SSL Counter Enhancement, Show ssl counters

158

SSL Counter Enhancement

Release Note

SSL Counter Enhancement

New counters have been added to the show ssl counters command.

Command Changes

The following table summarises the modified command:

CommandChange

show ssl counters	New badSessionIdLen fields.

Command Reference Updates

This section describes the changed portions of the modified command and output screens. For modified commands and output, new parameters, options and fields are shown in bold.

show ssl counters

Syntax SHow SSL COUnters

Description The new badSessionIdLen fields display counts of hello messages with session ID lengths greater than 32 bytes received by the SSL client and server.

Software Version 2.8.1 C613-10477-00 REV B

Page 158

Image 158

Allied Telesis AT-9800, RAPIER I, X900-48FE, AT-8900 SSL Counter Enhancement, Show ssl counters, New badSessionIdLen fields

Contents

Software Version Release Note Release Note Software Version Product series Models IntroductionIntroduction Product name Release file GUI resource file CLI help file Backwards Compatibility Issue when UpgradingUpgrading to Software Version Quickly Overview of New FeaturesOverview of New Features Software Version AR400 AR7x5 AR750S Rapier AT-8800 AT-8600 AT-9800 AT-8900 X900-48FE AT-9900 AR400 AR7x5 AR750S Rapier AT-8800 Snmp MIBs Restart Log Clearing System Parameters Command ChangesSystem Enhancements Extended Monitoring of CPU Utilisation Reset cpu utilisation Disable cpu extendedEnable cpu extended Activate cpu extended Enable cpu extended Command Reference UpdatesDisable cpu extended Activate cpu extended Set system location Reset cpu utilisationSet system contact Set system name Example output from the show cpu extended command Show cpu Parameter Meaning More flexibility in Separating Parameters and Values Command Line Interface CLI EnhancementsParts of a Command Command Create config Additional Shortcuts when EditingShow command history Parameter Description Create configCommand Line Interface CLI Enhancements Set command assignmentoperator Show command history Example output from the show command history command File System Enhancement Add file Create file File System Enhancement Show file permanentredirect Reset file permanentredirectFile size Default 204 800 bytes Software Version Parameter Description Example output from the show file permanentredirect command File System Enhancement Release Note Switching Enhancements Ordering Hardware Filters in 48-Port Switches Set switch hwfilter mode New command Switching EnhancementsCommandChange Show switch hwfilter New mode parameter in output PortDisable Limiting Rapid MAC Movement Set switch port Create switch trunkEnable switch port vlan Set switch thrashlimit New command Route Update Queue LengthSet switch hwrouteupdate Changed description parameter Removing a Description from a Switch PortSecuring a Single Vlan through Switch Filters Configuring vlansecure Show switch debug Change of Debug Command SyntaxEthernet Protection Switching Ring Epsr New DEV option in output Create switch trunk Disable switch port vlan Disable switch debugDisable switch filter vlansecure Debugging occurs on operations related to the switch chip Enable switch port vlan Enable switch debugEnable switch filter vlansecure Set lacp Set switch hwfilter mode Set switch hwrouteupdate Set switch port Set switch thrashlimit Set switch trunk Address learn thrash timeout ... second Example output from the show lacp commandAddress learn thrash action ..... Learn Disable Show lacp Show switch Switching Enhancements ARL, DMA, DEV, PHY, or None Show switch debugWhether the debugging option for the router or switch is New parameter in output of the show switch filter command Show switch filterShow switch hwfilter VlanSecure Meaning Show switch portNew parameters in output of the show switch port command Mode Thrashaction is set to none PPPoE Access Concentrator Add ppp acservice PPPoE Access Concentrator Delete ppp acserviceSet ppp acservice Eth0 New parameter in output of the show ppp pppoe commandShow ppp pppoe Interface Disable mstp port Disable mstp portEnable mstp port Enable mstp port Show stp port STP EnhancementShow stp port New Port field in output Set asyn Asynchronous Port EnhancementMaking Asynchronous Ports Respond More Quickly Show asyn Set asyn Show asyn Asynchronous Port Enhancement Release Note Ten timer value 100Ten timer value Which characters are bundled Igmp Proxy on x900 Series Switches Internet Group Management Protocol Igmp Enhancements Multicast group GroupDownstream interfaces have members Downstream interface Set ip interface Igmp filtering extended to all Igmp message typesAdd ip interface Set ip igmp interface Set igmp filter Internet Group Management Protocol Igmp EnhancementsAdd igmp filter Show igmp filter Monitoring reception of Igmp general query messages Add igmp filter MSGType=QUEryREPortLEAVe Add ip interface Set igmp filter Set ip igmp interface Set ip interface Passed Show igmp filterLeaves Is attached to Recd Attached to Show ip igmp Upstream General Query Reception Timeout .... NoneNew parameters in the output of the show ip igmp command An Snmp trap are generated Expanded number of Eth interfaces per physical interface Expanded IP TroubleshootingInternet Protocol IP Enhancements IP Route Preference Options IPv4 Filter Expansion Assigning the Filter Type Enhancements to Display of UDP Connections over IPv4 Waiting for a Response to an ARP Request Adding Static ARP Entries with Multicast MAC Addresses Set ip arpwaittimeoutNew Arp wait timeout field Show ip New IP/MAC address disparity parameter Disable ip macdisparityEnable ip macdisparity Add ip filter Syntax Traffic filter Disable ip macdisparity Set ip arpwaittimeout Enable ip macdisparityReset ip counter Set ip filter Set ip route preference With multicast MAC addresses. One of Enabled or Arp wait timeout SecsModified parameters on output of the show ip command Show ip Show ip cache Internet Protocol IP Enhancements Release Note Count Number of times the entry was found When the entry is usedShow ip counter Show ip filter Show ip udp Generation/reception of logs using the Secure Router Log UDP on the router or switchTime synchronisation using the Network Time Protocol Generation/reception of logs using the Net Manage protocol Display of UDP Connections over IPv6 Show ipv6 udp New commandIPv6 Enhancements IPv6 Tunnel Expansion Show ipv6 udp L2TP Enhancements L2TP Enhancements Proxyauth=offon Resetting General L2TP CountersHandling PPP Link Negotiation Failures Disable l2tp debug Add l2tp ip Enable l2tp debug Reset l2tp counter Show l2tp tunnel Proxy AuthenticationShow l2tp ip Decode Show l2tp tunnel call Syntax SHow L2TP TUNnel CALL=1..65535 Nssa Translator Role Ospf Interface PasswordOpen Shortest Path First Enhancements Add ospf interface Show ospf area Add ospf areaSet ospf area Redistributing External Routes Interaction with global Ospf parameters Ospf backward compatibility Add ospf redistribute Disable ospf debugEnable ospf debug Delete ospf redistribute Add ospf area NSSAStability=1..3600 NSSATranslator=CANdidateALWays Add ospf interface Add ospf redistribute Delete ospf redistribute Disable ospf debugEnable ospf debug Set ospf BGPImport=ONOFFTrueFalseYESNO Set ospf area Set ospf interface Set ospf redistribute Stability Interval State Show ospf areaRole Show ospf redistribute Software Version 101 Upper and Lower Thresholds BGP EnhancementsBGP Backoff Lower Threshold BGP Enhancements Enable and Disable Backoff BGP Peer and Peer Template Enhancements Displaying Information about Routes from a Peer Displaying Routes Learned from a Specific BGP PeerDisplaying the Number of Routes from a Peer Add bgp peer Software Version 105 Disable bgp backoff Add bgp peertemplate Software Version 107 Enable bgp backoffSet bgp backoff BACkoff Set bgp peer Set bgp peertemplate Software Version 109 Mem Upper Threshold Value 95% Mem Upper Notify Show bgp backoffBGP Enhancements Release Note Mem Lower Threshold Value 90% Mem Lower Notify Routes learned Show bgp peerShow bgp route Icmp type for MLDv2 Reports MLD and MLD Snooping EnhancementsMLD Packet Formats MLD and MLD Snooping Enhancements Software Version 113 MLD Snooping Group Membership DisplayChange of Maximum Query Response Interval for Show mldsnooping More consistent output Enable ipv6 mld interface Set ipv6 mld Software Version 115 Show ipv6 mldShow mldsnooping V2 Draft Compatible Previous example output from the show mldsnooping command MLD and MLD Snooping EnhancementsRelease Note Set classifier Extension to Range of Classifier fields for x900 SwitchesCreate classifier Show classifier Extension to Range of Classifier fields for x900 Switches Create classifier Software Version 119 Set classifier Show classifier Software Version 121 Icmp type TCP FlagsIcmp code Igmp type 0x17 V2LEAVE Format Classifier Rules 2222 MAC Address Aa-bb-cc-dd-ee-ff TypeVlan1234 Protocol 1234567890 Layer 3 Byte Offset Value Mask TCP Flags Igmp TypeParameter option in brackets if available One of URG, ACK, RST, SYN, or FIN Software Version 125 QoS EnhancementsPort Groups Storm protection Set qos trafficclass Set qos policyCreate qos trafficclass Show qos trafficclass Add qos portgroup port Create qos policy Default portdisable With the enable switch port command Create qos trafficclass Protection is enabledCreate qos portgroup Storm protection is inactive Enable switch port vlan command Is matching STORMTimeoutWith the enable switch port command, or STORMRate Destroy qos portgroup POrt Port to delete from this port group Default no defaultDelete qos portgroup port Specific port that consists Software Version 133 Reset qos portgroup countersSet qos policy Set qos portgroup Uses Kbps. If you specify Mbps or Gbps, the rate Set qos trafficclass Software Version 135 Parameter Description Show qos policy With the enable switch port or enable switchIs disabled by storm protection QoS Enhancements Release Note Parameter Description Ports Assigned to Port Groups Assigned to 213-24 Rate 1kbps Window 100ms Timeout NoneShow qos port Storm Protection Status Port Group Trunk Group None Show qos portgroupQoS EnhancementsRelease Note Software Version 139 Parameters in output of the show qos portgroup commandShow qos portgroup counters Integer from 1 to 140 Storm Protection Show qos trafficclassNumber of bytes that conforms with band with class Configuring the Client Configuring Secure CopyConfiguring the Server Secure Copy SCP Managing Secure Copy Sessions Configuring UsersUse the show ssh session command to see current sessions Software Version 143 Loading using Secure Copy Loading Files to the Switch Loading Files from a Remote Machine Uploading using Secure CopyUploading from the Switch Software Version 145 Set loader Uploading Files from a Remote MachineLoad Show loader Delete ssh session Disable ssh debugDisable ssh server Software Version 147 Whether the SSH server supports SCP connections Enable ssh debugEnable ssh server Load Software Version 149 Set loader Copy is the default method for loading and uploadingDefault tftp Set ssh client Software Version 151 192.168.1.1 Set ssh serverShow loader Alice Software Version 153 SSH Server Enabled SCP ServiceShow ssh Debug Reset loader command Show ssh counter Parameter Meaning WriteFileFailed Show ssh sessionSoftware Version 155 Failure Secure Copy SCP Release Note Parameter Meaning Secure Shell Session Characters long UploadSoftware Version 157 SSL Counter Enhancement SSL Counter EnhancementShow ssl counters Show ssl counters Session ID longer than 32 bytes Software Version 159BadSessionIdLen Client Counters for the SSL client BadSessionIdLen Disabling SIP ALG Call ID Translation Firewall EnhancementsFirewall Licencing Firewall Enhancements Firewall Policy Rules Expansion Set firewall sipalg New commandDisplaying SIP ALG Session Details Software Version 161 Set firewall sipalg Reset firewall sipalg counterDisplaying a Subset of Policy Rules Show firewall policy Show firewall Show firewall policy Show firewall sipalg Valid with the ip or summary commandsIp or callid commands CALLId Within the private network protected by the firewall Parameters in output of the show firewall sipalg commandService Active SIP Sessions Gbl IP Router or switch. The router or switch only translates IPFirewall Enhancements Release Note Seen on the public side of the firewall Show firewall sipalg counter Start up or reset Current sessions Audio sessions createdSince start up or reset Past sessions Current SIP sessions Total number of SIP messages received that the SIP ALG Them Software Version 169 Enhancements to IPsec/VPNResponding to IPsec Packets from an Unknown Tunnel Modifying the Message Retransmission Delay Retrying Isakmp Phase 1 and 2 Negotiations New retryIkeAttemptsPh1 and retryIkeAttemptsPh2 VPN Tunnel LicencingNew retryikeattempts parameter New usePolIkeRetryGood and usePolIkeRetryFailed Create ipsec policy Software Version 173 Create isakmp policy Default incrementalMsgtimeout value Msgbackoff parameter Attempted over new Isakmp SAs After the first 16 attempts, a five minute delayRETRYIKEattempts Occurs between attempts Set ipsec policy Set isakmp policy Software Version 177 Parameter Meaning VPNs Show ipsecVPNs Maximum Current Peak Respond Bad SPI Show ipsec policySoftware Version 179 Respond Bad SPI InBadSpiResponse Show ipsec policy counterInBadSpiResponse To true and packets processed by that policy have an RetryIkeAttemptsPh1 RetryIkeAttemptsPh2 Show isakmp countersSoftware Version 181 UsePolIkeRetryGood UsePolIkeRetryFailed Message Back-off Incremental Show isakmp exchangeSoftware Version 183 Same None Iskamp policy command Show isakmp policy Message Back-off None Show isakmp saSoftware Version 185 Snmp MIBs Snmp MIBsShdsl Line MIB Usage Logging Snmp operationSnmp request not processed due to excessive memory Traps on Ospf state changes Snmp Trap not sent due to excessive memory usage Software Version 189 Trap on Vrrp topology changesTraps on Mstp state and topology changes VLAN-based port state changes Trap on Login FailuresRestart Log Show buffer Trap on Memory LevelsSoftware Version 191 New Buffer level 0 field Buffer level 1500 New parameters in output of the show buffer commandShow buffer Parameter Meaning Buffer level n CDP over WAN Interfaces Enable lldp cdp debug Disable lldp cdp interfaceDisable lldp cdp ppptemplate CDP over WAN Interfaces Enables debugging of PPP events Enable lldp cdp interfaceEnable lldp cdp ppptemplate Software Version 195 Show lldp cdp interface PPP Templates Enabled PPP Templates DisabledShow lldp cdp Ppp0 Ppp1 Permanent Assignments on AR400 Series Routers Software Version 197Page Introduction to Ethernet Protection Switching Ring Epsr Chapter Introduction to Ethernet Protection Switching Ring Epsr Epsr Instances and Domains Data Vlan Ethernet Protection Switching Ring EpsrControl Vlan Master Node Transit Node Unsolicited Fault Detection Fault Detection and RecoveryMaster Node Polling Fault Detection Fault Recovery Procedure Restoring Normal Operation Configuring Epsr Epsr Single Domain, Single Ring Network Example script for a 4 node ring network # For Transit Nodes 1, 2 Single Ring, Dual Domain Network Example script for a Single Ring, Two Domain Network Node # Node 1 Master node for RingA Transit Node for RingB Example script for a Single Ring, Two Domain Network Nodes 2 # Node 3 Transit node for RingA Master Node for RingB Epsr and Spanning Tree Operation # For Transit Node Command Reference # For Transit Nodes 2 Add epsr datavlan Add epsr datavlan Ethernet Protection Switching Ring Epsr Create epsr Create epsr Default 1s FAilovertime Only configured for the master nodeSeconds 32767s. Only configured for the master node Default 2s RIngflaptime Unique name for the VLAN. This can be from 1 to Delete epsr datavlanHyphen character -. The epsr-name cannot be ALL Vlan-name cannot be a number or ALL Destroy epsr Destroy epsr Epsr instance to be disabled Disable epsrEthernet Protection Switching Ring Epsr Disable epsr String, 1 to 15 characters long. Valid characters are Disable epsr debug Disable epsr debug Epsr instance to be enabled Enable epsrEthernet Protection Switching Ring Epsr Enable epsr Epsr instance whose debugging is to be enabled Enable epsr debugEnable epsr debug OUTput Ethernet Protection Switching Ring Epsr Purge epsr Purge epsr Set epsr Set epsr Epsr to be set for the port Ethernet Protection Switching Ring Epsr Set epsr portSet epsr port VLANs within the ring domain Epsr instance whose details are displayed Show epsrShow epsr Ethernet Protection Switching Ring Epsr Show epsr Shown for a transit node Disabled. This parameter is only shown for a transit nodeSecond Port Second Port Status COUnter Ethernet Protection Switching Ring Epsr Show epsr counterShow epsr counter Epsr instances Related Commands show epsr Show epsr debug Show epsr debug

Allied Telesis AT-9800 SSL Counter Enhancement, Show ssl counters, New badSessionIdLen fields

Models: AT-9900 AT-8700XL AT-9800 AT-8600 RAPIER I AT-8800 AT-8900 X900-48FE

SSL Counter Enhancement

SSL Counter Enhancement

Command Changes

CommandChange

show ssl counters

New badSessionIdLen fields.

Command Reference Updates

show ssl counters