Manuals / Nortel Networks / Computer Equipment / Network Card

Nortel Networks 4050 manual Parameter

Models: 4050

1 922

Download 922 pages 38.09 Kb

Page 461

Chapter 10 Configuring system settings 461

Command

/cfg/sys/host <host ID>/routes

/cfg/sys/host #/interface <interface ID>/routes

/cfg/sys/host #/port <port>

/cfg/sys/host #/interface <interface ID>/ports

/cfg/sys/accesslist

/cfg/sys/time

/cfg/sys/time/ntp

/cfg/sys/dns

Parameter

del <index number>

add <IPaddr> <mask> <gateway> list

del <index number>

add <IPaddr> <mask> <gateway> list

del <index number>

add <IPaddr> <mask> <gateway> autoneg onoff

speed <speed> mode fullhalf list

del <port> add <port> list

del <index number> add <IPaddr> <mask> date <date>

time <time> tzone list

del <index number> add <IPaddr> cachesize <entries> retransmit <interval> count <count>

ttl <ttl>

Nortel Secure Network Access Switch 4050 User Guide

Image 461

Nortel Networks 4050 manual Parameter

Contents

Nortel Secure Network Access Switch 4050 User Guide 320818-A Copyright Nortel Networks Limited 2005. All rights reservedLicensing Nortel Secure Network Access Switch 4050 User GuideGeneral Contents Contents Managing the network access devicesConfiguring the domain Configuring groups and profiles Configuring authentication 233 TunnelGuard SRS Builder Managing system users and groups Customizing the portal and user logon Setting the portal display language using the CLI Configuring system settings Adding a host interface Managing certificates Configuring Snmp Maintaining and managing the system Upgrading or reinstalling the software Appendix a CLI reference Troubleshooting 837 Appendix C Supported MIBs Appendix H Software licensing information Index Contents 320818-A Preface Preface Connect the switch to the networkBefore you begin Bold text Text conventionsPublications Related informationPlain Courier text Example Set Trap Monitor FiltersOnline How to get helpPreface This chapter includes the following topics Nortel SNA solutionOverview Elements of the Nsna solutionSupported users Role of the Nortel Snas Nortel SNA VLANs and filters Nortel Snas 4050 functionsGroups and profiles Authentication methods TunnelGuard host integrity check Communication channels in the Nortel SNA network Communication channelsAbout SSH RSA DSA Nortel Snas 4050 clustersOne-armed and two-armed configurations Two-armed configuration One-armed configurationIllustrates a two-armed configuration Nortel SNA configuration and management toolsConfigure the network Dhcp server Nortel Snas 4050 configuration roadmapOverview Overview Overview Overview Overview 320818-A Chapter Initial setup Initial setup Portal Virtual IP address About the IP addressesManagement IP address Log on using the following username and password Initial setupLogin admin Password admin Real IP addressEnter port number for the management interface Setup Menu displaysSelect the option for a new installation Enter Vlan tag id or zero for no Vlan Enter network mask 255.255.255.0 maskEnter default gateway IP address or blank to skip Setup a two armed configuration yes/no noEnter port number for the traffic interface Specify the MIP for this device or clusterEnter IP address for this machine on traffic interface Enter a timezone or select select timezoneSpecify the NTP server, if applicable Configure the time settingsSpecify the DNS server, if applicable Enter NTP server address or blank to skip IPaddrSpecify a name for the Nortel Snas 4050 domain Change the admin user password, if desiredSpecify the pVIP of the Nortel Snas 4050 device Create http to https redirect server no Settings created by the quick setup wizard Extended profile details Adding a Nortel Snas 4050 device to a clusterBefore you begin Select the option to join an existing cluster Joining a clusterEnter network mask 255.255.255.0 mask Specify the MIP of the existing cluster Enter the existing admin user password passwordNext steps Setup successful LoginApplying and saving the configuration Applying and saving the configuration using the Srem Applying and saving the configuration using the CLICfg/dump Cfg/ptcfgApply and Commit buttons Initial setup 320818-A Chapter Managing the network access devices Managing the network access devices Roadmap of domain commands Managing network access devices using the CLIReset Using the quick switch setup wizard Adding a network access device using the CLISpecify the IP address of the network access device Cfg/domain 1/quickNsna communication port5000 Go to onTo continue, go to on Red vlan id of Switch Vlan IDCfg/domain #/switch switch ID Manually adding a switchSwitch menu displays Cfg/domain #/switch #/dis Cfg/domain #/switch #/delete Deleting a network access device using the CLIConfiguring the network access devices using the CLI Ip IPaddr Switch menu includes the following optionsCfg/domain #/switch switch ID followed by Cfg/domain #/switch #/vlan Mapping the VLANs using the CLIFollowed by Dis DeleteCfg/domain #/switch #/vlan followed by Domain vlan or Switch vlan menu displaysCfg/domain #/switch #/vlan/list Add name Vlan IDManaging SSH keys using the CLI For an Ethernet Routing Switch 5510, 5520, or Generating SSH keys for the domain using the CLINsnas SSH key menu displays Cfg/domain #/sshkeyCfg/domain #/sshkey followed by Cfg/domain #/switch #/sshkey/exportNsnas SSH key menu includes the following options Main# /cfg/domain 1/sshkey Shows sample output for the /cfg/domain #/sshkey commandCfg/domain#1/sshkey/export command to Cfg/domain #/switch #/sshkeyCfg/domain #/switch #/sshkey followed by Monitoring switch health using the CLI Reimporting the network access device SSH key using the CLICfg/domain #/switch #/hlthchk Enter Apply to apply the change immediatelyCfg/domain #/switch #/dis Cfg/domain #/switch #/hlthchk followed byHealthCheck menu includes the following options Deadcnt countAdding a network access device using the Srem Managing network access devices using the SremTo add a network access device, use the following steps Cfg/domain #/switch #/enaAdd a Switch fields Add a SwitchConfiguring the network access devices using the Srem Deleting a network access device using the SremSwitch Configuration screen 320818-A Switch Configuration screen appears see FigureSwitch Configuration fields You can perform the Vlan mapping in two ways Mapping the VLANs using the SremDomain VLANs screen Mapping VLANs by domainTo add VLANs to a domain, complete the following steps Adding VLANs to a domainClick Add Add a new Vlan dialog box appears see Figure Add a new Vlan fieldsRemoving VLANs from a domain Switch VLANs screen Mapping VLANs by switchTo add VLANs to a switch, complete the following steps Adding VLANs to a switchRemoving VLANs from a switch Managing SSH keys using the SremManaging the network access devices Managing the network access devices Key Generation screen appears see Figure Generating SSH keys for the domain using the SremSwitch SSH Key fields Exporting SSH keys for the domain using the SremExport Key screen appears see Figure Export Key fields Click Apply on the toolbar to begin the export processSwitch SSH Key screen appears see Figure Managing SSH keys for Nortel SNA communication usingReimporting the network access device SSH key using the Srem Switch SSH Key screen appears see on Monitoring switch health using the SremClick Delete Switch SSH Key Click Import SSH from SwitchHealth Check screen 320818-A Health Check screen appears see FigureViewing a connected client list using the Srem Connected Clients fields Managing the network access devices Switch Configuration screen Chapter Configuring the domain Cfg/domain Configuring the domain using the CLIConfiguring the domain Captive portal Portal look and feel Linksets Logging traffic with syslog messagesDetails onoff Manually creating a domain using the CLI Creating a domain using the CLIYou can create a domain in two ways Cfg/domain domain ID320818-A Cfg/quick Using the Nortel Snas 4050 domain quick setup wizardMain# /cfg/domain Main# cfg/quick Specify the certificate to be used by the portal serverConfiguring the domain Specify whether the SSL server uses chain certificates Do you want to configure a switch? yes/no noDo you require chain certificates yes/no no Do you want an http to https redirect server yes/no noDo you want to create a tunnelguard test user? yes/no yes Configuring the domain Cfg/domain #/del Deleting a domain using the CLITo delete a domain, use the following command To configure the domain, use the following command Configuring domain parameters using the CLICfg/domain domain ID followed by Pvips IPaddrHttpredir TG menu displays TG menu includes the following options Configuring the TunnelGuard check using the CLICfg/domain #/aaa/tg Cfg/domain #/aaa/tg followed byCfg/domain #/aaa/tg/status-quo Cfg/domain #/aaa/tg/quick Using the quick TunnelGuard setup wizard in the CLITunnelGuard quick setup wizard creates a default SRS rule Configuring the SSL server using the CLIServer 1001 menu displays Main# /cfg/domain #/aaa/tg/quickServer 1001 menu includes the following options Tracing SSL traffic using the CLICfg/domain #/server followed by Interface IDSsldump Output modeCfg/domain #/server/trace followed by Cfg/domain #/adv/interface commandTcpdump Ping hostSSL Settings menu displays Configuring SSL settings using the CLIDnslookup host Traceroute hostCfg/domain #/server/ssl followed by SSL Settings menu includes the following optionsCert certificate IndexIndex list Cachain certificateYes Cfg/domain #/server/ssl/protocolEna Dis Configuring traffic log settings using the CLITraffic Log Settings menu includes the following options Traffic Log Settings menu displaysCfg/domain #/server/adv/traflog Cfg/domain #/server/adv/traflog followed byCfg/domain #/httpredir Configuring Http redirect using the CLICfg/domain #/httpredir followed by Redir onoffCfg/sys/host #/interface command see Configuring advanced settings using the CLICfg/domain #/adv Cfg/domain #/adv followed byConfiguring Radius accounting using the CLI Radius Accounting Servers menu displays Managing Radius accounting servers using the CLICfg/domain #/aaa/radacct Cfg/domain #/aaa/radacct followed byCfg/domain #/aaa/radacct/servers followed by Cfg/domain #/aaa/radacct/vpnattribu VPN Attribute menu displaysNSNAS-Portal-ID VPN Attribute menu includes the following options Configuring the domain using the SremCfg/domain #/aaa/radacct/vpnattribu followed by VendoridCreating a domain using the Srem Secure Access Domain Table screen 320818-A Manually creating a domain using the SremAdd a Secure Access Domain fields Add a Secure Access DomainUsing the Srem Domain Quick Wizard Configuring the domain Click Next Domain Quick Wizard General Settings fieldsClick Domain Quick Wizard Domain Quick Wizard Certificate fields Domain Quick Wizard CertificateOrganization name and do not use any of the following Domain Quick Wizard Certificate Chain fields Domain Quick Wizard Certificate ChainDomain Quick Wizard Server fields Domain Quick Wizard Server dialog box appears see FigureDomain Quick Wizard Switch fields Domain Quick Wizard Switch dialog box appears see FigureDomain Quick Wizard Tunnel Guard fields Domain Quick Wizard Tunnel Guard dialog box appears seeTo delete a domain, perform the following steps Deleting a domain using the SremTo configure a domain, perform the following steps Configuring domain parameters using the SremDomain Configuration fields Additional domain configuration tabs Additional domain configuration in the SremDomain domain Configuration screen Component Description Additional domain tree componentsConfiguring the TunnelGuard check using the Srem TunnelGuard Configuration screen appears see Figure TunnelGuard Configuration fields Groups using the Srem on TunnelGuard Quick Setup screen appears see Figure Using the TunnelGuard Quick Setup in the SremTunnelGuard Quick Setup fields Server Configuration screen 320818-A Configuring the SSL server using the SremServer Configuration fields Server SSL Settings screen 320818-A Configuring SSL settings using the SremALL@STRENGTH Server SSL Settings fieldsConfiguring the domain Server SSL Settings fields Configuring traffic log settings using the SremTraffic Log Syslog Settings screen appears see Figure Traffic Log Syslog Settings fields Tracing SSL traffic using the Srem Configuring Http redirect using the SremHttp Redirect screen 320818-A Http Redirect fields Configuring Radius accounting using the SremConfiguring Nortel Snas 4050-specific attributes using Radius accounting Configuration screen appears see Figure Radius accounting Configuration fields Managing Radius accounting servers using the SremAdding a Radius accounting server using the Srem Radius Accounting Servers screen Radius Accounting Servers screen appears see FigureRadius Accounting Server fields Moving a Radius accounting server using the SremDeleting a Radius accounting server using the Srem Configuring the domain 320818-A Chapter Configuring groups and profiles Overview Configuring groups and profilesGroups This section includes the following topicsDefault group TunnelGuard SRS rule LinksetsExtended profiles Create the SRS rules see TunnelGuard SRS Builder on Configuring groups and extended profiles using the CLIRoadmap of group and profile commands Cfg/domain 1/aaa/group group ID Configuring groups using the CLITo create and configure a group, use the following command Extend profile ID Cfg/domain 1/aaa/group # followed byRestrict Main# /cfg/domain 1/AAA/group Tgsrs SRS rule nameComment comment Cfg/domain 1/aaa/filter filter ID Configuring client filters using the CLITg truefalseignore Client Filter menu includes the following optionsCfg/domain 1/aaa/filter filter ID followed by Cfg/domain 1/aaa/group group IDgroup name/extend Configuring extended profiles using the CLIMain# /cfg/domain 1/AAA/filter Cfg/domain 1/aaa/group #/extend # followed by Extended Profile menu includes the following optionsFilter name Vlan nameLinkset Del Cfg/domain 1/aaa/group #/extend #Main# cfg/domain 1/aaa/group 2/extend Extended Profile 1# ../extend 2/filter tgfailed/vlan YellowCfg/domain 1/aaa/group #/linkset Mapping linksets to a group or profile using the CLICfg/domain 1/aaa/group #/extend #/linkset Cfg/domain 1/aaa/group #/extend #/linkset followed byLinksets# insert 2 example3 Main# cfg/domain 1/aaa/group 1/linksetLinksets# add example2 Creating a default group using the CLI Configuring groups and extended profiles using the SremConfiguring groups using the Srem This section contains the following topicsClick a Guide to Create a Group on the toolbar Using the guide for creating groupsGroups screen 320818-A Adding a groupAdd a Group fields Click Add Add a Group dialog box appears see FigureModifying a group To configure a group, perform the following stepsGroup Configuration screen appears see Figure Group Configuration fields Configuring client filters using the SremClient Filters screen appears see Figure Adding a client filterAdd a Client Filter fields Sheet 1 Click Add Add a Client Filter dialog box appears see FigureCheck using the Srem on Modifying a client filter To configure a client filter, perform the following stepsClient filter Configuration screen appears see Figure Client Filters configuration fields Configuring extended profiles using the Srem Extended Profiles screen appears see Figure Adding an extended profileAdd an Extended Profile fields Add an Extended Profile screenModifying an extended profile Extended profiles Configuration screen appears see FigureExtended Profile Configuration fields Mapping linksets to a group or profile using the SremLinksets screen for a group Mapping linksets to a groupAdd a Linkset fields Adding linksets to a groupTo add a linkset to a group, perform the following steps Reordering linksets in a group Removing linksets from a groupLinksets screen for an extended profile Mapping linksets to a profileAdding linksets to an extended profile Reordering linksets in an extended profile Removing linksets from an extended profileAAA Configuration screen 320818-A Creating a default group using the SremAAA Configuration fields Configuring groups and profiles 320818-A Chapter Configuring authentication Configuring authentication Before you begin Configuring authentication using the CLI Cfg/domain 1/aaa Roadmap of authentication commandsCommand Cfg/domain 1/aaa/auth auth ID Configuring authentication methods using the CLIDisplay Cfg/domain 1/aaa/auth auth ID followed byRadiusldaplocal Local accesses the Local database menu Cfg/domain 1/aaa/auth #/adv Configuring Radius authentication using the CLICfg/domain 1/aaa/auth #/adv followed by Groupauth auth IDsYou can perform the following configuration tasks Adding the Radius authentication method using the CLIConfiguring authentication Cfg/domain 1/aaa/auth #/radius Modifying Radius configuration settings using the CLIMain# /cfg/domain 1/aaa/auth Type Cfg/domain 1/aaa/auth #/radius followed byTimeout interval Managing Radius authentication servers using the CLIRadius servers menu displays SessiontimCfg/domain 1/aaa/auth #/radius/servers followed by Radius servers menu includes the following optionsCfg/domain 1/aaa/auth #/radius/sessiontim Configuring Ldap authentication using the CLIConfiguring session timeout using the CLI Adding the Ldap authentication method using the CLI Configuring authentication Cfg/domain 1/aaa/auth #/ldap Modifying Ldap configuration settings using the CLIDo not use the isdbinddn and isdbindpas Ldap menu displays Ldap menu includes the following optionsCfg/domain 1/aaa/auth #/ldap followed by Isdbindpas password SAMAccountName=bill . The user’s loginUserattr names Ou=Users, dc=example, dc=com .Activedire Enaldaps truefalseEnauserpre truefalse Cfg/domain 1/aaa/auth #/ldap/servers Managing Ldap authentication servers using the CLIRemoves the specified Ldap server from the current Cfg/domain 1/aaa/auth #/ldap/ldapmacro followed by Managing Ldap macros using the CLICfg/domain 1/aaa/auth #/ldap/ldapmacro Ldap attribute Add variable namePrefix suffix Variable nameSet the Active Directory settings using Managing Active Directory passwords using the CLIActive Directory Settings menu displays Cfg/domain 1/aaa/auth #/ldap/activedire commandConfiguring local database authentication using the CLI Configuring authentication Authentication menu commands local database You can add users to the database in two ways Managing the local database using the CLILocal database menu displays Cfg/domain 1/aaa/auth #/localLocal database menu includes the following options Cur group commandCfg/domain 1/aaa/auth #/local followed by TAB or use the /cfg/domain 1/aaaServer filename key Import protocolExport protocol Specifying authentication fallback order using the CLIMain# /cfg/domain 1/aaa/authorder Cfg/domain 1/aaa/authorder auth ID,auth IDConfiguring authentication using the Srem Authentication Server Table appears see Figure Configuring authentication methods using the SremConfiguring Radius authentication using the Srem Adding the Radius method and server Add an Authentication Server Radius 320818-AAdd an Authentication Server Radius fields Modifying Radius configurationConfiguration 320818-A Modifying Radius method settingsConfiguration fields Radius Configuration screen appears see Figure Modifying Radius configuration settingsRadius Configuration fields Configuring authentication Radius Configuration fields Managing additional Radius servers Add a Radius Server fields Adding a Radius serverRemoving a Radius server Configuring authentication Add a Radius Server fieldsReordering additional Radius servers Next steps Configuring Ldap authentication using the SremAdding the Ldap method and server Add an Authentication Server Ldap fieldsModifying Ldap configuration Modifying Ldap method settings Configuration fields Ldap Configuration screen appears see Figure Modifying Ldap configuration settingsLdap Configuration fields Cn=Users, dc=example, dc=com Ou=Users, dc=example, dc=com. The userActive Directory, on Configuring authentication Ldap Configuration fieldsManaging additional Ldap servers Add an Ldap Server fields Adding an Ldap serverClick Apply Removing an Ldap server Reordering additional Ldap serversManaging Ldap macros Ldap Macros Add an Ldap Macro fields Adding Ldap macrosRemoving Ldap macros Reordering Ldap macrosPopulate the database see Populating the database on Configuring local database authentication using the SremAdding the Local method Database on Add an Authentication Server Local fieldsAdding users to the local database Populating the databaseYou can populate the Local database in two ways Local Users screen appears see FigureAdd a Local User fields Click Add Add a Local User dialog box appears see FigureConfiguring authentication Import Local User Database 320818-A Importing a databaseImport Local User Database fields Modifying Local database configurationModifying Local method settings Local Users screen appears see on Modifying local usersLocal Users Configuration 320818-A Local Users Configuration fields Modifying local user passwordsLocal Users Local User Configuration 320818-A Select the Local User Configuration tabLocal Users Local User Configuration fields Export Local User Database 320818-A Exporting the databaseExport Local User Database fields Specifying authentication fallback order using the Srem Authentication Server Order Saving authentication settings Chapter TunnelGuard SRS Builder TunnelGuard user interface Configuring SRS rulesTunnelGuard SRS Builder \tunnelguard\tg.txtFile menu Menu commandsSoftware Definition menu Describes important items from the File menuSoftware Definition Entry menu items Sheet 1 Software Definition Entry menuTool menu TunnelGuard Rule menuDescribes important items from the TunnelGuard Rule menu Describes important items from the Tool menuSRS Definition toolbar item descriptions SRS definition toolbarSRS Components table items Software Definition Available SRS listSRS Components table WINNT%\xxx.dll Customizing a componentTunnelGuard Rule Definition screen Memory snapshotSRS Rule toolbar Memory snapshot item descriptionsSRS Rule Expression Constructor SRS Rule listAvailable Expression list Rule Expression ConstructorCreating a software definition Managing TunnelGuard rules and expressionsSelecting modules or files from running processes Adding entries to a software definitionCreate New Memory Module SRS window For more information, see Making API calls on Select the TunnelGuard Rule Definition tab Selecting file on diskCreate New on Disk SRS Entry window Creating logical expressions TunnelGuard Rule Definition tab Click the TunnelGuard Rule Definition tabClick the Form TunnelGuard Rule Expression button New SRS Rule window Available Expressions screenTunnelGuard Rule Name screen Registry-only SRS entry Registry-based rulesSupported integer operands Describes supported operands for integer valuesString regular expression Description Constructs for string based regular expressions Sheet 1Creating a registry entry TunnelGuard SRS Builder Registry Entry Registry-based File/ModuleEnter the Key Value Data Expression Manually creating an OnDisk file entry Manually creating SRS entriesCreate new OnDisk SRS Entry Create New Memory Module SRS Entry page opens see on Manually creating a Memory Module entryCreate new Memory Module SRS entry File age check TunnelGuard SRS Builder Date/Time Range Adding commentsAdding a TunnelGuard rule comment Adding a software definition comment Deleting SRS rules and their componentsDeleting a software definition entry Deleting a software definitionDeleting a TunnelGuard rule Deleting an expressionMaking API calls TunnelGuard support for API callsTunnelGuard SRS Builder 320818-A Chapter Managing system users and groups Group membership and user rights User rights and group membershipManaging system users and groups Cfg/sys/user Managing system users and groups using the CLIRoadmap of system user management commands Cfg/sys/user followed by Managing user accounts and passwords using the CLIUser menu displays User menu includes the following options Add username Del usernameCaphrase Managing user settings using the CLIEdit username Password user Managing user groups using the CLIPassword confirm User password Cfg/sys/user/edit usernameAdding a new user CLI configuration examplesThis section includes the following detailed examples Cfg/sys/user/edit username/groupsMain# /cfg/sys/user Access the User MenuUser# edit certadmin Apply the changes Verify and apply the changes Changing a user’s group assignment User# edit adminChanging your own password Changing passwordsChanging another user’s password Type the password command to initialize the password change Deleting a user To manage users, choose from one of the following tasks Managing system users and groups using the SremManaging user accounts using the Srem User Table Click Add Add a User dialog box appears see Figure Adding new user accountsAdd a User fields Removing existing user accountsTo remove an existing user, perform the following steps Password Setting 320818-A Setting password expiry using the SremPassword Settings fields Change Your Password 320818-A Changing your password using the SremClick Change Password Changing another user’s password using the SremOnly the admin user can change the passwords of other users Change Your Password fieldsChange User Password 320818-A Change User Password fields Setting the certificate export passphrase using the SremSet Certificate Export PassPhrase 320818-A Set Certificate Export PassPhrase screen appears see FigureSet Certificate Export PassPhrase fields Managing user groups using the SremClick Set Pass Phrase To add a new user group, perform the following steps Adding a user groupChoose from the following tasks to manage users groups Add a User Group fields Removing a user groupClick Add Add a User Group dialog box appears see Figure Managing system users and groups Chapter Customizing the portal and user logon Customizing the portal and user logon Captive portal and Exclude ListExclude List String Usage Expressions Allowed regular expressions and escape sequencesPortal look and feel Portal displayColors Default appearanceColor Hexadecimal code Common colors, with hexadecimal codes Sheet 1Language localization Content-Type text/plain charset=iso-8859-1/n Autorun linksets Linksets and linksMacros Planning the linksetsExamples of redirection URLs and link text Sheet 1 Automatic redirection to internal sitesExamples of redirection URLs and links Automatic JRE upload Managing the end user experienceWindows domain logon script Customizing the portal and logon using the CLIRoadmap of portal and logon configuration commands Number Color2 code Configuring the Exclude List using the CLI Configuring the captive portal using the CLIDNS Exclude menu displays Cfg/domain 1/dnscaptCfg/domain 1/dnscapt/exclude followed by Changing the portal language using the CLIDNS Exclude menu includes the following options Cfg/lang Configuring language support using the CLILanguage Support menu displays Language Support menu includes the following options Cfg/lang/import commandCfg/lang followed by Server filenameCfg/domain 1/portal/lang Setting the portal display language using the CLICfg/domain 1/portal/lang followed by Cfg/domain 1/portal/lang/listRestore Configuring the portal display using the CLICfg/domain 1/portal Cfg/domain 1/portal followed byRedirect URL Logintext textLinkurl onoff Linktext textLinkcols columns Linkwidth widthCfg/domain 1/portal/colors Changing the portal colors using the CLIPortal Colors menu displays Portal Custom Content menu displays Configuring custom content using the CLICfg/domain 1/portal/content Portal Colors menu includes the following optionsCfg/domain 1/portal/content followed by Portal Custom Content menu includes the following optionsTftpftpscpsftp. The default is tftp AvailableCfg/domain 1/linkset linkset ID Configuring linksets using the CLICfg/domain 1/linkset linkset ID followed by Linkset menu includes the following optionsText text Autorun truefalseCfg/domain 1/linkset linkset ID/link index Configuring links using the CLIMove new index Link menu includes the following optionsCfg/domain 1/linkset linkset ID/link index followed by Configuring FTP link settings using the CLI Configuring external link settings using the CLICfg/domain 1/linkset linkset ID/link index/ external/quick Cfg/domain 1/linkset linkset ID/link index/ ftp/quickEnabling DNS capture Customizing the portal and logon using the SremConfiguring the captive portal using the Srem DNS Capture fields DNS Capture screen includes the following componentsAdd DNS Domain fields Configuring the DNS Exclude List using the SremClick Add Entry appears in the DNS Exclude List Changing the portal language using the Srem Select the System Language tab Configuring language support using the SremLanguages sub-tabs appear see Figure Choose from one of the following tasksViewing and removing custom languages To view custom languages, use the following procedureViewing predefined languages Import/Export Definition screen appears see Figure Importing and exporting language definitionsClick the Import/Export Definition tab Import/Export Definition fields Setting the portal display language using the Srem Language fields Configuring the portal display using the SremPortal Configuration tab appears see Figure Configuring contentPortal Configuration fields Sites, see on Import Banner screen 320818-A Importing bannersImport Banner fields Color Settings screen 320818-A Changing the portal colors using the SremColor Settings fields Configuring custom content using the Srem Basics screen appears see Figure Viewing basic information about custom contentBasics fields Import Content screen appears see Figure Importing custom contentTo import custom content, perform the following steps Import Content fields Export Content screen appears see Figure Exporting custom contentTo export custom content, perform the following steps Export Content fields Configuring linksets using the SremPortal Links screen appears see Figure Creating a linksetTo create a linkset, perform the following steps Add a Linkset Click Add Add a Linkset dialog box appears see FigureTo modify a linkset, perform the following steps Linkset Configuration screen appears see FigureModifying a linkset See Linksets and links on Linkset Configuration fieldsConfiguring links using the Srem Links screen appears see Figure Creating an external link using the SremTo create an external link, perform the following steps Add a Portal Link fields Click Add Add a Portal Link dialog box appears see FigureCreating an FTP link using the Srem Add a Portal Link FTP To create an FTP link, perform the following stepsAdd a Portal Link FTP fields To modify a link, perform the following steps Modifying external link settings using the SremExternal link Configuration screen appears see Figure Reordering links using the Srem on External link Configuration fieldsFTP link Configuration screen appears see Figure Modifying FTP link settings using the SremFTP link Configuration fields Reordering links using the SremRe Order Links fields Re Order Links screen appears see FigureCustomizing the portal and user logon 320818-A Chapter Configuring system settings Configuring system settings Cfg/sys Configuring the cluster using the CLIRoadmap of system commands Parameter Health interval Show Rsa server ID Configuring system settings using the CLICfg/sys followed by Cfg/domain #/server/trace/ssldump Configuring the Nortel Snas 4050 host using the CLICfg/domain #/server/trace/tcpdump Cfg/sys/host host IDCfg/sys/host host ID followed by Cluster Host menu includes the following options/cfg/sys/host #/interface # Interface numberPorts = 1,23 PortsHwplatform HaltCfg/sys/host #/delete RebootCfg/sys/cur command Viewing host information Configuring host interfaces using the CLICfg/sys/host host ID/interface interface ID Cfg/sys/host #/interface interface IDVlanid tag Cfg/sys/host #/interface interface ID followed byMode FailovertrunkingPrimary port Configuring static routes using the CLICfg/sys/routes Cfg/sys/host host ID/routesCfg/sys/host #/interface #/routes followed by Configuring host ports using the CLIAdd IPaddr mask GatewayHost Port menu includes the following options Managing interface ports using the CLICfg/sys/host #/port port followed by Cfg/sys/host #/interface interface ID/portsCfg/sys/host #/ports command see Configuring the Access List using the CLICfg/sys/accesslist Interface Ports menu includes the following optionsCfg/sys/accesslist followed by Configuring date and time settings using the CLIDate and Time menu displays Add IPaddr maskDate and Time menu includes the following options Managing NTP serversNTP Servers menu displays Cfg/sys/time followed byNTP Servers menu includes the following options Configuring DNS servers and settings using the CLICfg/sys/time/ntp followed by Cfg/sys/dnsCount count Retransmit intervalTtl ttl Health intervalCfg/sys/dns/servers followed by Managing DNS serversCfg/sys/dns/servers RSA Servers menu displays Switch Software Release Configuring RSA servers using the CLIMove index number new index number Cfg/sys/rsaRSA Servers menu includes the following options Configuring syslog servers using the CLISyslog Servers menu displays Cfg/sys/rsa followed byCfg/sys/syslog followed by Syslog Servers menu includes the following optionsFacility Syslog.conf under UnixAdministrative Applications menu displays Configuring administrative settings using the CLICfg/sys/adm Cfg/sys/adm followed byAudit SrsadminAuth Telnet onoffConfiguring Nortel Snas 4050 host SSH keys using the CLI Enabling TunnelGuard SRS administration using the CLICfg/sys/adm/srsadmin Cfg/sys/adm/srsadmin followed byCfg/sys/adm/sshkeys followed by Cfg/sys/adm/sshkeysDraft-ietf-secsh-publickeyfile KnownhostsSSH Known Host Keys menu displays Managing known hosts SSH keys using the CLISSH Known Host Keys menu includes the following options Cfg/sys/adm/sshkeys/knownhostsAbout the vendor-specific attributes Configuring Radius auditing using the CLIAbout Radius auditing Map this string to the Vendor-Type value Configuring Radius auditingNSNAS-SSL-Audit-Trail Cfg/sys/adm/auditRadius Audit Servers menu displays Managing Radius audit servers using the CLIRadius Audit Servers menu includes the following options Cfg/sys/adm/audit/serversAdds a Radius audit server to the configuration. You Cfg/sys/adm/auth Configuring authentication of system users using the CLICfg/sys/adm/auth/servers Radius Authentication Servers menu displaysFallback onoff Cfg/sys/adm/auth/servers followed by Configuring the cluster using the Srem System Configuration screen appears see Figure Configuring system settings using the SremSelect the System Configuration tab System Configuration fields Configuring a Nortel Snas 4050 host using the SremHosts Host Viewing and configuring TCP/IP propertiesHost fields Viewing and installing host licensesViewing global licenses for all hosts Global Licenses fields Describes the Global Licenses fieldsViewing per domain licenses for all hosts Per Domain Licenses fields Describes the Per Domain Licenses fieldsViewing installed licenses for a particular host Installing a license for a particular host Install New License To continue, choose one of the following procedures Configuring host interfaces using the SremTo create a host interface, perform the following steps Adding a host interfaceSelect the System Hosts host Interfaces tab Add an Interface fieldsClick Apply New interface appears in the Interfaces table Configuring system settings Add an Interface fieldsConfiguring an existing host interface Interface fields Link is transferred back to the primary port To delete a host interface, perform the following steps Configuring static routes using the SremRemoving a host interface IP Routes Viewing static routes for a clusterRoutes Viewing static routes for a hostManaging static routes Viewing static routes for an interfaceAdd Route fields Adding a static routeRemoving a static route Ports Configuring host ports using the SremPort Port fields Managing interface ports using the Srem Add a Port fields Adding interface portsRemoving interface ports Configuring the access list using the Srem Access List Table appears see Figure Adding an access list entrySelect the System Access List tab Access List Table appears see on Click AddAdd Access Host fields Removing an Access List entryAdd Access Host dialog box appears see Figure Date & Time Managing date and time settings using the SremDate & Time fields Configuring the date and time settingsSelect the System Date & Time tab Add NTP Server fields Adding an NTP serverSelect the System Date and Time tab Removing an NTP server DNS Client Settings screen appears see Figure Configuring DNS settings using the SremSelect the System DNS Client Settings tab DNS Client Settings fields Managing syslog servers Configuring servers using the SremFrom this screen, complete the following tasks as necessary Adding a new syslog serverClick Add Add Syslog Server dialog box appears see Figure Add Syslog Server fieldsRemoving an existing syslog server Reordering a new syslog serverAdding a DNS server on Removing an existing DNS server on Add DNS Server fields Adding a DNS serverSelect the System Servers DNS Servers tab Removing an existing DNS server RSA Server Table Managing RSA serversAdding an RSA server To configure RSA servers, perform the following stepsSelect the System Servers RSA Server Table tab Add RSA Server fieldsRemoving the RSA node secret Removing an existing RSA serverRSA Server fields Describes the RSA Server fieldsSelect an RSA server from the RSA Server Table Importing sdconf.recClick Remove Secret Node Import sdconf.rec screen appears see Figure Select the Import sdconf.rec tabImport sdconf.rec fields Configuring administrative settings using the SremConfiguring SRS control settings using the Srem Add SSH Key fields Configuring Nortel Snas 4050 host SSH keys usingSelect from one of the following tasks Show SSH Keys Showing SSH keysConfiguring system settings Managing Nortel Snas 4050 and known host SSH keys SSH Keys Hosts field Click Generate SSH KeysAdd SSH Key Adding an SSH key for a known host using the SremManaging Radius audit settings using the Srem About the vendor-specific attributes Configuring Radius auditing Radius audit Configuration Configuring Radius audit settings using the SremAdd Audit Configuration fields Describes the Add Audit Configuration fieldsSelect from the following tasks to manage the audit servers Managing Radius audit servers using the SremAdd Audit Server fields Adding a new Audit ServerClick Add Add Audit Server dialog box appears see Figure Removing an existing Radius audit server Managing Radius authentication of system users using Configuring Radius authentication of system users using Radius Authentication Configuration fields Radius Server Table appears see Figure Managing Radius authentication servers using the SremAdd Radius Server fields Adding a Radius authentication serverRemoving an existing Radius server Configuring system settings 320818-A Chapter Managing certificates Managing certificates Supported key and certificate formats Sheet 1 Key and certificate formats320818-A Creating certificates Installing certificates and keysUpdating certificates Saving or exporting certificates and keysManaging private keys and certificates using the CLI Roadmap of certificate management commands Cfg/cert cert ID followed by Managing and viewing certificates and keys using the CLICfg/cert cert id /cfg/cert #/show command Phrase Generating and submitting a CSR using the CLICert #/export command CSR information Cfg/cert #/requestEmailemail-address IPip-addressGenerating a CSR Email Address tester@dummyssltesting.comSave the CSR to a file Adding a certificate to the Nortel Snas 4050 using the CLI Add the certificate Enter the following command Entire contents of the key, includingLines Cfg/cert #/certCertificate added Certificate 2# apply Adding a certificate by pastingCfg/cert #/key Adding a private key to the Nortel Snas 4050 using the CLIAdd the private key Enter the following command Adding a private key by pasting Certificate and key import information Cfg/cert #/importAnonymous Admin@hostname.isdCfg/cert #/display Displaying or saving a certificate and key using the CLICopy the private key, certificate, or both, as required Displaying a private key and certificate Certificate and key export information Cfg/cert #/exportAbout the formats, see Key and certificate formats on Cfg/cert #/test Generating a test certificate using the CLIManaging private keys and certificates using the Srem Certificates screen Viewing certificates using the SremTo create a certificate, perform the following steps Creating a certificate using the SremSelect the Certificates Certificates tab Add a Certificate Component fieldsManaging certificates To generate a CSR, perform the following steps Generating and submitting a CSR using the SremCA Request fields Importing a certificate or key using the Srem Import Certificate screen 320818-A Import Certificate fields Displaying or saving a certificate and key using the SremDisplay Certificate screen 320818-A Display Certificates fields Export Certificate screen 320818-A Export Certificate fields Viewing configuration details Viewing certificate information using the SremCertificate Configuration fields Configuration screen appears see FigureDescribes the certificate Configuration fields Viewing general information Managing certificates Certificate Configuration fieldsInfo fields Info screen appears see FigureDescribes the Info fields Managing certificates Info fields Viewing certificate subject settingsSubject fields Subject screen appears see FigureDescribes the Subject fields Managing certificates Subject fields Chapter Configuring Snmp Cfg/sys/adm/snmp Configuring Snmp using the CLIConfiguring Snmp Roadmap of Snmp commands Snmp menu displays Snmp menu includes the following options Configuring Snmp settings using the CLICfg/sys/adm/snmp/snmpv2-mib Configuring the Snmp v2 MIB using the CLISNMPv2-MIBmenu displays SNMPv2-MIBmenu includes the following options Configuring the Snmp community using the CLICfg/sys/adm/snmp/snmpv2-mib followed by Cfg/sys/adm/snmp/communityCfg/sys/adm/snmp/users user ID Configuring SNMPv3 users using the CLIDes Aes Md5 ShaCfg/sys/adm/snmp/users user ID followed by Snmp User menu includes the following optionsCfg/sys/adm/snmp/target target ID Configuring Snmp notification targets using the CLINotification Target menu displays Notification Target menu includes the following options Configuring Snmp events using the CLIEvent menu displays Version v1v2cv3Cfg/sys/adm/snmp/event followed by Event menu includes the following optionsOptions -b name OID op valueEvent Options -t nameOID value OID Options -x nameComment name NotificationThis section contains information about the following topics Configuring Snmp settings using the SremTo configure SNMP, perform the following steps Configuring Snmp using the SremSonmp Snmp Configuration fieldsConfiguring Snmp targets using the Srem Snmp Target Table appears see Figure Adding Snmp targetsTo add an Snmp target, perform the following steps Add Snmp Target 320818-A Click Add Add Snmp Target dialog box appears see FigureSnmp Target fields To manage Snmp targets, perform the following steps Target Settings screen appears see FigureManaging Snmp targets Removing Snmp targets Configuring SNMPv3 users using the Srem SNMPv3 User Table appears see Figure Adding SNMPv3 usersTo add an SNMPv3 user, perform the following steps Add SNMPv3 User 320818-A Click Add Add SNMPv3 User dialog box appears see FigureAdd SNMPv3 User fields Managing SNMPv3 users User Settings screen appears see FigureUser Settings fields Sheet 1 Removing SNMPv3 users Configuring Snmp User Settings fields Sheet 2To manage monitor events, select from the following tasks Configuring Snmp events using the SremManaging monitor events To add monitor events, perform the following steps Adding monitor eventsAdd a Monitor fields Viewing configuration details of monitor eventsTo delete a monitor event, perform the following steps Removing monitor eventsBoolean monitors Boolean monitor fields Sheet 1 Add a Monitor BooleanThreshold monitors Configuring Snmp Boolean monitor fields Sheet 2Threshold monitor fields Existence monitor fields Sheet 1 Existence monitorsExistence monitor fields Sheet 2 Managing notification eventsNotification Table screen appears see Figure Adding notification eventsTo add notification events, perform the following steps Add a Notification Event fields Add a Notification EventTo delete a notification event, perform the following steps Removing notification events659 Viewing system information and performance statistics Roadmap of information and statistics commandsInfo StatsInformation menu displays Viewing system information using the CLIDomain ID Information menu includes the following optionsInfo followed by Info/mac command SwitchidKick domain ID UsernameSwitch ID Info/ip commandMac MACaddr Username-prefixEthernet LocalTo view active alarms, use the following command Viewing alarm events using the CLIInfo/events Info/events followed byViewing AAA statistics using the CLI Viewing log files using the CLITo view and download log files, use the following command Logs menu displays Logs menu includes the following optionsStats/aaa followed by Stats/aaaTotal Isdhost host IDMain# stats/aaa/dump Stats/dump Viewing all statistics using the CLIViewing local information using the Srem Information fields Information screen appears see FigureDescribes the Information fields Viewing cluster information using the Srem Viewing the controller list using the Srem Controller List fields Describes the Controller List fieldsViewing Sonmp topology information using the Srem Sonmp State fields Describes the Sonmp State fieldsViewing switch distribution using the Srem Switch Distribution fields Viewing port information using the SremDescribes the Switch Distribution fields Port Information fields Sheet 1 Describes the Port Information fieldsViewing license information using the Srem Viewing global license information Nortel Snas 4050, SSL is the only type of license Viewing license information for a domain Viewing session details using the Srem Sessions screen Viewing active sessions using the SremSessions parameters Describes the Sessions parametersSession Properties screen Viewing details for a particular sessionDescribes the Session Properties parameters Ending active user sessionsKickOut User fields Click KickOutNumber of Sessions fields Viewing the number of active sessions using the SremDescribes the Number of Sessions fields Viewing alarms using the Srem Active Alarms screen 320818-A Viewing active alarms using the SremActive Alarms fields Describes the Active Alarms fieldsDownload Alarms screen 320818-A Downloading alarms using the SremDownload Alarms fields Managing log files using the SremDescribes the Download Alarms fields Logs screen Viewing the log list using the SremDownload fields Sheet 1 Downloading log files using the SremDescribes the Download fields Viewing AAA statistics using the Srem Hosts table Viewing AAA statistics for a hostLicense tab opens see on License statistics Sheet 1 Viewing License statisticsFor a description of the fields, seeTable Radius statistics 320818-A Viewing Radius statisticsRadius statistics Local DB statistics Sheet 1 Viewing Local database statisticsViewing Ldap statistics Ldap statistics Statistics table Viewing AAA statistics for the domainSelect one of the following tasks Viewing License statistics For the Nortel Snas 4050, SSL is the only type of license Viewing Radius Statistics Sheet 1 For a description of the fields, see Table320818-A Viewing Local database statistics Logging Accepted Rejected Viewing Ldap Statistics Sheet 1 Viewing Ethernet statistics using the Srem Ethernet Interface table Viewing Rx statistics Sheet 1 Viewing Rx statisticsFor a description of the fields seeTable Rx Frames Displays number of errors due to malformed packets Viewing Tx Statistics Sheet 1 Viewing Tx statisticsInformation, see Configuring host ports using the Srem Page Chapter Maintaining and managing the system Maint Managing and maintaining the system using the CLIMaintaining and managing the system Boot Roadmap of maintenance and boot commandsMaintenance menu displays Performing maintenance using the CLIDumplogs protocol server filename all-isds? Maintenance menu includes the following optionsAll-isds? Maint followed byDomain ID output Starttrace tagsMode StoptraceCfg/dump passphrase Backing up or restoring the configuration using the CLICfg Configuration menu backup and restore commandsPtcfg protocol Server filename passphraseGtcfg protocol Cfg followed byPassphrase Dump passphraseBoot menu displays Boot menu includes the following options Managing Nortel Snas 4050 devices using the CLIBoot followed by SoftwareCfg/sys/host #/delete command see Cfg/sys/host #/reboot command insteadCfg/sys/host #/delete command Boot/softwareActivate command Boot/software followed bySoftware Management menu includes the following options Activate versionPerforming maintenance using the Srem Managing and maintaining the system using the SremUpgradecomplete.pkg Ftp 10.0.0.1 pub/SSL-5.1.1Dumps Dumping logs and status information using the SremDump fields Starting and stopping a trace using the SremClick Dump To start or stop a trace, perform the following steps Start/Stop Trace fields Click Check Configuration Checking configuration using the SremBackup & Restore 320818-A Backing up or restoring the configuration using the SremIf you later restore the configuration, the Certificate Backup & Restore fieldsImage List Managing software versions using the SremImage List fields Describes the Image List fieldsFollowing tasks are available from this screen Viewing details of the active software image Select the System Boot Image List tabActivating a software image Removing an inactive software image Downloading images using the SremMaintaining and managing the system Download Image fields Rebooting or deleting a Nortel Snas 4050 device usingReboot/Delete ISD Options Downloading files using the Srem File Download fields File Download screen appears see FigureDescribes the File Download fields Maintaining and managing the system File Download fields Running Nortel Snas 4050 diagnostics using the SremDiagnostics fields Describes the Diagnostics fieldsMaintaining and managing the system 320818-A Upgrading the Nortel Snas Chapter Upgrading or reinstalling the softwareUpgrading or reinstalling the software Performing minor and major release upgradesEnter the host name or IP address of the server Downloading the software image using the CLIAdmin@hostname/IP.isd Activating the software upgrade packageNsnas Log in again and verify the new software version At the Software Management# prompt, enterBefore you begin Reinstalling the softwareUpgrading or reinstalling the software Reinstalling the software from an external file server Alteon WebSystems, Inc Booting LoginRestarting Restarting system Run install-nsnas isd4050 Reinstalling the software from a CDWhen the installation is complete, remove the CD and reboot Upgrading or reinstalling the software 320818-A Chapter Command Line Interface Establishing a console connection Connecting to the Nortel SnasCommand Line Interface Requirements ProcedureConsole configuration parameters Establishing a Telnet connection Enabling and restricting Telnet accessRunning Telnet Establishing a connection using SSHEnabling and restricting SSH access Running an SSH client For more information, see How to get help on Accessing the Nortel Snas 4050 clusterUser access levels Idle timeout CLI Main Menu or SetupCommand line history and editing Command Line Interface Scenario On page 780 illustrates the network configurationNetwork devices Sheet 1 Configuration exampleVLANs for the Ethernet Routing Switch Summarizes the VLANs for the Ethernet Routing SwitchConfiguration example Network devices Sheet 2 Steps Configure the network DNS serverCreate a new Dhcp scope see Figure Configure the network Dhcp serverNaming the new Dhcp scope 320818-A Specify the IP address range for the Dhcp scope see Figure Choosing to configure additional options 320818-A Enter the IP address of the default gateway see Figure Specifying the DNS server Enter the IP address of the DNS server see FigureShows the Dhcp scopes created for use in this example Configure the network core routerSteps Configure the Ethernet Routing Switch 8300 using the CLIConfiguring the VoIP VLANs Configuring the Nortel Snas 4050 pVIP subnetConfiguring the Red, Yellow, and Green VLANs Enabling SSHConfiguring the Nsna ports Configuring the Nsna uplink filterEnabling Nsna globally Add the uplink portSetting the switch IP address Configure the Ethernet Routing Switch5510-48Tconfig# ssh Configuring SSH5510-48Tconfig#nsna nsnas 10.40.40.0/24 5510-48Tconfig#nsna vlan 240 color voipConfiguring the login domain controller filters Configure the Nortel Snas5510-48Tconfig-if#exit 5510-48Tconfig#nsna enable10.40.40.1 Performing initial setupEnable SRS administration Completing initial setupEnter a password for the admin user Main# cfg/sys/adm/srsadmin/enaMain# cfg/domain 1/sshkey/generate Adding the network access devicesGroup 1# /cfg/domain 1/aaa/tg/quick TG#../group 1/tgsrs srs-rule-testAdd the switch manually Adding the Ethernet Routing SwitchImport the public SSH key from the switch Main# cfg/domain 1/switch 1 Creating SwitchMain# cfg/domain 1/switch 2/sshkey/import Use the quick switch wizardMain# cfg/domain 1/switch 1/vlan/add yellow Switch Vlan# ../../vlan/add yellowMain# cfg/domain 1/switch 1/ena Switch 1# ../switch 2/ena Enabling the network access devicesSwitch 2# apply Changes applied successfully Domain Vlan# apply Changes applied successfullyConfiguration example 320818-A Appendix a CLI reference Global commands Using the CLIExit PasteQuit NetstatCommand line history and editing You can use the following CLI command shortcuts Command stackingCommand line history and editing options Sheet 2 CLI shortcutsTab completion Command abbreviationNTP Servers# ../../dns/servers Main# cfg/sys/time/ntp/list Main# c/sy/t/n/lConfiguration# cur sys Using a submenu name as a command argumentIP address and network mask formats Using slashes and spaces in commandsIP addresses Network masksVariables VariablesCLI Main Menu CLI command referenceAppendix a CLI reference Information menu Information menu commands Sheet 1Certs SysStatistics menu Configuration menu commands Sheet 1 Configuration menuCfg/cert cert ID Name name CertAuth ID Radiusldaplocal Cfg/domain Name nameAuth #/adv Secondauth auth ID Auth ID for LdapAuth #/ldap Searchbase Cfg/domain #/aaa ServersAuth #/ldap/activedire Truefalse Expiredgro GroupCfg/domain #/aaa Add user name Auth #/local Password groupPasswd user name Auth #/radius Vendorid vendor IDCfg/domain #/aaa Vendorid vendor ID Profile ID Access rule Number Linkset DelAuth #/radius Vendortype vendor Type Ena Dis Cfg/domain #/aaaGroup #/linkset Del index number Group #/extend # Del index numberRadacct Vpnattribu Ena Dis Cfg/domain #/aaa ListRecheck interval Cfg/domain #/aaa/tg QuickHeartbeat interval Cfg/domain #/adv Interface interfaceCfg/domain #/linkset Name name RestoreLinkset ID Text text Linkset #/link index Text textCfg/domain #/portal Color1 code Content Server filenameColors Color2 code Lang CharsetAdv/traflog Udpport port Cfg/domain #/server Sysloghost IPaddrProtocol Ssl2ssl3ssl23tls1Switch ID Type ERS8300ERS5500 Cfg/domain #/switch Name nameSwitch #/dis Switch #/enaPassphrase Cfg/domain #/vlan Add name Vlan IDCfg/gtcfg protocol Passphrase Cfg/lang Import protocolAdd IPaddr mask Cfg/sys/accesslist ListCfg/sys/adm Snmp Sonmp onoffShared secret Cfg/sys/adm/auth ListCfg/sys/adm/snmp Ena Versions v1v2cv3Disabledenabled Cfg/sys/adm/snmp Ip IPaddr Snmpv2-mib SnmpEnableCfg/sys/adm/snmp Addmonitor Event Options -b nameUsers user ID Seclevel Cfg/sys/adm/snmp Name nameDis Cfg/sys/adm/sshkeys Generate KnownhostsCfg/sys/dns/servers List Mode fullhalf Cfg/sys/host #/routesInterface #/ports Del port Add port Cfg/sys/host # ListHost ID SysName name Cfg/sys/host Ip IPaddrSysLocatio Cfg/sys/rsa Rsaname namePassword new Add IPaddr Cfg/sys/user Password oldPassword confirm Username Password userBoot menu commands Boot menuBoot Software Reboot Delete Boot/software CurMaintenance menu commands Maintenance menuMaint Dumplogs protocol All-isds?Troubleshooting tips Chapter TroubleshootingVerify the current configuration Cannot connect to the Nortel Snas 4050 using Telnet orEnable Telnet or SSH access Check the Access ListCheck the IP address configuration # /cfg/cur sys Cannot contact the MIP Cannot add the Nortel Snas 4050 to a clusterEnter network address IP address Enter netmask network mask Add Interface 1 IP addresses and the MIP to the Access ListMain# /cfg/sys/accesslist/add Console connection Nortel Snas 4050 stops respondingTelnet or SSH connection to the MIP Administrator user password User password is lostOperator user password Root user passwordTrace tools Boot user passwordUser fails to connect to the Nortel Snas 4050 domain Main# maint/starttraceTag Description Sample output Sample output for the trace commandNetwork diagnostics System diagnosticsInstalled certificates Main# /cfg/sys/cur Cluster Host 1# curMain# /stats/dump Main# /info/ethernetError log files Active alarms and the events log fileTroubleshooting Syslog messages by message type Appendix B Syslog messagesLists the operating system Critical messages Operating system OS messagesLists the Emerg operating system messages Lists the operating system Emerg messages Operating system messages ErrorSystem Control Process messages Alarm severity and syslog level correspondence About alarm messagesLists the System Control Process Info messages System control process messages InfoAlarm System Control Process messages AlarmAbout event messages Audit/ena commandSystem Control Process messages Event With /cfg/sys/curTraffic Processing messages Error Sheet 1 Lists the Traffic Processing Error messagesTraffic Processing Subsystem messages Lists the Traffic Processing Critical messagesCss error reason Lists the Traffic Processing Warning messages Traffic Processing messages Error Sheet 3Traffic Processing messages Warning Domain #/server/portalTraffic Processing messages Info Start-up messagesLists the Traffic Processing Info messages AAA messages Error Lists the AAA Error messagesAAA subsystem messages Lists the Start-up Info messagesLog value Message Category Contains AAA messages Info Sheet 1AAA messages Info Sheet 2 Nsnas subsystem messagesThere are two categories of Nsnas subsystem messages Nsnas Error Lists the Nsnas Error messagesLists the Nsnas Info messages Nsnas Info Sheet 1Lists the syslog messages in alphabetical order Syslog messages in alphabetical orderNsnas Info Sheet 2 Syslog messages in alphabetical order Sheet 1Sys/adm/audit/ena command Syslog messages in alphabetical order Sheet 3 Error NsnasInfo AAA Syslog messages in alphabetical order Sheet 5 Error AAACfg/domain #/server/portal Authenticate is set to offSyslog messages in alphabetical order Sheet 7 Root filesystem repaired Syslog messages in alphabetical order Sheet 9 Unable to use the certificate for Following MIBs are supported by the Nortel Snas Supported MIBsSNMPv2-MIB ANAifType-MIBAppendix C Supported MIBs Supported MIBs Sheet 1ALTEON-ISD-SSL-MIB Supported MIBs Sheet 2Appendix C Supported MIBs Supported MIBs Sheet 3 CLI, using the /cfg/sys/adm/snmp/target commandSupported traps Use the CLI command /cfg/sys/adm/snmp/snmpv2-mibDescribes the traps supported by the Nortel Snas Supported trapsAppendix C Supported MIBs 320818-A Supported ciphers Appendix D Supported ciphersAppendix D Supported ciphers Register the Schema Management dll Windows Server Install All Administrative Tools Windows 2000 ServerClick Start and select Run Nortel Secure Network Access Switch 4050 User Guide Select a Title for the Program page displays Permit write operations to the schema Windows 2000 ServerCreate a shortcut to the console window Nortel Secure Network Access Switch 4050 User Guide Add isdUserPrefs attribute to nortelSSLOffload class Create the new classAdd the nortelSSLOffload Class to the User Class 320818-A Appendix F Configuring Dhcp to auto-configure IP Phones Creating the Dhcp options Configuring IP Phone auto-configurationAppendix F Configuring Dhcp to auto-configure IP Phones Dhcp Management Console Click Add Option Type dialog box opens see on Predefined Options and Values dialog box opens see FigureOption Type dialog box Option Type dialog box field values for Vlan Information Scope Options dialog box Scope Options dialog box displays see FigureCall Server Information string parameter values Vlan ID Information string parameter values Setting up the IP PhonePage Create the logon script see Creating a logon script on Configuring the logon scriptCreating the script as a batch file Using Windows, open a plain text editor, such as NotepadCreating a logon script Creating the script as a VBScript file Assigning the logon scriptOn the Group Policy tab, click Open Double-clickDefault Domain PolicyRight-click the Default Domain Policy and select Edit Appendix H Software licensing information Appendix H Software licensing information GNU General Public LicenseAppendix H Software licensing information Appendix H Software licensing information Apache Software License, Version Bouncy Castle license Index SymbolsIndex Index DNS Index Local authentication database Add users Cannot contact Index See also SRS rule SSL Index Index