Part Number 10043337 AA
Release
OfficeConnect Remote ADSL Router CLI User’s Guide
3Com Corporation
5400 Bayfront Plaza
Santa Clara, California
95052-8145
Table of Contents
ACCESSING THE CONFIGURATION INTERFACE
CLI COMMAND CONVENTIONS AND TERMINOLOGY
CONFIGURATION METHODS
QUICKVC SETUP
MANUAL SETUP
Starting QuickVC Setup
IPX Routing Network Service PPP
Setting Up a Virtual Private Network VPN Tunnel
Configuring IPX for Remote Site Connections
Setting Date and Time Using Network Time Protocol NTP
Providing TFTP Access
Monitoring the DHCP Relay
OFFICECONNECT REMOTE 812 SAMPLE CONFIGURATION
CLI COMMAND DESCRIPTION
disable securityoption snmp useraccess
list processes
list access
list ip addresses
list services B list snmp communities or list snmp trapcommunities B
set system
TELNET
TCP COUNTERS
INPUT COUNTERS
3COM CORPORATION LIMITED WARRANTY FCC CLASS A VERIFICATION STATEMENT
FCC CLASS B STATEMENT FCC DECLARATION OF CONFORMITY
POSITIONAL HELP B Command Completion B
Output Pause
ACCESSING THE CONFIGURATION 1 INTERFACE
Establishing Communications with the OfficeConnect Remote
IBM-PC Compatible Computers
Macintosh Computers
UNIX-Based Computers
telnet ipaddress
CLI COMMAND CONVENTIONS AND 2 TERMINOLOGY
Command Structure
add ip network is the command
Parameters
Command
Abbreviation and
Completion
Help
Conventions Command Language Terminology
Page
QuickVC Setup Instructions
CONFIGURATION METHODS
Quick Setup Instructions
Manual Setup Instructions
3-2 CHAPTER 3 CONFIGURATION METHODS
QUICK SETUP
CLI Quick Setup Script
Restoring the OfficeConnect Remote 812 to an Unconfigured State
ADSL Router Installation Guide
Quick Setup Script
Quick Setup Script Instructions
Do you want to continue Quick Setup?
Password Protection
Quick Setup Identification Information
Quick Setup Management Information
4-4 CHAPTER 4 QUICK SETUP
Quick Setup IP Information
TELNET information
Quick Setup IPX Information
Quick Setup Bridge Information
Sample Identification Information
Management Information
TELNET Management
Sample Output Display as Quick Setup Executes
Page
Starting QuickVC Setup OCR-DSL quickvc
QUICKVC SETUP
CLI QuickVC Setup Script
Network Service PPP
CLI QuickVC Setup Script
Service PPP
Service RFC
IPX Routing Network
Bridging
Sample Identification
Information
Sample Output Display
as Quick Setup Executes
Page
MANUAL SETUP
Configuration Overview
Remember to save your configuration using the save all command before
Remote Site
Management
memory
set vc vc name networkservice ppp
Configuring Network Service Information
set vc vc name networkservice pppoe
set vc vc name networkservice pppoa
Currently, the SVC capability is disabled in the OCR
set vc vc name dynamicipaddressing dhcpclient
Setting Up a Virtual
set vc vc name atm categoryofservice unspecifed pcr cell rate
set vc vc name atm categoryofservice constant pcr cell rate
when transmitting data to the remote site
On the 812 ADSL Router “Client” Side
VPN Tunneling Overview Before You Begin Initiating a VPN Tunnel
On the Remote Private Network “Server” Side
Enabling and Disabling a
disable tunnel command
VPN Tunnel
list tunnel Use this command to list the name and status of tunnels
Values
Authentication and Encryption
To learn how to set up encryption using the CLI, see Configuring
Configuring Windows 2000 Server to Support CHAP Authentication
Encryption
MICROSOFT56BIT NONE REQUIRED
Router to Support Encryption for L2TP Tunnels
Value Name ProhibitIpSec
Configuring a Cisco Router to Support Encryption for L2TP Tunnels
aaa authentication login cisco local
peer default ip address pool L2TP
vpdn-group 1 accept-dialin protocol l2tp virtual-template
terminate-from hostname OfficeConnect local name c7200
interface Ethernet1/2
ppp authentication pap
RIP Configuration router rip ver network IP Pool for L2TP Tunnel
Debug vpdn command
error
IP Routing
6-14 CHAPTER 6 MANUAL SETUP
enable ip forwarding
enable ip RIP
disable ip RIP
show ip routing settings
negotiate
addressselection
Remote Site
The defaultrouteoption can only be enabled in one VC profile
set vc vc name
Configuring Static and Framed IP Routes
6-18 CHAPTER 6 MANUAL SETUP
Address Translation
used
For a vc added using QuickVC, NAT is enabled by default
continues to run until a NAT port frees up
port 80, private port 80, and the private address of the LAN Server
Use the following command to configure PAT in a vc profile
Intelligent PAT
6-22 CHAPTER 6 MANUAL SETUP
set vc vc name intelligentpatoption Enable/Disable
Please also note the following
Enabling NAT
set vc vc name natoption nat
Configuring NAT Static and Dynamic Mappings
6-24 CHAPTER 6 MANUAL SETUP
add nat dynamic vc vc name publicpoolstart ip address count number
list nat vc vc name port port
list nat vc vc name addr
AND / OR
Remote
Configuring the DHCP Mode
DHCP
set dhcp server startaddress ip address endaddress ip address
set dhcp server mask ip address
set dhcp server lease seconds
set dhcp server router ip address
Configuring the DHCP
set dhcp mode relay
show dhcp server counters
list dhcp server leases
enable dns
show dns settings
timeout
set dns
list dns servers
Access Lists
IPX Routing
6-32 CHAPTER 6 MANUAL SETUP
Enabling IPX Routing Configuring IPX for the LAN
Configuring IPX for Remote Site Connections
Configuring IPX Static and Framed Routes
add ipxroute vc vc name ipxnet ipx network address metric number
Configuring IPX Static and Framed Services
delete ipx service name type hex number
add ipxservice vc vc name hops number
6-34 CHAPTER 6 MANUAL SETUP
Configuring IPX RIP and SAP
Bridging
set ipx network network name
set ipx network network name
Configuring Bridging for the Remote Site Connections
Bridging IP Traffic
Configuring Bridging for the LAN
6-36 CHAPTER 6 MANUAL SETUP
show ip settings
set bridge forwarddelay seconds
Advanced Bridging Options
set bridge agingtime seconds
set bridge firewall discardroutedprotocols
set vc vcname macrouting enable
Simultaneous Bridging and Routing
Administration
Setting Date and Time
System
set bridge firewall fwdunicastonly
Network Time Protocol CLI Commands
set enable ntp
set disable ntp
For example set date 01-JAN-1998
set timeout seconds
set secondaryserver ipnameoraddr
set pollinginterval seconds
set retransmissions number
NTP Servers clock.psu.edu
show system
set system name name location location contact contact
list users
delete user name
Setting Password Protection
list tftp clients
exit cli
After logging in to the CLI, you can exit the CLI with the command
6-46 CHAPTER 6 MANUAL SETUP
OfficeConnect Remote 812 Filtering Capabilities
Data Filtering Overview
Filter Classes The OCR 812 supports three filter classes
Creating Filters Using
Command Line
Creating Filters
Overview
Protocol Rules
The OR operation can be implemented by successive rules
IP 1 ACCEPT src-addr=xxx 2 ACCEPT dst-addr=yyy 999 DENY
LENGTH - The number of bytes in the packet to compare to the value
IP Source and Destination Network Filtering Using CLI
IP Source and Destination Port Filtering Using CLI
IP Protocol Filtering Using CLI
IP RIP Packet Filtering Using CLI
IPX Source and Destination Socket Number Filtering Using CLI
IPX Source and Destination Network Filtering Using CLI
IPX Source and Destination Host Filtering Using CLI
IPX RIP Packet Filtering Using CLI
IPX SAP Packet Filtering Using CLI
Bridge / Generic Filtering Using CLI
IPX 1 ACCEPT src-socket = 999 DENY
memory
Using CLI
Creating Filter Files
Assigning Filters
Applying Filters Using
Interface Using CLI
by entering the CLI command set interface eth1 filteraccess off
VC/Remote Site Filters
Using CLI
Filter List Using CLI
Managing Filters
VPN Tunnel
an Interface Using CLI
Removing a Filter from
VC/Remote Site Profile
Deleting a Packet Filter
6-60 CHAPTER 6 MANUAL SETUP
OFFICECONNECT REMOTE 812 SAMPLE A CONFIGURATION
Sample Configuration
OCR 812 features
Overview
Configuring the
Global Configuration
enable securityoption remoteuser administration
add user root password !root
add dns server * vc Internet enable dns
add ipx network ipx address 10 frame ethernetii enable yes
disable bridge spanningtree add bridge network bridge
set dhcp server dns1 192.168.200.254 dns2
set vc Internet iprouting listen
set vc Internet sendname internet-user sendpassword 1a2b3c
set vc Internet defaultrouteoption enable enable vc Internet
Configuring the Sample Network A-5
set vc corp-net ipxaddress 0 ipxrouting all enable vc corp-net
set vc corp-net iprouting both
Page
CLI Command Description
CLI Commands
add access
vcblknetbios
primaryaddress ipaddress secondaryaddress ipaddress vcname vcname
add ip defaultroute
add framedroute vc name
iproute ipaddress metric number
metric
address ipxaddress interface eth1 enabled yes
add ip network networkname
address ipnetaddress frame ETHERNETII SNAP LOOPBACK interface eth1
gateway gatewayaddr metric hopcount
add ipx service servicename
type servicetype
add ipx route ipxnetaddress
gateway ipxhostaddress metric metricnumber ticks ticknumber
ipxnet ipxaddress metric hopcount ticks ticknumber
type servicetype
add ipxservice vc name
add ipxroute vc name
CLI Commands B-7
add network service servicename status
servertype servertype socket socketnumber enabled YES data “string”
Add network service example
add networkservice CLIaccess servertype TELNETD socket
address ipaddress access RO RW
closeactiveconnections TRUE FALSE
add snmp trapcommunity name
ipnameoraddr
address ipaddress
add tunnel
add user name
add vc name
arp output outputfilename ipnameoraddr
enabled yes
delete ipx route ipxnetaddress delete ipx service servicename
delete pat tcp vc
vcname
type servicetype
publicaddress ipaddress
publicpoolstart ipaddress
tunnelname
entries
DISABLE
disable ip network
DIAL
bridge forwarding
disable snmp
interfacename interface settings command
authentication traps
output outputfile
ENABLE
networks
using list network services
HANGUP
interfacename
interfacename interface settings command
HELP
HISTORY
KILL
LIST
mgmt - unknown, but filtering information exists
CLI Commands B-19
If Name - eth1, DA1 or loopback
Interface - eth1, DA1 or loopback
Prot - LOCAL or RIP
trapcommunities not list access
PAUSED COMMANDS
More or CR
Continue printing
Quit
timeout timeoutvalue
PING
RENAME
RESOLVE
forwarddelay seconds
set command history numerical range idle timeout minutes
SAVE
set bridge
enabled YES NO
set dhcp relay server1
set dhcp relay server2
address IPaddress
set dns cachesize number numberretries number timeout seconds
set dhcp server
DNS1 IPaddress
DNS2 IPaddress
routingprotocol NONE RIPV1 RIPV2
filteraccess ON OFF inputfilter filtername outputfilter filtername
set interface interfacename
B-28 APPENDIX B CLI COMMAND DESCRIPTION
routerid routerid
CLI Commands B-29
rip BOTH DISABLE LISTEN RESPONDONLY SEND ripagemultiplier number
rippacketsize number ripupdateinterval number
sap BOTH DISABLE LISTEN RESPONDONLY SEND sapagemultiplier number
sapupdateinterval number
set network service adminname
poolmembers number
Sets parameters for configured network services
Sets parameters for dynamic IPX networks
For in-depth information about CHAP and PAP, see RFC
A VPN tunnel can only be configured for MSCHAPv1 by using the CLI
Authentication Options
MPPE Options
address IPaddress access RO RW
NONE REQUIRED
transmitauthenticationname name
set system
name “name”
location “location”
password password
sessiontimeout seconds
set user username
message “message”
bridging enable disable
defaultrouteoption enable disable
idletimeout seconds
ip enable disable
CLI Commands B-37
categoryofservice Unspecified UBR Variable VBR
set vc vcname atm
set number
pcr number
Sets ATM parameters for VCs
Total time since system reboot hours, minutes, seconds
Errored seconds since last link down
Total errored seconds in 15 minutes
Total errored seconds in previous 15 minutes
Base Aging Time - time to age out a known MAC address, default
Fields
History Depth Current Prompt OCR-DSL Local Prompt OCR-DSL
settings
Problems with Name Server - internal server error
show dns counters show dns settings show filter filtername
SPECIFIC ERROR COUNTERS
OUTPUT COUNTERS
ICMP COUNTERS
INPUT COUNTERS
show interface interfacename counters
show interface Displays
INPUT COUNTERS
OUTPUT COUNTERS
Fragments Needing Reassembly - # of fragmented datagrams
IP Dynamic Address Pool Begin - start of IP address range
IP Dynamic Address Pool Size - size of IP address range
settings
INPUT COUNTERS
show ipx counters show ipx network networkname counters
OUTPUT COUNTERS
show ipx rip
counters
settings
settings
show ipx sap
Dynamic Address Pool Begin - starting IPX address
settings
Default Gateway - default IPX router address
vcname settings
name settings
vcname counters
name counters
SETTINGS for PPP BUNDLE
SETTINGS for PPP BUNDLE 1 COMPRESSION
SETTINGS for PPP LINK 1
Operational Status - opened or not opened
show snmp counters Displays many SNMP statistics
INPUT COUNTERS
System Contact - modify using set system
System Location - modify using set system
System Descriptor - for example
OUTPUT COUNTERS
TCP SETTINGS
TCP COUNTERS
INPUT COUNTERS
OUTPUT COUNTERS
Commands
TELNET
VERIFY
verify filter
CLI Exit Commands
Command Features
Comments
B-58 APPENDIX B CLI COMMAND DESCRIPTION
INDEX
Server
Input and Output filters contrasted
Static Services
Passwords
Page
Page
Page
3Com Corporation LIMITED WARRANTY
STANDARD WARRANTY SERVICE
HARDWARE
SOFTWARE
FCC CLASS B STATEMENT
FCC DECLARATION OF CONFORMITY
The Interference Handbook
ModelDescription