Alcatel-Lucent OmniAccess 5740 Cli Command Reference Manual
  1. Manuals
  2. Brands
  3. Alcatel-Lucent Manuals
  4. Gateway
  5. OmniAccess 5740
  6. Cli command reference manual
Alcatel-Lucent OmniAccess 5740 Cli Command Reference Manual

Alcatel-Lucent OmniAccess 5740 Cli Command Reference Manual

Unified services gateway
Hide thumbs Also See for OmniAccess 5740:
1
2
Table Of Contents
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
Table of Contents

Advertisement

Quick Links

Download this manual See also: User Manual
OmniAccess 5740
Unified Services Gateway
CLI Command Reference Guide
1
2
Release 3.0
Notes on numbered items on banner & legal pages
1
Manu26801 West Agoura Road
Calabasas, CA 91301
(818) 880-3500
FAX (818) 880-3505
support@ind.alcatel.com
Beta
US Customer Support—(800) 995-2696
International Customer Support—(818) 878-4507
Internet—service.esd.alcatel-lucent.com
Website: www.alcatel-lucent.com
Part No: 060317-00, Rev A

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the OmniAccess 5740 and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for Alcatel-Lucent OmniAccess 5740

Summary of Contents for Alcatel-Lucent OmniAccess 5740

  • Page 1 For final production, import color definitions from \\daldoc01\docteam\templates\framemaker\book-template\color-defs\ production-colors.fm. OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Release 3.0 Notes on numbered items on banner & legal pages Manu26801 West Agoura Road Calabasas, CA 91301 (818) 880-3500 FAX (818) 880-3505 support@ind.alcatel.com...
  • Page 2 The following information is for the Users of the OmniAccess 5740 Unified Services Gateway: If it is not installed in accordance with the installation instructions, it may not function exactly to the said specifications.

  • Page 3: Table Of Contents

    Table of Contents Preface......................1 About This Guide ........................1 Audience ........................... 1 Organization..........................2 Document Conventions......................7 Obtaining Documentation......................8 Reference Publications ......................8 Obtaining Technical Assistance ....................9 Documentation Feedback ......................9 Part 1: Introduction 2 Using the Command Line Interface ............13 Overview...........................
  • Page 4 delete config-file ........................57 delete fp-key..........................58 delete user ..........................58 ............................59 enable secret........................... 60 hostname ..........................61 http ............................61 https ............................62 import ca-cert .......................... 63 import signed-cert ........................64 line console baudrate ......................65 line console exec-timeout......................
  • Page 5 no logging buffered ......................... 76 no logging console ........................76 no logging on........................... 76 no logging rate-limit......................... 77 no logging remote ........................77 no logging system ........................77 no logging watermark......................77 no radius-server ........................77 no radius-server auth-port....................... 77 no radius-server deadtime ......................
  • Page 6 save logging priority ........................ 97 save logging string ........................98 save logging tag ........................98 service timestamps log......................99 show aaa..........................100 show aaa-client-methodlist-associations................101 show aaa-local-users-details....................101 show aaa-methodlists ......................102 show aaa-radius........................102 show aaa-tacacs ........................103 show aaa-users........................103 show access-server status....................
  • Page 7 snmp system ......................... 143 snmp trap ..........................144 snmp trap enable ........................144 ssh............................145 ssh............................146 tacacs-server......................... 146 tacacs-server auth-port ......................148 tacacs-server key ........................148 tacacs-server timeout......................149 telnet enable|disable ......................149 telnet ............................. 150 terminal length........................151 terminal monitor ........................
  • Page 8 clear counters........................172 duplex............................ 173 encapsulation dot1q ......................174 flowcontrol ..........................175 interface ..........................175 interface <name> ........................176 address..........................176 ............................177 duplex..........................177 no encapsulation dot1q ......................177 no flowcontrol ........................177 no mtu ........................... 177 no speed ..........................178 show............................
  • Page 9 no spanning-tree vlan cost ....................200 no spanning-tree enable vlan fwd-time/hello-time/max-age/priority........200 no spanning-tree vlan port-priority ..................200 no spanning-tree vlan spanning-disabled ................200 show spanning-tree brief....................... 201 show spanning-tree summary ....................202 show spanning-tree vlan ....................... 203 spanning-tree vlan enable.....................
  • Page 10 10 Port Monitoring...................227 no port monitor interface switchport ..................228 port monitor interface switchport ................... 228 show port monitor........................229 Part 3: WAN Interfaces and Protocols 11 T1E1 Line Card ...................233 E1 CLI Commands........................ 234 card type ..........................234 clocksource ........................... 235 channel-group ........................
  • Page 11 cablelength........................256 no clocksource ........................256 no channel-group ........................257 no encapsulation ........................257 no framing ..........................257 linecode..........................257 loopback........................... 257 no mtu ........................... 257 shutdown.......................... 257 show controller ........................258 show interfaces ........................259 shutdown..........................260 12 Universal Serial Port (USP) Line Card ............261 V.35/X.21/RS-232 DTE and DCE Configuration Commands..........
  • Page 12 debug frame-relay all ......................278 encapsulation frame-relay..................... 279 frame relay interface-dlci....................... 279 frame-relay keepalive......................280 frame-relay lmi-type ......................280 frame-relay lmi-n391dte ......................281 frame-relay lmi-n392dte ......................281 frame-relay lmi-n393dte ......................282 no debug frame-relay ......................282 no encapsulation frame-relay....................282 no frame-relay interface-dlci....................
  • Page 13 ppp ipcp address accept-peer....................296 ppp ipcp address pool local....................297 ppp ipcp negotiate......................... 297 ppp lcp echo-interval ......................298 ppp lcp negotiate........................298 ppp lcp max-echo........................299 ppp timeout restart-interval ....................299 ppp timeout restart-timer ....................... 300 ppp timeout max-configure....................
  • Page 14 18 Multilink Frame Relay.................329 encapsulation mlfr ......................... 330 frame relay interface dlci ....................... 330 frame relay lmi type....................... 331 interface mlfr ......................... 332 mlfr ack interval ........................332 mlfr bid ..........................333 mlfr hello interval ........................333 mlfr lid............................ 334 mlfr retry count ........................
  • Page 15 no fault-alarm lowest-priority-defect ..................358 no fault-alarm reset-time ....................... 359 fault-alarm set-time ....................... 359 macaddress........................359 no mep ..........................359 no priority ..........................359 remote-mep........................359 shutdown.......................... 359 ............................360 remote-mep........................... 361 show eth-cfm association...................... 362 show eth-cfm cfm-stack-table ....................363 show eth-cfm domain ......................
  • Page 16 no service-policy ........................391 no slippage mru........................391 service-policy ........................391 slippage mru.......................... 392 show frame-relay fragments....................393 show frame-relay pvc ......................394 show interface serial ......................395 Part 4: Common Classification 22 Common Classifiers...................399 ethernet ..........................400 include........................... 401 list............................
  • Page 17 ip unnumbered ........................435 match as-path ........................436 match community ........................436 match interface........................437 match ip address........................437 match ip next-hop........................438 match ip route-source ......................439 match metric.......................... 440 maximum-paths........................440 match route-type ........................441 no passive-interface ......................441 no ip tcp adjust-mss ......................
  • Page 18 ip split-horizon ........................471 key............................471 key-chain..........................472 key-string..........................472 network..........................473 neighbor ..........................473 no auto-summary ........................474 no default-information originate..................... 474 no default-metric ........................474 distance..........................474 no distribute-list ........................474 no ip rip authentication key-chain..................474 no ip rip authentication mode ....................
  • Page 19 bgp bestpath med ......................... 496 bgp client-to-client reflection ....................496 cluster-id......................... 497 bgp confederation identifier....................497 bgp confederation peers ....................... 498 bgp dampening ........................499 bgp default local-preference....................500 bgp enforce-first-as ....................... 500 fast-external-fallover....................... 501 bgp graceful-restart-timers ....................501 bgp log-neighbor-changes ....................
  • Page 20 neighbor weight........................528 network..........................529 router bgp..........................530 show ip bgp ........................... 531 show ip bgp cidr-only ......................534 show ip bgp community......................535 show ip bgp community-list ....................536 show ip bgp dampened-paths ....................537 show ip bgp filter-list......................538 show ip bgp flap-statistics .....................
  • Page 21 ip ospf transmit-delay ......................568 log-adjacency-changes ......................569 neighbor ..........................570 network area ......................... 571 no passive-interface ......................571 no log-adjacency-changes ....................572 no area authentication......................572 no area default-cost ......................572 no area nssa ......................... 572 no area range........................572 no area stub ..........................
  • Page 22 ip pim spt-threshold....................... 613 ip pim query-interval......................614 no ip pim sparse-mode......................614 show ip pim rp-hash ......................615 show ip pim bsr-router......................615 show ip pim interface ......................616 show ip pim neighbor ......................617 show ip pim rp mapping ......................
  • Page 23 clear ip route ......................... 645 description..........................646 ip route ..........................647 ip vrf ............................648 ip vrf forwarding........................649 ping ............................650 router ospf ..........................651 show arp..........................652 show arp traffic........................653 show ip bgp ........................... 654 show ip bgp community......................
  • Page 24 ip nat statistics {in|out|both} ....................684 no debug firewall nat ......................684 no ip nat-force ........................684 no ip nat {in | out} ........................685 no ip nat statistics {in | out | both} ..................685 no rule ........................... 685 renumber..........................685 show ip nat ..........................
  • Page 25 icmp-ip-address-sweep ......................715 icmp-ping-flood........................716 icmp-ping-of-death ........................ 717 icmp-redirect ......................... 717 icmp-router-advertisement ....................718 icmp-smurf-attack........................718 ip-land-attack......................... 719 ip-source-routing ........................719 ip-spoofing..........................720 ip-tear-drop..........................720 ip-tiny-frag ..........................721 ip-zero-length ........................722 all............................722 attack..........................722 no attack name force......................722 no debug firewall ........................
  • Page 26 no time-range ........................742 show time-range........................742 time-range ..........................742 ALG CLI Commands ......................743 clear firewall alg sip statistics ....................743 show firewall alg dns debug-counters ................... 743 show firewall alg dns statistics ....................744 show firewall alg ftp debug-counters..................
  • Page 27 crypto peer-certificate import....................769 crypto peer-certificate delete....................770 crypto rsa-key delete......................770 crypto signed-cert........................771 interval..........................771 ike-identity ..........................772 import ca-cert ........................772 import crl ..........................773 import signed-cert ......................... 774 ipsec security-association lifetime..................775 lifetime seconds ........................775 lifetime........................... 776 match ............................
  • Page 28 show crypto ipsec sa......................793 show crypto ipsec transform-set ................... 794 show crypto map ........................795 show crypto peer-certificate ....................796 show crypto rsa-key ......................798 show crypto signed-cert ......................799 show running-config ......................800 subject-name......................... 802 transform set ......................... 802 IPsec Tunnel Interface CLI Commands ................
  • Page 29 no map ..........................820 network-id......................... 820 no nhs ........................... 820 no registration timeout......................820 registration timeout........................ 821 show ip nhrp.......................... 822 show ip nhrp configuration ....................823 show ip nhrp object ....................... 824 show ip nhrp interface Tunnel ....................825 IPsec VPN Server CLI Commands ..................
  • Page 30 rollback..........................851 rule detection......................... 851 rule disable..........................852 rule enable ..........................852 rule modify..........................853 rule prevention ........................854 show firewall intrusion sensor ....................854 show firewall intrusion snort archives..................855 show firewall intrusion snort file list ..................856 show firewall intrusion snort rule ...................
  • Page 31 Part 7: Quality of Service 36 Quality of Service ..................883 auto qos diff-serv........................884 auto qos template........................884 auto qos voip......................... 885 bandwidth..........................885 class ............................886 class-map..........................887 clear queuing statistics......................888 description..........................888 fair-queue ..........................889 frame-relay qos-bandwidth percent..................
  • Page 32 service-policy <child policy-map name> ................905 ............................906 shape ............................ 908 show auto qos ........................909 show class-map ........................911 show policy-map ........................911 show random-detect-defaults....................912 show service-policy ....................... 913 show qos config ........................914 show qos frame-relay bandwidth-config................915 show qos running-config .......................
  • Page 33 network..........................945 no host ..........................945 no ip dhcp option bootfile-name .................... 945 no ip dhcp option dns-server....................945 no ip dhcp option domain-name.................... 945 no ip dhcp option lease-time ....................946 no ip dhcp option log-server....................946 no ip dhcp option next-server....................
  • Page 34 no request-type ........................960 user-class......................... 960 no vendor-class-identifier ...................... 960 parameter-req-list........................961 requested-address ........................ 962 request-type .......................... 963 show ip dhcp client........................ 964 show ip dhcp client status ..................... 965 user-class..........................966 vendor-class-identifier ......................967 39 TFTP (Trivial File Transfer Protocol) Server ..........969 no tftp-server .........................
  • Page 35 ip ddns update hostname...................... 988 ip ddns update method......................989 ip ddns method........................990 interval..........................991 no ip ddns update method..................... 991 no ip ddns update hostname....................991 no ip ddns method......................... 991 no server ..........................991 no url ............................. 991 server ............................

  • Page 36: Preface

    OmniAccess 5740 Unified Services Gateway (OmniAccess 5740 USG). It focuses on accessing the OmniAccess 5740 USG by using the Command Line Interface (CLI). All commands are described in alphabetical order. They do not follow the sequence of configuration. Each chapter includes table of parameters, default values and configuration examples as quick-start and reference information.

  • Page 37: Organization

    Chapter 6 “Switching on L2 Ports” deals with the L2 switching Configuration on the OmniAccess 5740 USG. This chapter documents the commands for Layer 2 switching. These commands are used to configure switching on the L2 protocols. Chapter 7 “Per VLAN Spanning Tree +”...
  • Page 38 Multilink Frame Relay Protocol (MLFR). These commands are used to configure Multilink Frame Relay encapsulation on a T1 or an E1 line card. Chapter 19 “Ethernet OAM (Operations, Administration, and Maintenance)” deals with CLI commands for configuring Ethernet OAM on OmniAccess 5740 USG. Chapter 20 “Bridging Configuration”...
  • Page 39 Routing (PBR) configuration on the OmniAccess 5740 USG. Chapter 29 “Virtual Routing and Forwarding” covers the CLI commands for configuring Virtual Routing and Forwarding Customer Edge on OmniAccess 5740 USG. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide...
  • Page 40 Chapter 36 “Quality of Service” provides the configuration commands for QoS. It includes CLI commands for configuring policing, shaping, queueing network traffic, auto QoS, etc. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 41 Left running head: Chapter name (automatic) OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide IX - TCP/IP S ERVICES This part consists of Chapter 37 “DHCP (Dynamic Host Configuration Protocol) Server” that focuses on DHCP Server configuration commands. Chapter 38 “DHCP (Dynamic Host Configuration Protocol) Client”...

  • Page 42: Document Conventions

    A note contains helpful suggestions or information that may be easily overlooked. Caution: Indicates a situation where the reader needs to be careful. Failure to observe the cautionary note could result in equipment damage or loss of data. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 43: Obtaining Documentation

    Left running head: Chapter name (automatic) OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Warning: Warning is used in similar cases as caution. This also indicates a situation where the reader needs to pay extra attention to avoid hazardous situations.

  • Page 44: Obtaining Technical Assistance

    Obtaining Technical Assistance BTAINING ECHNICAL SSISTANCE For all customers, partners, resellers, and distributors who hold valid Alcatel- Lucent service contracts, the Alcatel-Lucent Technical Support Team provides 24- hour-a-day, technical support services online and over the phone. Alcatel-Lucent US Customer Support: (800) 995-2696 International Customer Support: (818) 878-4507 E-mail: support@ind.alcatel.com...
  • Page 45 Left running head: Chapter name (automatic) OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 46: Part 1 Introduction

    To switch to the beta version, import color def’ns from beta-colors.fm Part 1 Introduction Pagination: Numeric & continuous Optional footer: Alcatel-Lucent with Manual title (to set, preceding redefine ManualTitle OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide section of Beta Beta Beta Beta variable) book...
  • Page 47 Left running head: Chapter name (automatic) Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 48: Using The Command Line Interface

    VERVIEW The Command Line Interface (CLI) is the primary interface to access the OmniAccess 5740 USG. The CLI is the interface for console and connections via SSH, Telnet, and Modem. The CLI, which automatically starts once the required processes are up provides commands that you can use to perform various tasks, including configuring the OmniAccess 5740 USG, monitoring and troubleshooting the system, enabling network connectivity, and verifying the system hardware.

  • Page 49: Introduction To Cli Modes

    User Mode (UM) and Super User Mode (SUM). When you log in to the OmniAccess 5740 USG and the start the CLI session, you are at the top level of the CLI User Mode which is the User Mode (UM).
  • Page 50 The command “top” is used to jump to configuration mode from which ever mode you are in. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 51 Set terminal line parameters service Show running system information show Open a SSH connection Open a telnet connection telnet Set terminal line parameters terminal Trace route to destination traceroute Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 52 Turn off privileged commands.Exits from disable the SUM to the UM mode. Erase a filesystem erase Exit from current mode exit Description of the interactive help help system Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 53 Open a telnet connection telnet Set terminal line parameters terminal Trace route to destination traceroute Disable debugging functions undebug Write running configuration to memory, write network, or terminal Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 54 Change a dialer list rule's line number change Set QoS Class Map. class-map Terminating the Session clear System clock settings clock Select a controller to configure controller IPSEC VPN module crypto Customize services customized-service Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 55 Define/Modify a match-list match-list NAT port reservation nat-ip Negate a command or set its defaults Enters OAM global configuration mode Package Manipulation package Add a Policy-Map policy-map Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 56 Define/Modify a time range object time-range Enter top level configuration mode Define/modify transparent-forward policy transparent-forward Debugging functions (see also undebug 'undebug') Go up one mode Establish user name authentication username Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 57 ALU(config-controller E1)# ALU(config-controller E1)# exit ALU(config)# ALU(config)#interface Serial 0/0:0 ALU(config-if Serial0/0:0)# To exit the ICM and return to the CM, enter the Exit command. ALU(config-if GigabitEthernet3/0)# exit ALU(config)# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 58 To exit from the S-ICM and return to the ICM, use the Exit command. To end your configuration session and return to SUM mode, press Ctrl-Z or enter the End command. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 59 XAMPLE ALU# configure Enter configuration commands, one per line. End with CNTL/Z. ALU(config)# interface GigabitEthernet 3/0 ALU(config-if GigabitEthernet3/0)# ^Z ALU# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 60 ALU(config-if GigabitEthernet3/0)# top ALU(config)# NITIAL ETUP Whenever the system configuration is empty, you are automatically entered into the initial setup program, which takes you through the basic configuration steps. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 61: Using The Command Line Interface

    Disable Tab completion no service completion tab-complete XAMPLE ALU(config)# service completion spacebar-complete ALU(config)# no service completion spacebar-complete ALU(config)# service completion tab-complete ALU(config)# no service completion tab-complete Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 62 This type of Help is called the Word Help. XAMPLE ALU(config)# show i? ** PRIVILEGE COMMANDS ** inband inband interfaces Display information for all interfaces internal Internal info IP information ip-policy ip-policy keyword IPX protocol Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 63 OSPF information PIM information protocols IP routing protocol process parameters and statistics IP RIP show commands route IP routing table traffic IP Traffic Statistics VPN Routing/Forwarding instance information Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 64 When you enter a partial command (part of a command) and press the Enter key, the CLI executes the best matched command. XAMPLE ALU(config)# sh ip int br Interface IP Address Admin State Oper State GigabitEthernet3/0 unassigned down GigabitEthernet3/1 10.91.1.146 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 65 Ctrl-I Complete command. History This gives the list of all commands entered in the present session, with a maximum limit of 2000 commands. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 66 Esc, L Changes the letters from the cursor to the end of the word to lowercase. Esc, U Capitalizes letters from the cursor to the end of the word. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 67 13: interface GigabitEthernet 3/05B 14: interface GigabitEthernet 3/0.1 15: interface GigabitEthernet 3/0:3.1 16: service completion spacebar-complete 17: no service completion spacebar-complete 18: no service completion 19: show history Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 68: Configuring Interfaces

    MTU (Maximum Transmission Unit) size. IP C NTERFACE ONFIGURATION Command (in ICM) Description Assigns an IP address and subnet mask ip address {<ip-address to the interface. subnet-mask>|<ip-address/ prefix-length>} Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 69 0 output errors, 0 collisions, 0 interface resets 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier, 0 pause output 0 output buffer copied, 0 interrupts, 0 failures Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 70 Tunnel0 is up, line protocol is down Internet address is 192.168.1.2/30 MTU 1476 bytes, BW 1000000 Kbit, DLY 0 usec, reliability 255/255, txload 0/255, rxload 0/255 Loopback not set Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 71 Down switchport1/4 Down Down switchport1/5 Down Down switchport1/6 Down Down switchport1/7 Down Down GigabitEthernet3/0 Down GigabitEthernet3/1 Down Tunnel0 Down Tunnel1 Down Tunnel3 Down Tunnel5 Down mlppp1 Down Down Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 72 Admin State Oper State GigabitEthernet1/0 unassigned down down GigabitEthernet1/1 unassigned down down Vlan213 2.2.2.2 down down 4.4.4.4 (s) Loopback222 3.3.3.3 Loopback2 9.9.9.9 1.1.1.1 (s) 7.7.7.7 (s) Loopback1 unassigned Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 73 This is entered in the Interface Configuration no shutdown Mode. This command administratively brings up the interface. XAMPLE ALU(config-if GigabitEthernet3/0)# shutdown ALU(config-if GigabitEthernet3/0)# no shutdown Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 74 Received 7 broadcasts, 0 runts, 0 giants 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 watchdog, 0 multicast, 0 pause input 0 packets output, 0 bytes, 0 underruns Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 75 0 output errors, 0 collisions, 0 interface resets 0 output buffer failures, 0 output buffers swapped out 0 carrier transitions Timeslot(s) Used:1-24 (64Kbps each), Transmitter delay is 0 flags Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 76: System Configuration And Monitoring

    In this chapter, all commands are described in alphabetical order. For more detailed information on using and configuring the OmniAccess 5740 USG, refer to the OmniAccess 5740 Unified Services Gateway CLI Configuration Guide.

  • Page 77: Aaa Authentication Console

    The method-list to be associated with dot1x clients should contain only RADIUS server groups as its methods. ARAMETERS Parameter Description Name of the method-list. method-list-name XAMPLE ALU(config)# aaa authentication dot1x m2 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 78: Aaa Authentication Enable

    Note: The client-type 'Remote-Login' is a reference to SSH and Telnet clients. ARAMETERS Parameter Description Name of the method-list. method-list-name XAMPLE ALU(config)# aaa authentication remotelogin m1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 79: Aaa Authentication Web

    The 'no' command brings the default back into effect. ARAMETERS Parameter Description The text to be used as prompt for the prompt-text password. XAMPLE ALU(config)# aaa authentication password-prompt p1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 80: Aaa Authentication Username-Prompt

    (You can enter a multi-lined descriptive message.) Used delimiting character to end the delimiter message. XAMPLE ALU(config)# aaa authentication banner @Only authorized access permitted.@ Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 81: Aaa Login-Success Banner

    (You can enter a multi-lined descriptive message.) Used delimiting character to end the delimiter message. XAMPLE ALU(config)# aaa authentication success-message $Login attempt successfull.$ Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 82: Aaa Login-Fail Banner

    – empty radius/TACACS+ groups, etc. ARAMETERS Parameter Description Name of the method-list. name Authentication method to be included in methods the method-list. XAMPLE ALU(config)# aaa method-list m1 rad1 tac1 local Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 83: Aaa Services

    You cannot enter a RADIUS server group as ‘local’ or ‘enable’, as they are reserved keywords for pre-defined authentication methods. ARAMETERS Parameter Description Name of the RADIUS server group. name EFAULT ALUE None. XAMPLE ALU(config)# aaa server-group radius rad1 ALU(config-srv-grp-rad1)# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 84: Aaa Server-Group Tacacs

    You cannot enter a TACACS+ server group as ‘local’ or ‘enable’, as they are reserved keywords for pre-defined authentication methods. ARAMETERS Parameter Description Name of the TACACS+ server group. name EFAULT ALUE None. XAMPLE ALU(config)# aaa server-group tacacs tac1 ALU(config-srv-grp-tac1)# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 85: Certificate

    HTTPS connection. ARAMETERS Parameter Description Certificate identity. name LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# certificate ALUCA ALU(config-ALUCA)# ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 86: Clear Known_Hosts

    Description Clears the address key mapping for a ip-address specified IP address. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# clear known_hosts ELEASE ISTORY Release 2.3: command was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 87: Clear Logging

    The session ID can be obtained from the ‘show aaa-users’ command. ARAMETERS Parameter Description Clears the session corresponding to the session-id specified AAA session ID. XAMPLE ALU(config)# clear session 5 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 88: Clock Set

    ALU(config)# clock set 11:50:01 09/29/2009 The system clock is changed. Current setting is Tue Sep 29 11:50:01 2009 ELEASE ISTORY Release 2.3.2: parameter [timezone <zone> <sub-zone>] was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 89: Clock Synchronize

    120 minutes This command has no output. To verify the settings, use the ‘show clock’ command described in this section. ELEASE ISTORY Release 2.3.2: parameter vrf <vrf-name> was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 90: Clock Timezone

    <zone> <sub-timezone> zone. EFAULT ALUE GMT/UTC is the default time zone. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# clock timezone asia calcutta ELEASE ISTORY Release 2.3.2: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 91: Copy

    Address name of remote host [10.91.2.87]? Remote Port [ Enter for default ] : Destination Path/File [running-config]? URL specification sanity OK, proceeding with copy (please wait) Copy successful Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 92: Delete All

    This command is entered in the Configuration Mode. This command is used to delete the configuration file from the alu-config directory. ARAMETERS Parameter Description Name of the file to be deleted. file-name XAMPLE ALU(config)# delete config-file backup_config Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 93: Delete Fp-Key

    Note: Enter the file name after user: keyword without any space. ARAMETERS Parameter Description Name of the file to be deleted. file-name XAMPLE ALU(config)# delete user:backup_config Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 94: Dir

    Name --------- ---- ------------- ------ drwx 3072 Sep 15 06:25 cores drwx 12288 Jun 26 06:00 lost+found -rw- 30734 Sep 13 06:46 -rw- 30664 Sep 13 06:45 test Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 95: Enable Secret

    XAMPLE ALU(config)# enable secret test Secret for level 15 is set ALU(config)# enable password pass Secret for level 15 is set Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 96: Hostname

    This command is entered in the Configuration Mode. Use this command to enable/disable the HTTP service. ARAMETERS Parameter Description Enable HTTP service. enable Disable HTTP service. disable XAMPLE ALU(config)# http enable Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 97: Https

    This command is entered in the Configuration Mode. Use this command to enable/disable the HTTPS service. ARAMETERS Parameter Description Enable HTTPS service. enable Disable HTTPS service. disable XAMPLE ALU(config)# https enable Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 98: Import Ca-Cert

    FPkey file path. To copy the certificate fpkey <file-path> into the front panel USB memory. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-ALUCA)# import ca-cert ftp: ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 99: Import Signed-Cert

    FPkey file path. To copy the certificate fpkey <file-path> into the front panel USB memory. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-ALUCA)# import signed-cert cert_Simpson ftp: ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 100: Line Console Baudrate

    Parameter Description Time-out in minutes. 0-35791 Time-out in seconds. 0-60 EFAULT ALUE The default time-out is 20 minutes. XAMPLE ALU(config)#line console exec-timeout 0 ALU(config)#line console exec-timeout 45 15 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 101: Line Vty Exec-Timeout

    ARAMETERS None. XAMPLE ALU# list config-files Permission Size Date modified Name --------- ---- ------------- ------ -rw- 10464 Dec 26 15:25 my-config -rw- 10461 Dec 25 08:13 startup-config Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 102: Load Config-File

    (numerically lower) will be buffered. ARAMETERS Parameter Description Priority level. Logging buffer size. 4-1024 EFAULT ALUE By default, logging is sent to the buffer. XAMPLE ALU(config)# logging buffered priority 5 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 103: Logging Console

    This command is entered in the Configuration Mode. This enables logging of messages. ARAMETERS None. EFAULT ALUE By default, logging of messages is enabled. XAMPLE ALU(config)# logging on Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 104: Logging Rate-Limit

    To limit the number of messages coming from ACL's CLI plugin to 10 in a second, execute the following command: ALU(config)#logging rate-limit 10 tag cli subtag acl Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 105: Logging Rate-Limit Unique

    No preference is given to unique messages with this command. ARAMETERS None. XAMPLE ALU(config)# logging rate-limit no unique Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 106: Logging Remote

    Kernel messages. ARAMETERS Parameter Description Priority level of the messages. EFAULT ALUE By default, messages with a priority of 5 and lower will be logged. XAMPLE ALU(config)# logging system Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 107: Logging Watermark

    ARAMETERS Parameter Description Name of the directory to be created. fpkey:|user: XAMPLE ALU(config) # mkdir fpkey: Directory []? alutest ALU(config) # mkdir user: Directory []? alutest Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 108: Modem

    NO AAA AUTHENTICATION PASSWORD PROMPT no aaa authentication password-prompt This command is entered in the Configuration Mode. The 'no' command brings the default password into effect. The default password-prompt is "Password:". Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 109: No Aaa Authentication Success-Message

    NO AAA AUTHENTICATION WEB no aaa authentication web <method-list-name> This command is entered in the Configuration Mode. The ‘no’ command removes the associated method-list from the web client-type. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 110: No Aaa Method-List

    NO CLOCK TIMEZONE no clock timezone This command is entered in the Configuration Mode. This command will remove the timezone settings, and sets it to the default, GMT/UTC. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 111: No Enable-Authentication

    NO LOGGING ON no logging on This command is entered in the Configuration Mode. This command disables the functionality of logging the messages. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 112: No Logging Rate-Limit

    This command is entered in the Configuration Mode. The ‘no’ command deletes the global RADIUS deadtime value from the configuration, and resets it to default (for all servers that do not have a server specific deadtime value). Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 113: No Radius-Server Key

    NO SNMP SERVER GROUP no snmp-server group <group-name> <security-name> security- model {v1|v2c|v3} This command is entered in the Configuration Mode. This command removes the configured USM group. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 114: No Snmp-Server User

    This command is entered in the Configuration Mode. The ‘no’ command deletes the global TACACS+ key from the configuration, and resets it to default (for all servers that do not have a server specific key). Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 115: No Tacacs-Server Timeout

    (for all servers that do not have a server specific timeout value). NO USERNAME no username <user-name> This command is entered in the Configuration Mode. The ‘no’ command deletes the specified user account. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 116: Package Backup

    Username [Enter for none] : user1 Password : Backing up Applications package... Creating... Uploading file. This could take a while...Completed. ELEASE ISTORY Release 2.3: parameter vrf <vrf-name> was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 117: Package Install

    Username [Enter for none] : user1 Password : Downloading remote file. This could take a while... Verifying package... NPM v1.0 format Checking the package type ... Release: 3.0.0.82.0 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 118 Do you want to save config before proceeding ([y]/n) : y Building configuration... [OK] Setting Default image to 3.0.0.82.0... ELEASE ISTORY Release 2.3: parameter vrf <vrf-name> was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 119: Package Install Flash

    Do you want to save config before proceeding ([y]/n) : n Verifying and Extracting LoL image ================================== Checking for free space in User area...OK Extracting LoL image...OK Verifying and Decompressing flash images ======================================== Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 120: Package Remove

    Description Name of the package to be removed. package-name XAMPLE To remove 3.0.0.81.0 package: ALU(config)# package remove 3.0.0.81.0 Remove package 3.0.0.81.0? (y/[n]) : y Uninstalling application package 3.0.0.81.0...OK. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 121 No : Manually run set-default at a later time Proceed? (y/[n]) : y Do you want to save config before proceeding ([y]/n) : y Building configuration... [OK] Setting Default image to 3.0.0.82.0... Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 122: Ping

    PING ping [vrf <vrf-name>] {<ip-address>|<hostname>} ESCRIPTION This command is entered in the Configuration Mode. Use this command to check the connectivity between OmniAccess 5740 USG and any remote machine. ARAMETERS Parameter Description If the VRF name is specified, the packets...

  • Page 123: Power Slot

    The slot number. slot-number Use this to power down a slot. Use this to power up a slot. down XAMPLE ALU# power slot 1 down ALU# power slot 1 up Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 124: Radius-Server

    Number of seconds that the timeout <1-1000> OmniAccess 5740 USG should wait for a reply from the RADIUS server before retrying. XAMPLE ALU(config-srv-grp-rad1)# radius-server 1.1.1.1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 125: Radius-Server Auth-Port

    The time (in minutes) that should elapse, deadtime <1-1440> before you try again to connect to a non- responding server. EFAULT ALUE The default deadtime value is 5 minutes. XAMPLE ALU(config)# radius-server deadtime 10 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 126: Radius-Server Key

    Number of retries after each “timeout” retransmit <1-100> interval, before giving up on the server. EFAULT ALUE The default retransmit value is 3. XAMPLE ALU(config)# radius-server retransmit 5 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 127: Radius-Server Timeout

    OmniAccess 5740 USG should wait for a reply from the RADIUS server before retrying. EFAULT ALUE The default timeout value is 5 seconds. XAMPLE ALU(config)# radius-server timeout 10 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 128: Reload

    ALU# The system is going down NOW !! Sending SIGTERM to all processes. Terminated Sending SIGKILL to all processes. Please stand by while rebooting the system. Restarting system. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 129: Reload Factory Defaults

    ESCRIPTION This command is entered in the Configuration Mode. This command is used to reload OmniAccess 5740 USG with the factory default configuration. When this command is executed, the startup configuration is erased, and the chassis is rebooted with the factory default configuration.

  • Page 130: Rmdir

    "write memory" can also be used to save the running configuration to the start-up configuration. ARAMETERS None. XAMPLE ALU# save running-config Saving to startup-config ... Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 131: Save Running-Config File-Name

    This command is entered in the Configuration Mode. This command is used to save the information in the log buffer. By default, the information is saved in the user:log/default.log file. ARAMETERS None. XAMPLE ALU# save logging Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 132: Save Logging File Name

    (0 -4) priorities are stored. By default, messages up to informational level (= 6) are stored. ALU# save logging priority 5 exact This saves log messages with priority equal to 5. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 133: Save Logging String

    ARAMETERS Parameter Description Name of the of the log messages to be tag-name saved. XAMPLE ALU# save logging tag cli Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 134: Service Timestamps Log

    This command is entered in the Configuration Mode. This command is used to display the date and time of the log messages. ARAMETERS None. EFAULT ALUE By default, Service timestamps log is enabled. XAMPLE ALU(config)# service timestamps log Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 135: Show Aaa

    None. XAMPLE ALU(config)# show aaa aaa services username alu password alu username admin password admin username recovery password 5 da4e1483c42e9b578288b7501d250887 username superadmin password 5 03c7c0ace395d80182db07ae2c30f034 enable password admin Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 136: Show Aaa-Client-Methodlist-Associations

    ARAMETERS None. XAMPLE ALU(config)# show aaa-local-users-details username alu password alu username alu password admin username recovery password 5 da4e1483c42e9b578288b7501d250887 username superadmin password 5 03c7c0ace395d80182db07ae2c30f034 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 137: Show Aaa-Methodlists

    RADIUS Server groups configured. ARAMETERS None. XAMPLE ALU(config)# show aaa-radius aaa server-group radius rad1 radius-server 1.1.1.1 aaa server-group radius rad3 radius-server 1.1.1.1 auth-port 300 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 138: Show Aaa-Tacacs

    ARAMETERS None. XAMPLE ALU(config)# show aaa-users Session-ID UserName ClientType Remote-Address superadmin Console guest 10.91.2.87 firewall-admin TELNET 154.34.222.1 superadmin HTTP 143.23.34.12 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 139: Show Access-Server Status

    Sun Dec 25 2005 by ! Statlog Configuration logging on logging buffered priority 7 logging buffered size 10000 no logging console logging system 4 logging remote 10.91.0.94 port 514 priority 7 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 140 5 b96bea0fa10dc5b85cd6b6078f16a356 ip domain-list alu.com ip domain-name . ip name-server 10.91.0.249 interface loopback1 ip address 203.124.211.225/27 no shutdown interface GigabitEthernet3/0 description GigabitEthernet 3/0 ip address 59.144.47.105/24 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 141 144000 exceed-action drop class exclude-police-map interface GigabitEthernet3/1 service-policy out traffic-out-policy service-policy in traffic-in-policy line vty 4 transport input none line con 0 no exec-timeout firewall session default timeout tcp 7200 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 142: Show Certificate Ca-Cert

    Modulus (1024 bit): 00:b2:bf:d4:a9:46:f0:d3:38:3c:46:e1:52:0e:e4: 31:1c:0c:81:70:90:1a:95:dd:79:44:c6:e3:1b:c6: a3:ec:d7:d5:18:9e:c2:d0:14:a3:8c:35:c0:34:e1: 9f:ff:2c:ae:fd:0e:b2:6f:5a:59:3e:c8:67:e8:f8: a7:a2:ba:84:d9:e5:0a:cc:af:e0:cf:67:36:a4:e6: f5:22:d5:88:72:3c:aa:85:be:92:06:87:78:6a:6e: 69:3b:ab:73:bd:c0:5c:eb:85:1d:18:76:c4:f8:aa: a9:c1:bb:14:1f:15:38:cc:8f:8c:e6:5c:3c:a1:b8: 10:4b:1a:98:c2:7d:b4:d0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:98:D2:25:D3:18:12:A1:C7:4B:7A:98:D2:D8:25:73:2B:6B:AE:B1 X509v3 Authority Key Identifier: keyid:05:98:D2:25:D3:18:12:A1:C7:4B:7A:98:D2:D8:25:73:2B:6B:AE:B1 DirName:/CN=CA_0x01/O= Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 143 ALU(config)# show certificate ca-cert ALUCA pem -----BEGIN CERTIFICATE----- MIICMjCCAZugAwIBAgIBADANBgkqhkiG9w0BAQQFADAhMRAwDgYDVQQDFAdDQV8w eDAxMQ0wCwYDVQQKEwROZXRkMB4XDTA1MTIyODEyMzA0OVoXDTA2MDEyNzEyMzA0 OVowITEQMA4GA1UEAxQHQ0FfMHgwMTENMAsGA1UEChMETmV0ZDCBnzANBgkqhkiG 9w0BAQEFAAOBjQAwgYkCgYEAsr/UqUbw0zg8RuFSDuQxHAyBcJAald15RMbjG8aj 7NfVGJ7C0BSjjDXANOGf/yyu/Q6yb1pZPshn6PinorqE2eUKzK/gz2c2pOb1ItWI cjyqhb6SBod4am5pO6tzvcBc64UdGHbE+KqpwbsUHxU4zI+M5lw8obgQSxqYwn20 0M0CAwEAAaN6MHgwHQYDVR0OBBYEFAWY0iXTGBKhx0t6mNLYJXMra66xMEkGA1Ud IwRCMECAFAWY0iXTGBKhx0t6mNLYJXMra66xoSWkIzAhMRAwDgYDVQQDFAdDQV8w eDAxMQ0wCwYDVQQKEwROZXRkggEAMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEE BQADgYEADAuSnB1grGLgf/MdnHvo3mcJQ6EuR9F4wRf2DKrvUVXim1+KDp+6UVVX SCtMj/drfGVLz5my3IMt2pljDK1rM2YZke81y93YdEg0pkDC8I22ijJjjPCCFBRa o1besVBCb7MP6vEmvi7OnmH1JMOIqxNCcIKA+fHSjwLVW2L/Psw= -----END CERTIFICATE----- ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 144: Show Certificate Identity

    LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# show certificate identity certificate SomeOtherCA subject-name /O=ALU/C=IN/CN=CM Burns certificate ALUCA subject-name /CN=Bart Simpson/O=ALU/C=US ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 145: Show Certificate Signed-Cert

    Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public Key: (512 bit) Modulus (512 bit): 00:ba:f3:af:cf:09:49:f4:ef:13:df:a7:e3:ee:28: 32:b5:ef:06:e2:f8:c9:31:6d:44:44:81:d2:3f:49: 82:c9:6b:5a:d1:73:d0:7b:af:3f:5e:82:34:15:54: 49:a7:d3:5e:69:29:c4:72:57:25:6a:ee:02:f8:2c: dd:59:2f:03:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 146 ALU(config)# show certificate signed-cert cert_Simpson pem -----BEGIN CERTIFICATE----- MIICLTCCAZagAwIBAgIBCDANBgkqhkiG9w0BAQQFADAhMRAwDgYDVQQDFAdDQV8w eDAxMQ0wCwYDVQQKEwROZXRkMB4XDTA2MDEyNzA5MjIwM1oXDTA3MDEyNzA5MjIw M1owMzELMAkGA1UEBhMCVVMxDTALBgNVBAoTBE5ldEQxFTATBgNVBAMTDEJhcnQg U2ltcHNvbjBcMA0GCSqGSIb3DQEBAQUAA0sAMEgCQQC686/PCUn07xPfp+PuKDK1 7wbi+MkxbUREgdI/SYLJa1rRc9B7rz9egjQVVEmn015pKcRyVyVq7gL4LN1ZLwOt AgMBAAGjgaYwgaMwCQYDVR0TBAIwADAsBglghkgBhvhCAQ0EHxYdT3BlblNTTCBH ZW5lcmF0ZWQgQ2VydGlmaWNhdGUwHQYDVR0OBBYEFIh1LUes6KvDX5/hk2t+B5yj sCTLMEkGA1UdIwRCMECAFAWY0iXTGBKhx0t6mNLYJXMra66xoSWkIzAhMRAwDgYD VQQDFAdDQV8weDAxMQ0wCwYDVQQKEwROZXRkggEAMA0GCSqGSIb3DQEBBAUAA4GB AAwwOpa7Kr5sU0e5XbRAHQ5KhfOZV4IHWKG/9jY6A5uBej1s+rckcHjEFXVKWGmt qj2C8a4adoJ5uUMFJrg0zFnutguCS6JwKipyTBrHqHQw+yRSIbkv77lWrvFFdQtG L+SU7Iy2mUeoaMOoDONW8LxUUwLtwBcecr57/RF2kQXb -----END CERTIFICATE----- ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 147: Show Chassis

    Opteron CPU Frequency: 2193 MHz LoL firmware version: 2.2.71 Loader version: 2.35 ALU-OS version: 3.0.0 Serial number: DG0818000008 Revision: 00 Version: 03 BP - ALU OA740 chassis (passive) Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 148 Except on the first page, right running head: Heading1 or Heading1NewPage text (automatic) show chassis Slot number: 29 Part number: 902610-90 Manufacturer: Description: Serial number: DG0812000678 Version: 00 Revision: 00 Base MAC: 00:11:8b:02:91:00 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 149: Show Clock

    Timezone set to ASIA/CALCUTTA Configured to synchronize using RTC every 10 minutes Last successful synchronization : 12 secs ago ELEASE ISTORY Release 2.3.2: ‘Timezone’ parameter was added in the output. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 150: Show Environment

    PCI configuration status: Ready Reported at Fri Apr 23 15:28:43 2010 (1 seconds ago) Temperature reading: 30.000C Opteron temperature : 33.0C Opteron status : Active Voltage reading: 5.04V(0%) 1.31V(1%) 2.49V(0%) Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 151: Show Led

    LEDs on the front panel. ARAMETERS None. XAMPLE ALU> show led Name State ---- ----- Primary SC green Standby SC vacant Front panel ----- ----- Active green Modem Console green Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 152: Show Logging

    2005 Oct 13 03:31:09: %CM-5-LOG: SLOT L2 (83000019) is vacated 2005 Oct 13 03:31:09: %CM-6-LOG: LIVENESS 2[83000019] will report once on failure 2005 Oct 13 03:31:12: %CM-6-LOG: SCAN card removed from slot 2 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 153: Show Logging Priority

    2005 Oct 13 14:13:06: %ntpdate-3-LOG: No server suitable for synchronization found The following example shows only the messages with priority 3. > show logging priority 3 exact 2005 Oct 13 14:13:06: %ntpdate-3-LOG: No server suitable for synchronization found Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 154: Show Logging String

    (config)# show logging string temperature 2006 Sep 19 09:59:23: %CM-7-LOG: SCAN chassis temperature 47; setting fan speed to high succeeded 2006 Sep 19 10:00:59: %ENVAGT-4-LOG: EA.7: Cannot read temperature sensor Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 155: Show Logging Tag

    Oct 13 10:44:47: %CLI-6-LOG: A Client Logged in to the Box through SSH from 10.91.2.87 2005 Oct 13 10:45:41: %CLI-6-LOGSRV: Logging buffer size set to 128K by User:privileged user. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 156: Show Memory

    0 kB SwapFree: 0 kB Note: In addition to the total memory displayed, 128 MB is reserved for data buffers. This is not displayed in the total system memory. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 157: Show Packages

    Routing Information Protocol 3.0.0.82.0 NHRP Next Hop Resolution Protocol 3.0.0.82.0 Routing-base Routing Infrastructure 3.0.0.82.0 SNMP SNMP-v2 support 3.0.0.82.0 TR069 TR069 Client 3.0.0.82.0 Secure Shell Access 3.0.0.82.0 Security Network Security Services Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 158: Show Processes

    --nofork --nat_traversal 492 root 2548 S pim pim pim 493 root 2048 S ospfd ospfd initial 494 root 2272 S nhrpd 495 root 2180 S mcribmgr mcribmgr initial Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 159 2691 root 344 S sleep 30 2700 root 672 S rshd 2701 root 464 S sh -c ps aux 2702 root 636 R ps aux Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 160: Show Running-Config

    5 logging remote 1.1.1.1 port 514 priority 7 service timestamps log hostname ndm-70 snmp enable ! PVST Global configuration spanning-tree modem disable ! SNMP Configurations --More-- Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 161: Show Snmp

    .1.3.6.1 included snmp-server access testgroup security-model v3 auth read read- view write write-view ELEASE ISTORY Release 2.3: command was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 162: Show Snmp Access

    ALU(config)# show snmp access --------------------------------------- Group Name: testgroup Security Level: auth Security model: v3 Read View: read-view Write View: write-view --------------------------------------- ELEASE ISTORY Release 2.3: command was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 163: Show Snmp Details

    : support@alcatel-lucent.com name alu1 System Location : [Not configured] Community-Access Community-String ---------------- ---------------- read-only private read-write [Not configured] Trap-Host Trap-Port Version Trap-Community --------- --------- ------- -------------- 1.1.1.1 test 1.1.1.11 test1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 164: Show Snmp Group

    UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# show snmp group --------------------------------------- Group Name : testgroup Security Model: v3 Security Name: user123 --------------------------------------- ELEASE ISTORY Release 2.3: command was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 165: Show Snmp Stats

    0 Proxy drops 557 SNMP packets output 0 Too big errors 2 No such name errors 0 Bad values errors 0 General errors 557 Get Responses 0 Traps Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 166: Show Snmp User

    UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# show snmp user --------------------------------------- User Name : user123 Authentication Protocol: MD5 Security Level: Auth --------------------------------------- ELEASE ISTORY Release 2.3: command was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 167: Show Snmp View

    ARAMETERS None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# show snmp view ViewName Status MIBFamily -------- ------ --------- view123 included .1.3.6.1 ELEASE ISTORY Release 2.3: command was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 168: Show Startup-Config

    5 logging remote 1.1.1.1 port 514 priority 7 service timestamps log hostname ndm-70 ! PVST Global configuration spanning-tree snmp enable modem disable ! SNMP Configurations --More-- Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 169: Show System-Status

    ARAMETERS None. XAMPLE ALU(config)# show system-status Slot Description Status -------------------------------------------------------- 8-port copper GigE Card Ready Services engine Card Ready Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 170: Show Tech-Support

    7 This command shows information about all the slots too. Since the output of all these commands would be very long, the complete output is not included here. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 171: Show Version

    Description Read-only/read-write community string. community-string Community string is the text string used to authenticate messages between a management station and an agent. XAMPLE ALU(config)# snmp agent rocommunity private Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 172: Snmp Disable

    ESCRIPTION This command is entered in the Configuration Mode. This command is used to enable the SNMP service. ARAMETERS None. EFAULT None XAMPLE ALU(config)# snmp enable Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 173: Snmp-Server Access

    A view name that defines the list of notify-view-name notifications that can be sent to each user belonging to a specific group. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 174 ALU(config)# snmp-server access testgroup security-model v3 auth read read-view write write-view notify notify-view ELEASE ISTORY Release 2.3: command was added. Release 2.3.2: Parameter context <context-name> {exact|prefix} was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 175: Snmp-Server Group

    Defines the SNMP version to be security-model {v1|v2c|v3} associated with the group. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# snmp-server group testgroup user123 security-model ELEASE ISTORY Release 2.3: command was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 176: Snmp-Server User

    This should be a minimum of 8 characters. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# snmp-server user user123 auth MD5 pass123456 priv DES test123456 ELEASE ISTORY Release 2.3: command was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 177: Snmp-Server View

    When this option is selected, the MIB excluded family is included from the view. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# snmp-server view view123 .1.3.6.1 included ELEASE ISTORY Release 2.3: command was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 178: Snmp System

    Parameter Description Contact details of the SNMP system. contact-details Physical location of the SNMP system. location Name of the SNMP system. name XAMPLE ALU(config)# snmp system contact support@alcatel-lucent.com Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 179: Snmp Trap

    This command is entered in the Configuration Mode. This command enables the agent to send the SNMP traps to the configured host. ARAMETERS None. XAMPLE ALU(config)# snmp trap enable Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 180: Ssh

    Last login: Mon Dec 6 17:34:48 2004 [root@linux-sw root]# exit logout Connection to 172.25.19.1 closed. ELEASE ISTORY Release 2.3: parameter vrf <vrf-name> was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 181: Ssh

    OmniAccess 5740 USG and the TACACS+ server. Number of seconds that the timeout <1-1000> OmniAccess 5740 USG should wait for a reply from the TACACS+ server before retrying. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 182 Except on the first page, right running head: Heading1 or Heading1NewPage text (automatic) tacacs-server XAMPLE ALU(config-srv-grp-tac1)# tacacs-server 1.1.1.2 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 183: Tacacs-Server Auth-Port

    If this keyword is used, the password given is considered to have been given in an encrypted format. EFAULT ALUE The default key is “” (empty string). XAMPLE ALU(config)# tacacs-server key test1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 184: Tacacs-Server Timeout

    This command is entered in the Configuration Mode. Use this command to enable/disable the Telnet service. ARAMETERS Parameter Description Enable telent service enable Disable telnet service disable XAMPLE ALU# telnet enable Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 185: Telnet

    IP address of the remote host. ip address Host name of the remote host. hostname LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU> telnet 10.91.0.1 ELEASE ISTORY Release 2.3: parameter vrf <vrf-name> was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 186: Terminal Length

    (numerically lower) priorities in the terminal window. This terminal could be launched through SSH or Telnet. ARAMETERS Parameter Description Priority level of the messages. XAMPLE ALU(config)# terminal monitor Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 187: Traceroute

    (10.91.10.178), 30 hops max, 38 byte packets. 10.91.0.1 (10.91.0.1) 0.700 ms 0.703 ms 0.621 ms 10.91.10.178 (10.91.10.178) 0.951 ms 0.961 ms 0.960 ms ELEASE ISTORY Release 2.3: parameter vrf <vrf-name> was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 188: Username Password

    The command "erase startup-config" can also be used to delete the startup- config permanently. ARAMETERS None. XAMPLE ALU(config)# write erase Are you sure you want to erase startup-config file yes/no [yes]:yes [OK] startup-config file erased. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 189 Left running head: Chapter name (automatic) System Configuration and Monitoring Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 190: Virtual Router Redundancy Protocol

    For more detailed information on using and configuring the VRRP Protocol, refer to the OmniAccess 5740 Unified Services Gateway CLI Configuration Guide. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 191: Debug Vrrp Control

    Parameter Description Displays all the VRRP debug messages. Displays the VRRP protocol-related debug protocol messages. Displays the VRRP management debug vrrpfs messages. XAMPLE ALU# debug vrrp management all Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 192: Interface

    NO VRRP GROUP ID PREEMPT no vrrp <1-8> preempt This command is entered in the Interface Configuration Mode. This command is used to disable pre-emption of the VRRP group. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 193: No Vrrp Group-Id Priority

    ID TRACK INTERFACE no vrrp <1-8> track-interface This command is entered in the Interface Configuration Mode. This command removes the tracking of the interface in a VRRP group. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 194: Show Vrrp All

    [brief] ESCRIPTION This command is entered in the Super User Mode, Configuration Mode or Interface Configuration Mode. This command displays a brief or detailed status of all the VRRP groups configured on the OmniAccess 5740 USG. ARAMETERS Parameter Description This keyword displays a detailed information on all the VRRP groups.

  • Page 195: Show Vrrp Interface

    Advertisement interval is 1.000 sec Preemption enabled Priority is 100 Master Router is 10.1.1.1 (local), priority is 100 Master Advertisement interval is 1.000 secs Master Down interval is 3.000 secs Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 196: Vrrp Group-Id Authentication Text

    This command is used in the Interface Configuration Mode. This command is used to set authentication for the VRRP group. The authentication string can have a maximum of 8 characters. Note: The OmniAccess 5740 USG supports null authentication and plain-text authentication. ARAMETERS Parameter Description Specifies the group number.

  • Page 197: Vrrp Group-Id Description

    Parameter Description Specifies the group number. It is in the range 1 - 8. Primary IP address of the VRRP group. ip-address XAMPLE ALU(config-if GigabitEthernet3/0)#vrrp 5 ip 10.91.0.8 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 198: Vrrp Group-Id Ip Ip-Address Secondary

    ARAMETERS Parameter Description Specifies the group number. It is in the range 1 - 8. EFAULT ALUE Pre-emption is enabled by default. XAMPLE ALU(config-if GigabitEthernet3/0)# vrrp 7 preempt Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 199: Vrrp Group-Id Priority Value

    Specifies the group number. It is in the range 1 - 8. Refers to the priority level which ranges between value 1- 254. EFAULT ALUE By default, priority is 100 XAMPLE ALU(config-if GigabitEthernet3/0)# vrrp 7 priority 104 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 200: Vrrp Group-Id Timers Advertise

    50-999 by using the keyword ‘msec’. Its in the range: 50 - 999 milliseconds. EFAULT ALUE Default is one second. XAMPLE ALU(config-if GigabitEthernet3/0)# vrrp 7 timers advertise 5 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 201: Vrrp Group-Id Timers Learn

    Specifies the group number. It is in the range 1 - 8. EFAULT ALUE By default, the master advertisement learning interval is disabled. XAMPLE ALU(config-if GigabitEthernet3/0)# vrrp 7 timers learn Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 202: Vrrp Group-Id Track-Interface

    1-255 EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-if GigabitEthernet3/0)# vrrp group track-interface serial 1/0:0 decrement 60 ELEASE ISTORY Release 3.0: parameter ‘decrement <1-255>’ was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 203 Left running head: Chapter name (automatic) Virtual Router Redundancy Protocol Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 204: Part 2 Lan Interfaces And Configuration

    To switch to the beta version, import color def’ns from beta-colors.fm Part 2 LAN Interfaces and Configuration Pagination: Numeric & continuous Optional footer: Alcatel-Lucent with Manual title (to set, preceding redefine ManualTitle OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide section of Beta Beta Beta Beta variable) book...
  • Page 205 Left running head: Chapter name (automatic) Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 206: L3 Interface Commands

    This chapter includes table of parameters, default values, and configuration examples for the physical interface as quick-start and reference information. The commands are described in alphabetical order. For more detailed information about using and configuring the physical interfaces, refer OmniAccess 5740 Unified Services Gateway CLI Configuration Guide. Alcatel-Lucent...

  • Page 207: Clear Counters

    Mode. This command clears the counters on a specific GigE interface. ARAMETERS Parameter Description This command clears the counters on slot/port the GE interface. (:subinterface_number) XAMPLE ALU(config)# clear counters GigabitEthernet 3/0 Clear counters on this interface [confirm]y ALU(config)# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 208: Duplex

    This command is entered in the Interface Configuration Mode. This command configures duplex operation on an interface. ARAMETERS None. EFAULT ALUE The default Duplex mode is “auto”. XAMPLE ALU(config-if GigabitEthernet3/0)# duplex full Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 209: Encapsulation Dot1Q

    3. Only one VLAN ID per sub-interface is allowed. ARAMETERS Parameter Description VLAN ID. 2-4094 LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-subif GigabitEthernet3/0:1)# encapsulation dot1q 10 ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 210: Flowcontrol

    This command is entered in the Configuration Mode. This command allows you to configure GigE interface. ARAMETERS Parameter Description Slot and port number of the interface. slot/port EFAULT ALUE None. XAMPLE ALU(config)# interface GigabitEthernet 3/0 ALU(config-if GigabitEthernet3/0)# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 211: Interface

    ARAMETERS Parameter Description IP address with subnet mask. ip-address subnet-mask IP address with prefix length. ip-address/prefix-length EFAULT ALUE None. XAMPLE ALU(config-if GigabitEthernet3/0)# ip address 20.20.20.20/24 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 212: Mtu

    “off”. NO MTU no mtu This command is entered in the Interface Configuration Mode. This command restores the interface default Maximum Transmission Unit (MTU).The default MTU is 1500. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 213: No Speed

    0 output errors, 0 collisions, 0 interface resets 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier, 0 pause output 0 output buffer copied, 0 interrupts, 0 failures Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 214 0 output errors, 0 collisions, 0 interface resets 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier, 0 pause output 0 output buffer copied, 0 interrupts, 0 failures Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 215: Show Interfaces

    0 output errors, 0 collisions, 0 interface resets 0 babbles, 0 late collision, 0 deferred 2 lost carrier, 2 no carrier, 0 pause output 0 output buffer copied, 0 interrupts, 0 failures Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 216: Speed

    This command is entered in the Interface Configuration Mode. This command configures the interface speed. ARAMETERS None. EFAULT ALUE The default speed is “auto”. XAMPLE ALU(config-if GigabitEthernet3/0)# speed 100 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 217 Left running head: Chapter name (automatic) L3 Interface Commands Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 218: Switching On L2 Ports

    For more detailed information about using and configuring switching on the L2 cards, refer OmniAccess 5740 Unified Services Gateway CLI Configuration Guide. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 219: Clear Lan Counters

    Specifies the slot number of the slot-number interface. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# clear lan counters slot 0 Clearing LAN counters ..ELEASE ISTORY Release 2.3.2: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 220: Clear Mac-Address-Table Dynamic

    ARAMETERS None. EFAULT ALUE The default Duplex mode is “auto”. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-if switchport1/0)# duplex full ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 221: Interface Switchport

    This command is entered in the Interface Configuration Mode. This command deletes the access VLAN-ID configured on the port. This makes it to switch over to the pure bridging mode. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 222: No Switchport Hybrid Native Vlan

    <2-4094> <2-4094> This command is entered in the Interface Configuration Mode. This command deletes the range of trunk VLANs configured on the interface. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 223: Show Chassis

    ESCRIPTION This command is entered in the Super User Mode or Configuration Mode. This command displays all the cards configured on the OmniAccess 5740 USG. Issue this command to check if the L2 card is installed appropriately in the system.
  • Page 224 Version: 01 BP - ALU OA740 chassis (passive) Slot number: 29 Part number: 902610-90 Manufacturer: Description: ALU OA740 chassis Serial number: ND0608000093 Version: 00 Revision: 00 Base MAC: 00:11:8b:00:dd:00 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 225: Show Interfaces

    0 babbles, 0 late collision, 0 deferred 0 Out multicast, 0 lost carrier, 0 no carrier, 0 pause output 0 output buffer failures, 0 output buffers swapped out Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 226: Show Lan Counters

    0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier 0 output buffer copied, 0 interrupts, 0 failures ELEASE ISTORY Release 2.3.2: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 227: Show Mac-Address-Table

    Dynamic 0008.a16b.6597 switchport0/1 Dynamic 0008.a170.59ea switchport0/1 Dynamic 0008.a170.5e1d switchport0/1 Dynamic 0008.a170.5e21 switchport0/1 Dynamic 0008.a177.fecc switchport0/1 Dynamic 0008.a177.fece switchport0/1 Dynamic 0008.a178.4b19 switchport0/1 Dynamic 0008.a17b.ba3d switchport0/1 Dynamic 000c.f1c3.85a9 switchport0/1 Dynamic Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 228: Show Vlan

    ALU(config)# show vlan Brief VLAN_ID Status Interface name Mode -------- ---------- ------------------- ----- Inactive switchport0/2 No-Mode switchport0/3 No-Mode switchport0/4 No-Mode switchport0/5 No-Mode Inactive switchport0/0 Access switchport0/7 Access switchport0/6 Trunk Inactive switchport0/1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 229: Shutdown

    ARAMETERS None. EFAULT ALUE The default speed is “auto”. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-if switchport1/0)# speed 100 ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 230: Switchport Access Vlan

    Native VLAN for hybrid mode in the range 2-4094. ARAMETERS Parameter Description The VLAN ID configured. 2-4094 XAMPLE ALU(config-if switchport0/0)# switchport hybrid native vlan 7 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 231: Switchport Mode {Trunk|Hybrid

    VLANs for trunk mode in the range 2-4094. Multiple VLANs can be configured. ARAMETERS Parameter Description The VLAN ID configured. <2-4094>... XAMPLE ALU(config-if switchport1/0)# switchport trunk allowed vlan 3 7 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 232: Switchport Trunk Allowed Vlan Range

    Low Vlan ID and the high Vlan ID. <2-4094> <2-4094> LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-if switchport1/0)# switchport trunk allowed vlan range 30 40 ELEASE ISTORY Release 2.3.2: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 233 Left running head: Chapter name (automatic) Switching on L2 Ports Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 234: Per Vlan Spanning Tree

    This chapter includes tables of parameters, default values, and configuration examples for bridging configurations as quick-start and reference information. The commands are described in alphabetical order. For more detailed information about using and configuring the PVST+, refer to the OmniAccess 5740 Unified Services Gateway CLI Configuration Guide. Alcatel-Lucent...

  • Page 235: Per Vlan Spanning Tree Cli Commands

    TREE VLAN SPANNING DISABLED no spanning-tree [vlan <1-4094>] spanning-disabled This command is entered in the Interface Configuration Mode. The “no” command enables the Spanning-tree on a specified interface. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 236: Show Spanning-Tree Brief

    DIS 0 00.11.8b.00.27.12 128.5 switchport0/4 128.4 DIS 0 00.11.8b.00.27.12 128.4 switchport0/5 128.3 DIS 0 00.11.8b.00.27.12 128.3 switchport0/6 128.2 DIS 0 00.11.8b.00.27.12 128.2 switchport0/7 128.1 DIS 0 00.11.8b.00.27.12 128.1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 237: Show Spanning-Tree Summary

    XAMPLE ALU# show spanning-tree summary Name Blocking Listening Learning Forwarding STP Active --------- -------- --------- -------- ---------- ---------- VLAN1 VLAN2 VLAN3 --------------- -------- --------- -------- ---------------- 3 VLANs Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 238: Show Spanning-Tree Vlan

    Port path cost 4, Port priority 128 Designated root has priority 32768, address 00.11.8b.00.27.12 Designated bridge has priority 32768, address 00.11.8b.00.27.12 Designated port Id is 128.8 path cost 0 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 239 Designated bridge has priority 32768, address 00.11.8b.00.27.12 Designated port Id is 128.1 path cost 0 Timers: message age 0, forward delay 0, hold 0 BPDU: sent 0, received 0 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 240: Spanning-Tree Vlan Enable

    ALU(config)# spanning-tree enable Note: In the above example, the VLAN-ID takes a default value of 1. The following example configures spanning tree for vlan 100. ALU(config)# spanning-tree enable vlan 100 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 241: Spanning-Tree Vlan Cost

    ARAMETERS Parameter Description PVST+ port cost. 1-65535 EFAULT ALUE Default value: 4 XAMPLE ALU(config-if switchport1/0)# spanning-tree vlan 100 cost 1000 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 242: Spanning-Tree Vlan Fwd-Time/Hello-Time/Max-Age/Priority

    ALU(config)# spanning-tree enable vlan 100 forward-time 30 ALU(config)# spanning-tree enable vlan 100 hello-time 10 ALU(config)# spanning-tree enable vlan 100 max-age 40 ALU(config)# spanning-tree enable vlan 100 priority 100 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 243: Spanning-Tree Vlan Port-Priority

    - PVST+ Port Priority is configured on a per port basis. ARAMETERS Parameter Description PVST+ port-priority. 0-255 EFAULT ALUE The default value for port-priority is: 128 XAMPLE ALU(config-if switchport1/0)# spanning-tree vlan 100 port- priority 250 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 244: Spanning-Tree Vlan Spanning-Disabled

    Spanning-tree on a specified interface. ARAMETERS Parameter Description Disables the spanning tree for the 1-4094 specified VLAN-ID. EFAULT ALUE None. XAMPLE ALU(config-if switchport1/0)# spanning-tree vlan 100 spanning- disabled Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 245 Left running head: Chapter name (automatic) Per VLAN Spanning Tree + Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 246: Integrated Routing And Bridging

    IRB as quick-start and reference information. In this chapter, all commands are described in alphabetical order. For more detailed information on using and configuring IRB refer to the OmniAccess 5740 Unified Services Gateway CLI Configuration Guide.

  • Page 247: Irb Cli Commands

    VLAN. ARAMETERS Parameter Description VLAN-ID configured on the interface. 1-4094 Note: Vlan ID = 1 can also be configured for IRB. XAMPLE ALU(config)# interface vlan 10 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 248: Show Interfaces Vlan

    2035879 packets output, 0 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier, 0 pause output Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 249 Left running head: Chapter name (automatic) Integrated Routing and Bridging Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 250: 802.1X Port-Based Authentication

    In this chapter, all commands are described in alphabetical order. For more detailed information on using and configuring 802.1X, refer to the OmniAccess 5740 Unified Services Gateway CLI Configuration Guide. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 251: Dot1X Default

    (clients) on an 802.1X-authorized port. Choose this keyword to allow multiple multi-auth authentication on an 802.1X-authorized port. EFAULT ALUE The default is single host mode. XAMPLE ALU(config-if switchport5/0)# dot1x host-mode multi-host Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 252: Dot1X Initialize Interface Switchport

    Indicates the number of times that the 1-10 switch sends an EAP-request/identity frame to the client. EFAULT ALUE The default is 2. XAMPLE ALU(config-if switchport5/0)# dot1x max-request 3 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 253: Dot1X Port-Control

    This command is entered in the Interface Configuration Mode. This command is used to enable periodic reauthentication of the client. ARAMETERS None. EFAULT ALUE By default, this is disabled. XAMPLE ALU(config)# dot1x system-auth-control Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 254: Dot1X Re-Authenticate Interface Switchport

    This command is entered in the Configuration Mode.This command is used to enable 802.1X port-based authentication globally. ARAMETERS None. EFAULT ALUE When enabled, the port-based authentication on the interface will be ‘forced- authorized’. XAMPLE ALU(config)# dot1x system-auth-control Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 255: Dot1X Timeout Quiet-Period

    <1-3600> ESCRIPTION This command is entered in the Interface Configuration Mode. This command sets the number of seconds that the OmniAccess 5740 USG remains in the quiet state following a failed authentication exchange with the client. ARAMETERS...

  • Page 256: Dot1X Timeout Supp-Timeout

    <1-3600> ESCRIPTION This command is entered in the Interface Configuration Mode. This command sets the number of seconds that the OmniAccess 5740 USG waits for a response to an EAP-request/identity frame from the client before retransmitting the request. ARAMETERS...

  • Page 257: No Dot1X Host-Mode

    NO DOT X SYSTEM AUTH CONTROL no dot1x system-auth-control This command is entered in the Configuration Mode. This command is used to disable 802.1X port-based authentication globally. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 258: No Dot1X Timeout Quiet-Period

    X TIMEOUT TX PERIOD no dot1x timeout tx-period [<1-3600>] This command is entered in the Interface Configuration Mode. This command sets the tx-period to its default, 30 seconds. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 259: Show Dot1X

    Status : Authorized Current Identifier : Authenticator state machine State : Authenticated Reauth count: Backend state machine State : Idle Request count : Reauthentication state machine state : Initialize Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 260: Show Dot1X Interface Switchport

    ARAMETERS Parameter Description Switchport slot and port. interface switchport <slot/ port XAMPLE ALU# show dot1x interface switchport 0/0 authenticated-mac 00.0D.62.2B.76.FA Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 261: Show Dot1X Statistics

    5/0 ------------------------------------ 802.1X is enabled on switchport5/0 EAPOL EAPOL EAPOL EAPOL start Logoff Invalid Total Resp/ID Resp/oth LenError Last Last EAPOLVer EAPOLSrc 00.0D.62.2B.76.FA EAPOL Total Req/ID Req/oth Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 262: Port Monitoring

    In this chapter, all commands are described in alphabetical order. For more detailed information on using and configuring port monitoring, refer to the OmniAccess 5740 Unified Services Gateway CLI Configuration Guide. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 263: No Port Monitor Interface Switchport

    Switchport 1/0 being the destination port, i.e, port receives the mirrored data from switchports 1/6 and 1/7. ALU(config-if switchport1/0)# port monitor switchport 1/6 both ALU(config-if switchport1/0)# port monitor switchport 1/7 ingress Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 264: Show Port Monitor

    ARAMETERS Parameter Description The slot and port number of the slot/port switchport. XAMPLE ALU(config)# show port monitor PORT-MONITERING PORT-MONITERED TRAFFIC-TYPE --------------- -------------- ------------ switchport1/0 switchport1/6 both switchport1/7 ingress Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 265 Left running head: Chapter name (automatic) Port Monitoring Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 266: Part 3 Wan Interfaces And Protocols

    To switch to the beta version, import color def’ns from beta-colors.fm Part 3 WAN Interfaces and Protocols Pagination: Numeric & continuous Optional footer: Alcatel-Lucent with Manual title (to set, preceding redefine ManualTitle OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide section of Beta Beta Beta Beta variable) book...
  • Page 267 Left running head: Chapter name (automatic) Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 268: T1E1 Line Card

    E1 and T1 controller configuration as a quick-start and reference information. Within each of these sections, the commands are described in alphabetical order. For more detailed information about using and configuring the T1 or E1 CLI, refer to the OmniAccess 5740 Unified Services Gateway CLI Configuration Guide. Alcatel-Lucent...

  • Page 269: E1 Cli Commands

    The line card is not functional until card type is set. Reboot/Reload the chassis to change the card type, which will remove the previous configuration. Use controller and channel-group commands to relaod the card type. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 270: Clocksource

    (system) clock generator. EFAULT ALUE The default value for clocksource is internal. XAMPLE The following example configures the E1 clocksource to line: ALU(config-controller E1)# clocksource line Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 271: Channel-Group

    To associate contiguous timeslots with the controller: ALU(config-controller T1)#channel-group 0 timeslots 1-10 ALU(config-controller T1)#channel-group 0 timeslots 1,2,3 To associate non-contiguous timeslots with the controller: ALU(config-controller T1)#channel-group 0 timeslots 1,4,20 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 272: Controller

    Transmission rate of an E1 interface is 2.048 Mbps. Enter the specified slot number. slot Enter the appropriate port number. port XAMPLE ALU(config)# controller E1 0/0 ALU(config-controller E1)# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 273: Encapsulation

    EFAULT ALUE Default is HDLC. XAMPLE The following example shows how to set the FR encapsulation: ALU(config-if serial 0/0:0)# encapsulation frame-relay Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 274: Framing

    XAMPLE The following example enters into the interface configuration mode with a serial interface having slot-number 0, port 0 with channel group 0. ALU(config)#interface Serial 0/0:0 ALU(config-if serial0/0:0)# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 275: Linecode

    75 or 120. ARAMETERS Parameter Description The line impedance value: 75 or 120 75ohm|120ohm ohms. EFAULT ALUE The default line-termination value is 120 ohm. XAMPLE ALU(config-controller E1)#line-termination 120 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 276: Loopback

    Loopback is disabled by default for E1 lines. XAMPLE The following example establishes a loopback of the incoming E1 signal on controller E1 at slot 1 and port 0: ALU(config-controller E1)# loopback network line Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 277: Mtu

    This command is entered in the Controller Configuration Mode. The “no” command resets the framing value to its default. The default framing value is crc4 for E1. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 278: No Linecode

    This command when entered in the Controller Configuration Mode brings up the controller. This command when entered in the Interface Configuration Mode brings up the interface. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 279: Show Controller

    Framing is crc4, Line Code is hdb3, Clock Source is internal Total Data (Since last clearing of counters) 1 Line Code Violation, 0 Framing Errors 0 CRC Errors, 0 Far End Block Errors Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 280: Show Interfaces

    0 output errors, 0 collisions, 0 interface resets 0 output buffer failures, 0 output buffers swapped out 0 carrier transitions Timeslot(s) Used:1 (64Kbps each), Transmitter delay is 0 flags Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 281: Shutdown

    Shuts down the controller (when entered shutdown in the controller configuration mode). Shuts down the interface (when entered in the interface configuration mode). XAMPLE ALU(config-controller E1)# shutdown ALU(config-if serial 0/0:0)# shutdown Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 282: T1 Cli Commands

    Cablelength of long 0 db is the default for the T1 cards. XAMPLE The following example changes transmit attenuation of controller T1 of slot 0 and port 0 to appropriate level for long cables: ALU(config-controller)# cablelength long -22.5db Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 283: Cablelength Short

    The following example sets the transmit attenuation of controller T1 of slot 1 and port 1 to the appropriate levels for a cable between 111 and 220 feet long: ALU(config)# controller t1 1/0 ALU(config-controller)# cablelength short 220 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 284: Card Type

    The line card is not functional until card type is set. Reboot/Reload the chassis to change the card type, which will remove the previous configuration. Use controller and channel-group commands to relaod the card type. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 285: Channel-Group

    To associate contiguous timeslots with the controller: ALU(config-controller T1)#channel-group 0 timeslots 1-10 ALU(config-controller T1)#channel-group 0 timeslots 1,2,3 To associate non-contiguous timeslots with the controller: ALU(config-controller T1)#channel-group 0 timeslots 1,4,20 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 286: Clocksource

    (system) clock generator. EFAULT ALUE Default clocksource is internal. XAMPLE The following example configures the T1 clocksource for line: ALU(config-controller T1)# clocksource line Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 287: Controller

    T1 has a transmission rate of 1.544 Mbps. Enter the specified slot number. slot Enter the appropriate port number. port XAMPLE ALU(config)# controller T1 0/0 ALU(config-controller T1)# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 288: Encapsulation

    EFAULT ALUE Default is HDLC encapsulation. XAMPLE ALU(config)# interface Serial 0/0:0 ALU(config-if Serial0/0:0)# encapsulation frame-relay ALU(config)# interface Serial 0/0:0 ALU(config-if Serial0/0:0)# encapsulation ppp Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 289: Framing

    Specifies the port number. port Specifies the channel number. channel XAMPLE The following example creates an interface at slot 0 and port 0 at channel group 0: ALU(config)#interface Serial0/0:0 ALU(config-if Serial0/0:0)# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 290: Linecode

    EFAULT ALUE The default linecode value is b8zs. XAMPLE The following example specifies AMI as the linecode type for a T1 line: ALU(config-controller T1)# linecode ami Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 291: Loopback

    NO CLOCKSOURCE no clocksource This command is entered in the Controller Configuration Mode. The “no” keyword sets the clocksource to its default. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 292: No Channel-Group

    This command when entered in the Controller Configuration Mode brings up the controller. This command when entered in the Interface Configuration Mode brings up the interface. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 293: Show Controller

    Framing is esf, Line Code is b8zs, Clock Source is internal Total Data (Since last clearing of counters) 0 Line Code Violation, 0 Framing Errors 0 Out of Frame, 0 Bit Errors Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 294: Show Interfaces

    0 output errors, 0 collisions, 0 interface resets 0 output buffer failures, 0 output buffers swapped out 0 carrier transitions Timeslot(s) Used:1 (64Kbps each), Transmitter delay is 0 flags Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 295: Shutdown

    Shuts down the controller (when entered shutdown in the controller configuration mode). Shuts down the interface (when entered in the interface configuration mode). XAMPLE ALU(config-controller T1)# shutdown ALU(config-if Serial0/0:0)# shutdown Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 296: Universal Serial Port (Usp) Line Card

    V.35/X.21/RS-232 interface configuration as quick-start and reference information. Within each of these sections the commands are described in alphabetical order. For more detailed information about using and configuring the V.35/X.21/RS-232, refer to the OmniAccess 5740 Unified Services Gateway CLI Configuration Guide. Alcatel-Lucent...

  • Page 297: V.35/X.21/Rs-232 Dte And Dce Configuration Commands

    These are values you can set for the 64000|128000|256000|512000|102 clock rate. 4000|2048000 EFAULT ALUE The default value for clock rate is 64000 bps. XAMPLE ALU(config-if Serial0/0)# clockrate 256000 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 298: Crc

    V.35/X.21/RS-232 card. This command enters Serial Interface Configuration Mode. ARAMETERS Parameter Description Slot and port numbers of the interface. slot/port EFAULT ALUE None. XAMPLE ALU(config)#interface Serial0/0 ALU(config-if Serial0/0)# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 299: Invert Txc

    ESCRIPTION This command is entered in the Interface Configuration Mode. This command configures an interface in the loopback mode. ARAMETERS None. EFAULT ALUE None XAMPLE ALU(config-if Serial0/0)# loopback Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 300: Encapsulation

    Frame Relay. Sets the encapsulation to Multi-link mlppp <bundle_id> Point-Point Protocol. EFAULT ALUE Default is HDLC. XAMPLE The following example sets the encapsulation to FR: ALU(config-if Serial0/0)# encapsulation frame-relay Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 301: Mtu

    NO LOOPBACK no loopback This command is entered in the Interface Configuration Mode. The “no” command removes the loopback configured on the interface. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 302: No Shutdown

    Available Bandwidth 2048 kilobits/sec 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec 12105 packets input, 167342 bytes, 0 no buffer Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 303: Shutdown

    This command is entered in the Interface Configuration Mode to administratively bring down the interface. ARAMETERS None. XAMPLE The following example administratively brings down the V.35/X.21/RS-232 interface: ALU(config)#interface Serial 0/0 ALU(config-if Serial0/0)# shutdown Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 304: High-Level Data Link Control

    For more detailed information about using and configuring the HDLC Protocol, refer to the OmniAccess 5740 Unified Services Gateway CLI Configuration Guide. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 305: Debug Hdlc All

    HDLC functionality. Displays detail level (default is 1). detail-level Enable with specific detail level. EFAULT ALUE By default, debug is disabled. XAMPLE ALU(config)# debug hdlc all Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 306: Debug Hdlc Keepalive

    Output to all possible locations. output all Output to system log. output log Output to VTY. output vty EFAULT ALUE By default, debug is disabled. XAMPLE ALU(config)# debug hdlc keepalive Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 307: Encapsulation Hdlc

    A value of ‘0’ turns off the keepalive feature. ARAMETERS Parameter Description HDLC keepalive interval in the range of 0 0-32767 - 32767 seconds. EFAULT ALUE Default is 10 seconds. XAMPLE ALU(config-if Serial0/0:0)# hdlc keepalive 12 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 308: Hdlc Down-When-Looped

    PPP. ARAMETERS Parameter Description Frame-relay encapsulation. frame-relay Point to Point Protocol encapsulation. Multilink Point to Point encapsulation. mlppp Multilink Frame-relay encapsulation. mlfr XAMPLE ALU(config-if Serial0/0:0)# no encapsulation frame-relay Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 309: No Hdlc Down-When-Looped

    370 packets input, 8880 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 310 0 output errors, 0 collisions, 0 interface resets 0 output buffer failures, 0 output buffers swapped out 0 carrier transitions Timeslot(s) Used:1-24 (64Kbps each), Transmitter delay is 0 flags Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 311 Left running head: Chapter name (automatic) High-level Data Link Control Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 312: Frame Relay

    For more detailed information about using and configuring the frame-relay Protocol, refer to the OmniAccess 5740 Unified Services Gateway CLI Configuration Guide. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 313: Debug Frame-Relay

    FR functionality. Displays detail level (default is 1). detail-level Enable with specific detail level. EFAULT ALUE By default, debug is disabled. XAMPLE ALU(config)# debug frame-relay all Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 314: Encapsulation Frame-Relay

    Configuration Mode. This command is used to configure a DLCI on an interface/ sub-interface. ARAMETERS Parameter Description The DLCI value. 16-1007 EFAULT ALUE None. XAMPLE The following example sets the DLCI value to 100: ALU(config-if Serial 0/0:0)# frame-relay interface-dlci 100 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 315: Frame-Relay Keepalive

    DTE. The LMI autosense will be activated when the physical interface is up and LMI type is not configured on that interface. XAMPLE The following example sets the LMI to ansi standard. ALU(config-if serial0/0:0)# frame-relay lmi-type ansi Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 316: Frame-Relay Lmi-N391Dte

    DTE error threshold value. 1-10 EFAULT ALUE The default value is 3. XAMPLE The following example sets the DTE error threshold to 6. ALU(config-if Serial0/0:0)# frame-relay lmi-n392dte 6 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 317: Frame-Relay Lmi-N393Dte

    <16-1007> This command is entered in the Interface Configuration Mode or Sub Interface Configuration Mode. The “no” command deletes the configured DLCI from the interface. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 318: No Frame-Relay Keepalive

    NO FRAME RELAY LMI no frame-relay lmi-n393dte This command is entered in the Interface Configuration Mode. The “no” command sets the lmi-n393dte to its default, which is 4. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 319: Show Frame-Relay Lmi

    Invalid Information ID Invalid Report IE Len Invalid Report Request Invalid Keep IE Len Num Status Enq. Sent Num Status msgs Rcvd Num Update Status Rcvd Num Status Timeouts Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 320: Show Frame-Relay Pvc

    FECN pkts out FECN pkts in BECN pkts out BECN pkts in DE pkts out DE pkts out bcast pkts out bcast bytes Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 321 Left running head: Chapter name (automatic) Frame Relay Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 322: Point To Point Protocol

    For more detailed information about using and configuring the Point-to-Point Protocol, refer to the OmniAccess 5740 Unified Services Gateway CLI Configuration Guide. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 323: Debug Ppp All

    PPP functionality. Displays detail level (default is 1). detail-level Enable with specific detail level. EFAULT ALUE By default, debug is disabled. XAMPLE ALU(config)# debug ppp all Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 324: Debug Ppp Echo

    Output to all possible locations. output all Output to system log. output log Output to VTY. output vty EFAULT ALUE By default, debug is disabled. XAMPLE ALU(config)# debug ppp echo Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 325: Encapsulation Ppp

    NO PPP AUTHENTICATION CLIENT USERNAME no ppp authentication client-username This command is entered in the Interface Configuration Mode. The “no” command deletes the configured authentication user name on the client side. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 326: No Ppp Authentication Password

    NO PPP IPCP ADDRESS POOL LOCAL no ppp ipcp address pool local This command is entered in the Interface Configuration Mode. The “no” command removes the IP address pool for IPCP. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 327: No Ppp Lcp Echo-Interval

    NO PPP TIMEOUT MAX TERMINATE no ppp timeout max-terminate This command is entered in the Interface Configuration Mode. The “no” command sets the max-terminate value to its default, i.e., 2. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 328: No Ppp Timeout Restart-Interval

    ARAMETERS Parameter Description Password Authentication Protocol. Challenge Authentication Protocol. chap Extensible Authentication Protocol. XAMPLE ALU(config-if Serial0/0:0)# ppp authentication pap Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 329: Ppp Authentication Client-Password

    This command is used to set user name for PPP authentication on the client side. ARAMETERS Parameter Description Denotes the user name for PPP authentication. user-name XAMPLE ALU(config-if Serial0/0:0)# ppp authentication client-username client1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 330: Ppp Authentication Password

    PPP authentication on the server side. ARAMETERS Parameter Description Denotes the user name for PPP authentication. user-name XAMPLE ALU(config-if Serial0/0:0)# ppp authentication username alcatel-lucent Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 331: Ppp Ipcp Address Accept-Local

    IP address during IPCP. ARAMETERS None. EFAULT ALUE By default, the flag is set to accept the peer’s IP address during IPCP. XAMPLE ALU(config-if Serial0/0:0)# ppp ipcp address accept-peer Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 332: Ppp Ipcp Address Pool Local

    IPCP negotiation on the interface. ARAMETERS None. EFAULT ALUE By default, the OmniAccess 5740 USG responds to IPCP negotiation initiated by the peer. Auto-negotiation happens when the IP address is changed on the interface. XAMPLE ALU(config-if Serial1/0:0)# ppp ipcp negotiate...

  • Page 333: Ppp Lcp Echo-Interval

    LCP negotiation is automatically started when the encapsulation is set to PPP or when the link is administratively brought up on a PPP interface, or when the MTU is changed on the interface. ARAMETERS None. XAMPLE ALU(config-if Serial1/0:0)# ppp lcp negotiate Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 334: Ppp Lcp Max-Echo

    Specifies the interval after which the LCP 0-255 negotiation will be reattempted after it is terminated. EFAULT ALUE The default LCP/NCP restart-interval is 30 seconds. XAMPLE ALU(config-if Serial0/0:0)# ppp timeout restart-interval 10 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 335: Ppp Timeout Restart-Timer

    (LCP or NCP) to be sent without receiving a valid Ack/NaK/Reject, before assuming that the peer is unable to respond. EFAULT ALUE The default max-configure value is “10”. XAMPLE ALU(config-if Serial0/0:0)# ppp timeout max-configure 15 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 336: Ppp Timeout Max-Failure

    EFAULT ALUE The default max-terminate value is “2”. XAMPLE ALU(config-if Serial0/0:0)# ppp timeout max-terminate 10 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 337: Show Interfaces

    60 packets output, 0 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 output buffer failures, 0 output buffers swapped out 0 carrier transitions Timeslot(s) Used:1-31, Transmitter delay is 0 flags Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 338: Show Ppp All Configuration

    PPP Max Configure : 10 PPP Max Failure Authentication protocol : pap Authentication username : user1 Authentication password : secret1 Authentication client-username : user2 Authentication client-password : secret2 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 339: Show Ppp All Statistics

    LCP Discard Requests: LCP Invalid Packets: IPCP Configure Requests: IPCP Configure Acks: IPCP Configure Naks: IPCP Configure Rejects: IPCP Terminate Requests: IPCP Terminate Acks: IPCP Code Rejects: IPCP Invalid Packets: Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 340: Show Ppp Authentication Configuration

    Slot, port and channel group number of the <slot/port:channel> serial interface. XAMPLE ALU# show ppp authentication configuration Serial 0/0:0 Authentication protocol: pap Authentication username: user1 Authentication password: secret1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 341: Show Ppp Authentication Statistics

    PAP Authentication Naks: PAP Invalid Packets: CHAP Challenges: CHAP Responses: CHAP Successes: CHAP Failures: CHAP Invalid Packets: EAP Requests: EAP Responses: EAP Successes: EAP Failures: EAP Invalid Packets: Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 342: Show Ppp Ipcp Configuration

    ALU# show ppp ipcp statistics Serial 0/0:0 IPCP Configure Requests: IPCP Configure Acks: IPCP Configure Naks: IPCP Configure Rejects: IPCP Terminate Requests: IPCP Terminate Acks: IPCP Code Rejects: IPCP Invalid Packets: Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 343: Show Ppp Lcp Configuration

    Slot, port and channel group number of the <slot/port:channel> serial interface. XAMPLE ALU# show ppp lcp configuration Serial 0/0:0 LCP Max Echoes LCP Echo Interval : 60 (sec) LCP Restart Interval : 30 (sec) Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 344: Show Ppp Lcp Statistics

    LCP Configure Naks: LCP Configure Rejects: LCP Terminate Requests: LCP Terminate Acks: LCP Code Rejects: LCP Protocol Rejects: LCP Echo Requests: LCP Echo Replies: LCP Discard Requests: LCP Invalid Packets: Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 345: Show Ppp Timeout Configuration

    Slot, port and channel group number of the <slot/port:channel> serial interface. XAMPLE ALU# show ppp timeout configuration Serial 0/0:0 PPP Restart timer: 3 (sec) PPP Max Terminate: 2 PPP Max Configure: 10 PPP Max Failure Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 346: Show Ppp Session Statistics

    ALU# show ppp session statistics Serial 0/0:0 PPP data packets received: PPP control packets received: Packets dropped: PPP sessions initiated: PPP sessions received: PPP sessions successful: PPP sessions terminated: Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 347 Left running head: Chapter name (automatic) Point to Point Protocol Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 348: Point-To-Point Protocol Over Ethernet (Pppoe)

    This chapter includes table of parameters, default values, and configuration examples for PPPoE configurations as quick-start and reference information. All the commands are described in alphabetical order. For more detailed information about using and configuring the PPPoE, refer OmniAccess 5740 Unified Services Gateway CLI Configuration Guide. Alcatel-Lucent...

  • Page 349: Encapsulation Pppoe

    5740 USG always acts as a PPPoE client. ARAMETERS None. EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# interface GigabitEthernet3/0 ALU(config-if GigabitEthernet3/0)# encapsulation pppoe ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 350: No Encapsulation Pppoe

    10 seconds. NO PPPOE SERVICE NAME no pppoe service-name This command is entered in the Interface Configuration Mode. This command removes the service name configured. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 351: Pppoe Ac-Name

    LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-if GigabitEthernet3/0)# pppoe ac-name ISP123 Note: The access concentrator name configured on OmniAccess 5740 USG should match the concentrator name of the server. ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide...

  • Page 352: Pppoe Max-Retry

    PADR is not user configurable. Default max-retry value for PADR is set to 5. After the fifth unanswered PADR, client starts sending PADI again. ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 353: Pppoe Negotiate

    Also, whenever “encapsulation pppoe” is configured on an administratively up GigE interface. ARAMETERS None. EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-if GigabitEthernet3/0)# pppoe negotiate ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 354: Pppoe Retry-Timer

    EFAULT ALUE The default retry-timer value is 10 seconds. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-if GigabitEthernet3/0)# pppoe retry-timer 15 ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 355: Pppoe Service-Name

    Note: Service name can be of maximum length 50 characters. The PPPoE service-name configured on OmniAccess 5740 USG should match the service-name supported on the server. If “service-name” is not configured, then the client accepts any service offered by the PPPoE server.

  • Page 356: Show Pppoe Configuration

    LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# show pppoe configuration GigabitEthernet 3/0 pppoe max-retry: 15 pppoe retry-timer: 5(s) pppoe service-name: ISP1 ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 357: Show Pppoe Statistics

    ALU(config)# show pppoe statistics GigabitEthernet 3/0 PADI sent: PADO received: 24 PADO dropped: PADR sent: PADS received: 13 PADT sent: PADT received: 0 ELEASE ISTORY Release 2.3.2: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 358: Multilink Point To Point Protocol

    MLPPP configurations as quick-start and reference information. In this chapter, all the commands are described in alphabetical order. For more detailed information about using and configuring the Multilink Point-to-Point Protocol, refer to the OmniAccess 5740 Unified Services Gateway CLI Configuration Guide. Alcatel-Lucent...

  • Page 359: Interface Mlppp

    Bundle Identification. The range of the 1-256 bundle ID is between 1 and 256. EFAULT ALUE The default encapsulation on a serial interface is HDLC. XAMPLE ALU(config)#interface Serial1/0:0 ALU(config-if Serial1/0:0)# encapsulation mlppp 100 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 360: Mlppp Load-Threshold

    NO MLPPP LOAD THRESHOLD no mlppp load-threshold {high|low} {outbound|inbound} This command is entered in the Interface Configuration Mode. This command removes the load threshold on the MLPPP bundle. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 361: Show Interfaces Mlppp

    0 lost fragments, 0 reordered 0 discarded fragments, 0 reassembled 0 lost received, 0 couldn't reassemble 0 fragments received, 0x0 received sequence ELEASE ISTORY Release 2.3: fragmentation parameters was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 362: Show Mlppp

    EFAULT ALUE None. XAMPLE ALU(config)# show mlppp 10 MLPPP bundle 10 link state information: IPCP: Open MEMBER LINKS AUTH CLIENT AUTH SERVER Serial0/0:1 Open ----- Serial0/0:0 Open ----- Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 363 Left running head: Chapter name (automatic) Multilink Point to Point Protocol Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 364: Multilink Frame Relay

    For more detailed information about using and configuring the Multilink Frame Relay Protocol, refer OmniAccess 5740 Unified Services Gateway CLI Configuration Guide. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 365: Encapsulation Mlfr

    This command is entered in Interface Configuration Mode. This command is used to configure a DLCI on a MLFR interface. ARAMETERS Parameter Description The DLCI value. 16-1007 XAMPLE ALU(config-if mlfr100)# frame-relay interface-dlci 100 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 366: Frame Relay Lmi Type

    LMI Autosense is activated by default as the system acts as a DTE. The LMI autosense will be activated when the physical interface is up and LMI type is not configured on that interface. XAMPLE ALU(config-if mlfr100)# frame-relay lmi-type ansi Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 367: Interface Mlfr

    Acknowledge interval in seconds. The 1-10 range of this interval is from 1 second to 10 seconds. EFAULT ALUE Default value is 4 seconds. XAMPLE ALU(config-if Serial0/0:0)# mlfr ack-interval 5 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 368: Mlfr Bid

    Hello interval in seconds. The range of 1-180 this interval is from 1 to 180 seconds. EFAULT ALUE Default value is 10 seconds. XAMPLE ALU(config-if Serial0/0:0)# mlfr hello-interval 15 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 369: Mlfr Lid

    Number that specifies the retry count. The range for retry count varies from 1 to EFAULT ALUE The default value of retry count is 2. XAMPLE ALU(config-if Serial0/0:0)# mlfr retry-count 3 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 370: No Encapsulation Mlfr

    LID name from the interface that is part of the bundle. NO MLFR RETRY COUNT no mlfr retry-count <1-5> This command is entered in the Interface Configuration Mode. This command resets the retry count to its default, 2. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 371: Show Interface

    Last clearing of "show interface" counters never 614 packets input( 325 controld packets, 289 data packets),34295 bytes 26599 packets output( 26216 controld packets, 383 data packets),458430 bytes 53 packets dropped 0 giant packets Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 372: Show Mlfr

    Number that identifies the MLFR bundle. 1-256 XAMPLE ALU# show mlfr 1 MLFR bundle 1 link state information: MEMBER LINKS PROTOCOL STATE Serial0/1:1 mlfr1 Serial0/1:1 Serial0/0:1 mlfr1 Serial0/0:1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 373: Show Interfaces Serial

    0 output errors, 0 collisions, 16 interface resets 0 output buffer failures, 0 output buffers swapped out 18 carrier transitions Timeslot(s) Used:1-24 (64Kbps each), Transmitter delay is 0 flags Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 374: Ethernet Oam (Operations, Administration, And Maintenance)

    OmniAccess 5740 USG. This chapter includes tables of parameters, default values, and configuration examples for configuring OAM on OmniAccess 5740 USG as quick-start and reference information. In this chapter, all commands are described in alphabetical order. For more detailed information on using and configuring BCP refer to the OmniAccess 5740 Unified Services Gateway CLI Configuration Guide.

  • Page 375: Ccm

    Enable/disable CCM messages on a disable|enable MEP. EFAULT ALUE By default, the CCM will be disabled. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-oam-domain-assoc-mep)# ccm enable ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 376: Ccm-Interval

    CCMs (seconds or minutes). EFAULT ALUE The default CCM interval is 1 second. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-oam-domain-assoc)# ccm-interval 1m ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 377: Eth-Ais

    Enable/disable ETH-AIS. enable|disable EFAULT ALUE By default, the ETH-AIS will be disabled. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-oam-domain-assoc-mep)# eth-ais enable ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 378: Eth-Ais Interval

    1s|60s seconds). EFAULT ALUE The default AIS interval is 1 second. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-oam-domain-assoc-mep)# eth-ais interval 60s ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 379: Eth-Cfm Association

    VLAN number, VPN ID. <0-65535>} EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-oam)# eth-cfm association 1 domain 1 assocName string asso123 ALU(config-oam-domain-assoc)# ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 380: Eth-Cfm Domain

    6 or 7 for a EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-oam)# eth-cfm domain 1 name string domain123 level 1 ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 381: Eth-Cfm 1Dmtest

    EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-oam)# eth-cfm 1DMtest 1111.1111.1111 mep 10 domain 1 association 10 priority 2 ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 382: Eth-Cfm 2Dmtest

    EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-oam)# eth-cfm 2DMtest 1111.1111.1111 mep 10 domain 1 association 10 priority 2 ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 383: Eth-Cfm Eth-Test

    By default, Ethernet test is disabled. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-oam)# eth-cfm eth-test 1111.1111.1111 mep 10 domain 1 association 10 priority 2 ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 384: Eth-Cfm Linktrace

    EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-oam)# eth-cfm linktrace 1111.1111.1111 mep 10 domain 1 association 10 ttl 10 ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 385: Eth-Cfm Loopback

    EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-oam)# eth-cfm loopback 1111.1111.1111 mep 10 domain 1 association 10 datasize 100 ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 386: Eth-Test

    Description Enable/disable Ethernet test signal on a enable|disable MEP. EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-oam-domain-assoc-mep)# eth-test enable ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 387: Eth-Test Test-Pattern

    By default, the test pattern is all 0's and no CRC. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-oam-domain-assoc-mep)# eth-test test-pattern all- ones crc enable ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 388: Fault-Alarm Lowest-Priority-Defect

    EFAULT ALUE The default lowest priority defect value is 2. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-oam-domain-assoc-mep)# fault-alarm lowest-priority- defect 1 ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 389: Fault-Alarm Reset-Time

    MEP in the range 250-1000. EFAULT ALUE The default reset-time is 1000 milliseconds. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-oam-domain-assoc-mep)# fault-alarm reset-time 400 ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 390: Fault-Alarm Set-Time

    250-1000. EFAULT ALUE The default time interval is 250 milliseconds. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-oam-domain-assoc-mep)# fault-alarm set-time 300 ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 391: Macaddress

    By default, MEP takes the interface MAC address as the default address. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-oam-domain-assoc-mep)# macaddress 1111.2222.3333 ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 392: Mep

    VLAN range. 1-4094 EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-oam-domain-assoc)# mep 1 direction Down interface GigabitEthernet 3/0 ALU(config-oam-domain-assoc-mep)# ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 393: No Ccm-Interval

    This is entered in the OAM Domain Association MEP Configuration Mode. This command is used to delete the configured lowest priority fault alarm value and reset it to the default. The default lowest priority defect value is 2. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 394: No Fault-Alarm Reset-Time

    MEP. NO SHUTDOWN no shutdown This is entered in the OAM Domain Association MEP Configuration Mode. This command is used to administratively bring up the MEP. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 395: Oam

    This is entered in the Configuration Mode. This command enters the OAM configuration mode. ARAMETERS None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# oam ALU(config-oam)# ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 396: Remote-Mep

    An integer, unique over a given MA, 1-8191 identifying a specific MEP. EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-oam-domain-assoc)# remote-mep 10 ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 397: Show Eth-Cfm Association

    100 maIndex: 100 maNameFormat: string maName: asc100 ccmInterval: 1 Remote Mep IDs RMep Id: 100 RMep Id: 20 RMep Id: 200 ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 398: Show Eth-Cfm Cfm-Stack-Table

    Dot1ag Stack Table Information --------------------------------------------------------- Interface VLAN-id level Dir MdIndex MaIndex MepIndex MacAddress GigabitEthernet 3/0 Down 00e0.b1c6.df2a GigabitEthernet 3/0:1 10 Down 00e0.b1c6.df2a ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 399: Show Eth-Cfm Domain

    Domain: 100 mdNameFormat: string mdName: dom100 mdLevel: 7 ------------------------------------------------------- Domain 100 Associations ------------------------------------------------------- Association index: 100 Name Fromat: string Name=asc100 CCM interval:1 ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 400: Show Eth-Cfm Mep

    AlarmSet Time: 250 AlarmReset Time: 250 LowestPrior Defect: DefMACstatus DefRemoteCCM DefErrorCCM DefXconCCM HighestDefect: DefNone Defect Flags: DefNone AIS-Enable: Disabled AIS Priority: 1 AIS Interval: 1 AIS Level: 0 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 401: Show Eth-Cfm Mep - Loopback And Linktrace

    --------------------------------------------------------- MEP Linktrace Message Information --------------------------------------------------------- LtRxUnexplained: 0 LtNextSequence: 2 LtStatus: False LtResult: False TargIsMepId: False TargMepId: 10 EgressId: 0000:00e0:b1c6:df2a TargMac: 0000:0000:0000 TTL: 64 SequenceNum: 1 LtFlags: UseFDBonly Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 402 LbResult: True DestIsMepId: False DestMepId: 10 SendCount: 0 VlanDropEnable: 0 SequenceNum: 2 NextSequenceId: 2 DestMac: 0000:0000:0000 VlanPriority: 0 DataTLV: None --------------------------------------------------------- ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 403: Show Eth-Cfm Mep - 1Dm-Test-Results

    ALU(config)# show eth-cfm mep 100 domain 100 association 100 1DM-test-results remote-peer-mac 00e0.b1c6.df2a ------------------------------------------------------------------------ 1DM Test Result ------------------------------------------------------------------------ PEER MAC Delay(microseconds) Variation(microseconds) 00:e0:b1:c6:df:2a 4060307296 234660000 ------------------------------------------------------------------------ ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 404: Show Eth-Cfm Mep - 2Dm-Test-Results

    ALU(config)# show eth-cfm mep 10 domain 100 association 100 2DM-test-results remote-peer-mac 00e0.b1b2.539c ------------------------------------------------------------------------ 2DM Test Result ------------------------------------------------------------------------ PEER MAC Delay(microseconds) Variation(microseconds) 00:e0:b1:b2:53:9c 10000 10000 ------------------------------------------------------------------------ ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 405: Show Eth-Cfm Mep - Eth-Test-Results

    : 100 mdIndex : 100 maIndex : 100 peerMacAddr : 0:e0:b1:c6:df:2a frameCount byteCount : 64 bitErrs crcErrs AccBitErrs AccCrcErrs --------------------------------------------------------- ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 406: Show Eth-Cfm Mep - Remote-Mepid

    True Absent Absent 0E0.B1C6.3CBC Fri Jan 2 02:31:49 1970 False True Absent Absent 011.8B 2.7911 Fri Jan 2 02:31:49 1970 --------------------------------------------------------------- ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 407: Shutdown

    MEP. ARAMETERS None. EFAULT ALUE By default, MEP will be in shutdown state. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-oam-domain-assoc-mep)# shutdown ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 408: Bridging Configuration

    OmniAccess 5740 USG. This chapter includes tables of parameters, default values, and configuration examples for configuring bridging on OmniAccess 5740 USG as quick-start and reference information. In this chapter, all commands are described in alphabetical order. For more detailed information on using and configuring bridging, refer to the OmniAccess 5740 Unified Services Gateway CLI Configuration Guide.

  • Page 409: Bridging Configuration Commands

    BCP will be disabled if the last VLAN configuration is removed. This command is also used to delete range of VLANs configured on the interface. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 410: Show Bridge Statistics

    Bridge Packets to IRB Bridge Packets from IRB Bridge Packets stp 4244 Bridge Packets drop Bridge Packets stp blocked Bridge Packets pvstp blocked ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 411: Show Frame-Relay Pvc

    End-to-End Fragmentation Statistics Packets Fragmented Fragments created Fragments failed End-to-End Reassembly Statistics Fragments Received Fragments Reassembled Fragments Dropped Fragments Timeout Fragments Rordered Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 412: Show Hdlc Statistics

    Keepalive received Keepalive sent Giant packets received Bridge packets received : 62 Bridge packets dropped Non IP packets dropped Packet errors ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 413: Show Interfaces Mlppp

    Reassembly: Slippage MRU 32 0 fragments in reassembly list 0 lost fragments, 0 reordered 0 discarded fragments, 0 reassembled 0 lost received, 0 couldn't reassemble 0 fragments received, 0x16 received sequence Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 414: Show Ppp Bcp Statistics Serial

    BCP Configure Acks: BCP Configure Naks: BCP Configure Rejects: BCP Terminate Requests: BCP Terminate Acks: BCP Code Rejects: BCP Invalid Packets: ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 415: Show Ppp Session Statistics Serial

    Protocol Packets dropped: Non PPP Packets dropped: Unexpected IP packets dropped: Packets Bridged: Bridge Packets dropped: PPP sessions initiated: PPP sessions received: PPP sessions successful: PPP sessions terminated: Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 416: Show Vlan

    Displays the configuration for a specific VLAN. XAMPLE ALU(config)# show vlan Brief VLAN_ID Interface name Mode --------- ----------------- -------- switchport3 Access Serial0/0 Trunk switchport0 Access Serial0/0 Trunk switchport1 No-Mode switchport2 No-Mode Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 417: Vlan

    UPPORTED OmniAccess 5740 USG XAMPLE The following example configures VLAN 2 on the interface. This interface bridges the tagged packets: ALU(config)# interface Serial 0/0 ALU(config-if Serial0/0)# vlan 2 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 418 ALU(config-if Serial0/0)# vlan 20 30 40 This following example configures range of VLANs on the interface ALU(config)# interface Serial 0/0 ALU(config-if Serial0/0)# vlan range 50 100 ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 419 Left running head: Chapter name (automatic) Bridging Configuration Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 420: Link Fragmentation And Interleaving (Lfi)

    LFI configurations as quick-start and reference information. In this chapter, all the commands are described in alphabetical order. For more detailed information about using and configuring LFI, refer to the OmniAccess 5740 Unified Services Gateway CLI Configuration Guide.

  • Page 421: Lfi Configuration On Mlppp Cli Commands

    Note: The MTU (Maximum Transmission Unit) of the individual links in a MLPPP bundle should be greater than the fragment size. ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 422: No Fragment Delay

    Name of the policy map. policy-map name LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# interface mlppp 100 ALU(config-if mlppp100)# service-policy out P1 ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 423: Slippage Mru

    The default slippage MRU value is 32 MRU. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# interface mlppp 100 ALU(config-if mlppp100)# slippage mru 16 ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 424: Show Interfaces Mlppp

    0 lost fragments, 0 reordered 11 discarded fragments, 0 reassembled 0 timeouts, 0 couldn't reassemble 0 fragments received, 0xb received sequence ELEASE ISTORY Release 2.3: command was modified. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 425: Lfi Configuration On Fr Cli Commands

    The default fragment size is 0. In this case, no fragmentation can be performed. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-if Serial0/0:0)# frame-relay fragment 80 end-to-end ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 426: No Frame-Relay Fragment

    Ingress or egress direction. in|out Name of the policy map. policy-map name LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-if Serial0/0:0)# service-policy out P1 ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 427: Slippage Mru

    EFAULT ALUE The default slippage MRU value is 32 MRU. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-if Serial0/0:0)# slippage mru 16 ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 428: Show Frame-Relay Fragments

    Interface serial 1/1:0 Frags: 40 fragmented, 14 couldn't fragment, 250 fragments created Reass: 24 reassembled, 10 timeouts, 8 dropped, 20 reordered ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 429: Show Frame-Relay Pvc

    End-to-End Fragmentation Statistics Packets fragmented Fragments Created fragments failed End-to-End Reassembly Statistics fragments received fragments reassembled fragments dropped fragments timeout fragments reordered ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 430: Show Interface Serial

    0 output buffer failures, 0 output buffers swapped out 0 carrier transitions Timeslot(s) Used:1-24 (64Kbps each), Transmitter delay is 0 flags ELEASE ISTORY Release 2.3: command was modified. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 431 Left running head: Chapter name (automatic) Link Fragmentation and Interleaving (LFI) Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 432: Part 4 Common Classification

    To switch to the beta version, import color def’ns from beta-colors.fm Part 4 Common Classification Pagination: Numeric & continuous Optional footer: Alcatel-Lucent with Manual title (to set, preceding redefine ManualTitle OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide section of Beta Beta Beta Beta variable) book...
  • Page 433 Left running head: Chapter name (automatic) Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 434: Common Classifiers

    HAPTER OMMON LASSIFIERS This chapter explains the functionality and syntax of the OmniAccess 5740 USG common classifier commands. All commands are described in alphabetical order. They do not follow the sequence of configuration. For more detailed information on using and configuring the above concepts, refer the OmniAccess 5740 Unified Services Gateway CLI Configuration Guide.

  • Page 435: Ethernet

    Specify the destination MAC address. destination-mac- address Priority value. VLAN ID. 1-4094 LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-match-list-m1)# ethernet mac 1122.aabb.55ff any ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 436: Include

    INCLUDE include <match-list name> ESCRIPTION Another key feature of the OmniAccess 5740 USG classification is the capability of nesting. This command is entered in the specific Match-list Configuration Mode. This command is used to include a match-list/s that is already configured inside another match-list.
  • Page 437 ALU(config)# list l2 host 192.168.0.3 include l1 ALU(config)# match-list m1 ALU(config-match-list-m1)# tcp any list l1 length 23 from ssh service range 23 35 ALU(config-match-list-m1)# exit ALU(config)# match-list m2 ALU(config-match-list-m2)# include m1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 438: List

    ALU(config)# list l2 prefix 10.0.0.0/8 prefix 20.0.0.0/8 ALU(config)#list l1 include l2 interface GigabitEthernet 3/0 ALU(config)# list l1 include l2 prefix 20.0.0.0/8 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 439 ALU(config)# list L1 interface GigabitEthernet 3/0 interface GigabitEthernet 3/1 ALU(config)# list L2 prefix 192.168.12.0/24 prefix 192.168.13.0/24 ALU(config)# match-list m1 ALU(config-match-list-m1)#1 udp list L1 list L2 service snmp Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 440: Match-List

    This command is entered in the Configuration Mode. This command is used to configure a match-list. This enters Match-list Configuration mode. ARAMETERS Parameter Description Name of the match-list being configured. name EFAULT ALUE None. XAMPLE ALU(config)# match-list test ALU(config-match-list-test)# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 441: Match-Lists (Rulesets)

    [<1-1024>] udp {any|host <source ip-address>|interface <name>|list <name>|prefix <source ip-address/prefix length>} {any|host <destination ip-address>|interface <name>|list <name>|prefix <destination ip-address/prefix length>} [dscp {<0-63>|<dscp-mnemonics>}|fragment|from <1-65536>|ip- precedence {<0-7>|<precedence-mnemonics>}|length {<1- 1500>|{eq|ge|gt|le|lt|range <1-1500>}}|service {<1-65536> |<protocol>}|tos {<0-15>|<tos-mnemonics>}|type {ftp |normal|rpc|rtcp|rtp|sip|tftp}] Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 442 <source ip- address/prefix length> Destination address. host <destination ip- address> Destination address with prefix length. prefix <destination ip- address/prefix length> Denotes the DSCP value. dscp <0-63> <dscp- mnemonics> Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 443 ALU(config-match-list-test)# 10 tcp host 1.1.1.1 any from 6050 ALU(config-match-list-m1)# 1 udp list L3 list L4 service tftp ALU(config-match-list-test)# 2 icmp any any icmp-type 1 ALU(config-match-list-test)# 10 protocol 1 any any dscp 10 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 444: No Include

    ALU(config-match-list-m2)# 1 tcp any any service ssh ALU(config-match-list-m2)# 2 udp prefix 22.1.1.0/8 any ALU(config-match-list-m2)# 3 include m1 Now, to delete the included match-list, use the ‘no include’ command: ALU(config-match-list-m2)# no include m1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 445: No List

    They can be deleted only one at a time. ARAMETER Parameter Description Name of the match-list, which has to be deleted. name EFAULT ALUE None. XAMPLE ALU(config)# no match-list M1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 446: No Rule

    ARAMETERS None. XAMPLE The following example displays the details of match-list m1: ALU(config-match-list-m2)# show include match-list m1 1 tcp any any service ssh 2 udp prefix 22.1.1.0/8 any Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 447: Show List

    The following example displays the details of the list L1 and L2 configured: ALU(config)# show list l1 list l1 host 5.5.5.5 host 4.4.4.4 prefix 6.6.6.0/24 ALU(config)# show list l2 list l2 host 5.3.4.6 prefix 1.10.10.0/24 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 448: Show Match-List

    1 icmp any any 2 tcp any any service http 3 ip any any ALU(config-match-list-m1)# show match-list m2 match-list m2 1 tcp any any service ssh 2 udp any any Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 449: Show Rule

    2 udp prefix 22.1.1.0/8 any The following example displays the details of the rule in line number 1: ALU(config-match-list-m1)# show rule 1 1 tcp any any service ssh Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 450: Part 5 Routing Protocols

    To switch to the beta version, import color def’ns from beta-colors.fm Part 5 Routing Protocols Pagination: Numeric & continuous Optional footer: Alcatel-Lucent with Manual title (to set, preceding redefine ManualTitle OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide section of Beta Beta Beta Beta variable) book...
  • Page 451 Left running head: Chapter name (automatic) Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 452: Protocol Independent Features

    RIP, OSPF and BGP. It includes tables of parameters, default values, and configuration examples. The commands are described in alphabetical order. For more detailed information about the command parameters, refer to the OmniAccess 5740 Unified Services Gateway CLI Configuration Guide. Alcatel-Lucent...

  • Page 453: Access-List (Extended)

    Destination IP address network. destination-ip-address [destination-network- number] Destination IP address network. destination ip-address/ prefix-length Destination IP address. destination-host- ipaddress If access list is matched, logs the message. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 454: Access-List (Standard)

    If access list is matched, logs the message. EFAULT ALUE By default, no access list is configured. XAMPLE ALU(config)# access-list 1 deny 1.0.0.0/8 ALU(config)# access-list 2 permit 20.0.0.0/8 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 455: Clear Ip Route

    Name of the VRF. If VRF is specified, it clears the IP routing vrf-name table for the specified VRF. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU# clear ip route * ELEASE ISTORY Release 2.3.2: parameter [vrf <vrf-name>] was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 456: Default-Metric

    (BGP, OSPF, RIP). ARAMETERS Parameter Description Default metric value appropriate for the specified routing 1-4294967295 protocol. EFAULT ALUE This command is disabled by default. XAMPLE ALU(config-router ospf1)# default-metric 10 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 457: Distance

    BGP - The default distance is 20 for EBGP and 200 for IBGP. XAMPLE ALU(config-router rip)# distance 130 10.0.0.0/8 20 ALU(config-router ospf 1)# distance 60 10.0.0.0/8 ALU(config-router bgp AS1)#distance bgp 30 10 5 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 458: Distance Bgp

    1 - 255. Routes with a distance of 255 are not installed in the routing table. EFAULT ALUE • external-distance: 20 • internal-distance: 200 • local-distance: 200 XAMPLE ALU(config-router bgp AS1)#distance bgp 15 50 10 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 459: Distance Ospf

    Distance for intra-area routes. intra-area Administrative distance. 1-255 EFAULT ALUE Default administrative distance for all OSPF routes is 110. XAMPLE ALU(config-router ospf 1)# distance ospf external 10 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 460: Distribute-List

    Enter the above command in RIP Router Configuration mode. This command suppresses networks from being advertised in routing updates. The distribute- list in command is used to filter networks in received routing updates. Note: The OmniAccess 5740 USG does not support the Distribute-list feature in OSPF. ARAMETERS Parameter Description Standard IP access list number.

  • Page 461: Ip Access-List Extended

    Name or number of an Internet protocol. If a protocol is not {igre|icmp|ip|ip specified, the access-list entry applies to all protocols. inip|pim| rsvp|tcp|udp|<0- 255>} Result is deny if conditions are matched. deny Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 462 Match access list if specified precedence matches packet. precedence [<0- 7>|<keywords>] Match access list if specified ToS matches packet. tos [<0- 15>|<keywords> Example: ALU(config-ext-nacl)# permit ip 24.0.0.0/8 25.0.0.0/8 ALU(config-ext-nacl)# deny ip any 13.0.0.0/8 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 463: Ip Access-List Standard

    Specify host IP address. host <host-ip- address> Source IP address network. <ip-address/prefix- length>|<ip-address subnet-mask> If access list is matched, log the message. Example: ALU(config-std-nacl)# permit host 10.0.0.1 ALU(config-std-nacl)# permit 11.0.0.0/8 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 464: Ip As-Path Access-List

    In the following example, the ‘ip as-path access-list’ command creates an as-path access list named '1' to deny only those routes that include paths from or through autonomous systems 100: ALU(config)# ip as-path access-list 1 deny _100_ Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 465: Ip Community-List (Extended)

    Extended Community-list. ARAMETERS Parameter Description Extended community list number. 100-199 Denies access for matching conditions. deny Permits access for matching conditions. permit Regular expression. regular- expression EFAULT ALUE None. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 466: Ip Community-List (Standard)

    BGP peers. Specifies that the routes with this community attribute will no-export not be advertised to any EBGP peer. EFAULT ALUE None. XAMPLE ALU(config)# ip community-list 1 permit internet Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 467: Ip Prefix-List

    In the following example, permit updates for any network with a prefix mask length less than or equal to 23. Denies all network updates with a network mask length greater than 23: ALU(config)# ip prefix-list test permit 0.0.0.0/0 le 23 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 468: Ip Route

    Name of the next hop interface. interface name An administrative distance of the route. 1-255 EFAULT ALUE By default, no static route is configured. XAMPLE ALU(config)# ip route 1.1.1.1/24 2.2.2.2 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 469: Ip Tcp Adjust-Mss

    The maximum segment size in the range 500-1460. 24-1460 EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-if GigabitEthernet3/0)# ip tcp adjust-mss 500 ELEASE ISTORY Release 2.3.2: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 470: Ip Unnumbered

    ALU(config-if Serial0/0:0)# ip unnumbered GigabitEthernet3/0 Configuring Ethernet as an unnumbered interface throws up an error: ALU(config)# interface GigabitEthernet 3/0 ALU((config-if GigabitEthernet3/0)# ip unnumbered Loopback 0 Error - Point-to-point (non-broadcast) interfaces only Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 471: Match As-Path

    ARAMETERS Parameter Description Standard community list number. 1-99 Extended community list number. 100-199 Indicates that exact match is required. exact-match EFAULT ALUE None. XAMPLE ALU(config-route-map)# match community 1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 472: Match Interface

    Name of a specific access list. prefix-list-name Name of a prefix list. EFAULT ALUE No access list numbers or prefix lists are specified. XAMPLE ALU(config-route-map)# match ip address prefix-list testprefix Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 473: Match Ip Next-Hop

    Name of a specific prefix list. EFAULT ALUE Routes are distributed freely without being required to match a next hop address. XAMPLE ALU(config-route-map)# match ip next-hop 1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 474: Match Ip Route-Source

    Distributes routes based on a prefix list. prefix-list access-list name Name of a specific access list. prefix-list-name Name of a specific prefix list. EFAULT ALUE None. XAMPLE ALU(config-route-map)# match ip route-source 5 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 475: Match Metric

    By default, OSPF, BGP and Static routes can install a maximum number of 16 ECMP paths. And, RIP installs maximum 8 ECMP paths. XAMPLE ALU(config-router ospf 1)# maximum-paths 5 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 476: Match Route-Type

    This command is entered in the Router Configuration Mode. This command activates only those interfaces that need to have adjacencies set. ARAMETERS Parameter Description Name of the interface. interface-name EFAULT ALUE None. XAMPLE ALU(config-router ospf1)# no passive-interface GigabitEthernet Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 477: No Ip Tcp Adjust-Mss

    ARAMETERS Parameter Description Name of the interface. interface-name EFAULT ALUE Routing updates are sent on the interface. XAMPLE ALU(config-router ospf1)# passive-interface GigabitEthernet 3/0 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 478: Passive-Interface Default

    This command is entered in the Router Configuration Mode. This command sets all interfaces as passive by default. ARAMETERS Parameter Description All interfaces become passive. default EFAULT ALUE By default, all interfaces are active. XAMPLE ALU(config-router ospf1)# passive-interface default Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 479: Redistribute

    Specified tag is assigned to redistributed routes. tag <0- 4294967295> Redistribute only subnet routes. subnets Redistribute route if route is external type 1 or type 2. external [1|2] Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 480 EFAULT ALUE None. XAMPLE ALU(config-router ospf 1)#redistribute static metric 19 metric- type 1 ALU(config-router rip)#redistribute bgp 1 route-map test ALU(config-router bgp AS1)#redistribute ospf 1 route-map testospf weight 10 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 481: Route-Map

    This sequence number signifies the priority of a route-map rule. EFAULT ALUE Default route map action is permit. XAMPLE ALU(config)# route-map ospf-to-eigrp permit 20 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 482: Set As-Path

    65535>] route-map. Applies to inbound and outbound BGP route maps. EFAULT ALUE Autonomous system path is not specified. XAMPLE ALU(config-route-map)# set as-path tag Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 483: Set Community

    EBGP peer. Removes the community attribute from the prefixes that none pass the route map. EFAULT ALUE No BGP communities attributes exist. XAMPLE ALU(config-route-map)# set community 10 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 484: Set Comm-List

    The default is 15 minutes. If the penalty for a flapping route decreases enough to fall 1-20000 below reuse limit, router starts advertising the route. The default is 750 seconds. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 485: Set Local-Preference Number Value

    BGP path. ARAMETERS Parameter Description Preference value. 0-4294967295 EFAULT ALUE By default, local preference value is 100. XAMPLE ALU(config-route-map)# set local-preference 100 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 486: Set Metric

    Parameter Description Internal metric value. internal External metric value. external OSPF external type-1 metric. type-1 OSPF external type-2 metric. type-2 EFAULT ALUE None. XAMPLE ALU(config-route-map)# set metric-type type-1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 487: Set Origin

    Route with highest weight is preferred. ARAMETERS Parameter Description Weight value. 0-4294967295 EFAULT ALUE Default weight is 0. XAMPLE ALU(config-route-map)# set weight 10 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 488: Show Access-Lists

    1.0.0.0 0.255.255.255 (0 packets) Standard IP access list 2 permit 20.0.0.0 0.255.255.255 (0 packets) Extended IP access list 101 permit ip 162.168.0.0 0.0.0.0 255.255.252.0 0.0.0.0 (0 packets) Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 489: Show Ip Access-Lists

    Description Specify the as-path access list number whose configuration 1-199 details is to be viewed. XAMPLE ALU# show ip as-path-access-list AS path access list 1 deny _100_ ALU# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 490: Show Ip Community-List

    Name of a specific prefix list whose configuration details are to be viewed. XAMPLE ALU# show ip prefix-list ip prefix-list test seq 5 deny 10.0.0.0/8 ge 23 ALU# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 491: Show Ip Protocols

    30 seconds Precisely when the next update is due to be sent. next due in 2 seconds Specifies the value of the invalid parameter. Invalid after 180 seconds Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 492 For each source, you will see Information the following displayed: Sources • IP address • Administrative distance • Time the last update was received from this source. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 493: Show Ip Route

    6.6.6.6/32 [110/10][1] via 5.5.0.1, Serial0/0:0 via 5.5.1.1, Serial0/0:1 via 5.5.2.1, Serial0/0:2 7.0.0.0/8 [1/0] is directly connected, Serial0/0:0 is directly connected, Serial0/0:1 10.0.0.0/24 is subnetted, 1 subnet 10.91.2.0 [0/0] is directly connected, GigabitEthernet3/0 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 494 5.5.2.0 [0/0] is directly connected, Serial0/0:2 10.0.0.0/24 is subnetted, 1 subnet 10.91.2.0 [0/0] is directly connected, GigabitEthernet3/0 99.0.0.0/24 is subnetted, 1 subnet 99.99.99.0 [0/0] is directly connected, loopback1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 495 226 routes at length 24 1 route at length 32 Example 5 # show ip route supernets-only 172.0.0.0/8 [1/0] via 1.1.1.5, GigabitEthernet3/1 O E2 193.0.0.0/8 [110/20][1] via 1.1.1.2, GigabitEthernet3/1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 496: Show Route-Map

    Exit Policy: Match clauses: ip address (access-lists) : 1 Set clauses: metric 10 route-map testset, permit, sequence 10 Description: Exit Policy: Match clauses: Set clauses: metric 20 ALU# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 497 Set actions - particular actions to perform if the criteria Set clauses enforced by the match commands are met. metric Displays the number of packets and bytes that have been Policy routing filtered by policy routing. matches Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 498: Router Information Protocol

    It includes table of parameters, default values, and configuration examples for RIP configurations as quick-start and reference information. The commands are described in alphabetical order. For more detailed information about using and configuring the RIP, refer the OmniAccess 5740 Unified Services Gateway CLI Configuration Guide. Alcatel-Lucent...

  • Page 499: Auto-Summary

    This command is entered in the Super User Mode or Configuration Mode. This command clears the RIP database or the RIP statistics. ARAMETERS Parameter Description Clears RIP database. database Clears RIP statistics. statistics XAMPLE ALU# clear ip rip database Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 500: Default Information Originate (Rip)

    Specify the default metric value. 1-16 EFAULT ALUE The metric of redistributed connected and static routes is set to 0, otherwise default metric is set to 1. XAMPLE ALU(config-router rip)# default-metric 10 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 501: Distance

    Access-list to be associated in the range 1-99. 1-99 Access-list to be associated in the range 1300-1999. 1300-1999 EFAULT ALUE The default distance is 120. XAMPLE ALU(config-router rip)# distance 130 10.0.0.0/8 20 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 502: Distribute-List

    Interface on which the access list should be applied. If no interface-name interface is specified, the access list will be applied to all updates. EFAULT ALUE Disabled XAMPLE ALU(config-router rip)# distribute-list prefix prefix-example in GigabitEthernet 3/0 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 503: Ip Rip Authentication Key-Chain

    Description Keyed Message Digest 5 (MD5) authentication. text Plain Text authentication. EFAULT ALUE The default authentication mode is Plain Text authentication XAMPLE ALU(config-if GigabitEthernet3/0)# ip rip authentication mode Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 504: Ip Rip {Send|Receive

    Accepts/sends RIP Version 2 packets on the interface. EFAULT ALUE Version 1 and Version 2 packets are received by default. XAMPLE ALU(config-if GigabitEthernet3/0)#ip rip send version 1 2 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 505: Ip Rip Triggered

    RIP to Support Demand Circuits]. ARAMETERS None. EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-if Serial0/0:1)# ip rip triggered ELEASE ISTORY Release 2.3.2: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 506: Ip Split-Horizon

    This command is entered in the Key-chain Mode. This command is used to configure a key. ARAMETERS Parameter Description Identity for the key in the range 0-2147483647. 0-2147483647 EFAULT ALUE None. XAMPLE ALU(config-keychain allen)# key 100 ALU(config-keychain-key 100)# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 507: Key-Chain

    This command is entered in the Key-chain Key Mode. This command is used to configure the password for the key. ARAMETERS Parameter Description The password for the key. key-string EFAULT ALUE None. XAMPLE ALU(config-keychain-key 100)# key-string sg123 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 508: Network

    Parameter Description neighbor-address IP address of a peer router with which routing information will be exchanged. EFAULT ALUE No neighboring routers are defined. XAMPLE ALU(config-router rip)# neighbor 172.19.3.1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 509: No Auto-Summary

    This command is entered in the Interface Configuration Mode. The ‘no’ command sets the authentication mode to its default, i.e, plain Text authentication. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 510: No Ip Split-Horizon

    Also these interfaces will not be advertised in any RIP updates. NO OFFSET LIST no offset-list {{<0-99>|<1300-1999> <access-list name>} {in|out}} {<0-16>} [<interface-name>] This command is entered in the Router Configuration Mode. The above command disables the configured offset-list. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 511: No Passive-Interface

    NO IP RIP V BROADCAST no ip rip v2-broadcast This command is entered in the Interface Configuration Mode. The ‘no’ command disables sending of routing updates to broadcast address. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 512: Offset-List

    1, add 2 hops to the metric." If no interface is identified, the list will modify either all incoming updates or all outgoing updates specified by the access-list on any interface. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 513: Passive-Interface

    Suppresses routing updates on the specified interface. default Suppresses routing updates on all interfaces. EFAULT ALUE Routing updates are sent on the RIP enabled interface. XAMPLE ALU(config-router rip)# passive-interface GigabitEthernet 3/0 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 514: Redistribute

    Metric to be applied for redistributed routes. route-map Route-map to be used to filter routes and set metrics. reference EFAULT ALUE None. XAMPLE ALU(config-router rip)# redistribute bgp 1 metric 10 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 515: Router Rip

    Outgoing update filter list for all interfaces is not set Incoming update filter list for all interfaces is not set Interface Send Recv Key-chain GigabitEthernet3/1 loopback1 Routing for Networks: 1.0.0.0 4.0.0.0 Routing Information Sources: Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 516 For each source, you will see the following displayed: • IP address • Administrative distance • Time the last update was received from this source Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 517: Show Ip Rip Database

    GigabitEthernet3/1 12.0.0.0/8 learnt via RIP, metric = 1 tag = 0 via 10.91.2.5, 00:00:00 ago, on GigabitEthernet3/1 ALU# ELEASE ISTORY Release 2.3: Parameter [vrf <vrf-name>] was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 518: Show Ip Rip Interfaces

    Recv Ver Values are: Flags • U: Unnumbered • P: Passive • B: V2 Broadcast • S: Split horizon disabled ELEASE ISTORY Release 2.3: Parameter [vrf <vrf-name>] was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 519: Show Ip Rip Peers

    The Receive Version. Rcv Ver The number of bad packets received. Bad Pkts The number of bad routes received. Bad Routes ELEASE ISTORY Release 2.3: Parameter [vrf <vrf-name>] was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 520: Show Ip Rip Statistics

    *Unicast tx failure 0 Routes advertised Bcast tx failures Updates received Mcast tx failures Requests received Bad Rtes received ELEASE ISTORY Release 2.3: Parameter [vrf <vrf-name>] was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 521: Show Key-Chain

    ALU> show key-chain alu1 key-chain alu1 key 1 key-string alcatel-lucent Accept lifetime (00:00:00 01 Jan 2000) - (Infinite) [Valid Now] Send lifetime (00:00:00 02 Feb 2001) - (Infinite) [Valid Now] Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 522: Timers Basic

    The sleeptime value should be 4294967295> less than the update time. If the sleeptime is greater than the update time, routing tables will become unsynchronized. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 523: Validate-Update-Source

    Enter the command in the Router Configuration Mode. This command validates the source IP address of incoming RIP routing updates. ARAMETERS None. EFAULT ALUE Enabled. XAMPLE ALU(config-router rip)# validate-update-source Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 524: Version

    RIP version - v1/v2 on the OmniAccess 5740 USG. Note: RIPv2 is an enhancement of RIPv1 and not a separate protocol. By default, the RIP process configured on the OmniAccess 5740 USG sends only RIPv1 messages but receives both RIPv1 and RIPv2 messages. ARAMETERS...

  • Page 525: V2-Broadcast (Rip)

    RIP Version 2 update packets to be sent as broadcast packets instead of multicast packets. ARAMETERS None. EFAULT ALUE This command is disabled by default. XAMPLE ALU(config-if GigabitEthernet3/0)# ip rip v2-broadcast Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 526: Border Gateway Protocol

    It includes table of parameters, default values, and configuration examples for BGP configuration as quick-start and reference information. The commands are described in alphabetical order. For more detailed information about using and configuring the BGP, refer to the OmniAccess 5740 Unified Services Gateway CLI Configuration Guide. Alcatel-Lucent...

  • Page 527: Address-Family Ipv4 Unicast

    Address Family mode. ARAMETERS None. Note: In the OmniAccess 5740 USG, currently only IPv4 address family and unicast services are supported. By default all commands are applied to ipv4 unicast address family. XAMPLE ALU(config-router bgp AS30)# address-family ipv4 unicast...

  • Page 528: Aggregate-Address

    Name of route map used to set the attribute of the attribute-map aggregate route. Name of the route map. map-name EFAULT ALUE None. XAMPLE ALU(config-router bgp AS30)#aggregate-address 35.0.0.0/8 advertise-map admap1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 529: Bgp Always-Compare-Med

    ARAMETERS None. EFAULT ALUE As-path is considered during BGP best path selection. XAMPLE ALU(config-router bgp AS30)# bgp bestpath as-path ignore Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 530: Bgp Bestpath Compare-Cluster-Length

    BGP peers during the best path selection process and switch the best path to the route with the lowest router ID. ARAMETERS None. EFAULT ALUE None. XAMPLE ALU(config-router bgp AS30)# bgp bestpath compare-routerid Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 531: Bgp Bestpath Med

    This command restores route reflection from a BGP route reflector to its clients. ARAMETERS None. EFAULT ALUE When you configure a route reflector, it reflects routes from one client to others. XAMPLE ALU(config-router bgp AS30)# bgp client-to-client reflection Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 532: Bgp Cluster-Id

    ARAMETERS Parameter Description Autonomous system number that internally includes 1-65535 multiple autonomous systems. EFAULT ALUE No confederation identifier is configured. XAMPLE ALU(config-router bgp AS30)# bgp confederation identifier 56687 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 533: Bgp Confederation Peers

    Autonomous system numbers for BGP peers that belongs 1-65535 to the confederation. EFAULT ALUE No BGP peers are identified as belonging to the confederation. XAMPLE ALU(config-router bgp AS30)# bgp confederation peers 45 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 534: Bgp Dampening

    Maximum duration (in minutes) to suppress a stable route. 1-255 Name of route map that controls BGP route dampening. name EFAULT ALUE Disabled by default. XAMPLE ALU(config-router bgp AS30)# bgp dampening 2 200 200 20 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 535: Bgp Default Local-Preference

    AS number at the beginning of AS-Path in the incoming update packets. ARAMETERS None. EFAULT ALUE Disabled. XAMPLE ALU(config-router bgp AS30)# bgp enforce-first-as Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 536: Bgp Fast-External-Fallover

    Specifies the stale route keep timer (in seconds). 1-100 EFAULT ALUE Restart timer - 175 seconds. State Route Keep timer - 100 seconds. XAMPLE ALU(config-router bgp AS30)# bgp graceful-restart-timer 100 150 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 537: Bgp Log-Neighbor-Changes

    This command overrides the configured router identifier. ARAMETERS Parameter Description Router ID in the IP address format. ip-address EFAULT ALUE Calculates Router ID from interface IP addresses. XAMPLE ALU(config-router bgp AS30)# bgp router-id 1.1.1.1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 538: Bgp Write Config

    EFAULT ALUE Disabled. XAMPLE ALU(config-router bgp AS30)# bgp write config router bgp 30 bgp enforce-first-as address-family ipv4 unicast aggregate-address 0.0.0.0/0 aggregate-address 35.0.0.0/8 attribute-map m1 exit-address-family ALU(config-router bgp AS30)# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 539: Clear Ip Bgp

    ARAMETERS Parameter Description Clears the dampening information for a specified network. ip-address/mask Clears the dampening information for a specified network. network-number XAMPLE ALU# clear ip bgp dampening Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 540: Clear Ip Bgp External

    Triggers reset of IPv4 address family session. ipv4 Triggers reset of IPv4 unicast address family session. unicast EFAULT ALUE By default, a reset is not initiated. XAMPLE ALU# clear ip bgp external Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 541: Clear Ip Bgp Flap-Statistics

    Clears flap statistics for all the BGP AS paths that match the regular- regular expression. expression EFAULT ALUE By default, no statistics are cleared. XAMPLE ALU# clear ip bgp flap-statistics Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 542: Clear Ip Bgp Peer-Group

    Triggers inbound or outbound update. in|out Triggers soft re-configuration. soft EFAULT ALUE By default, a reset is not initiated. XAMPLE ALU#clear ip bgp peer-group p1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 543: Clear Ip Bgp Neighbor

    This command is used to configure BGP router to advertise default route. ‘Redistribute’ command should be configured to complete this configuration. ARAMETERS None. EFAULT Disabled. XAMPLE ALU#(config-router bgp AS30)# default-information originate Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 544: Ip Bgp-Community New-Format

    Set clauses: community 0:100 ALU(config)# ALU(config)# no ip bgp-community new-format ALU(config)# show route-map test3 route-map test3, permit, sequence 5 Description: Exit Policy: Match clauses: Set clauses: community 100 ALU(config)# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 545: Neighbor Activate

    Name of a BGP peer group. peer-group-name Specify the time in seconds. 0-600 EFAULT 30 seconds for external peers and 5 seconds for internal peers. XAMPLE ALU(config-router bgp AS30)#neighbor 1.1.1.1 advertisement- interval 77 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 546: Neighbor Capability

    Description Neighbor’s IP address. ip-address Name of a BGP peer group. peer-group-name EFAULT No default route is sent to the neighbor. XAMPLE ALU(config-router bgp AS30)# neighbor 1.1.1.1 default-originate Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 547: Neighbor Description

    Descriptive text (up to 80 characters) that describes the line neighbor. EFAULT There is no description of the neighbor. XAMPLE ALU(config-router bgp AS30)# neighbor 1.1.1.1 description linktoisp1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 548: Neighbor Distribute-List

    Access list is applied to incoming advertisements from that neighbor. Access list is applied to outgoing advertisements to that neighbor. EFAULT No BGP neighbor is specified. XAMPLE ALU(config-router bgp AS30)# neighbor 1.1.1.1 distribute-list 1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 549: Neighbor Ebgp-Multihop

    Name of a BGP peer group. peer-group-name The maximum hop count to reach neighbor. 1-255 EFAULT Only directly connected external neighbors are allowed. XAMPLE ALU(config-router bgp AS30)# neighbor 1.1.1.1 ebgp-multihop Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 550: Neighbor Filter-List

    Access list to incoming routes. Access list to outgoing routes. EFAULT No filter is used. XAMPLE ALU(config-router bgp AS30)#neighbor 1.1.1.1 filter-list 1 in Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 551: Neighbor Local-As

    Name of a BGP peer group. peer-group-name Any valid AS number. 1-65535 Note: Do not specify the AS number to which the neighbor belongs. EFAULT None. XAMPLE ALU(config-router bgp AS30)#neighbor 1.1.1.1 local-as 10 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 552: Neighbor Maximum-Prefix

    EFAULT This command is disabled by default. There is no limit on the number of prefixes. XAMPLE ALU(config-router bgp AS30)#neighbor 1.1.1.1 maximum-prefix 20000 50 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 553: Neighbor Next-Hop-Self

    IP address of the BGP neighbor. ip-address Name of a BGP peer group. peer-group-name EFAULT There are no BGP neighbors in a peer group. XAMPLE ALU(config-router bgp AS30)#neighbor 1.1.1.1 peer-group P1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 554: Neighbor Peer-Group (Creating)

    This command is used to create BGP peer group. ARAMETERS Parameter Description Name of the BGP peer group. peer-group-name EFAULT By default, there is no BGP peer group. XAMPLE ALU(config-router bgp AS30)#neighbor testpeergroup peer-group Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 555: Neighbor Prefix-List

    Access list is applied to incoming advertisements from that neighbor. Access list is applied to outgoing advertisements to that neighbor. EFAULT No BGP neighbor is specified. XAMPLE ALU(config-router bgp AS30)#neighbor 1.1.1.1 prefix-list PL1 in Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 556: Neighbor Remote-As

    Private AS values are from 64512 to 65535. ARAMETERS Parameter Description Neighbor’s IP address. ip-address Name of a BGP peer group. peer-group-name EFAULT None. XAMPLE ALU(config-router bgp AS30)# neighbor 1.1.1.1 remove-private-as Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 557: Neighbor Route-Map

    Name of route map. name Apply to incoming routes. Apply to outgoing routes. EFAULT ALUE No route maps are applied to a peer. XAMPLE ALU(config-router bgp AS30)#neighbor 35.0.0.0 route-map R1 in Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 558: Neighbor Route-Reflector-Client

    Description Neighbor’s IP address. ip-address Name of a BGP peer group. peer-group-name EFAULT No community attribute is sent to any neighbor. XAMPLE ALU(config-router bgp AS30)# neighbor 35.0.0.1 send-community Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 559: Neighbor Shutdown

    IP address of the BGP-speaking neighbor. ip-address Name of a BGP peer group. peer-group-name Store incoming updates. inbound EFAULT By default, soft re-configuration is disabled. XAMPLE ALU(config-router bgp AS30)#neighbor 35.0.0.0 soft- reconfiguration inbound Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 560: Neighbor Timers

    Keepalive message interval for the neighbor. 0-65535 Hioldtime interval for the neighbor. 0-65535 EFAULT ALUE Keepalive time: 60 seconds. Holdtime: 180 seconds. XAMPLE ALU(config-router bgp AS30)#neighbor 35.0.0.0 timers 50 500 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 561: Neighbor Unsupress-Map

    Name of the route map. route-map-name EFAULT ALUE If aggregate-address command is configured, only then the aggregate routes are advertised. XAMPLE ALU(config-router bgp AS30)#neighbor 1.1.1.1 unsupress-map r1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 562: Neighbor Update-Source

    Name of the interface with its slot/port or interface number. interface-name EFAULT ALUE By default, IP address of the interface connected to neighbor is used for TCP connection. XAMPLE ALU(config-router bgp AS30)#neighbor 1.1.1.1 update-source GigabitEthernet 3/0 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 563: Neighbor Version

    IP address of the BGP-speaking neighbor. ip-address Name of a BGP peer group. peer-group-name Default weight assigned to the routes from this neighbor. 0-65535 XAMPLE ALU(config-router bgp AS30)#neighbor 1.1.1.1 weight 500 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 564: Network

    Name of the route-map. name An absolute weight to a BGP network. 0-65535 EFAULT ALUE No networks are specified. XAMPLE ALU(config-router bgp AS30)#network 35.0.0.0/8 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 565: Router Bgp

    The range for the as-number is 1 - 65535. EFAULT No BGP routing process is enabled by default. XAMPLE ALU(config)# router bgp 30 ALU(config-router bgp AS30)# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 566: Show Ip Bgp

    Displays routes with non-natural masks only. cidr-only Displays routes matching with the communities. community Displays routes matching the community-list. community-list Displays paths that have suppressed due to dampening. dampened-paths Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 567 Origin INCOMPLETE, metric 110, localpref 100, weight 50, valid, external, uptime 00:15:12 best (One Available Path) Number of paths available: 1 Route is advertised to following peers: 1.1.1.2 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 568 *> 4.0.0.0/8 1.1.1.2 100i *> 5.0.0.0/8 1.1.1.2 100i *> 6.0.0.0/8 1.1.1.2 100i * d 7.0.0.0/8 1.1.1.2 100i *> 111.111.111.0/24 111.111.111.112 110 300? * d 118.0.0.0/24 111.111.111.112 110 300? Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 569: Show Ip Bgp Cidr-Only

    Origin codes: i - IGP, e - EGP, ? - incomplete Prefix/len Next Hop Metric LocPref Weight Path *> 111.111.111.0/24 111.111.111.112 110 300? * d 118.0.0.0/24 111.111.111.112 110 300? Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 570: Show Ip Bgp Community

    LocPref Weight Path *> 1.0.0.0/8 1.1.1.2 100i *> 4.0.0.0/8 1.1.1.2 100i *> 5.0.0.0/8 1.1.1.2 100i *> 6.0.0.0/8 1.1.1.2 100i * d 7.0.0.0/8 1.1.1.2 100i * d 118.0.0.0/24 111.111.111.112 110 300? Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 571: Show Ip Bgp Community-List

    BGP community list. ARAMETERS Parameter Description Community list number. 1-199 Displays the routes that have an exact match. exact-match XAMPLE ALU# show ip bgp community-list 20 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 572: Show Ip Bgp Dampened-Paths

    IP address of the peer that advertised this path. From Time (in hours:minutes:seconds) after which the path will be Reuse made available. AS path of the route that is being dampened. Path Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 573: Show Ip Bgp Filter-List

    Number of an autonomous system path access list. It can be a number from 1 to 199. EFAULT ALUE None. XAMPLE ALU# show ip bgp filter-list 2 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 574: Show Ip Bgp Flap-Statistics

    This command is entered in the Super User Mode or Configuration Mode. This command displays the routes with inconsistent originating autonomous systems. ARAMETERS None. XAMPLE ALU# show ip bgp inconsistent-as Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 575: Show Ip Bgp Neighbors

    Sent 333 messages, 7 notifications, 0 in queue Minimum time between advertisement runs is 30 seconds For Address Family IPv4 Unicast Route refresh request: received 0, sent 0 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 576 Autonomous system of the neighbor. remote AS Indicates that this peer is an EBGP peer. external link Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 577 Number of prefixes accepted from neighbor. accepted prefix Number of prefixes filtered. filtered Number of prefixes dampened. dampened Number of updates pending. updates pending Number of withdrawals pending. withdrawal pending Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 578 TCP window size of the local host. rcvwnd A calculated smoothed round-trip timeout. SRTT Round-trip timeout. RTTO Variance of the round-trip time. Smallest recorded round-trip timeout (hard wire value used minRTT for calculation). Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 579: Show Ip Bgp Paths

    Number of routes using that path. Refcount The Multi Exit Discriminator (MED) metric for the path. Metric The autonomous system path for that route, followed by the Path origin code for that route. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 580: Show Ip Bgp Peer-Group

    AS path regular expression. ARAMETERS Parameter Description Regular expression to match the BGP autonomous system regular- paths. expression XAMPLE GP local router ID is 40.0.0.1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 581: Show Ip Bgp Summary

    BGP messages sent to that neighbor. MsgSent Number of messages from that neighbor waiting to be processed. Number of messages waiting to be sent to that neighbor. OutQ Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 582: Synchronization

    This command is entered in the Address Family or Router Configuration Mode. This command is used to enable the synchronization between the BGP and IGP system. ARAMETERS None. EFAULT Enabled. XAMPLE ALU(config-router bgp AS30)# synchronization Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 583: Timers Bgp

    BGP assumes that neighbor is dead. EFAULT ALUE The default keepaalive interval is 60 seconds. The default holdtime interval is 180 seconds. XAMPLE ALU(config-router bgp AS30)# timer bgp 100 500 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 584: Open Shortest Path First

    It includes table of parameters, default values, and configuration examples for OSPF configuration as quick-start and reference information. The commands are described in alphabetical order. For more detailed information about using and configuring the OSPF, refer to the OmniAccess 5740 Unified Services Gateway CLI Configuration Guide. Alcatel-Lucent...

  • Page 585: Alt-Abr

    Enables Message Digest 5 (MD5) authentication on the message-digest area specified by the area-id argument. EFAULT ALUE The default authentication is Plain Text authentication. XAMPLE ALU(config-router ospf 30)# area 1 authentication message- digest Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 586: Area Default-Cost

    Cost for the default summary route used for a stub or NSSA. 0-16777215 The acceptable value is a 24-bit number. EFAULT ALUE Default cost is 1. XAMPLE ALU(config-router ospf 30)# area 1 default-cost 100 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 587: Area Nssa

    Allows an area to be a not-so-stubby area but not have no-summary summary routes injected into it. EFAULT ALUE No NSSA area is defined. XAMPLE ALU(config-router ospf 30)# area 1 nssa Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 588: Area Range

    3 summary LSA is suppressed and the component networks remain hidden from other networks. EFAULT ALUE Disabled. XAMPLE ALU(config-router ospf 30)# area 1 range 10.0.0.0/8 not- advertise Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 589: Area Stub

    Prevents an ABR from sending summary link no-summary advertisements into the stub area. EFAULT ALUE No stub area is defined. XAMPLE ALU(config-router ospf 30)# area 1 stub no-summary Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 590: Area Virtual-Link

    1-8192 The authentication key. authentication- key <0-0> key The message digest authentication key identifier. <1-255> md5 key EFAULT ALUE None. XAMPLE ALU(config-router ospf 30)# area 1 virtual-link 202.202.202.5 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 591: Auto-Cost

    Description OSPF process ID. 1-65535 Neighbor router ID. neighbor-id The interface name for the which counters is to be cleared. interface-name XAMPLE ALU# clear ip ospf 1 redistribution Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 592: Compatible Rfc1583

    Use the no compatible rfc1583 command to enable the calculation method used per RFC 2328. ARAMETERS None. EFAULT ALUE Compatible with RFC 1583. XAMPLE ALU(config-router ospf 30)# compatible rfc1583 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 593: Default-Information Originate

    The default is type 2 external route. <route-map name> Routing process will generate the default route if the route map is satisfied. EFAULT ALUE Disabled. XAMPLE ALU(config-router ospf 30)# default-information originate always metric 100 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 594: Default-Metric

    OSPF routing protocol. ARAMETERS Parameter Description Default metric value appropriate for the specified routing <1-4294967295> protocol. EFAULT ALUE Default metric is 20. XAMPLE ALU(config-router ospf 30)#default-metric 60000 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 595: Distance

    IP standard access list. 1-99 IP standard access list (expanded range). 1300-1999 EFAULT ALUE The default distance is 110. XAMPLE ALU(config-router ospf 30)# distance 60 10.0.0.0/8 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 596: Distance Ospf

    Sets the distance for all routes within an area. intra-area <1- 255> EFAULT ALUE The default distance for each type is 110. XAMPLE ALU(config-router ospf 30)# distance ospf external 10 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 597: Ip Ospf Authentication

    0-0 password key The OSPF password. Password need not be the same throughout the area but needs to be the same between neighbors. EFAULT ALUE No password is specified. XAMPLE ALU(config-if GigabitEthernet3/0)# ip ospf authentication-key passwordtest Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 598: Ip Ospf Cost

    LSAs on OSPF interface. ARAMETERS None. EFAULT ALUE By default, database-filtering is not enabled. All outgoing LSAs are flooded to the interface. XAMPLE ALU(config-if GigabitEthernet3/0)# ip ospf database-filter all Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 599: Ip Ospf Dead-Interval

    This command is entered in the Interface Configuration Mode. This command is used to suppress the unnecessary flooding of LSAs in stable topologies. ARAMETERS None. EFAULT ALUE Disabled. XAMPLE ALU(config-if GigabitEthernet3/0)# ip ospf flood-reduction Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 600: Ip Ospf Hello-Interval

    Key number in the range from 1 to 255. <1-255> The message digest authentication key. EFAULT ALUE OSPF MD5 authentication is disabled. XAMPLE ALU(config-if GigabitEthernet3/0)# ip ospf message-digest-key 100 md5 passwordline Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 601: Ip Ospf Mtu-Ignore

    Specifies the OSPF point-to-multipoint network. point-to- multipoint Specifies the OSPF point-to-point network. point-to-point EFAULT ALUE Depends on the interface type. XAMPLE ALU(config-if GigabitEthernet3/0)# ip ospf network non- broadcast Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 602: Ip Ospf Priority

    Description A number value that specifies the priority of the router. 0-255 EFAULT ALUE The default OSPF interface priority is 1. XAMPLE ALU(config-if GigabitEthernet3/0)# ip ospf priority 2 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 603: Ip Ospf Retransmit-Interval

    Time (in seconds) required to send a link-state update. The 1-65535 default is 1 seconds. EFAULT ALUE The default transmit-delay is 1 second. XAMPLE ALU(config-if GigabitEthernet3/0)# ip ospf transmit-delay 2 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 604: Log-Adjacency-Changes

    This command is entered in the Router Configuration Mode. This command is used to enable logging of adjacency changes. ARAMETERS Parameter Description Logs the messages for all state changes. detail EFAULT ALUE Enabled. XAMPLE ALU(config-router ospf 30)# log-adjacency-changes detail Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 605: Neighbor

    The default is 120 seconds (2 minutes). This keyword does not apply to point-to-multipoint interfaces. EFAULT ALUE None. XAMPLE ALU(config-router ospf 30)# neighbor 10.0.0.1 priority 1 poll- interval 130 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 606: Network Area

    INTERFACE no passive-interface {<interface-name>|default}} This command is entered in the Router Configuration Mode. The “no” command enables sending of hello packets and routing updates on a specified interface. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 607: No Log-Adjacency-Changes

    <1-8192>] authentication-key <0-0> <key>]| message-digest-key <1-255> md5 <key>]] This command is entered in the Router Configuration Mode. The “no” command removes the virtual link with neighbor specified by router ID. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 608: Passive-Interface

    Internet Service Providers (ISPs) and large enterprise networks where the distribution routers have more than 200 interfaces. EFAULT ALUE Routing updates are sent on enabled interfaces. XAMPLE ALU(config-router ospf 30)# passive-interface GigabitEthernet Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 609: Router-Id

    It is locally assigned and can be any positive integer. A unique value is assigned for each OSPF routing process. EFAULT ALUE No OSPF routing process is defined. XAMPLE ALU(config)# router ospf 30 ALU(config-router ospf 30)# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 610: Show Ip Ospf

    SPF algorithm executed 8 times Area ranges are Number of LSA 5. Checksum Sum 0x234A3 Number of opaque link LSA 0. Checksum Sum 0x0 Flood list length 0 ALU# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 611 Number of opaque link-state advertisements. Number of opaque AS LSA Number of areas configured for the router. Number of areas in this router External flood list length. External flood list length Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 612: Show Ip Ospf Border-Routers

    The area ID of the area from which this route is learned. Area The internal number of the shortest path first (SPF) SPF 5 calculation that installs this route. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 613: Show Ip Ospf Database

    [link-state-id] [adv-router [ip-address]] show ip ospf [process-id [area-id]] database [nssa-external] [link-state-id] [self-originate][link-state-id] show ip ospf [process-id [area-id]] database [opaque-area] [link-state-id] show ip ospf [process-id [area-id]] database [opaque-area] [link-state-id] [adv-router [ip-address]] Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 614 ESCRIPTION This command is entered in the Super User Mode or Configuration Mode. This command displays lists of information related to the OSPF database for a specific router. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 615 Router Link States (Area 0) Link ID ADV Router Seq# Checksum Link count 1.1.1.1 1.1.1.1 0x800000FC 0xAE6C 1.1.1.2 1.1.1.2 0x80000019 0xF2F0 6.6.6.6 6.6.6.6 2430 0x80000008 0xC20B Net Link States (Area 0) Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 616 Link state ID of LSA. Link ID Advertising router ID of LSA. ADV Router LSA age. LSA sequence number. Seq# LSA checksum. Checksum Number of links in LSA. Link count Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 617 LS Seq Number: 80000001 Checksum: 0x5D36 Length: 36 Network Mask: /24 Metric Type: 2 (Larger than any link state path) TOS: 0 Metric: 20 External Route Tag: 0 LS age: 1654 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 618 Link State ID: 1.1.1.2 (address of Designated Router) Advertising Router: 1.1.1.2 LS Seq Number: 80000004 Checksum: 0xBD46 Length: 32 Network Mask: /32 Attached Router: 1.1.1.1 Attached Router: 1.1.1.2 Net Link States (Area 1) Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 619 Advertising Router: 1.1.1.2 LS Seq Number: 80000004 Checksum: 0x9D0B Length: 36 Network Mask: /24 Metric Type: 2 (Larger than any link state path) TOS: 0 Metric: 20 Forward Address: 2.2.2.2 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 620 TOS 0 Metrics: 10 LS age: 118 Options: (No TOS-capability, No DC, Opq Bit) LS Type: Router Links Link State ID: 1.1.1.2 Advertising Router: 1.1.1.2 LS Seq Number: 80000019 Checksum: 0xF2F0 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 621 Options: (No TOS-capability, No DC, Opq Bit) LS Type: Router Links Link State ID: 6.6.6.6 Advertising Router: 6.6.6.6 LS Seq Number: 80000002 Checksum: 0xD8F9 Length: 36 Number of Links: 1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 622 ADV Router Seq# Checksum 1.1.1.0 1.1.1.2 0x80000003 0x65AC Summary ASBR Link States (Area 1) Link ID ADV Router Seq# Checksum 1.1.1.1 1.1.1.2 0x80000002 0x4FC1 Type-5 AS External Link States Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 623 LS Type: Summary Links (Network) Link State ID: 1.1.1.0 (summary Network Number) Advertising Router: 1.1.1.2 LS Seq Number: 80000003 Checksum: 0x65AC Length: 28 Network Mask: /24 TOS: 0 Metric: 1 ALU# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 624: Show Ip Ospf Flood-List

    Link-state ID of the LSA. LS ID Router ID of the advertising router. ADV RTR Sequence number of the LSA. Seq NO Age of LSA (in seconds). Checksum of LSA. Checksum Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 625: Show Ip Ospf Interface

    Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5 Hello due in 00:00:03 Neighbor Count is 1, Adjacent neighbor count is 1 Adjacent with neighbor 6.6.6.6 (Designated Router) Suppress hello for 0 neighbor(s) Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 626 Interface IP address, subnet mask, and Internet Address area address. OSPF Process ID. Process ID OSPF Router ID. Router ID The interface network type. Network Type Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 627: Show Ip Ospf Interface-Process

    Interface name with its slot and port interface-name number. XAMPLE ALU(config)# show ip ospf interface-process Interface-Process Table: ------------------------------------------------------- Interface Attached Process Waiting Process GigabitEthernet3/0 GigabitEthernet3/0 loopback 9 loopback1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 628: Show Ip Ospf Neighbor

    FULL/BDR 00:00:37 2.2.2.1 GigabitEthernet3/1 XAMPLE ALU# show ip ospf neighbor GigabitEthernet 3/1 Process ID 1 Neighbor ID State Dead Time Address Interface 6.6.6.6 FULL/DR 00:00:35 2.2.2.1 GigabitEthernet3/1 ALU# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 629 Neighbor is up for the neighbor went into two-way state. Number of elements in the retransmission queue length retransmission queue. Number of times update packets have been resent during flooding. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 630: Show Ip Ospf Process-Interface

    This command is entered in the Super User Mode or Configuration Mode. This command displays the process interface table. ARAMETERS None. XAMPLE ALU(config-router ospf 20)# show ip ospf process-interface Process-Interface Table: Process-Id Interfaces GigabitEthernet3/0, GigabitEthernet3/0 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 631: Show Ip Ospf Request-List

    Neighbor 6.6.6.6, interface GigabitEthernet 3/1 address 2.2.2.2 Type LS ID ADV RTR Seq NO Checksum 1280 192.175.142.0 1.1.1.1 0x80000003 0x9FFB 1280 192.175.206.0 1.1.1.1 0x80000003 0xDC7E 1280 192.175.15.0 1.1.1.1 0x80000003 0x1A01 ALU# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 632: Show Ip Ospf Retransmission-List

    Neighbor 6.6.6.6, interface GigabitEthernet 3/1 address 2.2.2.2 Link state retransmission due in 0 sec, Queue length 1 Type LS ID ADV RTR Seq NO Checksum 1.1.1.0 1.1.1.2 0x80000001 0x69AA Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 633: Show Ip Ospf Route

    OSPF Router with ID (1.1.1.2) (Process ID 1) Dest/Mask Type Adv-Rtr Cost Area/tag NextHop 2.0.0.0/8 Summ 1.1.1.2 0.0.0.0 1.1.1.0/24 Ext-2 0.0.0.0 1.1.1.2 2.0.0.0/8 Summ 1.1.1.2 0.0.0.0 2.2.2.0/24 Ext-2 0.0.0.0 2.2.2.2 45.5.5.0/24 Ext-2 0.0.0.0 0.0.0.0 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 634: Show Ip Ospf Summary-Address

    The following is sample output from the ‘show ip ospf summary-address’ command: ALU# show ip ospf summary-address OSPF Process 1, Summary-address 192.175.0.0/255.255.0.0 Metric -1, Type 2, Tag 4 2.0.0.0/ 255.0.0.0 Metric 20, Type 2, Tag 0 router-2(config)# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 635: Show Ip Ospf Virtual-Links

    The transmit delay (in seconds) on the Transmit Delay is 1 sec virtual link. The interface state. State POINT_TO_POINT The various timer intervals configured for Timer intervals... the link. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 636: Summary-Address

    This keyword applies to OSPF only. EFAULT ALUE None. XAMPLE ALU(config-router ospf 30)# summary-address 20.0.0.0/8 tag 20 ALU(config-router ospf 30)# summary-address 10.0.0.0/8 not advertise Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 637: Timers Lsa-Group-Pacing

    The interval in seconds at which LSAs 10-1800 are grouped and refreshed, check- summed or aged. EFAULT ALUE The default lsa-group pacing interval is 60 seconds. XAMPLE ALU(config-router ospf 30)# timers lsa-group-pacing 100 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 638: Timers Spf

    EFAULT ALUE SPF schedule delay is 5 seconds. Hold time between two SPFs is 10 seconds. XAMPLE ALU(config-router ospf 30)# timers spf 20 10 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 639: Write Ospf

    ESCRIPTION This command is entered in the Router Configuration Mode. This command is used to view the OSPF running configuration. ARAMETERS None. XAMPLE ALU(config-router ospf 30)# write ospf Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 640: Multicast Routing

    It includes table of parameters, default values, and configuration examples for Multicast Routing configuration as quick-start and reference information. The commands are described in alphabetical order. For more detailed information about Multicast Routing configuration, refer to the OmniAccess 5740 Unified Services Gateway CLI Configuration Guide. Alcatel-Lucent...

  • Page 641: Pim Configuration Commands

    Address of the multicast group. group-address Clears the PIM states of the specified source (S) for given source-address group (G) i.e. (S,G) states. XAMPLE ALU# clear ip pim state-info Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 642: Ip Multicast-Routing

    Heading1 or Heading1NewPage text (automatic) ip multicast-routing IP MULTICAST ROUTING ip multicast-routing ESCRIPTION This command is entered in the Router Configuration Mode. This command enables multicast routing and forwarding on the OmniAccess 5740 USG. ARAMETERS None. EFAULT Disabled by default. XAMPLE ALU(config)# ip multicast-routing...

  • Page 643: Ip Pim Bsr-Candidate

    Indicates the hash-mask-length. This value is used to select 0-32 one RP. Indicates the priority of the BSR router. 0-255 EFAULT ALUE None. XAMPLE ALU(config)# ip pim bsr-candidate GigabitEthernet3/0 1 10 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 644: Ip Pim Dr-Priority

    Use this command to configure this interval (in seconds). ARAMETERS Parameter Description Denotes the interval between periodic join and prune 1-65535 messages. EFAULT ALUE The default message-interval is 60 seconds. XAMPLE ALU(config)# ip pim message-interval 30 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 645: Ip Pim Neighbor-Filter

    Parameter Description RP router address. ip-address This is used to give preference to static RP over dynamic RP. override EFAULT ALUE None. XAMPLE ALU(config)# ip pim rp-address 11.0.0.3 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 646: Ip Pim Rp-Candidate

    Parameter Description Name of the interface. interface-name access-list-name Name of a specific access list. Standard access-list number. 1-99 EFAULT ALUE None. XAMPLE ALU(config)# ip pim rp-candidate GigabitEthernet3/0 group-list Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 647: Ip Pim Rp-Candidate-Priority

    PIM starts sending hello packets to form neighborship. ARAMETERS None. EFAULT ALUE By default PIM is not enabled on an interface. XAMPLE ALU(config-if GigabitEthernet3/0)# ip pim sparse-mode Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 648: Ip Pim Spt-Threshold

    Name of a specific access list. standard access- list-name EFAULT ALUE Switch to SPT just after receiving first packet. That means ‘0’ Kbps. XAMPLE ALU(config)# ip pim spt-threshold 100 group-list 10 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 649: Ip Pim Query-Interval

    NO IP PIM SPARSE MODE no ip pim sparse-mode This command is entered in the Interface Configuration Mode. This command is used to disable PIM on an interface. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 650: Show Ip Pim Rp-Hash

    Uptime: 00:04:24, BSR Priority: 0, Hash Mask Length: 30 Next Bootstrap Message in 00:00:46 seconds Candidate RP: 2.2.2.1 (GigabitEthernet3/0), Group Acl: test Next Cand_RP_Advertisement in 00:00:35 seconds (config)# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 651: Show Ip Pim Interface

    8.8.8.8 6.6.6.6 Serial0/1:0 v2/S 1 6.6.6.7 ALU# show ip pim interface GigabitEthernet 3/0 Address Interface Ver/ Nbr Query DR Mode Count Intvl Prior 3.3.3.4 GigabitEthernet3/0 v2/S 0 3.3.3.4 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 652: Show Ip Pim Neighbor

    00:09:33/00:01:39 1/ DR 6.6.6.7 Serial0/1:0 00:09:45/00:01:33 1/ DR ALU# show ip pim neighbor Serial 0/0:0 PIM Neighbor Table Neighbor Interface Uptime/Expires DRAddress Prio/Mode 8.8.8.8 Serial0/0:0 00:09:43/00:01:33 1/ DR Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 653: Show Ip Pim Rp Mapping

    Info source: 1.1.1.1 (?), via bootstrap, priority 0, holdtime = 53760 Uptime: 00:00:45, expires 14:55:15 Group(s) 228.0.0.0/8 RP 2.2.2.1 (?) v2 Info source: 2.2.2.1 (?), via bootstrap, priority 0, holdtime = 38400 Uptime: 00:03:55, expires 10:39:05 (config)# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 654: Show Ip Pim State-Info

    K - KeepAlive Timer Running, S - SPT bit set (*,224.1.1.1), JOINED 00:00:55/00:00:05, RP 5.5.5.5, flags: Incoming interface: GigabitEthernet3/1, RPF neighbor 5.5.5.5 Downstream interface state: GigabitEthernet3/0, 00:00:55, flags:A inherited_olist: GigabitEthernet3/0 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 655: Igmp Configuration Commands

    ALU(config-if GigabitEthernet3/0)# ip igmp access-group 10 IP MULTICAST ROUTING ip multicast-routing ESCRIPTION This command is entered in the Router Configuration Mode. This command enables multicast routing and forwarding on the OmniAccess 5740 USG. ARAMETERS None. EFAULT Disabled by default. XAMPLE...

  • Page 656: Ip Igmp Join-Group

    Number of retransmission of group specific query. This is also called as robustness count. EFAULT ALUE The default last-member-query-count is 2. XAMPLE ALU(config-if GigabitEthernet3/0)# ip igmp last-member-query- count 3 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 657: Ip Igmp Last-Member-Query-Interval

    Denotes the interval at which the IGMP router sends IGMP 1-65535 general query messages. EFAULT ALUE The default query-interval is 125 seconds. XAMPLE ALU(config-if GigabitEthernet3/0)# ip igmp query-interval Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 658: Ip Igmp Query-Max-Response-Time

    ARAMETERS Parameter Description Querier time-out value. 60-300 EFAULT ALUE Default IGMP querier-timeout is 255 seconds. XAMPLE ALU(config-if GigabitEthernet3/0)# ip igmp querier-timeout 100 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 659: Ip Pim Sparse-Mode

    NO IP PIM SPARSE MODE no ip pim sparse-mode This command is entered in the Interface Configuration Mode. This command is used to disable IGMP on an interface. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 660: Show Ip Igmp Groups

    Displays groups on the specified interface. interface-name XAMPLE ALU# show ip igmp groups Interface Group-Address Last-Reporter Uptime Expires(sec:msec) GigabitEthernet3/0 224.1.1.1 3.3.3.4 0:0:51 217:89 GigabitEthernet3/1 224.0.1.40 5.5.5.5 4:12:42 147:509 GigabitEthernet3/1 225.5.5.5 5.5.5.5 0:0:7 252:620 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 661: Show Ip Igmp Interface

    Number of joins on this interface = 84 Number of leave message on this interface = 7 Querier on this interface = 7.7.7.3 Interface DR is 7.7.7.3 Total groups on this interface Group 1 224.1.1.1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 662: Multicast Global Commands

    ESCRIPTION This command is entered in the Super User Mode or Configuration Mode. This command resets the multicast traffic counters. ARAMETERS None. XAMPLE ALU# clear ip multicast traffic Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 663: Show Ip Mroute

    Incoming Interface: Serial0/0:0, RPF failures 0 Outgoing Interfaces (1): GigabitEthernet3/0 (*, 225.5.5.5), uptime 0:09:37, flags: Rates: Waiting for latest... Incoming Interface: GigabitEthernet3/1, RPF failures 0 Outgoing Interfaces (0): Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 664: Show Ip Multicast Traffic

    IP Multicast statistics: Rcvd: 4449 total, 838 link local Sent: 3334 forwarded, 0 send register 0 send assert, 3 first data pkt notice Errors: 1 rpf failure, 1 drop Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 665 Left running head: Chapter name (automatic) Multicast Routing Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 666: Policy Based Routing

    It includes table of parameters, default values, and configuration examples for PBR configuration as quick-start and reference information. The commands are described in alphabetical order. For more detailed information about using and configuring PBR, refer to the OmniAccess 5740 Unified Services Gateway CLI Configuration Guide. Alcatel-Lucent...

  • Page 667: Clear Ip-Policy Statistics

    This command is entered in the Configuration Mode. This command is used to create an IP policy. ARAMETERS Parameter Description Name for the IP policy being configured. name XAMPLE ALU(config)# ip-policy pbr1 ALU(config-ip-policy-pbr1)# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 668 Specifies the egress path of the packet. next-hop <ip-address> Example ALU(config-ip-policy-pbr1)# 10 match m1 m2 not m3 interface GigabitEthernet 3/0 next hop 1.2.2.1 ALU(config-ip-policy-pbr1)# 20 match m1 m2 next hop 1.2.2.2 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 669: Ip-Policy

    IP policy attached to an interface. NO RULE no rule <1-65535> This command is issued in the PBR Configuration Mode. The command deletes a rule corresponding to the rule number. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 670: Show Ip-Policy

    Displays the details of a specific IP name policy. XAMPLE ALU(config)# show ip-policy ! IP-Policy configuration ip-policy pbr1 10 match any m1 m2 interface GigabitEthernet3/0 next-hop 1.2.2.1 exit interface GigabitEthernet3/1 ip-policy pbr1 exit Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 671: Show Ip-Policy Statistics

    PBR - Policy Based Routed, Drop - Dropped 0 packets forwarded by best effort IP forwarding ip-policy pbr1 : PBR - 0 Drop - 0 0 hits on : 1 match any m1 next-hop 1.1.1.1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 672: Virtual Routing And Forwarding

    For more detailed information on using and configuring the VRF-CE Protocol, refer to the OmniAccess 5740 Unified Services Gateway CLI Configuration Guide. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 673: Address Family

    LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# router bgp 30 ALU(config-router bgp AS30)# address-family ipv4 unicast vrf ALU_vrf ALU(config-router-af-ucast)# ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 674: Address Family

    LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# router rip ALU(config-router rip)# address-family ipv4 unicast vrf ALU_vrf ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 675: Arp

    MAC entry. The MAC address of the specified host. hardware-address LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# arp vrf ALU-vrf 10.91.0.21 0004.9BE9.C4A8 ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 676: Clear Arp-Cache

    The name of the VRF for which the ARP vrf-name cache is to be cleared. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# clear arp-cache vrf ALU-vrf ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 677: Clear Arp Traffic

    ARP statistics for the specified VRF, else for the default VRF. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# clear arp traffic ALU-vrf ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 678: Clear Ip Bgp

    Name of the VRF for which the BGP vrf-name connection is to be cleared. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# clear ip bgp vrf ALU-vrf 10 ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 679: Clear Ip Traffic

    Clears counters of IP traffic statistics in a vrf-name specified VRF. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# clear ip traffic vrf ALU-vrf ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 680: Clear Ip Route

    Name of the VRF for which the IP routing vrf-name table is to be cleared. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# clear ip route vrf ALU-vrf * ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 681: Description

    VRF. This is for user purpose only. ARAMETERS Parameter Description The descriptive text for the VRF. description-string LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-vrf)# description alcatel-lucent-routing ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 682: Ip Route

    An administrative distance of the route. 1-255 LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# ip route vrf ALU-vrf 1.1.1.0/24 2.2.2.2 ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 683: Ip Vrf

    Description The name of the VRF to be created. vrf-name LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# ip vrf ALU-vrf ALU(config-vrf)# ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 684: Ip Vrf Forwarding

    The name of the VRF to be associated to an vrf-name interface. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-if GigabitEthernet3/0)# ip vrf forwarding ALU-vrf ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 685: Ping

    Host name of the remote host/router. hostname LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# ping vrf ALU-vrf 1.2.3.1 ELEASE ISTORY Release 2.3: parameter vrf <vrf-name> was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 686: Router Ospf

    OSPF instance is to be associated. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# router ospf 1 vrf ALU-vrf ALU(config-router ospf 1)# ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 687: Show Arp

    Age (min) Hardware Addr Type Interface Internet 4.4.4.4 0011.8b00.8491 ARPA GigabitEthernet3/0 Internet 4.4.4.2 Incomplete ARPA GigabitEthernet3/0 Internet 4.4.4.1 0002.166f.c4d0 ARPA GigabitEthernet3/0 ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 688: Show Arp Traffic

    Req/Resp recvd without Mac on interface Req not sent because of no IP Address Req not sent becuase of no MAC Resp received without req ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 689: Show Ip Bgp

    The name of the VRF for which the BGP vrf-name routing table information is to be viewed. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# show ip bgp ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 690: Show Ip Bgp Community

    BGP communities for the specified VRF. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# show ip bgp community ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 691: Show Ip Bgp Community-List

    BGP community list for the specified VRF. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# show ip bgp community-list ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 692: Show Ip Bgp Flap-Statistics

    BGP routes for the specified VRF. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# show ip bgp flap-statistics ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 693: Show Ip Bgp Neighbors

    If the VRF name is specified, it displays vrf-name the neighbors connection state in specified VRF. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# show ip bgp neighbors ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 694: Show Ip Bgp Peer-Group

    VRF. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# show ip bgp peer-group ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 695: Show Ip Fib

    Branch coalesc: 30 System Adjacency Counters: Adjacencies : 4294967291 Adj reference : 106 Adj unrefer : 53 Adj Memory : 496 ALU(config)# ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 696: Show Ip Protocols

    Weight 4.4.4.1 Routing for Networks: Routing Information Sources: Gateway Distance Last Update 4.4.4.1 00:02:12 Distance: external 20 internal 200 local 200 ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 697: Show Ip Route

    4.0.0.0 is variably subnetted, 2 subnets, 2 masks 4.0.0.0/8 [20/0] via 4.4.4.1, GigabitEthernet3/0 4.4.4.0/24 [0/0] is directly connected, GigabitEthernet3/0 5.0.0.0/8 [20/0] via 4.4.4.1, GigabitEthernet3/0 (config)# ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 698: Show Ip Traffic

    0 redirects, 10 echo req, 0 echo rpy 0 timestamp req, 0 timestamp rpy 0 addr mask req, 0 addr mask rpy ALU(config)# ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 699: Show Ip Vrf

    ALU(config)# show ip vrf interfaces ALU Interface IP Address Protocol GigabitEthernet3/1 1.1.1.1 Down ALU(config)# show ip vrf interfaces ALU-vrf Interface IP Address Protocol GigabitEthernet3/0 2.2.2.2 ALU-vrf ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 700: Ssh

    SSH version number - version 1 or version {1|2} version 2. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# ssh vrf ALU-vrf 10.91.0.25 ELEASE ISTORY Release 2.3: parameter vrf <vrf-name> was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 701: Telnet

    Host name of the remote system. hostname LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# telnet vrf ALU-vrf 10.91.0.22 ELEASE ISTORY Release 2.3: parameter vrf <vrf-name> was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 702: Traceroute

    IP address of the host. ip-address Name of the host. hostname LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# traceroute vrf ALU-vrf 1.2.3.1 ELEASE ISTORY Release 2.3: parameter vrf <vrf-name> was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 703 Left running head: Chapter name (automatic) Virtual Routing and Forwarding Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 704: Part 6 Network Security

    To switch to the beta version, import color def’ns from beta-colors.fm Part 6 Network Security Pagination: Numeric & continuous Optional footer: Alcatel-Lucent with Manual title (to set, preceding redefine ManualTitle OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide section of Beta Beta Beta Beta variable) book...
  • Page 705 Left running head: Chapter name (automatic) Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 706: Network Address Translation

    This chapter provides a terse overview of the CLI syntax needed to configure the Source and Destination NAT. For more detailed information about using and configuring the NAT, refer to the OmniAccess 5740 Unified Services Gateway CLI Configuration Guide. Alcatel-Lucent...

  • Page 707: Source Nat (Snat) Configuration Commands

    Type of NAT, here it is the SNAT. source-nat EFAULT ALUE None. XAMPLE ALU(config-nat-N1)# 10 match m1 source-nat Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 708: Source-Nat Host

    If no address is configured, the IP address of the egress interface on which the NAT policy is applied will be used. XAMPLE ALU(config-nat-N1)# match m1 source-nat host 192.168.10.91 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 709: Source-Nat Pool

    Type of NAT, here it is the SNAT. source-nat The name of the list. list-name EFAULT ALUE None. XAMPLE ALU(config-nat-N1)# match m1 source-nat pool l1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 710: Source-Nat Port-Range

    The upper port number. 2048-65535 EFAULT ALUE If no port range is specified, a default port range of 2048 – 65535 is used. XAMPLE ALU(config-nat-N1)# match m1 source-nat port-range 2048 6000 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 711: Source-Nat Static

    Type of NAT, here it is the SNAT. source-nat Use this keyword to use the static NAT. static EFAULT ALUE By default, NAT enables dynamic mapping. XAMPLE ALU(config-nat-N1)# match m1 source-nat static Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 712: Destination Nat (Dnat) Configuration Commands

    The name of the list. list-name The port number for DNAT. port <1-65535> EFAULT ALUE None. XAMPLE ALU(config-nat-N2)# match m1 destination-nat host 192.168.10.91 ALU(config-nat-N2)# match m1 destination-nat pool l1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 713: Port

    The name of the list. list-name The port number for DNAT. 1-65535 EFAULT ALUE None. XAMPLE ALU(config-nat-N2)# match m1 destination-nat host 192.168.10.91 port 100 ALU(config-nat-N2)# match m1 destination-nat pool l1 port 100 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 714: Destination-Nat Static

    Type of NAT, here it is the DNAT. destination-nat The name of the list. list-name Use this keyword to configure static DNAT. static EFAULT ALUE None. XAMPLE ALU(config-nat-N2)# match m1 destination-nat pool l1 static Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 715: Dnat

    NAT policy. ARAMETERS Parameter Description Name of the NAT policy. nat policy-name XAMPLE The following example clears the counters of NAT ‘N1’. ALU# clear ip nat statistics N1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 716: Clear Ip Nat Statistics

    This command is entered in the NAT Configuration Mode. Use this command to change the priority/order of a specific SNAT/DNAT rule configured. ARAMETERS Parameter Description Priority of the NAT policy rule. 1-65535 EFAULT ALUE None. XAMPLE ALU(config-nat-N1)# change 10 20 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 717: Debug Firewall Nat

    |selector [saddr <ip-address>|daddr <ip-address>|protocol <number>|sport <number> | dport <number>][output|permanent]|all [detail-level]} ESCRIPTION This command is entered in the NAT Configuration Mode. This command turns on the debugging functionality for NAT on the OmniAccess 5740 USG. ARAMETERS Parameter Description Source address. saddr <ip-address>...

  • Page 718: Ip Nat {In | Out

    ALU(config)# exit ALU(config)# ip nat n1 ALU(config-nat n1)# match m1 source-nat ALU(config)# exit ALU(config)# interface GigabitEthernet 3/0 ALU(config-if GigabitEthernet3/0)# ip filter in f1 ALU(config-if GigabitEthernet3/0)# ip nat out n1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 719: Ip Nat Statistics {In|Out|Both

    This command is entered in the Configuration Mode. The "force" keyword will automatically detach the specified NAT policy from respective interfaces, and deletes the policy. This command when used also deletes all the associated NAT policy rules. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 720: No Ip Nat {In | Out

    This command is entered in the NAT Configuration Mode. Use this command to generate a numbering scheme for the SNAT/DNAT rules configured. This command resets the rule priorities in multiples of 10. ARAMETERS None. EFAULT ALUE None. XAMPLE ALU(config-nat-N1)# renumber Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 721: Show Ip Nat

    2. The following example shows the configuration details of a specific NAT policy: ALU# show ip nat n1 ip nat n1 10 match all m1 source-nat 10 match m2 source-nat Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 722: Show Ip Nat Statistics

    Translated: 0, Bypassed: 0, PORTS Allocated: 0, Released: 0 20 match any m2 source-nat host 1.1.1.2 Translated: 0, Bypassed: 0, PORTS Allocated: 0, Released: 0 interface GigabitEthernet3/0 Out Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 723: Show Ip Nat Statistics

    Dropped: 0, Bypassed: 0, Enqueued: 0 10 match any m1 source-nat host 1.1.1.1 NATted Packets: 0 20 match any m2 source-nat host 1.1.1.2 NATted Packets: 0 interface GigabitEthernet3/0 out Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 724: Filter And Firewall

    Alcatel-Lucent’s Common Classifier CLI. All commands are described in alphabetical order. They do not follow the sequence of configuration. For more detailed information on using and configuring the above concepts, refer the OmniAccess 5740 Unified Services Gateway CLI Configuration Guide. Alcatel-Lucent...

  • Page 725: Filter Cli Commands

    In the above example, m4 has a priority 40. Use the “change“ keyword to change the priority of m4. ALU(config)# ip filter f1 ALU(config-filter-f1)# change 40 15 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 726: Clear Ip Filter Statistics

    The “in” keyword implies ingress statistics. The “out” keyword implies egress statistics. XAMPLE ALU# clear ip filter statistics GigabitEthernet3/0 in ALU# clear ip filter statistics GigabitEthernet3/0 out Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 727: Clear L2 Filter Statistics

    ARAMETERS Parameter Description Name of the L2 filter. name LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# clear l2 filter statistics F1 ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 728: Debug Firewall

    Filter Configuration mode. ARAMETERS Parameter Description Name for the filter being configured. name XAMPLE The Example below configures the IP filter f1 ALU(config)# ip filter f1 ALU(config-filter-f1)# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 729 ALU(config)# ip filter f1 ALU(config-filter-f1)# 10 match m1 permit log The example below configures a deny rule with reset option on traffic as defined in ALU(config-filter-f1)# 10 match m1 deny reset Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 730: Ip Filter {In | Out

    Filter is applied to the egress (outgoing) traffic if “out” keyword is used. XAMPLE The following example binds the filter f1 to interface GigabitEthernet3/0. ALU(config)# interface GigabitEthernet3/0 ALU(config-if GigabitEthernet3/0)# ip filter in f1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 731: L2 Filter

    This command prohibits the traffic deny through it. This command allows traffic through it. permit The filter has to be set to this mode to enable it. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 732 If no match cases are given, this default default {deny|permit} keyword is used to just configure a permit or deny on all the incoming traffic. Example ALU(config)# l2 filter F1 ALU(config-filter-F1)# 10 match m3 permit Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 733: L2 Filter {In|Out

    Name for the L2 filter. filter-name LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# interface GigabitEthernet 3/0 ALU(config-if GigabitEthernet3/0)# l2 filter in F1 ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 734: No Debug Firewall Filter

    To force deletion of a filter, use the “force” command. When "force" is used, the filter gets removed from the interface it is attached to. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 735: No L2 Filter {In|Out

    ESCRIPTION This command is entered in the Filter Configuration Mode. Use this command to generate a numbering scheme for the filter rules configured. ARAMETERS None. XAMPLE ALU(config-filter-f1)# renumber Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 736: Show Ip Filter

    The following syntax displays the filter f1’s details. ALU(config-filter-f1)# show ip filter f1 ip filter f1 10 match any m1 permit default deny interface GigabitEthernet3/0 In, Stats Off Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 737: Show Ip Filter Statistics

    The following command displays the filter statistics in the "IN" direction: ALU(config)# show ip filter statistics GigabitEthernet 3/0 in ip filter f1 20 match any m1 permit Hits 0 default deny interface GigabitEthernet3/0 In, Stats On Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 738: Show L2 Filter

    LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# show l2 filter l2 filter F1 default deny interface GigabitEthernet3/0 In ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 739: Show L2 Filter Statistics

    LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# show l2 filter statistics l2 filter F1 default deny Hits 0 interface GigabitEthernet3/0 In ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 740: Stateless

    This command is entered in the Filter Configuration Mode. This command sets the filter behavior to stateless. ARAMETERS None. EFAULT ALUE The filters on the OmniAccess 5740 USG are by default stateful. XAMPLE ALU(config-filter-f1)# stateless Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta...

  • Page 741: Network Attack Prevention Configuration Commands

    This command is entered in the Configuration Mode. This command is used to configure an attack object to be attached to a firewall policy. ARAMETERS Parameter Description Name of the attack. name XAMPLE ALU(config-firewall)# attack A1 ALU(config-firewall-attack-A1)# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 742: Change

    P1 ip policy P1 10 match m1 attack atk drop 15 match m4 attack atk drop 20 match m2 attack atk reset 30 match m3 attack atk reset Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 743: Clear Firewall Session Session-Id

    ID. ARAMETERS Parameter Description Denotes the session ID. 0-128000 LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# clear firewall session session-id 200 ELEASE ISTORY Release 2.3.2: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 744: Debug Firewall

    <number> Source port number. sport <number> Destination port number. dport <number> XAMPLE The example below enables debugging for the source IP 10.91.0.52 ALU# debug firewall selector saddr 10.91.0.52 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 745: Default

    You can create a “default” attack setting to check default attacks on ingress traffic to all interfaces. In the OmniAccess 5740 USG, the default DoS attack is configured for the prevention of all attacks and their default settings except "icmp-block-trace- route", "icmp-router-advertisement", "icmp-redirect"...
  • Page 746 NAT or DoS configuration. This is why you can see these attacks in the “show” output even when he has not configured them. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 747: Default Timeout

    ALU(config-firewall-session)# default timeout tcp 10 FIREWALL firewall ESCRIPTION This command is entered in the Configuration Mode. This command allows you to enter the firewall sub-configuration mode. ARAMETERS None. XAMPLE ALU(config)# firewall ALU(config-firewall)# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 748: Firewall Policy {In|Out

    This command is entered in the Firewall-Attack Sub Configuration Mode. This command is not a default attack setting. This is not set for protection by default on the OmniAccess 5740 USG, but you can turn it on by explicitly adding the above command in the user-defined attack prevention list.

  • Page 749: Icmp-Dest-Unrch-Storm

    To set a threshold limit. threshold Number of packets permissible within a <1-4294967295> <1-4294967295> defined interval. EFAULT ALUE The default is 10 packets in 1000 milliseconds. XAMPLE ALU(config-firewall-attack-A1)# icmp-dest-unrch-storm threshold 11 5 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 750: Icmp-Ip-Address-Sweep

    This command is included in the OmniAccess 5740 USG’s default attack prevention list. ARAMETERS Parameter Description Threshold limit set.

  • Page 751: Icmp-Ping-Flood

    Threshold limit set. threshold Number of packets permissible within a <1-4294967295> <1-4294967295> defined interval. EFAULT ALUE The default is 100 packets in 1000 milliseconds. XAMPLE ALU(config-firewall-attack-A1)# icmp-ping-flood threshold 20 7 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 752: Icmp-Ping-Of-Death

    DoS setting. The above command can be included in the DoS prevention list to avoid this kind of attacks. ARAMETERS None. XAMPLE ALU(config-firewall-attack-A1)# icmp-redirect Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 753: Icmp-Router-Advertisement

    ARAMETERS None. XAMPLE ALU(config-firewall-attack-A1)# icmp-smurf-attack Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 754: Ip-Land-Attack

    If the “default” keyword is not used, this attack can be prevented by including this in the user-defined attack protection list. ARAMETERS None. XAMPLE ALU(config-firewall-attack-A1)# ip-source-routing Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 755: Ip-Spoofing

    Teardrop attack tool attacks the vulnerability of the TCP/IP IP fragmentation re- assembly codes which do not properly handle the overlapping IP fragments. ARAMETERS None. EFAULT ALUE By default, this attack is turned on. XAMPLE ALU(config-firewall-attack-A1)# ip-tear-drop Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 756: Ip-Tiny-Frag

    By default, the maximum number of fragments allowed in the IP packet, is 50. • By default, the minimum size allowed in the IP fragment, is 64 bytes. XAMPLE ALU(config-firewall-attack-A1)# ip-tiny-frag min-frag-size 10 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 757: Ip-Zero-Length

    Also, when "force" command is used to delete an attack object, the attack gets removed from any firewall policy it is attached to. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 758: No Debug Firewall

    "no firewall policy name" is issued at the top level and if this firewall policy is not bound to any interface, it deletes the firewall policy definition. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 759: No Policy

    This enters the firewall policy sub-configuration mode ARAMETERS Parameter Description Name of the firewall policy to be configured. name XAMPLE The following example depicts firewall policy configuration: ALU(config-firewall)# policy P1 ALU(config-firewall-P1)# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 760 In the following example, the attack object atk is configured to drop all the attacks and send acknowledgement such as an error report. ALU(config-firewall-P1)# match m1 attack atk reset Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 761: Port-Scan

    This command is entered in the Firewall Configuration Mode. Use this command to generate a numbering scheme for the firewall policy rules configured. ARAMETERS None XAMPLE ALU(config-firewall-P1)# renumber Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 762: Show Firewall Attack

    2 10 icmp-ping-flood 2 10 tcp-syn-flood 100 1000 5 udp-fraggle-attack udp-snork-attack tcp-fin-no-ack tcp-syn-fin tcp-null-scan tcp-invalid-urgent-offset tcp-xmas-scan ip-land-attack ip-source-routing icmp-block-trace-route ip-spoofing icmp-redirect icmp-router-advertisement tcp-header-frag ip-zero-length ip-tiny-frag icmp-ping-of-death 65507 ip-tear-drop Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 763: Show Firewall Attack System-Default

    10 1000 icmp-ping-flood 100 1000 tcp-syn-flood 100 1000 5 udp-fraggle-attack tcp-fin-no-ack tcp-syn-fin tcp-null-scan tcp-invalid-urgent-offset tcp-xmas-scan ip-land-attack icmp-echo-storm-attack udp-short-header tcp-header-frag ip-zero-length ip-tiny-frag 50 64 icmp-ping-of-death 50 65506 ip-tear-drop Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 764: Show Firewall Policy

    ARAMETERS None. XAMPLE ALU# show firewall policy system-default policy system-default 10 match all attack system-default drop system-traffic firewall policy system-default Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 765: Show Firewall Session

    The following syntax is used to view the details of firewall session ALU# show firewall session TCP Sessions UDP Sessions ICMP Sessions GRE Sessions Total Sessions Free Sessions : 16000 session_invalid_pak Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 766: Show Firewall Session Detail

    The following syntax is used to view the details of firewall session ALU(config)# show firewall session detail ID 70 ICMP timeout 28 secs, used by NAT Initiator: (10.91.1.108:13)=>(10.91.0.1:13) Responder: (10.91.0.1:34416)=>(10.91.1.108:34416) ELEASE ISTORY Release 2.3: Parameter [vrf <vrf-name>] was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 767: Show Firewall Session Proto

    The following syntax is used to view the details of firewall session with respect to ICMP protocol: ALU(config)# show firewall session proto icmp 70 ICMP timeout 19 secs, used by NAT Initiator: (10.91.1.108:13)=>(10.91.0.1:13) Responder: (10.91.0.1:34416)=>(10.91.1.108:34416) Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 768: Show Firewall Session Destination

    Denotes the port number. 1-65535 Protocol type. gre|icmp|tcp|udp XAMPLE ALU(config)# show firewall session destination ip 10.91.0.1 ID 70 ICMP timeout 25 secs, used by NAT Initiator: (10.91.1.108:13)=>(10.91.0.1:13) Responder: (10.91.0.1:34416)=>(10.91.1.108:34416) Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 769: Show Firewall Session Source

    ACK are set for FIN.This leads to system crashing at times. To avoid this mishap, include the above command in the user-defined attack prevention list or just use the “default” keyword. ARAMETERS None. XAMPLE ALU(config-firewall-attack-A1)# tcp-fin-no-ack Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 770: Tcp-Fin-Scan

    This could lead to secure information also being passed through the filter. To retain security, this command also forms a part of the default attack prevention list. ARAMETERS None. XAMPLE ALU(config-firewall-attack-A1)# tcp-header-frag Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 771: Tcp-Invalid-Urgent-Offset

    Leads to inability to scan such packets. This attack can also be avoided by including this command in the user-defined prevention list or by the “default” keyword. ARAMETERS None. XAMPLE ALU(config-firewall-attack-A1)# tcp-null-scan Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 772: Tcp-Syn-Fin

    The default is 100 packets in 1000 milliseconds. XAMPLE Consider the following example, here if you do not explicitly provide the threshold value for the attack, the default value is taken: ALU(config-attack A4)# tcp-syn-flood Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 773: Tcp-Xmas-Scan

    Parameter Description Threshold limit set. threshold Number of packets permissible within a <1-4294967295> <1-4294967295> defined interval. EFAULT The default is 4 packets per 20 milliseconds. XAMPLE ALU(config-firewall-attack-A1)# udp-flood Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 774: Udp-Fraggle-Attack

    Number of packets permissible within a <1-4294967295> <1-4294967295> defined interval. EFAULT ALUE The default is 10 packets in 1000ms. XAMPLE ALU(config)# attack A4 ALU(config-attack A4)# udp-port-loopback threshold 30 13 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 775: Udp-Snork-Attack

    To avoid this Denial of Service overload attempt, this command is placed in the default prevention list. ARAMETERS None. XAMPLE ALU(config-firewall-attack-A1)# udp-snork-attack Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 776: Time-Range Cli Commands

    <hh:mm:ss> to <mm/dd/yyyy> hours:minutes:seconds Date in month/day/year. XAMPLE ALU(config-time-range-t1)# absolute 10:20:00 12/20/2003 to 13:15:00 4/15/2004 ALU(config-time-range t2)# periodic daily 08:00:00 to 19:00:00 ALU(config-time-range t3)# periodic weekly wednesday 10:00:00 to 13:30:00 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 777: No Time-Range

    This command is entered in the Configuration Mode. This command is used to configure a time-range object that can be used across applications. ARAMETERS Parameter Description Name of the time-range. name XAMPLE ALU(config)# time-range t1 ALU(config-time-range-t1)# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 778: Alg Cli Commands

    DNS ALG debug counters. ARAMETERS None. XAMPLE ALU(config)# show firewall alg dns debug-counters Total malloc operations Total failed malloc operations Total memory release operations Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 779: Show Firewall Alg Dns Statistics

    FTP ALG debug counters. ARAMETERS None. XAMPLE ALU(config)# show firewall alg ftp debug-counters Total malloc operations Total failed malloc operations Total memory release operations Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 780: Show Firewall Alg Ftp Statistics

    RPC-Portmap ALG debug counters. ARAMETERS None. XAMPLE ALU(config)# show firewall alg rpc debug-counters Total malloc passed Total malloc failed Total memory free count Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 781: Show Firewall Alg Rpc-Portmap Statistics

    This command is entered in the Super User Mode or Configuration Mode. This command is used to view the RTSP ALG debug counters. ARAMETERS None. XAMPLE ALU(config)# show firewall alg rtsp debug-counters Currently registered RTSP families Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 782: Show Firewall Alg Rtsp Statistics

    Total malloc passed, sip sessions and calls Total malloc failed Total memory free count, sip sessions and calls Total sip packets translated Total sdp packets translated Total sip packets retransmitted Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 783: Show Firewall Alg Sip Statistics

    TFTP ALG debug counters. ARAMETERS None. XAMPLE ALU(config)# show firewall alg tftp debug-counters Total malloc operations Total failed malloc operations Total memory release operations Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 784: Show Firewall Alg Tftp Statistics

    This command is entered in the Match-list mode. This command is used to enable DNS, FTP, NFS, RPC-Portmap, RTSP or SIP ALG. ARAMETERS Parameter Description Type of ALG service. dns|ftp|nfs|sip|rtsp XAMPLE ALU(config)# match-list m1 ALU(config-match-list-m1)# tcp any any service dns Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 785: Udp Any Any Service

    This command is entered in the Match-list mode. This command is used to enable DNS, NFS, RPC-Portmap, TFTP, or SIP ALG. ARAMETERS Parameter Description Type of ALG service. dns|nfs|sip|tftp XAMPLE ALU(config)# match-list m1 ALU(config-match-list-m1)# udp any any service sip Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 786: Customized-Service Rule Based Alg Configuration Commands

    This command is entered in the Configuration Mode. This command is used to configure ALG. This also enters into customized service configuration mode. ARAMETERS None. EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)#customized-service Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 787 ALG is invoked accordingly. The standard port invocation of ALG is also active here. ALU(config)# match-list m1 ALU(config-match-list-m1)# tcp any host 20.1.1.1 service 100 ALU(config-customized-service)# match all m1 service ftp ELEASE ISTORY Release 3.0: parameter [pinhole] was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 788: No Rule

    This command is entered in the Super User Mode or Configuration Mode. This command shows the ALG rule based service details. ARAMETERS None. XAMPLE ALU(config)# show customized-service 20 match any m2 service none Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 789 Left running head: Chapter name (automatic) Filter and Firewall Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 790: Ip Security - Virtual Private Network

    IPsec configurations as quick-start and reference information. All the commands are described in alphabetical order. For more detailed information on configuring IPsec, refer OmniAccess 5740 Unified Services Gateway CLI Configuration Guide. Common Classification (CC) commands are used in these CLIs. Refer to the “Common Classifiers”...

  • Page 791: Authentication

    This command is entered in the Super User Mode or Configuration Mode. This command is used to reset the IPsec SA related counters for Encapsulation, Encryption, Authentication, and Error. ARAMETERS None. XAMPLE ALU# clear crypto ipsec counters Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 792: Clear Crypto Ipsec Sa

    This command is entered in the Configuration Mode. This command deletes the specified CA certificate. ARAMETERS Parameter Description The CA certificate name. name XAMPLE ALU(config)# crypto ca-cert ALUca delete Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 793: Crypto Ca Identity

    Note: The crypto certificates will take into effect only after issuing the ‘refresh’ command. ARAMETERS None. XAMPLE ALU(config)# crypto certificate-database refresh Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 794: Crypto Certificate-Request Export

    REQUEST EXPORT crypto certificate-request <name> export [fpkey <file-path> |ftp:|tftp:|scp:] ESCRIPTION This command is entered in the Configuration Mode. This command exports the CSR from the OmniAccess 5740 USG to a remote location. Note: Currently, SCP option is not supported. ARAMETERS Parameter Description Name is used to identify the certificate.

  • Page 795: Crypto Crl-Check Strict

    EFAULT ALUE The default value for DPD timeout is three times that of the DPD interval specified. XAMPLE ALU(config)# crypto ike dpd interval 10 timeout 35 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 796: Crypto Ike Identity

    This command is entered in the Configuration Mode. This command configures an IKE identity. Entering this command changes the mode to IKE identity mode. ARAMETERS Parameter Description Identifies the IKE identity. name XAMPLE ALU(config)# crypto ike identity exampleidentity Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 797: Crypto Ike Key

    ALU(config)# crypto ike key top_secret1612 peer 10.10.1.2 ALU(config)# crypto ike key "!netsecret!" peer 202.54.30.100 ALU(config)# crypto ike key secret1234 peer mysmb.dyndns.org ELEASE ISTORY Release 3.0: Parameter “FQDN” was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 798: Crypto Ike Policy

    This command is entered in the Configuration Mode. This command configures an IKE policy. ARAMETERS Parameter Description IKE policy name. name XAMPLE ALU(config)# crypto ike policy P1 ALU(config-crypto-ike-policy-P1)# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 799: Crypto Ipsec Transform-Set

    Authentication or encryption algorithm. algo EFAULT ALUE The OmniAccess 5740 USG will have a default transform-set configuration with parameters esp-sha1-aes256 esp-sha1-3des esp-md5-aes256 esp-md5-3des XAMPLE ALU(config)# crypto ipsec transform-set netset esp-sha1-aes256 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide...

  • Page 800: Crypto Key Export Rsa Name

    ESCRIPTION This command is entered in the Configuration Mode. This command exports the RSA keys from the OmniAccess 5740 USG. If none of the optional arguments are used, it works like a show command. Note: Currently, SCP option is not supported.

  • Page 801: Crypto Key Generate Rsa

    2000. XAMPLE ALU(config)#crypto key generate rsa 1024 exampleKey % The generated keys will be named examplekey ... starting key generation. Please wait... % Keys successfully generated Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 802: Crypto Key Import Rsa Name

    CRYPTO NAT TRAVERSAL crypto nat-traversal {enable|disable} ESCRIPTION This command is entered in the Configuration Mode. This command is used to enable or disable NAT traversal for IPsec on the OmniAccess 5740 USG. ARAMETERS None. EFAULT ALUE By default, NAT Traversal is enabled.

  • Page 803: Crypto Map

    This command is entered in the Interface Configuration Mode. This command is used to attach a crypto map to an interface. ARAMETERS Parameter Description Name of the crypto map. map-name XAMPLE ALU(config)# interface GigabitEthernet3/0 ALU(config-if GigabitEthernet3/0)# crypto map exampleMap Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 804: Crypto Peer-Certificate Import

    Directly enter or paste the certificate certificate-content after entering the command. FPkey file path. To copy the certificate fpkey <file-path> into the front panel USB memory. XAMPLE ALU(config)# crypto peer-certificate cert_Bouvier import ftp: Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 805: Crypto Peer-Certificate Delete

    This command is entered in the Configuration Mode. This command deletes the specified RSA key pair. ARAMETERS Parameter Description The RSA key name. name XAMPLE ALU(config)# crypto rsa-key examplekey delete Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 806: Crypto Signed-Cert

    Dead Peer. EFAULT ALUE The default value for DPD timeout is three times that of the DPD interval specified. XAMPLE ALU(config-crypto-map-map1)# dpd delay 15 timeout 60 ALU(config-crypto-map-map1)# dpd NONE Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 807: Ike-Identity

    Directly enter or paste the certificate certificate-content content after the command. FPkey file path. To copy the certificate fpkey <file-path> into the front panel USB memory. XAMPLE ALU(config-ca-ALUCA)# import ca-cert ftp: Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 808: Import Crl

    Directly enter or paste the CRL after the certificate-content command. FPkey file path. To copy the certificate fpkey <file-path> into the front panel USB memory. XAMPLE ALU(config-ca-ALUCA)# import crl ftp: Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 809: Import Signed-Cert

    Directly enter or paste the certificate certificate-content conetent after the command. FPkey file path. To copy the certificate fpkey <file-path> into the front panel USB memory. XAMPLE ALU(config-ca-ALUCA)# import signed-cert cert_Simpson ftp: Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 810: Ipsec Security-Association Lifetime

    This command is entered in the IKE Policy Mode. This configure a IKE lifetime value. ARAMETERS Parameter Description Specify the lifetime in seconds. 540-86400 EFAULT ALUE Default IKE lifetime is 86400 seconds. XAMPLE ALU(config-crypto-ike-policy-P1)# lifetime seconds 1000 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 811: Lifetime

    This command is entered in the Crypto Map Configuration Mode. This command attaches a match-list to a crypto map. ARAMETERS Parameter Description Name of the match-list. name XAMPLE ALU(config-crypto-map-exampleMap)# match matchlist1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 812: My-Ca

    This command is entered in the IKE-identity Mode. This command specifies the imported signed certificate to be used during IKE negotiation. ARAMETERS Parameter Description Name of imported signed certificate name used during IKE negotiation. XAMPLE ALU(config-ike-identity-exampleidentity)# my-cert cert_Simpson Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 813: My-Id

    NO CRYPTO IKE KEY no crypto ike key <key-string> [vrf <name>] peer {<peer- address>|<FQDN>} This command is entered in the Configuration Mode. This command removes the configured pre-shared key. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 814: No Crypto Ike Policy

    This command is entered in the IKE Policy Configuration Mode. If this command is entered in the IKE Policy Mode, it resets the IKE lifetime to its default. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 815: No Match

    'default' transform set. Note: A transform-set must be first detached from the crypto map to delete it globally. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 816: No Crypto Ipsec Transform-Set

    Fully qualified domain name (FQDN) of FQDN the peer at the remote end. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-crypto-map-exampleMap)# peer 100.10.61.20 ALU(config-crypto-map-exampleMap)# peer mysmb.dyndns.org ELEASE ISTORY Release 3.0: Parameter “FQDN” was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 817: Peer-Ca

    This can be used if a trusted peer is not enrolled to any of the CAs. ARAMETER parameter Description Name of the self signed peer certificate. name XAMPLE ALU(config-ike-identity-exampleidentity)# peer-cert cert_robert Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 818: Peer-Id

    Name of the PFS group. EFAULT ALUE If the PFS group is not explicitly configured, the default group2 is used. XAMPLE ALU(config-crypto-ike-policy-P1)# pfs group1 ALU(config-crypto-map-exampleMap)# pfs group1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 819: Proposal

    Options for algo are -- md5-aes128|md5-aes192 | md5-aes256|md5-des| md5-3des|sha1-aes128 | sha1-aes192|sha1-aes256 | sha1-des|sha1-3des ARAMETERS Parameter Description Authentication algorithm - encryption algo algorithm. EFAULT ALUE Proposal: md5-des XAMPLE ALU(config-crypto-ike-policy-P1)# proposal md5-aes-128 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 820: Show Crypto

    ! Applied to : GigabitEthernet3/1 interface GigabitEthernet3/1 crypto map exampleMap !crypto ipsec profile default ike-policy default transform-set default pfs group2 lifetime seconds 28800 ! Not Applied to Any Interface Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 821: Show Crypto Ca-Cert

    10:4b:1a:98:c2:7d:b4:d0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:98:D2:25:D3:18:12:A1:C7:4B:7A:98:D2:D8:25:73:2B:6B:AE:B1 X509v3 Authority Key Identifier: keyid:05:98:D2:25:D3:18:12:A1:C7:4B:7A:98:D2:D8:25:73:2B:6B:AE:B1 DirName:/CN=CA_0x01/O=ALU serial:00 X509v3 Basic Constraints: CA:TRUE Signature Algorithm: md5WithRSAEncryption 0c:0b:92:9c:1d:60:ac:62:e0:7f:f3:1d:9c:7b:e8:de:67:09: 43:a1:2e:47:d1:78:c1:17:f6:0c:aa:ef:51:55:e2:9b:5f:8a: Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 822: Show Crypto Ca Identity

    ALU(config)# show crypto ca identity crypto ca identity SomeOtherCA subject-name /O=ALU/C=IN/CN=CM Burns crypto ca identity ALUCA subject-name /CN=Bart Simpson/O=ALU/C=US ALU(config)# show crypto ca identity ALUCA crypto ca identity ALUCA subject-name /CN=Bart Simpson/O=ALU/C=US Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 823: Show Crypto Certificate-Request

    Exponent: 65537 (0x10001) Attributes: a0:00 Signature Algorithm: md5WithRSAEncryption 57:7b:73:45:07:37:a3:c6:a3:fc:46:5d:a6:c7:00:b1:2c:c8: 15:00:8f:ef:47:c5:0d:fa:81:a3:82:90:15:76:ad:10:42:ef: 68:a5:58:5a:e8:7b:17:85:d3:2b:f5:c5:ca:ca:db:c1:f0:d5: a6:87:b6:0b:13:a2:35:2f:91:cb ALU(config)# show crypto certificate-request req_Simpson pem -----BEGIN CERTIFICATE REQUEST----- MIHtMIGYAgEAMDMxFTATBgNVBAMTDEJhcnQgU2ltcHNvbjENMAsGA1UEChMETmV0 RDELMAkGA1UEBhMCVVMwXDANBgkqhkiG9w0BAQEFAANLADBIAkEAuvOvzwlJ9O8T 36fj7igyte8G4vjJMW1ERIHSP0mCyWta0XPQe68/XoI0FVRJp9NeaSnEclclau4C +CzdWS8DrQIDAQABoAAwDQYJKoZIhvcNAQEEBQADQQBXe3NFBzejxqP8Rl2mxwCx LMgVAI/vR8UN+oGjgpAVdq0QQu9opVha6HsXhdMr9cXKytvB8NWmh7YLE6I1L5HL -----END CERTIFICATE REQUEST----- Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 824: Show Crypto Crl Ca

    45:6b:da:5f:10:09:77:7c:16:1e:a4:c2:aa:b6:3c:04:d1:ca: 4c:bc:9c:74:07:a7:a4:8a:09:cc:ad:e0:8b:9c:34:9d:05:c0: 63:3b:d7:01:9c:e0:29:44:38:e4:f8:e9:81:69:13:92:f4:14: f2:a6:7a:75:35:96:f5:12:3f:77:32:ef:c2:a7:28:4b:81:69: 10:a5:05:0d:dd:2f:73:20:70:58:b5:d9:2f:d9:13:c8:c1:20: c6:f7:34:c9:c0:23:06:b4:32:6c:65:48:06:78:18:48:fe:78: ab:ba:5c:a3:f5:0b:c8:64:95:5b:a6:27:c1:43:ca:d9:f5:d0: bd:5c EX:2 ALU(config)# show crypto crl ca ALUCA pem -----BEGIN X509 CRL----- MIIBDzB6MA0GCSqGSIb3DQEBBAUAMCExEDAOBgNVBAMUB0NBXzB4MDExDTALBgNV BAoTBE5ldGQXDTA2MDEwOTExNDYzN1oXDTA2MDIwODExNDYzN1owKDASAgEBFw0w NjAxMDkxMTQ2MTJaMBICAQIXDTA2MDEwOTExNDYxNlowDQYJKoZIhvcNAQEEBQAD gYEARWvaXxAJd3wWHqTCqrY8BNHKTLycdAenpIoJzK3gi5w0nQXAYzvXAZzgKUQ4 5PjpgWkTkvQU8qZ6dTWW9RI/dzLvwqcoS4FpEKUFDd0vcyBwWLXZL9kTyMEgxvc0 ycAjBrQybGVIBngYSP54q7pco/ULyGSVW6YnwUPK2fXQvVw= -----END X509 CRL----- Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 825: Show Crypto Ike Identity

    DN /CN=Bart Simpson/O=ALU/C=US my-cert cert_Simpson ALU(config)# show crypto ike identity exampleIdentity crypto ike identity exampleIdentity peer-id user-fqdn selma_bouvier@ALU.com peer-ca CN=ALU, OU=Certificate Authority, C=US my-id DN /CN=Bart Simpson/O=ALU/C=US Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 826: Show Crypto Ike Key

    The peer address. peer-address XAMPLE ALU(config)# show crypto ike key crypto ike key top_secret1612 peer 10.10.1.2 ALU(config)# show crypto ike key 3.3.3.3 crypto ike key linux123 peer 3.3.3.3 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 827: Show Crypto Ike Policy

    ALU(config)# show crypto ike policy ike1 crypto ike policy ike1 proposal sha1-aes128 ipsec security-association lifetime seconds 28800 lifetime seconds 86400 pfs group2 authentication pre-shared ! Policy in Use (by 1 cryptomaps/ipsec-profiles) Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 828: Show Crypto Ipsec Sa

    ESP spi:0xc3fb59c time-left:28793secs/0kb esp-sa-id:12 Decaps:7 Decrypt:7 Auth:7 Errors:0 ********OUTBOUND******** ESP Algo:crypt:DES-CBC len:64 auth:SHA1-HMAC len:160 TUNNEL MODE Replay Detection Enabled: Yes ESP spi:0x541a7498 time-left:28793secs/0kb esp-sa-id:16 Encaps:7 Encrypt:7 Auth:7 Errors:0 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 829: Show Crypto Ipsec Transform-Set

    XAMPLE ALU(config)# show crypto ipsec transform-set !crypto ipsec transform-set default esp-md5-des esp-sha1-des crypto ipsec transform-set ts1 esp-md5-des ALU(config)# show crypto ipsec transform-set ts1 crypto ipsec transform-set ts1 esp-md5-des Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 830: Show Crypto Map

    ALU(config)# show crypto map examplemap crypto map examplemap ipsec-ike P1 peer 10.10.10.1 match m1 transform-set default pfs group2 ! Applied to : GigabitEthernet3/1 interface GigabitEthernet3/1 crypto map examplemap Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 831: Show Crypto Peer-Certificate

    Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public Key: (1024 bit) Modulus (1024 bit): 00:cc:77:33:35:10:2c:90:6a:7d:ba:08:5b:97:68: eb:ea:91:bb:e2:b7:ac:9d:42:95:36:3a:db:ab:d3: 38:04:38:9b:34:18:31:22:69:78:de:11:37:7f:1e: 7f:10:9b:ba:96:60:e3:dd:bd:74:93:cf:dc:ad:c5: a7:ca:69:7f:d1:77:33:38:6a:66:89:07:66:d2:08: d4:b8:98:3f:e0:99:11:f8:3f:78:9b:27:51:8d:ee: 5e:e7:2a:5a:3a:d2:dc:dc:f7:45:b9:1e:8e:c2:ed: 2a:5e:a5:29:03:3d:ab:6e:2d:fd:6c:eb:c5:72:a8: 54:44:a6:03:70:4e:d0:38:33 Exponent: 65537 (0x10001) X509v3 extensions: Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 832 26:30:c6:19:38:31:62:12:70:5f:00:e7:80:01:2c:8a:da:d5: e0:e5 ALU(config)# show crypto peer-certificate cert_fred pem -----BEGIN CERTIFICATE----- MIIC7DCCAlWgAwIBAgIBADANBgkqhkiG9w0BAQQFADBeMQswCQYDVQQGEwJVUzEQ MA4GA1UECBMHQmVkcm9jazEYMBYGA1UEAxMPRnJlZCBGbGludHN0b25lMSMwIQYJ KoZIhvcNAQkBFhRmcmVkQGZsaW50c3RvbmVzLmNvbTAeFw0wNjA2MjIwNjU2MTNa Fw0wNjA3MjIwNjU2MTNaMF4xCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdCZWRyb2Nr MRgwFgYDVQQDEw9GcmVkIEZsaW50c3RvbmUxIzAhBgkqhkiG9w0BCQEWFGZyZWRA ZmxpbnRzdG9uZXMuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDMdzM1 ECyQan26CFuXaOvqkbvit6ydQpU2Otur0zgEOJs0GDEiaXjeETd/Hn8Qm7qWYOPd vXSTz9ytxafKaX/RdzM4amaJB2bSCNS4mD/gmRH4P3ibJ1GN7l7nKlo60tzc90W5 Ho7C7SpepSkDPatuLf1s68VyqFREpgNwTtA4MwIDAQABo4G5MIG2MB0GA1UdDgQW BBSogH5UY2F2Zt7gmGwQMW3rHp1MRjCBhgYDVR0jBH8wfYAUqIB+VGNhdmbe4Jhs EDFt6x6dTEahYqRgMF4xCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdCZWRyb2NrMRgw FgYDVQQDEw9GcmVkIEZsaW50c3RvbmUxIzAhBgkqhkiG9w0BCQEWFGZyZWRAZmxp bnRzdG9uZXMuY29tggEAMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEEBQADgYEA LbSv78slef4RmoUupe8nnIchAMgZiRkFrmov0ALfunDprIEp8v/c2jXk0EPs7Hxz JMlS2MkKkEBvZN8NZRa/liL7BvtrCxckwi4zCy32duyO557MTsb6JaJ/SnnJulVn qXROXjD/NxOUzdtHJjDGGTgxYhJwXwDngAEsitrV4OU= -----END CERTIFICATE----- Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 833: Show Crypto Rsa-Key

    -----BEGIN RSA PRIVATE KEY----- MIIBOwIBAAJBALrzr88JSfTvE9+n4+4oMrXvBuL4yTFtRESB0j9JgslrWtFz0Huv P16CNBVUSafTXmkpxHJXJWruAvgs3VkvA60CAwEAAQJATCC1Q6p1qj68qgOU5kMK O1mlRUGns+/Zr8fplInbrybL7aUyw0ZbOxwR47nhv2cPJmBEVYBgD3MJBpmoCoQ3 JQIhAPQF4cc793YnqQjDmMZlrU5EgW0+iTv7tZhBfu9Be6hzAiEAxCC2wzozczYb Vu34ghDwp8Bcr5dyRH1qqKXAWfhjO18CIHy5WOo1a0lYAhy5pKebJpZ/i0ukEA65 m9qjd1aguKyjAiEAsZOVJsppjyUsN9cbLFi+LITE5s9OzKhpi+0Xbd6xqi0CIQCR p2uSbE2LoC4r3XovZoVF1mLzZLrC3WZcMKRk0qeO0Q== -----END RSA PRIVATE KEY----- ALU(config)# show crypto rsa-key exampleKey public-key -----BEGIN PUBLIC KEY----- MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALrzr88JSfTvE9+n4+4oMrXvBuL4yTFt RESB0j9JgslrWtFz0HuvP16CNBVUSafTXmkpxHJXJWruAvgs3VkvA60CAwEAAQ== -----END PUBLIC KEY----- Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 834: Show Crypto Signed-Cert

    RSA Public Key: (512 bit) Modulus (512 bit): 00:ba:f3:af:cf:09:49:f4:ef:13:df:a7:e3:ee:28: 32:b5:ef:06:e2:f8:c9:31:6d:44:44:81:d2:3f:49: 82:c9:6b:5a:d1:73:d0:7b:af:3f:5e:82:34:15:54: 49:a7:d3:5e:69:29:c4:72:57:25:6a:ee:02:f8:2c: dd:59:2f:03:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: CA:FALSE Netscape Comment: OpenSSL Generated Certificate X509v3 Subject Key Identifier: 88:75:2D:47:AC:E8:AB:C3:5F:9F:E1:93:6B:7E:07:9C:A3:B0:24:CB Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 835: Show Running-Config

    The following example displays the output of the running configuration: ALU# show running-config Current Configuration: ! NVRAM config last updated at 05:26:39 GMT Tue Jan 18 2005 from line 0 ! Statlog Configuration ! logging on Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 836 2.2.2.1 match m1 transform-set myset pfs group2 ! Applied to : GigabitEthernet3/1 interface GigabitEthernet3/1 crypto map ALU2 line vty 4 transport input none line con 0 ALU(config)# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 837: Subject-Name

    Description Name of the transform set. name EFAULT ALUE If no transform-set is attached to a crypto map, by default, ‘Default’ transform-set is used. XAMPLE ALU(config-crypto-map-exampleMap)# transform-set netset Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 838: Ipsec Tunnel Interface Cli Commands

    Name of the IPsec Profile. name This option is used to modify a ipsec force profile when it is applied to an interface. XAMPLE ALU(config)# crypto ipsec profile PF1 ALU(ipsec-profile-PF1)# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 839: Ike-Identity

    Description Name of the IKE policy. name EFAULT ALUE If no IKE policy is attached to an IPsec profile, ‘default’ IKE policy is used. XAMPLE ALU(ipsec-profile-PF1)# ike-policy IKE1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 840: Interface Tunnel

    IP address and subnet mask to the tunnel interface. ARAMETERS Parameter Description IP address with subnet mask or prefix {<ip-address subnet- length. mask>|<ip-address/prefix- length>} EFAULT ALUE None. XAMPLE ALU(config-if Tunnel1)# ip address 20.20.20.20/24 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 841: Ipsec-Profile

    EFAULT ALUE Lifetime has a default value of 28800 seconds. There is no default value for lifetime in Kilobytes. XAMPLE ALU(ipsec-profile-PF1)# lifetime seconds 1000 ALU(ipsec-profile-PF1)# lifetime kilobytes 1005236 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 842: Mode

    IPsec profile attached to the interface. You cannot delete an IPsec profile that is applied to the interface. To delete, first detach the IPsec profile from the tunnel interface. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 843: No Lifetime

    NO TUNNEL SOURCE no tunnel source {<ip-address>|<interface-name>} This command is entered in the Interface Configuration Mode. The “no” command removes the configured source IP address of the tunnel. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 844: Pfs

    XAMPLE ALU(config)# show crypto ipsec profile crypto ipsec profile PF1 ike-policy secret transform-set transet1 ike-identity ID01 pfs group2 lifetime seconds 28800 ! Applied to: interface Tunnel1 ipsec-profile PF1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 845: Shutdown

    Parameter Description name Name of the transform-set. EFAULT ALUE If no transform set is attached to an IPsec profile, ‘default’ transform set is used. XAMPLE ALU(ipsec-profile-PF1)# transform-set TS1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 846: Tunnel Destination

    Parameter Description Source IP address of the tunnel. ip-address Name of the interface interface-name EFAULT ALUE None. XAMPLE ALU(config-if Tunnel1)# tunnel source 2.2.2.1 ALU(config-if Tunnel1)# tunnel source GigabitEthernet3/0 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 847: Dynamic Multipoint Virtual Private Network (Dmvpn) Cli Commands

    Parameter Description Specify the authentication string for string NHRP. EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-nhrp-alu-dmvpn)# authentication alu123 ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 848: Clear Ip Nhrp

    NHRP entries from the NHRP cache. It does not delete the static mappings. ARAMETERS None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# clear ip nhrp ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 849: Holdtime

    60-65535 EFAULT ALUE The default holdtime for NHRP cache is 7200 seconds. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-nhrp-alu-dmvpn)# holdtime 300 ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 850: Ip Nhrp

    Description Name of the NHRP object. object-name EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# ip nhrp alu-dmvpn ALU(config-nhrp-alu-dmvpn)# ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 851: Map

    IP address of the NHS. nhs-ip-address NBMA address of the NHS. nbma-address EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-nhrp-alu-dmvpn)# map 192.168.1.1 1.1.1.1 ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 852: Network-Id

    ARAMETERS Parameter Description Specify the NHRP network identifier. 1-65535 EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-nhrp-alu-dmvpn)# network-id 100 ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 853: Nhrp

    Parameter Description Name of the NHRP object. object-name EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-if Tunnel1)# nhrp alu-dmvpn ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 854: Nhs

    This command is entered in the Client Object Configuration Mode. The “no” command resets the holdtime to its default. The default holdtime for NHRP cache is 7200 seconds. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 855: No Nhrp

    This command is entered in the Client Object Configuration Mode. The “no” command resets the registration timeout to its default, i.e., every two-third of the NHRP holdtime. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 856: Registration Timeout

    The default registration timeout is every two-third of the NHRP holdtime. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-nhrp-alu-dmvpn)# registration timeout 600 ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 857: Show Ip Nhrp

    Type: cached, Flags: up NBMA address: 10.1.5.2 172.23.1.1/32 via 172.23.1.1 Tunnel0 created, never expire Type: static, Flags: up NBMA address: 10.0.1.1 ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 858: Show Ip Nhrp Configuration

    14400 map 172.23.1.1 10.0.1.1 network-id 1234 nhs 172.23.1.1 registration timeout 180 interface Tunnel0 nhrp alu-dmvpn ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 859: Show Ip Nhrp Object

    14400 map 172.23.1.1 10.0.1.1 network-id 1234 nhs 172.23.1.1 registration timeout 180 interface Tunnel0 nhrp alu-dmvpn ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 860: Show Ip Nhrp Interface Tunnel

    ALU(config)# show ip nhrp interface Tunnel 0 172.23.1.1/32 via 172.23.1.1 Tunnel0 created, never expire Type: static, Flags: up NBMA address: 10.0.1.1 ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 861: Ipsec Vpn Server Cli Commands

    Specify client firewall option. Disable|Drop|No-Firewall|Pass |PassLocal EFAULT ALUE By default, client firewall is disabled. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-client-obj-myclientobject)# client firewall pass ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 862: Client-Ip-List

    The following example shows a list with only host attached a crypto client object. ALU(config)# list L1 host 192.168.1.0 ALU(config)# end ALU(config)# crypto client object myclientobject ALU(config-client-obj-myclientobject)# Client-IP-list L1 ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 863: Client-Object

    ARAMETERS Parameter Description Name of the client object. name EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-client-prof-myclientprofile)# client-object myclientobject ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 864: Crypto Client Object

    Name of the client object. name EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# crypto client object myclientobject ALU(config-client-obj-myclientobject)# ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 865: Crypto Client Profile

    EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# crypto client profile myclientprofile ALU(config-client-prof-myclientprofile)# ALU(config-if GigabitEthernet3/0)# crypto client profile myclientprofile ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 866: Ike-Policy

    Name of the IKE policy. name EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-client-prof-myclientprofile)# ike-policy IKE1 ELEASE ISTORY Release 3.0: command was introduced in the Client Profile Configuraiton Mode. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 867: Ipsec Security-Association Lifetime Seconds

    ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-client-prof-myclientprofile)# ipsec security- association lifetime seconds 5400 ELEASE ISTORY Release 3.0: command was introduced in the Client Profile Configuraiton Mode. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 868: Keep-Alive

    Note: You cannot delete a client object that is attached to a client profile. First detach it from the client profile and then delete it. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 869: No Crypto Client Profile

    This command is entered in the Client Object Configuration Mode. This command is used to remove the IP address of the secondary WINS Server in a crypto client object. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 870: Pfs

    PFS group. group1|group2|group5 EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-client-prof-myclientprofile)# pfs group2 ELEASE ISTORY Release 3.0: command was introduced in the Client Profile Configuraiton Mode. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 871: Primary_Dns_Ip

    IP address of the secondary DNS. secondary_dns_ip <ip-address> EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-client-obj-myclientobject)# primary_dns_ip 1.1.1.1 secondary_dns_ip 1.1.1.2 ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 872: Primary_Wins_Ip

    IP address of the secondary WINS secondary_wins_ip <ip-address> server. EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-client-obj-myclientobject)# primary_wins_ip 1.1.1.5 secondary_wins_ip 1.1.1.6 ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 873: Save-Password

    EFAULT ALUE By default, save password is set to No. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-client-obj-myclientobject)# save-password yes ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 874: Show Crypto Client Object

    Primary WINS Server: A.B.C.D Secondary WINS Server:A.B.C.D Client Firewall:Pass Save Password:Yes Local Client Address List:ClList Local Server Address List:SerList Authentication Method List:rad ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 875: Show Crypto Client Profile

    IKE Policy:myikePolicy Transform Set :myxform DPD Interval:60 sec DPD Timeout:300 sec IPSec SA Lifetime:28800 sec FS Group:Group 2 IPSec Client object :myclientObj; ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 876: Transform-Set

    Name of the transform set. name EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-client-prof-myclientprofile)# transform-set TS1 ELEASE ISTORY Release 3.0: command was introduced in the Client Profile Configuraiton Mode. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 877 Left running head: Chapter name (automatic) IP Security - Virtual Private Network Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 878: Intrusion Detection/Intrusion Prevention System

    For more detailed information on using and configuring IDS/IPS, refer to the OmniAccess 5740 Unified Services Gateway CLI Configuration Guide. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 879: Clear Firewall Intrusion Snort Statistics

    The preprocessor that is used for stream4 reassembly. XAMPLE ALU#clear firewall intrusion snort statistics preprocessor http-inspect Note: Currently, preprocessor attacks of type rpc and stream4 is not supported. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 880: Clear Firewall Intrusion Snort Statistics Rule

    Clears the statistics of the snort rules class-type <name> belonging to a specified class type. Clears the snort rule statistics of a specific priority {high|low|medium} priority. XAMPLE ALU#clear firewall intrusion snort statistics rule all Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 881: Debug Trace Firewall Intrusion Selector

    IDS/IPS on the OmniAccess 5740 USG. ARAMETER Parameter Description Source address. saddr Destination address. daddr Protocol number. protocol Source port. sport Destination port. dport XAMPLE ALU# debug firewall intrusion Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 882: Firewall Policy {In | Out

    Name of the firewall policy. policy name Note: Firewall policy will take effect once it is attached to an interface. XAMPLE ALU(config)# interface GigabitEthernet3/0 ALU(config-if GigabitEthernet3/0)# firewall policy in P1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 883: Intrusion Sensor

    ESCRIPTION This command is entered in the Firewall Configuration Mode. This command enters the snort configuration mode. ARAMETER None. XAMPLE ALU(config)# firewall ALU(config-firewall)# intrusion snort ALU(config-firewall-intrusion-snort)# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 884: Match Intrusion {Detection | Prevention

    <ip- address>|protocol <number>|sport <number>|dport <number>][output|permanent]|all [detail-level]} This command is entered in the Super User Mode or Configuration Mode. Use this command to turn off the debugging functionality for IDS/IPS. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 885: No Intrusion Sensor

    This command is entered in the Intrusion Snort Configuration Mode. Use this command to manually rebuild the signature database. ARAMETER Parameter Description Version of the signature database. version-number XAMPLE ALU(config-firewall-intrusion-snort)#rebuild 2.3.0 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 886: Rollback

    Name of the Snort rule category. category <name> Name of the Snort rule class type. class-type <name> Snort rule priority: low, high or medium. priority {high|low|medium} XAMPLE ALU(config-firewall-intrusion-snort)#rule detection category attack-responses Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 887: Rule Disable

    Name of the Snort rule class type. class-type <name> Snort rule priority: low, high or medium. priority {high|low|medium} Snort rule ID. sid <1-4294967295...> XAMPLE ALU(config-firewall-intrusion-snort)# rule enable classtype attempted-dos Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 888: Rule Modify

    Modification of rule to $EXTERNAL_NET is shown below: ALU(config-firewall-intrusion-snort)#rule modify 1292 content alert tcp $EXTERNAL_NET any -> $EXTERNAL_NET any (msg:"ATTACK-RESPONSES directory listing"; flow:from_server,established; content:"Volume Serial Number"; classtype:bad-unknown; sid:1292; rev:8;) Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 889: Rule Prevention

    ARAMETER Parameter Description Name of the sensor. name XAMPLE ALU# show firewall intrusion sensor firewall intrusion sensor sensor1 snort intrusion sensor sensor4 snort intrusion sensor s1 snort Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 890: Show Firewall Intrusion Snort Archives

    ARAMETER None. XAMPLE ALU#show firewall intrusion snort archives Version no | Details Date of Download |Time of Downl- 2.3.0 Current initial Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 891: Show Firewall Intrusion Snort File List

    00 00 00 00 00 00 00 00 00 0 0 00 00 00 00 00 00 00 00 00|"; reference:arachnids,449; classtype:attempted-rec on; sid:467; rev:3;) --More-- Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 892: Show Firewall Intrusion Snort Rule

    $EXTERNAL_NET any -> $HOME_NET any (msg:"DOS Teardrop attack"; fragbits:M; id:242; reference:bugtraq,124; reference:cve,1999-0015; reference:nessu) alert udp any 19 <> any 7 (msg:"DOS UDP echo+chargen bomb"; reference:cve,1999-0103; reference:cve,1999-0635; classtype:attempted-dos; sid:271; rev:4;) Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 893: Show Firewall Intrusion Snort Rule Disable

    Details of the snort rules of a specific priority {high|low|medium} disabled priority. Details of the snort rules specific disabled rule ID. XAMPLE ALU# show firewall intrusion snort rule disable sid Disable sid: Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 894: Show Firewall Intrusion Snort Statistics

    ARAMETER Parameter Description Interface for which Snort statistics is interface-name being viewed. XAMPLE ALU#show firewall intrusion snort statistics Pkt Received Pkt Passed Pkt Dropped Pkt Queued Pkt Detected Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 895: Show Firewall Intrusion Snort Statistics Preprocessor

    The preprocessor that acts as generic http-inspect HTTP decoder. The preprocessor that normalizes RPC fragmented records. The preprocessor that is used for stream4 reassembly. XAMPLE ALU#show firewall intrusion snort statistics preprocessor http- inspect Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 896: Show Firewall Intrusion Snort Statistics Rule

    Snort rule statistics belonging to a class-type <name> specific class type. Snort rule statistics for a specific priority. priority {high|low|medium} XAMPLE ALU#show firewall intrusion snort statistics rule all Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 897: Show Firewall Intrusion Snort Update

    This command is entered in the Super User Mode or Configuration Mode. This command is used to view firewall policy configuration details. ARAMETER Parameter Description Name of the firewall policy. name XAMPLE ALU#show firewall policy policy1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 898: Update

    The URL for HTTP or HTTPS should be provided in the following way: For e.g., ‘update instant https https://<username:password@<server-name/ip>/signature.tar.gz passive/rebuild’. It is preferable to upgrade the signatures from Alcatel-Lucent HTTPS server: ‘idsdl.esd.alcatel-lucent.com’ with user name ‘external’ and password ‘G#tS1g5’. It will internally verify the signature versions and download the latest signatures.
  • Page 899 The signature database will come into effect immediately after download. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-firewall-intrusion-snort)# update instant https https://idsdl.esd.alcatel-lucent.com/signature.tar.gz rebuild ELEASE ISTORY Release 2.3: Parameter [http] was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 900: Generic Routing Encapsulation

    GRE as quick-start and reference information. In this chapter, all commands are described in alphabetical order. For a more detailed information on using and configuring GRE, refer to the OmniAccess 5740 Unified Services Gateway CLI Configuration Guide.

  • Page 901: Gre-Keep-Alive-Interval

    GRE keep alive messages is to be sent. EFAULT ALUE The default keepalive interval is 10 seconds. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# gre-keep-alive-interval 100 ELEASE ISTORY Release 2.3.2: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 902: Gre-Keep-Alive-Max-Tries

    EFAULT ALUE The default keepalive max-tries is 3. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# gre-keep-alive-max-tries 10 ELEASE ISTORY Release 2.3.2: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 903: Interface Tunnel

    IP address and subnet mask to the tunnel interface. ARAMETERS Parameter Description IP address with subnet mask or prefix {<ip-address subnet- length. mask>|<ip-address/prefix- length>} EFAULT ALUE None. XAMPLE ALU(config-if Tunnel7)# ip address 20.20.20.20/24 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 904: Mode

    ALUE By default, tunnel is configured in the GRE mode. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-if Tunnel7)# mode gre ELEASE ISTORY Release 3.0: Parameter “multipoint-gre” was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 905: No Gre-Keep-Alive-Interval

    ESCRIPTION This command is entered in the Interface Configuration Mode. This command is used to administratively bring down the tunnel interface. ARAMETERS None. XAMPLE ALU(config-if Tunnel7)# shutdown Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 906: Tunnel Destination

    EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-if Tunnel7)# tunnel destination 10.1.0.5 ALU(config-if Tunnel7)# tunnel destination mysmb.dyndns.org ELEASE ISTORY Release 3.0: Parameter “FQDN” was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 907: Tunnel Df-Bit

    IP address of the tunnel. ARAMETERS Parameter Description Source IP address of the tunnel. ip-address EFAULT ALUE None. XAMPLE ALU(config-if Tunnel7)# tunnel source 10.91.0.7 ALU(config-if Tunnel7)# tunnel source GigabitEthernet3/0 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 908: Tunnel Vrf

    Default VRF. default EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-if Tunnel7)# tunnel vrf ALU-vrf1 ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 909 Left running head: Chapter name (automatic) Generic Routing Encapsulation Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 910: Transparent Firewall

    It includes table of parameters, default values, and configuration examples for TF configuration as quick-start and reference information. The commands are described in alphabetical order. For more detailed information about using and configuring TF, refer to the OmniAccess 5740 Unified Services Gateway CLI Configuration Guide. Alcatel-Lucent...

  • Page 911: Clear Transparent-Forward Statistics

    The following configures TF feature and binds the TF policy ‘TF1’ on the interface GigabitEthernet3/0 with outgoing interface as VLAN 10. ALU(config)# interface GigabitEthernet3/0 ALU(config-if GigabitEthernet3/0)# transparent-forward TF1 interface Vlan 10 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 912: Transparent-Forward

    Currently, IPX and Apple-talk protocols are not supported. Using this command more than once will add the protocol to existing configured protocols. ARAMETERS Parameter Description Protocol number. 1-65535 XAMPLE ALU(config-transparent-forward-TF1)# pass-through protocol nonip Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 913: No Transparent-Forward

    TF policy. NO PASS THROUGH PROTOCOL no pass-through protocol {<1-65535>|appletalk|ipx|nonip} This command is entered in the TF-Configuration Mode. The command removes the pass through configuration. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 914: Show Transparent-Forward

    XAMPLE ALU(config)# show transparent-forward ! Transparent-forward configuration interface GigabitEthernet3/1 transparent-forward interface GigabitEthernet3/0 exit transparent-forward tf pass-through protocol nonip exit interface GigabitEthernet3/0 transparent-forward tf interface GigabitEthernet3/1 exit ALU(config)# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 915: Show Transparent-Forward Statistics

    GigabitEthernet3/1 : IP 0, ARP 0, IPX 0, AppleTalk 0, Others 0,Dropped 0 interface GigabitEthernet3/0 : tf IP 0, ARP 0, IPX 0, AppleTalk 0, Others 0,Dropped 0 ALU(config)# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 916: Part 7: Quality Of Service

    To switch to the beta version, import color def’ns from beta-colors.fm Part 7 Quality of Service Pagination: Numeric & continuous Optional footer: Alcatel-Lucent with Manual title (to set, preceding redefine ManualTitle OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide section of Beta Beta Beta Beta variable) book...
  • Page 917 Left running head: Chapter name (automatic) Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 918: Quality Of Service

    QoS configurations as quick-start and reference information. In this chapter, all the commands are described in alphabetical order. For more detailed information about using and configuring the QoS, refer to the OmniAccess 5740 Unified Services Gateway CLI Configuration Guide.

  • Page 919: Auto Qos Diff-Serv

    This policy is to be attached to an interface using the ‘service policy command’. ARAMETERS Parameter Description Name of the policy map. policy-map name EFAULT ALUE None. XAMPLE ALU(config)# auto qos template voip p1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 920: Auto Qos Voip

    You cannot mix the absolute bandwidth command with percentage bandwidth command across policy hierarchy. ARAMETERS Parameter Description The absolute bandwidth (bps) value. 101-700000000 The bandwidth in percentage. 1-100 EFAULT ALUE None. XAMPLE ALU(config-pmap-P1-C1)# bandwidth 101 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 921: Class

    Name of the class map. class-map name Default traffic class. class-default EFAULT ALUE ‘class-default’ is the default traffic class. XAMPLE ALU(config-qos-P1)# class C1 ALU(config-qos-P1-C1)# ALU(config-qos-P1-C1)# class class-default ALU(config-qos-P1-class-default)# Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 922: Class-Map

    The range for the rule is 1-65535. This rule number signifies the priority of a rule. ALU(config-qos-C1)# match all m1 m3 ALU(config-qos-C1)# match any m2 m4 m5 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 923: Clear Queuing Statistics

    ALUE None. XAMPLE ALU(config-qos-P1)# description P1 is the name of the policy- map. ALU(config-qos-P1)# show policy-map P1 policy-map P1 description P1 is the name of the Policy Map Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 924: Fair-Queue

    You can enable or disable fair queue only on the Class Default. Fair queuing is not applicable on hierarchical queuing. ARAMETERS None. EFAULT ALUE None. XAMPLE ALU(config-qos-P1-C1)# class class-default ALU(config-qos-P1-class-default)# fair-queue Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 925: Frame-Relay Qos-Bandwidth Percent

    Parameter Description The bandwidth in percentage. 1-100 EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-if Serial0/0:0)# frame-relay qos-bandwidth percent ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 926: L2-Service-Policy

    Name of the policy map. policy-map name EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-if Serial0/0:0)# l2-service-policy in P1 ELEASE ISTORY Release 3.0: command was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 927: Network-Control

    This command is entered in the Interface Configuration Mode. This command disables Auto QoS VoIP on an interface. NO BANDWIDTH no bandwidth This command is entered in the Class Mode. This command removes the bandwidth configuration. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 928: No Class

    NO POLICE no police This command is entered in the Class Mode. This command removes the configured police on the traffic class of the policy map. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 929: No Policy-Map

    <1-65535> This command is entered in the Class-map Mode. This command is used to delete a specific rule from the class map, with reference to its line/rule number. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 930: No Set

    This command is entered in the Policy-map Mode. This command removes the bandwidth configured for the tunnel interface. NO QUEUE LIMIT no queue-limit This command is entered in the Class Mode. This command deletes the configured queue-limit. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 931: Police

    Action is Drop. The default value for Violate Action is Drop. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-qos-P1-C1)# police committed-rate 500000 commit- action transmit committed-burst 15625 exceed-action drop ELEASE ISTORY Release 2.3: Parameter {fr-becn|fr-de|fr-fecn} was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 932: Policy-Map

    This command is entered in the Class Mode. Configures the traffic class as a priority class. ARAMETERS Parameter Description The second highest priority class. priority EFAULT ALUE None. XAMPLE ALU(config-qos-P1-C1)# priority Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 933: Priority Bandwidth

    You cannot mix the absolute bandwidth command with percentage bandwidth command across policy hierarchy. ARAMETERS Parameter Description The absolute bandwidth (bps) value. 101-700000000 The bandwidth in percentage. 1-100 EFAULT ALUE None. XAMPLE ALU(config-pmap-P1-C1)# priority bandwidth 101 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 934: Qos Credits Debug

    This command is entered in the Tunnel Interface Mode. This command is used to enable pre-classification on the tunnel interface. ARAMETERS None. EFAULT ALUE None. XAMPLE ALU(config)# interface tunnel 1 ALU(config-tunnel1)# qos-preclassify Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 935: Random-Detect

    WRED values but does not enable the feature. To enable this, use the ‘random-detect ip-precedence’ command. Note: The queue limit of the traffic class should be greater than the max thresh value. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 936 If ip-precedence/ip-dscp based WRED is enabled and the values are not configured manually, then default values of ip-precedence and ip-dscp will be used. EFAULT ALUES FOR ANDOM DETECT PRECEDENCE ip-precedence Min-Threshold Max-Threshold Drop-Probability Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 937 Left running head: Chapter name (automatic) Quality of Service IP-DSCP EFAULT ALUES FOR ANDOM DETECT ip-dscp Min-Threshold Max-Threshold Drop-Probability Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 938 Except on the first page, right running head: Heading1 or Heading1NewPage text (automatic) random-detect ip-dscp Min-Threshold Max-Threshold Drop-Probability Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 939: Service-Policy

    ARAMETERS Parameter Description Ingress direction. Egress direction. Name of the policy map. policy-map name EFAULT ALUE None. XAMPLE ALU(config)# interface GigabitEthernet 3/0 ALU(config-if GigabitEthernet3/0)# service-policy in P1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 940: Service-Policy

    ALU(config)# policy-map p2 ALU(config-qos-p1)# class c2 ALU(config-qos-p1-c2)# Now, policy p2 can be included in the policy p1 using the ‘service-policy command. ALU(config)# policy-map p1 ALU(config-qos-p1)# class c1 ALU(config-qos-p1-c1)# service-policy p2 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 941: Set

    IP-precedence mnemonics. See table precedence-mnemonics below. DSCP value in the range 0 - 63. 0-15 ToS mnemonics. See table below. tos-mnemonics DSCP M NEMONICS DSCP Mnemonics Values default af11 af12 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 942 PRECEDENCE NEMONICS IP Precedence Mnemonics Values routine priority immediate flash flash-override critical internet network TOS M NEMONICS TOS Mnemonics Values min-delay max-tput max-reli flash normal Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 943: Shape

    Parameter Description Shape Committed Rate 8000-10000000 Shape Committed Burst 40-200000 Shape Peak Rate 8000-10000000 Shape Excess Burst 40-200000 EFAULT ALUE None. XAMPLE ALU(config-qos-P1-C1)# shape committed-rate 500000 committed-burst 7812 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 944: Show Auto Qos

    200 max-threshold 300 random detect ip-dscp af22 min-threshold 150 max-threshold 300 random detect ip-dscp af23 min-threshold 100 max-threshold 300 random-detect ip-dscp class autoqos-class-af3 match ip any any dscp af31 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...
  • Page 945 70 set ip-dscp ef class-default fair-queue set ip-dscp default ELEASE ISTORY Release 2.3: ‘show auto qos voip’ output modified. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 946: Show Class-Map

    EFAULT ALUE None. XAMPLE ALU(config)# show policy-map P1 policy-map p1 interface serial0/0:0 EGRESS 10 class cm_ef random-detect ip-dscp 20 class cm_af11 65535 class class-default Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 947: Show Random-Detect-Defaults

    ALU(config)# show random-detect-defaults ip-dscp ip-dscp Min-Thresh Max-Thresh Drop-Probability af11 af12 af13 af21 af22 af23 af31 af32 af33 af41 af42 af43 ALU(config)# show random-detect-defaults ip-precedence ip-precedence Min-Thresh Max-Thresh Drop-Probability Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 948: Show Service-Policy

    1/10 1/10 Class cm_af11 match-any match any m1_af11 0 packets total, 0 bytes total, 0 packets transmitted, 0 bytes transmitted, 0 packets dropped, 0 bytes dropped, Class L2-network-control Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 949: Show Qos Config

    1000000 commit-action transmit committed- burst 1600 exceed-action drop excess-burst 2600 violate-action drop interface GigabitEthernet3/0 service-policy in p1 interface GigabitEthernet3/1 service-policy out p1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 950: Show Qos Frame-Relay Bandwidth-Config

    OmniAccess 5740 USG XAMPLE ALU(config)# show qos frame-relay bandwidth-config interface Serial0/2 frame-relay qos-bandwidth percent 10 interface Serial0/2.0 frame-relay qos-bandwidth percent 90 ELEASE ISTORY Release 2.3: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 951: Show Qos Running-Config

    9600 commit-action drop committed-burst 1500 exceed-action drop excess-burst 2000 violate-action transmit queue-limit 155 random-detect ip-dscp 0 min-thresh 50 max-thresh 150 interface GigabitEthernet3/0 service-policy in p1 interface GigabitEthernet3/1 service-policy out p1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 952: Show Queuing Interface

    90000 committed-burst 6000 police committed-rate 9600 commit-action drop committed-burst 1500 exceed-a queue-limit 155 random-detect ip-dscp 0 min-thresh 50 max-thresh 150 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 953: Show Queuing Statistics

    Packets dropped 0 Packets dequeued 0 Bytes dequeued 0 Queue length (Packets) 0 class c1 Packets dropped 0 Packets dequeued 0 Bytes dequeued 0 Queue length (Packets) 0 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 954: Tunnel

    Description Name of the tunnel interface. 0-14487 The absolute bandwidth (bps) value. 101-700000000 The bandwidth in percentage. 1-100 EFAULT ALUE None. XAMPLE ALU(config-pmap)# tunnel tunnel1 bandwidth percent 10 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 955: Queue-Limit

    ARAMETERS Parameter Description The range of queue-limit. 10-3500 EFAULT ALUE By default, a traffic class will have a queue limit of 150. XAMPLE ALU(config-qos-P1-C1)# queue-limit 155 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 956: Part 8 Tcp/Ip Services

    To switch to the beta version, import color def’ns from beta-colors.fm Part 8 TCP/IP Services Pagination: Numeric & continuous Optional footer: Alcatel-Lucent with Manual title (to set, preceding redefine ManualTitle OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide section of Beta Beta Beta Beta variable) book...
  • Page 957 Left running head: Chapter name (automatic) Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 958: Dhcp (Dynamic Host Configuration Protocol)

    DHCP Server configurations as quick-start and reference information. In this chapter, all the commands are described in alphabetical order. For more detailed information about using and configuring the DHCP Server, refer to the OmniAccess 5740 Unified Services Gateway CLI Configuration Guide. Alcatel-Lucent...

  • Page 959: Exclude Ip

    IP address from the pool. The excluded address should exist within the configured range. ARAMETERS Parameter Description IP address with in the network range to ip-address be excluded. EFAULT ALUE None. XAMPLE ALU(config-dhcp-pool-p2)# exclude ip 1.2.3.65 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 960: Host

    IP address within any of the configured ip-address network pools. Hardware address of the host. mac-address The format of the hardware address is aaaa.bbbb.cccc. EFAULT ALUE None. XAMPLE ALU(config-dhcp-pool-p2)# host 1.2.3.66 1122.aabb.55ff Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 961: Ip Dhcp Option Bootfile-Name

    Default VRF. EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# ip dhcp option bootfile-name boot_image ELEASE ISTORY Release 2.3: Parameter [vrf <vrf-name>] was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 962: Ip Dhcp Option Dns-Server

    ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# ip dhcp option dns-server 1.2.2.2 ELEASE ISTORY Release 2.3: Parameter [vrf <vrf-name>] was added. Release 3.0: Keywords {primary|secondary|tertiary}was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 963: Ip Dhcp Option Domain-Name

    Default VRF. EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# ip dhcp option domain-name alu ELEASE ISTORY Release 2.3: Parameter [vrf <vrf-name>] was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 964: Ip Dhcp Option Lease-Time

    Default VRF. EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# ip dhcp option lease-time 1000250 ELEASE ISTORY Release 2.3: Parameter [vrf <vrf-name>] was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 965: Ip Dhcp Option Log Server

    Default VRF. EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# ip dhcp option log-server 1.1.1.1 ELEASE ISTORY Release 2.3: Parameter [vrf <vrf-name>] was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 966: Ip Dhcp Option Next-Server

    If the VRF is not specified, the option is configured for the Default VRF. EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# ip dhcp option next-server 1.1.1.2 ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 967: Ip Dhcp Option Ntp Server

    Default VRF. EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# ip dhcp option ntp-server 1.1.1.1 ELEASE ISTORY Release 2.3: Parameter [vrf <vrf-name>] was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 968: Ip Dhcp Option Routers

    Default VRF. EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# ip dhcp option routers 1.1.1.1 ELEASE ISTORY Release 2.3: Parameter [vrf <vrf-name>] was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 969: Ip Dhcp Option Subnet-Mask

    Default VRF. EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# ip dhcp option subnet-mask 255.255.255.0 ELEASE ISTORY Release 2.3: Parameter [vrf <vrf-name>] was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 970: Ip Dhcp Option Tftp-Server

    Default VRF. EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# ip dhcp option tftp-server 3.2.2.1 ELEASE ISTORY Release 2.3: Parameter [vrf <vrf-name>] was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 971: Ip Dhcp Option Time-Offset

    Default VRF. EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# ip dhcp option time-offset 100 ELEASE ISTORY Release 2.3: Parameter [vrf <vrf-name>] was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 972: Option Bootfile-Name

    Domain Name Server IP address to be used by the clients. ARAMETERS Parameter Description IP address of the DNS. ip-address Specify the priority for the DNS. primary|secondary|tertiary EFAULT ALUE None. XAMPLE ALU(config-dhcp-pool-p1)# option dns-server 1.2.2.2 primary Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 973: Option Domain-Name

    ARAMETERS Parameter Description Specify the time for which a client can 1-315360000 use the IP address assigned to it. EFAULT ALUE None. XAMPLE ALU(config-dhcp-pool-p1)# option lease-time 106400 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 974: Option Log Server

    MIT-LCS UDP log server IP address to be used by the clients. ARAMETERS Parameter Description IP address of the log server. ip-address EFAULT ALUE None. XAMPLE ALU(config-dhcp-pool-p1)# option log-server 1.1.1.1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 975: Option Next-Server

    Description IP address of the next server. ip-address EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-dhcp-pool-p1)# option next-server 1.1.1.2 ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 976: Option Ntp Server

    DHCP is configured. ARAMETERS Parameter Description IP address of the router. ip-address EFAULT ALUE None. XAMPLE ALU(config-dhcp-pool-p1)# option routers 1.1.1.1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 977: Option Subnet-Mask

    IP address/domain name of the TFTP server. ARAMETERS Parameter Description IP address/domain name of the TFTP string server. EFAULT ALUE None. XAMPLE ALU(config-dhcp-pool-p1)# option tftp-server 3.2.2.1 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 978: Option Time-Offset

    This command is entered in the DHCP Pool Configuration Mode. This command is used to determine the time variation from GMT (in seconds). ARAMETERS Parameter Description Time variation in seconds. 1-315360000 EFAULT ALUE None. XAMPLE ALU(config-dhcp-pool-p1)# option time-offset 100 Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 979: Ip Dhcp Pool

    Default VRF. EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# ip dhcp pool p1 vrf alu-vrf ALU(config-dhcp-pool-p1)# ELEASE ISTORY Release 2.3: Parameter [vrf <vrf-name>] was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 980: Network

    IP address. NO IP DHCP OPTION DOMAIN NAME no ip dhcp option domain-name <name> [vrf <vrf-name>] This command is entered in the Configuration Mode. Deletes the configured domain name. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 981: No Ip Dhcp Option Lease-Time

    TFTP server. NO IP DHCP OPTION TIME OFFSET no ip dhcp option time-offset <1-315360000> [vrf <vrf-name>] This command is entered in the Configuration Mode. Deletes the configured time offset. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 982: No Option Bootfile-Name

    <ip-address> This command is entered in the DHCP Pool Configuration Mode. Deletes the configured router in the subnet for which the DHCP has been configured. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 983: No Option Subnet-Mask

    This command is entered in the DHCP Pool Configuration Mode. Deletes a configured network pool. NO RANGE no range {<lower ip-address> <higher ip-address>|<automatic>} This command is entered in the DHCP Pool Configuration Mode. Deletes a configured network range. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 984: Range

    <lower ip-address> <higher ip- network range. address> Specify entire network addresses to be automatic available to the client. EFAULT ALUE None. XAMPLE ALU(config-dhcp-pool-p1)# range 1.2.3.50 1.2.3.100 ALU(config-dhcp-pool-p1)# range automatic Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 985: Service Dhcp Enable

    ESCRIPTION This command is entered in the Configuration Mode. This command is used to enable the DHCP service on the OmniAccess 5740 USG. Note: Enabling DHCP service on OmniAccess 5740 USG disables DHCP relay. ARAMETERS Parameter Description Enable the DHCP service.

  • Page 986: Show Ip Dhcp Bindings

    Hardware Address Lease Expiration Type Pool ========== ================= ======================== ======= ===== 10.91.2.87 00:0f:fe:3a:63:da Wed Jan 17 23:38:11 2007 DYNAMIC ELEASE ISTORY Release 2.3: Parameter [vrf <vrf-name>] was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 987: Show Ip Dhcp Options

    ALU(config)# show ip dhcp options Routers : 1.1.1.1 Domain Name Server : 1.2.2.2 Log Server : 1.1.1.1 NTP Server : 1.1.1.1 ALU(config)# ELEASE ISTORY Release 2.3: Parameter [vrf <vrf-name>] was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 988: Show Ip Dhcp Pools

    Boot-File Name boot_image ALU(config)# show ip dhcp pools p2 Pool Name Pool Host Address 1.2.3.66 Pool Host Mac Address 11:22:aa:bb:55:ff ELEASE ISTORY Release 2.3: Parameter [vrf <vrf-name>] was added. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 989: Show Ip Dhcp Server Statistics

    This command is entered in the Super User Mode or Configuration Mode. This command shows the DHCP server statistics. ARAMETERS None. XAMPLE ALU(config)# show ip dhcp server statistics Message Received DHCPDISCOVER DHCPREQUEST DHCPDECLINE DHCPRELEASE DHCPINFORM Message Sent DHCPOFFER DHCPACK DHCPNAK Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 990: Dhcp (Dynamic Host Configuration Protocol)

    For more detailed information about using and configuring the DHCP Client, refer to the OmniAccess 5740 Unified Services Gateway CLI Configuration Guide. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 991: Client-Id

    Specify the client identifier option for a client identifier object. EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config–dhcp-client-client1)# client-id client123 ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 992: Dhcp Client

    Parameter Description DHCP client object name. client-name EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config-if GigabitEthernet3/0)# dhcp client client1 ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 993: Ip Dhcp Client

    Description DHCP client object name. client-name EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config)# ip dhcp client client1 ALU(config-dhcp-client-client1)# ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 994: Ip Dhcp Client Option Hostname

    This command is entered in the Configuration Mode. This command is used to delete a DHCP client object. When a client object is deleted, all the attributes configured for a DHCP client object will also be deleted. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 995: No Ip Dhcp Client Option Hostname

    <identifier> This command is entered in the DHCP Client Configuration Object Mode. This command is used to delete the vendor class identifier option configured for a client object. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 996: Parameter-Req-List

    |lease-time|ntp- server |rebinding-time |renewal-time |routers|server- identifier|sip-server|subnet- mask|tftp-server-addr|tftp- server-name|vendor-specific EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config–dhcp-client-client1)# parameter-req-list bootfile- name ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 997: Requested-Address

    Specify the IP address requested from the ip-address server. EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config–dhcp-client-client1)# requested-address 10.10.10.10 ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 998: Request-Type

    DHCP server to send only the DHCP options and no IP address assignment. EFAULT ALUE None. LATFORMS UPPORTED OmniAccess 5740 USG XAMPLE ALU(config–dhcp-client-client1)# request-type address ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 999: Show Ip Dhcp Client

    : client1 Vendor_class_id : broadband-forum.org Request_type : address Client_id : client123 Requested_address : 10.10.10.1 Parameter_request_list : bootfile-name Interfaces : GigabitEthernet3/0 ------------------------------------------- ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

  • Page 1000: Show Ip Dhcp Client Status

    4.4.5.5 ***** GigabitEthernet3/0 ***** address 61.0.0.250 subnet-mask 255.255.255.0 router 1.1.1.1 lease-time server-identifier 61.0.0.2 dhcp-renewal-time dhcp-rebinding-time tftp-server-name tftp.alcatel.com bootfile-name blablaAaluA12345 message-type ELEASE ISTORY Release 3.0: command was introduced. Alcatel-Lucent OmniAccess 5740 Unified Services Gateway CLI Command Reference Guide Beta Beta...

Table of Contents