Servers | Kentrox AI296 manual

AI296 Version 9.8x User’s Guide

AI296 Commands: tacacs server

Display Item	Description (Continued)

IP Address	Displays the configured TACACS+ IP addresses for the specified
	TACACS+ servers.

Port	Displays the configured TACACS+ port numbers for the specified
	TACACS+ servers.

Secret	Displays the TACACS+ shared secrets (passwords) for specified
	TACACS+ servers.

Phases	Displays the AAA phases that are allowed for specified TACACS+
	servers.

9-102

Image 360

Kentrox AI296 manual Displays the TACACS+ shared secrets passwords for specified, Servers

Contents

AI296TM Page About this Document Document Conventions Convention MeaningLabels Tip Iii Electrostatic Discharge Caution Ground Caution Proper Cooling Caution FCC Warning Customer Assistance Web Site SupportEmail Support Phone Support Table of Contents AI296 Local Menu System Exiting the Menu System IP Over X.25 Subnet Configuration AI296 Link Types Asynchronous Asynchronous PPP HDLC-Bridge TOC-4 Diagnostics for TID Multiplexing TID Multiplexing AI296 Commands Appendix a AI296 System Codes Appendix B Standalone Mode and Switch Mode AI296 Commands AI296 Menu Aliases FTP Sessions Product Description Features Performance Monitoring, Maintenance, Troubleshooting Remote and Local ConfigurationStandalone Configuration Link-to-Link Call Routing System Diagnostics TID Multiplexing AI296 Hardware Components Links 5-8 Connector Links 13-16 ConnectorLinks 1-4 Connector Links 9-12 Connector Technical Specifications Component Description Individual Port Access Description SpecificationCAB257 Cable DP196 Distribution Panel DB-25 Connectors Pin Signal Direction RJ45 10BaseT Connectors Displays the RJ45 10BaseT connector Pin Typical Applications Asynchronous to TCP/IP Application IP Over X.25 Networks Illustrates a common IP over X.25 application AI296 Version 9.8x User’s Guide Mixed Asynchronous and X.25 Networks Mixed Asynchronous and X.25 Network AI296 Version 9.8x User’s Guide To TCP/IP Application X.25 to TCP/IP Application Trunking Illustrates a common X.25 trunking application AI296 Version 9.8x User’s Guide Using the AI198TM Menu System Accessing the Menu System Navigating the Menu System Menu Numbering StructureTypes of Menu Items Following four types of menu items are available Submenus TogglesData Menu re-appears with the entered IP address Functions Menu Item DescriptionsMenu Item Description Exiting the Menu System AI296 Local Menu System Multilevel User Name and Password Security Radius AuthenticationTACACS+ Authentication PPP Authentication Protocols PAP and Chap Using a Telnet Connection for Login Logging Into AI296 Using an Asynchronous Port for Login Consecutive failed login attempts Number of consecutive failed login attempts Accessing the Local Menu System Navigating the Local Menu System Identifying Types of Menu ItemsData Entry Items Direction Keys Toggle Items Accessing the Help Menu Send Exiting the Local Menu System Save the changes System Configuration General System Properties Configuration Destination Menu Break SequenceDescription Format Configuration in the AI198 Menu System Menu Item Type Ethernet Port Settings Configuration in the AI296 Local Menu SystemToggle for both menu items FTP Port This menu item sets the FTP server port number IP Settings This example displays 16 FTP port number set to Menu Item Types Passive Link Settings Access Menu Access the System Menu Default is NoMinimum value is 25 seconds and the default is 60 seconds System Prompt This item sets the system prompt value in the CLI TCP Settings ToggleTo on Telnet Port This item sets the Telnet port value for AI296 This example displays Telnet Port set to Radius Configuration Server Settings Enabled To configure the shell/FTP Radius option Access Menu FALLBACK. The default is DisabledShell/FTP Options Enabled TACACS+ Configuration Shell/FTP Options 00049 Snmp Configuration Authentication TrapsAI296 Local Menu Item Configuration Community Names Data for all menu items Following example displays WriteComm Menu Contact Persons Node Information Snmp Manager 10.65.32.4 Static Route Configuration IP Address Settings TID to Modem Mux Configuration Inactivity TimeoutFollowing are available This example displays Inactivity Timeout set to Initialization String Port Bit Settings This example displays Init String set to conn23Toggle for all menu items TID to Route AI296 Local Menu Item Configuration Time Configuration Daylight Savings Time Sntp Settings Settings Access the Time Menu located under the System Menu Time Zone IP Over X.25 Subnet Configuration Configuration Overview Before Configuration Local Settings Local IP Address for this Subnet Local IP Subnet Mask This menu item configures the local IXE doorway link number Local X.25 Link Number Remote Settings Remote IP Address for this Subnet Remote X.121 Address 93.67.158.56 Link Configuration AI296 has six configurable link types AI296 Link TypesAsynchronous Asynchronous PPP HDLC-Bridge Synchronous PPP See Also BX.25 Configuration BX.25 Configuration Values UsageDefault is Enabled BX.25 Modulo BX.25 Support BX.25 Timer Settings This example displays BX.25 Support set to Enabled 00033 Connect Options Configuration Access Menu For 02 Alias, enter 2, and the alias nameAlias Link Type Availability Call Retry Interval This example displays 02 Alias set to async.4.1 Connect String This example displays 03 Call retry interval set to When Connection Settings Connection settings are configured using three menu itemsDefault is OFF Is on 00030 Link Application Destination AppAlias Disconnect Options Configuration Disconnect Inactivity Timer SettingsDisconnect inactivity timer when the link receives a call Select on or OFF. The default is on This example displays Off. The default is On This example displaysIs Off Disconnect Settings Disconnect settings are configured using two menu itemsDefault is on Disconnect String Disconnect General Link Properties Configuration Auto Disable Error LimitAsync, AsyncPPP, HDLC-Bridge, MLT, SyncPPP, Flow Control Async and AsyncPPP Access the Link Menu Hardware Interface Interface TypeThis example displays SW Flow Control set to XonXoff This example displays Interface Type set to Interface Mode Access menu 4.2.11.12.8 for MLT or menu 4.2.11.12.7 forMLT Link Description This menu item defines a description for a link Link Mode This example displays Link Description set to New X.25 Link This example displays 05*Link mode set to Passive Link Number This menu item enables or disables a link Link StateThis example displays 01 Link number set to Link Type This example displays Link state set to Down Default is Disabled Passive Link with Clocking Port Data Bits This menu item defines the number of databits in a data byte Port Parity This example displays Port data bits set to Seven Port Speed This example displays Port parity set to OddThis menu item defines the baud rate for a port Data in the AI296 local menu system Menu 4.2.11.12.5 appears Hdlc Port Stop Bits Sync Port Encoding This menu item sets the binary encoding on a port Xon Repeat Interval Aysnc and AsyncPPP This example displays 10 Xon Repeat interval set to General PPP Properties Configuration Ipcp Address SettingsFollowing menu items are available for PPP configuration AsyncPPP and SyncPPP Ipcp Address Parameters Maximum Unit Settings Set to Network Control Protocol For an Ipcp network control protocol Ipcp Lapb Parameters Configuration Frame Settings For Frame Window Size, enter the window size. The default is Size set to Lapb Timer Settings N2 Retry Counter 150 Modem Option Configuration Modem String Dialing Time-out Interval Number of Dial Attempts This example displays Dialing time-outset to Modem Setup Menu This example displays Number of dial attempts set to PPP Authentication Configuration Local Authentication Settings PAP RAS Option Radius Remote Authentication Settings Chap Quick X.25 Configuration Active Number of PVCs Packet Settings This example displays Number of PVCs set toToggle for max packet size Data for packet window size 128 256 512 Normal Passive Extended SVC Settings Local Address This example displays SVC Low set to 250 and SVC High set to This example displays X121 Local Address set to RTS/DTR Lead Control Configuration DTR State ConfigurationAsync and AsyncPPP and SyncPPP RTS State Configuration Flow Control DTR connect state Off DTR disconnect state Parameters Configuration Maximum Packet Size Packet Window Size This example displays Max Packet Size set to Protocol Version This example displays Packet Window Size set to Counter Settings Default is This example displays Facilities Negotiation Timer Settings 12,90000 Parameters Menu 43729 Virtual Circuit Configuration PVC Configuration Settings PVCs are configured using four menu items Menu PVC Type LCN Range CallTmr ResetTmr PVC Type Timer Type Range Default Passive Reset Timer This example displays For Timer Value, select the timer interval value SVC Configuration Settings Menu Item Type 0005 TID Multiplexing Overview AI296 Version 9.8x User’s Guide TID Multiplexing Configuration Configuring the Parent AliasMenu appears Values are 1 to Destination Configuring the Children Aliases TidforAI296 Defines the terminal identifier for AI296 During the parent alias configuration TIDtid Example Configurations For Alias name, enter YES Alias Edit Menu Alias Name 172.16.1.23#1000 TL1DM.1 Alias Edit Menu Alias Name TID Multiplexing Troubleshooting ParametersNormal Response Format Response Item Description Error Response Format Normal Response Example Diagnostics for TID Multiplexing Error Response ExampleErrcde AI296 Version 9.8x User’s Guide Alias and Call Routing Configuration Downstream Incoming OutgoingCall AI296 Card B IP address Tocardb X25.2.67891 Configuring an Alias in the AI198 Menu System Call Routing AI296 Version 9.8x User’s Guide Configuring an Alias in the AI296 Menu System Alias Edit Menu Arranging Aliases in the Alias Table Configuring an Alias with X.25 Keep-Alive Notifies the 296 that this is the X-25 keep-alive feature Where Source/Destination Protocol Tables Asynchronous Source Without Breaks AI198 Source Destination Menu Item InformationAsync 25 SVC Following options are available Asynchronous Source With Breaks AI198 Async With Following options are available TL1 BreakPacketized On a CR X.25 SVC Source Without Breaks AI198 Option X.25 SVC Source With Breaks AI198 CalledPacketizing With async Break Address Async Call data Time X.25 PVC Source Without Breaks AI198 25 PVC 25 SVC Alias nameCalled Following options are available Address 25 PVC Alias name 25 PVC Async with Alias name 25 PVC Async break Called25 PVC TL1 PAD TL1 TCP/IP Source Without Telnet Breaks AI198 Async Alias name TCP/IP Source With Telnet Breaks AI198With Called Following options are available Break Address With Called Async with Alias name Async break CalledAsynchronous Source Without Breaks AI296 Async 25 SVC Alias name Async 25 PVC Alias name 10 Asynchronous Source With Breaks AI296 Protocol Async 25 PVC Alias nameAsync With Called TL1 Break Async Address Packetized Call data 11 X.25 SVC Source Without Breaks AI296 12 X.25 SVC Source With Breaks AI296 Break Address Caller’s 13 X.25 PVC Source Without Breaks AI296 14 X.25 PVC Source With Breaks AI296 15 TCP/IP Source Without Telnet Breaks AI296 16 TCP/IP Source With Telnet Breaks AI296 Async with Alias name Protocol Processing Modules Module Types Aepx Enables Macstar compatibility Prevents the PAD protocol from passing breaks upstreamPrevents the PAD protocol from passing breaks downstream Causes the PAD protocol to reply to X.25 breaks An X.25 when X.3 parameter 3 is set to Provides packetizing and sets the packetizing timer toTo zero, the option is turned off Specify up to 16 characters Carriage return and semi-colon Feed and deleteProvides packetizing but prevents breaks from being Propagated upstream To zero, this option is turned off Provides TL1 packetizing and sets the packetizing timer to SecondsFeed and delete Provides TL1 packetizing and prevents breaks from passing Module Properties Module Arguments Entry Description Start Symbols Alias MacrosAlias Macro Components Comments Wildcard Symbols ConstantsVariables Variable Value Operators Operator Description 20 Alias Macro Functions Alias Macro Function Description of OperationReturns the Ascii integer value of the first Character in a string Match any of the expressions, then default is 20 Alias Macro FunctionsReturns characters from string starting with Xth character and continuing to the right-most end Alias Macro Configuration Configuration Examples =LA,PA,’#’,1-1=MYIP1 Alias Configuration Examples SVC to SVC ConnectionExamples are given for the following connections TL1 SVC to PVC Connection Diagram SVC to PVC Connection PVC PVC to SVC Connection Called address 16.X25.2.3 MLT Route MLT Call Routing Example MLT6 Link-to-Link Routing Example Menu F1 Help F2 Send F4 Close Ctrl-R Return to Main Menu AI296 Commands Commands Overview Shell CommandsShell Connections Establishing a Local Shell Connection Establishing a Remote Shell Connection Winslc Commands Displaying winslc Command LoggingUsing winslc Commands Log/Alarm Message Header Header Element Description Command Type AaaFormats Shell All-Enables or disables TACACS+ authentication on all Async-Enables or disables TACACS+ authentication onDisable-Disables TACACS+ authentication Enable-Enables TACACS+ authentication AI296 Version 9.8x User’s Guide AI296 Version 9.8x User’s Guide Command Defaults Examples AAA Alarm HyphensFollowing parameters is accepted Alarm group Self-clearing alarms clear themselves when the problem thatCaused the alarm is resolved Unmask. Valid values are existing alarm groups This example displays all system alarms in group links This example displays alarms for links 5-8in group linksThis example displays all alarms by severity level This example displays the unmasking of alarm group links Command Types Arp Column Description 296arp -d Mapping for 10.40.53.2 deleted Break 296break 10.40.5.11#1821 Breaking connection 10.40.5.11#1821 Bridge This example displays the dumping of the bridge table Creset To reset error counters for links 1, 2,Reset error counters for links 1 Example, 1,2-3 to reset error counters for links 1, 2, Date Debug This example displays the enabling of all debug data logging This command deletes a specified file that resides on AI296 DeleteFilename Defines the name of the file to delete This example displays the deletion of file log.txt Diag-conn Display Item Description This option prompts for the ID of the connection to view Displays details for that connectionPattern 1, Logic 2, and Pattern 3 are evaluated before Logic 4 and Pattern 5 are considered Using Interpretation Mode Diag-eth Using the Help Option Following formats apply to filters Adds a filterDeletes a filter Defines the source address MAC, IP, or TCP/UDP MAC/IP address settings Defines the TCP/UDP port number regardlessAdds or deletes a specific protocol filter. Available Protocol filters are This example displays Ethernet diagnostic help information Ijkl FF FC This example displays the deletion of filter protocol tcp This example displays the deletion of all filters Diag-info Displays the link number Means the X.25 frame level is not establishedMeans the X.25 frame level is established Buffers were available Last rebooted RebootedDisplays the name of the Streams resource Displays the number of free or available Streams resources Connection to be enabled Displays the state of the driver. Two states are availableSpecifies that the link is not established Displays the number of bytes coming into the link Had CRC errors Displays the number of frame length violationsReceived packets Displays the number of short received frames Displays the number of frames received on ConnectionDisplays the number of bytes received on Displays the number of times transmitted frames Does not indicate an error Displays the number of transmit errors that have occurredDisplays the number of frames received on the connection Displays the number of bytes received on the connection Errors Displays the number of alignment errorsExcessive deferral timer is exceeded. An excessive deferral Error is recorded when the following events occur Ethernet interface needs to be reset Displays the current state of the Ethernet interface.Following values may appear Ethernet interface is uninitialized Diag-line Option Function Diag-line Only present in data packets, then the data byte count is Displayed as Ascii String Diag-tconn Baseport Defines the baseport number for AI296 Dir This example displays all available files Exit This example displays an exit from the current shell session This command displays the first few lines of a file Defines the number of lines to display. The default isHead Defines the name of the file to display This example displays a list of all available commands Help This example displays help information for command show This command displays the current user name and profile Formats ExamplesThis example displays the current user name and profile This example displays the configured IP address information Ip init Enter IP Address Range default 1 Setting range to 296 Link This example displays the starting of links 1 through 4 This example displays the stopping of links 6 This command displays link statistic information For the AI296 system commandLinkstat Baseport Indicates the baseport number of AI296 C D 9600 RS-232 @AI198154041 072204 Sev=F Base=064 Msg This command turns the display of log messages on or off Log This command closes a shell session LogoutThis example displays the closing of a shell session This command displays a list of available files This command accesses the AI296 main menu system MenuThis example displays the AI296 Main Menu More Pad Resets the current call Enables the transparent mode of operationThis example displays the setting of the PAD profile Sets page wait to n lines This command forces AI296 to crash dump and halt PanicWinslc Baseport Defines the AI296 baseport number This command changes an existing user’s password Passwd Ping Pppstatus Displays one of the following IP address of AI296 if the link status is Running Command Type shell Formats ProfileProfilename-Defines the name of a user profile Have write permission Newprofile-Defines the name of a new user profile Lists all user profile namesRemoves a user profile. The following parameter is accepted Pvcedit Forces the PVC to become passive Pvclist This example displays PVC information for link Column Description Reset This command resets AI296This example displays the resetting of AI296 This example displays AI296 receiving two files from a PC Configuration file SelcnfCnf extension PDisplays the content of the file one page at a time Sholog Show Displays commentsDisplays all active connections Displays crash dump information MAC address when in standalone mode Displays the default and backup gateway IP addressDisplays WAN diagnostic information Displays link data. The following parameters are accepted This example displays the AI296 version number This example displays the serial link performance for links This command displays the status of the EIA leads StaeiaLead is negated CTS This example displays the current standalone mode status Standalone Staslc Is asserted and means the signal is negated Displays the number of parity errorsDisplays the number of framing errors Displays the number of overrun errors Syncflash Sz filename Tacacs This example displays a TACACS+ debug log file TACACS+ serverDisplays the number of failed connection attempts that were Made to the TACACS+ server Displays the number of errors that occurred when AI296 When AI296 attempted to read a packet from the TACACS+Were received when AI296 attempted to read them from Configuring the time out value, refer to command aaa on Tacacs server Configures the AAA phases that are allowed for specified Account-Enables or disables the accounting phase forAll-Enables or disables all AAA phases for the specified Authen-Enables or disables the authentication phase for Disabled Associated servers are enabled + or disabledDisplays the server numbers. The +/ signs indicate if Displays the TACACS+ shared secrets passwords for specified Servers This command displays the last few lines of a file TailSpecifies that a line number value will be entered This example displays the last 10 lines of file userlog.txt Tcpoutconn Tftp Tftp 106 File Downloaded successfully 296 Tftpboot 109 Timezone 111 Default TracePriority Level This example displays the configuration of trace Traceroute This example displays the traceroute to IP address Defines the file for which you want to view the contents TypeDisplays text from the file one page at a time Update Defines the source file to copy Uptime Useradd Profilename Permission Specifies a user who can only execute the following commands Description of Permissions Profilename Userdel Users Who Xvc 124 AI296 System Codes This appendix provides information about AI296 system codes Cause Codes and Diagnostic Codes Standard Reset Indication Cause CodesCause Code Description Kentrox-Specific Reset Indication Cause Codes 0X1D Reset due to network out of order0x9B Remote DTE originated reset Standard Clear Indication Cause Codes Standard ISO Diagnostic Codes Ccitt Diagnostic Codes0x39 Ship absent 0x7F Registration/cancellation confirmed Cause Code Description Cause Code Description Kentrox-Specific Diagnostic Codes Error Code Description Hexadecimal Decimal Crash CodesCommon Crash Codes AI296 Crash Codes System Failure Crash Reports Kentrox Technical Support AI296 Version 9.8x User’s Guide Standalone Mode and Switch Mode Standalone Mode Downloading Software for a Standalone AI296At the FTP prompt, open AI296 Transfer the software image to AI296 Configuring BOOTP/TFTP Switch Mode Downloading Software for AI296 in Switch ModeAt the FTP prompt, open AI198 Transfer the software image to AI198 Defines the software image file name AI296 Version 9.8x User’s Guide Commands for AI296 TACACS+ Server Enhancements AI296 Commands Following keyword lets users access destinations AI296 Menu Aliases Menu Menualias Following AI296 keywords apply to FTP access Provides FTP read accessFTP Sessions