Manuals / Brands / Computer Equipment / Switch / ADC / Computer Equipment / Switch

ADC 3 - page 344

1 620

Download 620 pages, 4.17 Mb

ADC Telecommunications, Inc.

342 CHAPTER 15: IP PACKET FILTERING

Contents

Main Page ADC Telecommunications, Inc. 8 Technology Drive Westborough, MA 01581 Page C CUDA 12000 IP ACCESS SWITCH CLI-BASED ADMINISTRATION G A BOUT T HIS G IA 1 2 II CHASSIS ADMINISTRATION 4 5 6 7 8 9 10 III IP R 11 12 13 14 15 16 17 IV CABLE MODEM TERMINATION SYSTEMS 18 19 20 21 A Page Page ABOUT THIS GUIDE Document Objective Audience Document Organization Page Notations Command Syntax Table2 desc ribes the command syntax conventions used in this gui de. Tabl e 2 Command Syntax Conventions Related Documentation Contacting Customer Support Page I Page 1 Introducing the Cuda 12000 IP Access Switch Hardware Features The Cuda 12000 provides the following hardware features: Modules Page Software Minimum Chassis Configuration Understanding the Cuda 12000 Within Your Network Cable Modem Termination System (CMTS) IP Routing Configuration Page 2 I About the CLI Page Accessing the CLI Page Page Command Modes Page Global Commands Page Root Mode Page Physical Interface Mode Page Page Page IP Interface Mode OSPF Global Configuration Mode Page Import and Export OSPF Route Filter Modes RIP Configuration Mode Import and Export RIP Route Filter Modes Slot Mode 3 Understanding User Accounts Configuring Access Profiles Page Creating and Modifying Access Profiles Displaying Access Profiles You display access profile information by performing the following tasks: The following example displays a profile named routemonitor: Deleting a Profile You remove an access profile by performing the following tasks: The following example deletes an access profile named routemonitor: Managing User Accounts Creating and Modifying User Accounts Displaying User Accounts You view user accounts configured on the system by performing the The following example shows the user account named Route_1: Deleting User Accounts Configuring User Authentication Configuring Local Authentication Configuring TACACS+ Authentication Page Configuring RADIUS Authentication Page II Page 4 Understanding Chassis Identification Understanding Management Module Redundancy Page Configuring Chassis Parameters The following example steps you through the chassis configuration process: Page Displaying Current Chassis Configuration Page Page Page Page Configuring Clock Sources Page Starting and Stopping the HTTP Server Enabling and Disabling Traffic Relay In this example, traffic relay is enabled for Telnet. Broadcasting Messages to Users Page 5 About Multi-Chassis Support Page Planning Multi-Chassis Support Enabling the Jini Lookup Service Configuring Multi-Chassis Support Page Creating a Common User Account for the Group Viewing Chassis Details The following is an example of a list of ch assis in the group named Cuda: 6 Cuda Application Modules Configuring the 10/100 Ethernet and GigE Modules Viewing Module Information Viewing Installed Modules The following example shows the modules currently installed in the Cuda chassis: Viewing Module Versions For example: Task Command Show the firmware version installed on each module. show version Table6-1 describes the information in the display. Viewing Ethernet Interface Packet Statistics Page Displaying Statistics for All System Interfaces Page Page 7 About Packet Over SONET Packet Over SONET (POS) Interface Administration Page Displaying POS Interface Information Task Command Display POS interface statistics and settings. show interface pos <c/s/i> Page The display includes a number of statistics, as described in the following table. Page Clearing Interface Counters Disabling and Enabling Interfaces Viewing POS Interface Packet Statistics Page Viewing SONET Line-Layer Information Viewing SONET Path Layer Information Table7-3 describes the SONET Path statistics shown in the display. Section Layer Administration Loopback Configuration Clock Source Signal Type Packet Scrambling Configuring and Viewing SONET Alarms Configuring POS Alarm Reporting Page Viewing Alarm Information The following example indicates whether or not a specific alarm has been reported: Configuring Point-to-Point Protocol (PPP) Configuring PPP Security Configuring Client-Side Security Parameters To configure CHAP authentication, perform the following tasks within interface pos <c/s/i> mode: To configure PAP authentication, perform the following tasks within interface pos <c/s/i> mode: Configuring Server-Side Security Parameters Page Page Configuring LCP Configuring LCP Parameters Initial Maximum Transmit / Receive Unit (MTU) Frame Check Sequence (FCS) Size Max Negotiation Attempts Time Between Negotiation Attempts Enabling NCP 8 M About Timing and Alarm Controller Fault Reporting Page Assertion Levels Configuring the Power Assertion Level Configuring Fan Unit Assertion Levels Configuring Fault Reporting Page Removing a Fault Notification Viewing Fault Reporting Status Configuring Alarms Out Page Page Viewing Alarm Signals Out the DB-15 Connector 9 About SNMP Page Configuring SNMP Access Control Configuring SNMP Access Views Perform the following tasks to configure SNMP Access Views: Page Configuring SNMP Groups Page The following example creates a new group: The following example assigns the group read privileges to an SNMP MIB view: The following example associates an existing context to the group: The following example specifies the storage type for a group: Configuring SNMP Communities Page The following example creates and displays a specific SNMP community: Configuring SNMPv3 Users Page The following example configures an SNMP user with authentication type and privacy attributes: Configuring SNMPv3 Contexts Perform the following tasks to configure SNMPv3 contexts. Refer to the configuration example below: Configuring System Name, Contact, and Location The following example creates and displays name, contact, and location information: Configuring SNMP Event Notification Types Page Page Page Page The following table describes the parameters that you set to configure notifications: Page Page Page Page Page Page The following example creates and displays an SNMP host with default parameter values: Page Monitoring SNMP The command displays the following information: In the following example, the user issues the show snmp command to monitor SNMP activity. Sample SNMP Configurations Sample SNMPv1/v2c Community Access Control Sample SNMPv3 Access Control Page Sample Notification Configuration Page 10 About System Events Configuring the Syslog Server Configuring SNMP Trap Recipients Page Configuring Event Transmission To configure event transmission, perform the following tasks: The following is an example of an event threshold configuration, using the default settings: Event Reporting Event Classes Reporting Actions Configuring Event Reporting By default, the Cuda 12000 reports events as follows: To configure event classes and associated reporting actions, perform the following tasks: Refer to the next section for information on viewing the event repor ting configuration. Viewing Event Reporting Configuration Event Classes and SNMP System Events Page Clearing the Event Log Displaying Event Transmission, Reporting, and Syslog Parameters Page Displaying the Event Log Use this procedure to display the log of events that the Cuda has generated: The show event-log command output displays these fields of information about each event: Field Description Page III Page 11 About RIP and OSPF Route Maps Creating Route Maps Page Using the Match Command Using the Override Command Creating OSPF Import Route Maps Page Creating OSPF Export Route Maps Page Creating Route Maps 233 Creating RIP Import Route Maps Creating Route Maps 235 Creating RIP Export Route Maps Page ADC Telecommunications, Inc. 238 CHAPTER 11: CREATING ROUTE FILTERS Creating Map Lists Page Route Filter Configuration Example The following example creates two RIP import route-maps and adds them to map-list 1: Page 12 About DHCP Relay Displaying DHCP Relay Configuration Table12-1 describes the fields shown in the display. To configure which DHCP servers the CMTS forwards requests to, use the Configuring DHCP Relay Options Page Specifying DHCP Servers Specifying External DHCP Servers Specifying the Internal DHCP Server DHCP and BOOTP Policies About DHCP Policies About BOOTP Policies Configuring DHCP and BOOTP Policies Defining Policies for a Cable Interface Page The following table describes the parameters that you set to configure BOOTP policies: To configure a DHCP Policy and a BOOTP policy, perform the following tasks: Page Configuring Default Policies DHCP Policy Configuration Examples Page Page Page 13 About DHCP Authority Page Enabling DHCP Authority Configuring DHCP Authority Ranges Removing DHCP Authority Ranges DHCP Authority Configuration Examples In the following example, cable interface 1/1/ 1 has an IP interface of 192.168.19.50: Page 14 Configuring IP Addresses Task Command 1. Enter configuration mode for the selected interface interface {<c/s/i> | loopback} 2. Add the IP address. ip address <ip-address> <mask> Viewing IP Interfaces The following example displays IP interface information for interface 1/1/1: Deleting IP Addresses Displaying the Routing Table Configuring Static Routes Adding Static Routes Perform the following tasks to add a static route to the routing table: Deleting Static Routes Page Adding the Default Route Deleting the Default Route To add the default route, perform the following task: no ip route default Task Command From any mode, delete the default route. Managing the Address Resolution Protocol (ARP) Displaying the ARP Cache Adding ARP Entries Deleting ARP Entries Configuring the ARP Timeout Clearing the ARP Cache Configuring RIP About RIP Configuring RIP on IP Interfaces Descriptions of the RIP parameters that you configure are listed below. Page You configure RIP on an IP interface by performing the following task s: Page For more information on these commands, refer to the Cuda 12000 IP The following example configures RIP on cable interface 1/1/1: For more information on the ip rip commands, refer to the Cuda 12000 IP Disabling RIP on IP Interfaces Use this procedure to disable RIP on an interface: You remove RIP from an interface by performing the following tasks: For more information on these commands, refer to the Cuda 12000 IP Removing RIP from IP Interfaces Configuring OSPF About OSPF OSPF Areas OSPF Routers OSPF Configuration Task Overview Configuring OSPF Global Parameters For more information on these commands, refer to the Cuda 12000 IP Adding OSPF Areas For more information on these commands, refer to the Cuda 12000 IP Removing OSPF Areas You remove a specified OSPF area by performing the following tasks: For more information on these commands, refer to the Cuda 12000 IP Configuring OSPF on IP Interfaces Assigning an Area ID to the IP Interface Page Configuring OSPF Parameters for an IP Interface Page For more information on these commands, refer to the Cuda 12000 IP The following example configures OSPF parameters on IP interface 201.1.1.1: Removing OSPF from IP Interfaces Configuring OSPF Virtual Interfaces Page Use this procedure to configure a virtual interface: Page Removing OSPF Virtual Interfaces Configuring OSPF Neighbor Traps Page Configuring IP Source Routing About IP Source Routing Adding IP Source Routes Examples Displaying IP Source Routes Removing IP Source Routes To remove an IP source route entry from a particular interface, perform the Source Routing Configuration Example Page 15 About IP Packet Filtering Enabling and Disabling IP Packet Filtering Understanding Access Lists Creating Access Lists Page Page Page Displaying Access Lists Deleting Access Lists Applying Access Lists to Interfaces Page Displaying Access Classes Removing Access Lists from Access Classes Packet Filtering Considerations and Example Implicit Deny Match Sequence Sample Access List Page 16 About Network-Layer Bridging Creating Network-Layer Bridges Page Creating Bridge Groups Page Adding Interfaces to Bridge Groups Page Assigning IP Addresses To Bridge Groups Page 17 About IP Multicast IGMP IGMP Proxy About IP Multicast 355 Figure17-1 Sa mple Network Managing IGMP Interfaces Joining IGMP Groups Configuring IGMP Interface Parameters Displaying IGMP Groups and Interface Parameters Displaying Groups and Parameters from Root Mode Page Page Displaying Groups and Parameters from Interface Mode Deleting IGMP Groups To delete multicast group entries with the clear ip igmp group command: To delete groups with the no ip igmp join-group command: Managing IGMP Proxies Configuring Proxies Examples Displaying Proxies Deleting Proxies Displaying Multicast Routes IV Page 18 T CMTS Upstream Frequency Reuse Configuring the MAC Interface Displaying MAC Interface Parameters and Statistics Page Understanding MAC Interface Statistics MAC interface statistics are displayed as part of the brief description for each MAC statistic. Page Configuring MAC Interface Parameters Shared Secret Sync Interval (millisec) UCD-Interval Insertion-interval Ranging-attempts Map-timer Periodic-Ranging-Interval Plant-delay PLL State Configuring the Downstream Channel Displaying Downstream Configuration and Statistics The Annex Type for EuroDOCSIS modules is Annex A. Understanding Downstream Channel Statistics Configuring Downstream Parameters Annex Type Downstream Shutdown Downstream Frequency Channel Width Downstream transmit-power Downstream Modulation Downstream interleave-depth Example Procedure of Downstream Configuration Page The following example shows a downstream channel configuration. Configuring Upstream Channels Displaying Upstream Configuration and Statistics Task Command show upstream <port number> Configuring Upstream Channel Parameters Upstream shutdown Frequency Channel Width (kHz) Slot Size Receive Power Modulation Profile Data-Backoff Range-Backoff Example Procedure of Upstream Configuration Page The following example configures upstream channel 1 on the CMTS interface installed in slot 1. Upstream Channel MAP Configuration Initial Maint Region Size (microsec) UCD Grant Size (microsec) Maximum Deferred Ranging Invitations Minimum Request Region Upstream Channel Ranging Configuration Power Offset Threshold (dB) CM Range Invite Timeout (millisec) Maximum Power Adjustment (1/4 dB) Enable Zero Power Adjustment Enable Zero Timing Adjustment Enable Zero Frequency Adjustment Configuring Admission Control Page Page Configuring Frequency Hopping Understanding Frequency Hopping Configuration Understanding Frequency Hopping Parameters The following example configures Policy Number 1 on Upstream Channel 1: Display Policy Number 1 on all Upstream Channels You display all Policy Number 1s on all upstream channels by performing the Display All Policies on Single Upstream Channel Display All Policies on All Upstream Channels You display all policies on all upstream channels by performing the following tasks: Frequency Hopping Statistics Page Defining Modulation Profiles Guard Time Mod qpsk Pre-len Burst-len Diff FEC-tbytes Fec-len Seed Shortened Scrambler Example Creating a Modulation Profile You can then verify the new modulation profi le using the within either root or cable interface mode, or the show modulation-profile Displaying Modulation Profiles Page Deleting Modulation Profiles You delete a modulation profile from a cable interface by performing the following tasks The following example deletes modulation profile 3 from interface 1/1/1: Configuring CMTS Privacy Parameters Configuring Flap Control Flap-list size Flap-list aging Flap-list insertion-time Flap-list power-adj-threshold Show flap-list control 19 Viewing Cable Modems Displaying the Summary of Cable Modem Registration States Page Displaying a Detailed Listing for an Interface The display includes the following parameter information: Page Page Displaying Specific Cable Modems You can display selected modems by MAC address. To do so, perform the Displaying Cable Modem Statistics To display cable modem statistics, perform the following tasks: The following example shows the results of the show modem stats command. Tracking Offline Cable Modems Setting the Duration for Tracking Offline Cable Modems Maintaining Statistics for Offline Cable Modems Clearing Offline Cable Modems Resetting Cable Modems Resetting a Single Modem Resetting Multiple Modems Page Resetting All Modems on a Network To reset all modems attached to a selected network, perform the following task within the Changing Upstream Channels Page Viewing Services The SID summary display includes the following parameter informati on: To view statistics for each service identifier, perform the following task in interface cable <c/s/i> mode. The following example displays the results of the show sid stats command. Task Command View SID statistics. show interface cable <c/s/i> sid stats Page Configuring BPI and BPI+ Parameters About BPI and BPI Plus Page Configuring Authorization and Traffic Encryption Keys Page Page Configuring Trust and Validity for Manufacturer Certificates Page Page Configuring IP Multicast Address Mapping Page Page Viewing Privacy Keys To display privacy key (that is, TEK) information, perform the following task within Page Managing Flap Lists Viewing the Flap List The following example displays the flap list for cable interface 1/1/1: The parameters that you can display through the flap list are listed below: Page Clearing the Flap List Task Command Clear the flap list. flap-list clear Managing Quality of Service Service Flows Page Page Page Page Page Viewing Service Flows The following example displays all Service Flows for a specified cable modem: The following example displays Upstream Service Flows: Example 3 The following example displays an Admitted parameter set for a specif ied Service flow: Classifiers The following table describes the parameters contained in viewing Service Flow Classifiers: Page Page Page Viewing Classifiers Service Flow Logs Viewing and Clearing Service Flow Logs The following example displays Service Flow logs for all Service Flows: The following example displays a Service Flow log by index number. Dynamic Service Page View Dynamic Service Flow Statistics The following example displays Dynamic Service Flow Statistics: 20 About Subscriber Management Filtering About CPE Control Configuring Filter Groups Page Page Page Page Page Viewing Filter Groups Deleting Filter Groups and Filters Modifying Existing Filter Groups Assigning Default Filter Groups To assign default Subscriber Management filter groups, perform the Modifying Filter Groups Per Cable Modem To modify default Subscriber Management filter groups, perform the following tasks. address and service ID (SID): Page Viewing Filter Group Assignments The following example displays filter group assignments for: Configuring CPE Control Parameters To set chassis-wide Subscriber Management defaults for CPE devices, perform the following tasks: Page Modifying CPE Control Parameters Per Cable Modem Page Page Viewing CPE Control Parameters and CPE Devices You can view CPE control parameters and CPE devices. Viewing CPE Control Parameters To view CPE control parameters, perform the following tasks: Page Viewing CPE Devices 21 Cable Modem MIBs Page MTA MIBs The following is a list and description of the MTA MIB tables that are supported by the Cuda 12000: Browsing Cable Modem and MTA Status Page For example, to display cable modem device status, you would issue the following command: The corresponding output from the cable modems MIB would be: Cable Modem and MTA Command Output Descriptions Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page A Access Control Commands Tabl e A -1 Access Control Commands Mode Commands Tabl e A -2 Mode Commands General Commands Tabl e A -3 Gener al Commands IP Administration and Route Filtering Commands Tabl e A -4 IP Adm inistration and Route Filtering Commands Page Page RIP Commands Tabl e A -5 Rout ing Information Protocol (RIP) Commands Page OSPF Commands Tabl e A -6 Op en Shortest Path First (OSPF) Commands Page DHCP Relay Commands Tabl e A -7 DHCP Relay Commands Cable Interface Administration Commands Tabl e A -8 Cable Interface Administration Commands Page Page Page Cable Modem and Subscriber Administration Commands Tabl e A -9 Cable Modem and Subscriber Administration Commands Page Page Network-Layer Bridge Commands Table A-10 Network-Layer Bridge Commands Fault Management Commands Table A-11 Fault Management Commands Chassis Commands Table A-12 Chassis Commands Page SNMP Commands Table A-13 SNMP Commands Packet Over SONET (POS) Commands Table A-14 POS Commands Page Page Ethernet Commands Table A-15 Ethernet Commands B PROVISIO NING SERVERS Page Task Command show dhcp-policy default 8. Verify the new DHCP server configuration. Page C Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page I A B C Page D E F H I J L M N O P Q R S T U