sharing is implemented according to the ratio of the specified bandwidths. 3Com Corporation...
  • Page 565: Static Route Overview

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 Static Route Configuration Chapter 2 Static Route Configuration Note: For the parameter explanation in VPN instance, refer to "MPLS" module of this manual. 2.1 Static Route Overview 2.1.1 Static Route Static route is a special kind of route manually configured by an administrator. You can set up an interconnecting network with the static route configuration.
  • Page 566: Static Routing Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 Static Route Configuration table, the default route is in the form of the route to the network 0.0.0.0 (with the mask 0.0.0.0). You can see whether it has been set via the output of the display ip routing-table command.
  • Page 567: Configuring The Default Route

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 Static Route Configuration VPN instance name IP address and mask An IP address is in dotted decimal format. As the “1” in a 32-bit mask is required to be consecutive, a mask can be represented either by dotted decimal notation or by mask length (namely the bits of “1”...
  • Page 568: Displaying And Debugging The Routing Table

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 Static Route Configuration Table 2-2 Configure the default route Operation Command ip route-static 0.0.0.0 { 0.0.0.0 | 0 } {interface-type interface-number nexthop-address } [ preference value ] [ tag tag-value ] [ description string ]...
  • Page 569 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 Static Route Configuration Operation Command View the routes within specified range of display ip routing-table ip-address1 destination addresses mask1 ip-address2 mask2 [ verbose ] View the routes passing the filtering of a...
  • Page 570 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 Static Route Configuration II. Network diagram Host3: 1.1.5.1/24 ethernet1/0/0: 1.1.5.2/24 Serial2/0/0: Serial2/0/1: 1.1.2.2/24 1.1.3.1/24 Router C Serial2/0/0: Serial2/0/0: Host1: 1.1.1.1/24 Host2: 1.1.4.2/24 1.1.2.1/24 1.1.3.2/24 ethernet1/0/0: ethernet1/0/0: 1.1.1.2/24 Router A Router B 1.1.4.1/24...
  • Page 571: Troubleshooting Static Route

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 Static Route Configuration 2.5 Troubleshooting Static Route Symptom 1: The router is not configured with dynamic routing protocol. Both the physical status of the interface and the link layer protocol are in UP status, but the IP packet cannot be forwarded normally.
  • Page 572: Rip Overview

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 RIP Configuration Chapter 3 RIP Configuration Note: For the parameter explanation of VPN instance, refer to "MPLS" module of this manual. 3.1 RIP Overview RIP (Routing Information Protocol) is a relatively simple interior gateway protocol (IGP), and it is primarily applied to relatively small networks.
  • Page 573: Rip Versions

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 RIP Configuration Cost: The cost for the router to reach the destination, which should be an integer in the range of 0 to 15. Timer: Duration from the last time that the routing entry is modified till now. The timer is reset to 0 whenever a routing entry is modified.
  • Page 574: Trigger Rip

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 RIP Configuration Note: RIP-2 supports both broadcasting and multicasting. By default, multicasting applies and the IP multicast address is 224.0.0.9. When RIP-2 broadcasting is running on interfaces, RIP-1 packets can also be received.
  • Page 575: Rip Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 RIP Configuration information to their respective adjacent networks so as to make the updated route globally known. Furthermore, RIP uses the timeout mechanism to handle the timeout routes so as to ensure the real time and validity of the routes.
  • Page 576: Enabling Rip

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 RIP Configuration Disable host route Configure route aggregation Configure route exchange of indirectly connected RIP neighbors Configure traffic share across RIP interfaces RIP parameters configuration Configure the RIP preference Configure RIP timer...
  • Page 577: Configuring Split Horizon

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 RIP Configuration Table 3-2 Enable RIP network Operation Command Enable RIP on the specified network network network-address Disable RIP on the specified network undo network network-address Note that the operating network segment must be specified after RIP is enabled. RIP only operates on the specified network segment.
  • Page 578: Configuring Additional Metrics

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 RIP Configuration 3.2.4 Configuring Additional Metrics Additional metrics is the input or output metrics added to an RIP route. It does not change the metric value of the route in the routing table, but adds a specified metric value when the interface receives or sends a route.
  • Page 579 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 RIP Configuration When the protocol argument is set to BGP, the keyword allow-ibgp is optional. Whereas the import-route bgp command redistributes only EBGP routes, the import-route bgp allow-ibgp command redistributes IBGP routes in addition and as such, must be used with cautions.
  • Page 580: Disabling Host Route

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 RIP Configuration Table 3-7 Configure RIP to filter the redistributed routes Operation Command filter-policy { acl-number | ip-prefix Filter redistributed routing ip-prefix-name route-policy information route-policy-name export [ routing-protocol ] undo filter-policy { acl-number...
  • Page 581 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 RIP Configuration Perform the following configuration in RIP view. Table 3-9 Configure route aggregation Operation Command Enable the route aggregation function of summary RIP-2 Disable the route aggregation function of undo summary RIP-2 By default, RIP-2 route aggregation is enabled.
  • Page 582: Configuring Traffic Sharing Across Rip Interfaces

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 RIP Configuration configure unicast of RIP packets when the routers running RIP are not directly connected neighbors. Perform the following configuration in RIP view. Table 3-10 Configure unicast of RIP packets...
  • Page 583: Configuring The Rip Preference

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 RIP Configuration This command applies to the RIP protocol both running in public networks and private networks in a MPLS VPN. By default, traffic sharing across RIP interfaces is disabled. A simpler traffic sharing mechanism is supported instead.
  • Page 584: Configuring Zero Field Check Of An Interface Packet

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 RIP Configuration timer Garbage-collection may be 90 to 120 seconds. This is because a router needs to wait for 4 update packets from the same neighbor before completely removing an unreachable route from the routing table. However, when a route changes into the unreachable state is not just the beginning of a new update period.
  • Page 585: Configuring Rip Packet Authentication

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 RIP Configuration helps RIP-1-enabled hosts to avoid mistakenly receiving and processing routes with subnet masks of RIP-2. When RIP-2 is enabled on an interface, RIP-1 packets can also be received. Perform the following configuration in interface view.
  • Page 586: Specifying The Operating State Of The Interface

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 RIP Configuration RFC2453-compliant packet format; rfc2082, which supports RFC2082-compliant packet format. 3.2.16 Specifying the Operating State of the Interface In interface view, you can specify the operating state of RIP on the interface. For example, whether RIP is enabled on the interface, namely, whether RIP update packets are sent and received on the interface.
  • Page 587: Displaying And Debugging Rip

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 RIP Configuration Table 3-19 Configure multi-instance Operation Command ipv4-family [ unicast ] vpn-instance Enter MBGP address family view of RIP vpn-instance-name Remove the configuration of MBGP undo ipv4-family unicast address family view of RIP...
  • Page 588: Rip Configuration Example

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 RIP Configuration Operation Command display routing [vpn-instance Display the RIP routing table vpn-instance-name] debugging rip packets [ interface type Enable packet debugging of RIP. number ] Disable the packet debugging of RIP...
  • Page 589: Adjusting The Convergence Time Of Rip Network

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 RIP Configuration III. Configuration procedure Configure RouterA: # Configure the interfaces Ethernet 2/0/0 and Ethernet 6/0/0. [Router A] interface ethernet 2/0/0 [Router A-Ethernet2/0/0] ip address 192.1.1.1 255.255.255.0 [RouterA-Ethernet2/0/0] quit [RouterA] interface ethernet 6/0/0 [RouterA-Ethernet6/0/0] ip address 192.1.2.1 255.255.255.0...
  • Page 590 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 RIP Configuration II. Network diagram RouterC Serial1/0/0 12.0.0.2/8 Loopback0 11.0.0.1/8 Serial1/0/0 12.0.0.1/8 Router A RouterB Ethernet2/0/0 Ethernet2/0/0 10.0.0.1/8 10.0.0.2/8 Ethernet Figure 3-3 Configure RIP timer III. Configuration procedure Note: For the IP address configuration of the interface, refer to Figure 3-3.
  • Page 591 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 RIP Configuration After the above configuration, executing display ip routing-table command on RouterB and RouterC, you can view the information of route 11.0.0.0/8. Shut down the interface Ethernet2/0/0 of RouterA, you can view that the route state of 11.0.0.0/8 to RouterB and RouterC changes into unreachable state within 30 seconds.
  • Page 592 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 RIP Configuration [RouterA-rip ] undo summary [RouterA-rip ] network 1.0.0.0 # Configure the RIP peer and configure not to check the source address of the RIP packet. [RouterA-rip ] peer 2.0.0.1 [RouterA-rip ] undo validate-source-address # Configure RIP to redistribute directly connected routes.
  • Page 593: Configuring Trip

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 RIP Configuration In addition, when RouterC functions as a PE, you must configure RIP multi-instance, and you must configure not to check the received RIP packets in RIP MBGP address family view: # Configure vpn-instance.
  • Page 594: Troubleshooting Rip

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 RIP Configuration [Router-Analogmodem1/0/0] dialer-group 1 [Router-Analogmodem1/0/0] dialer number 6688012 [Router-Analogmodem1/0/0] quit # Enable RIP on network segment 13.0.0.0/8. [Router] rip [Router-rip] network 13.0.0.0 [Router-rip] quit # Configure the TTY interface corresponding to the AM interface.
  • Page 595 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 RIP Configuration The opposite router is configured as the multicast mode (for example, the rip version 2 multicast command is executed) but the local router is not configured as the multicast mode.
  • Page 596: Ospf Overview

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration Chapter 4 OSPF Configuration 4.1 OSPF Overview 4.1.1 Introduction to OSPF OSPF (Open Shortest Path First) is a link state-based internal gateway protocol developed by IETF organization. At present, OSPF version 2 (RFC2328) is used, which...
  • Page 597: Basic Concepts Related To Ospf

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration A router uses the SPF algorithm to calculate the shortest path tree with itself as the root. The tree shows the routes to the nodes in the autonomous system. The external routing information is leaf node.
  • Page 598 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration If a DR becomes invalid due to some fault, it must be reelected and synchronized. It takes time and meanwhile the route calculation is incorrect. In order to speed up this process, OSPF puts forward the concept of BDR.
  • Page 599: Ospf Packets

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration 19.1.1.0/24 Area 12 Area 19 Virtual Link Area 0 19.1.3.0/24 19.1.2.0/24 Area 8 Figure 4-1 Area and route aggregation 4.1.4 OSPF Packets OSPF uses five types of packets: Hello Packet: A kind of most commonly used packet, which is periodically sent to the peer of a local router.
  • Page 600: Lsa Types Available In Ospf

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration 4.1.5 LSA Types Available in OSPF I. Five types of basic LSAs OSPF calculates and maintains routing information primarily by sending LSAs. Five types of LSAs are defined in RFC2328:...
  • Page 601: Ospf Features Available In V

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration An opaque LSA includes a standard 20-byte LSA header and application information-specific domain. See the following figure: LS age Options LS ty pe (9, 10 or 11) 16-bit 8-bit...
  • Page 602: Ospf Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration Backbone area ABR 1 ABR 2 Area 1 Area 2 Area 1 Area 2 Area 1 Area 2 Figure 4-3 Network diagram for route backup across non-backbone areas As shown in the above figure, devices A, B, and C are working as edge devices. They are each connected to the same two non-backbone areas (stub or NSSA) to back up their upstream routes.
  • Page 603: Configuring Router Id

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration If the OSPF backbone area is not consecutive, then it is required to Configure OSPF virtual link If the network types for OSPF are different, then it is required to...
  • Page 604: Enabling Ospf Process

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration automatically select one from IP addresses of the current interfaces as the router ID. When you do that manually, you must guarantee that the IDs of any two routers in the AS are unique.
  • Page 605: Entering The Ospf Area View

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration The default process ID 1 will be selected if no one is specified when configuring the ospf command; process ID 1 is disabled by default if no one is specified when configuring the undo ospf command.
  • Page 606: Configuring Ospf Virtual Links

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration 4.2.5 Configuring OSPF Virtual Links OSPF stipulates that all non-backbone areas should maintain connectivity with the backbone area. That is, at least one interface on the ABR should fall into the area 0.0.0.0.
  • Page 607 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration Broadcast: If Ethernet or FDDI is adopted, OSFP defaults the network type to broadcast. Non-Broadcast Multi-access (NBMA): If Frame Relay, ATM, HDLC or X.25 is adopted as a link layer protocol, OSPF defaults the network type to NBMA.
  • Page 608: Configuring The Adjacent Point

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration By default, OSPF identifies network type by looking at link layer type. After you specify a network type for the interface, the original network type is removed automatically. 4.2.7 Configuring the Adjacent Point For an NBMA network, OSPF router cannot discover adjacent routers through broadcasting Hello packets;...
  • Page 609 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration External route type 1 External route type 2 Intra-area and inter-area routes describe the internal AS topology whereas the external routes describe how to select the route to the destinations beyond the AS.
  • Page 610: Configuring Ospf To Create The Default Route

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration relevant protocol information, such as the number used to distinguish different ASs when OSPF receives BGP. Perform the following configuration in OSPF view. Table 4-9 Configure parameters for OSPF to redistribute external routes...
  • Page 611: Configuring Ospf Route Filtering

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration Using the default-route-advertise command at ASBR or ABR in NSSA, you can generate a default route which is advertised by the Type-7 LSA into NSSA. This command is absolutely ineffective to Stub area and totally stub area.
  • Page 612 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration I. Configuring OSPF to filter received routes After OSPF receives LSAs, it may decide based on certain filtering conditions whether to add the computed routes to the routing table. The routes filtered out do not appear in the local routing table.
  • Page 613: Configuring Route Aggregation By Ospf

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration Note: The filter-policy import command only filters the OSPF routes of this process received from the neighbors, and routes that cannot pass the filter are not to be added to the routing table. This command only takes effect on ASBRs.
  • Page 614: Setting Ospf Route Preference

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration Table 4-13 Configure the route aggregation in OSPF area Operation Command Configure the route aggregation in abr-summary ip-address mask OSPF area [ advertise | not-advertise ] Cancel route aggregation in OSPF area undo abr-summary ip-address mask By default, the inter-area routes will not be aggregated.
  • Page 615: Configuring Ospf Timers

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration Table 4-15 Set OSPF route preference Operation Command Configure a preference for OSPF to preference [ ase ] preference compare with the other routing protocols Restore the default protocol preference...
  • Page 616: Setting The Interface Priority For Dr Election

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration Perform the following configuration in interface view. Table 4-17 Set dead time for the neighboring routers Operation Command Configure dead timer ospf timer dead seconds neighboring routers Restore the default dead interval of the...
  • Page 617 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration DR is elected by all the routers on the segment. Routers with the priorities greater than 0 in the network are eligible "candidates". Among all the routers self-proclaimed to be the DR, the one with the highest priority will be elected.
  • Page 618: Configuring The Cost For Sending Packets On An Interface

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration Table 4-19 Set the interface priority for DR election Operation Command Configure the interface with a priority for ospf dr-priority priority_num DR election Restore the default interface priority undo ospf dr-priority By default, the priority of the Interface is 1 in the DR election.
  • Page 619: Configuring An Interval Required For Sending Lsu Packets

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration 4.2.17 Configuring an Interval Required for Sending LSU Packets Transmitting-delay should be added to the aging time of the LSA in an LSU packet. Setting the parameter like this mainly considers the time duration that the interface requires for transmitting the packet.
  • Page 620: Configuring Ospf Authentication

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration Table 4-24 Configure maximum number of OSPF equal-cost routes Operation Command Configure maximum number of OSPF multi-path-number number equal-cost routes Restore the default maximum number of undo multi-path-number OSPF equal-cost routes The default maximum number of OSPF equal-cost routes is 8.
  • Page 621: Disabling The Interface To Send Ospf Packets

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration Table 4-26 Configure OSPF Packet Authentication Operation Command Specify a password for OSPF simple ospf authentication-mode simple text authentication password Cancel plain text authentication on the undo ospf authentication-mode...
  • Page 622: Configuring Ospf Stub Area

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration 4.2.22 Configuring OSPF STUB Area The Stub area, a type of OSPF area, does not receive or advertise Type-5 LSAs. The Stub area is often at the AS border and can effectively minimize the LSDB size of the routers in the Stub area and lower resource occupation for SPF calculation.
  • Page 623: Configuring Nssa Parameters Of Ospf

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration 4.2.23 Configuring NSSA Parameters of OSPF RFC1587 (OSPF NSSA Option) defines the Not-So-Stubby-Area (NSSA), which keeps the strong points of Stub area while providing flexible networking. This area can redistribute AS external routes in a limited way.
  • Page 624 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration Table 4-29 Configure NSSA area parameters of OSPF Operation Command nssa default-route-advertise Configure an area to be an NSSA area [ no-import-route ] [ no-summary ] Remove a configured NSSA area...
  • Page 625: Enabling Opaque Capacity Of Ospf

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration The default-cost parameter, which is only available for the NSSA ABR, defines the cost value for the default route advertised by the ABR to the NSSA. 4.2.24 Enabling Opaque Capacity of OSPF Enable the opaque capacity of OSPF before implementing OSPF TE.
  • Page 626: Resetting An Ospf Process

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration Table 4-32 Configure OSPF TRAP Operation Command snmp-agent trap enable ospf process-id [ ifstatechange | virifstatechange | nbrstatechange | virnbrstatechange | ifcfgerror | virifcfgerror | ifauthfail | Enable OSPF TRAP...
  • Page 627 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration Table 4-34 Display and debug OSPF Operation Command Display summary OSPF display ospf process-id redistributed routes asbr-summary [ ip-address mask ] Display the brief information of the display ospf [ process-id ] brief...
  • Page 628: Ospf Configuration Example

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration Operation Command Disable the debugging of OSPF LSA undo debugging ospf lsa packet Enable OSPF SPF debugging debugging ospf spf Disable OSPF SPF debugging undo debugging ospf spf 4.4 OSPF Configuration Example...
  • Page 629 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration [RouterA-serial1/0/0] ip address 10.0.0.1 255.0.0.0 [RouterA-serial1/0/0] interface ethernet0/0/0 [RouterA-ethernet 0/0/0] ip address 20.0.0.1 255.0.0.0 [RouterA- ethernet 0/0/0] interface ethernet0/0/1 [RouterA- ethernet 0/0/1] ip address 30.0.0.1 255.0.0.0 [RouterA- ethernet 0/0/1] quit...
  • Page 630 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration Enable the OSPF process 200 on the interface Ethernet2/0/0 of Router C in Area 0. Router A and Router B can be neighbors, and Router B and Router C can be neighbors.
  • Page 631: Configuring Dr Election Based On Ospf Priority

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration [Router B-ospf-200-area-0.0.0.0] network 131.108.0.0 0.0.255.255 # Configure Router C: [Router C] interface ethernet 2/0/0 [Router C-Ethernet2/0/0] ip address 131.108.1.1 255.255.0.0 [Router C-Ethernet2/0/0] quit [Router C] router id 10.10.3.2 [Router C] ospf 200 [Router C-ospf-200] area 0 [Router C-ospf-200-area-0.0.0.0] network 131.108.0.0 0.0.255.255...
  • Page 632 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration [Router A-Ethernet1/0/0] ospf dr-priority 100 [Router A-Ethernet1/0/0] quit [Router A] router id 1.1.1.1 [Router A] ospf [Router A-ospf] area 0 [Router A-ospf-area-0.0.0.0] network 192.1.1.0 0.0.0.255 # Configure Router B: [Router B] interface ethernet 1/0/0 [Router B-Ethernet1/0/0] ip address 192.1.1.2 255.255.255.0...
  • Page 633: Configuring Virtual Link Of The Ospf

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration [Router B-Ethernet1/0/0] ospf dr-priority 200 On router A, run display ospf peer to view its OSPF peers. Please note the priority of Router B has been modified as 200, but it is still not the DR.
  • Page 634: Configuring Ospf Peer Authentication

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration [Router A-ospf-area-0.0.0.0] network 192.1.1.0 0.0.0.255 # Configure Router B: [Router B] interface ethernet 2/0/0 [Router B-Ethernet2/0/0] ip address 192.1.1.2 255.255.255.0 [Router B-Ethernet2/0/0] interface ethernet 1/0/0 [Router B-Ethernet1/0/0] ip address 193.1.1.2 255.255.255.0 [Router B-Ethernet1/0/0] quit [Router B] router id 2.2.2.2...
  • Page 635 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration II. Network diagram Router B 2.2.2.2 Simple Area 0 authentication ethernet2/0/0 192.1.1.2/24 ethernet2/0/0 192.1.1.1/24 Router A 1.1.1.1 Serial1/0/0 193.1.1.1/24 Serial1/0/0 Area 1 193.1.1.2/24 MD5 authentication Router C 3.3.3.3 Figure 4-9 Configure OSPF neighboring authentication III.
  • Page 636: Configuring Ospf Stub Areas

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration [Router B] interface ethernet 2/0/0 [Router B-Ethernet2/0/0] ip address 192.1.1.2 255.255.255.0 [Router B-Ethernet2/0/0] authentication-mode simple password [Router B] router id 2.2.2.2 [Router B] ospf [Router B-ospf] area 0 [Router B-ospf-area-0.0.0.0] network 192.1.1.0 0.0.0.255 [Router B-ospf-area-0.0.0.0] authentication-mode simple...
  • Page 637 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration [RouterA-serial1/0/0] ip address 10.0.0.1 255.0.0.0 [RouterA-serial1/0/0] interface ethernet0/0/0 [RouterA-ethernet 0/0/0] ip address 20.0.0.1 255.0.0.0 [RouterA- ethernet 0/0/0] interface ethernet0/0/1 [RouterA- ethernet 0/0/1] ip address 30.0.0.1 255.0.0.0 [RouterA- ethernet 0/0/1] quit...
  • Page 638: Troubleshooting Ospf

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration 4.5 Troubleshooting OSPF Symptom 1: The OSPF is configured according to the above procedures, but the router OSPF cannot operate normally. Troubleshooting: Please check according to the following procedures.
  • Page 639 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 OSPF Configuration As is shown in the following figure, only an area is configured in RTA and RTD, but two areas are configured in RTB (area0, area1) and RTC (area1, area2) respectively. In which, RTB has an area with the ID of 0, so it meets the requirement;...
  • Page 640: Chapter 5 Integrated Is-Is Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 Integrated IS-IS Configuration Chapter 5 Integrated IS-IS Configuration 5.1 Integrated IS-IS Overview Intermediate System-to-Intermediate System intra-domain routing information exchange protocol (IS-IS) is the dynamic routing protocol initially issued by the International Organization for Standardization (ISO) for its CLNP (Connectionless Network Protocol).
  • Page 641: Two-Level Structure Of Is-Is Routing Protocol

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 Integrated IS-IS Configuration II. Link types suitable for IS-IS IS-IS can operate over point-to-point links, such as PPP and HDLC, or broadcast links, such as Ethernet and Token-ring. For NBMA (Non-Broadcast Multi-Access) network, such as ATM, it is necessary to configure sub-interfaces and configure the types of sub-interfaces as P2P or broadcast network.
  • Page 642 3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 Integrated IS-IS Configuration Area 1 Area 2 Routing Domain 1 Routing Domain 2 Routing Domain Boundary Area 3 IS-IS Area End system Intermediate system Subnetwork Path Interdomain Routing Level 1 IS-IS Routing...
  • Page 643: Address Structure Of Is-Is Routing Protocol

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 Integrated IS-IS Configuration Level-1 routers do not know outside routing information, which may make them unable to choose the best route to a destination address outside their local area. In order to address the above problem, IS-IS provides routing leak function, which enables a Level-2 router to advertise the routing information of other Level-1 areas and the Level-2 area it knows to a specified Level-1 area.
  • Page 644: Is-Is Routing Protocol Packets

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 Integrated IS-IS Configuration Extend every part of the IP address 168.10.1.1 to 3 bits. Add 0 to the front of the part that includes less than 3 bits. Divide the extended address 168.010.001.001 into 3 parts, with each part consisting of 4 digits.
  • Page 645: Integrated Is-Is Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 Integrated IS-IS Configuration I. Hello packet Hello packets, also called as IIHs (IS-to-IS Hello PDUs), are used to create and construct neighboring relationship. Among them, the Level-1 LAN IIH apply to level-1 routers on broadcast LAN, Level-2 LAN IIHs apply to level-2 routers on broadcast LAN and Point-to-Point IIHs apply to non-broadcast networks.
  • Page 646: Enabling Is-Is

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 Integrated IS-IS Configuration Configure Router Type Set to Generate the Default Route Configure IS-IS Authentication Password Configure Route Aggregation Configure Overload Flag Bit Configure to Ignore the LSP Checksum Errors Configure to Log the Peer Changes...
  • Page 647: Enabling Is-Is On The Specified Interface

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 Integrated IS-IS Configuration Table 5-2 Configure NET Operation Command Set NET network-entity net Delete NET undo network-entity net The format of parameter net is X...XXXXXXXXXXXX.XX, among which the first "X…X" is the area address, the twelve Xs in the middle is the System ID of the router. The last XX should be 00.
  • Page 648: Configuring Metrics Notation Of Is-Is Packets

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 Integrated IS-IS Configuration You are recommended to configure the isis small-hello command on the interfaces with an MTU greater than 1500 bytes, such as tunnel and GE interfaces. 5.2.5 Configuring Metrics Notation of IS-IS Packets IS-IS routing protocol has two notations for link metrics: Narrow mode, in which the metrics ranges from 1 to 63.
  • Page 649 3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 Integrated IS-IS Configuration I. Configuring the Hello packet broadcast interval IS-IS sends hello packets on an interface periodically. Routers maintain their neighboring relationship through the sending/receiving of Hello packets. The transmission interval of hello packets can be changed through configuration.
  • Page 650 3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 Integrated IS-IS Configuration Table 5-9 Configure the LSP packet transmission interval Operation Command Set LSP packet transmission interval on isis timer lsp time the interface, measured in milliseconds. Restore default packet...
  • Page 651: Configuring The Priority Of A Router

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 Integrated IS-IS Configuration By default, the number of Hello messages is 3. If neither Level-1 nor Level-2 is configured in the command, the configuration takes effect on Hello messages of both Level-1 and Level-2.
  • Page 652: Configuring Interface Authentication Password

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 Integrated IS-IS Configuration so as to save the bandwidth. However Level-1 and Level-2 use the same kind of Hello packet over the p2p link, and therefore such setting is unnecessary in this case.
  • Page 653: Configuring Router Type

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 Integrated IS-IS Configuration By default, the LSP is flooded normally from the interface. When configured with the mesh-blocked parameter, it will not flood the LSP to other interfaces. Thus the IS-IS configuration on the interface are done. The following sections discuss how to configure other parameters of IS-IS.
  • Page 654: Configuring Is-Is Authentication Password

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 Integrated IS-IS Configuration 5.2.14 Configuring IS-IS Authentication Password Users can configure the IS-IS area or the IS-IS routing domain with authentication password. If area authentication is needed, the area authentication password will be encapsulated into the level-1 LSP, CSNP and PSNP packets, in the specified mode.
  • Page 655: Configuring Overload Flag Bit

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 Integrated IS-IS Configuration 5.2.15 Configuring Route Aggregation Route aggregation aggregates multiple routes in the same segment but different subnets into a single route. The segment does not necessarily mean a natural segment, but it can also be a subnet segment or supernet segment.
  • Page 656: Configuring To Log The Peer Changes

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 Integrated IS-IS Configuration Perform the following configuration in IS-IS view. Table 5-21 Configure to ignore the LSP checksum errors Operation Command Configure to ignore the LSP checksum errors ignore-lsp-checksum-error Configure not to ignore the LSP checksum...
  • Page 657: Configuring Lifetime Of Lsp

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 Integrated IS-IS Configuration 5.2.20 Configuring Lifetime of LSP When a router generates the LSP of the system, it will fill in the maximum lifetime of this LSP. When other routers receive this LSP, its life time will be reduced continuously as the time goes.
  • Page 658: Setting Spf To Release Cpu Actively

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 Integrated IS-IS Configuration Table 5-26 Set SPF fragmented calculation Operation Command Set SPF fragmented calculation spf-slice-size seconds Restore the default setting undo spf-slice-size By default, SPF calculation is not fragmented but operates to end at one time. This is also the case when the parameter seconds valued 0.
  • Page 659: Configuring Is-Is To Redistribute Routes From Other Protocols

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 Integrated IS-IS Configuration Table 5-28 Enable/Disable the interface to send IS-IS packets Operation Command Disable the interface to send IS-IS silent-interface silent-interface-type packets silent-interface-number undo silent-interface Enable the interface to send IS-IS...
  • Page 660: Configuring Is-Is Route Filtering

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 Integrated IS-IS Configuration By default, IS-IS does not redistribute routing information from any other protocols. 5.2.26 Configuring IS-IS Route Filtering IS-IS protocol can filter received and redistributed routing information according to the access control list specified by acl-number.
  • Page 661: Configuring The Preference Of Is-Is Protocol

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 Integrated IS-IS Configuration Note: The filter-policy import command only filters the IS-IS routes received from neighbors, and routes that cannot pass the filter are not to be added to the routing table.
  • Page 662: Resetting Is-Is Data Structure

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 Integrated IS-IS Configuration Table 5-33 Configure IS-IS routing leak Operation Command import-route isis level-2 into level-1 Enable IS-IS routing leak [ acl acl-number ] undo import-route isis level-2 into Disable IS-IS routing leak level-1 [ acl acl-number ] By default, a Level-2 router does not advertise its routing information to a Level-1 area.
  • Page 663: Integrated Is-Is Configuration Example

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 Integrated IS-IS Configuration Operation Command display isis lsdb [ l1 ] [ l2 ] [ level-1 ] Display LSDB of IS-IS [ level-2 ] [ local ] [ verbose ] [ LSPID ]...
  • Page 664 3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 Integrated IS-IS Configuration II. Network diagram e2/0/0 e2/0/0 100.0.0.1/24 200.0.0.1/24 Serial1/0/0 Serial2/0/0 100.10.0.1/24 100.10.0.2/24 e3/0/0 e3/0/0 100.20.0.1/24 200.10.0.1/24 e1/0/0 e1/0/0 100.20.0.2/24 200.10.0.2/24 e2/0/0 e2/0/0 100.30.0.1/24 200.20.0.1/24 Figure 5-3 Configure IS-IS III. Configuration procedure...
  • Page 665 3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 Integrated IS-IS Configuration [RTC] isis [RTC-isis] network-entity 86.0001.0000.0000.0007.00 [RTC] interface ethernet 1/0/0 [RTC-Ethernet1/0/0] ip address 200.10.0.2 255.255.255.0 [RTC-Ethernet1/0/0] isis enable [RTC-Ethernet1/0/0] interface ethernet 2/0/0 [RTC-Ethernet2/0/0] ip address 200.20.0.1 255.255.255.0 [RTC-Ethernet2/0/0] isis enable...
  • Page 666: Bgp Overview

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration Chapter 6 BGP Configuration Note: For VPN instances and VPNv4 configuration examples and parameter explanation in BGP, refer to the "Multicast" and "MPLS" modules of this manual. 6.1 BGP Overview Border Gateway Protocol (BGP) is a dynamic inter-AS route discovery protocol.
  • Page 667: Bgp Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration routing policies, allowing implementing flexible filtering and route selection and being extended easily to support new developments of the networks. BGP runs on a special router as an upper-layer protocol. On the initial startup of the...
  • Page 668: Enabling Bgp

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration Compare MED Routing Costs from the Peers in Different ASs Configure BGP community Configure BGP route aggregation Configure the BGP preference Configure BGP route reflector Configure BGP AS confederation attribute...
  • Page 669: Configuring A Bgp Peer/Peer Group

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration 6.2.3 Configuring a BGP Peer/Peer Group The BGP speakers who exchange BGP packets form peer relationship. A BGP peer cannot exist independently from its peer group. In other words, a peer must belong to a specific peer group.
  • Page 670 3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration You cannot specify an AS number for a peer group with members. When the AS number of a peer group is deleted, all peers in the peer group also are deleted.
  • Page 671 3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration Table 6-7 Connect with EBGP peer groups on indirectly connected networks Operation Command Configure to permit connections with EBGP peer groups indirectly peer group-name ebgp-max-hop [ ttl ] connected networks...
  • Page 672 3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration VIII. Configuring to send community attributes to a peer group Table 6-10 Configure to send community attributes to a peer group Operation Command Configure to send community attributes peer...
  • Page 673 3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration Table 6-13 Configure to take the local address as the next-hop in advertising a route Operation Command Configure itself as the next hop in peer group-name next-hop-local advertising a route...
  • Page 674 3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration Operation Command undo peer group-name Restore to use the optimal source peer-address connect-interface interface for route updates interface-type interface-number By default, BGP employs the optimal source interface for route updates.
  • Page 675: Configuring Routing Policy For Bgp Peer/Peer Group

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration XVI. Disabling a BGP peer/peer group to initiate or receive BGP connection Perform the following configuration in BGP view or VPN instance view. Table 6-18 Disable a BGP peer/peer group to initiate or receive BGP connection...
  • Page 676 3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration II. Configuring a route filtering policy based on IP ACL Table 6-20 Configure a route filtering policy based on IP ACL Operation Command Configure to apply an IP ACL-based...
  • Page 677: Removing The Route Synchronization Between Igp And Ibgp

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration IV. Configuring a route filtering policy based on address prefixes Table 6-22 Configure a route filtering policy based on address prefixes Operation Command Configure apply address peer { group-name | peer-address }...
  • Page 678: Configuring The Local Preference Attribute

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration Perform the following configuration in BGP view. Table 6-24 Configure BGP timers Operation Command timer keepalive keepalive-interval hold Configure BGP timers holdtime-interval Restore the default values of the timers...
  • Page 679: Comparing The Med Values Of Routes From Peers In Different Ass

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration Local preference is used to select the route for going out of an AS; while the MED attribute is used to judge the optimal route for entering an AS. When a BGP router...
  • Page 680: Configuring The Bgp Community Attributes

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration 6.2.10 Configuring the BGP Community Attributes The community attributes are optional and transitional. Some of them are accepted all around the world, called as standard community attributes; others are used for special purposes.
  • Page 681: Configuring The Bgp Preference

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration Table 6-29 Configure BGP route aggregation Operation Command Configure the subnet routes automatic summary summary function Cancel the subnet routes automatic undo summary summary function aggregate address mask [ as-set ]...
  • Page 682: Configuring The Bgp Route Reflector

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration 6.2.13 Configuring the BGP Route Reflector To ensure the connectivity between IBGP peers, it is necessary to establish a fully connected network. In some networks, there are large numbers of IBGP peers, and the internal BGP networks become very large, consequently, the cost to establish a fully meshed network is very high.
  • Page 683 3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration function is implemented by the route reflector, and all its client peers and non-client peers are regular BGP peers that have no relation to the reflection function. The client peers are clients just because the route reflector regards them as clients.
  • Page 684 3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration 6.2.14 Configuring BGP AS Confederation Attribute Confederation provides another solution to handle the booming IBGP network connections inside an AS. It divides an AS into multiple sub-ASs, with the IBGP peers inside each sub-AS fully connected and connecting to other sub-ASs in the confederation.
  • Page 685: Configuring Bgp Route Dampening

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration By default, no sub-AS is configured as a member of the confederation. The configured confederation sub-AS number cannot be the same as the AS number of a certain peer who is not configured with peer group AS number.
  • Page 686: Configuring The Interaction Between Bgp And Igp

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration Table 6-36 Configure BGP route dampening Operation Command dampening half-life-reachable half-life-unreachable reuse suppress Configure BGP route dampening ceiling route-policy route-policy-name ] Clear route dampening information and reset dampening [ network-address...
  • Page 687: Configuring The Repeating Times Of Local As Number

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration 6.2.17 Configuring the Repeating Times of Local AS Number This command can be used to configure the repeating times of local AS number. Perform the following configuration in BGP view, VPNv4 view and VPN instance view.
  • Page 688: Configuring Bgp Route Filtering

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration of this group of lists, it means that the routing information has been filtered by this group of as-path lists identified with this list number. III. Defining a route-policy Step 1: For route-policy definition, refer to the "Define the Routing Policy"...
  • Page 689 3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration Operation Command undo filter-policy acl-number Cancel the filtering of the routes to be ip-prefix ip-prefix-name export advertised by BGP [protocol ] By default, BGP does not filter received and advertised routing information.
  • Page 690: Resetting Bgp Connection

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration RouterA RouterB AS 100 RouterC RouterE RouterD AS 200 Figure 6-2 BGP load balancing In the above figure, Router D and Router E are IBGP peers of Router C. When Router...
  • Page 691: Displaying And Debugging Bgp

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration Table 6-43 Reset BGP connection Operation Command Reset connection between reset bgp peer-address [ vpn-instance specified peers vpn-instance-name ] reset vpn-instance Reset all BGP connections vpn-instance-name ] Reset the BGP connections between all...
  • Page 692 3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration Operation Command Display the routing information the display bgp routing peer peer-address specified peer advertised { advertised | received } received Display information about the dampened display bgp routing peer peer-address...
  • Page 693 3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration Operation Command Disable the system to output state changes of the peer for the current undo log-peer-change OSPF process (in BGP view) Enable/disable debugging of all BGP [ undo ] debugging bgp all...
  • Page 694: Bgp Configuration Example

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration Operation Command Display the route flapping information display routing flap-info more detailed than that of the specified network-address mask longer-match address 6.4 BGP Configuration Example 6.4.1 Configuring BGP AS Confederation Attribute...
  • Page 695: Configure The Ethernet Interface

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration III. Configuration procedure Configure Router A: # Configure the Ethernet interface. [Router A] interface Ethernet0/0/0 [Router A-Ethernet0/0/0] ip address 172.68.10.1 255.255.255.0 # Configure BGP. [Router A] bgp 1001 [Router A-bgp] confederation id 100...
  • Page 696: Configuring Bgp Route Reflector

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration [Router C-bgp] confederation peer-as 1001 1002 [Router C-bgp] group confed1001 external [Router C-bgp] peer confed1001 as-number 1001 [Router C-bgp] peer 172.68.10.1 group confed1001 [Router C-bgp] group confed1002 external [Router C-bgp] peer confed1002 as-number 1002 [Router C-bgp] peer 172.68.10.2 group confed1002...
  • Page 697 3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration [Router A-bgp] group ex external [Router A–bgp] peer 192.1.1.2 group ex as-number 200 [Router A–bgp] network 1.0.0.0 255.0.0.0 Configure Router B: [Router B] interface serial 2/0/0 [Router B-Serial2/0/0] ip address 192.1.1.2 255.255.255.0 [Router B-Serial2/0/0] interface serial 1/0/0 [Router B-Serial1/0/0] ip address 193.1.1.2 255.255.255.0...
  • Page 698: Configuring Bgp Load Balancing

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration 6.4.3 Configuring BGP Load Balancing I. Network requirement EBGP connection is created between Router C and Router A and between Router C and Router B. IBGP connection is created between Router C and Router D.
  • Page 699: Troubleshooting Bgp

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration [Router C-bgp] group ex external [Router C-bgp] peer ex as-number 100 [Router C-bgp] peer 1.1.1.1 group ex [Router C-bgp] peer 2.1.1.1 group ex [Router C-bgp] group in internal [Router C-bgp] peer 3.1.1.2 group in...
  • Page 700: Mbgp Overview

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration ip-address command should be used to specify the source IP address sending ping packet. If the Ping operation fails, use display ip routing command to check if there is available route in the routing table to the neighbor.
  • Page 701: Mbgp Applied On The Router

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration 6.6.3 MBGP Applied on the Router The router adopts address family to differentiate different network layer protocols. For values of address family, refer to RFC1700. The router provides various MBGP extended applications including extension of multicast and BGP/MPLS VPN etc.
  • Page 702: Enabling Peer/Peer Group

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration Operation Command Remove the MBGP multicast address undo ipv4-family multicast family configuration Enter MBGP vpn-instance address ipv4-family vpn-instance family view vpn-instance-name Remove MBGP vpn instance address undo ipv4-family vpn-instance...
  • Page 703: Mbgp Configuration Example

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration 6.9 MBGP Configuration Example MBGP is mainly applied to extension of some new services. Its configuration is similar to BGP. The following examples in networking and configuration are the same with those in the "BGP Typical Configuration Examples".
  • Page 704: Configure Ospf

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration # Configure MBGP of Router A. [Router A] bgp 100 [Router A-bgp] group ex external [Router A-bgp] peer 192.1.1.2 group ex as-number 200 [Router A-bgp] ipv4-family multicast [Router A-bgp-af-mul] peer ex enable [Router A-bgp-af-mu] peer 192.1.1.2 group ex...
  • Page 705 3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration [Router C-Serial2/0/0] ip address 193.1.1.1 255.255.255.0 [Router C-Serial2/0/0] quit [Router C] interface serial 1/0/0 [Router C-Serial1/0/0] ip address 194.1.1.1 255.255.255.0 [Router C-Serial1/0/0] quit # Configure OSPF. [RouterC] ospf [RouterC-ospf] area 0 [RouterC-ospf-area-0.0.0.0] network 194.1.1.0 0.0.0.255...
  • Page 706 3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 BGP Configuration [RouterD-bgp-af-mul] peer 194.1.1.1 group in Use the display bgp multicast routing command on Router B to display the BGP routing table. It should be noted that Router B has known the existence of the network 1.0.0.0.
  • Page 707: Chapter 7 Ip Routing Policy Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 7 IP Routing Policy Configuration Chapter 7 IP Routing Policy Configuration 7.1 IP Routing Policy Overview When a router distributes or receives routing information, it possibly needs to implement some policies to filter the routing information, so as to receive or distribute the routing information which can meet the specified condition only.
  • Page 708 3Com Router 3000 Ethernet Family Configuration Guide Chapter 7 IP Routing Policy Configuration II. ACL There are three kinds of ACLs: advanced represents advanced ACL, basic represents basic ACL and interface represents interface-based ACL. Normally, basic ACL and advanced ACL are adopted to filter routing information. If you use the basic ACL, you must specify a range of IP addresses or subnets when defining ACL so as to match the source address of routing information.
  • Page 709: Configuring Ip Routing Policy

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 7 IP Routing Policy Configuration The definition of the community-list has already been implemented in the BGP configuration. For the relevant configurations, please refer to the ip community-list command in the BGP Configuration.
  • Page 710 3Com Router 3000 Ethernet Family Configuration Guide Chapter 7 IP Routing Policy Configuration During the matching, the router checks list items identified by the index-number in the ascending order. If any one list item meets the condition, it means that it has passed the ip-prefix filtering (will not enter the testing of the next list item).
  • Page 711 3Com Router 3000 Ethernet Family Configuration Guide Chapter 7 IP Routing Policy Configuration The filter-policy import command allows a routing protocol to filter routes received from the same routing protocol and to block the routing information filtered out from being added to the routing table. This command, however, does not take effect on the routes redistributed from other routing protocols, because those routing entries have been added to the routing table before a blocking action can be taken.
  • Page 712: Implementing Routing Policy By Route-Policy

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 7 IP Routing Policy Configuration IV. Configuring to filter the distributed routes Define a policy concerning route distribution to filter the routing information not satisfying the conditions while redistributing routes by redistributing an ACL or address ip-prefix list.
  • Page 713 3Com Router 3000 Ethernet Family Configuration Guide Chapter 7 IP Routing Policy Configuration Table 7-5 Define a route-policy Operation Command route-policy route-policy-name { permit Enter routing policy view | deny } node node-number undo route-policy route-policy-name Remove the specified route-policy...
  • Page 714 3Com Router 3000 Ethernet Family Configuration Guide Chapter 7 IP Routing Policy Configuration Operation Command if-match community Match the community attribute of the standard-community-number BGP routing information whole-match extended-community-number } Cancel the matched community attribute undo if-match community of the BGP routing information...
  • Page 715 3Com Router 3000 Ethernet Family Configuration Guide Chapter 7 IP Routing Policy Configuration Table 7-7 Define apply clauses Operation Command Add the specified AS number before the apply as-path as-number-1 as-path series of the BGP routing [ as-number-2 [ as-number-3 ... ] ]...
  • Page 716 3Com Router 3000 Ethernet Family Configuration Guide Chapter 7 IP Routing Policy Configuration By default, no configuration is performed. Please note that if the routing information meets the match conditions specified in the route-policy and also notifies the MED value configured with apply cost-type internal when notifying the IGP route to the EBGP peers, then this value will be regarded as the MED value of the IGP route.
  • Page 717: Displaying And Debugging The Routing Policy

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 7 IP Routing Policy Configuration 7.3 Displaying and Debugging the Routing Policy After the above configuration, execute display command in all views to display the running of the routing policy configuration, and to verify the effect of the configuration.
  • Page 718: Configuring Rip To Filter The Advertised Routing Information

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 7 IP Routing Policy Configuration [Router] ip ip-prefix p2 permit 128.2.0.0 16 # Configure a route-policy. [Router] route-policy r1 permit node 10 [Router-route-policy] if-match ip-prefix p1 [Router-route-policy] apply cost 120 [Router-route-policy] route-policy r1 permit node 20...
  • Page 719: Configuring Ospf To Filter The Received Routing Information

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 7 IP Routing Policy Configuration [Router] ip ip-prefix p1 permit 192.1.1.0 24 [Router] ip ip-prefix p1 permit 192.1.2.0 24 # Configure RIP. [Router] rip [Router-rip] network 192.1.0.0 [Router-rip] network 202.1.1.0 [Router-rip] filter-policy ip-prefix p1 export 7.4.3 Configuring OSPF to Filter the Received Routing Information...
  • Page 720: Configuring The Bgp Cost Attribute To Select Path

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 7 IP Routing Policy Configuration [Router A] ip route-static 20.0.0.1 32 serial 1/0/0 [Router A] ip route-static 30.0.0.1 32 serial 1/0/0 [Router A] ip route-static 40.0.0.1 32 serial 1/0/0 # Enable the OSPF protocol and specify the area ID of the interface.
  • Page 721 3Com Router 3000 Ethernet Family Configuration Guide Chapter 7 IP Routing Policy Configuration II. Network diagram network 2.0.0.0 AS200 Serial1/0/0 Serial2/0/0 194.1.1.2/24 192.1.1.2/24 Serial1/0/0 RouterB Serial2/0/0 194.1.1.1/24 EBGP 2.2.2.2 network IBGP 192.1.1.1/24 1.0.0.0 Serial2/0/0 195.1.1.1/24 EBGP IBGP RouterD RouterA Serial1/0/0 4.4.4.4...
  • Page 722 3Com Router 3000 Ethernet Family Configuration Guide Chapter 7 IP Routing Policy Configuration [Router A-route-policy] quit [Router A] route-policy apply_med_100 permit node 10 [Router A-route-policy] if-match acl 2001 [Router A-route-policy] apply cost 100 [Router A-route-policy] quit # Apply apply_med_50 to egress route update of Router C (193.1.1.2), and apply apply_med_100 to the egress route update of Router B (192.1.1.2).
  • Page 723 3Com Router 3000 Ethernet Family Configuration Guide Chapter 7 IP Routing Policy Configuration [Router C-bgp] group in internal [Router C-bgp] peer 195.1.1.1 group in [Router C-bgp] import-route ospf Configure Router D: [RouterD] interface serial 1/0/0 [RouterD-Serial1/0/0] ip address 194.1.1.1 255.255.255.0 [RouterD-Serial1/0/0] interface serial 2/0/0 [RouterD-Serial2/0/0] ip address 195.1.1.1 255.255.255.0...
  • Page 724: Configuring Routing Policy Based On Next-Hop/As-Path/Origin/ Local-Preference

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 7 IP Routing Policy Configuration [RouterC-bgp] peer 193.1.1.1 route-policy localpref import By then, due to the fact that the local preference attribute value (200) of the route 1.0.0.0 learned by Router C is greater than that of Router B (Router B is not configured with local preference attribute, 100 by default), Router D will also first select the route 1.0.0.0 from Router C.
  • Page 725 3Com Router 3000 Ethernet Family Configuration Guide Chapter 7 IP Routing Policy Configuration # Configure the RIP protocol. [RouterA] rip [RouterA-rip] network 129.102.1.6 [RouterA-rip] quit # Configure BGP internal and external neighbors. [RouterA] bgp 300 [RouterA-bgp] undo synchronization [RouterA-bgp] import-route rip [RouterA-bgp] group ex100 external [RouterA-bgp] peer 172.16.1.2 group ex100 as-number 100...
  • Page 726 3Com Router 3000 Ethernet Family Configuration Guide Chapter 7 IP Routing Policy Configuration [RouterD- serial 0/0/0] interface serial 0/0/1 [RouterD- serial 0/0/1] ip address 120.56.0.1 255.255.255.0 [RouterD- serial 0/0/1] interface ethernet 1/0/0 [RouterD- ethernet 1/0/0] ip address 192.168.1.1 255.255.255.0 [RouterD- ethernet 1/0/0] quit [RouterD] bgp 100 [RouterD-bgp] network 192.168.1.0...
  • Page 727: Configuring Routing Policy Based On The Bgp Community Attribute

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 7 IP Routing Policy Configuration [RouterA-acl-3001] quit [RouterA] quit You will see that the next hop of 192.168.1.0 is changed to 10.0.0.2. If you configure the origin attribute on RouterD: [RouterD] bgp 100...
  • Page 728 3Com Router 3000 Ethernet Family Configuration Guide Chapter 7 IP Routing Policy Configuration II. Network diagram Figure 7-6 Configure routing policy based on the BGP community attribute III. Configuration procedure Configure RTA: [RouterA] bgp 100 # Configure peer ex200, and set to filter received routes by routing policy SETNOEXP.
  • Page 729: Troubleshooting Routing Policy

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 7 IP Routing Policy Configuration [RTB-bgp] peer 16.10.10.1 group ex100 as-number 100 [RTB-bgp] peer ex100 advertise-community # Configure routing policy for distributing routes to ex100. [RTB-bgp] peer ex100 route-policy SET_COMM export [RTB-bgp] quit # Configure as-path-acl to include all routes.
  • Page 730 3Com Router 3000 Ethernet Family Configuration Guide Chapter 7 IP Routing Policy Configuration Troubleshooting: Check the following requirements: The if-match mode of at least one node of the route-policy should be the permit mode. When a route-policy is used for the routing information filtering, if a piece of routing information does not pass the filtering of any node, then it means that the route information does not pass the filtering of the route-policy.
  • Page 731: Chapter 8 Route Capacity Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 8 Route Capacity Configuration Chapter 8 Route Capacity Configuration 8.1 Route Capacity Configuration Overview 8.1.1 Introduction to Route Capacity Configuration In practical networking applications, there are always a large number of routes in the routing table especially OSPF routes and BGP routes.
  • Page 732: Configuring The Lower Limit And The Safety Value Of The Router Memory

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 8 Route Capacity Configuration Enable automatic recovery of the disconnected routing protocol 8.2.1 Configuring the Lower Limit and the Safety Value of the Router Memory When the router memory is equal to or lower than the lower limit, BGP and OSPF will be disconnected.
  • Page 733: Enabling Automatic Recovery Of The Disconnected Routing Protocol

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 8 Route Capacity Configuration Table 8-2 Disable the automatic recovery function Operation Command Disable the automatic recovery function memory auto-establish disable By default, the automatic recovery function is enabled. 8.2.3 Enabling Automatic Recovery of the Disconnected Routing Protocol Perform the following configuration in system view.
  • Page 734: Multicast Protocol

    3Com Router 3000 Ethernet Family Configuration Guide Multicast Protocol 3Com Corporation...
  • Page 735 3Com Router 3000 Ethernet Family Configuration Guide Table of Contents Table of Contents Chapter 1 IP Multicast ........................1-1 1.1 IP Multicast Overview ......................1-1 1.2 Multicast Addresses......................1-2 1.2.1 IP Multicast Addresses .................... 1-2 1.2.2 Ethernet Multicast MAC Addresses................. 1-3 1.3 IP Multicast Protocols ......................
  • Page 736 3Com Router 3000 Ethernet Family Configuration Guide Table of Contents 3.2.13 Deleting IGMP Group from Interface..............3-9 3.3 IGMP Display and Debug ....................3-10 3.4 Typical IGMP Configuration Example................3-10 Chapter 4 PIM Configuration......................4-1 4.1 PIM Overview........................4-1 4.1.1 PIM-DM ........................4-1 4.1.2 PIM-SM ........................
  • Page 737 3Com Router 3000 Ethernet Family Configuration Guide Table of Contents 5.1.1 MSDP Working Principles ..................5-1 5.2 MSDP Configuration ......................5-4 5.2.1 Enabling MSDP ....................... 5-4 5.2.2 Configuring an MSDP Peer..................5-4 5.2.3 Configuring a Static RPF Peer ................5-5 5.2.4 Configuring Originating RP ..................
  • Page 738 3Com Router 3000 Ethernet Family Configuration Guide Table of Contents 6.2.14 Configuring MBGP Route Filtering..............6-12 6.2.15 Resetting BGP Connections ................6-12 6.3 MBGP Display and Debug....................6-12 6.4 Typical MBGP Multicast Extension Configuration Example ..........6-13 Chapter 7 Multicast Static Route Configuration ................ 7-1 7.1 Multicast Static Route Overview ..................
  • Page 739: Ip Multicast Overview

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 IP Multicast Chapter 1 IP Multicast 1.1 IP Multicast Overview Various transmission methods can be used when the information (including data, voice and video) is to be sent to a limited number of users on the network. You can use the...
  • Page 740: Multicast Addresses

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 IP Multicast If there is a router that does not support multicast, a multicast router can encapsulate the multicast packets in unicast IP packets with tunneling and send them to the neighboring multicast router.
  • Page 741: Ethernet Multicast Mac Addresses

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 IP Multicast Class D address range Description Multicast addresses local 239.0.0.0 to 239.255.255.255 management. They are valid only in the specified local range. Reserved multicast addresses that are commonly used are described in the following table.
  • Page 742: Ip Multicast Protocols

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 IP Multicast no longer a specific receiver but a group with unspecific members. Therefore, the multicast MAC address should be used. A multicast MAC address corresponds with a group of multicast IP addresses. As Internet Assigned Number Authority (IANA) provisions, the high 24 bits of a multicast MAC address are 0x01005e and the low 23 bits of a MAC address is the low 23 bits of a multicast IP address.
  • Page 743: Multicast Routing Protocols

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 IP Multicast users on the network quit the multicast group, the related branch will be removed from the multicast tree. 1.3.2 Multicast Routing Protocols Multicast group uses the virtual address. In multicast, it is impossible to transmit packets directly from a source to destination as in unicast .Packets here are sent to a...
  • Page 744: Ip Multicast Packet Forwarding

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 IP Multicast the virtual place for data exchange) to ensure that the receiving stations it connects to can receive the multicast data stream. The path this join message takes through routers to the root (the RP) becomes a branch of the shared tree. Then multicast packets are sent to a RP first and then are forwarded along the shared tree which roots at this RP and stretches with "multicast member"...
  • Page 745: Application Of Multicast

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 IP Multicast RPF (Reverse Path Forwarding) To ensure that multicast packets reach a router along the shortest path, the multicast router must check the receiving interface of multicast packets depending on the unicast routing table or a unicast routing table independently provided for multicast (such as the MBGP multicast routing table).
  • Page 746: Chapter 2 Common Multicast Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 Common Multicast Configuration Chapter 2 Common Multicast Configuration 2.1 Common Multicast Configuration Overview Both multicast group management protocol and multicast routing protocol are involved with common multicast configuration tasks that include enabling multicast, configuring multicast forwarding boundary, displaying multicast routing table and multicast forwarding table, etc.
  • Page 747: Configuring The Minimum Ttl Of Multicast Packets

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 Common Multicast Configuration 2.2.2 Configuring the Minimum TTL of Multicast Packets TTL value for multicast forwarding can be configured on all interfaces that support multicast packet forwarding. When a packet is forwarded from an interface (or a packet is sent by the local device), the minimum TTL value configured on the interface will be checked.
  • Page 748: Configuring The Number Limit Of Multicast Routing Entries

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 Common Multicast Configuration 2.2.4 Configuring the Number Limit of Multicast Routing Entries The number of multicast routing entries can be limited to prevent the router memory from being exhausted. Perform the following configuration in system view.
  • Page 749: Common Multicast Configuration Display And Debug

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 Common Multicast Configuration Table 2-6 Clear routing entry from the multicast kernel routing table Operation Command reset multicast routing-table all reset multicast routing-table group-address Clear routing entry from the [ mask { group-mask | group-mask-length...
  • Page 750 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 Common Multicast Configuration Three types of multicast routing tables are involved in the multicast implementation of V 2.41: individual multicast routing tables of each multicast routing protocol; a multicast kernel routing table integrating the routing information of those individual routing tables;...
  • Page 751: Igmp Overview

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 IGMP Configuration Chapter 3 IGMP Configuration 3.1 IGMP Overview 3.1.1 Introduction to IGMP IGMP (Internet Group Management Protocol) is a protocol in the TCP/IP suite responsible for management of IP multicast members. It is used to establish and maintain multicast membership between IP hosts and their directly connected neighboring routers.
  • Page 752: Introduction To Igmp Proxy

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 IGMP Configuration II. Leave group mechanism In IGMP Version 1, hosts leave the multicast group quietly without informing any multicast router. Only when a query message times out, can the multicast router know that a host has left the group.
  • Page 753: Igmp Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 IGMP Configuration Router A Router A Router A Router A Router A Router A Router A Router A Router A Router A General group/ General group/ General group/ General group/ General group/Group-Specific Query message...
  • Page 754 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 IGMP Configuration Enable IGMP on an interface Configure IGMP proxy Advanced configuration tasks of IGMP include: Configure a router as a group member Control the access to IP multicast group Configure IGMP query interval...
  • Page 755: Configuring Igmp Proxy

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 IGMP Configuration 3.2.3 Configuring IGMP Proxy IGMP proxy can be configured to reduce the configuration and management work of the leaf network without affecting the multicast connection there. After IGMP proxy is configured on the leaf network router, the leaf router acts as a host to the exterior network.
  • Page 756: Controlling The Access To Ip Multicast Group

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 IGMP Configuration By default, a router does not join any multicast group. 3.2.5 Controlling the Access to IP Multicast Group Multicast router determines the group membership of a network by received IGMP response messages.
  • Page 757: Configuring Other Querier Present Interval

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 IGMP Configuration Table 3-6 Configure IGMP version Operation Command Select the IGMP version used by the router igmp version { 1 | 2 } Restore the default configuration undo igmp version By default, Version 2 is used.
  • Page 758: Configuring Igmp Max Query Response Time

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 IGMP Configuration 3.2.9 Configuring IGMP Max Query Response Time The host, when receiving a query message from the router, will configure a timer for each multicast group it belongs to. The value of the timer is selected arbitrarily between 0 and the maximum response time.
  • Page 759: Configuring Last Member Query Interval

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 IGMP Configuration If the number of IGMP groups on an interface has exceeded the specified value during configuration, no IGMP group will be deleted. 3.2.11 Configuring Last Member Query Interval When an IGMP querier receives an IGMP Leave Group message from a host, the last member query interval can be specified for Group-Specific Queries.
  • Page 760: Igmp Display And Debug

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 IGMP Configuration Table 3-12 Delete IGMP Group from Interface Operation Command Delete IGMP Group from reset igmp group { all | interface interface-type Interface interface-number { all | group-address [ group-mask ] } } Note: A deleted group can join in again.
  • Page 761 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 IGMP Configuration II. Network diagram To the multicast source To the multicast source Router A Router A 33.33.33.1 33.33.33.1 33.33.33.1 33.33.33.1 Ethernet0/0/0 Ethernet0/0/0 Ethernet0/0/0 Ethernet0/0/0 Exterior network Exterior network Exterior network...
  • Page 762 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 IGMP Configuration [RouterA-Ethernet0/0/0] igmp enable [RouterA-Ethernet0/0/0] pim dm # Configure interface Ethernet0/0/0 to exclude 33.33.33.2 as one of its PIM neighbors. [RouterA-Ethernet0/0/0] pim neighbor-policy 2001 [RouterA-Ethernet0/0/0] quit [RouterA] acl number 2001 [RouterA-acl-basic-2001] rule deny source 33.33.33.2 0...
  • Page 763: Pim Overview

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 PIM Configuration Chapter 4 PIM Configuration 4.1 PIM Overview 4.1.1 PIM-DM PIM-DM (Protocol Independent Multicast, Dense Mode) is a kind of multicast routing protocol suitable for small-scaled networks where multicast group members are relatively dense.
  • Page 764 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 PIM Configuration packet will be discarded as a redundant one. The concerned unicast routing information can be of any unicast routing protocol such as RIP or OSPF. IV. Assert mechanism As shown in Figure 4-1, Routers A and B are on the same LAN network segment, but have different paths to the multicast source S.
  • Page 765 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 PIM Configuration data flows along the shared tree to the network segments where the multicast group members are. When the data traffic is massive, the SPT (Shortest Path Tree) rooted on the source can be used to reduce network delay.
  • Page 766 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 PIM Configuration send a join message to the node of a higher level toward the source S, which results in switching from the RPT to the SPT. II. Preparation before configuring PIM-SM Configure Candidate-RPs In a PIM-SM network, multiple Candidate-RPs (C-RPs) can be configured.
  • Page 767: Enabling Pim-Dm

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 PIM Configuration 4.2.2 Enabling IGMP on an Interface Refer back to the chapter “IGMP Configuration”. 4.2.3 Enabling PIM-DM If enabled on an interface, PIM-DM sends PIM Hello message periodically and process protocol packets from PIM neighbors.
  • Page 768 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 PIM Configuration Table 4-3 Configuring the interval of Hello messages Operation Command Configure the Hello message interval on pim timer hello seconds an interface Restore the default value of the interval undo pim timer hello By default, Hello messages are sent at an interval of 30 seconds.
  • Page 769 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 PIM Configuration The maximum number of PIM neighbors of an router interface can be configured to avoid exhausting EMS memory of the router or router faults. The maximum number of PIM neighbors of a router however is defined by the system, and is not open for modification.
  • Page 770: Enabling Igmp On The Interface

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 PIM Configuration 4.3.1 Enabling Multicast Refer back to the chapter “Common Multicast Configuration”. 4.3.2 Enabling IGMP on the Interface Refer backup to the chapter “IGMP Configuration”. 4.3.3 Enabling PIM-SM This configuration can be effective only after multicast is enabled.
  • Page 771: Configuring Candidate-Bsr

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 PIM Configuration 4.3.6 Configuring Candidate-BSR In a PIM domain, one or more C-BSRs should be configured. A BSR (Bootstrap Router) is elected automatically among C-BSRs, to take charge of RP information collecting and broadcasting.
  • Page 772: Configuring Candidate-Rp

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 PIM Configuration 4.3.7 Configuring Candidate-RP In PIM-SM, a shared tree roots at an RP, with one or possibly many multicast groups mapped to the RP. Perform the following configuration in PIM view.
  • Page 773: Configuring Rp Register Policy

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 PIM Configuration state, the router will function as the static RP. It is unnecessary to enable PIM on the interface that functions as static RP. Basic ACL can be used to control the range of multicast group served by a static RP.
  • Page 774: Configuring The Threshold To Switch From Rpt To Spt

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 PIM Configuration If the entry (S, G) of a source group is denied or not defined by the ACL, or there is no ACL, the RP will send RegisterStop information to the DR to stop the registration of this multicast data stream.
  • Page 775: Configuring C-Rp Policy

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 PIM Configuration Operation Command acl number acl-number [ basic | Create an ACL ( in system view) advanced | interface ] Define rules for a basic ACL (in basic rule [ rule-id ] { permit | deny } [ source...
  • Page 776: Clearing Pim Neighbors

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 PIM Configuration 4.3.18 Clearing PIM Neighbors Perform the following command in user view. Table 4-18 Clear PIM neighbors Operation Command reset pim neighbor { all | { neighbor-address | Clear PIM neighbors interface interface-type interface-number } * } 4.4 PIM Display and Debugging...
  • Page 777: Pim Configuration Example

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 PIM Configuration Note: The debugging pim sm register-proxy command can only be used to enable the debugging in distributed routers where the interface board substitutes the main control board to send register packets.
  • Page 778 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 PIM Configuration # Enable PIM-DM on the interfaces Ethernet2/0/0, Serial1/0/0 and Serial1/1/0 respectively. [3Com] interface serial 1/0/0 [3Com-Serial1/0/0] pim dm [3Com-Serial1/0/0] ip address 10.16.1.1 24 [3Com-Serial1/0/0] quit [3Com] interface serial 1/1/0 [3Com-Serial1/1/0] pim dm [3Com-Serial1/1/0] ip address 10.16.2.1 24...
  • Page 779 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 PIM Configuration [3Com-ospf-1-area-0.0.0.0] network 10.16.4.0 0.0.0.255 [3Com-ospf-1-area-0.0.0.0] quit [3Com-ospf-1] quit Configure Router C: # Enable multicast. <3Com> system-view [3Com] multicast routing-enable # Enable PIM-DM on the interfaces Serial1/1/0 and Ethernet2/0/0. [3Com] interface serial 1/1/0 [3Com-Serial1/1/0] pim dm [3Com-Serial1/1/0] ip address 10.16.2.2 24...
  • Page 780 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 PIM Configuration Note: In practice, a network may comprise routing devices of different vendors that run different routing protocols. In this example, the routing protocol is OSPF. II. Network diagram Multicast Source...
  • Page 781 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 PIM Configuration # Configure the threshold for a specified multicast group to switch from the shared tree to the shortest path tree to 10 kbps. [RouterA] acl number 2005 [RouterA-acl-basic-2005] rule permit source 224.0.1.1 0.0.0.255...
  • Page 782 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 PIM Configuration <RouterB> system-view [RouterB] multicast routing-enable [RouterB] interface serial 1/0/0 [RouterB-Serial1/0/0] pim sm [RouterB-Serial1/0/0] ip address 10.16.3.2 24 [RouterB-Serial1/0/0] quit [RouterB] interface serial 1/1/0 [RouterB-Serial1/1/0] pim sm [RouterB-Serial1/1/0] ip address 10.16.5.2 24...
  • Page 783: Pim Troubleshooting

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 PIM Configuration On Multicast Source associate multicast programs with multicast addresses, for example, Movie Online with 224.0.1.1. After you configure the boundary on interface Serial4/0/0, Router D can no longer receive BSR information from Router B as being excluded from the IPM domain.
  • Page 784: Msdp Overview

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 MSDP Configuration Chapter 5 MSDP Configuration 5.1 MSDP Overview Multicast Source Discovery Protocol (MSDP) is used to discover multicast source information in other PIM-SM domains. A RP configured with MSDP peer notifies all of its MSDP peers of the active multicast source message in its domain via SA message.
  • Page 785 3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 MSDP Configuration The RP in domain 1 decapsulates the packet and forwards it along the RPT to all the members within the domain. The domain members can choose to take the path along SPT.
  • Page 786 3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 MSDP Configuration If the SA message is from a static RPF peer as from RTD to RTE, it is received and forwarded to other peers. If the SA message is from an MSDP peer in Mesh Group as from RTB to RTD, it is received and forwarded to the peers outside the Mesh Group.
  • Page 787: Msdp Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 MSDP Configuration 5.2 MSDP Configuration Basic configuration tasks of MSDP include: Enable MSDP Configure an MSDP peer Advanced configuration tasks of MSDP include: Configure a static RPF peer Configure Originating RP...
  • Page 788: Configuring A Static Rpf Peer

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 MSDP Configuration Operation Command undo peer peer-address description Remove the description text The command for description is optional. If the local router is also in BGP Peer relation with an MSDP peer, the MSDP peer and the BGP peer should use the same IP address.
  • Page 789: Configuring Originating Rp

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 MSDP Configuration 5.2.4 Configuring Originating RP During the creation of SA message, an MSDP peer can be configured to use the IP address of a specified interface as the RP address in its SA message.
  • Page 790: Requesting The Source Information From An Msdp Peer

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 MSDP Configuration Table 5-6 Configure the maximum number of SAs cached Operation Command Configure the maximum number of SAs peer peer-address sa-cache-maximum cached sa-limit undo peer peer-address Restore the default configuration sa-cache-maximum By default, the maximum number of SAs cached is 2048.
  • Page 791: Controlling The Source Information Forwarded

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 MSDP Configuration Table 5-8 Filter the multicast routing entries imported Operation Command Advertise only the (S, G) entries import-source [ acl acl-number ] permitted by the ACL Remove the above configuration undo import-source By default, only intra-domain sources are advertised in SA messages.
  • Page 792: Controlling The Source Information Received

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 MSDP Configuration Perform the following configuration in MSDP view. Table 5-10 Use MSDP outbound filter to control the source information forwarded Operation Command Filter off all the SA messages to a...
  • Page 793: Configuring An Msdp Mesh Group

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 MSDP Configuration Operation Command Cancel the filtering rule over received undo peer peer-address sa-policy source information import Similar to MSDP outbound filter in function, MSDP inbound filter controls the received SA messages.. By default, the SA messages from all peers are accepted.
  • Page 794: Disabling An Msdp Peer

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 MSDP Configuration 5.2.13 Disabling an MSDP Peer The session between MSDP peers can be cut off and re-activated as needed. If a session between MSDP peers is cut off, the TCP connection will break with no retry effort, but the configuration information will be reserved.
  • Page 795: Tracing The Transmission Path Of An Sa Message Over The Network

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 MSDP Configuration Operation Command display msdp peer-status Display the details of an MSDP peer [ peer-address ] display msdp sa-cache Display the (S,G) state learnt from [ group-address | [ source-address ] ]...
  • Page 796 3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 MSDP Configuration To enable Router D to receive the specified source information from PIM-SM domains 1, 2 and 3, you can configure static RPF peers with the parameter rp-policy. After the configuration finishes, Router RTD will only receive SA messages permitted by the corresponding filtering policy from its static RPF peers.
  • Page 797: Configuring Anycast Rp

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 MSDP Configuration [RTD] ip ip-prefix list-c permit 10.25.0.0 16 [RTD] msdp [RTD-msdp] peer 10.25.1.1 connect-interface ethernet 0/1/2 [RTD-msdp] static-rpf-peer 10.25.1.1 rp-policy list-c 5.4.2 Configuring Anycast RP I. Network requirements To configure Anycast RP in the PIM-SM domain, establish MSDP peer relationship between RTA and RTB;...
  • Page 798 3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 MSDP Configuration III. Configuration procedure Configure RTB: # Enable multicast. <RTB> system-view [RTB] multicast routing-enable # Configure the IP address of interface Loopback0. [RTB] interface loopback0 [RTB-LoopBack0] ip address 10.10.1.1 255.255.255.255 [RTB-LoopBack0] quit # Configure the IP address of interface Loopback10 and enable PIM-SM.
  • Page 799 3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 MSDP Configuration # Configure Originating RP. [RTB-msdp] originating-rp loopback0 [RTB-msdp] quit # Configure the candidate RP and BSR. [RTB] pim [RTB-pim] c-rp loopback 10 [RTB-pim] c-bsr loopback 10 30 Configure RTA: # Enable multicast.
  • Page 800: Msdp Integrated Networking

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 MSDP Configuration [RTA-ospf-1] quit # Configure RTB as its MSDP peer. [RTA] msdp [RTA-msdp] peer 10.10.1.1 connect-interface loopback 0 # Configure Originating RP. [RTA-msdp] originating-rp loopback0 [RTA-msdp] quit # Configure the candidate RP and BSR.
  • Page 801 3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 MSDP Configuration II. Network diagram PIM-SM domain 2 PIM-SM domain 2 PIM-SM domain 2 PIM-SM domain 2 e0/0/0:20.1.1.1 e0/0/0:20.1.1.1 e0/0/0:20.1.1.1 e0/0/0:20.1.1.1 Serial1/0/0 Serial1/0/0 Serial1/0/0 Serial1/0/0 Loopback0 Loopback0 10.28.1.1 10.28.1.1 PIM-SM domain 1...
  • Page 802 3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 MSDP Configuration [RTA] interface loopback10 [RTA-LoopBack10] ip address 10.1.1.1 255.255.255.255 [RTA-LoopBack10] pim sm [RTA-LoopBack10] quit # Configure the IP address of interface Ethernet0/0/0 and enable PIM-SM. [RTA] interface ethernet 0/0/0 [RTA-Ethernet0/0/0] ip address 10.25.2.3 255.255.255.0...
  • Page 803 3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 MSDP Configuration [RTA-bgp] peer rtf next-hop-local [RTA-bgp] ipv4-family multicast [RTA-bgp-af-mul] peer rtf enable [RTA-bgp-af-mul] peer rtf next-hop-local [RTA-bgp-af-mul] quit # Configure the EBGP peer RTG. [RTA-bgp] group rtg external [RTA-bgp] peer 10.28.1.1 group rtg as-number 200...
  • Page 804 3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 MSDP Configuration [RTE] interface loopback10 [RTE-LoopBack10] ip address 10.1.1.1 255.255.255.255 [RTE-LoopBack10] pim sm [RTE-LoopBack10] quit # Configure the IP address of interface Ethernet 0/0/0 and enable PIM-SM. [RTE] interface ethernet 0/0/0 [RTE-Ethernet0/0/0] ip address 10.26.2.3 255.255.255.0...
  • Page 805 3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 MSDP Configuration [RTE-bgp] peer rtf next-hop-local [RTE-bgp] ipv4-family multicast [RTE-bgp-af-mul] peer 10.26.1.2 group rtf [RTE-bgp-af-mul] peer rtf enable [RTE-bgp-af-mul] peer rtf next-hop-local [RTE-bgp-af-mul] quit [RTE-bgp] quit # Configure MSDP peer, Mess Group and Originating RP.
  • Page 806 3Com Router 3000 Ethernet Family Configuration Guide Chapter 5 MSDP Configuration # Assign an IP address to interface serial 1/0/0 and enable PIM-SM on it. [RTA] interface serial 1/0/0 [RTA-Serial1/0/0] ip address 10.25.3.2 255.255.255.0 [RTA-Serial1/0/0] pim sm [RTA-Serial1/0/0] quit # Assign an IP address to interface ethernet0/0/0 and enable PIM-SM and IGMP on it.
  • Page 807: Mbgp Multicast Extension

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 MBGP Multicast Extension Configuration Chapter 6 MBGP Multicast Extension Configuration 6.1 MBGP Multicast Extension 6.1.1 MBGP Multicast Extension Overview At present, the most widely used inter-domain unicast routing protocol is BGP-4.
  • Page 808: Mbgp Operating Mode And Message Type

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 MBGP Multicast Extension Configuration (Network Layer Reachability Information), with 1 for the unicast mode of NLRI, and 2 for the multicast mode of NLRI. I. MP_REACH_NLRI attribute MP_REACH_NLRI is an optional non-transitive attribute, and can be used to: Send the routing information to a new protocol.
  • Page 809: Mbgp Multicast Extension Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 MBGP Multicast Extension Configuration information among peers. It consists of three parts at the most: MP_UNREACH_NLRI, Path Attributes and MP_REACH_NLRI. 6.2 MBGP Multicast Extension Configuration Basic configuration tasks of MBGP multicast extension include:...
  • Page 810: Specifying Network Route To Be Advertised By Mbgp Multicast Extension

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 MBGP Multicast Extension Configuration Table 6-1 Enable the MBGP Multicast Extension Protocol Operation Command Enter the MBGP multicast address ipv4-family multicast family view Remove the MBGP multicast address undo ipv4-family multicast family view By default, the system does not run the MBGP multicast extension protocol.
  • Page 811: Configuring Local Preference

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 MBGP Multicast Extension Configuration For the configuration, refer to the “BGP Configuration” section in “Routing Protocol” of this manual. 6.2.5 Configuring Local Preference Different local preference can be configured as a reference of the MBGP route selection.
  • Page 812 3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 MBGP Multicast Extension Configuration I. Creating a peer group with members By default, an IBGP peer will be added to a default peer group without configuration. Such default group is invisible. The configuration of the route updating policy on any IBGP peer is valid for the other group members only.
  • Page 813 3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 MBGP Multicast Extension Configuration By default, no community attribute is advertised to any peer/peer group. IV. Configuring a peer/peer group as an MBGP route reflector client Table 6-6 Configure a peer/peer group as an MBGP route reflector client...
  • Page 814: Configuring Mbgp To Filter Routes

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 MBGP Multicast Extension Configuration Perform the following configuration in IPv4 multicast subaddress family view. Table 6-9 Configure the times that the local AS number can be received Operation Command Configure the times that the local AS peer { group-name | peer-address } number can be received.
  • Page 815 3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 MBGP Multicast Extension Configuration II. Configuring IP-ACL-based route filtering policy for a peer/peer group Table 6-11 Configure the IP-ACL-based route filtering policy for a peer/peer group Operation Command Configure MBGP to filter the routes...
  • Page 816: Configuring Mbgp Route Aggregation

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 MBGP Multicast Extension Configuration Operation Command undo peer group-name Disable MBGP to filter the received peer-address } ip-prefix prefixname routes. import Configure MBGP to filter the routes peer group-name filter-policy advertised to the specified peer or peer acl-number export group based on the specified ACL.
  • Page 817: Configuring Mbgp Community Attributes

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 MBGP Multicast Extension Configuration clients exchange path selection information with a reflector in peer relationship; the reflector transmits (reflects) information to the clients in turn. For the details of principles and configuration, refer to the “BGP Configuration” section in “Routing Protocol”...
  • Page 818: Configuring Mbgp Route Filtering

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 MBGP Multicast Extension Configuration configuration, refer to the “IP Routing Policy” section in “Routing Protocol” of this manual. 6.2.14 Configuring MBGP Route Filtering The route filtering configuration of MBGP is the same as that of unicast BGP.
  • Page 819: Typical Mbgp Multicast Extension Configuration Example

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 MBGP Multicast Extension Configuration Operation Command display multicast group Display the peer group information [ group-name ] display multicast peer Display information on MBGP peers. [ ip-address | verbose] Enable debugging...
  • Page 820 3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 MBGP Multicast Extension Configuration [RouterA] interface serial 1/1/0 [RouterA-Serial1/1/0] ip address 193.1.1.1 255.255.255.0 [RouterA-Serial1/1/0] quit # Enable MBGP. [RouterA] bgp 100 [RouterA-bgp] ipv4-family multicast # Enable MBGP in a specified network segment.
  • Page 821 3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 MBGP Multicast Extension Configuration [RouterA-bgp] ipv4-family multicast [RouterA-bgp-af-mul] peer a2 route-policy set_med_50 export [RouterA-bgp-af-mul] peer a1 route-policy set_med_100 export Configure Router B: <RouterB> system-view [RouterB] interface serial 1/0/0 [RouterB-Serial1/0/0] ip address 192.1.1.2 255.255.255.0...
  • Page 822 3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 MBGP Multicast Extension Configuration [RouterC-ospf-1] quit [RouterC] bgp 200 [RouterC-bgp] undo synchronization [RouterC-bgp] group c1 external [RouterC-bgp] peer 193.1.1.1 group c1 as-number 100 [RouterC-bgp] group c2 internal [RouterC-bgp] peer 194.1.1.2 group c2 as-number 200 [RouterC-bgp] peer 195.1.1.1 group c2 as-number 200...
  • Page 823 3Com Router 3000 Ethernet Family Configuration Guide Chapter 6 MBGP Multicast Extension Configuration [RouterD-Serial1/1/0] quit [RouterD] ospf [RouterD-ospf-1] area 0 [RouterD-ospf-1-area-0.0.0.0] network 194.1.1.0 0.0.0.255 [RouterD-ospf-1-area-0.0.0.0] network 195.1.1.0 0.0.0.255 [RouterD-ospf-1-area-0.0.0.0] network 4.0.0.0 0.0.0.255 [RouterD-ospf-1-area-0.0.0.0] quit [RouterD-ospf-1] quit [RouterD] bgp 200 [RouterD-bgp] undo synchronization [RouterD-bgp] group d1 internal [RouterD-bgp] peer 194.1.1.2 group d1...
  • Page 824: Chapter 7 Multicast Static Route Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 7 Multicast Static Route Configuration Chapter 7 Multicast Static Route Configuration 7.1 Multicast Static Route Overview A multicast network topology may be different from a unicast topology. Some routers in the network may only support unicast rather than multicast. Multicast static routes are helpful when you need to separate paths between unicast datagram and multicast datagram.
  • Page 825: Configuring A Multicast Static Route

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 7 Multicast Static Route Configuration 7.2.1 Configuring a Multicast Static Route Perform the following configuration in system view. Table 7-1 Configure a multicast static route Operation Command ip rpf-route-static source { mask |...
  • Page 826: Multicast Static Route Display And Debug

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 7 Multicast Static Route Configuration Table 7-2 Configure the multicast RPF route selecting policy Operation Command Apply the longest-match rule ip rpf-longest-match Restore the default configuration undo ip rpf-longest-match By default, routes are selected according to the preference-preferred rule.
  • Page 827 3Com Router 3000 Ethernet Family Configuration Guide Chapter 7 Multicast Static Route Configuration III. Configuration procedure Configure RT1: <RT1> system-view [RT1] ip rpf-route-static 0.0.0.0 0.0.0.0 ospf null0 preference 255 [RT1] ip rpf-route-static 0.0.0.0 0.0.0.0 tunnel1 The first command allows the matching-rule-compliant multicast source information in the domain to pass the RPF check when it reaches RT1 through RT2.
  • Page 828 3Com Router 3000 Ethernet Family Configuration Guide MPLS 3Com Corporation...
  • Page 829 3Com Router 3000 Ethernet Family Configuration Guide Table of Contents Table of Contents Chapter 1 MPLS Architecture....................... 1-1 1.1 MPLS Overview ......................... 1-1 1.2 MPLS Basic Concepts ....................... 1-1 1.2.1 FEC ......................... 1-1 1.2.2 Label........................1-1 1.2.3 LDP ......................... 1-3 1.3 MPLS Architecture ......................
  • Page 830 3Com Router 3000 Ethernet Family Configuration Guide Table of Contents 2.3.6 Configuring LDP Authentication Mode..............2-10 2.3.7 Configuring the Type of Label to Be Distributed to the Penultimate Hop ..... 2-10 2.4 MPLS Display and Debug....................2-10 2.4.1 Displaying and Debugging MPLS ................. 2-11 2.4.2 Displaying and Debugging LDP ................
  • Page 831 3Com Router 3000 Ethernet Family Configuration Guide Table of Contents 4.2 Configuration of MPLS L2VPN in CCC Mode ..............4-5 4.2.1 Configuring the Interface Connecting CE ............... 4-6 4.2.2 Enabling MPLS......................4-7 4.2.3 Configuring Static LSP .................... 4-8 4.2.4 Enabling MPLS L2VPN ................... 4-8 4.2.5 Creating CCC Connection..................
  • Page 832: Mpls Overview

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 MPLS Architecture Chapter 1 MPLS Architecture 1.1 MPLS Overview MPLS (Multiprotocol Label Switching) encapsulates packets with labels of short and fixed length. MPLS obtains service from various link layers (such as PPP, ATM, Frame Relay, and Ethernet) and provides connection-oriented service for network layer.
  • Page 833 3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 MPLS Architecture Label is located between the link layer header and the network layer packet, with the length of 4 bytes. A label contains four fields: Label: label value, 20bits, used as the pointer for forwarding.
  • Page 834 3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 MPLS Architecture For a specific FEC, if LSR originates label assignment and distribution even without receiving label request messages from upstream, it is in DU mode. For a specific FEC, if LSR begins label assignment and distribution only after receiving label request messages from upstream, it is in DoD mode.
  • Page 835: Mpls Architecture

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 MPLS Architecture 1.3 MPLS Architecture 1.3.1 MPLS Network Structure The basic composing unit of MPLS network is LSR (Label Switching Router). It runs MPLS control protocol and L3 routing protocol, exchanges routing messages with other...
  • Page 836: Lsp Tunnel And Hierarchy

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 MPLS Architecture 1.3.3 LSP Tunnel and Hierarchy I. LSP tunnel MPLS supports LSP tunnel technology. On an LSP path, LSR Ru and LSR Rd are upstream and downstream for each other. However, the path between LSR Ru and LSR Rd may not be part of the path provided by routing protocol.
  • Page 837: Ldp Overview

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 MPLS Architecture On the LSR along the LSP, the mapping table of the import/export labels has been established (the element of this table is referred to as Next Hop Label Forwarding Entry (NHLFE)).
  • Page 838: Ldp Working Process

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 MPLS Architecture II. LDP Session An LDP session is to exchange label and release messages between LSRs. There are two types of LDP session: Local LDP Session: an LDP session between two directly connecting LSRs.
  • Page 839: Ldp Basic Operation

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 MPLS Architecture On an LSP, along the data transmission direction, neighboring LSRs are respectively called as upstream LSR and downstream LSR. On LSP1 shown in Figure 1-5, LSR B is the upstream LSR of LSR C.
  • Page 840 3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 MPLS Architecture Basic discovery mechanism The basic discovery mechanism is to discover the local LDP peer, that is, to establish a local LDP session between directly connecting LSRs. In this case, the LSR periodically sends a Hello message of the LDP link to a specific port, carrying the LDP identifier of the label space where the specific port belongs as well as other relevant information.
  • Page 841: Ldp Loop Detection

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 MPLS Architecture sends a label mapping message to the upstream LSR with the allocated label information included; The upstream LSR compares the received label mapping message with its label database, allocates the matched label to the FEC, adds the map to its label forwarding table, and then sends the label mapping message to its upstream LSR;...
  • Page 842: Mpls And Routing Protocols

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 MPLS Architecture information is the exact designation of all the LSRs along the path; and loose explicit routing where only some of the LSRs along the path are specified. 1.5 MPLS and Other Protocols 1.5.1 MPLS and Routing Protocols...
  • Page 843: Mpls-Based Qos

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 MPLS Architecture different branches of private network by using LSP, forming a united network. MPLS-based VPN also supports the interconnection between different VPNs. Branch 3 of private network Backbone Branch 1 of...
  • Page 844 3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 MPLS Architecture MPLS-based Diff-serv is fulfilled by integrating DS assignment into the label distribution process of MPLS. Diff-serv defines the same processing method, which includes queue selection, queuing, and the drop operation, for each service category. The combination of these processing operations is called Per Hop Behavior (PHB).
  • Page 845 3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 MPLS Architecture Impose the incoming bandwidth constraint on the MPLS edge router to classify the incoming traffic. Adopt CAR on the edge devices so that they can share the work of bandwidth management.
  • Page 846: Chapter 2 Mpls Basic Capability Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 MPLS Basic Capability Configuration Chapter 2 MPLS Basic Capability Configuration 2.1 Introduction to MPLS Basic Capability The following MPLS basic capabilities are available: Basic MPLS forwarding Each router interface supports the basic MPLS forwarding function, including label packet forwarding and TTL processing.
  • Page 847: Defining Mpls Lsr Id

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 MPLS Basic Capability Configuration Enable LDP on interface Control LDP loop detection Set LDP session keepalive parameters on interface 2.2.1 Defining MPLS LSR ID Before configuring any other MPLS command, it is necessary to configure LSR ID firstly.
  • Page 848 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 MPLS Basic Capability Configuration Table 2-3 Configure a topology-driven LSP setup policy Operation Command Configure a topology-driven LSP setup lsp-trigger { all | ip-prefix ip-prefix } policy Disable the filtering condition specified by...
  • Page 849 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 MPLS Basic Capability Configuration forwards a labeled packet, it decrements the TTL value in the top label by one. When the LSR pops the stack, it copies the TTL value in the top label back to the IP packet or the lower label.
  • Page 850: Ldp Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 MPLS Basic Capability Configuration 2.2.6 Configuring MPLS to Return ICMP Responses by IP routing In an MPLS VPN network, a P router cannot route the IP packets encapsulated in MPLS. When the TTL value of an MPLS packet expires, the ICMP response continues to travel the LSP until reaching the egress, where it is forwarded by IP routing.
  • Page 851: Enabling/Disabling Ldp On Interface

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 MPLS Basic Capability Configuration Table 2-7 Enable/disable LDP view Operation Command Enable LDP mpls ldp Disable LDP undo mpls ldp By default, LDP is disabled. 2.3.2 Enabling/Disabling LDP on Interface To make the interface be of MPLS function, it is necessary to enable the LDP of interface in the interface view.
  • Page 852: Configuring Session Parameters

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 MPLS Basic Capability Configuration II. Configuring a remote-peer address You can specify the address of any LDP-enabled interface on the remote-peer or the address of the loopback interface on the LSR that has advertised the route as the address of the remote-peer.
  • Page 853: Ldp Loop Detection Control

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 MPLS Basic Capability Configuration Note: For ATM, interface configuration commands are only available for the ATM subinterfaces in point-to-point mode. For those link layer protocols that do not support broadcast packets, for example, frame relay and ATM, you must configure broadcast attributes, for transmission of broadcast and multi-cast packets.
  • Page 854 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 MPLS Basic Capability Configuration ID is recorded in the path information. If not, the router just adds its ID. If yes, it means loop appears, so LSP setup process terminates. Perform the following configurations in the system view.
  • Page 855: Configuring Ldp Authentication Mode

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 MPLS Basic Capability Configuration The maximum hop count defaults to 32. 2.3.6 Configuring LDP Authentication Mode Perform the following configurations in the interface view or remote-peer view. Table 2-16 Configure LDP authentication mode...
  • Page 856: Displaying And Debugging Mpls

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 MPLS Basic Capability Configuration 2.4.1 Displaying and Debugging MPLS MPLS provides abundant display and debugging commands for monitoring LDP session state, tunnel, all the LSPs and their states, and so on. These commands are the powerful debugging and diagnosing tools.
  • Page 857 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 MPLS Basic Capability Configuration IV. Display LSP Please execute the following commands in any view to display the information related to MPLS LSP. Table 2-21 Display MPLS LSP Operation Command Display the information related to MPLS...
  • Page 858: Displaying And Debugging Ldp

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 MPLS Basic Capability Configuration 2.4.2 Displaying and Debugging LDP I. LDP display commands V 2.41 provides abundant MPLS monitoring commands for monitoring states of LSRs, LDP sessions, interfaces and peers. These commands are the powerful debugging and diagnosing tools.
  • Page 859: Mpls Configuration Example

    2.5 MPLS Configuration Example I. Network requirements As shown in Figure 2-1, there is a network consisting of four 3Com router routers, among which Router B and Router C are connected via SDH, and Router B, Router A and Router D are interconnected via Ethernet.
  • Page 860 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 MPLS Basic Capability Configuration [3Com-ospf] area 0 [3Com-ospf-area-0.0.0.0] network 168.1.0.0 0.0.255.255 Configuration on Router B: # Configure LSR ID and enable MPLS and LDP. [3Com] mpls lsr-id 172.17.1.1 [3Com] mpls [3Com] mpls ldp # Configure IP address and enable LDP for Ethernet interface 1/0/0.
  • Page 861: Troubleshooting Mpls Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 MPLS Basic Capability Configuration [3Com] mpls lsr-id 172.16.1.2 [3Com] mpls [3Com] mpls ldp # Configure IP address and enable LDP on SERIAL interface 1/0/0. [3Com] interface serial 1/0/0 [3Com-Serial1/0/0] ip address 100.10.1.1 255.255.255.0...
  • Page 862 3Com Router 3000 Ethernet Family Configuration Guide Chapter 2 MPLS Basic Capability Configuration Cause 2: Local machine cannot get the route to peer LSR ID, so TCP connection cannot be set up. Measure: The default address for session transfer is MPLS LSR ID. The local machine should issue the LSR ID route (often the loopback address) and learn the peer LSR ID route.
  • Page 863 Address separation. Allow the address overlapping of the different VPN or between VPN and public network. Supporting MP-BGP advertising VPN routing message, establishing BGP/MPLS VPN. Forwarding VPN data stream over MPLS LSP. 3Com router provides MPLS VPN performance monitoring and fault detecting tools. 3Com Corporation...
  • Page 864: Bgp/Mpls Vpn Model

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration 3.1.1 BGP/MPLS VPN Model I. BGP/MPLS VPN model site 1 site 1 VPN1 VPN1 Backbone network of Backbone network of site 1 site 1 the service provider the service provider...
  • Page 865 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration information (RD, route filtering policy, member interface list, etc). It includes the VPN membership and routing rules of this site. PE is responsible for updating and maintaining the correlation between vpn-instance and VPN.
  • Page 866: Bgp/Mpls Vpn Implementation

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration received the route with this attribute, it will add the route into the corresponding routing table. For PE routers, there are two sets of VPN Target attributes: one of them, referred to as Export Targets, is added to the route received from a directly connected Site in advertising local routes to remote PE routers.
  • Page 867 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration Routing information exchange between ingress PE and egress PE The ingress PE router uses MP-BGP to advertise routing information learned from CE to the egress PE router (with MPLS label) and learn the CE routing information learned at the egress PE router.
  • Page 868 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration Site 1 sends an IPv4 packet with destination address 1.1.1.2 to CE1. CE1 looks routing information up in the IP routing table and sends the packet to PE1.
  • Page 869 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration In MPLS L3VPN area, Huawei Technologies proposed the solution of hierarchy of VPN (HoVPN). In HoVPN, functions of PE are distributed to multiple devices. Acting as different roles in a hierarchical architecture, the devices fulfill functions of a centralized PE together.
  • Page 870 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration The UPE implements the user access. It maintains the routes of VPN Site directly connected with it. It does not maintain the routes of other remote Sites in VPN, or only maintains their summary routes.
  • Page 871: Introduction To Multi-Role Host Features

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration Figure 3-5 Embedment of HoVPN As shown in Figure 3-5, the PE in the middle is called Middle-level PE (MPE) in a three-level HoPE. MP-BGP runs between SPE, MPE, and UPE.
  • Page 872: Ospf Vpn Extension

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration for the PE-CE downstream traffic, this function is implemented via static routing. The static routing in a multi-role host application is different from the regular static routes in...
  • Page 873 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration VPN1 VPN1 VPN1 VPN1 Site1 Site1 Site2 Site2 OSPF Area0 OSPF Area0 OSPF Area1 OSPF Area1 CE11 CE11 CE21 CE21 Area 1 Area 1 Area 0 Area 0...
  • Page 874 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration if the contained tag value is the same as that configured on PE during the route calculation of OSPF process. II. Multi-VPN-Instance CE If supporting OSPF multi-instance, one router can run multiple OSPF procedures, which can be bound to different VPN instances.
  • Page 875: Multi-As Bgp/Mpls Vpn

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration In some cases, the routes across the MPLS VPN backbone network need to be firstly selected. You can establish a sham link between PEs to make the routes become the Intra-Area Routes.
  • Page 876 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration Ideally, each multi-AS VPN has a pair of subinterfaces for exchanging VPN routing information. CE-1 CE-1 CE-3 CE-3 VPN-1 VPN-1 VPN-1 VPN-1 BGP/MPLS backbone BGP/MPLS backbone BGP/MPLS backbone...
  • Page 877 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration CE-1 CE-1 CE-3 CE-3 VPN-1 VPN-1 VPN-1 VPN-1 BGP/MPLS backbone BGP/MPLS backbone BGP/MPLS backbone BGP/MPLS backbone PE-1 PE-1 PE-3 PE-3 AS 100 AS 100 AS 200 AS 200...
  • Page 878 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration PEs in different ASs establish Multihop EBGP connections with each other and exchange VPN-IPv4 routes. CE-1 CE-1 CE-3 CE-3 VPN-1 VPN-1 VPN-1 VPN-1 BGP/MPLS backbone BGP/MPLS backbone BGP/MPLS backbone...
  • Page 879: Bgp/Mpls Vpn Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration 3.2 BGP/MPLS VPN Configuration Note: If you have configured both L2VPN and L3VPN services, L3VPN service must comply with L2VPN service. If you remove L2VPN service, you can go on using L3VPN service.
  • Page 880: Configuring Pe Router

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration I. Configuring static route If you select static route mode for CE-PE route switching, you should then configure a private static route pointing to PE on CE. Perform the following configurations in system view.
  • Page 881 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration The VPN instance is associated with the site. The VPN membership and routing rules of a site is configured in the corresponding VPN instance. This command is used to establish a new vpn-instance or enter the existing vpn-instance view.
  • Page 882 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration VPN-target attribute, a BGP extension community attribute, controls advertisement of VPN routing information. It works on such principle: When BGP redistributes a VPN route learned at CE, it associates a VPN-target extension community attribute list with the route.
  • Page 883 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration Operation Command Remove maximum route number undo routing-table limit limitation Note: Changing maximum route count for VPN-instance will not affect the existing routing table. To make the new configuration take effect immediately, you should rebuild the corresponding routing protocol or perform shutdown/undo shutdown operation on the corresponding interface.
  • Page 884 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration You can configure a static route pointing to CE on PE for it to learn VPN routing information from CE. Perform the following configuration in the system view.
  • Page 885 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration Table 3-10 Configure peer group Operation Command Configure a peer group group group-name [ internal | external ] Delete the specified peer group undo group group-name By default, the peer group is configured as internal. When BGP mode is used for PE-CE route switching, they often belong to different ASs, so you should configure EBGP peer as external.
  • Page 886 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration Perform the following configuration in the VPN-instance view of MBGP. Table 3-13 Configure BGP asynchronous with IGP Operation Command Configure BGP asynchronous with IGP undo synchronization By default, asynchronous mode is selected.
  • Page 887 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration Note that BGP adjacency is established through loopback interface and the sub-net mask must be 32 bits. Step 3: Permit BGP session over any operable TCP interface. In general, BGP uses the best local address in TCP connection. To keep TCP connection available even when the interface involved fails, you can permit BGP session over any interface through which TCP connection can be set up.
  • Page 888 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration Table 3-17 Configure its address as next hop in route advertisement Operation Command Configure its address as next hop in peer { peer-address | group-name } route advertisement...
  • Page 889 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration By default, the procedure index is 1. Caution: An OSPF procedure can only belong to one VPN instance, while one VPN instance may contain multiple OSPF procedures. By default, an OSPF procedure belongs to public network.
  • Page 890 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration Caution: The configured value will not take effect unit the command reset ospf is executed. Table 3-21 Configure tag for redistributed VPN route Operation Command Configure tag for an redistributed VPN route...
  • Page 891 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration Operation Command Remove the sham-link undo sham-link source-addr destination-addr By default, the value of cost is 1, and the values of dead, hello, retransmit and trans-delay are respectively 40, 10, 5 and 1 second.
  • Page 892 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration Table 3-25 Configure BGP neighbor as the UPE of BGP/MPLS VPN Operation Command Configure BGP neighbor as the peer peer-address upe UPE of BGP/MPLS VPN Disable the configuration undo peer peer-address upe VII.
  • Page 893 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration Table 3-27 Configure static route Operation Command route-static vpn-instance vpn-instance-name1 vpn-instance-name2 … ip-address { mask | mask-length } Configure a private interface-type interface-number vpn-instance static route vpn-nexthop-name vpn-nexthop-address ] } [ preference...
  • Page 894 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration Perform the following configuration in route-policy view. Table 3-29 Configure label processing on public network routes Operation Command Assign MPLS labels to the public network routes apply mpls-label...
  • Page 895: Configuring P Router

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration Table 3-31 Configure invariable next hop when advertising routes Operation Command Configure invariable next hop when peer group-name next-hop-invariable advertising routes to EBGP peers undo peer group-name Restore the default configuration next-hop-invariable By default, the next hop changes to BGP Speaker when sending routes to EBGP peers.
  • Page 896 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration Table 3-33 Display the IP routing table associated with vpn-instance Operation Command display ip routing-table vpn-instance Display the IP routing table associated vpn-instance-name statistics with vpn-instance [ ip-address ] [ verbose ] ] III.
  • Page 897: Bgp/Mpls Vpn Configuration Example

    Subscribers in different VPNs cannot access each other. The VPN-target attribute for VPN-A is 111:1 and that for VPN-B is 222:2. 3Com routers serve as PE, 3Com routers running MPLS serve as P, and CEs are common middle or lower end routers.
  • Page 898 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration II. Network diagram AS 65410 AS 65410 AS 65430 AS 65430 Ethernet0 Ethernet0 Ethernet0 Ethernet0 168.1.1.1/16 168.1.1.1/16 168.3.1.1/16 168.3.1.1/16 AS 100 AS 100 VPN-A VPN-A VPN-A VPN-A RD(100:1)
  • Page 899 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration # Configure vpn-instance for VPN-A on PE1, as well as other associated attributes to control advertisement of VPN routing information. [PE1] ip vpn-instance vpna [PE1-vpn-vpna] route-distinguisher 100:1 [PE1-vpn- vpna] vpn-target 111:1 both...
  • Page 900 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration [PE1-ospf-area-0.0.0.0] network 172.1.0.0 0.0.255.255 [PE1-ospf-area-0.0.0.0] network 202.100.1.1 0.0.0.0 [PE1-ospf-area-0.0.0.0] quit [PE1-ospf] import-route direct [PE1-ospf] quit # Set up MP-IBGP adjacency between PEs, for intra-PE VPN routing information exchange, activate MP-IBGP peer in VPNv4 address family view.
  • Page 901 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration [P-ospf-area-0.0.0.0] network 172.3.1.0 0.0.255.255 [P-ospf-area-0.0.0.0] network 172.4.1.0 0.0.255.255 [P-ospf-area-0.0.0.0] quit [P-ospf] import-route direct Configure PE3 Note: The configuration on PE3 is similar to that on PE1, you should pay more attention to...
  • Page 902: Configuring Gre Tunnel Bgp/Mpls Vpn

    I. Network requirements VPN-A includes CE-1 and CE3; VPN-B includes , CE-2 and , CE-3, and CE-4 3Com routers serve as PE, 3Com routers running MPLS serve as P, and CEs are common middle or lower end routers. II. Network diagram...
  • Page 903 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration ether1/0/1: ethernet1/0/0: CE-3 192.168.1.0/24 192.168.2.0/24 CE-1 ethernet2/0/2 ethenet1/0/0 PE 1 PE 2 L0:2.2.29/32 L0:1.1.1.9/32 L0:4.4.4.9/32 CE-2 AS 100 CE-4 Figure 3-14 GRE tunnel BGP/MPLS VPN network diagram III. Configuration procedure...
  • Page 904 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration [PE1-LoopBack0] ip address 1.1.1.9 255.255.255.255 [PE1-LoopBack0] quit [PE1] interface ethernet 1/0/0 [PE1-Ethernet1/0/0] ip binding vpn-instance vpna [PE1-Ethernet1/0/0] ip address 20.1.1.2 255.255.0.0 [PE1-Ethernet1/0/0] quit [PE1] interface ethernet1/0/1 [PE1-Ethernet1/0/1] ip address 192.168.1.1 255.255.255.0...
  • Page 905: Configuring Extranet

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration [PE1] interface tunnel 1 [PE1-Tunnel1] tunnel-protocol gre [PE1-Tunnel1] source loopback 0 [PE1-Tunnel1] destination 2.2.2.9 [PE1-Tunnel1] mpls [PE1-Tunnel1] mpls ldp enable # Configure static routing. [PE1] ip route-static 2.2.2.9 32 tunnel 1 Note: The configuration of PE2 is similar to PE1, so the details are omitted here.
  • Page 906 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration Note: In the case the configuration is focused on controlling access authority of VPN subscribers at different cities by configuring different VPN-target attributes at different PEs. II. Network diagram...
  • Page 907 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration [PE-A] ip vpn-instance 1 [PE-A-vpn-1] route-distinguisher 100:1 [PE-A-vpn-1] vpn-target 111:1 both [PE-A-vpn-1] quit # Set up EBGP adjacency between PE-A and CE-A, redistribute intra-CE-A VPN routes learned into MBGP VPN-instance address family.
  • Page 908 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration [PE-A-bgp-af-vpn] peer 30.1.1.1 group 30 [PE-A-bgp-af-vpn] quit Configure PE-C. # Create a VPN-instance on PE-C, so that it can transceive VPN routing information of VPN-target 111:1 and 222:2.
  • Page 909 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration [PE-C-bgp] peer 30.1.1.1 group 30 [PE-C-bgp] peer 30.1.1.1 connect-interface loopback 0 [PE-C-bgp] ipv4-family vpnv4 [PE-C-bgp-af-vpn] peer 10 enable [PE-C-bgp-af-vpn] peer 10.1.1.1 group 10 [PE-C-bgp-af-vpn] peer 30 enable [PE-C-bgp-af-vpn] peer 30.1.1.1 group 30 [PE-C-bgp-af-vpn] quit Configure PE-B.
  • Page 910: Configuring Hub&Spoke

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration [PE-B] bgp 100 [PE-B-bgp] group 10 [PE-B-bgp] peer 10.1.1.1 group 10 [PE-B-bgp] peer 10.1.1.1 connect-interface loopback 0 [PE-B-bgp] group 20 [PE-B-bgp] peer 20.1.1.1 group 20 [PE-B-bgp] peer 20.1.1.1 connect-interface loopback 0...
  • Page 911 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration Note: In the case the configuration is focused on two points: Route advertisement can be controlled by VPN-target settings on different PEs. One routing loop is permitted, so that PE can receive route update messages with AS number included from CE.
  • Page 912 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration # Configure two VPN-instances on PE1, add the specified VPN-target attribute to the routes received from PE2 and PE3. [PE1] ip vpn-instance vpn-instance2 [PE1-vpn- vpn-instance2] route-distinguisher 100:2 [PE1-vpn- vpn-instance2] vpn-target 100:1 import-extcommunity...
  • Page 913 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration # Set up MP-IBGP adjacency between PEs to exchange intra-PE VPN routing information, and activate MP-IBGP peer in VPNv4 address family view. [PE1] bgp 100 [PE1-bgp] group 22 [PE1-bgp] peer 22.1.1.1 connect-interface loopback 0...
  • Page 914 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration # Set up MP-IBGP adjacency between PE2 and PE1 to exchange intra-PE VPN routing information, and activate MP-IBGP peer in VPNv4 address family view. [PE2] bgp 100 [PE2] group 11 [PE2-bgp] peer 11.1.1.1 connect-interface loopback 0...
  • Page 915: Configuring Ce Dual-Home

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration [PE3-bgp] group 11 [PE3-bgp] peer 11.1.1.1 connect-interface loopback 0 [PE3-bgp] ipv4-family vpnv4 [PE3-bgp-af-vpn] peer 11 enable [PE3-bgp-af-vpn] peer 11.1.1.1 group 11 [PE3-bgp-af-vpn] quit [PE3-bgp] quit 3.4.5 Configuring CE Dual-Home I.
  • Page 916 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration III. Configuration procedure Note: The configuration of CE router is omitted in this case and you can refer to 3.4.1 Configuring Integrated BGP/MPLS VPN. Configure PE1 # Configure two VPN-instances 1.1 and 1.2 respectively for CE1 and CE2 on PE1, set different VPN-targets for them.
  • Page 917 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration [PE1-bgp-af-vpn-instance] quit [PE1-bgp] quit # Bind the interface connecting PE1 and CE1 with VPN-instance 1.1 and interface connecting PE1 and CE2 with VPN-instance 1.2. [PE1] interface ethernet 1/0/0 [PE1-Ethernet1/0/0] ip binding vpn-instance vpn-instance1.1...
  • Page 918 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration [PE1] bgp 100 [PE1-bgp] group 2 [PE1-bgp] peer 2.2.2.2 group 2 [PE1-bgp] peer 2.2.2.2 connect-interface loopback 0 [PE1-bgp] group 3 [PE1-bgp] peer 3.3.3.3 group 3 [PE1-bgp] peer 3.3.3.3 connect-interface loopback 0...
  • Page 919 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration [PE2-bgp-af-vpn-instance] import-route direct [PE2-bgp-af-vpn-instance] import-route static [PE2-bgp-af-vpn-instance] quit # Set up EBGP adjacency between PE2 and CE2, redistribute intra-CE2 VPN routes learned into VPN-instance2.2. [PE2-bgp] ipv4-family vpn-instance vpn-instance2.2 [PE2-bgp-af-vpn-instance] group 17222 external [PE2-bgp-af-vpn-instance] peer 172.22.22.2 group 17222 as-number 65002...
  • Page 920: Configuring Multi-Role Hosts

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration [PE3-vpn- vpn-instance3.2] vpn-target 1.1.1.1:2 import-extcommunity [PE3-vpn- vpn-instance3.2] vpn-target 2.2.2.2:2 import-extcommunity [PE3-vpn- vpn-instance3.2] quit # Set up EBGP adjacency between PE3 and CE3, redistribute intra-CE3 VPN routes learned into VPN-instance3.1.
  • Page 921 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration PC1 is accessed into the VPN1 and VPN2 through CE1. The IP address for PC1 is 100.1.1.2. Note: In the case the configuration is focused on this point: With proper configuration of static route and routing policy, PC1 can access packets in different VPNs and search routes in different VPN-instances.
  • Page 922: Configuring Hovpn

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration [PE1] interface serial0/0/0 [PE1-Serial0/0/0] ip binding vpn-instance vpn1 [PE1-Serial0/0/0] ip address 1.1.1.1 255.255.255.0 [PE1-Serial0/0/0] quit # Configure static route, so that PC1 can access the packets returned from VPN2 and find correct route to PC1 in the VPN-instance for VPN1.
  • Page 923 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration II. Network diagram MPLS backbone MPLS backbone MPLS backbone MPLS backbone Upper VPN Upper VPN Upper VPN Upper VPN AS100 AS100 AS100 AS100 Router Router Router Router Lower VPN...
  • Page 924 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration [SPE-LoopBack 0] ip address 1.0.0.2 255.255.255.255 # Configure BGP [SPE] bgp 100 [SPE-bgp] ipv4-family vpn-instance vpna [SPE--bgp-af-vpn-instance] group 1 [SPE--bgp-af-vpn-instance] peer 1.0.0.1 group 1 as-number 100 [SPE--bgp-af-vpn-instance] peer 1.0.0.1 default-originate vpn1 [SPE--bgp-af-vpn-instance] peer 1.0.0.1 next-hop-local...
  • Page 925: Configuring Ospf Multi-Instance Sham Link

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration [UPE] bgp 100 [UPE-bgp] group 1 [UPE-bgp] peer 1.0.0.2 group 1 [UPE-bgp] peer 1.0.0.2 connect-interface loopback0 [UPE-bgp] ipv4-family vpnv4 [UPE-bgp-af-vpn] peer 1 enable [UPE-bgp-af-vpn] peer 1.0.0.2 group 1...
  • Page 926 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration III. Configuration procedure Configure PE1 # Enable MPLS and LDP. [PE1] mpls lsr-id 1.1.1.1 [PE1] mpls [PE1] mpls ldp # Configure VPN-instance. [PE1] ip vpn-instance VPN1 [PE1-vpn-VPN1] route-distinguisher 2:1...
  • Page 927 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration [PE1-bgp] peer 2.2.2.2 group fc [PE1-bgp] peer 2.2.2.2 connect-interface LoopBack1 [PE1-bgp] peer 3.3.3.3 group fc [PE1-bgp] peer 3.3.3.3 connect-interface LoopBack1 # Configure BGP to redistribute OSPF and directly connected routes.
  • Page 928 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration [PE2] interface Serial0/0/0 [PE2-Serial0/0/0] link-protocol ppp [PE2-Serial0/0/0] ip address 168.1.12.2 255.255.255.0 [PE2-Serial0/0/0] ospf cost 1 [PE2-Serial0/0/0] mpls [PE2-Serial0/0/0] mpls ldp enable [PE2-Serial0/0/0] mpls ldp transport-ip interface [PE2] interface Serial1/0/0...
  • Page 929 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration [PE2-bgp-af-vpn] peer fc enable [PE2-bgp-af-vpn] peer fc advertise-community [PE2-bgp-af-vpn] peer 50.1.1.1 group fc [PE2-bgp-af-vpn] peer 50.1.1.3 group fc # OSPF redistributes BGP routes and directly connected routes. [PE2] ospf 100 router-id 2.2.2.2 vpn-instance VPN1...
  • Page 930: Configuring Ospf Multi-Instance Ce

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration [CE2-Serial1/0/0] ip address 20.1.1.1 255.255.255.0 [CE2-Serial1/0/0] ospf cost 1 # Configure OSPF. [CE2] ospf 100 router-id 20.20.20.20 [CE2-ospf-100] area 0.0.0.1 [CE2-ospf-100] network 12.1.1.0 0.0.0.255 [CE2-ospf-100] network 20.1.1.0 0.0.0.255 3.4.9 Configuring OSPF Multi-Instance CE...
  • Page 931: Configuring Inter-Provider Backbones Option A

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration [CE] interface Serial2/0/0 [CE-Serial2/0/0] link-protocol ppp [CE-Serial2/0/0] ip binding vpn-instance CE-VPN2 [CE-Serial2/0/0] ip address 20.1.1.2 255.255.255.0 [CE] interface Serial3/0/0 [CE-Serial3/0/0] link-protocol ppp [CE-Serial3/0/0] ip binding vpn-instance CE-VPN2 [CE-Serial3/0/0] ip address 20.2.1.2 255.255.255.0...
  • Page 932 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration II. Network diagram BGP/MPLS Backbone BGP/MPLS Backbone AS 200 AS 100 Loopback0: Loopback0: 202.100.1.1/32 202.200.1.1/32 Pos2/0/0: Pos2/0/0: Pos1/0/0: Pos1/0/0: 192.1.1.1/24 192.1.1.2/24 162.1.1.1/16 Loopback0: 172.1.1.1/16 Loopback0: 202.100.1.2/32 200.200.1.2/32 ASBR -PE1 ASBR-PE2 LSR ID:172.1.1.1...
  • Page 933 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration [ASBR-PE1] interface loopback0 [ASBR-PE1-LoopBack 0] ip address 202.100.1.1 255.255.255.255 [ASBR-PE1-LoopBack 0] quit [ASBR-PE1] interface pos1/0/0 [ASBR-PE1-Pos1/0/0] ip address 172.1.1.1 255.255.0.0 [ASBR-PE1-Pos1/0/0] quit [ASBR-PE1] ospf [ASBR-PE1-ospf-1] area 0 [ASBR-PE1-ospf-1-area-0.0.0.0] network 172.1.0.0 0.0.255.255 [ASBR-PE1-ospf-1-area-0.0.0.0] network 202.100.1.1 0.0.0.0...
  • Page 934 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration you can find that the OSPF neighbor relationship is in Full state. PEs can learn Loopback addresses from each other. The ping operation succeeds between ASBR-PE and other PEs in the same AS.
  • Page 935 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration RouterID: 202.100.1.2 Address: 172.1.1.2 State: Full Mode: Nbr is Master Priority: 1 DR: None BDR: None Dead timer expires in 30s Neighbor comes up for 00:01:49 [ASBR-PE1] display ip routing-table...
  • Page 936 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration # Configure basic MPLS capability on ASBR-PE1 and enable LDP on the interface connecting PE1. [ASBR-PE1] mpls lsr-id 172.1.1.1 [ASBR-PE1-mpls] lsp-trigger all [ASBR-PE1-mpls] quit [ASBR-PE1] mpls ldp [ASBR-PE1-mpls-ldp] quit...
  • Page 937 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration Displaying information about all sessions: Local LDP ID: 172.1.1.2:0; Peer LDP ID: 172.1.1.1:0 TCP Connection: 172.1.1.2 -> 172.1.1.1 Session State: Operational Session Role: Active Session existed time: 3 minutes 32 seconds...
  • Page 938 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration [PE1] interface ethernet 2/0/0 [PE1-Ethernet2/0/0] ip binding vpn-instance vpna [PE1-Ethernet2/0/0] ip address 168.1.1.1 255.255.0.0 [PE1-Ethernet2/0/0] quit # Configure a VPN instance on ASBR-PE1 and bind it to the interface connecting to ASBR-PE2 (ASBR-PE1 regards ASBR-PE2 as its CE).
  • Page 939 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration [PE1] display ip vpn-instance verbose VPN-Instance : vpna No description Route-Distinguisher : 100:2 Interfaces : Ethernet2/0/0 Export-ext-communities : 100:1 Import-ext-communities : 100:1 [ASBR-PE1] display ip vpn-instance verbose VPN-Instance : vpna...
  • Page 940 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration [CE1] ping 168.1.1.1 PING 168.1.1.1: 56 data bytes, press CTRL_C to break Reply from 168.1.1.1: bytes=56 Sequence=1 ttl=255 time=1 ms Reply from 168.1.1.1: bytes=56 Sequence=2 ttl=255 time=60 ms Reply from 168.1.1.1: bytes=56 Sequence=3 ttl=255 time=1 ms...
  • Page 941 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration [PE1-bgp] peer 202.100.1.1 group 20 [PE1-bgp] peer 202.100.1.1 connect-interface loopback0 [PE1-bgp] ipv4-family vpnv4 [PE1-bgp-af-vpn] peer 20 enable [PE1-bgp-af-vpn] peer 202.100.1.1 group 20 [PE1-bgp-af-vpn] quit [PE1-bgp] quit # Configure ASBR-PE1 to establish EBGP peer relationship with ASBR-PE2 and IBGP peer relationship with PE1.
  • Page 942 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration [PE2-bgp-af-vpn] quit [PE2-bgp] quit # Configure ASBR-PE2 to establish EBGP peer relationship with ASBR-PE1 and IBGP peer relationship with PE2. [ASBR-PE2] bgp 200 [ASBR-PE2-bgp] ipv4-family vpn-instance vpna [ASBR-PE2-bgp-af-vpn-instance] group 10 external [ASBR-PE2-bgp-af-vpn-instance] peer 192.1.1.1 group 10 as-number 100...
  • Page 943 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration [PE1] display ip routing-table vpn-instance vpna vpna Route Information Routing Table: vpna Route-Distinguisher: 100:2 Destination/Mask Protocol Pre Cost Nexthop Interface 168.1.0.0/16 DIRECT 168.1.1.1 Ethernet2/0/0 168.1.1.1/32 DIRECT 127.0.0.1 InLoopBack0...
  • Page 944: Configuring Inter-Provider Backbones Option B

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration 0.00% packet loss round-trip min/avg/max = 70/142/190 ms 3.4.11 Configuring Inter-Provider Backbones Option B I. Network requirements CE1 and CE2 belong to the same VPN. CE1 accesses the network through PE1 in AS 100 and CE2 accesses the network through PE2 in AS 200.
  • Page 945 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration [PE1-ospf-1] area 0 [PE1-ospf-1-area-0.0.0.0] network 172.1.0.0 0.0.255.255 [PE1-ospf-1-area-0.0.0.0] network 202.100.1.2 0.0.0.0 [PE1-ospf-1-area-0.0.0.0] quit [PE1-ospf-1] quit # Configure ASBR-PE1. [ASBR-PE1] interface loopback0 [ASBR-PE1-LoopBack 0] ip address 202.100.1.1 255.255.255.255 [ASBR-PE1-LoopBack 0] quit [ASBR-PE1] interface pos1/0/0 [ASBR-PE1-Pos1/0/0] ip address 172.1.1.1 255.255.0.0...
  • Page 946 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration [ASBR-PE2] interface Pos 2/0/0 [ASBR-PE2-Pos2/0/0] ip address 192.1.1.2 255.255.255.0 [ASBR-PE2-Pos2/0/0] quit [ASBR-PE2] ospf [ASBR-PE2-ospf-1] area 0 [ASBR-PE2-ospf-1-area-0.0.0.0] network 162.1.0.0 0.0.255.255 [ASBR-PE2-ospf-1-area-0.0.0.0] network 202.200.1.1 0.0.0.0 [ASBR-PE2-ospf-1-area-0.0.0.0] quit [ASBR-PE2-ospf-1] quit After the configuration, the OSPF neighbor relationship should be established between ASBR PE and PEs in the same AS.
  • Page 947 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration [ASBR-PE1] mpls ldp [ASBR-PE1-mpls-ldp] quit [ASBR-PE1] interface pos1/0/0 [ASBR-PE1-Pos1/0/0] mpls [ASBR-PE1-Pos1/0/0] mpls ldp [ASBR-PE1-Pos1/0/0] quit # Configure basic MPLS capability on ASBR-PE2 and enable LDP on the interface connecting PE2.
  • Page 948 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration Note: Different from Option A, Option B method requires that the VPN-Target attribute of VPN instances of ASBR-PE and PE in the same AS should match each other. In addition, in different ASs, the matching of VPN-Target attributes of PEs is necessary.
  • Page 949 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration When pinging CE on PE, you need to specify the VPN to which the destination address belongs. For example, ping CE1 on PE1: [PE1] ping -vpn-instance vpna 168.1.1.2...
  • Page 950 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration [ASBR-PE1] bgp 100 [ASBR-PE1-bgp] group 10 external [ASBR-PE1-bgp] peer 192.1.1.2 group 10 as-number 200 [ASBR-PE1-bgp] group 20 [ASBR-PE1-bgp] peer 202.100.1.2 group 20 [ASBR-PE1-bgp] peer 202.100.1.2 connect-interface loopback0 [ASBR-PE1-bgp] ipv4-family vpnv4 [ASBR-PE1-bgp-af-vpn] peer 20 enable [ASBR-PE1-bgp-af-vpn] peer 202.100.1.2 group 20...
  • Page 951: Configuring Inter-Provider Backbones Option C

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration [ASBR-PE2-bgp] group 20 [ASBR-PE2-bgp] peer 202.200.1.2 group 20 [ASBR-PE2-bgp] peer 202.200.1.2 connect-interface loopback0 [ASBR-PE2-bgp] ipv4-family vpnv4 [ASBR-PE2-bgp-af-vpn] peer 20 enable [ASBR-PE2-bgp-af-vpn] peer 202.200.1.2 group 20 [ASBR-PE2-bgp-af-vpn] peer 20 next-hop-local...
  • Page 952 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration Configuring OSPF on the MPLS backbone network to make PEs learn routes from each other Note: In this part: The configurations on PE1 and PE2 are the same as those in section 3.4.11 “Configuring Inter-Provider Backbones Option B”.
  • Page 953 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration [PE2-LoopBack0] ip address 202.200.1.2 255.255.255.255 [PE2-LoopBack0] quit [PE2] interface pos1/0/0 [PE2-Pos1/0/0] ip address 162.1.1.2 255.255.0.0 [PE2-Pos1/0/0] quit [PE2] ospf [PE2-ospf-1] area 0 [PE2-ospf-1-area-0.0.0.0] network 162.1.0.0 0.0.255.255 [PE2-ospf-1-area-0.0.0.0] network 202.200.1.2 0.0.0.0 [PE2-ospf-1-area-0.0.0.0] quit...
  • Page 954 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration Note: In this part: The configurations on PE1 and PE2 are the same as those in section 3.4.11 “Configuring Inter-Provider Backbones Option B”. It is necessary to configure MPLS capability for interfaces between ASBR-PEs.
  • Page 955 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration [ASBR-PE2-Pos1/0/0] mpls [ASBR-PE2-Pos1/0/0] mpls ldp [ASBR-PE2-Pos1/0/0] quit [ASBR-PE2] interface pos2/0/0 [ASBR-PE2-Pos2/0/0] mpls [ASBR-PE2-Pos2/0/0] quit Note: In this scenario, ASBRs are connected through POS interfaces encapsulated with PPP. MPLS capability should be enabled on the interfaces to perform MPLSCP negotiation, thus to forward MPLS packet.
  • Page 956 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration [CE1-Ethernet1] ip address 168.1.1.2 255.255.0.0 [CE1-Ethernet1] quit # Configure a VPN instance on PE1 and bind it to the interface connecting to CE1. [PE1] ip vpn-instance vpna [PE1-vpn-vpn-vpna] route-distinguisher 100:2...
  • Page 957 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration Note: In this part: The configurations on CE1 and CE2 are the same as those in section 3.4.11 “Configuring Inter-Provider Backbones Option B”. The exchange of labeled IPv4 routes is configured between PE1 and ASBR-PE1, PE2 and ASBR-PE2, ASBR-PE1 and ASBR-PE2.
  • Page 958 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration [ASBR-PE1] acl number 2001 [ASBR-PE1-acl-basic-2001] rule permit source 202.100.1.2 0 [ASBR-PE1-acl-basic-2001] rule deny source any [ASBR-PE1-acl-basic-2001] quit [ASBR-PE1] route-policy rtp-ebgp permit node 1 [ASBR-PE1-route-policy] if-match acl 2001 [ASBR-PE1-route-policy] apply mpls-label...
  • Page 959 3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration [PE2-bgp] peer 20 label-route-capability [PE2-bgp] peer 202.200.1.1 group 20 [PE2-bgp] peer 202.200.1.1 connect-interface loopback0 [PE2-bgp] group 30 external [PE2-bgp] peer 30 ebgp-max-hop [PE2-bgp] peer 202.100.1.2 group 30 as-number 100 [PE2-bgp] peer 202.100.1.2 connect-interface loopback0...
  • Page 960: Troubleshooting Multi-Role Host Configuration

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 3 BGP/MPLS VPN Configuration display bgp routing label command, you can find that the two routes carry labels and the IPv4 routes learned from each other by PE1 and PE2. CEs can learn interface routes from each other. CE1 and CE2 can be pinged successfully on each other.
  • Page 961: Introduction To Mpls L2Vpn

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 MPLS L2VPN Configuration Chapter 4 MPLS L2VPN Configuration 4.1 Overview 4.1.1 Introduction to MPLS L2VPN ATM-based and FR-based VPNs have gained widespread applications, which can enable different VPNs to share the network infrastructure of the same service provider.
  • Page 962: Mpls L2Vpn Frame Format

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 MPLS L2VPN Configuration VPN A VPN A VPN A VPN A VPN B VPN B VPN B VPN B Figure 4-1 L2VPN MPLS L2VPN offers the following benefits: Support multiple link-layer protocols to provide L2VPN services based on different media on the MPLS network, including ATM (ATM ALL5 and ATM cell relay), FR, VLAN, Ethernet, PPP, HDLC etc.
  • Page 963: Packet Forwarding

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 MPLS L2VPN Configuration Control word: It is unnecessary to transmit the L2 frame as a whole in transmitting 12VPN packets over MPLS network. All required is to distract the L2 frame header at the ingress and to add it at the egress.
  • Page 964 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 MPLS L2VPN Configuration draft-martini-l2circuit-trans-mpls-08.txt draft-kompella-ppvpn-l2vpn-01.txt The Martini draft provisions the point-to-point link implementation of L2VPN. As LDP is used as the signaling protocol for the VC label transmission between the participating parties, this implementation is called LDP/MPLS L2VPN.
  • Page 965: Configuration Of Mpls L2Vpn In Ccc Mode

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 MPLS L2VPN Configuration Martini mode is more applicable to a low-density L2 connection, for example, star connection. IV. MPLS L2VPN in Kompella mode MPLS L2VPN in Kompella mode is similar to the L3 BGP/MPLS VPN. Like BGP/MPLS VPN, the PE uses IBGP session to detect the nodes in L2VPN and transmit VPN information.
  • Page 966: Configuring The Interface Connecting Ce

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 MPLS L2VPN Configuration It suffices to enabled MPLS and bidirectional static LSP on a P router. 4.2.1 Configuring the Interface Connecting CE Only some compulsory configuration tasks are listed here. For optional tasks, refer to V 2.41 Operation Manual –...
  • Page 967: Enabling Mpls

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 MPLS L2VPN Configuration Operation Command fr map ip { protocol-address [ ip-mask ] | default } dlci [ broadcast ] [ nonstandard Configure static dynamic | ietf ] address mapping fr inarp [ ip ] [ dlci ]...
  • Page 968: Enabling Mpls L2Vpn

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 MPLS L2VPN Configuration Table 4-4 Enable MPLS Operation Command Configure LSR ID mpls lsr-id X.X.X.X Enable MPLS mpls 4.2.3 Configuring Static LSP CCC makes use of static LSP for transparently transmitting L2 packets over an SP network.
  • Page 969: Creating Ccc Connection

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 MPLS L2VPN Configuration 4.2.5 Creating CCC Connection CCC connections fall into local connection and remote connection. Local connection refers to the connection established between two local CEs. With local connection, switching can be directly implemented on PE without using static LSP. Remote connection refers to the connection between a local CE and a remote CE, that is, two CEs connected to different PEs.
  • Page 970: Configuring Pe-Pe Tunnel

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 MPLS L2VPN Configuration Create SVC connection Refer to section 4.2 “Configuration of MPLS L2VPN in CCC Mode” for the first three steps. 4.3.1 Configuring PE-PE Tunnel Current two types of tunnels are available, GRE tunnel and LSP tunnel.
  • Page 971: Configuration Of Mpls L2Vpn In Martini Mode

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 MPLS L2VPN Configuration Operation Command Delete an SVC connection undo mpls static-l2vc Caution: You must guarantee the validity of transmit and receive labels of L2VPN in SVC mode. 4.4 Configuration of MPLS L2VPN in Martini Mode...
  • Page 972: Configuration Of Mpls L2Vpn In Kompella Mode

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 MPLS L2VPN Configuration Caution: With LDP/MPLS L2VPN, the VC ID assigned to a link must be unique among all the links with the same encapsulation type. Any encapsulation change is likely to cause VC ID collision.
  • Page 973: Creating And Configuring Vpn

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 MPLS L2VPN Configuration When the undo command is executed, the system returns to BGP view and delete the L2VPN address family. II. Activating the peer (group) Perform the following configurations in L2VPN view.
  • Page 974: Creating Ce And Configuring Ce Connection

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 MPLS L2VPN Configuration Perform the following configurations in MPLS L2VPN view. Table 4-15 Configure VPN Operation Command Configure RD for MPLS L2VPN route-distinguisher route-distinguisher vpn-target vpn-target-ext-community Configure VPN-target for MPLS import-extcommunity...
  • Page 975: Displaying And Debugging Mpls L2Vpn

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 MPLS L2VPN Configuration Suppose a corporation has ten CEs in its VPN, but the expanded network may have 20 CEs, so you can set the CE range as 20. Then the system will allocate labels for the future ten CEs in advance, so you only need to modify those CEs newly connected to the PE in future expansion.
  • Page 976: Mpls L2Vpn Configuration Example

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 MPLS L2VPN Configuration Table 4-18 Monitoring and maintenance of L2VPN Operation Command Display connection display ccc [ ccc-name | type [ local | remote ] ] information Display connection display mpls static-l2vc [ interface interface-type...
  • Page 977 # Enable MPLS on the interface SERIAL 3/0/0. [3Com] interface serial 3/0/0 [3Com-Serial3/0/0] link-protocol ppp [3Com-Serial3/0/0] mpls # Configure a local connection. [3Com] ccc local-conn interface serial0/0/0 outgoing-interface serial2/0/0 # Configure a static LSP, with the out-label 100 and the outgoing interface SERIAL 3/0/0. [3Com] mpls [3Com-mpls]...
  • Page 978 1/0/0 out-label 200 pre 2 metric 3 # Configure a static LSP, with the in-label 201 and incoming interface SERIAL 1/0/0. [3Com-mpls] static-lsp egress PEA-PEB l2vpn incoming-interface serial 1/0/0 in-label 101 # Configure a remote connection. [3Com] ccc remote-conn interface serial1/0/0 transmit-lsp PEB-PEA receive-lsp...
  • Page 979: Configuring Svc-Based Mpls L2Vpn

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 MPLS L2VPN Configuration The encapsulation type for the two CE interfaces is consistent and supported in current MPLS L2VPN. For a MPLS L2VPN of VLAN encapsulation type, the VLAN IDs for the two CE interfaces can be inconsistent.
  • Page 980 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 MPLS L2VPN Configuration # Configure serial interface. [PE1] interface serial1/1/0 [PE1-serial1/1/0] mpls ldp enable [PE1-serial1/1/0] ip address 168.1.1.1 255.255.0.0 # Enable OSPF. [3Com] ospf 1 [3Com -ospf-1] area 0.0.0.0 [3Com -ospf-1-area-0.0.0.0] network 192.1.1.1 0.0.0.0 [3Com -ospf-1-area-0.0.0.0] network 168.1.0.0 0.0.255.255...
  • Page 981: Configuring Martini Mpls L2Vpn

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 MPLS L2VPN Configuration [PE2-mpls] lsp-trigger all # Configure SVC connection. [PE2-s3/1/0] mpls static-l2vc destination 192.1.1.1 transmit-vpn-label 333 receive-vpn-label 111 Configure P # Configure LSR ID, enable MPLS, LDP and MPLS L2VPN.
  • Page 982 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 MPLS L2VPN Configuration # Configure VLAN subinterface. [3Com] interface ethermet0/0/0.1 [3Com-Ethernet0/0/0.1] vlan-type dot1q vid 20 # Configure the serial interface. [3Com] interface serial 0/0/0 [3Com-serial0/0/0] ip address 168.1.1.1 255.255.0.0 [3Com-serial 0/0/0] mpls [3Com-serial 0/0/0] mpls ldp enable # Assign an address to the loopback interface, which will be taken as route ID.
  • Page 983 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 MPLS L2VPN Configuration # Assign an address to the loopback interface, which will be taken as the LSR ID. [3Com] interface loopback 0 [3Com-LoopBack0] ip address 192.1.1.2 255.255.255.255 # Enable OSPF.
  • Page 984: Configuring Kompella Mpls L2Vpn

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 MPLS L2VPN Configuration Caution: The conditions for a Martini connection to go up are: The two CE interfaces are in UP state. Two tunnels (GRE or LSP, one in each direction) have been established between two PEs.
  • Page 985 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 MPLS L2VPN Configuration [3Com] mpls [3Com] mpls l2vpn # Assign an address to the loopback interface. [3Com] interface loopback 0 [3Com-LoopBack0] ip address 192.1.1.1 255.255.255.255 # Configure the serial interface. [3Com-LoopBack0] interface serial 3/0/0 [3Com-Serial3/0/0] ip address 168.1.1.1 255.255.0.0...
  • Page 986 Chapter 4 MPLS L2VPN Configuration [3Com] bgp 100 [3Com-bgp] group 192 internal [3Com-bgp] peer 192.1.1.2 connect-interface LoopBack0 [3Com-bgp] peer 192.1.1.2 group 192 as-number 100 [3Com-bgp] peer 192.1.1.3 connect-interface LoopBack0 [3Com-bgp] peer 192.1.1.3 group 192 as-number 100 [3Com-bgp] l2vpn-family [3Com-bgp-af-l2vpn] peer 192 enable # Configure Kompella connection.
  • Page 987: Enable Ospf

    # Configure BGP parameter. [3Com] bgp 100 [3Com-bgp] group 192 internal [3Com -bgp] peer 192.1.1.1 connect-interface LoopBack0 [3Com -bgp] peer 192.1.1.1 group 192 as-number 100 [3Com -bgp] peer 192.1.1.3 connect-interface LoopBack0 [3Com -bgp] peer 192.1.1.3 group 192 as-number 100 [3Com -bgp] l2vpn-family [3Com -bgp-af-l2vpn] peer 192 enable # Configure Kompella connection.
  • Page 988 3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 MPLS L2VPN Configuration [3Com-l2vpn-vpna-ce-ce-c] ce ce-c id 3 range 4 # Configure connection with CE-A. [3Com-l2vpn-vpna-ce-ce-c] connection atm0/0/0.1 # Configure remote connection with CE-B. [3Com-l2vpn-vpna-ce-ce-c] connection atm0/0/0.2 # Configure connection for future expansion.
  • Page 989: Troubleshooting Mpls L2Vpn

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 4 MPLS L2VPN Configuration 4.8 Troubleshooting MPLS L2VPN Symptom 1: Configuring Layer 2 VPN on a VLAN interface fails. Solution: Check that MPLS/BGP VPN, WebSwitch, Multicast or VLL is not enabled on the interface.
  • Page 990 3Com Router 3000 Ethernet Family Configuration Guide Security 3Com Corporation...
  • Page 991 3Com Router 3000 Ethernet Family Configuration Guide Table of Contents Table of Contents Chapter 1 Network Security Configuration................. 1-1 1.1 Introduction to the Network Security Features Provided by V 2.41........1-1 1.2 Hierarchical Command Line Protection ................1-2 1.3 RADIUS-Based AAA......................1-2 1.4 Packet Filter and Firewall ....................
  • Page 992 3Com Router 3000 Ethernet Family Configuration Guide Table of Contents 2.4.6 Setting a Key for Securing the Communication with TACACS Server ....2-34 2.4.7 Setting the Username Format Acceptable to the TACACS Server....... 2-34 2.4.8 Setting the Unit of Data Flows Destined for the TACACS Server......2-34 2.4.9 Setting Timers Regarding TACACS Server ............
  • Page 993 3Com Router 3000 Ethernet Family Configuration Guide Table of Contents Chapter 5 ACL Configuration....................... 5-1 5.1 Introduction to ACL ......................5-1 5.1.1 ACL Overview ......................5-1 5.1.2 Classification of ACL ....................5-1 5.1.3 Match order of ACL ....................5-1 5.1.4 ACL Creation......................5-2 5.1.5 Basic ACL........................
  • Page 994 3Com Router 3000 Ethernet Family Configuration Guide Table of Contents 7.1.1 IPSec........................7-1 7.1.2 IPSec Basic Concepts..................... 7-2 7.1.3 Overview of Encryption Card .................. 7-4 7.1.4 Introduction to IPSec DPD ..................7-5 7.1.5 Introduction to IPSec Mutli-Instance ............... 7-6 7.1.6 IPSec on V 2.41 ...................... 7-7 7.2 IPSec Configuration......................
  • Page 995 3Com Router 3000 Ethernet Family Configuration Guide Table of Contents 9.1.2 Terminology......................9-2 9.1.3 Applications ......................9-2 9.1.4 Configuration Task List ................... 9-2 9.2 Certificate Request Configuration..................9-3 9.2.1 Certificate Request Overview.................. 9-3 9.2.2 Entering PKI Domain View..................9-3 9.2.3 Specifying a Trustworthy CA................... 9-4 9.2.4 Configuring Servers for Certificate Request ............
  • Page 996: Chapter 1 Network Security Configuration

    3Com routers provide the following network security characteristics: AAA services based on Remote Authentication Dial-In User Service (RADIUS) provide the security services of Authentication, Authorization, and Accounting on accessing subscribers for preventing illegal accessing.
  • Page 997: Hierarchical Command Line Protection

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 Network Security Configuration configuration in the link layer protocol part for PPP authentication protocol, networking protocol part for address translation, IP route part for adjacent router authentication. 1.2 Hierarchical Command Line Protection The system command lines are protected in a hierarchical way.
  • Page 998: Firewall Classification

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 Network Security Configuration Internet Firewall Ethernet Server Figure 1-1 A firewall separating the intranet from the Internet The firewall is not only applied to the Internet connection, but also used to protect the mainframe and crucial resources like data on the intranet of the organization.
  • Page 999: Packet Filter

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 Network Security Configuration entry in the valid connection table. After the session is terminated, the session entry will be deleted from the table. Circuit-level GW authenticates a connection only at the session layer. If the authentication is passed, any application can be run on the connection.
  • Page 1000: Security Authentication Before Route Information Exchange

    3Com Router 3000 Ethernet Family Configuration Guide Chapter 1 Network Security Configuration carried by the IP layer, source and destination addresses of the packet, and source and destination ports. Then, it compares them with the preset rules to determine whether the packet should be forwarded or discarded.

This manual is also suitable for:

3c13636-us - router 30363000 series

Table of Contents

Save PDF