Manuals / 3Com / Computer Equipment / Network Router

3Com OfficeConnect Remote 812 manual Icmp Counters, Input Counters, Output Counters

Models: OfficeConnect Remote 812

1 170

Download 170 pages 51.21 Kb

Page 147

CLI Commands B-45

BR-ETH- CALL - Ethernet bridge call filter rules

IP - IP data filter rules

IP-CALL- IP call filter rules

IP-RIP- IP RIP advertisement filter rules

show icmp counters Shows the Input and Output Counters for ICMP. Two types of ICMP messages - error and query messages - are sent to syslog hosts.

ICMP COUNTERS

INPUT COUNTERS

Messages - ICMP packets received.

Errors - ICMP packets received with errors.

Destination Unreachable - sum of ICMP messages received when a router cannot forward a packet to its specified destination

Time Exceeded - sum of ICMP messages generated by a router when time has exceeded or a timeout has occurred while waiting for a packet segment

Parameter Problems - sum of ICMP messages generated by a router when it encounters an error

Source Quench - sum of ICMP messages informing a host it should slow data transmission to ease congestion

Redirects - sum of ICMP messages concerning a router advertising a host of a better next hop

Echos - sum of ICMP request messages received, signifying transport system success

Echo Replies - sum of ICMP reply messages received, indicating transport

system success

Timestamps - sum of ICMP request messages received seeking time from another machine for clock synchronization and estimated transit time purposes

Timestamp Replies - sum of ICMP timestamp reply messages Address Masks - sum of ICMP Address Mask Reply messages

Address Mask Replies - sum of ICMP request messages concerning a host’s ability to gather network information

OUTPUT COUNTERS

Messages - total of ICMP messages transmitted

Errors - ICMP packets transmitted with errors

Destination Unreachable - sum of these messages sent

Time Exceeded - sum of these messages sent

Parameter Problems - sum of these messages sent

Source Quench - sum of these messages sent

Redirects - sum of these messages sent

Image 147

3Com OfficeConnect Remote 812 manual Icmp Counters, Input Counters, Output Counters

Contents

Release OfficeConnect Remote ADSL Router CLI User’s GuidePart Number 10043337 AA 95052-8145 3Com Corporation5400 Bayfront Plaza Santa Clara, CaliforniaCONFIGURATION METHODS Table of ContentsACCESSING THE CONFIGURATION INTERFACE CLI COMMAND CONVENTIONS AND TERMINOLOGYIPX Routing Network Service PPP QUICKVC SETUPMANUAL SETUP Starting QuickVC SetupSetting Up a Virtual Private Network VPN Tunnel Monitoring the DHCP Relay Configuring IPX for Remote Site ConnectionsSetting Date and Time Using Network Time Protocol NTP Providing TFTP AccessOFFICECONNECT REMOTE 812 SAMPLE CONFIGURATION CLI COMMAND DESCRIPTION disable securityoption snmp useraccess list access list ip addresseslist processes list services B list snmp communities or list snmp trapcommunities B set system TCP COUNTERS INPUT COUNTERSTELNET Output Pause 3COM CORPORATION LIMITED WARRANTY FCC CLASS A VERIFICATION STATEMENTFCC CLASS B STATEMENT FCC DECLARATION OF CONFORMITY POSITIONAL HELP B Command Completion BMacintosh Computers ACCESSING THE CONFIGURATION 1 INTERFACEEstablishing Communications with the OfficeConnect Remote IBM-PC Compatible Computerstelnet ipaddress UNIX-Based ComputersParameters CLI COMMAND CONVENTIONS AND 2 TERMINOLOGYCommand Structure add ip network is the commandHelp CommandAbbreviation and CompletionConventions Command Language Terminology Page CONFIGURATION METHODS Quick Setup InstructionsQuickVC Setup Instructions 3-2 CHAPTER 3 CONFIGURATION METHODS Manual Setup InstructionsADSL Router Installation Guide QUICK SETUPCLI Quick Setup Script Restoring the OfficeConnect Remote 812 to an Unconfigured StatePassword Protection Quick Setup ScriptQuick Setup Script Instructions Do you want to continue Quick Setup?Quick Setup Management Information Quick Setup Identification InformationQuick Setup IP Information TELNET information4-4 CHAPTER 4 QUICK SETUP Quick Setup IPX Information TELNET Management Quick Setup Bridge InformationSample Identification Information Management InformationSample Output Display as Quick Setup Executes Page QUICKVC SETUP CLI QuickVC Setup ScriptStarting QuickVC Setup OCR-DSL quickvc Network Service PPP CLI QuickVC Setup Script Bridging Service PPPService RFC IPX Routing Networkas Quick Setup Executes Sample IdentificationInformation Sample Output DisplayPage Configuration Overview MANUAL SETUPmemory Remember to save your configuration using the save all command beforeRemote Site ManagementConfiguring Network Service Information set vc vc name networkservice pppset vc vc name dynamicipaddressing dhcpclient set vc vc name networkservice pppoeset vc vc name networkservice pppoa Currently, the SVC capability is disabled in the OCRwhen transmitting data to the remote site Setting Up a Virtualset vc vc name atm categoryofservice unspecifed pcr cell rate set vc vc name atm categoryofservice constant pcr cell rateVPN Tunneling Overview Before You Begin Initiating a VPN Tunnel On the Remote Private Network “Server” SideOn the 812 ADSL Router “Client” Side disable tunnel command VPN TunnelEnabling and Disabling a list tunnel Use this command to list the name and status of tunnels Authentication and Encryption To learn how to set up encryption using the CLI, see ConfiguringValues Router to Support Encryption for L2TP Tunnels Configuring Windows 2000 Server to Support CHAP AuthenticationEncryption MICROSOFT56BIT NONE REQUIREDConfiguring a Cisco Router to Support Encryption for L2TP Tunnels aaa authentication login cisco localValue Name ProhibitIpSec interface Ethernet1/2 peer default ip address pool L2TPvpdn-group 1 accept-dialin protocol l2tp virtual-template terminate-from hostname OfficeConnect local name c7200error ppp authentication papRIP Configuration router rip ver network IP Pool for L2TP Tunnel Debug vpdn command6-14 CHAPTER 6 MANUAL SETUP IP Routingshow ip routing settings enable ip forwardingenable ip RIP disable ip RIPaddressselection negotiateThe defaultrouteoption can only be enabled in one VC profile set vc vc nameRemote Site 6-18 CHAPTER 6 MANUAL SETUP Configuring Static and Framed IP RoutesAddress Translation For a vc added using QuickVC, NAT is enabled by default continues to run until a NAT port frees upused Use the following command to configure PAT in a vc profile port 80, private port 80, and the private address of the LAN Server6-22 CHAPTER 6 MANUAL SETUP Intelligent PATset vc vc name natoption nat set vc vc name intelligentpatoption Enable/DisablePlease also note the following Enabling NAT6-24 CHAPTER 6 MANUAL SETUP Configuring NAT Static and Dynamic MappingsAND / OR add nat dynamic vc vc name publicpoolstart ip address count numberlist nat vc vc name port port list nat vc vc name addrRemote DHCP Configuring the DHCP Modeset dhcp server router ip address set dhcp server startaddress ip address endaddress ip addressset dhcp server mask ip address set dhcp server lease secondslist dhcp server leases Configuring the DHCPset dhcp mode relay show dhcp server countersset dns enable dnsshow dns settings timeoutAccess Lists IPX Routinglist dns servers Enabling IPX Routing Configuring IPX for the LAN Configuring IPX for Remote Site Connections6-32 CHAPTER 6 MANUAL SETUP add ipxroute vc vc name ipxnet ipx network address metric number Configuring IPX Static and Framed Routes6-34 CHAPTER 6 MANUAL SETUP Configuring IPX Static and Framed Servicesdelete ipx service name type hex number add ipxservice vc vc name hops numberset ipx network network name Configuring IPX RIP and SAPBridging set ipx network network name6-36 CHAPTER 6 MANUAL SETUP Configuring Bridging for the Remote Site ConnectionsBridging IP Traffic Configuring Bridging for the LANset bridge agingtime seconds show ip settingsset bridge forwarddelay seconds Advanced Bridging Optionsset vc vcname macrouting enable Simultaneous Bridging and Routingset bridge firewall discardroutedprotocols set bridge firewall fwdunicastonly AdministrationSetting Date and Time SystemFor example set date 01-JAN-1998 Network Time Protocol CLI Commandsset enable ntp set disable ntpset retransmissions number set timeout secondsset secondaryserver ipnameoraddr set pollinginterval secondsNTP Servers clock.psu.edu delete user name show systemset system name name location location contact contact list userslist tftp clients Setting Password ProtectionAfter logging in to the CLI, you can exit the CLI with the command exit cliOfficeConnect Remote 812 Filtering Capabilities Data Filtering Overview6-46 CHAPTER 6 MANUAL SETUP Filter Classes The OCR 812 supports three filter classes Overview Creating Filters UsingCommand Line Creating FiltersProtocol Rules IP 1 ACCEPT src-addr=xxx 2 ACCEPT dst-addr=yyy 999 DENY The OR operation can be implemented by successive rulesLENGTH - The number of bytes in the packet to compare to the value IP RIP Packet Filtering Using CLI IP Source and Destination Network Filtering Using CLIIP Source and Destination Port Filtering Using CLI IP Protocol Filtering Using CLIIPX Source and Destination Network Filtering Using CLI IPX Source and Destination Host Filtering Using CLIIPX Source and Destination Socket Number Filtering Using CLI IPX 1 ACCEPT src-socket = 999 DENY IPX RIP Packet Filtering Using CLIIPX SAP Packet Filtering Using CLI Bridge / Generic Filtering Using CLIUsing CLI Creating Filter Filesmemory Assigning Filters VC/Remote Site Filters Applying Filters UsingInterface Using CLI by entering the CLI command set interface eth1 filteraccess offVPN Tunnel Using CLIFilter List Using CLI Managing FiltersDeleting a Packet Filter an Interface Using CLIRemoving a Filter from VC/Remote Site Profile6-60 CHAPTER 6 MANUAL SETUP Overview OFFICECONNECT REMOTE 812 SAMPLE A CONFIGURATIONSample Configuration OCR 812 featuresadd user root password !root Configuring theGlobal Configuration enable securityoption remoteuser administrationset dhcp server dns1 192.168.200.254 dns2 add dns server * vc Internet enable dnsadd ipx network ipx address 10 frame ethernetii enable yes disable bridge spanningtree add bridge network bridgeset vc Internet sendname internet-user sendpassword 1a2b3c set vc Internet defaultrouteoption enable enable vc Internetset vc Internet iprouting listen set vc corp-net ipxaddress 0 ipxrouting all enable vc corp-net set vc corp-net iprouting bothConfiguring the Sample Network A-5 Page vcblknetbios CLI Command DescriptionCLI Commands add accessprimaryaddress ipaddress secondaryaddress ipaddress vcname vcname metric add ip defaultrouteadd framedroute vc name iproute ipaddress metric numbergateway gatewayaddr metric hopcount address ipxaddress interface eth1 enabled yesadd ip network networkname address ipnetaddress frame ETHERNETII SNAP LOOPBACK interface eth1gateway ipxhostaddress metric metricnumber ticks ticknumber add ipx service servicenametype servicetype add ipx route ipxnetaddressadd ipxroute vc name ipxnet ipxaddress metric hopcount ticks ticknumbertype servicetype add ipxservice vc nameadd network service servicename status servertype servertype socket socketnumber enabled YES data “string”CLI Commands B-7 closeactiveconnections TRUE FALSE Add network service exampleadd networkservice CLIaccess servertype TELNETD socket address ipaddress access RO RWadd tunnel add snmp trapcommunity nameipnameoraddr address ipaddressenabled yes add user nameadd vc name arp output outputfilename ipnameoraddrtype servicetype delete ipx route ipxnetaddress delete ipx service servicenamedelete pat tcp vc vcnameentries publicaddress ipaddresspublicpoolstart ipaddress tunnelnamebridge forwarding DISABLEdisable ip network DIALoutput outputfile disable snmpinterfacename interface settings command authentication trapsnetworks ENABLEinterfacename interface settings command using list network servicesHANGUP interfacenameLIST HELPHISTORY KILLmgmt - unknown, but filtering information exists If Name - eth1, DA1 or loopback Interface - eth1, DA1 or loopbackCLI Commands B-19 Prot - LOCAL or RIP trapcommunities not list access Quit PAUSED COMMANDSMore or CR Continue printingRESOLVE timeout timeoutvaluePING RENAMEset bridge forwarddelay secondsset command history numerical range idle timeout minutes SAVEaddress IPaddress enabled YES NOset dhcp relay server1 set dhcp relay server2DNS2 IPaddress set dns cachesize number numberretries number timeout secondsset dhcp server DNS1 IPaddressfilteraccess ON OFF inputfilter filtername outputfilter filtername set interface interfacenameroutingprotocol NONE RIPV1 RIPV2 B-28 APPENDIX B CLI COMMAND DESCRIPTION CLI Commands B-29 routerid routeridsapupdateinterval number rip BOTH DISABLE LISTEN RESPONDONLY SEND ripagemultiplier numberrippacketsize number ripupdateinterval number sap BOTH DISABLE LISTEN RESPONDONLY SEND sapagemultiplier numberSets parameters for dynamic IPX networks set network service adminnamepoolmembers number Sets parameters for configured network servicesA VPN tunnel can only be configured for MSCHAPv1 by using the CLI Authentication OptionsFor in-depth information about CHAP and PAP, see RFC address IPaddress access RO RW NONE REQUIREDMPPE Options location “location” transmitauthenticationname nameset system name “name”message “message” password passwordsessiontimeout seconds set user usernameip enable disable bridging enable disabledefaultrouteoption enable disable idletimeout secondsCLI Commands B-37 pcr number categoryofservice Unspecified UBR Variable VBRset vc vcname atm set numberSets ATM parameters for VCs Total errored seconds in previous 15 minutes Total time since system reboot hours, minutes, secondsErrored seconds since last link down Total errored seconds in 15 minutesFields Base Aging Time - time to age out a known MAC address, defaultHistory Depth Current Prompt OCR-DSL Local Prompt OCR-DSL settings show dns counters show dns settings show filter filtername SPECIFIC ERROR COUNTERSProblems with Name Server - internal server error ICMP COUNTERS INPUT COUNTERSOUTPUT COUNTERS OUTPUT COUNTERS show interface interfacename countersshow interface Displays INPUT COUNTERSsettings Fragments Needing Reassembly - # of fragmented datagramsIP Dynamic Address Pool Begin - start of IP address range IP Dynamic Address Pool Size - size of IP address rangeshow ipx counters show ipx network networkname counters OUTPUT COUNTERSINPUT COUNTERS settings show ipx ripcounters settingsDefault Gateway - default IPX router address show ipx sapDynamic Address Pool Begin - starting IPX address settingsname counters vcname settingsname settings vcname countersOperational Status - opened or not opened SETTINGS for PPP BUNDLESETTINGS for PPP BUNDLE 1 COMPRESSION SETTINGS for PPP LINK 1INPUT COUNTERS show snmp counters Displays many SNMP statisticsOUTPUT COUNTERS System Contact - modify using set systemSystem Location - modify using set system System Descriptor - for exampleOUTPUT COUNTERS TCP SETTINGSTCP COUNTERS INPUT COUNTERSverify filter CommandsTELNET VERIFYCommand Features CLI Exit CommandsB-58 APPENDIX B CLI COMMAND DESCRIPTION CommentsINDEX Server Input and Output filters contrasted Static Services Passwords Page Page Page SOFTWARE 3Com Corporation LIMITED WARRANTYSTANDARD WARRANTY SERVICE HARDWAREModelDescription FCC CLASS B STATEMENTFCC DECLARATION OF CONFORMITY The Interference Handbook