SG-1 Service Gateway System

SG-1 Service Gateway System

User Manual

Document Number: SG1-UM-8500-03

Image 1

ADC user manual SG-1 Service Gateway System

Contents

SG-1 Service Gateway System Revision History Table of Contents SG1-UM-8500-03 Table of ContentsJune 30 Appendix B Redirection Server June 30, 2006Table of Contents Table of Contents June 30 SG1-UM-8500-03 SG1-UM-8500-03 Vii List of Figures List of Figures June 30 Viii SG1-UM-8500-03 List of Tables List of Tables June 30 SG1-UM-8500-03 Organization IntroductionIntended Audience Chapter Description EU Compliance ConventionsInspecting Your Shipment Element Meaning Chapter Features Before YOU Begin Method of ProcedureSite Preparations Overview June 30 Unpacking and Checking the Contents of Your Shipment Packing List System Installation NotesNumber Required Tools and Equipment Specific SG-1 Chassis Installation RequirementsLocation Requirements Blank Faceplate Requirement Power RequirementsEnvironmental Requirements System Cabling Requirements Configuration Port Cabling Chassis Ground and Power CablingNetwork Cabling Overview June 30 SG1-UM-8500-03 Connecting the Power Source Connecting the SG-1 Chassis GroundMounting the SG-1 Chassis Installation June 30 Installing Interface CablesConnecting AC Power to an SG-1 AC Chassis Connecting Network Cards Straight-Through and Cross-Over Cable Pin-Outs June 30 Installation Powering UP the SG-1 Connecting the Craft Port InterfaceInstalling Cards and Blank Faceplates Connecting to an Ethernet Port Serial Cable Installing Blank Faceplates Installation June 30 SG1-UM-8500-03 Overview SG-1 Sub-Menus and Associated Commands Types of CommandsUnderstanding the Interface Structure Menu Types of Commands Commands and NavigationGeneral Commands Enter the following command Command Path Navigation June 30 Command-Line Interface CLI COMMAND-LINE EditingNavigation Commands Use This Feature Command-Line Interface CLI June 30 SG1-UM-8500-03 Default Username/Password Authority Connecting to the Craft PortLogging on to the Craft Port Accessing the Command Line Interface June 30 Setting the IP AddressHost configure terminal Hostconfig# interface ethernet Write memory Parameters Ethernet ModeInterface Identification Card/Type Slot/Port Value Explanation Displaying the IP Address Host show configuration \users\defaulttelnet Configuring the SG-1Logging on Logging OFF What to do Next Using the Command Line Interface June 30 FIRST-LEVEL Commands System-command grep string Using the Grep commandUsing the ? command Showing a List of Available Parameters Using the show ? command June 30 First-Level Commands ExamplesHost show ? Host show version Using the show version commandShow version softwarehardwarepack Show version software SCC Show version hardware 650003 8200935 Host Host show version Software Module Num Application Show configuration Displaying the configuration in Nvram June 30, 2006Chapter 6 First-Level Commands Examples Ip domain-name POPmaestro Ip local-pool pool1 162.10.1.1 162.10.1.254 internal Host show terminal Displaying Ethernet port configurationsDisplaying Ethernet Port Statistics Host show ethernet 0 \ First-Level Commands June 30 Examples Host show port sonet Displaying Sonet port statusShow port sonet Host show port sonet Host show atm pvc Displaying ATM Port StatusShow atm pvc Host show user Displaying User StatusShow crnumber Number First-Level Commands June 30 Displaying Routing Tables Displaying System AdministratorsHost show ip-route Show ip-route Host show system Displaying System ParametersShow system Show system load Load June 30 First-Level Commands Host show license Displaying License AttributesShow license SN1=6046838 DATE=December 22 2005 160357 Version First-Level Commands June 30 Host show vrrp interface Displaying Vrrp attributesEthernetvlan Host show ip-tunnel Displaying active GRE and IP-in-IP tunnels 10.10.1.20 Host show mpls-labels Displaying show mpls-labels commands VC Type Group ID Label Tunnel Endpoint Upper stack FEC ID Host show labels vc0xc2010000 123876 192.0.1.8 0xc2010001 1034 212.1.3.4 Displaying a list of available write commands Displaying show mpls l2transport vc commandsHost show mpls l2transport vc Host write ? June 30 First-Level Commands Examples Using the ping command to test network connectivity Using the copy-TFTP commandHost copy-TFTP flash Atm slot number AtmAtm atm port number Atm sub-interface number Host reload non-graceful Resetting the system in 10 seconds Using the reload command to restart the systemHost reload non-graceful Reload non-graceful Host clear user Clearing UsersClear user line number Line number Host traceroute Using the Traceroute CommandTraceroute ip address -h number -i seconds Seconds Exit Using the exit command Switching to Debug Mode Using Debug ModeHost debug Hostdebug# show Using the show command in debug modeShow memory system log-modules statistics arp System First-Level Commands June 30 Examples Group Error Event Trace Name Min Max Module Group Error Event Event Trace Name Min Max Show arp command Clear arp arp-specific ifindexNetAddress Parameters Clear arp command Show memory Hostdebug# port-ethernet redundancy-mode Defining port-ethernet redundancy-mode commandDefining the Sonet port source clock Hostdebug# port sonet source-clock Checking the system Radius interface Radius-server check user-name password auth-type PAPHostdebug# radius-server check User-name First-Level Commands June 30 SG1-UM-8500-03 Using the configure command Second Level Commands Second Level Commands June 30 Examples Ethernet Commands Banner CommandHostconfig# banner command Ethernet mode Second Level Commands June 30Configure Ethernet Ports Card Type Slot\Port Hostconfig# no interface Ethernet Ethernet Operating ModeHostconfig# no interface Ethernet 0\1 No interface Ethernet slot number\port number Using the port-ethernet redundancy-enable command Configuring Ethernet RedundancyHostconfig# port-ethernet redundancy-enable Using the no port-ethernet redundancy-enable command June 30 Second Level Commands ExamplesHostconfig# no port-ethernet redundancy-enable Hostconfig# no port-ethernet redundancy-enable 1\1 1\2 Configuring interface loopback Loopback CommandsHostconfig# interface loopback Interface loopback interface number IP address mask Hostconfig# no interface loopback Vlan CommandsConfiguring the Vlan Hostconfig# interface vlan Vlan id Second Level Commands June 30 UsageVlan name Hostconfig# no interface vlan Authentication CommandsUsing the password pre-authentication command Hostconfig# password pre-authentication Hostconfig# def-service-auth Setting the default-service authentication modeDef-service-auth command parameters Hostconfig# def-service-auth ppp-auto Hostconfig# domain-authentication Changing domain authentication settingsDomain-authentication separator @# then press Enter No domain-authentication then press Enter Second Level Commands June 30 Example ATM CommandsHostconfig# no authentication web-auth-method Using the port sonet command Hostconfig# port sonet redundancy-enable Configuring SONET/SDH port redundancy Hostconfig# interface Hostconfig# pppoa enable interface Using the pppoa enable command Using the interface atm command HostConfig# no pppoa enable interfaceHostconfig# interface atm Hostconfig# no interface atm Interface atm command parametersParameter Description Legal values/range Hostconfig# atm pvc Configuring a single PVCVpi Vci Hostconfig# atm pvc range Configuring a range of PVC’s Hostconfig# radius-server Configuring the Radius server in the SG-1 configurationConfiguring the Radius server host Hostconfig# radius-server host Hostconfig# radius-proxy client Configuring the Radius proxy for native IPRadius-proxy client parameters Parameter Description Values Hostconfig# service cache Using the service cache commandService cache offon aging-time minutes Using the ip radius source-interface command Hostconfig# no ip radius source-interface Access List CommandsHostconfig# access list No ip radius source-interface Using the access-list native-ip command Hostconfig# access-list SNMP-permit 25.3.2.251Hostcongfig# access-list native-ip Access-listnative-ipsource ip address source mask No access-list native-ip source ip address Hostcongfig# no access-list native-ipUsing the access-list native-ip-pass-through command Hostcongfig# access-list native-ip-pass-through Hostcongfig# no access-list native-ip-pass-through Snmp CommandsNo access-list native-ip-pass-through source ip address Using the SNMP-server community Hostconfig# SNMP-server trap-source-int Using the SNMP-server trap-source-int Hostconfig# interface tunnel Tunnel Commands Hostconfig# no interface tunnel Setting the no interface tunnel commandNo interface tunnel interface number Hostconfig# ip tunnel echo Using the ip tunnel echo commandIp tunnel echo echo source IP address Echo source ip address Setting the Session-Timeout Timeouts CommandsSetting the Idle-Timeout Idle-timeout command Hostconfig# native-ip dhcp pre-auth-mode Native IP CommandsHostconfig# native-ip def-service-auth Native-ip def-service-auth service name Hostconfig# native-ip enable interface Using the native-ip enable command Hostconfig# no native-ip enable interface Using the no native-ip enable commandHostconfig# no native-ip enable Vlan 1\1\9 Hostconfig# no native-ip realm Hostconfig# native-ip realmHostconfig# native-ip raoming Native-ip realm realm string No native-ip roaming Hostconfig# no native-ip roaming Hostconfig# ip tcp adjust-mss Using the ip tcp adjust-mss commandIp tcp adjust-mss on off Hostconfig# ip tcp adjust-mss on L2TP and PPP Commands Hostconfig# ip secondary-name-server Hostconfig# ip primary-name-serverHostconfig# tunnel-server Ip primary-name-server IP address Hostconfig# multilink-mode Setting multi-link modeHostconfig# ip local-pool Defining an address pool Hostconfig# lcp renegotiate Using the lcp renegotiate commandLcp renegotiate or no lcp renegotiate Hostconfig# lcp echo Using the lcp echo command Hostconfig# service internal Using the service internal command PPPoE support Usage Scenarios SG-1 as xDSL aggregator using ATM network Hostconfig# pppoe enable interface Using the pppoe enable commandUsing the no pppoe enable command Hostconfig# no pppoe enable interface Using the ip dhcp relay server command Dhcp CommandsHostconfig# ip dhcp relay server Using the no ip dhcp relay server command Using the no ip dhcp relay information option command Hostconfig# ip dhcp relay information optionHostconfig# no ip dhcp relay information option Hostconfig# ip dhcp relay advertise-protocol Hostconfig# ip dhcp relay agent-id-overwrite interfaceIp dhcp relay advertise-protocol rip ospf Using the ip igmp proxy command Igmp CommandsHostconfig# ip igmp proxy upstream-interface Using the no ip igmp proxy command Hostconfig# ip forward Routing CommandIp forward Hostconfig# no ip forward Hostconfig# ip route Tunnel interface ip Route network 192.168.4.0 to Loopback interface Using the ip default-gateway command Hostconfig# no ip routeHostconfig# ip default-gateway Hostconfig# no ip default-gateway Using the router command No ip default-gatewayHostconfig# router Using the router id command Hostconfig# ip rip authentication key Hostconfig# no routerIp rip authentication key key name Hostconfig# ip ospf interface ... area Using the ip ospf interface hello-interval command Hostconfig# no ip ospf interfaceHostconfig# ip ospf interface ... hello-interval Hostconfig# no ip ospf interface ... hello-interval Hostconfig# ip ospf interface ... dead-interval Using the ip ospf interface dead-interval commandHostconfig# no ip ospf interface ... dead-interval Using the ip ospf interface authentication command Hostconfig# ip ospf interface ... authentication-key Using the ip ospf interface authentication-key commandHostconfig# no ip ospf interface ... authentication-key Simple-pass message-digest null Hostconfig# no ip ospf interface ... message-digest-key Using the ip ospf interface message-digest-key commandUsing the no ip ospf interface message-digest-key command Keyid Hostconfig# no ip ospf area ... stub Hostconfig# ip ospf areaHostconfig# ip ospf advertise network No ip ospf area area-idstub Using the mpls ip interface command Hostconfig# no ip ospf advertise networkHostconfig# mpls ip interface Hostconfig# no mpls ip interface Using the mpls l2transport interface command Hostconfig# no mpls ip Ethernet 0\1Hostconfig# mpls l2transport interface Hostconfig# no mpls l2transport interface 194.90.1.4 Hostconfig# no mpls l2transport interfaceUsing mpls l2transport route command Hostconfig# mpls l2transport route interface Hostconfig# no mpls l2transport route interface Using the no mpls l2transport route command Mpls ip default-route Hostconfig# mpls ip default-routeHostconfig# no mpls ip default-route No mpls ip default-route Ethernet Vlan 17. vrrp command parametersPriority value On off June 30 Second Level Commands Example 1 SCC1 configuration Hostconfig# no vrrp interface Second Level Commands June 30 Using the no vrrp commandHostconfig# no vrrp interface Ethernet 0\1 Using the vrrp preempt command Hostconfig# vrrp preempt interface Vlan 1\2 7 enable Debug CommandsConfigure watchdog Config-debug# watchdog-TimeValue Config-debug# time-server-ip Configure time serverConfigure error level commands Config-debug# error-level Set-all June 30 Second Level Commands Example Vrrp Mpls Debug modules Debug groups Config-debug# trace Trace commands Config-debug# sysLog-server-ip ConfigureConfig-debug# exit Example Config-debug# exit cr Host Example Config-debug# end cr config# SG1-UM-8500-03 Table A-1. Vendor-Specific Attribute List Vendor-Specific Attributes TableAttribute First Num Attribute Name Group Introduced Description Appendix a SG-1Vendor-Specific Attributes June 30 Radius June 30 Appendix a SG-1Vendor-Specific Attributes Appendix a SG-1Vendor-Specific Attributes June 30 June 30 Appendix a SG-1Vendor-Specific Attributes Authentication Response Type Accounting Behavior Hierarchical Attribute ModeUser Group Useraccounting sub-attribute Useraccounting=enable Useraccounting=disableScenario Action Radius definition Accounting Behavior General Adc-avpair = userorig-name=original user name Userorig-name sub-attributeAdc-avpair = userorig-name=test Userauth-type sub-attribute Adc-avpair = userauth-type=pre-auth June 30 Appendix a SG-1Vendor-Specific Attributes GeneralUseraction sub-attribute Adc-avpair = useraction=Reject User service-name sub-attributeUser SSC-host sub-attribute Adc-avpair = userSSC-host=SSC host IP address Adc-avpair = userservice-name=SRV1 Adc-avpair = userservice-name=service nameUserpersonal-site sub-attribute Adc-avpair = usermac-address=User MAC address Adc-avpair = userpersonal-site=site URLAdc-avpair = usermac-address=00022d386dbe Adc-avpair = usergroup=group number Adc-avpair = usermax-allowed-sessions=1 Usermax-allowed-sessions sub-attributeUserclass sub-attribute Adc-avpair = userclass=user class data Adc-avpair = usereds-enc-key=02f804fea90102f8 Adc-avpair = usereds-enc-key=EDS encryption keyAdc-avpair = usereds-cookie=user eds cookie Adc-avpair = usereds-cookie=rt123456 Adc-avpair = useroriginal-url-prefix=prefixed string Useroriginal-url-prefix sub-attributeAdc-avpair = useroriginal-url-prefix=?url= Dhcpdhcp-server sub-attribute Dhcp GroupAdc-avpair = dhcpdhcp-server=DHCP Server IP Adc-avpair = dhcpdhcp-server=194.90.1.5 Adc-avpair = dhcpdiscover-action=update Adc-avpair = dhcpdiscover-action=normal updateDhcpopt82-relay-remote-id sub-attribute Adc-avpair = dhcpopt82-relay-remote-id=01844400660300 Adc-avpair = serviceservice-timeout=timeout in seconds Service GroupAdc-avpair = serviceservice-timeout=500 Protocol Group Adc-avpair = servicenext-service-name=SRV12 Adc-avpair = servicenext-service-name=service nameAdc-avpair = serviceauto-service-name=service name Adc-avpair = serviceauto-service-name=SRV12 Adc-avpair = serviceauth-source=service user CLI Serviceauth-sourceAdc-avpair = serviceauth-source=CLI Servicedata-quota Servicedata-quota-used Adc-avpair = servicedata-quota=5000000Adc-avpair = servicedata-quota-used=5000000 Serviceacl-data-quota Serviceservice-cache Adc-avpair = serviceacl-data-quota=1015000000Adc-avpair = serviceservice-cache=off Serviceacl-data-quota-used Serviceacl-packet-quota Adc-avpair = serviceacl-data-quota-used=video5000000 Serviceacl-packet-quota-used ADC-avpair = serviceacl-packet-quota=mail100300 Serviceroaming Adc-avpair = serviceacl-packet-quota-used=mail100245Adc-avpair = serviceroaming=disable Adc-avpair = routenext-hop=Next-hopIP address Route GroupAdc-avpair = routenext-hop=192.168.1.23 Adc-avpair = routenip-pipe-next-hop=192.168.1.23 Adc-avpair = routenip-pipe-next-hop=Next-hop IP addressAdc-avpair = routeadvertise-protocol=ripv2 ospf Adc-avpair = routeadvertise-protocol=ospf Adc-avpair = routeforward-addr=192.168.1.4 Adc-avpair = routeforward-addr=IP address Adc-avpair = vpdntunnel-id=username Vpdn GroupAdc-avpair = vpdntunnel-id=test Adc-avpair = vpdnl2tp-tunnel-password=test Adc-avpair = vpdnl2tp-tunnel-password=passwordAdc-avpair = vpdnip-address=x.x.x.x Adc-avpair = vpdnip-address=192.168.4.3 Vpdntunnel-client-ip-address Gcon-avpair = vpdnnativeip=ppp Vpdnnativeip sub-attributeVpdnip-tunnel sub attribute Adc-avpair = vpdnip-tunnel=gre192.168.1.34 Gcon-avpair = qosup-mean-rate=up mean rate in Kbits QOS GroupGcon-avpair = qosup-mean-rate=128 Adc-avpair = qosacl-up-mean-rate=acl1128 Adc-avpair = qoscos=access-list nameCOS valueQosacl-down-mean-rate sub attribute Adc-avpair = qosacl-down-mean-rate=acl1256 Adc-avpair = qosacl-priority=acl11 Qosacl-priority sub attribute Dnsip-primary DNS GroupAdc-avpair = dnsip-primary=Primary DNS IP Adc-avpair = dnsip-primary=194.90.1.5 Appendix B Using password command Using default-redirection-site command Password user type passwordDefault-redirection-site URL name RDSHost configure terminal cr Using Orup Original Requested URL Prefix Orup CommandsUsing orup-active command Using no orup-active command Using service-name command Service Name CommandsService-name service name No service-name Using copy-TFTP command Tftp CommandsJune 30 Appendix B Redirection Server Usage Event-level NUM output-device Logging media Example 2 Unsuccessful software download Using copy-TFTP flash def-redirection-page commandCopy-TFTP flash def-redirection-page IP address File name Parameter sysLog server IP Using sysLog-server-ip commandRDSHost sysLog-server-ip 192.168.1.8 cr Using show version command Show Commands Show configuration Using show configuration commandUsing show system command June 30 Appendix B Redirection Server Example Appendix B Redirection Server June 30 Example Using interface Ethernet command No interface Ethernet Interface number Hostconfig# no interface Ethernet 1 cr Using ip default-gateway command Default Gateway CommandsUsing no ip default-gateway command No ip default-gateway Format Using Reload CommandParameter non-graceful RDSHost RDSHost reload non-graceful Using write terminal command Write CommandsWrite terminal Using write memory command Using Poweroff CommandPoweroff Using access-list SNMP-permit command No access-list SNMP-permit IP address Using no access-list SNMP-permit commandUsing SNMP-server community command Appendix B Redirection Server June 30 Parameters IP address Http Commands Using Reset Configuration CommandReset configuration Using http-proxy-server port command Http-proxy-server port port number Using no http-proxy-server port commandParameter port number No http-proxy-server port port number Name Server Using ip primary-name-server commandIp primary-name-server IP address RDSHost write terminal cr Ip dns server RDSHostconfig ip remote-proxy192.168.1.4 8080 cr Using ip remote-proxy commandUsing no ip remote-proxy command RDSHost write terminal cr Ip remote-proxy 192.168.1.4 RDSHostconfig hostname rdstest cr RDSHost write terminal cr Using Hostname CommandHostname rdstest Eds-url-identity eds url name No eds-url-identity Using remote-ip-in-ip commandRemote-ip-in-ip IP address No remote-ip-in-ip IP address Using no remote-ip-in-ip command Using show users command Show User CommandsUsing show proc command Using show memory command Using Rest WEB Command Using Debug Protocol CommandReset web Show cpu RDSHostADC date 180730 10/02/2002 cr Using Date Command Systems Integration Sales AssistanceADC Technical Assistance Center 800.366.3891 Appendix C Product Support June 30 SG1-UM-8500-03 SG1-UM-8500-03 GL-1 Glossary Glossary June 30 GL-2 SG1-UM-8500-03 Certification and Warranty For Technical Assistance World Headquarters