Aaa profile 2 newprof1 | Kentrox AI232 manual

AI232 Version 9.6x User’s Guide

AI232 Commands: aaa profile

Examples

This example associates privilege level 2 with profile newprof1:

[232]aaa profile 2 newprof1

This example associates privilege levels 3 to 6 and 14 with profile newprof2:

[232]aaa profile 3-6,14 newprof2

8-13

Image 185

Contents

AI232 Port High Speed Asynchronous Line Card User’s Guide Page About this Document Document Conventions Laser Danger Tip Ground Caution Proper Cooling Caution Electrostatic Discharge Caution FCC Warning Web Site Support Customer AssistanceEmail Support Phone Support Table of Contents System Configuration Link Configuration TID Multiplexing Diagnostics for TID Multiplexing TOC-5 Appendix a AI232 Crash Codes AI232 Commands AI232 Menu Aliases FTP Sessions Product Description Features System Diagnostics Standalone Configuration AI232 Hardware Components Ports 17-24 Connector Ports 25-32 ConnectorPorts 9-16 Connector Ports 1-8 Connector Component Description Technical Specifications Description Specification Specifications for DP232-19/23Distribution Panels Model DP232-19/23 DCD Pin Assignments Signal Model DP232-RJ45 Installation ProcedureConnect to the AI232 Ports Places Pin Signal Specifications for DP232-RJ45 Description Quantity Install the mounting flanges in the desired locationParts List Cable CAB467 Places DP232-RJ45 Asynchronous to TCP/IP Application Typical Applications Illustrates a modem multiplexer application Modem Multiplexer Application Using the AI198 Menu System Accessing the Menu System Menu Numbering Structure Navigating the Menu SystemTypes of Menu Items Submenus Menu re-appears with the entered IP address TogglesData Menu Item Description FunctionsMenu Item Descriptions Exiting the Menu System AI232 Local Menu System Radius Authentication Multilevel User Name and Password SecurityTACACS+ Authentication Identifying AI232 Menu System Security Options PPP Authentication Protocols PAP and Chap Logging Into AI232 Using a Telnet Connection for Login Consecutive failed login attempts Using an Asynchronous Port for Login Number of consecutive failed login attempts Accessing the Local Menu System Identifying Types of Menu Items Navigating the Local Menu SystemData Entry Items Direction Keys Toggle Items Send Accessing the Help Menu Save the changes Exiting the Local Menu System AI232 Version 9.6x User’s Guide System Configuration Destination Menu Break Sequence General System Properties ConfigurationDescription Format Menu Item Type Configuration in the AI198 Menu System Toggle for both menu items Ethernet Port SettingsConfiguration in the AI232 Local Menu System This menu item sets the FTP server port number FTP Port This example displays 16 FTP port number set to IP Settings Menu Item Types This item sets the system prompt value in the CLI Access the System MenuSystem Prompt To on TCP SettingsToggle This item sets the Telnet port value for AI232 Telnet Port This example displays Telnet Port set to Server Settings Radius Configuration Enabled Shell/FTP Options To configure the shell/FTP Radius option Access MenuFALLBACK. The default is Disabled Enabled TACACS+ Configuration Shell/FTP Options 00049 AI232 Local Menu Item Configuration Snmp ConfigurationAuthentication Traps Data for all menu items Community Names WriteComm Menu Following example displays Node Information Contact Persons Snmp Manager 10.65.32.4 IP Address Settings Static Route Configuration Following are available TID to Modem Mux ConfigurationInactivity Timeout Initialization String This example displays Inactivity Timeout set to Toggle for all menu items Port Bit SettingsThis example displays Init String set to conn23 TID to Route AI232 Local Menu Item Configuration Daylight Savings Time Time Configuration Access the Time Menu located under the System Menu Sntp SettingsSettings This following example displays Time Zone AI232 Version 9.6x User’s Guide Link Configuration AI232 Link Types AI232 has 3 configurable link typesAsynchronous Asynchronous PPP Modem Multiplexer Access Menu For 02 Alias, enter 2, and the alias name Connect Options ConfigurationAlias Link Type Availability This example displays 02 Alias set to async.4.1 Call Retry Interval This example displays 03 Call retry interval set to Connect String 00134 Connection settings are configured using three menu items Connection SettingsDefault is OFF Is on 00030 Link Application Login Disconnect inactivity timer when the link receives a call Disconnect Options ConfigurationDisconnect Inactivity Timer Settings Is Off Select on or OFF. The default is on This example displaysOff. The default is On This example displays Default is on Disconnect SettingsDisconnect settings are configured using two menu items Disconnect String Disconnect Async, AsyncPPP, and ModMux General Link Properties ConfigurationAuto Disable Error Limit Flow Control Link Description Access the Link MenuThis example displays SW Flow Control set to XonXoff This menu item defines a description for a link Link Number This example displays 01 Link number set to This menu item enables or disables a linkLink State Link Type This example displays Link state set to Disabled Async and AsyncPPP Port Data Bits This example displays Port data bits set to Seven Port Parity This example displays Port parity set to Odd Port SpeedThis menu item defines the baud rate for a port Data in the AI232 local menu system Menu 4.2.14.12.5 appears Port Stop Bits Xon Repeat Interval This example displays 10 Xon Repeat interval set to Ipcp Address Settings General PPP Properties ConfigurationFollowing menu items are available for PPP configuration AsyncPPP and ModMux Ipcp Address Parameters Set to Maximum Unit Settings For an Ipcp network control protocol Network Control Protocol Ipcp Modem String Modem Option Configuration Dialing Time-out Interval This example displays Dialing time-outset to Number of Dial Attempts This example displays Number of dial attempts set to Modem Setup Menu Local Authentication Settings PPP Authentication Configuration PAP RAS Option This example displays RAS Option set to RADIUS/Fallback Remote Authentication Settings Chap DTR State Configuration RTS/DTR Lead Control Configuration RTS State Configuration Flow Control DTR connect state Off DTR disconnect state TID Multiplexing Overview AI232 Version 9.6x User’s Guide Menu appears TID Multiplexing ConfigurationConfiguring the Parent Alias Values are 1 to Destination TidforAI232 Defines the terminal identifier for AI232 Configuring the Children Aliases During the parent alias configuration TIDtid Second child connection Example ConfigurationsFor Alias name, enter YES Alias Edit Menu Alias Name 172.16.30.61#6001 PARENT1.1 Alias Edit Menu Alias Name Parameters TID Multiplexing TroubleshootingNormal Response Format Response Item Description Normal Response Example Error Response Format Errcde Diagnostics for TID MultiplexingError Response Example AI232 Version 9.6x User’s Guide Alias and Call Routing Configuration Incoming Outgoing Asynchronous TCP/IP CallCall DownstreamAI232 Card B IP address Upstream AI232 Version 9.6x User’s Guide Call Routing Configuring an AliasConfiguring an Alias in the AI198 Menu System AI232 Version 9.6x User’s Guide AI232 Version 9.6x User’s Guide Configuring an Alias in the AI232 Menu System For Display Alias in Destination Menu, select Yes or No Source/Destination Protocol Tables Menu Item Information Source Destination Menu Item InformationSource TCP/IP Source With Telnet Breaks AI198 TCP/IP Source Without Telnet Breaks AI198Async with Async break Asynchronous Source With Breaks AI232 Asynchronous Source Without Breaks AI232Telnet break Example asy.3 TCP/IP Source Without Telnet Breaks AI232 TCP/IP Source With Telnet Breaks AI232 Module Types Protocol Processing Modules Return followed by a line feed Characters. The packet module accepts only one -S parameter To zero, this option is turned offSpecify up to 16 characters Seconds Provides TL1 packetizing and sets the packetizing timer toFeed and delete Provides TL1 packetizing and prevents breaks from passing Provides Telnet handling, but prevents breaks from being Echo 1 when the connection is initiated. Initiates will SGAPropagated upstream Echo and will SGA Alias Macro Components Start SymbolsAlias Macros Constants CommentsVariables Variable Value Operator Description Wildcard SymbolsOperators Alias Macro Function Description of Operation Greater than the length of string, the function Match any of the expressions, then default isReturns the entire string Returns the length of string Configuration Examples Alias Macro Configuration =LA,PA,’#’,1-1=MYIP1 AI232 Version 9.6x User’s Guide AI232 Commands Shell Commands Commands OverviewShell Connections Establishing a Local Shell Connection Establishing a Remote Shell Connection Winslc CommandsDisplaying winslc Command Logging Header Element Description Using winslc CommandsLog/Alarm Message Header Specifies the current date Introduces the log/alarm messageSpecifies the message severity level Specifies the line card baseport number Command Defaults Command TypeAaa account Formats Disables TACACS+ authentication Enables TACACS+ authenticationAaa authen Connections Priv-lvl Aaa author Aaa chpass This example displays the disabling of TACACS+ fallback Enabled TACACS+ fallbackAaa fallback Enables TACACS+ authentication with no fallback Disables TACACS+ authenticationEnables TACACS+ authentication with fallback Disabled all links Aaa profile No associations configuredProfile. Individual values are separated by commas , Specifies the name of an existing profile Aaa profile 2 newprof1 Connection attempt Aaa retryMade. Valid values are 1 to Display Item Description Aaa stats Displays the number of failed TACACS+ authorization Displays the number of TACACS+ authorizationAuthorization instead of the TACACS+ server Where AI232’s system log was used for accounting Aaa summary Displays the TACACS+ authorization method for the AI232 Displays the status of FTP access as AAA TACACS+Per-command based on per-command request/reply handling Displays the TACACS+ accounting status of user login events TACACS+ server when a connection attempt is made. Valid Aaa timeoutResets the timeout value to its default Values are 1 to Command Type shell Formats Alarm This example displays all system alarms in group links This example displays all alarms by severity level This example displays alarms for links 5-8in group links This example displays the unmasking of alarm group links Arp Command Types Column Description 172.16.30.117 Break 232break 10.40.5.11#1821 Breaking connection 10.40.5.11#1821 To reset error counters for links 1, 2, CresetReset error counters for links 1 Example, 1,2-3 to reset error counters for links 1, 2, Date Debug This example displays the enabling of all debug data logging Delete This command deletes a specified file that resides on AI232Filename Defines the name of the file to delete This example displays the deletion of file log.txt Diag-conn Displays details for that connection This option prompts for the ID of the connection to viewPattern 1, Logic 2, and Pattern 3 are evaluated before Logic 4 and Pattern 5 are considered Diag-eth Using Interpretation Mode Using the Help Option Adds a filter Following formats apply to filtersDeletes a filter Defines the source address MAC, IP, or TCP/UDP Defines the TCP/UDP port number regardless MAC/IP address settingsAdds or deletes a specific protocol filter. Available Protocol filters are This example displays Ethernet diagnostic help information Ijkl FF FC This example displays the deletion of all filters This example displays the deletion of filter protocol tcp Diag-info Displays the name of the Streams resource Last resetDisplays the number of free or available Streams resources Display Displays the link number Connection to be enabledDisplays the state of the driver. Two states are available Specifies that the link is not established Displays the number of frame length violations Had CRC errorsReceived packets Displays the number of short received frames Connection Displays the number of frames received onDisplays the number of bytes received on Displays the number of times transmitted frames Displays the number of transmit errors that have occurred Does not indicate an errorDisplays the number of frames received on the connection Displays the number of bytes received on the connection Displays the number of alignment errors ErrorsExcessive deferral timer is exceeded. An excessive deferral Error is recorded when the following events occur Displays the current state of the Ethernet interface. Ethernet interface needs to be resetFollowing values may appear Ethernet interface is uninitialized Option Function Diag-line Diag-line Displayed as Ascii String Only present in data packets, then the data byte count is Baseport Defines the baseport number for AI232 Diag-tconn This example displays all available files Dir This example displays an exit from the current shell session Exit Defines the number of lines to display. The default is This command displays the first few lines of a fileHead Defines the name of the file to display Help This example displays a list of all available commandsThis example displays help information for command show This example displays the current user name and profile This command displays the current user name and profileFormats Examples This example displays the configured IP address information Ip init Enter IP Address Range default 1 Setting range to 232 Disables the serial links Enables the serial linksLink Restarts the serial links This example displays the stopping of links 6 This example displays the starting of links 1 through 4 Log This command turns the display of log messages on or off This example displays the closing of a shell session This command closes a shell sessionLogout This command displays a list of available files This example displays the AI232 Main Menu This command accesses the AI232 main menu systemMenu Modmux Displays the phone number that was dialed 232more log.txt More Panic This command forces AI232 to crash dump and haltWinslc Baseport Defines the AI232 baseport number Passwd This command changes an existing user’s password Ping Pppstatus IP address of AI232 if the link status is Running Displays one of the following Profile Defines the name of a command to associate with a user Adds commands to a profile and optionally adds writeAdds write permission for a command that otherwise would Deletes commands from a user profile This example displays PVC information for link Pvclist Column Description This example displays the resetting of AI232 ResetThis command resets AI232 Router Ipaddress Defines the IP address of the default router Usage Notes Specifies the option that deletes a configuration file Configuration fileSelcnf Extension Sholog PDisplays the content of the file one page at a time Show Displays the IP address, subnet mask, and high IP address Displays the default and backup gateway IP addressDisplays the version number of AI232 Displays the date and time Lead is negated This command displays the status of the EIA leadsStaeia DCD Standalone This example displays the current standalone mode status Staslc Displays the number of parity errors Is asserted and means the signal is negatedDisplays the number of framing errors Displays the number of overrun errors Syncflash Tacacs info Tacacs server Specifies a server number or range of server numbers. Valid Tacacs server ipDefines the server IP address 0.0 Tacacs server phase Tacacs server phase 1-5,8 disable account Defines the TCP port number for the TACACS+ servers. Valid Tacacs server portValues are 1 through TCP port Tacacs server secret No secret configured Displays the server numbers. The +/ signs indicate if Associated servers are enabled + or disabledTacacs server summary Displays the TACACS+ shared secrets passwords for specified This example displays a TACACS+ debug log file Tacacs sholog Tacacs stats When AI232 attempted to read a packet from the TACACS+ Displays the number of errors that occurred when AI232Were received when AI232 attempted to read them from Server that had a sequence number that was out of order Tail This command displays the last few lines of a fileSpecifies that a line number value will be entered This example displays the last 20 lines of file log.txt Tcpoutconn Default is This example changes the telnet port to port Telnet Downloads a file from the Tftp server TftpUploads a file to the Tftp server Defines the IP address of the Tftp server to which the file File name is specified, the file will have the same name as Defines the name of the source file after it has beenSource file Special characters Tftpboot 113 Timezone 115 Displays text from the file one page at a time Defines the file for which you want to view the contentsType Defines the source file to copy Update Uptime Profilename Permission Useradd Retrieve status or to change the configuration Specifies a user who can login into AI232 and accessDestination at login. The destination is specified when Permission is assigned Userdel Users Who Is 1 to 120 seconds Xon-interval This appendix provides information about AI232 crash codes AI232 Crash Codes Common Crash Codes Error Code Description Hexadecimal DecimalCrash Codes AI232 Crash Codes System Failure Crash Reports Kentrox Technical Support AI232 Version 9.6x User’s Guide Standalone Mode and Switch Mode Downloading Software for a Standalone AI232 Standalone ModeAt the FTP prompt, open AI232 Transfer the software image to AI232 Configuring BOOTP/TFTP Downloading Software for AI232 in Switch Mode Switch ModeAt the FTP prompt, open AI198 Transfer the software image to AI198 Winslc baseport update AI232 Version 9.6x User’s Guide Commands for AI232 TACACS+ Server Enhancements Following keyword lets users access destinations AI232 Commands Menu Menulink AI232 Menu Aliases FTP Sessions Following AI232 keywords apply to FTP accessProvides FTP read access Acronym Meaning Challenge-Handshake Authentication Protocol Command and Control InterfaceCommand Line Interface Border Gateway Protocol Dynamic Host Configuration Protocol Channel Service UnitDomain Name Service Digital Service Unit End System File Transfer, Access, and ManagementElectrostatic Discharge End System to Intermediate System Internet Service Provider Integrated Services Digital NetworkLink Access Protocol Balanced Link State Update Network Service Access Point Nonservice AffectingOperations, Administration, Maintenance, and Provisioning Multimode Fiber Optic Cable Private ID or password Password Authentication ProtocolPlain Old Telephone Service QoS Quality of Service Serial Alarm Module Remote Network Monitoring SpecificationService Advertisement Protocol Switching Center Control System Terminal Access Controller Access System Switched Virtual ConnectionTID Address Resolution Protocol Time Division Multiple Access Xerox Network Services XML Key Management SpecificationUnshielded Twisted Pair Virtual Channel