LEC Elan Admission Security | 3Com 9000 specs

10

LEC ELAN ADMISSION SECURITY

This chapter describes LEC ELAN admission security in the CoreBuilder® 9000 ATM Enterprise Switch.

LEC Not in ELAN Security List

LECs in ELAN Security List

Switch Security

Save Security Configuration

For more information about LEC ELAN admission security, see Chapter 8, "LAN Emulation" in the Operations Guide.

Image 313

3Com 9000 manual LEC Elan Admission Security

Contents

CoreBuilder ATM Enterprise Switch Management Guide 3Com Corporation 5400 Bayfront Plaza Santa Clara, California Contents Logging Out Management Capabilities Starting Up LMA Access Level Logging Reset All Set Management Configuration to Factory DefaultsReset Switch 122 Update Ilmi Channel Polling Interval 123 116 Update Auto-discovery status 117103 Display Software Versions 104 105 Get ATM Addresses at Port 135 134136 Network Prefix Display Network Prefix 148 190 189192 ATM-Layer Statistics 193 198 AAL5-Layer Statistics 199 218 Update Startup Delay 223 Lane Version of Switch 224222 229 Reset LES Configurations 298 289 Update Elan Response Policy 291252 Display Elan MAC Addresses 254 255 Add Elan MAC Address 256 Display Elan ATM Addresses 257 Configuring Pnni Nodes 333 Get Number of Nodes 334 Update LEC Elan Join Privilege for Current Session306 Display LAN Emulation Statistics 308 343 344 Set Default ATM Address 345346 Get Peer Group ID 358 394 389407 Display Ptse Node Information 412 414 Display Summary Address Table 416 Menu Index Technical Support ATM Switch Fabric Module Specifications Physical About this Guide List conventions that are used throughout this guide ConventionsText Conventions Icon Description Conventions Command Result Command ActionsParameter Format or Range Command Description Sections Explains the command descriptionsKey Section Description CoreBuilder 9000 Documentation Overview Module Quick Start Guides or Getting Started Guides Paper Documents An ATM network Documents on CD-ROM Compliance Year About this Guide CoreBuilder 9000 ATM Enterprise Switch has two components CoreBuilder ATM Enterprise Switch CharacteristicsATM Switch Fabric Module The ATM Interface Module Module Type No. of Ports Rate Mbps ATM Interfaces Card Type 3Com Part Number Preventing congestion Handling congestion Mechanisms for Preventing Congestion Classical IP Clip ATM Mechanisms for Handling CongestionVirtual Networks Call Admission CLP-based Cell Discard Software Release Key Features Protocols StandardsSupported Overview Starting UP Handling Sécurité Précautions de Manipulation Switch Fabric ATMPoignées d’insertion/d’éjection sont ouvertes Vorkehrungen beim Umgang mit dem Modul CoreBuilder 9000 Enterprise Switch Installation Fast Setup Switch IntegratedCoreBuilder Integrated Fast Setup Procedure Navigation Aids Integrated Fast Setup Procedure SectionsSetup Section Description Sections Capabilities ManagementStarting Up Access Level Privileges Access Levels LMA Main Menu LMA Menu Structure LMA Menu System At the Switch Setup Menu prompt, enter At the Platform Configuration Menu prompt, enterEntering the Menu Sequence Password in a format of up to eight alphanumeric characters Entering the Command ParametersPassword again exactly as before Command Results Editing Aids Menu Navigation FunctionsTo go Type or Press To perform this task Type or Press Automatic Logout Configuring the Platform Update Admin-access Password Set Password to Factory Default Example Read-access password is updated Write-access password is updated Admin-access password is updated Before you enter the new password Enter 1 1 1 Following prompt is displayed Passwords are reset to their factory valuesEnter y to confirm. The following message appears Setting Up for Current IP address is displayed Following message is displayed SIP IP Setup MNG Management setupNext reboot SIP Set IP Address Current NMS IP address is displayed NMS NMS Setup NMS address is updated toExample Enter 1 1 SNS Set NMS Address Address found in the local IP subnetwork Current default gateway IP address is displayed SGW Set Default Gateway GWY Default Gateway SetupDefault Gateway address was Successfully set for the next reboot Address Current IP subnet mask configuration is displayed Set for the next reboot MSK Subnet Mask SetupSSM Set Subnet Mask Subnet Mask address was successfully Community String Enterprise SwitchCurrent read community string is displayed Update the Read Community String of the CoreBuilder 9000 ATM Update Read Current write community string is displayed ATM Enterprise Switch Update Write Current Ethernet Type configuration is displayed SET Set Ethernet Type ETH Ethernet Type SetupEth Type was successfully set for Management Configuration is set to the factory defaults RebootEnter 1 1 2 Following prompt is displayed Setting the Port Network Connection Type Command Actions UNI Port 1 7.1.2 7.1.3 7.1.4 7.2.1 7.2.2 7.2.3 Enter y to confirm. The following message is displayed Network connection type for port 3.1.2 is updated to UNI UNI for all ports, and 7 for maximum number of hops NNI configuration parameters are reset to UNI for all portsEnter 1 1 3 Following prompt is displayed CoreBuilder 9000 ATM Enterprise Switch Resetting AllParameters Enter 1 2 Following messages are displayed Enter 1 Following message is displayed Parameters Downloading Download Status Command ActionsSystem Software Display Software Message Meaning and Action Download Messages Enter 1 3 Following prompts are displayed Download procedure Load Modes Load Mode Description Configuration is uploaded to the host Host Enter 1 3 Following message is displayed Fabric Modules Managing SwitchModule Status Switch Fabric Module Parameters Switch Fabric Module ParametersName Description Enter 1 4 Following prompt is displayed Switch is rebooted and the following messages are displayed Fabric Module Command Actions Reset Standby Switch Reset the standby switch fabric moduleEnter 1 4 3 Following prompt is displayed Mode Command Actions Direct access sequence 1 4 3 3 Interface Modules ConfiguringDisplay Interface Module Information Example for the 16-slot chassis and 7-slot chassis Interface Module Slot Occupancy ParametersSlot ID Parameters Parameter Description Interface Parameters Interface Card Parameters OC3-SC Selected ports are set and saved Enter 1 5 3 5.1.1 Following messages are displayed Enter 1 5 4 1.1.2 Following message is displayed Clock operational mode of port 1.1.2 is set to loop timing Enter 1 5 5 1.1.2 Following messages are displayed Loop mode of port 1.1.2 is set to Loop back Interface card was reset RST Reset Interface CardEnter 1 5 6 Following prompt is displayed IFC Interface Cards Enter System is logged out Logging Out and Rebooting Parameter Format or Range Confirm reboot Reboot Reboot the system Command ActionsReboots the ATM Enterprise Switch Enter 1 Following prompt is displayed Direct access sequence 1 Display ATM Features ATM FeaturesSoftware Versions Latest software version numbers Display Lecs ATM Address Update Lecs ATM Address LCS Lecs Setup SLE LE SetupSLA Set Active Lecs ATM Addr Active Lecs addraddress Switch Clock Source Setting UpGet Clock Source Status Cannot be used as an external clock source port Source SP2 Set External Clock Source Enter 1 8 Following prompt is displayed Internal Command Actions Ilmi Setup VER Ilmi Version Setup IME Ilmi SetupGET Get Ilmi Version Ilmi version is 3.0/3.1/4.0 Ilmi version is reconfigured Ilmi version of port 3.1.2 is updated toExample Enter SET Set & Save Ilmi Version Enter 1 1 8 2 1 Auto-configuration status of port 3.1.2 is enabled AUD Auto-Discovery Setup SET Set & Save Auto-Discovery Lecs via Ilmi is ENABLED/DISABLED MIB Ilmi MIB View SetupGET Get Lecs via Ilmi ON/OFF Status LECS-via-ILMI status of port 3.1.2 is enabled Enter 1 1 8 4 1 8 4 VPI/VCI = 0/16 is periodically polled for connectivity Enter 1 1 8 4 4 3.1.2 Display User ATM Addresses PortAddresses at Port Enter the menu sequence 3 CON Connections Enter 3 1 1 UME Parameters Describes the UME parameters displayed by the commandUME Parameters ADD Get ATM Addresses CON ConnectionsSTC Get Static and NNI Addresses At Port Parameters Describes the parameters displayed by the command Port Command Actions Parameters Enter 3 4 2 1 STP Static ATM Addresses Setup C Setup of Connections and ATMAddresses ADD Add ATM Address ATM address member n was deleted from DEL Delete ATM AddressPort Enter 3 4 2 4 Enter 3 4 2 Following prompt is displayed Display Network Network PrefixPrefix Managing Network Interfaces Signaling Setup Signaling Timers Configuring Virtual Channels Configuring Virtual Channels RTG Routing CLL Calls Example Display Info for a Specific SVC Call Example Display all SVC Calls for an ATM address member Two additional destinations Example Display all PVC Calls for a PortWith two additional destinations Call Parameters Shows the call parameters displayed by the commandCall Parameters Display Port Connections Example Display all Connections at a Port Port SVC Connection Parameters Example Display Info for a Connection at a PortPort SVC Connection Parameters PRT ATM ports Port Static Connection Parameters Port Static Connection Parameters Connections Command Actions Create Permanent Virtual Channel PVC Enter 3 4 1 Following information is displayed Create Permanent Virtual Channel PVC Direct access sequence 3 4 1 2 parameters Full PVC Call Parameters Enter 3 4 1 3 p2p 5.1.1 0 37 5.1.2 0 You cannot add an additional PVC destination to a P2P PVC You cannot release SVCs with this menu Parameter Example Enter 3 4 GEP Display PVCs PVC PVCs Setup Following prompt appears Enter y to confirm, n to cancel Following message appearsAll inactive PVCs are deleted from the flash memory All PVCs of the specific port are deleted Connections of Port Command Actions Display Maximum NNI Hops SetupNNI Hops Maximum NNI Hops parameter is updated to Signaling Setup VCC VPI/VCI range setup SIG Signaling SetupGET Get VPI/VCI range Following information is displayed for an OC-12c port Following information is displayed for an OC-3c port Information, see Display VPI/VCI Range on Maximum VPI for port 3.1.2 is updated to Protocol Profile Enter 1 1 4 5 Enter 1 1 4 5 2 3.1.2 Following information is displayed Protocol Version Parameters Protocol Version Parameters Enter 1 1 4 5 4 3.1.2 Display the value of the call-proceeding enable value Display Call-Proceeding Enable Value Enter 1 1 Following message appears Enable Value Command Actions Enter 1 1 4 Following prompt appears Enter Y to confirm, N to cancel Half. For more information, see Timer Resolution on page 98 Protocol timersResponse is overdue Enter 1 1 4 1 RES Timer Resolution setup Timer resolution is updated to 250 msec and saved to flashSET Set Timer Resolution Timer resolution was successfully set 4 2 parameters Parameter Format or Range Port number Slot.group.portDisplayed in seconds Enter 1 1 4 2 Shows the Sscop Timers displayed by the command Sscop TimersSscop Timers QSA Get Signaling Qsaal Sscop Configuration Parameters Sscop Configuration Parameters Enter 1 1 4 4 Configuring Virtual Channels Statistics Physical Layer Enter 4 1 1 Statistic Physical Layer Statistics Physical statistics are reset for port Statistics Command Actions ATM-Layer Statistics Reset Counters Per Port Reset Counters Per VPI/VCI Enter 4 2 Following information is displayed Example Enter 4 2 Following information is displayed Enter 4 2 3 1.1.1 3 RPR Reset counters per port ATM Counters for the specified port are reset toReset ATM counters completed ATM ATM layer Perform menu item 3CON\2RTG\1CLL to Counters are reset AAL5-Layer Statistics Display AAL-Layer Statistics Reset AAL-Layer StatisticsYou can display the following AAL5-layer statistics SAR Counters Enter 4 3 Following information is displayed Enter 4 3 Following message is displayed You can display the following AAL5 control statistics AAL5 Control Frame Port Statistics Enter 4 4 1 AAL5-layer control statistics are reset for port Port Statistics Command Actions You can display the following signaling statistics Signaling Protocol Statistics Enter 4 5 1 Signaling statistics are reset for port Counters Command Actions Viewing Statistics Managing LAN Emulation Learp Policy Configuration LEC Operations LAN Emulation Services Setup Status Command Actions 5 1 LE service status will be Disabled on the next reboot Direct access sequence 1 1 5 2 Lecs service status is set for the next reboot Lecs is disabled LAN Emulation Redundancy Setup Enter 1 1 5 3 Lecs is entered into the LECS-order database SYS Platform configLOL Lecs ordered list AOL Add to Lecs ordered list DOL Del from Lecs ordered list Lecs with index 2 is removed from the LECS-order databaseRedundant Lecs deleted LES Redundancy Parameters LES Redundancy Parameters RDN LE Service redundancy setup Redundant Lane Services on page 137 in the Operations GuideLRM Change LE Service Redundancy Mode Startup delay LRD Set LE Service redundancyStartup Delay Changed 600 Version Command Actions Get Switch LaneLane Version Not to a specific Elan That join after the change Lane version of the switch is changedParameter Format or Range Lane version Configuration Command Actions ConfigurationMpoa Devices Display Current MPS Describes the Mpoa Server configuration parameters Mpoa Server Configuration ParametersMpoa Server Configuration Parameters Variable Name Description Enter 2 5 1 2 Set Keep-AliveSets the MPS-p2 keep-alive lifetime parameter Lifetime Command Actions Set Internetwork Sets the MPS-p3 protocols parameter Layer Protocols Command ActionsParameter Format or Range Internetwork-layer Protocols MPS Mpoa Server Configuration MPA Mpoa Devices ConfigurationLEM LAN Emulation MP4 Set initial retry time Set Retry Time Sets the MPS-p5 retry time maximum parameter Maximum Command ActionsMP5 Set retry time maximum 10 300 seconds Set Give Up Time Sets the MPS-p6 give-up time parameter MP7 Set default holding time Time Command Actions Enter 2 5 2 Following information is displayed Describes the Mpoa Client configuration parameters Mpoa Client Configuration ParametersMpoa Client Configuration Parameters MPC Mpoa Client Configuration Frame Count Command Actions Frame Time Command Actions Parameter Format or Range Flow detection protocols Protocols Command ActionsFlow detection protocols parameter is set Command Result Set Retry Time Sets the MPC-p5 retry time maximum parameter MP6 Set hold down time Set Hold Down Time Sets the MPS-p6 hold down time parameter30 1200 seconds Update Resident Lecs Address You can configure the resident Lecs address as followsLecs Address Display Resident Lecs Address Address Command Actions Resident Lecs address is updated Bytes. The update takes place immediatelyLCS LE Config Service LSP Set resident Lecs addr Command Actions Enter 2 1 Search policy of the resident Lecs is displayed Database Operations Lecs Elan Describes the Elan LES parameters Elan LES ParametersElan LES Parameters LCS LE Configuration Service Database Command ActionsLNT Lecs network topology LEP Display Elan type & params Elan Parameters in Lecs Database Database that you can updateDescribes the Elan parameters in the Lecs database Elan Parameters in Lecs Database Enter 2 1 5 3 elan6914 1 MAC MAC Addresses Info Addresses Command ActionsMAD Display all MAC addresses Specified MAC address is deleted from the Elan Delete Elan MAC Delete a MAC address inserted from an ElanMAC MAC Address Info DEL Delete MAC Address Console responds with the confirmation AAD Display all ATM addresses ATM ATM Address Info ATM ATM Addresses Info Specified ATM address is deleted from the ElanATM address was deleted for this elan System responds with the confirmation New elan was added ANE Add new Elan record Enter 2 1 5 DEL Delete Elan recor d Confirmation message is displayedElan record was deleted You cannot assign a segment ID to a non-token ring Elan Segment id has been updatedSegment ID is added to the Lecs database SEG Edit segment id C23, for Describes the signaling statistics parameters Signaling Statistics ParametersLecs Statistics Parameters Describes the Lecs statistics parameters Enter 2 1 Lecs database statistics are displayed Enter 2 1 Following prompt is displayed Shows how many LECs the Lecs database may contain Display Lecs Maximum Connection NumberEnter 2 1 8 Following message is displayed Sets the number of LECs the Lecs database may contain Update Lecs Maximum Connection NumberNumber of Lecs Connections LAN Emulation Redundancy ALS Add redundant LES to RDN LE Service redundancyElan Redundant LES successfully added Enter 2 1 5 9 2 elan739 FEP Force Elan to Primary Enter 2 1 5 9 3 elan739 Display general information about redundant ELANs Display Redundant ELANs General Information Describes the ELANs general parameters Redundant ELANs General ParametersRedundant ELANs General Parameters Display specific information about Redundant ELANs Display Redundant ELANs Specific Information Describes the ELANs specific parameters Redundant ELANs Specific ParametersRedundant ELANs Specific Parameters Display general information on a redundant LES LES General Command Actions InformationRedundant LES General Parameters Describes the redundant LES general parameters Enter 2 1 Following information is displayed LES Specific Information Command Actions LES Update Elan LES-BUS Address You can configure the LES address, as followsDisplay LES-BUS Addresses Display LES-BUS Enter 2 2 Following information is displayed Enter 2 2 3 1 1 2 c0.da.60 .49 Direct access sequence 2 2 Enter 2 2 Following information is displayed Describes the Elan parameters for resident LESs Elan Parameters for Resident LESsElan #4 is of Token Ring type Elan Parameters for Resident LESs Database Describes the Elan parameters that can be updated Parameters of the Elan with ID 14 are updatedElan Parameters for a LES Elan Parameters for a LES Display Elan Response Policy Learp Policy Configuration Describes the Elan response policies Elan Response PoliciesElan Response Policies Enter 2 2 Following messages are displayed Possible Learp policies Describes the Learp verification policies Learp Verification PoliciesLearp policies Learp Verification Policies Enter 2 2 3 1 5 2 Managing LAN Emulation Learp Policies for Route Descriptor Example Enter 2 2Describes the Learp policies for the route descriptor Learp Policies for Route Descriptor Enter 2 2 3 1 7 2 Following prompt appear Response policy, and Learp response policies Direct access sequence 2 2 3 1 Update the Lane multicast forward delay parameter Update Lane Multicast Forward DelayLane multicast forward delay time is updated Enter 2 2 Following message appears Display LEC LEC OperationsConnection Info LEC Connection Information LEC Connection Information Parameters ADD Clients MAC Addresses Lecid Display LAN Emulation Statistics Command Actions Enter 2 2 3 4 1 Enter 2 2 3 4 2 2 Describes the LEC statistics parameters LEC StatisticsLEC Statistics NameDescription RES Reset General LE LES LE ServicesELN ELANs Information Statistics Enter 2 2 3 Following message is displayed DSL Destroy specific LEC Enter 2 2 5 Following prompt appears Enter Y to confirm, N to cancel the reset request Managing LAN Emulation LEC Elan Admission Security Enter 2 3 1 1 Enter 2 3 1 2 1 Security List LECs in ElanSecurity List Enter 2 3 2 1 Session Command to initialize the Elan security list Enter 2 3 2 4 1 47.0.0.0.0.0.3c.0.0.a0 Enter Y to continue, N to cancel Enter 2 3 2 6 1 CHK Perform a security check Display Switch Switch SecuritySecurity Status Command Actions SWS Switch security SEC LE Security ConfigurationSST Set switch security state Security on switch now Enabled Save Security Restore Security ConfigurationSave Security Direct access sequence 2 3 LEC Elan Admission Security Pnni Configuring the Route Cache Showing Pnni Information Viewing Following command allows you to view the current Pnni stateCurrent Pnni State Display PNNI/E-IISP State Nodes Configuring Pnni Enter 1 1 9 4 1 State Operations Guide for more information on E.164 Enter 1 1 Following message is displayed 196 in the Operations Guide for more information on E.164 Enter 1 1 9 4 3 1 Enter 1 1 9 4 3 2 Pnni node administrative status is set to UP To UP Command Actions Pnni node administrative status is set to Down To Down reboot Command Actions PDB Purge whole Pnni Enter 1 1 9 4 3 3 1 Node level of node 1 is set to Following message is 7displayed 3 3 2 Default ATM address takes place after the next reboot 9 4 3 3 2 3 parameters Address is updated to its new value 9 4 3 3 3 3 3 3 9 4 3 3 4 3 3 4 SID Set Node ID Node ID is updated to its new value 3 3 5 Name of the node is updated to 3Com World 9 4 3 3 6 9 4 3 3 6 2 parameters Configuring and Managing Pnni 9 4 3 4 1 parameters 9 4 3 4 2 parameters 9 4 3 4 3 parameters 9 4 3 4 4 parameters 9 4 3 4 5 parameters 9 4 3 4 6 parameters Interval takes place after the next reboot 9 4 3 4 8 parameters 9 4 3 4 9 parameters 9 4 3 4 10 parameters 9 4 3 4 11 parameters 9 4 3 4 12 parameters 9 4 3 4 13 parameters Enter 1 1 9 4 3 4 14 Enter 1 1 9 4 3 4 15 Enter 1 1 9 4 3 4 16 All the timers are set to the default values Default Values Command Actions Setting Optimization Metrics Optimization Metrics Table Parameters Classes of Service Value Description Optimization Values Value of the CBR optimization parameter is updated Value of the RealTime-VBR optimization parameter is updated 9 4 3 5 2 3 parameters 9 4 3 5 2 4 parameters Value of the UBR optimization parameter is updated to All Classes to Default Command Actions Parameter Format or Range Port number Slot.subslot.port Select Port for Interface Parameter Setting Configuring and Managing Pnni 9 4 4 2 1 parameters Weight bit rate service category 9 4 4 2 3 parameters 9 4 4 2 4 parameters 9 4 4 2 5 parameters Weight unspecified bit rate service category 9 4 4 2 To Default Values Command Actions Scope Mapping Table Parameters Managing Scope MappingScope Mapping Table Parameters Pnni Scope PnniScopeLocalNetworkPlusTwo Enter 1 1 Following information is displayed MST Modify Scope Mapping Hierarchical level of pnniScopeGlobal is updated to After the next reboot Get Cache State Configuring the Route Cache SCS Set Cache State Will continue to be used when an ADD Party route is added 11 1 9 10 4 6 After this number of calls, the cache will be refreshed 9 4 6 6 parameters Showing Pnni Following commands allow you to display Ptse and other PnniInformation Display All PTSEs Ptse Table Parameters Node Topology Link Section Ptse Table Parameters Ptse Table Parameters Node Address Section Ptse Table Parameters Statistics Section Enter 1 1 9 4 7 Node Ptse Table Parameters Information Command Actions Example Topology Link Ptse Table Parameters Example Summary Address Table Parameters Address Table Command Actions Node Address Ptse Table Parameters Example Peer Group Leader Table Parameters Peer Group Leader Table Parameters Enter 1 1 Following information is displayed Peer Group Neighbor Table Parameters Neighbor Information Command Actions Statistics Table Parameters Information node is up Command Actions Physical SafetyEnvironmental Electromagnetic Compatibility ConnectorsStandards Supported Interface LEDs Menu Index Management Setup 165 164180 182 173 171174 176 112 137113 114 101 102107 108 250 249251 253 267 266280 283 286 310311 314 229 228230 231 153 151156 157 201 199202 204 332 330333 334 353 352354 355 377 375378 379 399 398400 401 Appendix B Menu Index Services ServicesOnline Technical 3Com Username anonymous Access by Analog ModemHours a day, 7 days a week Country Data Rate Telephone Number 847 262 Access by Digital Modem408 727 Country Telephone Number Asia, Pacific Rim Europe, South Africa, and Middle East Country Telephone Number Fax Number Appendix C Technical Support Module Glossary Application LMA Software LED Software Error LED Indicator LEDModule Status LED Multiplexing Glossary Numbers Index Call admission control 28 call-proceeding enable value Efci site marking 28 Elan emulated LAN Learp MIB II Pnni Ptse Storage humidity 421 subnet mask configuration Displaying 66 write-access password updating Index 3Com Corporation Limited Warranty Additional Services