3Com 3500 manual System console security define

Page 78

78CHAPTER 3: SYSTEM ENVIRONMENT

system console security define

✓3500

9000

✓9400

✓3900

✓9300

Gives a client trusted access to your system by adding the client IP address and subnet mask to an access list.

Valid Minimum Abbreviation

sy co se de

Important Considerations

CAUTION: Be careful when you define trusted IP clients. If you specify an incorrect IP address or subnetwork address when you define a trusted IP client, you can affect your own ability to access the system. See the Implementation Guide for your system.

■Configure trusted IP clients in this order:

■Define the trusted IP clients using system console security

define.

■Display the list of configured trusted IP clients using system console security display to verify that you have configured the trusted IP clients correctly.

■Enable the system to verify trusted IP clients using system console

security access.

■You can configure up to five IP addresses or five subnetwork addresses as trusted IP clients.

■An IP address or subnetwork address can be used to access the system only if it is on the trusted IP client list.

■Use the subnet mask to allow trusted access to all addresses on a particular subnetwork. Examples: The IP address 158.99.112.219 with a subnet mask of 255.255.255.0 allows trusted access to all addresses on the 158.99.112 subnetwork. The IP address 158.99.112.219 with a subnet mask of 255.255.255.255 allows access only by the single IP address 158.99.112.219.

■The trusted IP client information is retained after a system reboot; that is, it is saved in nvData.

Image 78

Contents Command Reference Guide 3Com Corporation 5400 Bayfront Plaza Santa Clara, California Contents System serialPort terminalSpeed System console security accessSystem console timeout timeOut System serialPort serialPortModeSystem sntp remove System nvData resetSystem sntp display Module baseline displayManagement ip rip statistics Management ip advancedPingEthernet paceAccess Part IV Physical Port ParametersPart V Bridging Parameters Bridge cos summaryVirtual Lans Vlans Bridge packetFilter unassign Ip interface icmpRouterDiscoveryIp arp display Ip multicast igmp interface summary Ip vrrp statisticsIp multicast dvmrp tunnels summary Ip multicast cacheIp ospf linkStateData summary Ip ospf virtualLinks statisticsIpx server static Ipx rip policy summaryAppletalk interface summary Ipx statistics summaryIpx statistics sap Appletalk sourceSocketQos rsvp enable Qos classifier summaryQos classifier detail 3Com Knowledgebase Web Services Analyzer displayPage CoreBuilder SuperStack II Switch Platforms Covered in This DocumentPlatform Release Material about why or when to use a particular command. For About command syntax, field descriptions, default values,Help you to understand the commands Information about troubleshooting and networking tasks, seeFinding Specific Information in This Guide Platforms on which this command is valid Command description begins at the top of a page. a commandFull command name Short description of the purpose of the commandRecommendations For Entering Commands Throughout this guideIcon Description Convention Description Please send e-mail comments about this guide to Include the following information when commentingDocumentation more useful to you Document titleAbout this Guide Administration Overview Command Summary Page Configuration Tasks Administration Console OverviewCoreBuilder 9000 Management Features Accessing the Administration ConsoleAdministration Console Management Controller EMC functions, such as login tableManagement features Use the Administration Console to manage the CoreBuilderSee the Web Management User Guide for the CoreBuilder PSU Intelligent Power Management Manages power use EME OverviewChassis Management Architecture Provides a cost-efficient Type Command Top-Level Menus Tasks Password Access LevelsAll modules use subslot System displays a prompt similar to the followingAdminister Access Example Write Access Example Read Access ExampleStructure diagrams at the beginning of most chapters show Your system supports the commandLayer 2 switching module is installed Entering a Command String Menu options are not case sensitiveEntering Abbreviated Commands To accept the default or current value, press EnterEntering Values in Command Strings Enter q Gives an overview of all the commands in this book Command SummaryPart II System-Level Functions System Environment Command Summary Ch 4 Module Environment Module redundancy reset NonRedundant module nameScript logout Module displayManagement summary management detail management ip Ch 6 Snmp Part IV Physical Port Parameters Ch 7 Ethernet PortsEthernet summary Ethernet detail Ethernet autoNegotiation Ch 8 Fddi Fddi station displayFddi mac path fddi port display Part V Bridging Parameters Ch 9 Bridge-wide Parameters Bridge displayBridge multicast igmp summary Ch 10 Bridge Ports Ch 11 Trunks Ch 12 MultiPoint Link AggregationCh 13 Resilient Links Ch 14 Virtual LANs VLANs Ch 15 Packet FiltersPart VI Routing Protocols Ch 16 IP Command Summary Ip rip password Ip rip addAdvertisement Ch 17 VrrpCh 18 IP Multicast Ip multicast traceRouteCh 19 Ospf Ip ospf areas displayCommand Summary Ch 20 IPX Ipx server secondaryIpx forwarding ipx rip mode ipx rip triggered Ipx sap triggeredIpx secondary Ch 21 AppleTalk Part VII Traffic Policy Ch 22 Quality of Service and Rsvp Log display Log devices Log services Part Viii Monitoring Ch 23 Event LogCh 24 Roving Analysis Command Summary System Environment Module Environment Page System Environment System Environment Important Consideration System displayValid Minimum Abbreviation Fields in the System DisplayOptions Prompt Description Possible Values DefaultSystem fileTransfer File transfer File transfer protocol forEnter Web URL where the Web Help Installation Are locatedSy co w Options System console consoleAccess System console ctlKeys Important Considerations Access levelPassword Logging on to the systemMost terminal screens are 24 lines high Not a trusted client Displays a summary of trusted IP client informationFields in the System Console Security Display Trusted IP address IP address of the trusted IP client MaskSystem console security define IP address IP address of the interface Chosen from the rangeSpecified IP To remove Trusted IPClient index All Client ? for a list of selectable indexesSystem console security access Current deny message NetworkSystem console timeout timeOut Telnet Timeout interval Minutes Interval System snapshot summary System snapshot detail Tftp Procedure 3900 9300FTP Procedure 3500 Only Loads a new revision of system software Host IPSy b d Resets the baseline counters to zero System baseline setSystem baseline Enables or disables a baseline RequestedState Valid Minimum AbbreviationProcedure Local Connection TerminalProcedure IP Interface Enter the terminal speed setting for the terminal portSystem serialPort modemSpeed Sets the baud rate of your system serial port New valueSystem serialPort baudRate Procedures Procedure Sy se e System name User specified option for start and end dates Mean TimeDst If you enter y to the prompt, a sub-menu appears that If you enter n, you are returned to the Time menuSystem time datetime Sets the system’s date and time Format DescriptionIndex That you want to configure System time timezoneTime zone System Time Timezone Example 14 GMT+100 CET/FWT/MET/MEWT/SWTSystem time dst Sets daylight savings time Format for option 5 is ccyy-mm-ssThhmmssEnter a daylight saving time option System nvData save Important Considerations TftpImportant Consideration FTP and Tftp Optionally, enter a label for the file ExamplePrevious IP System nvData save Reset You may not want to rebootSystem reboots after each Continue?For example If you enter y, the system displays the following messagesSy nv e Continue? To reboot because resetting System nvData resetDo you wish Confirmation of the reset So the system reboots afterSystem clearDiagBlock System diagErrLog Displays Simple Network Time Protocol Sntp information Field Description Configuration InformationSystem sntp display Fields in the System Sntp DisplaySystem sntp define Server’s IPValid IP address Address Sntp database Except System sntp modify System sntp remove Sntp state Whether you want to Disabled System sntp stateRequest poll Seconds, the poll interval 3600System sntp tolerance Time Time threshold value, Seconds 900 ToleranceLocal system time System reboot Reboots the systemReboot Confirmation that you want to System? Yes Valid Minimum Abbreviation Important Considerations Example Script Press Escape to return to the top level before you log out Module Environment Module Environment Fields in the Module Display Switching Fabric This module 3C numberModule display Port GigabitSummary You use the snapshot featureModule snapshot Detail display imagesModule snapshot detail Displays when the current baseline was last set Module baseline set Enables or disables a baseline Possible Prompt Description Values Default Module redundancyMo nam Module Time Example Most terminal screens are 24 lines Prompts Module nvData resetNecessary after each reset Do you wish Confirmation promptPerforms an emergency download Displays emergency download information for your module Module nvData staging 3500 9000 9400 Module diagErrLog Module reboot Reboots the specified moduleEnterprise Management Engine EME module You from a Telnet sessionEstablishing Management III Access Page OUT-OF-BAND Management OUT-OF-BAND Management Fields in the Management Summary Display ReqPortMode That sets the port mode on Ethernet ports that have portMode options. If autonegotiation is enabled, port mode Values are ignoredManagement detail Fields in the Management Detail DisplayLateCollisions Default is enabledPort was disabled MacAddress MAC address of this port MultiCollisionsTo a higher-level protocol or application Periods are 1 second long not configurableRxUnicasts Port during the most recent sampling period. SamplingFields in the Management IP Interface Summary Display IP address IP address of the out-of-band Interface, chosen from Range of addresses thatCommand Removes an IP management interface if you no longer need it Management ip route display Fields in the Management IP Route Display Status for RoutesValue Description Defines a static route Deletes an existing route Destination IPIp ro fl Adds a default route to the routing table immediately Deletes the default route Searches for a route in the routing table IP address or IP address that isFields in the Management IP ARP Display Defines a static ARP cache entry on the system You can define up to 128 static ARP entriesManagement IP ARP Static Example Management ip arp remove Deletes all entries from the ARP cache Ip ar flushD RIP-2 mode Index Index number of the interface RIP-1 modeDefault, advertise, and enabled Fields in the Management IP RIP DisplayIP interfaces RIP modeLearn Current Value Advertise Enabled Which you want to set the RIPManagement IP RIP Mode Example Displays general RIP statistics Fields in the Management IP RIP Statistics DisplayTo interrupt the command, press Enter Management ip pingManagement IP Ping Example Management ip advancedPing Disabled disabled Enabled Time between Enabled, the system displaysDisabled, the system displays Period . upon receiving an IcmpManagement IP Advanced Ping Example Ip t Management IP Trace Route Example Ip traceRouteWait Wait interval in seconds that Management IP Advanced Trace Route Example TTL value Fields in the Management IP Statistics Display Fields in the Management UDP Statistics Display Fields in the Management Icmp Statistics DisplayNumber of Icmp time stamp reply packets that were sent OutAddrMasksSent OutTimeStampsSnmp Simple Network Management Protocol Snmp Snmp display Fields in the Snmp DisplaySnmp community Sets two Snmp community strings read-only and read-writeSnmp Community Example Snmp trap display Fields in the Snmp Trap DisplaySnmp trap addModify Snmp Trap addModify Example Snmp trap remove Snmp trap flush Removes all Snmp trap reporting destinationsSnmp trap SmtProxyTrapsFddi station statistics TransmitAndReceive Setting Snmp writeDisable Allows or disallows Snmp write requestsEthernet Ports Fiber Distributed Data Interface Fddi Page Configure Ethernet ports in your system This chapter shows whether your system supports the commandEthernet summary Fields in the Ethernet Summary Display To display summary information about Ethernet ports, enter VendorName3500 Ethernet detail Fields in the Ethernet Detail Display Control valueAlignmentErrs Is both enabled and connected to a cable. The value 3900 Bytes Layer 2, 9300 9400 PaceAccessConfig-error.The value on-lineappears when the port Partitioned appears when the port has been disabled byStation was last initialized Error during receptionRxInternalErrs This port to a higher-level protocol or applicationError during transmission From this port by a higher-level protocol or applicationFrames not transmitted successfully Want to enable or disable DisableAutonegotiation Ethernet portMode Selected Earlier in this 100half Section 100BASE-FX Setting Each of the ports that you Selected Ethernet flowControlOff RxOn TxOn Flow Control Settings Setting Description Port TypeAvailable on Ethernet paceAccess That you selectedEthernet paceInteractiveAccess Ethernet label Ethernet portState Valid Minimum Abbreviation Important Consideration Ethernet monitoring mode Fiber Distributed Data Interface Fddi Fddi station display Fields in the Fddi Station DisplayBit to Set for Rejecting a Station Connection With defaults for connecting to a Port M Port B has precedence with defaults forConnecting to a Port M Management CFM. In a single MAC nodeFddi station tNotify All Enabled Fddi path display Displays Fddi path informationFields in the Fddi Path Display Fddi path tvxLowerBound Fddi path tmaxLowerBound Fddi path maxTreq Microseconds Ring’s operational token Rotation time, TOprFddi mac summary Fields in the Fddi MAC Summary DisplayFddi mac detail Fields in the Fddi MAC Detail DisplayOr application. Does not include frames that were not Received into receive buffers, such as missed framesHigher-level protocol or application Has expired Enabled or the Fddi ring was not operationalThis MAC can support TvxValueModules All Fddi mac notCopiedThreshold Fddi mac llcService Fddi mac path Sets the path assignment for MACsFields in the Fddi Port Display Error estimateFddi port display LctFailCountFddi port lerAlarm Fddi port lerCutoff Fddi port label IdentificationFddi port path StationMode Fields in the Fddi Station Mode DisplayFddi port numbers change, depending on To a specific portYou want the stationMode Changes to take effectFiber Distributed Data Interface Fddi Bridging Parameters Bridge-Wide Parameters Bridge Port ParametersPage BRIDGE-WIDE Parameters Bridge display Valid Minimum Abbreviation Fields in the Bridge DisplayTo discard the stored configuration message when it is Configuration messages when the bridge is the rootAssigned to it by the root bridge. The default value is Seconds. To configure the bridge maximum age, seeBy the root bridge. Compare with the bridgeMaxAge StpState Whether the Spanning Tree Protocol is enabled orLater in this chapter. STP is also configured on a FieldEnabled enabled Disabled Bridged to EthernetSnapTranslation Snap Translation when Versa from Fddi to Ethernet OptionsIpx Ethernet and Fddi linksBridge addressThreshold Aging time Maximum period To disable 300 10 1,000,000 secondsBridge agingTime Dynamically learnedRemoved Disabled Default, or Current value Enabled Disabled Default, or Current valueStpState Bridge spanningTree stpPriority Bridge spanningTree stpMaxAge Bridge spanningTree stpHelloTime Bridge spanningTree stpForwardDelay Bridge spanningTree stpGroupAddress Enable Disabled For the entire bridge Bridge gvrpStateGvrp state Bridge cos enable Bridge cos summary Fields in the Bridge CoS Summary DisplayBridge cos modify Igmp query source IP Fields in the Bridge Multicast Igmp Summary DisplayFunction to operate Address Messages if it is elected as the Igmp querierBridge multicast igmp snoopMode Bridge multicast igmp queryMode Bridge multicast igmp queryIpAddress 3500 9000 Fields in the Bridge Multicast Igmp Groups Display Valid Vlan ID 1 Default Vlan VID For which you areID number of the Vlan Ports that lead to IPMulticast routers Bridge multicast igmp qPort Bridge Port Parameters Bridge port summary Fields in the Bridge Port Summary DisplayDisabled for the bridge Port number depending on your system configurationFor example, when you define a trunk, only the anchor Disabled Management has disabled the port orTopology characteristics. This is the default Enabled, the port STP configuration options areEnabled STP sets the operating state of the port Configuration for all portsBridge port detail Fields in the Bridge Port Detail DisplayRxErrorDiscs To configure port priority values, see bridge portDesignated port when more than one bridge port is StpCost in this chapterPort multicastLimit in this chapter Option, see bridge port multicastLimit in this chapterRxMcastLimitType RxNoDestDiscsLearning Similar to listening, but the bridge If bridge-wide STP is disabled, this port STP setting isForwards all frames. To configure STP on a port, see Meaningless as long as its link state is up, the portProcessing includes bridge management frames TxFrames Number of frames that this port transmitted to itsFor a protocol that the local bridging function is TxMcastFiltersBcastOnly Broadcasts only McastBcast MulticastsSTP state Enabled Enabled factory DisabledBridge port stpState Specified portsBridge port stpCost Po stpp Bridge port gvrpState Vlan Valid bridge Port numbers All ? to display a Port summaryBridge port address add Removes individual MAC addresses from the address table MAC address that you want to Valid MAC Address RemoveBridge port address find Bridge port address flushAll Bridge port address flushDynamic Trunks Trunks Fields in the Bridge Trunk autoMap Summary Display Bridge trunk autoMap enable/disable Bridge trunk autoMap test You can select all or one trunk Bridge trunk detail Fields in the Bridge Trunk Detail DisplayWhether Tcmp is enabled or disabled for the trunk Bridge trunk define Than one FastEthernet GigabitEthernet 10/100BASE-TX 1000BASE-SX ? for a list of selectable Media typesPorts that you want to be Part of the trunkTrunk Control Message Trunk configurationFlow Following functionsBridge Trunk Define Example Example shows a define operation that creates two trunksBridge trunk modify Changes a trunk in either of two waysBridge trunk modify Ports Enabled Disabled Factory Default, or Current Deactivation of trunkFast Ethernet, Gigabit Ethernet, or Fddi Bridge Trunk Modify Example Bridge trunk remove Bridge Trunk Remove Example Trunks Mpla Bridge mpla summary Peer Switch InterfaceState Port on the other peer switch in the Mpla core Describes the state of the multipoint aggregated linkBridge mpla detail Fields in the Bridge Mpla Detail DisplayUse only Switch 3900 devices as edge switches SwitchUse only CoreBuilder 9400 systems as Mpla core switches Switch, for added bandwidthBridge mpla mode 9000 Input format for this MAC address isResilient Links Fields in the Bridge Link Summary Display PairBridge link detail Fields in the Bridge Link Detail DisplayBridge link define Bridge link define Bridge link linkState Resilient linkIndex Link that you want to modify LinkState Bridge link activePort Valid Minimum Abbreviation OptionsBridge link modify Character string that has Embedded spaces Main port Defined resilient linkRemoving a link requires that you reboot the system Bridge link removeBridge Link Remove Example Virtual Lans Vlans Bridge vlan summary Valid Minimum AbbreviationsFields in the Bridge Vlan Summary Display Index System-assigned index number that identifies a VlanYou specify Interface using the ip interface define command with Static The Vlan was created statically user-configuredBy using the bridge vlan define command System in allClosed modeBridge vlan detail Fields in the Bridge Vlan Detail Display Field Description Ignore STP modeVLAN. The default Vlan always uses the name Statistics appear for the Vlan that you specifyCreate a router port IP interface using the ip User-configured by using the bridge vlanDefine command Interface define command with the interfaceDefault Vlan requires a VID AllClosed modeNor can you change the VID of the default VLAN. Compatibility mode for VLANs configured prior toBridge vlan define 3500/9000 Layer Virtual Lans Vlans Operations If the defaultUsed by management Vlan existsDECnet VinesYes Layer None802.1Q Up to 32 Ascii Characters or Spaces IP Vlan Bridge Vlan Define Example 9000 LayerBridge Vlan Define Example 3500 9000 9400 3900 9300 Configure the per-port tagging Bridge Vlan Define Example 9000 Layer Bridge vlan modify 3500/9000 Layer Vlan interface index Selectable Vlan If you have That identifies a Vlan IndexApple for AppleTalk CommandsProtocol suite UnspecifiedBridge Vlan Modify Example 9000 Layer Bridge Vlan Modify Example Bridge vlan modify 3900/9300/9400/ 9000 Layer Are available to Be assigned to Vlan All Yes Tag type Vlan nameUp to 32 Ascii Current Characters or Name Spaces Bridge Vlan Modify Example 9000 Layer Bridge Vlan Remove Example Bridge vlan removeDeletes a Vlan definition Interface Is associated with the Vlan Index ContinueBridge vlan mode Select a Vlan mode as followsBridge Vlan STP Mode Example Bridge vlan stpModeBridge vlan vlanAwareMode Bridge Vlan Aware Mode Example Virtual Lans Vlans Packet Filters Packet Filters Lists the currently defined packet filters Bridge Packet Filter List ExampleDisplays the contents of the specified packet filter Sample Bridge Packet Filter DisplayBridge Packet Filter Create Port Group Example This example shows the user creating the portGroup filterCreates a custom packet filter using the built-in editor Create Custom Bridge Packet Filter Example Deletes the selected packet filter Bridge Packet Filter Delete ExamplesModifies an existing packet filter using the built-in editor Replace Existing Filter Example Store as New Filter ExampleSyntax of the EME download command is Current IP Bridge Packet Filter Load ExamplePrompt Description Name lastUser next connects to the module and loads the filter CB9000 connectBridge packetFilter assign TxA Bridge Packet Filter Assign ExamplesSelect paths Identifier Path to which you TxMUnassigns selected packet filter from one or more ports Bridge Packet Filter Unassign Examples Unassignment is from the transmit all txA paths on portBridge Packet Filter Port Group List Example Displays a port group Sample Bridge Packet Filter Port Group DisplaySelect port 3500 9000 Bridge Packet Filter Port Group Create Example PortGroup delete Deletes a selected port group Bridge Packet Filter Port Group Delete ExampleAdds ports to an existing port group Bridge Packet Filter Port Group Add Port ExamplesRemoves ports from a port group Bridge Packet Filter Port Group Remove Port ExamplesDisplaying port group 2 shows that port 6 is removed IP Multicast AppleTalkPage Internet Protocol IP Internet Protocol IP 397 Ip interface summary Fields in the IP Interface Summary Display Ip interface detail Host portion of the address is enabled orDisabled for the specified interface. a directed Fields in the IP Interface Detail DisplayAs the network number, the subnetwork number, Preference Whether there is a preference being used forPreference level To a 0 is in the host part of the IP addressIP Interface Detail Example Defines an IP interface Addresses that IP address IP address of the interface, chosenFrom the range of addresses that Range Index forIP Interface Define Example Port-based Routing IP Interface Define Example VLAN-based RoutingLayer Defines an IP interface3900/9300/9400 IP Interface Define ExampleIp interface modify Vlan index ValueIp interface remove Removes an IP interface from the system’s routing tableIp interface arpProxy IP Interface ARP Proxy Example IP interfaces Index number Interfaces to which you More than one interfaceIP Interface Directed Broadcast Example Ip interface icmpRedirect Not applicable if you have Disabled Current ValueFrame Icmp redirect Whether you want to StateIcmp router discovery can be set on a per-interface basis Hex Bit signed 231to Twos-complement integer that 1800Holdtime Advertisements are held valid IP Interface Icmp Router Discovery Example Ip interface statistics Displays IP interface statistics on a per-interface basisFields in the IP Interface Statistics Display Than Or bothIp route display Options 3500 onlyFields in the IP Route Display 3500 9000 9400 3900 9300 Ip route r Ip route flush Deletes all learned routes from the routing tableIp route default Ip route n Ip route findRoute Ip arp display Fields in the IP ARP DisplayIP ARP Static Example Ip arp remove Ip arp flushAll Ip arp flushDynamic Ip ar a System supports baselining for ARP statistics Resolution Protocol ARP event occursIp arp statistics Fields in the IP ARP Statistics DisplayARP request ResolutionWas down ARP replyIp dns display Fields in the IP DNS DisplayChanges the name of a currently defined domain Characters long Valid domain nameOr current name Like the following Index number to modify or remove this IP addressName server IP Ip dns modifyModifies a currently defined name server IP address Address that youDeletes a previously defined name server IP address Want to removeSelectable server Index number ? for a list Indexes Ip dns nslookup Ip udpHelper display Fields in the IP udpHelper DisplayIp udpHelper define Ip udpHelper remove DeletionIp udpHelper hopCountLimit By default, there is no threshold Ip udpHelper interface first Ip udpHelper interface even Ip udpHelper Interface sequentialInterfaces sequentially By default, IP routing is disabled on the system Ip rip display Fields in the IP RIP Display 9000 only By default, enabled RIP-1 ModeState as off. Other modes are learn default 9000 onlyIp rip mode IP RIP Mode Example Not Handles RIP 2 packets Updates Disabled Learn FactoryAdvertise Current Only Value Enabled 3500 only Handles RIP-2 updates Compatibility modeCompatibility Compatibility mode that Mode IP interfaces Index number of the interfacesOn a per-interface basis, sets the RIP cost Ip rip poisonReverse Enables or disables RIP Poison Reverse mode on the systemEnabled Value Selected interfaceDisabled Enabled Current value Sent during a RIP Version 2 updateMode On the selected interface All Collapse route table entries for all subnets of a directlyIp rip password IP RIP Password ExampleAdds an advertisement address to an IP RIP interface Valid IP address Address List of advertisement addresses Ip rip remove Advertisement Route policies are classified as follows Ip rip policy summaryDisplays summary information about RIP routing policies Fields in the IP RIP Policy Summary DisplayFields in the IP RIP Policy Detail Display Ip rip policy detailDisplays detailed information about RIP routing policies All interfacesIp rip policy define Defines an import or export route policy for RIP0.0 All + add SubtractRIP Import Policy Conditions for Specified Interfaces Source Route Router Address/mask Action DescriptionExample of Export Policy RIP Export Policy Conditions for Specified InterfacesExample of Import Policy Source Protocol Router Action DescriptionProtocols Static route for export policies Ip rip policy modifyModifies an existing route policy for RIP Export Only AllValues associated with the route Ip rip policy remove Deletes a previously defined route policyFields in the IP RIP Statistics Display Ip ping IP Ping Example Ip advancedPing System displays a period . upon Enabled DisabledEnabled Seconds Yes Selectable Interface index Router Receiving an Icmp echo replayIP Advanced Ping Example Ip traceRoute IP Trace Route Example From which the probe packets Defined on the system4096 Bytes Yes IP Advanced Trace Route Example TTL value Numeric mode Whether the system shows hopDisabled Enabled Their indexesValid Minimum Abbreviation ip sta Options Fields in the IP Statistics DisplayFields in the UDP Statistics Display Fields in the Icmp Statistics DisplayOutDatagrams Number of UDP packets that the router sent Number of Icmp time stamp reply packets Vrrp Ip vrrp summary Fields in the IP Vrrp Summary DisplaySample IP Vrrp Summary Display Master, Backup, or Initialize state Fields in the IP Vrrp Detail DisplayTo the Master state Auth Whether the Vrrp router uses simple passwordIpTtlErrors Total number of Vrrp advertisements with IP TTL Vlan consider the Master down if two advertisementPriorityZeroTx Stopped participating in VRRP. Used to trigger backupType Type of virtual router primary or backup VersionErrors That this virtual router has sent. The priority of zeroIpTtlErrors Sample IP Vrrp Detail DisplayIp vrrp define Defines a virtual router on the systemBackup Index number of an IP Virtual LAN Vlan that Define the virtualIP Vrrp Define Example Priority masterIp vrrp modify Modifies an existing virtual routerBackup Auto-learn Router IndexesIP Vrrp Modify Example Vrid VidxIp vrrp remove IP Vrrp Remove ExampleVirtual router identifier Enables or disables a configured virtual routerIP Vrrp Mode Example Identifies the virtual routerDisplays a list of neighboring virtual routers Master or Backup routerIp vrrp neighbor Fields in the IP Vrrp Neighbor DisplayFields in the IP Vrrp Statistics Display VriderrorsDisplays general Vrrp statistics for the virtual router Number that this virtual router has receivedVirtual Router Redundancy Vrrp IP Multicast IP Multicast Fields in the IP Multicast Dvmrp Interface Summary Display Non-querier The interface is not functioning as Multicast Routing ProtocolFields in the IP Multicast Dvmrp Interface Detail Display Non-leaf The interface is a branch in the IPIp multicast dvmrp interface mode Modify the default Routing interface forIp multicast dvmrp tunnels summary Fields in the IP Multicast Dvmrp Tunnels Summary Display Ip multicast dvmrp tunnels define Address Multicast tunnel end Point. Use standard Interface Index number Interface on which youRemote Valid IP interface on a different system and subnetworkDeletes a Dvmrp tunnel end point from the system Ip multicast dvmrp tunnels address Valid Minimum Configuration Prompt Definition Possible Values DefaultTTL threshold Modifies the metric or cost of an existing Dvmrp tunnel Fields in the IP Multicast Dvmrp Route Display Fields in the IP Multicast Dvmrp Cache Display Routing interface index number. a T precedes a tunnel When there are no outgoing interfaces and whenListed on the left After the index number indicates that a pruneFunction is activated and these values represent the cost Summarizes key information about Igmp interfaces Fields in the IP Multicast Igmp Interface Summary DisplayAs the Igmp querier, this field shows Self Interface detail Port informationFields in the IP Multicast Igmp Interface Detail Display Ip multicast igmp interface TTL React to Igmp Disabled Or current valueYour selection applies to all interfaces in the system Packets and setQuery mode Can offer itself as aCandidate for Ip multicast cache Fields in the IP Multicast Cache Display Multicast group address Ospf Open Shortest Path First Ospf Ip ospf areas display Displays a list of existing Ospf areasFields in the IP Ospf Areas Display Backbone area 0.0.0.0 is configured by default Yes Factory Default, or Current valueArea ID must be unique for the autonomous system Description Possible Values Default 3500 9000 9400 3900 9300 Range class Variable, based on You want to add to the areaOn address Whether to advertise area Yes RangeIP Ospf Areas Modify Range Example Variable, based on Current value Mask You want to modifyIp ospf areas removeRange Field in the IP Ospf Default Route Metric Display Default routerBy default, the default route metric is not defined It entails more hops or less bandwidthDefines the default route metric for the router Route metric With the default route3500 9000 9400 3900 9300 Fields in the IP Ospf Interface Summary Display AreaID Ospf area to which the interface belongs IP interface of the backup designated router BDRFields in the IP Ospf Interface Detail Display Ospf information is displayedDesignated router This router is not the designated router or backupBDR Router is the backup designated router on Attached networkFields in the IP Ospf Interface Statistics Display Interval than this router. This prevents the router from On the interface are configured with a different deadMismatchDead Becoming a neighbor with these other routersWhen an Ospf database descriptor packet is received When an Ospf Hello packet is received and the packetWhen an Ospf Hello packet is received that has the same When processing an LSR packet, if the area is notProblems Network whose configuration has not changed couldWhen an Ospf database descriptor packet is transmitted When an Ospf Hello, LSU, or LSAck is being sent as aEnables or disables Ospf on specified IP interfaces Assigns interface priority to the Ospf router One or more All factoryAssociates an interface with an Ospf area Assigns a cost to an Ospf interface Sets the Ospf interface transmit delay Transmit Delay in seconds that youIp ospf interface hello Sets the interface Hello intervalIp ospf interface retransmit They determine that Ip ospf interface deadSpecifies the dead interval for an interface Transmitting router is inactiveSets password security for an Ospf interface Ascii characters Default, orAll ? for a list Selectable Indexes Up to eight Ip ospf linkStateData databaseSummary Fields in the IP Ospf Link State Data Router Display LsidStub Net Network IP address mask ID number of the router that originated the LSAMetric Cost of the link Router ID Originating router ID Fields in the IP Ospf Link State Data Network Display Link State ID For which you want to viewSummary LSA information For type 3 summary LSAsType 4 ASBR’s Ospf router ID Fields in the IP Ospf Link State Data Summary DisplayType 3 Destination network’s IP address Metric Cost to reach the network Network mask ForFields in the IP Ospf Link State Data External Display IP network numberTwo-way Bidirectional communication has been Data received from neighbor will attempt to contactInit Have recently seen Hello packet from neighbor EstablishedIp ospf neighbors add Adds a neighbor static IP address to an existing interface3500 9000 9400 3900 9300 Sets the Ospf router ID IP Ospf Router ID Example Interface Type IP Ospf Router ID Example Address TypeMaximum size of the IP routing table at the next reboot Partition at the next rebootMeans that Ospf has been set to use the default memory Specific maximum partition size at the next rebootModifies the maximum memory that Ospf can allocate There are three choices for memory allocationBy default, the stub default metric is not defined Field in the IP Ospf Stub Default Metric DisplayIp ospf stubDefaultMetric define Ip ospf stubDefaultMetric remove Update packet over the virtual link Fields in the IP Ospf Virtual Links Summary DisplayDisplays detailed information about a virtual link Fields in the IP Ospf Virtual Links Detail DisplayFields in the IP Ospf Virtual Links Neighbor Display Ospf routers are being discarded due to authentication Fields in the IP Ospf Virtual Links Statistics DisplayIs not supported in the current implementation Down and reestablished When an Ospf Hello packet is received and the packet ReceiveLSU Creates a new virtual link to a destination router Description Possible Values Default To reach the target router 3500 9000 9400 3900 9300 Sets the virtual link transmit delay, in seconds Sets the virtual link Hello interval, in seconds Ip ospf virtualLinks retransmit Sets the virtual link dead interval, in seconds Password Sets password security for a virtual link Fields in the IP Ospf Policy Summary Display Type 1 as default. Only applicable to export policies Ip ospf policy detailFields in the IP Ospf Policy Detail Display Field Description Ip ospf policy define Defines import and export Ospf routing policiesExport Direct Policy type Type of policy OriginProtocols From which protocol the route Originated Import Sta static RipOspf Import Policy Conditions Route Address/mask Action DescriptionOspf Export Policy Conditions Export Policy Conditions for Direct RoutesProtocol Interface Action Description Example of Export Policy for a Directly Connected Interface Ip ospf policy modify Modifies an existing Ospf routing policyPolicy Sta static rip ValuePolicy action Accept or reject the route Valid IP Without options Value Type AS external advertisementASE, defined as Type ValueIP Ospf Policy Modify Example Routers Specified routersIp ospf policy remove Deletes Ospf routing policiesIp ospf statistics Displays general Ospf statisticsFields in the IP Ospf Statistics Display Open Shortest Path First Ospf IPX Display define modify remove SAPadvertising RIPadvertising Fields in the IPX Interface Display IPX interface. When the system prompts youIpx interface display For this option, the menu identifies the availableIpx interface define Defines an IPX interfaceIPX Interface Define Example Changes the characteristics of an existing IPX interface Ipx interface modifyEthernetII Available with 802.2, SNAP,802.3/SNAP 802.2 Format 802.2 LLC RAW802.3Ipx i r Controls whether the system advertises IPX services Controls whether the system advertises IPX routes Ipx route display Start0x0 0xffffffff Range You want to display routes Packets to the segment. a node address of all Fields in the IPX Route DisplayTime the router sent a packet Zeroes 00-00-00-00-00-00 means thatIpx route secondary Displays any secondary routes that are availableFields in the IPX Secondary Route Display Ipx route static Node address in the formatIPX Static Route Example Ipx route remove Deletes a route from the IPX routing tableIPX network Byte IPX network address 0x1 0xfffffffe Address Ipx route flush Ipx server display Time a server in the table sent a packet Service typeFields in the IPX Server Display Server. The maximum number isDefines a static IPX server Interface index Interface index number forIPX Static Server Example Service name Service name of the server Service type Deletes a server from the IPX server table? for a list of selectable names 0x1 0xffff Ipx server flush Ipx server secondary Displays any secondary servers that are availableFields in the IPX Secondary Server Display Ipx forwarding Controls whether the system forwards or discards IPX packetsTriggered RIP updates RIP allows the exchange of routing information on a NetWarePassive The system processes all incoming RIP packets Ipx rip triggered 3500 9000 9400 3900 9300 Ipx rip policy define Define a RIP Routing Information Protocol policyIPX RIP Policy Define Example Ipx rip policy modify Modify an existing RIP Routing Information Protocol policyStatic All Adjust the metric value, This IPX RIP Policy Modify ExampleSubtract\ Multiply Divide Ipx rip policy remove Remove an existing RIP Routing Information Protocol policyIf only one policy Ipx sap mode Ipx sa t Name Object name that assigned to the server Type Or Export apply the policy to advertised servicesFields in an IPX SAP Policy Summary Display All routesFields in an IPX SAP Policy Detail Display 0x0098 Define a SAP Service Advertising Protocol policyIpx sap policy define Parameter is valid only if Policy Type is set to Export AllMatch the same service. a Enter up to 6 hex charactersIPX SAP Policy Define Example Modify a SAP Service Advertising Protocol policy Ipx sap policy modify00-00-00-00-00-00 IPX SAP Policy Modify Example Remove an existing SAP Service Advertising Protocol policy Ipx output-delay Displays IPX summary statistics Fields in the IPX Statistics Summary DisplayApplications that were dropped Ipx statistics rip Displays IPX RIP Routing Information Protocol statisticsFields in the IPX RIP Statistics Display Fields in the IPX SAP Statistics Display Displays IPX SAP Service Advertising Protocol statisticsIpx statistics sap Been processedDisplays IPX forwarding statistics Fields in the IPX Forwarding Statistics DisplayNo Routes IPX route is unknownIpx statistics interface Displays IPX interface statisticsFields in the IPX Interface Statistics Display Field Description Ipx oddLengthPadding IPX NetBIOS Example Valid Minimum Abbreviation ipx n OptionsIpx secondary IPX Secondary ExampleIPX Appletalk Appletalk Displays summary information for all AppleTalk interfaces Fields in the AppleTalk Interface Summary DisplayWith the AppleTalk interface Displays detailed information for all AppleTalk interfaces Fields in the AppleTalk Interface Detail DisplayDefines an AppleTalk interface Interface. Seed interfaces onlyZone name. Seed interfaces Only Zone name AppleTalk zone that isModifies an existing AppleTalk interface Interface nVlan interface index, it That you can associate with aNew AppleTalk interface Removes an existing AppleTalk interface Fields in the AppleTalk Interface Statistics Display RtmpRouteDeletes NbpInLookupReqsRtmpOutDataPkts Aged out of the tableFields in the AppleTalk Route Display Appletalk route flush Fields in the AppleTalk Aarp Display Appletalk aarp remove 9300Important Consideration Appletalk zone display network Displays the AppleTalk Zone table indexed by zones Appletalk forwarding AppleTalk protocol uses checksums to detect errors in data Appletalk checksumVerification checksum from the incoming data and compares Appletalk sourceSocket Appletalk ping Destination AppleTalk node that you wantTo test for network connectivity Address Fields in the AppleTalk DDP Statistics Display Fields in the AppleTalk Rtmp Statistics Display Displays AppleTalk Zone Information Protocol ZIP statistics Fields in the AppleTalk ZIP Statistics DisplayAny error Displays AppleTalk Name Binding Protocol NBP statisticsFields in the AppleTalk NBP Statistics Display Quality of Service QoS and Rsvp VIIPage Rsvp Quality of Service QOS and Rsvp Fields in the QoS Classifier Summary Display Qos classifier detail Fields in the QoS Classifier Detail DisplayAre predefined Flow classifiers only Classifier Installed Protocol UDP port rangeQos classifier define Defines a flow or nonflow classifierClassifier can have only one control applied to it Flow or nonflow Up to 0.0 Factory DefaultClassifier Number of the flow ClassifierEthertype Protocol type Classifiers with Source IP For flow classifiers Up to four portions 0.0End value Custom Custom protocol Nonflow Type Classifiers onlyFlow Classifier Procedure Custom Hex values for ProtocolQuality of Service QOS and Rsvp QoS Classifier Define Example Flow Classifier Nonflow Classifier Procedure QoS Classifier Define Example Nonflow ClassifierQos classifier modify Modifies a previously defined classifierMatch, or 255.255.255.255 FactoryProcedure Flow Classifier Quality of Service QOS and Rsvp QoS Classifier Modify Example Flow Classifier Removes a previously defined classifier QoS Classifier Remove ExampleDisplays summary information about QoS controls Fields in the QoS Control Summary DisplayPacket can be dropped if the transmit queue for which it is Fields in the QoS Control Detail DisplayLimit Rate limit in KBytes/sec or percentage Loss eligible Destined is over its thresholdSo forth Type Rate limit type, none no rate limit, receivePort, orQos control define Defines a control for one or more existing classifiersReceivePort Default Aggregate For rate limit Default/Best Effort forService level Service level for Control name Name that you assign toHow rate limit Enabled backplane portsControl Used so that drop packets Enabled Is expressedSpecific Input Time Type Options Input Time Type OptionsWeekdays Starting time hhmm Ending time hhmm Weekends You can apply aggregate rate limits only to flow classifiers Quality of Service QOS and Rsvp Enter the classifiers that are subject to this control QoS Control Define ExampleQos control modify SelectLimit without affecting the other defined rate limits Specified for Service level Service level for Conforming packetsService level for excess That are associated withNone ? for a list of selectable values TCP drop You want to enableFor flow or nonflow For a controlProcedure Quality of Service QOS and Rsvp QoS Control Modify Example ReceivePortRemoves a previously defined control QoS Control Remove Example 9000 LayerQos ldap display Fields in the QoS Ldap DisplayQos ldap enable Qos ldap disable Disabled Removes the connection to Ldap serverPerformed policing for that flow. Options are edge, always Qos rsvp summaryFields in the QoS Rsvp Summary Display Total resvDisplays detailed Rsvp information when Rsvp is enabled Qos rsvp detailFields in the QoS Rsvp Detail Display Always Default Never Qos rsvp enableEnables Rsvp on the system Rsvp settings that you specify Maximum totalQos rsvp enable Disables Rsvp on the system Qos bandwidth display When you enter the command, the system prompts you to enter Sent only when no high priority packets need to be sentLink Qos excessTagging DisplayWith a special Ieee 802.1p tag value Qos excessTagging enable Ieee 802.1p Tag value to use to tag or retag Excess packetsQos excessTagging disable Zero value shows byte or packet counters Seconds Factory Default, orSets a sampling interval for gathering QoS statistics Interval Interval, in seconds, duringBridge ports Port numbers whose receive Displays QoS receive statisticsFields in the QoS Receive Statistics Display One or more Port numbers AllPeak count The highest number of conforming nonflow Displays QoS transmit statistics Fields in the QoS Transmit Statistics Display Field Description Quality of Service QOS and Rsvp Viii Roving AnalysisPage Event LOG Event LOG Fields in the Log Display Log display Displays the current log settingsSupported Event Log Services Severity LevelsLog Devices Examples Levels for? for a list of valid severity levels Yes To disable the config and info severity levels Services/levels Or disabledLog Services Examples To enable all severity levels for the AppleTalk serviceEvent LOG Roving Analysis Roving Analysis Analyzer display Fields in the Analyzer DisplayAnalyzer Display Example 3500 Analyzer Add Example 9000 1000BASE-SX module Analyzer remove Analyzer Remove ExampleAnalyzer start Starts port monitoring activity on the selected bridge portAnalyzer Start Example 9000 1000BASE-SX module Analyzer stop Stops port monitoring activity on the selected bridge portAnalyzer Stop Example Roving Analysis Appendix a Technical Support Page Services 3ComHours a day, 7 days a week Access by Analog ModemUsername anonymous Country Data Rate Telephone NumberAccess by Digital Modem 847 262408 727 Europe, South Africa, and Middle East NET 3Com 800 638Country Telephone Number Fax Number 800 638 Not toll-freeAppendix a Technical Support Symbols Numbers? character 473 Commands 150 system menu 218 Port duplex mode 212 Port flow control 215 Errors Routing interface203 Pace Access Protocol Dynamic versus static Vlan origin 345Fax service 3ComFacts Fddi MAC638 264 LER Link Error Rate Alarm value 242 LerCutoffSwitch Log, event 747 Logout SAP policy Define 642 DetailRemoving 159 management ip rip Packet size advancedPing 475 advancedTraceRoute IPX 715 712 SMT Station Management LerAlarm valueDisplaying configurations 116 toIcmp Internet Control Message Protocol 483 570 QoS Quality of Service interval for101, 135 System reboot 123 418 IPX forwarding348 Updates RIP triggered 631 Sample definition 311 Setting Ignore STP modeAccess 71 639 Zones 677 URL User configuration information

Related manuals

Manual 16 pages 1.35 Kb