Adc-avpair = routeforward-addr=IP address

Appendix A: SG-1Vendor-Specific Attributes

June 30, 2006

General:

Operation Mode:	Access-Accept message
	Service-Accept message
Vendor-type:	74
Vendor-length =	2 + 7-15 + attribute length

Format:

adc-avpair = "route:forward-addr=<IP address>",

Example:

adc-avpair = "route:forward-addr=192.168.1.4”

A-28	SG1-UM-8500-03

Page 186

Image 186

ADC SG-1 user manual Adc-avpair = routeforward-addr=IP address, Adc-avpair = routeforward-addr=192.168.1.4

Contents

SG-1 Service Gateway System Revision History Table of Contents Table of ContentsJune 30 SG1-UM-8500-03 June 30, 2006Table of Contents Appendix B Redirection Server Table of Contents June 30 SG1-UM-8500-03 List of Figures SG1-UM-8500-03 Vii List of Figures June 30 Viii SG1-UM-8500-03 List of Tables List of Tables June 30 SG1-UM-8500-03 Intended Audience IntroductionOrganization Chapter Description Inspecting Your Shipment ConventionsEU Compliance Element Meaning Features Chapter Site Preparations Method of ProcedureBefore YOU Begin Overview June 30 Unpacking and Checking the Contents of Your Shipment System Installation Notes Packing ListNumber Specific SG-1 Chassis Installation Requirements Required Tools and EquipmentLocation Requirements Environmental Requirements Power RequirementsBlank Faceplate Requirement System Cabling Requirements Chassis Ground and Power Cabling Configuration Port CablingNetwork Cabling Overview June 30 SG1-UM-8500-03 Connecting the SG-1 Chassis Ground Connecting the Power SourceMounting the SG-1 Chassis Connecting AC Power to an SG-1 AC Chassis Installing Interface CablesInstallation June 30 Connecting Network Cards June 30 Installation Straight-Through and Cross-Over Cable Pin-Outs Installing Cards and Blank Faceplates Connecting the Craft Port InterfacePowering UP the SG-1 Connecting to an Ethernet Port Installing Blank Faceplates Serial Cable Installation June 30 SG1-UM-8500-03 SG-1 Sub-Menus and Associated Commands Types of Commands OverviewUnderstanding the Interface Structure General Commands Enter the following command Commands and NavigationMenu Types of Commands Command Path Navigation COMMAND-LINE Editing June 30 Command-Line Interface CLINavigation Commands Use This Feature Command-Line Interface CLI June 30 SG1-UM-8500-03 Connecting to the Craft Port Default Username/Password AuthorityLogging on to the Craft Port Host configure terminal Hostconfig# interface ethernet Setting the IP AddressAccessing the Command Line Interface June 30 Write memory Interface Identification Card/Type Slot/Port Ethernet ModeParameters Value Explanation Host show configuration Displaying the IP Address Logging on Configuring the SG-1\users\defaulttelnet Logging OFF Using the Command Line Interface June 30 What to do Next FIRST-LEVEL Commands Using the ? command Using the Grep commandSystem-command grep string Showing a List of Available Parameters June 30 First-Level Commands Examples Using the show ? commandHost show ? Show version softwarehardwarepack Using the show version commandHost show version Show version software SCC Show version hardware Host show version Software Module Num Application 650003 8200935 Host Displaying the configuration in Nvram Show configuration June 30, 2006Chapter 6 First-Level Commands Examples Ip local-pool pool1 162.10.1.1 162.10.1.254 internal Ip domain-name POPmaestro Displaying Ethernet Port Statistics Displaying Ethernet port configurationsHost show terminal Host show ethernet 0 \ First-Level Commands June 30 Examples Show port sonet Displaying Sonet port statusHost show port sonet Host show port sonet Displaying ATM Port Status Host show atm pvcShow atm pvc Show crnumber Displaying User StatusHost show user Number First-Level Commands June 30 Host show ip-route Displaying System AdministratorsDisplaying Routing Tables Show ip-route Show system Show system load Displaying System ParametersHost show system Load June 30 First-Level Commands Displaying License Attributes Host show licenseShow license DATE=December 22 2005 160357 Version SN1=6046838 First-Level Commands June 30 Displaying Vrrp attributes Host show vrrp interfaceEthernetvlan Displaying active GRE and IP-in-IP tunnels Host show ip-tunnel 10.10.1.20 Displaying show mpls-labels commands Host show mpls-labels 0xc2010000 123876 192.0.1.8 Host show labels vcVC Type Group ID Label Tunnel Endpoint Upper stack FEC ID 0xc2010001 1034 212.1.3.4 Host show mpls l2transport vc Displaying show mpls l2transport vc commandsDisplaying a list of available write commands Host write ? June 30 First-Level Commands Examples Using the copy-TFTP command Using the ping command to test network connectivityHost copy-TFTP flash Atm atm port number AtmAtm slot number Atm sub-interface number Host reload non-graceful Using the reload command to restart the systemHost reload non-graceful Resetting the system in 10 seconds Reload non-graceful Clear user line number Clearing UsersHost clear user Line number Traceroute ip address -h number -i seconds Using the Traceroute CommandHost traceroute Seconds Using the exit command Exit Using Debug Mode Switching to Debug ModeHost debug Show memory system log-modules statistics arp Using the show command in debug modeHostdebug# show System First-Level Commands June 30 Examples Group Error Event Trace Name Min Max Module Group Error Event Event Trace Name Min Max Show arp command Clear arp command Clear arp arp-specific ifindexNetAddress Parameters Show memory Defining the Sonet port source clock Defining port-ethernet redundancy-mode commandHostdebug# port-ethernet redundancy-mode Hostdebug# port sonet source-clock Hostdebug# radius-server check Radius-server check user-name password auth-type PAPChecking the system Radius interface User-name First-Level Commands June 30 SG1-UM-8500-03 Second Level Commands Using the configure command Second Level Commands June 30 Examples Banner Command Ethernet CommandsHostconfig# banner command Second Level Commands June 30 Ethernet modeConfigure Ethernet Ports Card Type Slot\Port Hostconfig# no interface Ethernet 0\1 Ethernet Operating ModeHostconfig# no interface Ethernet No interface Ethernet slot number\port number Configuring Ethernet Redundancy Using the port-ethernet redundancy-enable commandHostconfig# port-ethernet redundancy-enable Hostconfig# no port-ethernet redundancy-enable June 30 Second Level Commands ExamplesUsing the no port-ethernet redundancy-enable command Hostconfig# no port-ethernet redundancy-enable 1\1 1\2 Hostconfig# interface loopback Loopback CommandsConfiguring interface loopback Interface loopback interface number IP address mask Configuring the Vlan Vlan CommandsHostconfig# no interface loopback Hostconfig# interface vlan Second Level Commands June 30 Usage Vlan idVlan name Using the password pre-authentication command Authentication CommandsHostconfig# no interface vlan Hostconfig# password pre-authentication Def-service-auth command parameters Setting the default-service authentication modeHostconfig# def-service-auth Hostconfig# def-service-auth ppp-auto Domain-authentication separator @# then press Enter Changing domain authentication settingsHostconfig# domain-authentication No domain-authentication then press Enter Hostconfig# no authentication web-auth-method ATM CommandsSecond Level Commands June 30 Example Using the port sonet command Configuring SONET/SDH port redundancy Hostconfig# port sonet redundancy-enable Hostconfig# interface Using the pppoa enable command Hostconfig# pppoa enable interface HostConfig# no pppoa enable interface Using the interface atm commandHostconfig# interface atm Interface atm command parameters Hostconfig# no interface atmParameter Description Legal values/range Vpi Configuring a single PVCHostconfig# atm pvc Vci Configuring a range of PVC’s Hostconfig# atm pvc range Configuring the Radius server host Configuring the Radius server in the SG-1 configurationHostconfig# radius-server Hostconfig# radius-server host Configuring the Radius proxy for native IP Hostconfig# radius-proxy clientRadius-proxy client parameters Parameter Description Values Service cache offon aging-time minutes Using the service cache commandHostconfig# service cache Using the ip radius source-interface command Hostconfig# access list Access List CommandsHostconfig# no ip radius source-interface No ip radius source-interface Hostcongfig# access-list native-ip Hostconfig# access-list SNMP-permit 25.3.2.251Using the access-list native-ip command Access-listnative-ipsource ip address source mask Using the access-list native-ip-pass-through command Hostcongfig# no access-list native-ipNo access-list native-ip source ip address Hostcongfig# access-list native-ip-pass-through No access-list native-ip-pass-through source ip address Snmp CommandsHostcongfig# no access-list native-ip-pass-through Using the SNMP-server community Using the SNMP-server trap-source-int Hostconfig# SNMP-server trap-source-int Tunnel Commands Hostconfig# interface tunnel Setting the no interface tunnel command Hostconfig# no interface tunnelNo interface tunnel interface number Ip tunnel echo echo source IP address Using the ip tunnel echo commandHostconfig# ip tunnel echo Echo source ip address Setting the Idle-Timeout Timeouts CommandsSetting the Session-Timeout Idle-timeout command Hostconfig# native-ip def-service-auth Native IP CommandsHostconfig# native-ip dhcp pre-auth-mode Native-ip def-service-auth service name Using the native-ip enable command Hostconfig# native-ip enable interface Using the no native-ip enable command Hostconfig# no native-ip enable interfaceHostconfig# no native-ip enable Vlan 1\1\9 Hostconfig# native-ip raoming Hostconfig# native-ip realmHostconfig# no native-ip realm Native-ip realm realm string Hostconfig# no native-ip roaming No native-ip roaming Ip tcp adjust-mss on off Using the ip tcp adjust-mss commandHostconfig# ip tcp adjust-mss Hostconfig# ip tcp adjust-mss on L2TP and PPP Commands Hostconfig# tunnel-server Hostconfig# ip primary-name-serverHostconfig# ip secondary-name-server Ip primary-name-server IP address Hostconfig# ip local-pool Setting multi-link modeHostconfig# multilink-mode Defining an address pool Using the lcp renegotiate command Hostconfig# lcp renegotiateLcp renegotiate or no lcp renegotiate Using the lcp echo command Hostconfig# lcp echo Using the service internal command Hostconfig# service internal Usage Scenarios SG-1 as xDSL aggregator using ATM network PPPoE support Using the no pppoe enable command Using the pppoe enable commandHostconfig# pppoe enable interface Hostconfig# no pppoe enable interface Hostconfig# ip dhcp relay server Dhcp CommandsUsing the ip dhcp relay server command Using the no ip dhcp relay server command Hostconfig# ip dhcp relay information option Using the no ip dhcp relay information option commandHostconfig# no ip dhcp relay information option Hostconfig# ip dhcp relay agent-id-overwrite interface Hostconfig# ip dhcp relay advertise-protocolIp dhcp relay advertise-protocol rip ospf Hostconfig# ip igmp proxy upstream-interface Igmp CommandsUsing the ip igmp proxy command Using the no ip igmp proxy command Ip forward Hostconfig# no ip forward Routing CommandHostconfig# ip forward Hostconfig# ip route Tunnel interface ip Route network 192.168.4.0 to Loopback interface Hostconfig# ip default-gateway Hostconfig# no ip routeUsing the ip default-gateway command Hostconfig# no ip default-gateway Hostconfig# router No ip default-gatewayUsing the router command Using the router id command Ip rip authentication key key name Hostconfig# no routerHostconfig# ip rip authentication key Hostconfig# ip ospf interface ... area Hostconfig# ip ospf interface ... hello-interval Hostconfig# no ip ospf interfaceUsing the ip ospf interface hello-interval command Hostconfig# no ip ospf interface ... hello-interval Hostconfig# no ip ospf interface ... dead-interval Using the ip ospf interface dead-interval commandHostconfig# ip ospf interface ... dead-interval Using the ip ospf interface authentication command Hostconfig# no ip ospf interface ... authentication-key Using the ip ospf interface authentication-key commandHostconfig# ip ospf interface ... authentication-key Simple-pass message-digest null Using the no ip ospf interface message-digest-key command Using the ip ospf interface message-digest-key commandHostconfig# no ip ospf interface ... message-digest-key Keyid Hostconfig# ip ospf advertise network Hostconfig# ip ospf areaHostconfig# no ip ospf area ... stub No ip ospf area area-idstub Hostconfig# mpls ip interface Hostconfig# no ip ospf advertise networkUsing the mpls ip interface command Hostconfig# no mpls ip interface Hostconfig# no mpls ip Ethernet 0\1 Using the mpls l2transport interface commandHostconfig# mpls l2transport interface Using mpls l2transport route command Hostconfig# no mpls l2transport interfaceHostconfig# no mpls l2transport interface 194.90.1.4 Hostconfig# mpls l2transport route interface Using the no mpls l2transport route command Hostconfig# no mpls l2transport route interface Hostconfig# no mpls ip default-route Hostconfig# mpls ip default-routeMpls ip default-route No mpls ip default-route Priority value 17. vrrp command parametersEthernet Vlan On off June 30 Second Level Commands Example 1 SCC1 configuration Hostconfig# no vrrp interface Ethernet 0\1 Second Level Commands June 30 Using the no vrrp commandHostconfig# no vrrp interface Using the vrrp preempt command Configure watchdog Debug CommandsHostconfig# vrrp preempt interface Vlan 1\2 7 enable Config-debug# watchdog-TimeValue Configure error level commands Configure time serverConfig-debug# time-server-ip Config-debug# error-level June 30 Second Level Commands Example Set-all Debug modules Vrrp Mpls Debug groups Trace commands Config-debug# trace Config-debug# exit ConfigureConfig-debug# sysLog-server-ip Example Config-debug# exit cr Host Example Config-debug# end cr config# SG1-UM-8500-03 Attribute Vendor-Specific Attributes TableTable A-1. Vendor-Specific Attribute List First Num Attribute Name Group Introduced Description Appendix a SG-1Vendor-Specific Attributes June 30 June 30 Appendix a SG-1Vendor-Specific Attributes Radius Appendix a SG-1Vendor-Specific Attributes June 30 June 30 Appendix a SG-1Vendor-Specific Attributes User Group Hierarchical Attribute ModeAuthentication Response Type Accounting Behavior Useraccounting sub-attribute Scenario Action Radius definition Accounting Behavior Useraccounting=disableUseraccounting=enable General Adc-avpair = userorig-name=test Userorig-name sub-attributeAdc-avpair = userorig-name=original user name Userauth-type sub-attribute June 30 Appendix a SG-1Vendor-Specific Attributes General Adc-avpair = userauth-type=pre-authUseraction sub-attribute User SSC-host sub-attribute User service-name sub-attributeAdc-avpair = useraction=Reject Adc-avpair = userSSC-host=SSC host IP address Adc-avpair = userservice-name=service name Adc-avpair = userservice-name=SRV1Userpersonal-site sub-attribute Adc-avpair = usermac-address=00022d386dbe Adc-avpair = userpersonal-site=site URLAdc-avpair = usermac-address=User MAC address Adc-avpair = usergroup=group number Userclass sub-attribute Usermax-allowed-sessions sub-attributeAdc-avpair = usermax-allowed-sessions=1 Adc-avpair = userclass=user class data Adc-avpair = usereds-cookie=user eds cookie Adc-avpair = usereds-enc-key=EDS encryption keyAdc-avpair = usereds-enc-key=02f804fea90102f8 Adc-avpair = usereds-cookie=rt123456 Useroriginal-url-prefix sub-attribute Adc-avpair = useroriginal-url-prefix=prefixed stringAdc-avpair = useroriginal-url-prefix=?url= Adc-avpair = dhcpdhcp-server=DHCP Server IP Dhcp GroupDhcpdhcp-server sub-attribute Adc-avpair = dhcpdhcp-server=194.90.1.5 Dhcpopt82-relay-remote-id sub-attribute Adc-avpair = dhcpdiscover-action=normal updateAdc-avpair = dhcpdiscover-action=update Adc-avpair = dhcpopt82-relay-remote-id=01844400660300 Adc-avpair = serviceservice-timeout=500 Service GroupAdc-avpair = serviceservice-timeout=timeout in seconds Protocol Group Adc-avpair = serviceauto-service-name=service name Adc-avpair = servicenext-service-name=service nameAdc-avpair = servicenext-service-name=SRV12 Adc-avpair = serviceauto-service-name=SRV12 Adc-avpair = serviceauth-source=CLI Serviceauth-sourceAdc-avpair = serviceauth-source=service user CLI Servicedata-quota Adc-avpair = servicedata-quota-used=5000000 Adc-avpair = servicedata-quota=5000000Servicedata-quota-used Serviceacl-data-quota Adc-avpair = serviceservice-cache=off Adc-avpair = serviceacl-data-quota=1015000000Serviceservice-cache Serviceacl-data-quota-used Adc-avpair = serviceacl-data-quota-used=video5000000 Serviceacl-packet-quota ADC-avpair = serviceacl-packet-quota=mail100300 Serviceacl-packet-quota-used Adc-avpair = serviceacl-packet-quota-used=mail100245 ServiceroamingAdc-avpair = serviceroaming=disable Route Group Adc-avpair = routenext-hop=Next-hopIP addressAdc-avpair = routenext-hop=192.168.1.23 Adc-avpair = routeadvertise-protocol=ripv2 ospf Adc-avpair = routenip-pipe-next-hop=Next-hop IP addressAdc-avpair = routenip-pipe-next-hop=192.168.1.23 Adc-avpair = routeadvertise-protocol=ospf Adc-avpair = routeforward-addr=IP address Adc-avpair = routeforward-addr=192.168.1.4 Vpdn Group Adc-avpair = vpdntunnel-id=usernameAdc-avpair = vpdntunnel-id=test Adc-avpair = vpdnip-address=x.x.x.x Adc-avpair = vpdnl2tp-tunnel-password=passwordAdc-avpair = vpdnl2tp-tunnel-password=test Adc-avpair = vpdnip-address=192.168.4.3 Vpdntunnel-client-ip-address Vpdnip-tunnel sub attribute Vpdnnativeip sub-attributeGcon-avpair = vpdnnativeip=ppp Adc-avpair = vpdnip-tunnel=gre192.168.1.34 QOS Group Gcon-avpair = qosup-mean-rate=up mean rate in KbitsGcon-avpair = qosup-mean-rate=128 Qosacl-down-mean-rate sub attribute Adc-avpair = qoscos=access-list nameCOS valueAdc-avpair = qosacl-up-mean-rate=acl1128 Adc-avpair = qosacl-down-mean-rate=acl1256 Qosacl-priority sub attribute Adc-avpair = qosacl-priority=acl11 Adc-avpair = dnsip-primary=Primary DNS IP DNS GroupDnsip-primary Adc-avpair = dnsip-primary=194.90.1.5 Using password command Appendix B Default-redirection-site URL name Password user type passwordUsing default-redirection-site command RDSHost configure terminal cr Using orup-active command Orup CommandsUsing Orup Original Requested URL Prefix Using no orup-active command Service-name service name Service Name CommandsUsing service-name command No service-name June 30 Appendix B Redirection Server Usage Tftp CommandsUsing copy-TFTP command Event-level NUM output-device Logging media Using copy-TFTP flash def-redirection-page command Example 2 Unsuccessful software downloadCopy-TFTP flash def-redirection-page IP address File name Using sysLog-server-ip command Parameter sysLog server IPRDSHost sysLog-server-ip 192.168.1.8 cr Show Commands Using show version command Using show system command Using show configuration commandShow configuration June 30 Appendix B Redirection Server Example Using interface Ethernet command Appendix B Redirection Server June 30 Example Hostconfig# no interface Ethernet 1 cr No interface Ethernet Interface number Using no ip default-gateway command Default Gateway CommandsUsing ip default-gateway command No ip default-gateway Parameter non-graceful Using Reload CommandFormat RDSHost RDSHost reload non-graceful Write Commands Using write terminal commandWrite terminal Poweroff Using Poweroff CommandUsing write memory command Using access-list SNMP-permit command Using SNMP-server community command Using no access-list SNMP-permit commandNo access-list SNMP-permit IP address Appendix B Redirection Server June 30 Parameters IP address Reset configuration Using Reset Configuration CommandHttp Commands Using http-proxy-server port command Parameter port number Using no http-proxy-server port commandHttp-proxy-server port port number No http-proxy-server port port number Ip primary-name-server IP address Using ip primary-name-server commandName Server RDSHost write terminal cr Ip dns server Using no ip remote-proxy command Using ip remote-proxy commandRDSHostconfig ip remote-proxy192.168.1.4 8080 cr RDSHost write terminal cr Ip remote-proxy 192.168.1.4 Hostname rdstest Using Hostname CommandRDSHostconfig hostname rdstest cr RDSHost write terminal cr Eds-url-identity eds url name Using remote-ip-in-ip command No eds-url-identityRemote-ip-in-ip IP address Using no remote-ip-in-ip command No remote-ip-in-ip IP address Using show proc command Show User CommandsUsing show users command Using show memory command Reset web Using Debug Protocol CommandUsing Rest WEB Command Show cpu Using Date Command RDSHostADC date 180730 10/02/2002 cr ADC Technical Assistance Center Sales AssistanceSystems Integration 800.366.3891 Appendix C Product Support June 30 SG1-UM-8500-03 Glossary SG1-UM-8500-03 GL-1 Glossary June 30 GL-2 SG1-UM-8500-03 Certification and Warranty World Headquarters For Technical Assistance

ADC SG-1 Adc-avpair = routeforward-addr=IP address, Adc-avpair = routeforward-addr=192.168.1.4

Models: SG-1

Appendix A: SG-1Vendor-Specific Attributes

General:

adc-avpair = "route:forward-addr=<IP address>",

adc-avpair = "route:forward-addr=192.168.1.4”

SG1-UM-8500-03