VPN Tunnel Disable tunnel command | 3Com OfficeConnect Remote 812

	Setting Up a Virtual Private Network (VPN) Tunnel 6-7
Enabling and Disabling a	To enable a VPN, enter the enable tunnel command. To disable a VPN, enter the
VPN Tunnel	disable tunnel command.

Before you attempt to set or change any parameter for a VC, you must first disable the VC using the DISABLE VC <vc_name> command. If you attempt to set or change VC values while the VC is enabled, an erroneous error message (telling you that you must first disable the VC) will display. Whether you disable first or not, the change will take effect.

Before you attempt to set or change tunnel parameters via the OCR 812 web configurator, you must first disable the tunnel using the DISABLE TUNNEL <tunnel_name> command (if you do not follow this procedure, your changes will not take effect, and no error message will display). You do not need to disable a tunnel before making changes via the CLI, but it is recommended that you do so as a matter of good practice.

Displaying VPN Tunnel You can display a list of the tunnels created on the OCR 812, and their status Information (active or inactive) by entering the list tunnels command.

To check the parameters of a tunnel, enter the show tunnel command. To delete a tunnel, enter the delete tunnel command.

Creating a VPN Tunnel To add a VPN tunnel using 812 default values, enter the add tunnel command. Using 812 Default Values 812 VPN tunnel default values are shown in Table 6-1.

Table 6-1Default Tunnel Values (812 ADSL Router)

Parameter	Default Value	Remarks

STATUS	DISABLED

INPUT_FILTER	no filter

OUTPUT_FILTER	no filter

PASSWORD	““	(See Notes below)

SEND_PASSWORD	““	By default, is a duplicate
		of the PASSWORD. See
		note below.

ENCRYPTION_ALGORITHM	NONE

MTU	1400

TUNNEL_TYPE	PPTP

SEND_NAME	tunnel_name	Any name you
		give the tunnel in the
		ADD TUNNEL command
		will be duplicated in the
		SEND_NAME by default.

NAT_OPTION	PAT

LOCAL_IP_ADDRESS	255.255.255.255

When adding a TUNNEL you cannot set the PASSWORD or SEND_PASSWORD in the ADD TUNNEL command. The default PASSWORD and SEND_PASSWORD will

Image 43

3Com OfficeConnect Remote 812 manual VPN Tunnel Disable tunnel command

Contents

Release OfficeConnect Remote Adsl Router CLI User’s Guide Santa Clara, California Table of Contents Quickvc Setup Set vc vc name natoption Configuring the Dhcp Relay Officeconnect Remote 812 Sample Configuration CLI Command Description Disable B Hangup MICROSOFT56BIT None Required Resolve Input Counters Verify TCP Settings Positional Help B Macintosh Computers IBM-PC Compatible Computers From Windows 95, you can go to the DOS Window and run UNIX-Based ComputersTelnet ipaddress Parameters Add ip network is the commandValues Stand for ip, iprouting, or ipsourcevalidation Network Address FormatsControl Characters Names or Strings DNS Server translates IP addresses to and from host names Conventions Command Language TerminologyPage Configuration Methods Manual Setup Instructions CLI Quick Setup Script Quick Setup Which portions of the network do you want to configure? Quick Setup Script InstructionsDo you want to continue Quick Setup? Password Protection IPX ? Quick Setup Identification InformationQuick Setup Management Information This completes the section on Snmp management configuration Telnet information Quick Setup IP InformationTELNET? Quick Setup IPX Information IP setup is completed Telnet Management Quick Setup Bridge InformationSample Identification Information Management Information Sample Output Display as Quick Setup Executes Page Starting QuickVC Setup OCR-DSL quickvc CLI QuickVC Setup Script Network Service PPP RFC IP configuration for VC name is now complete Bridging IPX Routing Network Service PPPIPX configuration for VC name is now complete IPX Routing Network Service RFC Information Sample IdentificationSample Output Display Page Remote Site Management IP Routing Address Translation Configuration OverviewSave the configuration IPX Routing Bridging System Administration Management Remote SiteList vcs Set vc vc name networkservice ppp To set up a profile for PPP, use the following commandsSet vc vc name sendname authentication name Set vc vc name networkservice pppoa Set vc vc name networkservice pppoeSet vc vc name dynamicipaddressing dhcpclient Set vc vc name atm categoryofservice constant pcr cell rate Setting Up a VirtualTunnel On the 812 Adsl Router Client Side On the Remote Private Network Server Side VPN Tunnel Disable tunnel command Tunneltype PPTP, L2TP Parameter Supported Value Remarks Remoteipaddress 2812 Set Tunnel Parameters and Supported Values Encryption To configure Mppe encryption, see set tunnel tunnelMSCHAPv1 authentication protocol To configure the OCR 812 to use MSCHAPv1, enter the set ppp Value Name ProhibitIpSec Aaa authentication login cisco local Peer default ip address pool L2TP Problems you are experiencing Ppp authentication pap IP Routing Disable ip RIP Enable ip forwardingEnable ip RIP To globally disable IP RIP, use the command Ip address/mask Command Set vc vc nameNegotiate Remote Site Set vc vc nameListen None Send Configuring Static and Framed IP Routes Available public IP addresses NAT using CLI commands Natoption for a vc profile EnableDisable Used Set vc vc name natoption pat Intelligent PAT Enabling NAT Set vc vc name intelligentpatoption Enable/DisableConfiguring NAT To enable NAT, enter the following command Ip address Configuring NAT Static and Dynamic MappingsSize of address pool List nat vc vc name addr List nat vc vc name port port LAN Remote Dhcp Configuring the Dhcp Mode Set dhcp server wins1 ip address wins2 ip address Primary DNS addressSet dhcp server lease seconds Set dhcp server router ip address List dhcp server leases Configuring the DhcpSet dhcp mode relay Show dhcp server counters DNS Host Entries Enable dnsShow dns settings Set dns Cachesize size Number Retries number Timeout IPX Routing Access ListsList dns servers LAN Enabling IPX Routing Configuring IPX for Configuring IPX Static Framed Routes Ipxnet server network address name service name Configuring IPX Static Framed ServicesDelete ipx service name type hex number Add ipxservice vc vc name hops number Bridging Configuring IPX RIPSet ipx network network name To only list bridge networks, use list bridge networks Set bridge agingtime seconds Show ip settingsSet bridge forwarddelay seconds Advanced Bridging Options Simultaneous Bridging Routing Set vc vcname macrouting enableSet bridge firewall discardroutedprotocols Set bridge firewall fwdunicastonly AdministrationSetting Date and Time System For example set date 01-JAN-1998 Network Time Protocol CLI CommandsSet enable ntp Set disable ntp Set retransmissions number Set timeout secondsSet secondaryserver ipnameoraddr Set pollinginterval seconds NTP Servers clock.psu.edu Delete user name Show systemSet system name name location location contact contact List users List tftp clients Setting Password Protection Exit cli Data Filtering Overview OfficeConnect Remote Filtering Capabilities IP-RIP IPX Overview Creating Filters UsingCommand Line Creating Filters BR-ETH Protocol Rules Accept src-addr=xxx Accept dst-addr=yyy Deny 6Protocol Keywords IP RIP Packet Filtering Using CLI IP Source and Destination Network Filtering Using CLIIP Source and Destination Port Filtering Using CLI IP Protocol Filtering Using CLI IPX Source and Destination Host Filtering Using CLI IPX Source and Destination Network Filtering Using CLI IPX SAP Packet Filtering Using CLI IPX RIP Packet Filtering Using CLIBridge / Generic Filtering Using CLI Creating Filter Files Using CLI Memory Assigning Filters Applying Filters Using VPN Tunnel Using CLIFilter List Using CLI Managing Filters VC/Remote Site Profile An Interface Using CLIUsing CLI Removing a Filter from 60CHAPTER 6 Manual Setup Corporate site Sample ConfigurationOCR 812 features Internal Dhcp Server and DNS Proxy Sample Network Configuring Disable bridge spanningtree Add bridge network bridge 4APPENDIX a Officeconnect Remote 812 Sample Configuration Configuring the Sample Network A-5 Page Add bridge network CLI CommandsNetworkname Ipaddress request is sent to the remote DNS Name Server Iproute ipaddress Metric number Add ip defaultroute MetricDestined for remote hosts Address Gateway gatewayaddr Metric hopcount Gateway ipxhostaddress Metric metricnumber Ticks ticknumber Type servicetype SQL VAP Below is a partial list of the IPX services availableIpxnet ipxaddress Metric hopcount Ticks ticknumber Adds an IPX route for the a user over the WAN Add network service servicename status Http Closeactiveconnections True False Add tunnel Serverendpoint host name or ipaddress Sets up a VPN tunnel with the default valuesAdd snmp trapcommunity name Ipnameoraddr Parameters for all users Status. Use the set vc command to modify VC parametersAdd user name Add vc name Vcname Publicpoolstart ipaddress Publicaddress ipaddressTunnelname Before disabling it Dial Output outputfile Disable snmpConnections will be closed when the server is disabled Authentication Enable Interfacename Using list network services Help Normal Easyfilter.fil If Name eth1, DA1 or loopback Other Trapcommunities not list access More or CR Continue printing Quit Ping ipnameoraddr Interval interval Timeout timeoutvalueRename file inputfile outputfile More or CR Sets console parameters for CLI commands Set bridge Agingtime seconds Forwarddelay secondsSets parameters for all bridge networks Maxhops number Enabled YES noSet dhcp relay server1 Set dhcp relay server2 Set dhcp server Routingprotocol None RIPV1 RIPV2 CLI Commands B-27 28APPENDIX B CLI Command Description Flashupdate D/NOFLASHUPDATE SENDDEFAULT/NOSENDDEFAULT DACCEPTDEFAULT/NOACCEPT Default D Sets parameters for the specified IPX network Set ipx network networkname Sets parameters for dynamic IPX networks Poolmembers number Authentication Options Mppe Options Address IPaddress Access RO RW Set system Name name Location location Transmitauthenticationname nameSet tunnel Modifies tunnel parameters Parameter Supported Value Remarks Modifies user parameters Ip enable disable Bridging enable disableDefaultrouteoption enable disable Idletimeout seconds ENABLED, Disabled Scr number Type PVC SVC Vci number Vpi number To disable the policy. Default is indicated by D Sets ATM parameters for VCs Total errored seconds in previous 15 minutes Total time since system reboot hours, minutes, secondsErrored seconds since last link down Total errored seconds in 15 minutes Disabled System UpTime History Depth Current Prompt OCR-DSL Local Prompt OCR-DSLStatistics Settings Format Errors server said invalid request format Show dns counters Show dns settingsProblems with Name Server internal server error Input Counters Octets bytes transmitted Could be to free up buffer spaceHigher-layer protocol Unknown Prot unknown protocol in packet Show ip counters Displays system wide IP network statistics Total Packets Received sum of IPX packets received Show ipx counters Show ipx network networkname counters Counters Show ipx ripDisplays information about RIP for IPX Dynamic Address Pool Begin starting IPX address Show ipx sap Settings CountersDefault Gateway default IPX router address Displays information about SAP for IPX Name counters Vcname settingsName settings Vcname counters PAP, Chap or None Operational Status opened or not opened CLI Commands B-53 System Descriptor for example System Contact modify using set systemSystem Name modify using set system System Location modify using set system Total Output Datagrams sum of UDP datagrams sent Show tcp settings Displays system-wide TCP settings Commands EOR CLI Exit Commands Comments ATM AdslLAN Flash ROM 2 Ping DNS Tftp RIP SAP RoutingRIP SAP WAN PPP Telnet CLI WAN PPP Page 3Com Corporation Limited Warranty FCC Class B Statement