3com Command Reference v2p3

3Com Router Software Command Reference
http://www.3com.com/
Part No:
DUA1370-1AAA01
Published September 2005
Command Reference Guide Getting Started v2.30 Router Software
Table of Contents
Table of Contents
Chapter 1 Basic Configuration Commands................................................................................ 1-1 1.1 Basic Configuration Commands ........................................................................................ 1-1 1.1.1 clock datetime ......................................................................................................... 1-1 1.1.2 clock summer-time .................................................................................................. 1-1 1.1.3 clock timezone......................................................................................................... 1-2 1.1.4 command-privilege .................................................................................................. 1-3 1.1.5 cpu-usage cycle ...................................................................................................... 1-4 1.1.6 display clipboard...................................................................................................... 1-5 1.1.7 display clock ............................................................................................................ 1-6 1.1.8 display cpu-usage ................................................................................................... 1-6 1.1.9 display cpu-usage history........................................................................................ 1-8 1.1.10 display history-command .................................................................................... 1-10 1.1.11 display memory ................................................................................................... 1-10 1.1.12 display version..................................................................................................... 1-11 1.1.13 header ................................................................................................................. 1-12 1.1.14 hotkey.................................................................................................................. 1-13 1.1.15 language-mode ................................................................................................... 1-15 1.1.16 lock ...................................................................................................................... 1-16 1.1.17 quit....................................................................................................................... 1-16 1.1.18 return ................................................................................................................... 1-17 1.1.19 super ................................................................................................................... 1-18 1.1.20 super password ................................................................................................... 1-19 1.1.21 sysname .............................................................................................................. 1-20 1.1.22 system-view......................................................................................................... 1-20 1.1.23 vrbd ..................................................................................................................... 1-21 1.2 Command-Alias Configuration Commands ..................................................................... 1-21 1.2.1 command-alias enable .......................................................................................... 1-21 1.2.2 command-alias mapping ....................................................................................... 1-22 1.2.3 display command-alias.......................................................................................... 1-23
3Com Corporation i
Chapter 1 Basic Configuration Commands

1.1 Basic Configuration Commands
1.1.1 clock datetime
Syntax
clock datetime time date
View
System view
Parameter
time: Current time in the format of HH:MM:SS, where HH is hours in the range 0 to 23, MM is minutes in the range 0 to 59, and SS is seconds in the range 0 to 59. date: Current date in the format of MM/DD/YYYY or YYYY/MM/DD. MM is the month of the year in the range 1 to 12, DD is the day of the month in the range 1 to 31, and YYYY is a year in the range 2000 to 2099.
Description
Use the clock datetime command to set the current time and date of the router. The current time and date of the router must be set in an environment that requires the acquisition of absolute time. You may choose not to provide seconds when inputting the time parameters. Related command: display clock.
Example
# Set the current system time to 00:00:00 01/01/2001.
[3Com] clock datetime 0:0:0 01/01/2001
1.1.2 clock summer-time

Syntax
clock summer-time zone_name { one-off | repeating } start-time start-date end-time end-date add-time
3Com Corporation 1-1
undo clock summer-time
View
System view
Parameter
zone_name: Name of the daylight saving time, a character string of 1 to 32 characters. one-off: Only sets the daylight saving time of some year. repeating: Sets the daylight saving time of every year starting from some year. time: In the format of HH:MM:SS (hours/minutes/seconds). date: In the format of MM/DD/YYYY (months/days/years) or YYYY/MM/DD, where YYYY is in the range 2000 to 2099.
Description
Use the clock summer-time command to set the name, starting, and ending time of the daylight saving time. Use the undo clock summer-time command to cancel the configuration of the daylight saving time. After the configuration takes effect you can use the display clock command to view it. The time of the log or debug information is the local time of which the time zone and daylight saving time has been adjusted. Related command: clock timezone.
Example
# During daylight saving time in z2 between 06:00:00 on 2002/06/08 and 06:00:00 on 2002/09/01, set the system clock ahead one hour.
[3Com] clock summer-time z2 one-off 06:00:00 06/08/2002 06:00:00 09/01/2002 01:00:00
# During daylight saving time in z2 between 06:00:00 on 06/08 and 06:00:00 on 09/01 every year since 2002, set the system clock ahead one hour.
[3Com] clock summer-time z2 repeating 06:00:00 06/08/2002 06:00:00 09/01/2002 01:00:00
1.1.3 clock timezone

Syntax
clock timezone zone_name { add | minus } time
undo clock timezone
View
System view
Parameter
zone_name: Time zone name, a string of 1 to 32 characters. add: Positive offset to universal time coordinated (UTC) time. minus: Negative offset to UTC time. time: In the format of HH/MM/SS (hours/minutes/seconds).
Description
Use the clock timezone command to set the local time zone. Use the undo clock timezone command to restore the local time zone to the default UTC time zone. After the configuration takes effect you can view it by executing the display clock command. The time applied to the log and debug information is the local time with time zone and daylight saving time adjustment. Related command: clock summer-time.
Example
# Set the name of the local time zone to Z5, five hours ahead of UTC time.
[3Com] clock timezone z5 add 05:00:00
1.1.4 command-privilege
Syntax
command-privilege level level view view command-key undo command-privilege view view command-key
View
System view
Parameter
level level: Command level ranging from 0 to 3. view view: Specifies a view.
commandkey: Command to be set in the specified view.
Description
Use the command-privilege command to assign a command level to the commands in the specified view. Use the undo command-privilege view command to restore the default. Command privilege falls into four levels, visit, monitor, system, and manage, which are identified by 0 through 3. For a user that logs onto the router from a user interface, the command level that the user can access can be the one administratively assigned to the user or the one assigned to the user interface, whichever is smaller. For more information on how to assign command level to a user interface, refer to Chapter 4 User Interface Configuration Commands in this Command Reference Guide System Management section. The following table describes the default level of the commands. Table 1-1 Default level of the commands Command level Visit (0) Monitor (1) System (2) Manage (3) Commands ping, tracert, telnet display, debugging Configuration commands Key settings, FTP, Xmodem, TFTP, file system operation commands
Example
# Set the command level of the interface command to 0.
[3Com] command-privilege level 0 view system interface
1.1.5 cpu-usage cycle

Syntax
cpu-usage cycle { 5sec | 1min | 5min | 72min } [ slave | slot slot-num ]
View
System view
Parameter
5sec: Sets the statistic interval to five seconds. 1min: Sets the CPU usage statistic interval to one minute. 5min: Sets the CPU usage statistic interval to five minutes. 72min: Sets the CPU usage statistic interval to 72 minutes. slave: Given a dual-RPU/ERPU supported device, sets the usage statistic interval of the CPU on the slave RPU/ERPU. slot slot-num: Given a distributed device, sets the usage statistic interval of the CPU on the interface board specified by its slot number.
Description
Use the cpu-usage cycle command to set the CPU usage statistic interval. Depending on the specified interval the statistical period displayed by executing the display cpu-usage history command is different. The default CPU usage statistic interval is 60 seconds.
Example
# Set the CPU usage statistic interval to five seconds.
[3Com] cpu-usage cycle 5Sec
1.1.6 display clipboard

Syntax
display clipboard
View
Any view
Parameter
None
Description
Use the display clipboard command to view the contents of the clipboard.
Example
# Display the contents of the clipboard.

<3Com> display clipboard
-----------------clipboard ----------------ip route 10.1.0.0 255.0.0.0 eth 0
1.1.7 display clock

Syntax
display clock
View
Any view
Parameter
None
Description
Use the display clock command to view the current system time and date. If the displayed system time and date are incorrect use the clock datetime command to adjust them.
Example
# Display the current time and date.
<3Com> display clock 15:50:45 UTC Mon 02/12/2003
1.1.8 display cpu-usage

Syntax
display cpu-usage [ configuration | number [ offset ] [ verbose ] [ from-device ] ]
View
Any view
Parameter
configuration: Displays the configuration of CPU usage statistics, such as whether CPU usage statistics is enabled, statistic interval, and CPU usage alarm thresholds. number: Number of CPU usage statistics queries. offset: Offset of the starting entry to be displayed to the last statistic entry.
verbose: Displays the detailed information. from-device: Displays information stored on an external storage device such as a Flash memory or hard disk. (Not available yet.)
Description
Use the display cpu-usage command to view statistics about CPU usage. The function of both display cpu-usage and display cpu-usage 1 0 verbose is to display detailed information on the last CPU usage statistics.
Example
# Display detailed information on CPU usage statistics.
[Router] display cpu-usage ===== Current CPU usage info ===== CPU Usage Stat. Cycle: 1 (Second) CPU Usage : 1% 15:51:48
CPU Usage Stat. Time : 2004-09-15
CPU Usage Stat. Tick : 0x27(CPU Tick High) 0x88cf18e4(CPU Tick Low) Actual Stat. Cycle : 0x0(CPU Tick High) 0x2264cc2(CPU Tick Low)
TaskName VIDL TICK co0 SRM ROUT SOCK VTYD IPSP TAC SC RDS ACM LSSO TRAP NTPT PIMT LSPM L2V IPS
CPU 99% 0% 0% 0% 0% 0% 0% 0% 0% 0% 0% 0% 0% 0% 0% 0% 0% 0% 0%
Runtime(CPU Tick High/CPU Tick Low) 0/ 222de39 0/ 0/ 0/ 0/ 0/ 0/ 0/ 0/ 0/ 0/ 0/ 0/ 0/ 0/ 0/ 0/ 0/ 0/ 88d8 6e5 1da 1d6c 3c65 1074 28b 15ac 10de e71 180a 3a2 2d0 1082a 2f8 90c 1066 7575

SIP DHCP HOT DHCC 0% 0% 0% 0% 0/ 0/ 0/ 0/

6b87 33d fca 414
1.1.9 display cpu-usage history

Syntax
display cpu-usage history [ task task-id ] [ slave | slot slot-num ]
View
Any view
Parameter
task task-id: Specifies a task ID. slave: Given a dual-RPU/ERPU supported device, sets the usage statistic interval of the CPU on the slave RPU/ERPU. slot slot-num: Given a distributed device, sets the usage statistic interval of the CPU on the interface board specified by its slot number.
Description
Use the display cpu-usage history command to view in graphics the CPU usage statistic history of the entire system, the specified task, or the interface board in the specified slot.
Example
# Display the CPU usage statistic history of the entire system.
[Router] display cpu-usage history 100%| 95%| 90%| 85%| 80%| 75%| 70%| 65%| 60%| 55%| 50%|

45%| 40%| 35%| 30%| 25%| 20%| 15%| 10%| 5%|
-----------------------------------------------------------10 20 30 40 50 60 (minutes)
cpu-usage last 60 minutes(SYSTEM)
# Display the CPU usage statistic history of task 6.

[Router] display cpu-usage history task 6 100%| 95%| 90%| 85%| 80%| 75%| 70%| 65%| 60%| 55%| 50%| 45%| 40%| 35%| 30%| 25%| 20%| 15%| 10%| 5%| -----------------------------------------------------------10 20 30 40 50 60 (minutes)
cpu-usage last 60 minutes(T03M)
1.1.10 display history-command

Syntax
display history-command
View
Any view
Parameter
None
Description
Use display history-command to view the history commands. The terminal automatically saves the commands that are input and each ended with a carriage return.
Example
# Display history commands.
<3Com> display history-command display interface displayinterface e 1/0/0 interface e 1/0/0
1.1.11 display memory

Syntax
display memory
View
Any view
Parameter
None
Description
Use the display memory command to view information on system memory load.
Example
# Display information on the current system memory load.
[Router] display memory System Total Memory(bytes): 41918976 Total Used Memory(bytes): 15949136 Used Rate: 38%
1.1.12 display version

Syntax
display version
View
Any view
Parameter
None
Description
Use the display version command to view system version information. By viewing system version information you can learn about the current software version, rack type, and the information related to the main control board and interface boards.
Example
# Display system version information of the AR 46-40.
<3Com> display version Copyright Notice:SK_VSIR_NAME crea
All rights reserved (Sep 13 2004).rule 1 de icmp ?create... 3Com Versatile Routing Platform Software 3Com(R) software, Version 2.30, Release 0001SP03 Copyright (c) 2003-2004 Corp. All rights reserved . Copyright (c) 2000-2003 3Com Corp. All rights reserved. 3Com Router AR46-40 uptime is 0 week, 0 day, 0 hour, 22 minutes
Rpu's version information: Router AR46-40 with 1 PowerPC 750 Processor

256M 32M 512K Pcb bytes SDRAM bytes FLASH bytes NVRAM Version : RTM1RPUA.1
RPE Logic Version : RPE3.4 SBG Logic Version : 012 Small BootROM Big BootROM Version : 3.04
Version :
5.03
Config Register points to FLASH
[SLOT 0] AUX0 [SLOT 0] ETH0 [SLOT 0] ETH1
(Hardware)A.1, (Driver)1.0, (Cpld)3.4 (Hardware)A.1, (Driver)1.0, (Cpld)3.4 (Hardware)A.1, (Driver)1.0, (Cpld)3.4
1.1.13 header
Syntax
header [ incoming | login | shell ] text undo header [ incoming | login | shell ]
View
System view
Parameter
incoming: Banner displayed when a user logs onto a terminal user interface. login: Login banner at authentication. shell: Banner displayed for entering user view. text: Content of the banner.
Description
Use the header command to set the banner information to be displayed. Use the undo header command to clear the banner information. text uses the first English character to indicate the beginning and end of the banner message. After the end character is input, the system quits automatically. If no keyword, login, shell, or incoming is specified, then, by default the configured banner is for login. You may input the banner message in either of the following ways:
1) 2)
Input all the contents in one line. 256 characters including the command keyword are allowed now. Input the contents in separate lines each ended with a carriage return. 1024 characters are allowed excluding the command keyword.
Example
# Configure the banner to be displayed when a user enters user view.
[3Com] header shell % SHELL : Hello! Welcome use 3Com R1760.% [3Com]
Note: "%" serves as both beginning and end characters of the defined text. The second input of "%" therefore indicates the end of the text and has the system quit the header command. # Test the configuration.
[3Com] quit <3Com> quit ********************************************************* * * All rights reserved (1997-2003) Without the owner's prior written consent, * *
*no decompiling or reverse-engineering shall be allowed.* *********************************************************
User interface con0 is available Please press ENTER. SHELL : Hello! Welcome use 3Com R1760. <3Com>
1.1.14 hotkey
Syntax
hotkey [ CTRL_G | CTRL_L | CTRL_O | CTRL_T | CTRL_U ] command_text undo hotkey [ CTRL_G | CTRL_L | CTRL_O | CTRL_T | CTRL_U ]
View
System view
Parameter
CTRL_G: Assigns the hot key <CTRL+G> to a command.
CTRL_L: Assigns the hot key <CTRL+L> to a command. CTRL_O: Assigns the hot key <CTRL+O> to a command. CTRL_T: Assigns the hot key <CTRL+T> to a command. CTRL_U: Assigns the hot key <CTRL+U> to a command. command_text: The command line associated with the hot key.
Description
Use the hotkey command to assign a hot key to a command line. Use the undo hotkey command to restore the default assignment scheme of the system: <CTRL_G> to display current-configuration, <CTRL_L> to display ip routing-table, <CTRL_O> to undo debugging all, and null to other two hot keys. However, you can customize this scheme.
Example
# Assign the hot key < CTRL_T> to the display tcp status command.
[3Com] hotkey ctrl_t display tcp status [3Com] display hotkey ----------------- HOTKEY ----------------=Defined hotkeys= Hotkeys Command CTRL_G CTRL_L CTRL_O CTRL_T display current-configuration display ip routing-table undo debug all display tcp status
=Undefined hotkeys= Hotkeys Command CTRL_U NULL
=System hotkeys= Hotkeys Function CTRL_A CTRL_B CTRL_C CTRL_D CTRL_E CTRL_F Move the cursor to the beginning of the current line. Move the cursor one character left. Stop current command function. Erase current character. Move the cursor to the end of the current line. Move the cursor one character right.

CTRL_H CTRL_K CTRL_N CTRL_P CTRL_R CTRL_V CTRL_W CTRL_X CTRL_Y CTRL_Z CTRL_] ESC_B ESC_D ESC_F ESC_N ESC_P ESC_< ESC_>
Erase the character left of the cursor. Kill outgoing connection. Display the next command from the history buffer. Display the previous command from the history buffer. Redisplay the current line. Paste text from the clipboard. Delete the word left of the cursor. Delete all characters up to the cursor. Delete all characters after the cursor. Return to the user view. Kill incoming connection or redirect connection. Move the cursor one word back. Delete remainder of word. Move the cursor forward one word. Move the cursor down a line. Move the cursor up a line. Specify the beginning of clipboard. Specify the end of clipboard.
1.1.15 language-mode
Syntax
language-mode { chinese | english }
View
User view
Parameter
None
Description
Use the language-mode command to toggle the display language of the command line interface (CLI) between English and Chinese. The default language is English.
Example
# Toggle the language from English to Chinese.
<3Com> language-mode chinese Change language mode, confirm? [Y/N]y

% Switch to Chinese mode.
1.1.16 lock
Syntax
lock
View
User view
Parameter
None
Description
Use the lock command to lock the illegitimate users out of the active user interface, which can be console, AUX, or VTY. After entering the lock command you are prompted to enter and confirm the screensaver's password. If you enter the same password twice, the interface is locked. To unlock and access the system after that you must press <Enter> first and enter the password you just set.
Example
# Log in through the console port and lock the active user interface.
<3Com> lock Password: Again:
1.1.17 quit
Syntax
quit
View
Any view
Parameter
None
Description
Use the quit command to quit to a lower-level view (if the current view is user view, you exit the system). The views fall into three levels, in ascending order: User view (for user level 0) System view (for user level 3) Configuration view (such as routing protocol view, interface view, and VPDN group view) Related command: return.
Example
# Switch from Ethernet1/0/0 interface view to system view, and then to user view.
[3Com-Ethernet1/0/0] quit [3Com] quit <3Com>
1.1.18 return
Syntax
return
View
Any view except for user view
Parameter
None
Description
Use the return command to return to user view from any other view as you would with the hot key <Ctrl+Z>. Related command: quit.
Example
# Return to user view from system view.
[3Com] return <3Com>
1.1.19 super
Syntax
super [ level ]
View
User view
Parameter
level: User level ranging from 0 to 3.
Description
Use the super command to switch from current user level to a specified user level, or the command level that the user can access. There are four levels of commands: Visit: involves commands for network diagnosis (such as ping and tracert), and commands for accessing an external device (such as Telnet client, SSH client, RLOGIN). Saving the configuration file is not allowed at this level. Monitor: includes the display and debugging commands for system maintenance, service fault diagnosis. Saving the configuration file is not allowed at this level. System: provides service configuration commands, including routing and commands at each level of the network for providing services. Manage: influences the basic operation of the system and the system support modules for service support. Commands at this level involve file system, FTP, TFTP, Xmodem download and configuration file switch, power control, standby board control, user management, level setting, as well as parameter setting within a system (the last case involves those non-protocol or non RFC provisioned commands). Login users are also classified into four levels that correspond to the four command levels. After users at different levels log in, they can only use commands at their own or lower levels. To fence off intrusion of illegitimate users, users are required to provide the correct super password, if one has been configured using the super password command, when they switch from a lower level to a higher level. For privacys sake, the entered password is not displayed on the screen. Users have three chances to provide the correct password. Only after the correct password is entered can they switch to the higher level. Otherwise, the original user level remains unchanged. Related command: super password.
Example
<3Com> super 3 Password: User privilege changes to 3 level, just equal or less this level's commands can be used. Privilege note: 0-VISIT, 1-MONITOR, 2-SYSTEM, 3-MANAGE
1.1.20 super password

Syntax
super password [ level user-level ] { simple | cipher } password undo super password [ level user-level ]
View
System view
Parameter
user-level: User level in the range 1 to 3. simple: Plain text password, a string of up to 16 consecutive characters. cipher: Ciphertext password. You can define it in plain text, or a string of up to 16 consecutive characters. The system will automatically generate the corresponding ciphertext, for example, 7-CZB#/YX]KQ=^Q`MAF4<1!! for 123. Alternatively, you can define the password directly in ciphertext, a string of up to 24 characters. Whichever method is used, you must provide the password in plain text at authentication time. For this reason you are recommended to define a ciphertext password in plain text.
Description
Use the super password command to set the password needed to switch from a lower user level to a higher level. Use the undo super password command to cancel the current setting. By default, plain text password is adopted.
Example
# Set the password to zbr for switching the user level to three.
[3Com] super password level 3 simple zbr
1.1.21 sysname
Syntax
sysname sysname
View
System view
Parameter
sysname: Name of the router, a string containing 1 to 30 characters.
Description
Use the sysname command to set the name of the router. The router name defaults to 3Com. Modifying the router name affects the prompt of the CLI. For example, if the router's name is 3Com, the prompt of user view is <3Com>.
Example
# Set the name of the router to R1760.
[3Com] sysname R1760 [R1760]
1.1.22 system-view
Syntax
system-view
View
User view
Parameter
None
Description
Use the system-view command to enter system view from current user view. Related command: quit, return.
Example
<3Com> system-view System View: return to User View with Ctrl+Z. [3Com]
1.1.23 vrbd
Syntax
vrbd
View
Any view
Parameter
None
Description
Use the vrbd command to view software version details, including product software version and the matched platform software version.
Example
# Display the internal version information.
[Router] vrbd Routing Platform Software Version AR46XX 8040V300R003B01D009 (COMWAREV300R002B11D001), RELEASE SOFTWARE Compiled Sep 13 2004 15:36:51 by sunyu
1.2 Command-Alias Configuration Commands

1.2.1 command-alias enable
Syntax
command-alias enable undo command-alias enable
View
System view
Parameter
None
Description
Use the command-alias enable command to enable the command alias function. Use the undo command-alias enable command to disable the command alias function. By default, the command alias function is disabled.
Example
# Enable the command alias function.
[3Com] command-alias enable Command alias switch is on!
# Disable the command alias function.

[3Com] undo command-alias enable Command alias switch is off!
1.2.2 command-alias mapping

Syntax
command-alias mapping cmdkey alias undo command-alias mapping alias
View
System view
Parameter
cmdkey: The first keyword to be substituted in current commands by the alias. You must provide the complete keyword name. alias: Alias assigned by the user. It must not conflict with the first keyword in any current command.
Description
Use the command-alias mapping command to map an alias to a keyword. Use the undo command-alias mapping command to cancel the alias setting. By default, no command alias is configured.
Example
# Assign the alias show to the keyword display.
[3Com] command-alias mapping display show
# Cancel the configured alias show.

[3Com] undo command-alias mapping show
1.2.3 display command-alias

Syntax
display command-alias
View
Any view
Parameter
None
Description
Use the display command-alias command to view the current command alias settings.
Example
# Display the current command alias settings.
[3Com] display command-alias index 0 alias show commandkey display
Command Reference Guide System Management v2.30 Router Software
Table of Contents
Table of Contents
Chapter 1 System Maintenance and Management Commands................................................ 1-1 1.1 Auto-Config Commands .................................................................................................... 1-1 1.1.1 auto-config............................................................................................................... 1-1 1.1.2 auto-config enable................................................................................................... 1-3 1.1.3 display auto-config .................................................................................................. 1-4 1.2 Network Test Tool Commands .......................................................................................... 1-4 1.2.1 debugging................................................................................................................ 1-4 1.2.2 display debugging ................................................................................................... 1-5 1.2.3 display diagnostic-information................................................................................. 1-6 1.2.4 ping.......................................................................................................................... 1-8 1.2.5 reboot .................................................................................................................... 1-10 1.2.6 tracert .................................................................................................................... 1-11 1.3 Information Processing Commands................................................................................. 1-13 1.3.1 display channel...................................................................................................... 1-13 1.3.2 display info-center ................................................................................................. 1-14 1.3.3 display logbuffer .................................................................................................... 1-16 1.3.4 display trapbuffer................................................................................................... 1-17 1.3.5 info-center channel................................................................................................ 1-18 1.3.6 info-center console channel .................................................................................. 1-19 1.3.7 info-center enable ................................................................................................. 1-20 1.3.8 info-center logbuffer .............................................................................................. 1-20 1.3.9 info-center loghost................................................................................................. 1-21 1.3.10 info-center loghost source................................................................................... 1-22 1.3.11 info-center monitor channel................................................................................. 1-23 1.3.12 info-center snmp channel.................................................................................... 1-24 1.3.13 info-center source ............................................................................................... 1-25 1.3.14 info-center timestamp.......................................................................................... 1-27 1.3.15 info-center trapbuffer........................................................................................... 1-28 1.3.16 reset logbuffer ..................................................................................................... 1-29 1.3.17 reset trapbuffer .................................................................................................... 1-29 1.3.18 terminal debugging.............................................................................................. 1-30 1.3.19 terminal logging ................................................................................................... 1-30 1.3.20 terminal monitor .................................................................................................. 1-31 1.3.21 terminal trapping ................................................................................................. 1-32 1.4 System Operating Management Commands Router 6000 Series ............................. 1-32
3Com Corporation i
Table of Contents
1.4.1 display alarm urgent.............................................................................................. 1-32 1.4.2 display environment .............................................................................................. 1-33 1.4.3 display device........................................................................................................ 1-34 1.4.4 display schedule reboot ........................................................................................ 1-34 1.4.5 remove slot............................................................................................................ 1-35 1.4.6 reset alarm urgent ................................................................................................. 1-36 1.4.7 schedule reboot at................................................................................................. 1-36 1.4.8 schedule reboot delay ........................................................................................... 1-37 1.4.9 upgrade ................................................................................................................. 1-38 1.4.10 undo schedule reboot.......................................................................................... 1-39 Chapter 2 HWPing Commands .................................................................................................... 2-1 2.1 HWPing Client Commands ................................................................................................ 2-1 2.1.1 count........................................................................................................................ 2-1 2.1.2 datafill ...................................................................................................................... 2-1 2.1.3 datasize ................................................................................................................... 2-2 2.1.4 description ............................................................................................................... 2-3 2.1.5 destination-ip ........................................................................................................... 2-3 2.1.6 destination-port........................................................................................................ 2-4 2.1.7 display hwping......................................................................................................... 2-5 2.1.8 filename................................................................................................................... 2-7 2.1.9 frequency................................................................................................................. 2-8 2.1.10 ftp-operation .......................................................................................................... 2-8 2.1.11 history-records....................................................................................................... 2-9 2.1.12 http-operation ...................................................................................................... 2-10 2.1.13 http-string ............................................................................................................ 2-11 2.1.14 hwping ................................................................................................................. 2-11 2.1.15 hwping-agent enable........................................................................................... 2-12 2.1.16 hwping-agent max-requests................................................................................ 2-13 2.1.17 jitter-interval......................................................................................................... 2-13 2.1.18 jitter-packetnum................................................................................................... 2-14 2.1.19 password ............................................................................................................. 2-15 2.1.20 probe-failtimes..................................................................................................... 2-16 2.1.21 send-trap ............................................................................................................. 2-16 2.1.22 sendpacket passroute ......................................................................................... 2-17 2.1.23 source-interface .................................................................................................. 2-18 2.1.24 source-ip.............................................................................................................. 2-18 2.1.25 source-port .......................................................................................................... 2-19 2.1.26 test-type............................................................................................................... 2-19 2.1.27 test-enable........................................................................................................... 2-20
3Com Corporation ii
Table of Contents
2.1.28 test-failtimes ........................................................................................................ 2-21 2.1.29 timeout................................................................................................................. 2-22 2.1.30 tos........................................................................................................................ 2-22 2.1.31 ttl.......................................................................................................................... 2-23 2.1.32 username ............................................................................................................ 2-24 2.1.33 vpninstance ......................................................................................................... 2-24 2.2 HWPing Server Commands............................................................................................. 2-25 2.2.1 hwping-server enable............................................................................................ 2-25 2.2.2 hwping-server tcpconnect ..................................................................................... 2-26 2.2.3 hwping-server udpecho......................................................................................... 2-26 Chapter 3 File Management Commands ..................................................................................... 3-1 3.1 File System Commands..................................................................................................... 3-1 3.1.1 bootfile dir................................................................................................................ 3-1 3.1.2 bootfile main ............................................................................................................ 3-2 3.1.3 bootfile backup ........................................................................................................ 3-3 3.1.4 cd............................................................................................................................. 3-4 3.1.5 copy......................................................................................................................... 3-4 3.1.6 delete....................................................................................................................... 3-5 3.1.7 dir ............................................................................................................................ 3-7 3.1.8 execute.................................................................................................................... 3-8 3.1.9 file prompt................................................................................................................ 3-9 3.1.10 format .................................................................................................................... 3-9 3.1.11 mkdir.................................................................................................................... 3-10 3.1.12 more .................................................................................................................... 3-11 3.1.13 move.................................................................................................................... 3-11 3.1.14 pwd...................................................................................................................... 3-13 3.1.15 rename ................................................................................................................ 3-13 3.1.16 reset recycle-bin .................................................................................................. 3-14 3.1.17 rmdir .................................................................................................................... 3-15 3.1.18 undelete............................................................................................................... 3-16 3.2 FTP Server Configuration Commands............................................................................. 3-17 3.2.1 display ftp-server ................................................................................................... 3-17 3.2.2 display ftp-user ...................................................................................................... 3-18 3.2.3 ftp server enable.................................................................................................... 3-18 3.2.4 ftp timeout.............................................................................................................. 3-19 3.2.5 ftp update .............................................................................................................. 3-19 3.3 FTP Client Commands .................................................................................................... 3-20 3.3.1 ascii ....................................................................................................................... 3-20 3.3.2 binary..................................................................................................................... 3-21
3Com Corporation iii
Table of Contents
3.3.3 bye......................................................................................................................... 3-21 3.3.4 cd........................................................................................................................... 3-22 3.3.5 cdup....................................................................................................................... 3-22 3.3.6 close ...................................................................................................................... 3-23 3.3.7 debugging.............................................................................................................. 3-23 3.3.8 delete..................................................................................................................... 3-24 3.3.9 dir .......................................................................................................................... 3-24 3.3.10 disconnect ........................................................................................................... 3-25 3.3.11 ftp ........................................................................................................................ 3-26 3.3.12 get ....................................................................................................................... 3-26 3.3.13 lcd........................................................................................................................ 3-27 3.3.14 ls.......................................................................................................................... 3-27 3.3.15 mkdir.................................................................................................................... 3-28 3.3.16 open .................................................................................................................... 3-28 3.3.17 passive ................................................................................................................ 3-29 3.3.18 put ....................................................................................................................... 3-29 3.3.19 pwd...................................................................................................................... 3-30 3.3.20 quit....................................................................................................................... 3-30 3.3.21 remotehelp .......................................................................................................... 3-31 3.3.22 rmdir .................................................................................................................... 3-31 3.3.23 user ..................................................................................................................... 3-32 3.3.24 verbose................................................................................................................ 3-32 3.4 TFTP Configuration Commands ...................................................................................... 3-33 3.4.1 tftp ......................................................................................................................... 3-33 3.4.2 tftp-server acl......................................................................................................... 3-34 3.5 Configuration File Management Commands ................................................................... 3-35 3.5.1 display current-configuration ................................................................................. 3-35 3.5.2 display saved-configuration................................................................................... 3-37 3.5.3 display startup ....................................................................................................... 3-38 3.5.4 display this............................................................................................................. 3-38 3.5.5 reset saved-configuration...................................................................................... 3-39 3.5.6 save....................................................................................................................... 3-40 3.5.7 startup saved-configuration................................................................................... 3-40 3.5.8 upgrade ................................................................................................................. 3-42 Chapter 4 User Interface Configuration Commands ................................................................. 4-1 4.1.1 acl............................................................................................................................ 4-1 4.1.2 authentication-mode................................................................................................ 4-1 4.1.3 auto-execute command........................................................................................... 4-2 4.1.4 databits.................................................................................................................... 4-3
3Com Corporation iv
Table of Contents
4.1.5 debugging vty .......................................................................................................... 4-4 4.1.6 display user-interface .............................................................................................. 4-5 4.1.7 display users ........................................................................................................... 4-6 4.1.8 flow-control .............................................................................................................. 4-7 4.1.9 free user-interface ................................................................................................... 4-8 4.1.10 history-command max-size ................................................................................... 4-8 4.1.11 idle-timeout............................................................................................................ 4-9 4.1.12 modem ................................................................................................................ 4-10 4.1.13 modem auto-answer ........................................................................................... 4-10 4.1.14 modem timer answer........................................................................................... 4-11 4.1.15 parity.................................................................................................................... 4-12 4.1.16 protocol inbound.................................................................................................. 4-12 4.1.17 screen-length....................................................................................................... 4-13 4.1.18 send..................................................................................................................... 4-14 4.1.19 set authentication password................................................................................ 4-15 4.1.20 shell ..................................................................................................................... 4-16 4.1.21 speed................................................................................................................... 4-17 4.1.22 stopbits ................................................................................................................ 4-18 4.1.23 user privilege ....................................................................................................... 4-18 4.1.24 user-interface ...................................................................................................... 4-19 Chapter 5 NTP Configuration Commands .................................................................................. 5-1 5.1.1 debugging ntp-service............................................................................................. 5-1 5.1.2 display ntp-service sessions ................................................................................... 5-2 5.1.3 display ntp-service status........................................................................................ 5-2 5.1.4 display ntp-service trace ......................................................................................... 5-4 5.1.5 ntp-service access .................................................................................................. 5-4 5.1.6 ntp-service authentication enable ........................................................................... 5-5 5.1.7 ntp-service authentication-keyid.............................................................................. 5-6 5.1.8 ntp-service broadcast-client .................................................................................... 5-7 5.1.9 ntp-service broadcast-server................................................................................... 5-7 5.1.10 ntp-service max-dynamic-sessions ....................................................................... 5-8 5.1.11 ntp-service multicast-client.................................................................................... 5-9 5.1.12 ntp-service multicast-server ................................................................................ 5-10 5.1.13 ntp-service refclock-master ................................................................................. 5-11 5.1.14 ntp-service reliable authentication-keyid............................................................. 5-12 5.1.15 ntp-service source-interface................................................................................ 5-12 5.1.16 ntp-service unicast-peer...................................................................................... 5-13 5.1.17 ntp-service unicast-server ................................................................................... 5-14
3Com Corporation v
Table of Contents
Chapter 6 SNMP Configuration Commands ............................................................................... 6-1 6.1.1 debugging snmp-agent ........................................................................................... 6-1 6.1.2 display snmp-agent ................................................................................................. 6-1 6.1.3 display snmp-agent community............................................................................... 6-2 6.1.4 display snmp-agent group....................................................................................... 6-3 6.1.5 display snmp-agent mib-view.................................................................................. 6-4 6.1.6 display snmp-agent statistics .................................................................................. 6-5 6.1.7 display snmp-agent sys-info.................................................................................... 6-6 6.1.8 display snmp-agent usm-user ................................................................................. 6-7 6.1.9 snmp-agent ............................................................................................................. 6-8 6.1.10 snmp-agent community......................................................................................... 6-9 6.1.11 snmp-agent group ............................................................................................... 6-10 6.1.12 snmp-agent local-engineid .................................................................................. 6-11 6.1.13 snmp-agent mib-view .......................................................................................... 6-12 6.1.14 snmp-agent packet max-size .............................................................................. 6-12 6.1.15 snmp-agent sys-info............................................................................................ 6-13 6.1.16 snmp-agent target-host ....................................................................................... 6-14 6.1.17 snmp-agent trap enable ...................................................................................... 6-15 6.1.18 snmp-agent trap life ............................................................................................ 6-16 6.1.19 snmp-agent trap queue-size ............................................................................... 6-17 6.1.20 snmp-agent trap source ...................................................................................... 6-18 6.1.21 snmp-agent usm-user ......................................................................................... 6-18 Chapter 7 RMON Configuration Commands .............................................................................. 7-1 7.1 RMON Configuration Commands ...................................................................................... 7-1 7.1.1 display rmon alarm.................................................................................................. 7-1 7.1.2 display rmon event .................................................................................................. 7-2 7.1.3 display rmon eventlog ............................................................................................. 7-3 7.1.4 display rmon history ................................................................................................ 7-4 7.1.5 display rmon prialarm.............................................................................................. 7-5 7.1.6 display rmon statistics ............................................................................................. 7-7 7.1.7 rmon alarm .............................................................................................................. 7-8 7.1.8 rmon event .............................................................................................................. 7-9 7.1.9 rmon history........................................................................................................... 7-10 7.1.10 rmon prialarm ...................................................................................................... 7-10 7.1.11 rmon statistics ..................................................................................................... 7-12 Chapter 8 Terminal Service Commands ..................................................................................... 8-1 8.1 Telnet and Telnet Redirect ................................................................................................ 8-1 8.1.1 debugging telnet...................................................................................................... 8-1 8.1.2 display tcp status..................................................................................................... 8-1
3Com Corporation vi
Table of Contents
8.1.3 redirect enable......................................................................................................... 8-2 8.1.4 redirect listen-port ................................................................................................... 8-3 8.1.5 redirect timeout........................................................................................................ 8-3 8.1.6 redirect return-deal from-telnet................................................................................ 8-4 8.1.7 redirect return-deal from-terminal............................................................................ 8-5 8.1.8 redirect refuse-negotiation ...................................................................................... 8-5 8.1.9 redirect disconnect .................................................................................................. 8-6 8.1.10 telnet...................................................................................................................... 8-7 8.1.11 telnet source-interface........................................................................................... 8-7 8.1.12 telnet source-ip...................................................................................................... 8-8 8.2 SSH Configuration Commands.......................................................................................... 8-9 8.2.1 debugging ssh server.............................................................................................. 8-9 8.2.2 display rsa local-key-pair public ............................................................................ 8-10 8.2.3 display rsa peer-public-key ................................................................................... 8-11 8.2.4 display ssh server ................................................................................................. 8-12 8.2.5 display ssh user-information ................................................................................. 8-13 8.2.6 peer-public-key end............................................................................................... 8-13 8.2.7 public-key-code begin ........................................................................................... 8-14 8.2.8 public-key-code end .............................................................................................. 8-15 8.2.9 rsa local-key-pair create........................................................................................ 8-15 8.2.10 rsa local-key-pair destroy .................................................................................... 8-17 8.2.11 rsa peer-public-key.............................................................................................. 8-17 8.2.12 ssh server authentication-retries ......................................................................... 8-18 8.2.13 ssh server rekey-interval ..................................................................................... 8-19 8.2.14 ssh server timeout............................................................................................... 8-19 8.2.15 ssh user assign ................................................................................................... 8-20 8.2.16 ssh user authentication-type ............................................................................... 8-21 8.3 RSH Commands .............................................................................................................. 8-21 8.3.1 rsh ......................................................................................................................... 8-21 8.3.2 debugging rsh........................................................................................................ 8-23 8.4 Rlogin Configuration Commands..................................................................................... 8-24 8.4.1 debugging rlogin.................................................................................................... 8-24 8.4.2 rlogin...................................................................................................................... 8-25
3Com Corporation vii
Chapter 1 System Maintenance and Management Comma nds
Chapter 1 System Maintenance and Management Commands

1.1 Auto-Config Commands
1.1.1 auto-config
Syntax
auto-config
View
System view
Parameter
None
Description
Use the auto-config command to implement the auto-config operation. Enabling auto-config is equivalent to executing commands in batch.
Caution: The auto-config command is usually used at initial boot to execute commands in batch. As this changes the current configurations and no undo form is available, you must take caution when using it on a network where configurations have been completed. Although the auto-config function is available with config.def, the default configuration file, you cannot save the configuration of the auto-config command.
The auto-config command runs these commands: 1) Enabling FTP and configuring the VTY (Telnet) and TTY (through AM interface) users to adopt local authentication ftp server enable
user-interface vty 0 4 authentication-mode scheme user-interface tty user-interface-number modem call-in authentication-mode scheme 2) Configuring the default user name and password, enabling Telnet, FTP, and terminal services for the default user local-user admin password cipher admin level 3 service-type ftp service-type terminal telnet By default, the user name and password are both admin. 3) Detecting all the controller interfaces, including E1/T1/E3/T3 interfaces, setting their operating status to non-channelized, generating the corresponding serial interfaces. On the T1 interface, use the channel-set command to bundle all the timeslots into one serial interface. using e1 using e3 using t3 channel-set 0 timeslot-list 1-24 4) Detecting all the serial interfaces (including the logical interfaces generated by the controller interface), encapsulating the interfaces with PPP, using PPP negotiation to get IP addresses, and setting the interface state to UP. link-protocol ppp ip address ppp-negotiate undo shutdown 5) Detecting all the Ethernet interfaces, enabling the dhcp client function, and setting the interface state to UP. ip address dhcp-alloc undo shutdown 6) Detecting all the AM interfaces, setting the operating mode to flow, configuring modem coding format (setting CountryCode to UK if there is an E1/E3 module and if otherwise to US), and setting the interface state to UP.
async mode flow country-code { united-kingdom | united-states } undo shutdown Related command: auto-config enable.
Example
# Start the auto-config operation.
[3Com] auto-config
1.1.2 auto-config enable

Syntax
auto-config enable undo auto-config
View
System view
Parameter
None
Description
Use the auto-config enable command to enable auto-config. Use the undo auto-config command to disable auto-config. By default, auto-config is enabled. Use the display auto-config command to check if auto-config is enabled. Related command: display auto-config.
Example
# Enable auto-config.
[3Com] auto-config enable
# Disable auto-config.
[3Com] undo auto-config
1.1.3 display auto-config

Syntax
display auto-config
View
Any view
Parameter
None
Description
Use the display auto-config command to view the status of auto-config.
Example
# Display the status of auto-config.
<3Com> display auto-config auto-config enable <3Com> display auto-config auto-config disable
1.2 Network Test Tool Commands

1.2.1 debugging
Syntax
debugging { all [ timeout minutes ] | module-name [ debug-option1 ] [ debug-option2 ] } undo debugging { all | module-name [ debug-option1 ] [ debug-option2 ] }
View
User view
Parameter
all: Enables or disables all debugging switches. timeout minutes: The duration that the debugging all command takes effect. It is in the range 1 to 1440 minutes. module-name: Module name.
debug-option: Debugging option.
Description
Use the debugging command to enable system debugging. Use the undo debugging command to disable system debugging. By default, the system disables all debugging switches. The router provides rich debugging functions for troubleshooting networks. Enabling debugging generates a large amount of debugging information resulting in decreased efficiency, especially when the debugging all command is executed. The aftermath of doing so is a system crash. For these reasons, you are not encouraged to use the debugging all command. However, the undo debugging all command is helpful when you want to disable all debugging switches at one time. Related command: display debugging.
Example
# Enable IP packet debugging.
<3Com> debugging ip packet IP packet debugging switch is on.
1.2.2 display debugging

Syntax
display debugging [ interface interface-type interface-number] [ module-name ]
View
Any view
Parameter
module-name: Module name. interface-type: Interface type. interface-number: Interface number.
Description
Use the display debugging command to view the enabled debugging switches. By default, no parameters are defined and all the enabled debugging switches are displayed.
Related command: debugging.
Example
# Display all the enabled debugging switches.
<3Com> display debugging IP packet debugging switch is on.
1.2.3 display diagnostic-information

Syntax
display diagnostic-information
View
Any view
Parameter
None
Description
Use the display diagnostic-information command to view the operating information about the active modules in the system. When fault occurs to the system, you need to collect lots of information in order to address the issue. It is rather difficult, however, for you to collect all the information at one time as this involves many display commands. To do this you can use the display diagnostic-information command.
Example
# Display the technical support information.
<3Com> display diagnostic-information <3Com> display diagnostic-information ================================================= ===============display clock=============== ================================================= 14:04:23 UTC Thu 09/16/2004
=================================================== ===============display version==== ===================================================

========================== ===============vrbd=============== ========================================
================================================== ===============display device=============== ==================================================
================================================================= ===============display current-configuration=============== =================================================================
=============================================================== ===============display saved-configuration===== =============================================================== ===================================================== ===============display interface=============== =====================================================
====================================================== ===============display controller=============== ======================================================
======================================================== ===============display ip interface=============== ========================================================
========================================================= ===============display ip statistics=============== =========================================================

======================================================== ===============display exception 20=============== ========================================================
=============================================================== ===============display exception 3 verbose=============== ===============================================================
===================================================== ===============display logbuffer=============== =====================================================
======================================================== ===============_display history all=============== ========================================================
The contents are omitted.
1.2.4 ping
Syntax
ping [ -a X.X.X.X | -c count | -d | -f | -h ttl_value | -i { interface-type interface-number } | ip | -n | -p pattern | -q | -r | -s packetsize | -t timeout | tos | -v | vpn-instance vpn-instance-name ] * host
View
Any view
Parameter
-a X.X.X.X: Sets the source IP address in the ICMP ECHO-REQUEST packets. -c count: Number of ICMP ECHO-REQUEST transmissions, in the range 1 to 4294967295. -d: Sets socket to debug mode.
-f: Discards the packets larger than the interface MTU without fragmentation. -h ttl_value: Sets TTL value in the range 1 to 255. -i: Sets the interface for sending ICMP ECHO-REQUEST packets. interface-type: Interface type. interface-number: Interface number. -n: Directly uses the host parameter as IP address without domain name resolution. -p pattern: The byte for padding ICMP ECHO-REQUEST packets. It is in hexadecimal format and in the range 0 to FFFFFFFF. For example, if the parameter is set to -p ff, the entire packet is padded by ff. -q: Displays statistic figures rather than details. -r: Records routes. -s packetsize: Size of ECHO-REQUEST packets (excluding IP and ICMP headers), in the range 20 to 8100 bytes. The packets larger than the interface MTU are sent after fragmented. -t timeout: Time to wait for ECHO-RESPONSE, in the range 0 to 65535 milliseconds. tos: TOS value in ECHO-REQUEST packets. -v: Displays the received ICMP packets other than ECHO-RESPONSE packets. vpn-instance vpn-instance-name: Sets the vpn-instance name of MPLS VPN, specifying the VPN attribute configured in this ping command, that is, name of the associated vpn-instance created locally. host: Name or IP address of the destination host. ip: Adopts the IP protocol.
Description
Use the ping command to test connectivity of an IP network and reachability of a host. The following are the default settings applied when none of the parameters are specified: An ECHO-REQUEST packet is sent five times at most. Socket is in non-debug mode. Host is regarded as an IP address. If it is not, domain name resolution is performed. Padding begins at 0x01 and increments until 0x09 and then repeats. All information including statistics is displayed. Routes are not recorded. The length of ECHO-REQUEST packets is 56 bytes.
The time to wait for an ECHO-RESPONSE packet is 2000 ms. The ICMP packets other than ECHO-RESPONSE packets are not displayed. The parameter vpn-instance is not defined. The following is the process of executing the ping command: A host sends an ICMP ECHO-REQUEST. If the connection to the destination network is normal, the destination host will be able to receive the ICMP ECHO-REQUEST and send an ICMP ECHO-REPLY packet back to the source host. You can use the ping command to test network connectivity or line quality. Its output includes: Information on the reply to each ECHO-REQUEST, including data bytes, packet sequence number, TTL, and the roundtrip time. If no reply is received upon timeout, Request time out is displayed. The final statistics, including the number of the packets sent and received, packet loss ratio, roundtrip time in its minimum value, mean value, and maximum value. If network transmission is slow you can appropriately extend the time to wait for reply. For related command, see tracert.
Example
# Check reachability of the host at 202.38.160.244.
<3Com> ping 202.38.160.244 ping 202.38.160.244 : 56 data bytes , press CTRL-C to break Reply from 202.38.160.244 : bytes=56 sequence=1 ttl=255 time = 1ms Reply from 202.38.160.244 : bytes=56 sequence=2 ttl=255 time = 2ms Reply from 202.38.160.244 : bytes=56 sequence=3 ttl=255 time = 1ms Reply from 202.38.160.244 : bytes=56 sequence=4 ttl=255 time = 3ms Reply from 202.38.160.244 : bytes=56 sequence=5 ttl=255 time = 2ms --202.38.160.244 ping statistics-5 packets transmitted 5 packets received 0% packet loss round-trip min/avg/max = 1/2/3 ms
1.2.5 reboot
Syntax
reboot
View
User view
Parameter
None
Description
Use the reboot command to have the router reboot. Executing this command is equal to powering up the router after a power-down, except that you do not have to go to the site where the router is located. Executing this command may halt network operation transiently; use it with caution. In addition, save the configuration file before rebooting the router, because the configurations you just made will not survive a reboot.
Example
# Reboot the device.
<3Com> reboot This command will reboot the system. The current configuration has not been saved and will be lost if you continue. Continue? [Y/N]
1.2.6 tracert
Syntax
tracert [ -a X.X.X.X | -f first_TTL | -m max_TTL | -p port | -q nqueries | vpn-instance vpn-instance-name | -w timeout ] * host
View
Any view
Parameter
-a X.X.X.X: Specifies the source IP address in this trace. It is in the format of X.X.X.X and must be the address of a local interface. -f first_TTL: Tests the correctness of the f switch. first_TTL specifies an initial TTL in the range 0 to maximum TTL. -m max_TTL: Tests the correctness of the m switch. max_TTL specifies a maximum TTL, which can be any TTL larger than the initial TTL.
-p port: Tests the correctness of the p switch. port is an integer specifying a port on the destination host. Normally, you need not to change this option. -q nqueries: Tests the correctness of the q switch with nqueries specifying the number of the query packets sent each time. It can be any integer greater than zero. vpn-instance vpn-instance-name: Sets the vpn-instance name of MPLS VPN, specifying the VPN attribute configured in this tracert command, that is, name of the associated vpn-instance created locally. -w timeout: Tests the correctness of the -w switch. timeout specifies the timeout time of IP packets. It is in seconds and can be any integer larger than zero. host: IP address of the destination host.
Description
Use the tracert command to trace the gateways by which a packet passes from source to destination for network connectivity test and fault location. The following are the default settings that apply when none of the parameters are specified: The parameters -a and vpn-instance are not specified. first_TTL is 1. max_TTL is 30. port is 33434. nqueries is 3. timeout is 5 seconds. The following is how a tracert operates: 1) 2) 3) 4) Tracert sends a packet with TTL value of 1. The fist hop sends back an ICMP TTL Expired message. Tracert resends the packet with TTL value of 2. The second hop sends back an ICMP TTL Expired message when the packet arrives.
This process continues until the packet reaches its destination. By doing this, the source station obtains the source address in every returned ICMP TTL Expired message to draw the path for the IP packet to reach its destination. After detecting a fault with the ping command you can use the tracert command to locate the problem. The output of the command tracert includes IP addresses of all the gateways along the path to the destination. If a gateway times out, asterisks (***) are output.
Example
<3Com> tracert 18.26.0.115 tracert to allspice.lcs.mit.edu (18.26.0.115), 30 hops max 1 helios.ee.lbl.gov (128.3.112.1) 0 ms 0 ms 0 ms 2 lilac-dmc.Berkeley.EDU (128.32.216.1) 19 ms 19 ms 19 ms 3 lilac-dmc.Berkeley.EDU (128.32.216.1) 39 ms 19 ms 19 ms 4 ccngw-ner-cc.Berkeley.EDU (128.32.136.23) 19 ms 39 ms 39 ms 5 ccn-nerif22.Berkeley.EDU (128.32.168.22) 20 ms 39 ms 39 ms 6 128.32.197.4 (128.32.197.4) 59 ms 119 ms 39 ms 7 131.119.2.5 (131.119.2.5) 59 ms 59 ms 39 ms 8 129.140.70.13 (129.140.70.13) 80 ms 79 ms 99 ms 9 129.140.71.6 (129.140.71.6) 139 ms 139 ms 159 ms 10 129.140.81.7 (129.140.81.7) 199 ms 180 ms 300 ms 11 129.140.72.17 (129.140.72.17) 300 ms 239 ms 239 ms 12 * * * 13 128.121.54.72 (128.121.54.72) 259 ms 499 ms 279 ms 14 * * * 15 * * * 16 * * * 17 * * * 18 ALLSPICE.LCS.MIT.EDU (18.26.0.115) 339 ms 279 ms 279 ms
1.3 Information Processing Commands

1.3.1 display channel
Syntax
display channel [ channel-number | channel-name ]
View
Any view.
Parameter
channel-number: Channel number in the range 0 to 9. The system has 10 channels. channel-name: Channel name.
Table 1-1 Channel names and their associated channel numbers Channel name channel6 channel7 channel8 channel9 console logbuffer loghost monitor snmpagent trapbuffer 6 7 8 9 0 4 2 1 5 3 Information channel number
Description
Use the display channel command to view the contents in an information channel. When executed without any parameter specified this command displays the settings of all channels.
Example
# Display the contents in information channel 0.
<3Com> display channel 0 channel number:0, channel name:console MODU_ID ffff0000 NAME ENABLE LOG_LEVEL all Y warning Y ENABLE TRAP_LEVEL Y ENABLE DEBUG_LEVEL
debugging
debugging
1.3.2 display info-center

Syntax
display info-center
View
Any view
Parameter
None
Description
Using the display info-center command you can view all the information recorded in the info-center. Related command: info-center enable, info-center loghost, info-center logbuffer, info-center trapbuffer, info-center console channel, info-center monitor channel.
Example
# Display the information recorded in the info-center.
<3Com> display info-center Information Center: enabled Log host: Console: channel number : 0, channel name : console Monitor: channel number : 1, channel name : monitor SNMP Agent: channel number : 5, channel name : snmpagent Log buffer: enabled,max buffer size 1024, current buffer size 256, current messages 89, channel number : 4, channel name : logbuffer dropped messages 0, overwrote messages 0 Trap buffer: enabled,max buffer size 1024, current buffer size 256, current messages 0, channel number:3, channel name:trapbuffer dropped messages 0, overwrote messages 0 Information timestamp setting: log - date, trap - date, debug - boot
Sent messages = 89, Received messages = 89
1.3.3 display logbuffer

Syntax
display logbuffer [ size size-value | summary ] [ level level-number ] [ | [ begin | include | exclude ] string ]
View
Any view
Parameter
size: Specifies the number of to-be-displayed entries in the logbuffer. size-value: The number of entries to be displayed. summary: A summary for the logbuffer. level: Displays only the information entries at a specified level. level-number: Specifies the information level, an integer in the range 1 to 8. |: Uses a regular expression to filter output. begin: Displays the information beginning with the specified characters (string). include: Displays the information that includes the specified characters (string). exclude: Displays the information that excludes the specified characters (string). string: Defines a regular expression.
Description
Use the display logbuffer command to view the information recorded in the log buffer. By default, the display logbuffer command is executed without any parameter specified to display all information in the log buffer. If the number of information entries in the current log buffer is smaller than the specified size-value, all the entries are displayed. Related command: info-center enable, info-center logbuffer, display info-center.
Example
# Display the information in the log buffer.
<3Com> display logbuffer Logging buffer configuration and contents:enabled Allowed max buffer size : 1024 Actual buffer size : 256
Channel number : 4 , Channel name : logbuffer Dropped messages : 0 Overwritten messages : 0 Current messages : 96 %8/28/2101 5:34:48-IC-7-SYS_RESTART: System restarted -3Com Versatile Routing Platform Software Copyright (c) 2003-2004 by V Team Marlborough 3Com Corp %Dec 3 09:04:38:723 2004 r2 RM/5/RTLOG:
rtbit_set_vrf:127.0.0.0/8(n_bitsset=0) public vpn-instance(1) -> KRT %Dec 3 09:04:38:772 2004 r2 SHELL/5/CMD:task:CFM ip:** user:** command:interfac e Aux0 %Dec 3 09:04:38:825 2004 r2 SHELL/5/CMD:task:CFM ip:** user:** command:interfac e Ethernet0/0 %Dec 3 09:04:38:837 2004 r2 SHELL/5/CMD:task:CFM ip:** user:** command:interfac e Serial0/0 %Dec 3 09:04:38:861 2004 r2 SHELL/5/CMD:task:CFM ip:** user:** command:interfac e Serial1/0 %Dec 3 09:04:38:887 2004 r2 SHELL/5/CMD:task:CFM ip:** user:** command:interfac e Serial1/1
1.3.4 display trapbuffer

Syntax
display trapbuffer [ size sizeval ]
View
Any view
Parameter
size: Specifies the number of information entries in the log buffer. sizeval: Number of entries to be displayed.
Description
Use the display trapbuffer command to view the information entries in the trap buffer. By default, the command is executed without any parameter specified to display all information in the trap buffer.
If the number of entries in the current trap buffer is smaller than the specified sizeval, all entries are displayed. Related command: info-center enable, info-center trapbuffer, display info-center.
Example
# Display the information in the trap buffer.
<3Com> display trapbuffer Trapping Buffer Confiuration and contents: enabled allowed max buffer size : 1024 actual buffer size : 256 channel number : 3 , channel name : trapbuf dropped messages : 0 overwrote messages : 0 current messages : 0
# Display 23 entries in the trap buffer.

<3Com> display trapbuffer size 23 Trapping Buffer Confiuration and contents: enabled allowed max buffer size : 1024 actual buffer size : 256 channel number : 3 , channel name : trapbuf dropped messages : 0 overwrote messages : 0 current messages : 0
1.3.5 info-center channel

Syntax
info-center channel channel-number name channel-name
View
System view
Parameter
channel-number: Channel number in the range 0 to 9. The system has 10 channels.
channel-name: A string of up to 30 characters excluding minus signs (-), forward slashes (/) and backslashes (\).
Description
Use the info-center channel command to assign a name to the information channel specified by channel-number. The assigned name must be unique.
Example
# Name Channel 0 as execconsole.
[3Com] info-center channel 0 name execconsole
1.3.6 info-center console channel

Syntax
info-center console channel { channel-number | channel-name } undo info-center console channel
View
System view
Parameter
Description
Use the info-center console channel command to have the info-center output information to the console over the specified channel. Use the undo info-center console channel command to disable the current settings. By default, no logging information is output to the console. This command becomes valid only when the syslog function is enabled. Related command: info-center enable and display info-center.
Example
# Output information to the console and set the output channel.
[3Com] info-center console channel console
1.3.7 info-center enable

Syntax
info-center enable undo info-center enable
View
System view
Parameter
None
Description
Use the info-center enable command to enable the info-center. Use the undo info-center enable command to disable the info-center. By default, the info-center is enabled. Only when the info-center is enabled can the system output information. Related command: info-center loghost, info-center logbuffer, info-center trapbuffer, info-center console channel, info-center monitor channel, display info-center.
Example
# Enable the info-center.
[3Com] info-center enable % information center is enabled
1.3.8 info-center logbuffer

Syntax
info-center logbuffer [ channel { channel-number | channel-name } | size buffersize ] * undo info-center logbuffer [ channel | size ]
View
System view
Parameter
channel: Sets the channel for outputting information to the log buffer.
channel-number: Channel number in the range 0 to 9. The system has 10 channels. channel-name: Channel name. size: Sets log buffer size. buffersize: Size of the log buffer (the message entries that can be accommodated).
Description
Use the info-center logbuffer command to enable the log buffer and specify the channel for logging information output as well as the size of the log buffer. Use the undo info-center logbuffer command to cancel the current settings. By default, information output to the log buffer is allowed, and log buffer size is 256. Only when the info-center is enabled can this command become effective. By setting channel number after enabling log buffer you can specify the information output direction. Related command: info-center enable, display info-center.
Example
# Enable the info-center to send information to the log buffer and set the log buffer size to 50.
[3Com] info-center logbuffer size 50
1.3.9 info-center loghost

Syntax
info-center loghost X.X.X.X [ channel { channel-number | channel-name } | facility local-number | language { chinese | english } ] * undo info-center loghost X.X.X.X
View
System view
Parameter
X.X.X.X: IP address of the log host. channel: Information channel for the log host. channel-number: Channel number in the range 0 to 9. The system has 10 channels. channel-name: Channel name.
facility: Sets the logging tool of the log host. local-number: Logging tool of the log host, in the range local 0 to local 7. language: Sets the logging language. chinese, english: Logging language, which can be Chinese or English.
Description
Use the info-center loghost command to have the info-center output information to the log host. Use the undo info-center loghost command to cancel the current setting. By default, no information is output to the log host. If not specified, the information channel for the log host defaults to channel 2 which is named log host, the log host recording tool local-number to local 7, and the language to English. Only when the information center is enabled can this command become effective. By setting the IP address of the log host you can specify the information output direction. You can set up to four log hosts. Related command: info-center enable, display info-center.
Example
# Enable the info-center to send information to the UNIX workstation at 202.3 8.160.1.
[3Com] info-center loghost 202.38.160.1
1.3.10 info-center loghost source

Syntax
info-center loghost source interface-type interface-number [ subinterface-type ] undo info-center loghost source
View
System view
Parameter
interface-type: Interface type. interface-number: Number of the interface.
subinterface-type: Subinterface type.
Description
Use the info-center loghost source command to specify the source address in the packets destined to the log host. Use the undo info-center loghost source command to cancel the current configuration. When a log message is sent out a router, its source address defaults to the IP address of the interface where it is sent. You can change this address using this command. By assigning different source addresses to the packets sent by different routers you can discriminate them for retrieval convenience.
Example
# Set the IP address of loopback 0 as the source address of the log messages.
[3Com] interface loopback 0 [3Com-LoopBack0] ip address 1.1.1.1 255.255.255.0 [3Com-LoopBack0] quit [3Com] info-center loghost source loopback 0
1.3.11 info-center monitor channel

Syntax
info-center monitor channel { channel-number | channel-name } undo info-center monitor channel
View
System view
Parameter
Description
Use the info-center monitor channel command to have the info-center output information over the specified channel to the user terminal. Use the undo info-center monitor channel command to cancel the current setting. By default, no information is output to the user terminal.
Only when the info-center is enabled can this command become effective. Related command: info-center enable, display info-center.
Example
# Enable the info-center to output information to the user terminal and set the output channel.
[3Com] info-center monitor channel monitor
1.3.12 info-center snmp channel

Syntax
info-center snmp channel { channel-number | channel-name } undo info-center snmp channel
View
System view
Parameter
Description
Use the info-center snmp channel command to set the information channel for SNMP. Use the undo info-center snmp channel command to cancel the current setting. By default, channel 5 is used. Related command: display snmp-agent statistics.
Example
# Set SNMP information channel to channel 6.
[3Com] info-center snmp channel 6
1.3.13 info-center source

Syntax
info-center source { module-name | default } { channel { channel-number | channel-name} } [ log { state { on | off } | level severity }* | trap { state { on | off } | level severity } * | debug { state { on | off } | level severity }* ]* undo info-center source { module-name | default } { channel { channel-number | channel-name }
View
System view
Parameter
module-name: Module name. default: Includes all modules by default. channel-number: Information channel number to be set. channel-name: Information channel name to be set. log: Log information. trap: Trap information. debug: Debugging information. on: Enables outputting information. off: Disables outputting information. level: Sets information level to disable the info-center to output information at this or higher level. severity: Information level. As shown in the following table, the info-center divides information into eight levels by severity or emergency, with a lower level indicating a more emergent event. Level 1 represents emergencies and level 8 represents debugging. Table 1-2 Definition of information level Severity level emergencies alerts critical errors Description The extremely emergent errors The errors that need to be corrected immediately. Critical errors The errors that need concerns but not critical
Severity level warnings notifications informational debugging
Description Warning, there might exist some kinds of errors. The information should be concerned. Common prompt information Debugging information
*: Indicates to select from multiple options, at least one and at most all.
Description
Use the info-center source command to add records to an information channel. Use the undo info-center source command to remove the records from the information channel. For the specified module, by default: The state of logging information output is on and the allowed information level is informational. The state of trapping information output is on and the allowed information level is informational. The state of debugging information output is off. The system allocates one information channel for each output direction as shown in the following table: Table 1-3 Default information channels assigned to each direction Output direction Console Monitor terminal Log host Trap buffer Log buffer SNMP Information channel No. 0 1 2 3 4 5 Default channel name console monitor loghost trapbuffer logbuffer snmpagent
In addition, each information channel has a default record, where the module name and number are default and 0xffff0000. But for different channels, the record may have
different default settings for log, trap, and debugging information. If a module has no explicit configuration record in the channel the default configuration record is used.
Example
# Output IP modules log information at emergencies and lower levels through the SNMP channel.
[3Com] info-center source ip channel snmpagent log level emergencies
# Remove the setting of the CMD module in the SNMP channel.

[3Com] undo info-center source cmd channel snmpagent
1.3.14 info-center timestamp

Syntax
info-center timestamp { trap | debugging | log } { boot | date | none } undo info-center timestamp { trap | debugging | log }
View
System view
Parameter
trap: Trap information debugging: Debugging information. log: Log information. boot: Time elapses after the system boots. It is in the format of xxxxxx.yyyyyy, where xxxxxx is the high 32 bits and yyyyyy the low 32 bits of the passed milliseconds. date: Current system date and time, in the form of yyyy/mm/dd-hh:mm:ss in Chinese and mm/dd/yyyy-hh:mm:ss in English. none: No time stamp.
Description
Use the info-center timestamp command to set the format of the time stamp in the debugging/trap/log output. Use the undo info-center timestamp command to cancel the current configuration. By default, the date time stamp is used in information of all types.
Example
# Set the time stamp format to boot for traps.
[3Com] info-center timestamp trap boot
1.3.15 info-center trapbuffer

Syntax
info-center trapbuffer [ channel { channel-number | channel-name } | size buffersize ] * undo info-center trapbuffer [ channel | size ]
View
System view
Parameter
channel: Sets the channel for outputting information to the trapbuffer. channel-number: Channel number in the range 0 to 9. The system has 10 channels. channel-name: Channel name. size: Sets trapbuffer size. buffersize: Size of the trapbuffer (the information entries that can be accommodated).
Description
Use the info-center trapbuffer command to enable the trap buffer, set its size, and the channel that outputs information to it. Use the undo info-center trapbuffer command to cancel the current settings. By default, information output to trap buffer is allowed and the trap buffer size is 256. Only when the info-center is enabled can this command become effective. By setting the size of the trap buffer you can allow the info-center output information to the trap buffer. Related command: info-center enable, display info-center.
Example
# Enable the info-center to send information to the trap buffer whose size is 30.
[3Com] info-center trapbuffer size 30
1.3.16 reset logbuffer

Syntax
reset logbuffer
View
User view
Parameter
None
Description
Use the reset logbuffer command to clear information in the log buffer.
Example
# Clear information in the log buffer.
<3Com> reset logbuffer
1.3.17 reset trapbuffer

Syntax
reset trapbuffer
View
User view
Parameter
None
Description
Use the reset trapbuffer command to clear information in the trap buffer.
Example
# Clear information in the trap buffer.
<3Com> reset trapbuffer
1.3.18 terminal debugging

Syntax
terminal debugging undo terminal debugging
View
User view
Parameter
None
Description
Use the terminal debugging command to have the debugging information displayed on the user terminal. Use the undo terminal debugging command to disable the function. By default, terminal display is disabled. Related command: debugging.
Example
# Display debugging information on the terminal.
<3Com> terminal debugging
1.3.19 terminal logging

Syntax
terminal logging undo terminal logging
View
User view
Parameter
None
Description
Use the terminal logging command to have the log information displayed on the terminal.
Use the undo terminal logging command to disable displaying log information on the terminal. By default, log information can be displayed on the terminal.
Example
# Disable displaying log information on the terminal.
<3Com> undo terminal logging
1.3.20 terminal monitor

Syntax
terminal monitor undo terminal monitor
View
User view
Parameter
None
Description
Use the terminal monitor command to have the terminal display debugging /log/trap information sent from the info-center. Use the undo terminal monitor command to disable the terminal to display debugging/log/trap information. By default, the display function of console users is enabled but the display function of terminal users is disabled. The undo terminal monitor command prohibits all debugging, log, and trap information from outputting to the current terminal, just as the undo terminal debugging, undo terminal logging, and undo terminal trapping commands would do. When the terminal monitor command is configured, you can use the terminal debugging/undo terminal debugging, terminal logging/undo terminal logging, and terminal trapping/undo terminal trapping commands to enable/disable debugging/log/trap information output.
Example
# Disable the terminal to display information sent from the info-center.

<3Com> undo terminal monitor
1.3.21 terminal trapping

Syntax
terminal trapping undo terminal trapping
View
User view
Parameter
None
Description
Use the terminal trapping command to have the terminal display trap information. Use the undo terminal trapping command to disable the terminal from displaying trap information. By default, the terminal displays trap information.
Example
# Disable the terminal to display trap information.
<3Com> terminal trapping
1.4 System Operating Management Commands Router 6000 Series

1.4.1 display alarm urgent
Syntax
display alarm urgent [ time | slot | id ]
View
Any view
Parameter
time: Displays alarms by time.
id: Displays alarms by ID. slot: Displays alarms by slot.
Description
Use the display alarm urgent command to view the stored alarms in a specified way. Executing the command without any parameter displays all alarms.
Example
# Display all the stored alarms.
<3Com> display alarm urgent Alarm ID 2 2 0 Slot 11 10 12 Date 00/04/01 00/04/01 00/04/04 Time 23:55:18 23:55:18 10:00:14 Para1 2 1 0 Para2 24 24 1
1.4.2 display environment

Syntax
display environment
View
Any view
Parameter
None
Description
Use the display environment command to view the current values and the thresholds of the hardware system environment.
Example
# Display the system environment.
<3Com> display environment GET 3 TEMPERATUREPOINT VALUE SUCCESSFULLY
environment information: Temperature information:

local CurrentTemperature (deg c ) RPU VENT 34 31

LowLimit (deg c) 0 0 HighLimit (deg c ) 80 80
1.4.3 display device

Syntax
display device slot-number
View
Any view
Parameter
slot-number: Slot number.
Description
Use the display device command to view information on the hardware configurations of the system, including in-position state of the RPU, NPU, interface cards, power module, and fan module, the operating state of the interface cards, power module, and fan module, as well as the offline state of RPU and NPU. If no slot is specified, the basic information about all the facilities in position is displayed. If a slot is specified, only details about the slot are displayed, including records of the reset times and causes.
Example
# Display basic information about the facilities on the router.
<3Com> display device Slot # 0 6 7 Type RPU PWR FAN Online Present Present Present Status Normal Normal Normal
1.4.4 display schedule reboot

Syntax
display schedule reboot
View
Any view
Parameter
None
Description
Use the display schedule reboot command to view settings related to the routers schedule reboot terminal service. Related command: reboot, schedule reboot at, schedule reboot delay, undo schedule reboot.
Example
# Display the current settings related to the schedule reboot terminal service.
<3Com> display schedule reboot Reboot system at 16:00:00 2002/11/1 (in 2 hours and 5 minutes).
1.4.5 remove slot

Syntax
remove slot slotnum undo remove slot slotnum
View
User view
Parameter
slotnum: Slot number for the interface card.
Description
Use the remove slot command to have the system do some pre-processing work before removing an interface card. Use the undo remove slot command to cancel the inadvertent operation on the remove slot command. You do not need to execute the undo remove slot command when you replace a removed card, but you must execute the remove slot command before removing a card.
Example
# Remove the interface card from slot 3.
<3Com>remove slot 3
1.4.6 reset alarm urgent

Syntax
reset alarm urgent
View
User view
Parameter
None
Description
Use the reset alarm urgent command to clear all the stored alarms.
Example
# Clear all the stored alarms.
<3Com> reset alarm urgent
1.4.7 schedule reboot at

Syntax
schedule reboot at time [ date ]
View
User view
Parameter
time: Reboot time of the router, in the format of hh:mm (hours:minutes). hh is in the range 0 to 23, and mm is in the range 0 to 59. date: Reboot date of the router, in the format of mm/dd/yyyy or yyyy/mm/dd where mm is the month of the year in the range 1 to 12, dd is the day of the month, the range of which depends on month, and yyyy is the year in the range 2000 to 2099.
Description
Use the schedule reboot at command to enable the scheduled reboot function of the router and schedule the reboot time and date. By default, scheduled reboot is disabled. If a future date is specified, the router will reboot as scheduled with one minute of tolerance. If no date is specified, two cases are involved: If the time is set behind the current time, the router will reboot at the time of that day; if the configured time is ahead of the current time, the router will reboot at that time the next day. The configured date must not be 30 days ahead of the current date. In addition, to have the schedule take effect, you must confirm it by entering y or Y when asked by the system. This overwrites the original setting, if there is any. Note also that tuning the system clock afterwards with the clock command voids the configuration of the schedule reboot at command. Related command: reboot, schedule reboot delay, undo schedule reboot, display schedule reboot.
Example
# Set the router to reboot at 22:00 that night (the current time is 15:50).
<3Com> schedule reboot at 22:00 Reboot scheduled for 22:00:00 UTC 11/18/2002 (in 6 hours and 10 minutes) Proceed with reboot? [Y/N]:y
1.4.8 schedule reboot delay

Syntax
schedule reboot delay { time | minutes }
View
User view
Parameter
time: Time waiting for reboot, in the format of hhh:mm (hours:minutes). hhh ranges from 0 to 720, and mm ranges from 0 to 59. minutes: Time waiting for reboot, absolute minute value in the range 0 to 43200.
Description
Use the schedule reboot delay command to enable scheduled router reboot and set the waiting time. By default, the scheduled router reboot function is disabled. In setting the time waiting for reboot, two formats are available: hours: minutes (hhh:mm) and "absolute minutes". But the total time length must be less than or equal to 302460 minutes, or 30 days. After you complete this configuration the system asks you to confirm and validate the setting by entering a "Y" or "y". The validated new setting overwrites the original setting, if there is any. Note also that tuning the system clock afterwards with the clock command voids the configuration of the schedule reboot delay command. Related command: reboot, schedule reboot at, undo schedule reboot, display schedule reboot.
Example
# Configure the router to reboot 88 minutes later (the current time is 21:32).
<3Com> schedule reboot delay 88 Reboot scheduled for 23:00:00 UTC 11/1/2002 (in 1 hours and 28 minutes) Proceed with reboot? [Y/N]:y
1.4.9 upgrade
Syntax
upgrade [ bootrom | pico-code] filename
View
System view
Parameter
bootrom: Upgrades the Boot ROM in service. pico-code: Upgrades the pico-code in service. filename: File name of the upgrade software package.
Description
Use the upgrade command to upgrade the Boot ROM program, pico-code, or the logic.
Example
# Upgrade the pico-code in service using the file named filename.
[3Com] upgrade pico-code filename
1.4.10 undo schedule reboot

Syntax
undo schedule reboot
View
User view
Parameter
None
Description
Use the undo schedule reboot command to cancel the configuration of the schedule reboot terminal service. Related command: reboot, schedule reboot at, schedule reboot delay, display schedule reboot.
Example
# Disable the scheduled reboot function.
<3Com> undo schedule reboot
Chapter 2 HWPing Commands

2.1 HWPing Client Commands
2.1.1 count
Syntax
count times undo count
View
HWPing test group view
Parameter
times: Number of the test packets to be transmitted. It is in the range 1 to 15 and defaults to 1.
Description
Use the count command to configure the number of packets to be sent for each test. Use the undo count command to restore the default. A test timer starts when the system sends the first test packet. In the event that the times argument is set greater than one, the system continues to send the second one upon receipt of the reply to the first one. If receiving no reply upon expiry of the timer, the system sends the second and all the remaining packets likewise. Related command: frequency.
Example
# Send ten packets for each test.
[Router-administrator-icmp] count 10
2.1.2 datafill
Syntax
datafill string undo datafill
View
Parameter
string: Data for padding test packets. It is a string of less than 1024 characters. By default, test packets are padded with characters in the range 0 255 cyclically.
Description
Use the datafill command to configure the data for padding test packets. Use the undo datafill command to restore the default. You can pad HWPing test packets with any character string. If the size of a test packet is smaller than that of the configured padding string, only a portion of the data is used. If the size of the packet is larger, the string is used cyclically for padding. Suppose a padding string, abcd is configured. If the test packet size is 3, only abc is used; if it is 6, the string abcdab" is used.
Example
# Configure a packet padding string abcd.
[Router-administrator-icmp] datafill abcd
2.1.3 datasize
Syntax
datasize size undo datasize
View
Parameter
size: Test packet size, which is in the range 20 to 65535 and defaults to 100.
Description
Use the datasize command to configure the size of test packets. Use the undo datasize command to restore the default.
Example
# Set the size of test packets to 50.
[Router-administrator-icmp] datasize 50
2.1.4 description
Syntax
description string undo description
View
Parameter
string: Brief description about a test operation. By default, no description is configured.
Description
Use the description command to briefly describe a test operation. Use the undo description command to delete the configured description.
Example
# Describe a test group as icmp-test.
[Router-administrator-icmp] description icmp-test
2.1.5 destination-ip
Syntax
destination-ip ip-address undo destination-ip
View
Parameter
ip-address: Destination IP address in a test.
Description
Use the destination-ip command to configure the destination IP address in the test. Use the undo destination-ip command to delete the configured destination IP address. By default, no destination IP address is configured for any test. Related command: destination-port.
Example
# Set the destination IP address in the test to 169.254.10.3.
[Router-administrator-icmp] destination-ip 169.254.10.3
2.1.6 destination-port
Syntax
destination-port port-number undo destination-port
View
Parameter
port-number: Destination port number in a test. It is in the range 1 to 65535 and defaults to 0.
Description
Use the destination-port command to configure the destination port in the test. Use the undo destination-port command to delete the configured destination port. By default, no destination port is configured for any test.
Note: This command is configured only for DHCP, DLSw, FTP, HTTP, jitter, TCP-private, or UDP-private test.
Related command: destination-ip.
Example
# Set the destination port to 9000 in the test.
[Router-administrator-icmp] destination-port 9000
2.1.7 display hwping

Syntax
display hwping { result | history | jitter } [ administrator-name operation-tag ]
View
Any view
Parameter
result: Displays the test result. history: Displays the test history. jitter: Displays the jitter test information. administrator-name: Name of the administrator creating the test. operation-tag: Test operation tag.
Description
Using the display hwping command you can view test result(s). If a test group is specified using the arguments of administrator-name and test-operation-tag, the system displays only the test results of the group; if not, it displays the test results of all the test groups. Related command: test-enable.
Example
# Display the test result.
[router-hwping-administrator-icmp] display hwping result administrator icmp HWPing entry(admin administrator, tag icmp) test result: Destination ip address:169.254.10.2 Send operation times: 10 Receive response times: 10
Min/Max/Average Round Trip Time: 1/2/1 Square-Sum of Round Trip Time: 13 Last complete test time: 2004-11-25 16:28:55.0 Extend result: Disconnect operation number:0 Operation timeout number:0

System busy operation number:0 Operation sequence errors:0 Operation statistics errors:0

Connection fail number:0 Drop operation number:0
Table 2-1 Fields in the output of the display hwping result command Field Destination ip address Send operation times Receive response times Min/Max/Average Round Trip Time Square-Sum of Round Trip Time Last complete test time Disconnect number operation Description Destination IP address. The number of the sent test packets. The number of successful test attempts Roundtrip time in its minimum, maximum, and average The square sum of roundtrip time The time of the last successful test attempt The number of forcible disconnections performed by the opposite end The number of test failures due to system busy The number of received disordered packets The number of other errors
System busy operation number Operation errors sequence
Operation statics errors
# Display the test history.

[router-hwping-administrator-icmp] display hwping history administrator icmp HWPing entry(admin administrator, tag icmp) history record: Index 1 2 3 4 5 6 7 8 9 10 Response 1 1 1 1 1 2 1 1 1 1 Status 1 1 1 1 1 1 1 1 1 1 LasrRC 0 0 0 0 0 0 0 0 0 0 Time 2004-11-25 16:28:55.0 2004-11-25 16:28:55.0 2004-11-25 16:28:55.0 2004-11-25 16:28:55.0 2004-11-25 16:28:55.0 2004-11-25 16:28:55.0 2004-11-25 16:28:55.0 2004-11-25 16:28:55.0 2004-11-25 16:28:55.9 2004-11-25 16:28:55.9
Table 2-2 Fields in the output of the display hwping history command Field Response Status Description Roundtrip test time in milliseconds, or timeout time. It is 0 for an incomplete test. Test result value The last received response code that is based on implementation. Given ICMP echo enabled, receiving an ICMP response that contains ICMP_ECHOREPLY(0) indicates a successful test. ICMP is usually defined in the file that contains ip_icmp. Test time
LasrRC
Time
2.1.8 filename
Syntax
filename file-name undo filename
View
Parameter
file-name: Name of the file to be gotten from or put onto an FTP server.
Description
Use the filename command to configure the name of the file to be taken from or put onto an FTP server. Use the undo filename command to cancel the configuration of the file name. By default, no file name is configured.
Note: This command applies only to FTP test.
Related command: username, password, ftp-operation.
Example
# Specify the file to be gotten from or put onto an FTP server by specifying its name config.txt".
[Router-administrator-ftp] filename config.txt
2.1.9 frequency
Syntax
frequency interval undo frequency
View
Parameter
interval: Automatic test interval in the range 0 to 65535 seconds. It defaults to 0, meaning there is no automatic test.
Description
Use the frequency command to configure an automatic test interval. Use the undo frequency command to disable automatic test. The system automatically tests at intervals specified by this command, where the argument interval is greater than 0. Related command: count.
Example
# Set the automatic test interval to 10 seconds.
[Router-administrator-icmp] frequency 10
2.1.10 ftp-operation
Syntax
ftp-operation { get | put }
View
Parameter
get: Gets a file from an FTP server. put: Sends a file to an FTP server.
Description
Use the ftp-operation command to configure the FTP operation done by the system. To FTP a file from a server, use the ftp-operation get command. To FTP a file to a server, use the ftp-operation put command. The default FTP operation type is get.
Related command: username, password.
Example
# Set the FTP operation to get.
[Router-administrator-ftp] ftp-operation get
2.1.11 history-records
Syntax
history-records number undo history-records
View
Parameter
number: Number of test results allowed to be retained. It is in the range 0 to 50 and defaults to 50.
Description
Use the history-records command to configure the number of test results that the system can retain.
Use the undo history-records command to restore the default.
Example
# Set the number of retained history records concerning the current test group to 10.
[Router-administrator-icmp] history-records 10
2.1.12 http-operation
Syntax
http-operation { get | post }
View
Parameter
get: Obtains data from an HTTP server. post: Sends data to an HTTP server.
Description
Use the http-operation command to configure an HTTP operation type. HTTP operation includes get and post, where get is to obtain data from an HTTP server, and post is to send data to the HTTP server. The default operation type is get.
Note: This command applies only to HTTP test.
Related command: http-string.
Example
# Set the HTTP test operation type to get.
[Router-administrator-http] http-operation get
2.1.13 http-string
Syntax
http-string url-string undo http-string
View
Parameter
url-string: URL used by the WWW service program to identify the location of information on the Internet. By default, no URL is configured.
Description
Use the http-string command to configure an URL for the HTTP test. Use the undo http-string command to delete the configured URL information.
Note: This command applies only to HTTP test.
Related command: http-operation.
Example
# Configure the URL /index.htm http/1.1.
[Router-administrator-http] http-string /index.htm http/1.1
2.1.14 hwping
Syntax
hwping administrator-name operation-tag undo hwping administrator-name operation-tag
View
System view
Parameter
administrator-name: Specifies name of the administrator creating an HWPing test group. operation-tag: Test operation tag.
Description
Use the hwping command to create an HWPing test group. Executing this command allows the system to access the HWPing test group view.
Example
# Create an HWPing test group, where the administrator name is administrator and the test operation tag is icmp.
[Router] hwping administrator icmp
2.1.15 hwping-agent enable

Syntax
hwping-agent enable undo hwping-agent enable
View
System view
Parameter
None
Description
Use the hwping-agent enable command to enable the HWPing client function. Use the undo hwping-agent enable command to disable the HWPing client function. Before you can perform a test you must enable the HWPing client function. Related command: hwping-server enable.
Example
# Enable HWPing Client.
[Router] hwping-agent enable
2.1.16 hwping-agent max-requests

Syntax
hwping-agent max-requests max-number undo hwping-agent max-requests
View
System view
Parameter
max-number: Maximum number of concurrent tests. It is in the range 0 to 5 and defaults to 5.
Description
Use the hwping-agent max-requests command to set the allowed maximum number of concurrent tests. Use the undo hwping-agent max-requests command to restore the default maximum number of concurrent tests.
Example
# Set the maximum number of concurrent tests to 4.
[Router] hwping-agent max-requests 4
2.1.17 jitter-interval
Syntax
jitter-interval interval undo jitter-interval
View
Parameter
interval: Packet sending interval in a jitter test. It is in the range 10 to 1000 milliseconds and defaults to 20 milliseconds.
Description
Use the jitter-interval command to set a packet sending interval for a jitter test.
Use the undo jitter-interval command to restore the default.
Note: This command applies only to jitter test.
Related command: jitter-packetnum.
Example
# Send packets at intervals of 30 milliseconds in a jitter test.
[Router-administrator-icmp] jitter-interval 30
2.1.18 jitter-packetnum
Syntax
jitter-packetnum number undo jitter-packetnum
View
Parameter
number: Number of packets to be sent in a jitter test. It is in the range 10 to 100 and defaults to 20.
Description
Use the jitter-packetnum command to configure the number of packets to be sent in a jitter test. Use the undo jitter-packetnum command to restore the default. By default, the number of packets is 20.
Note: This command applies only to jitter test.
Related command: jitter-interval.
Example
# Send 30 packets in a jitter test.
[Router-administrator-icmp] jitter-packetnum 30
2.1.19 password
Syntax
password password undo password
View
Parameter
password: Password required at login.
Description
Use the password command to configure the password required for logging onto the FTP server. Use the undo password command to cancel the configured password. By default, no password is configured for logging onto the FTP server.
Related command: username, ftp-operation.
Example
# Set the password for logging onto the FTP server to hwping.
[Router-administrator-ftp] password hwping
2.1.20 probe-failtimes
Syntax
probe-failtimes times undo probe-failtimes
View
Parameter
times: Number of consecutive probe failures. It is in the range 1 to 65535 and defaults to 1.
Description
Use the probe-failtimes command to configure the number of consecutive probe failures allowed in an HWPing test before a trap is sent to the NMS. Use the undo probe-failtimes command to restore the default.
Note: A test may include multiple probes.
Example
# Send a trap to the NMS after three consecutive probe failures for an HWPing test.
[Router] probe-failtimes 3
2.1.21 send-trap
Syntax
send-trap { all | probefailure | testcomplete | testfailure } undo send-trap { all | probefailure | testcomplete | testfailure }
View
Parameter
probefailure: Sends traps after test packet transmission fails.
testcomplete: Sends traps upon completion of the test. testfailure: Sends traps upon test failures. all: Sends traps for all the events described above.
Description
Use the send-trap command to configure the type of events that trigger trap sending. Use the undo send-trap command to cancel the configuration of the event type. By default, no traps are sent.
Example
# Send traps upon completion of tests.
[Router-administrator-icmp] send-trap testcomplete
2.1.22 sendpacket passroute

Syntax
sendpacket passroute undo sendpacket passroute
View
Parameter
None
Description
Use the sendpacket passroute command to enable routing table bypass. Use the undo sendpacket passroute command to disable routing table bypass. By default, routing table bypass is disabled. With routing table bypass, a remote host can bypass the normal routing tables and send ICMP packets directly to a host on an attached network. If the host is not on a directly connected network, an error is returned. You can use this function when pinging a local host on an interface that has no route defined.
Example
# Bypass routing table when sending ICMP packets.
[Router] sendpacket passroute
2.1.23 source-interface
Syntax
source-interface interface-type interface-number undo source-interface
View
Parameter
interface-type: Interface type. interface-number: Interface number.
Description
Use the source-interface command to configure the source interface in the transmitted test packets. Use the undo source-interface command to cancel the configuration. By default, no source interface is configured for the transmitted test packets.
Example
# Specify Ethernet 1 as the source interface in the transmitted test packet.
[Router-administrator-dhcp] source-interface ethernet 1
2.1.24 source-ip
Syntax
source-ip ip-address undo source-ip
View
Parameter
ip-address: Source IP address used in the test.
Description
Use the source-ip command to configure a source IP address for this test.
Use the undo source-ip command to cancel the configuration. The source IP address in this test defaults to the IP address of the interface where test packets are to be sent.
Example
# Set the source IP address for this test to 169.254.10.2.
[Router-administrator-icmp] source-ip 169.254.10.2
2.1.25 source-port
Syntax
source-port port-number undo source-port
View
Parameter
port-number: Source port number used in the test. It defaults to 0.
Description
Use the source-port command to configure a source port number for this test. Use the undo source-port command to cancel the configuration.
Example
# Set the source port number to 8000 for this test.
[Router-administrator-icmp] source-port 8000
2.1.26 test-type
Syntax
test-type type
View
Parameter
test-type: Test type, which can be one of the following keywords:
dhcp: DHCP test. dlsw: DLSw test. ftp: FTP connection test. http: HTTP connection test. icmp: ICMP test, the default test type. jitter: Jitter test for analyzing delay variations in UDP packet transmission. snmpquery: SNMP test. tcpprivate: Tests the TCP connection of a specified unknown port. tcppublic: Tests the TCP connection of port 7. udpprivate: Tests the UDP connection of a specified unknown port. udppublic: Tests the UDP connection of port 7.
Description
Use the test-type command to configure the type of test. HWPing tests include DHCP, DLSw, FTP, HTTP, ICMP, Jitter, SNMP, TCP, and UDP tests. The default test type is ICMP.
Example
# Set test type to ICMP.
[Router-administrator-icmp] test-type icmp
2.1.27 test-enable
Syntax
test-enable
View
Parameter
None
Description
Use the test-enable command to execute an HWPing test.
Note: After you execute the test-enable command the system does not display the test result. You may view the test result information by executing the display hwping command.
Related command: display hwping.
Example
# Execute the HWPing test defined by the test group wgw-testicmp.
[Router-hwping-wgw-testicmp] test-enable
2.1.28 test-failtimes
Syntax
test-failtimes times undo test-failtimes
View
Parameter
times: Number of consecutive test failures. It is in the range 1 to 65535 and defaults to 1.
Description
Use the test-failtimes command to configure the number of consecutive test failures allowed before a trap is sent to the NMS. Use the undo test-failtimes command to restore the default.
Note: A test may include multiple probes.
Example
# Send a trap to the NMS after three consecutive test failures.
[Router] test-failtimes 3
2.1.29 timeout
Syntax
timeout time undo timeout
View
Parameter
time: Timeout time in the range 1 to 60 seconds. It defaults to 3 seconds.
Description
Use the timeout command to configure a timeout time for a test. Use the undo timeout command to restore the default.
Example
# Set the timeout time to 10 seconds.
[Router-administrator-icmp] timeout 10
2.1.30 tos
Syntax
tos value undo tos
View
Parameter
value: ToS field in the header of HWPing test packets. It is in the range 0 to 255. By default, ToS field is not set.
Description
Use the tos command to assign a value to the ToS field in the header of HWPing test packets. Use the undo tos command to cancel the ToS value configuration.
In a ping command, service type is set using the argument -o.
Example
# Set the ToS field in the header of HWPing packets to one.
[Router-administrator-ftp] tos 1
2.1.31 ttl
Syntax
ttl number undo ttl
View
Parameter
number: Time to live (TTL) value or lifetime of HWPing ICMP test packets. It is in the range 1 to 255 and defaults to 255.
Description
Use the ttl command to configure TTL of ICMP test packets. Use the undo ttl command to restore the default TTL of ICMP test packets. TTL is actually a hop count limit on how far a test packet can travel on a network. In a ping command it is defined using the argument -i.
Note: This command applies only to ICMP test.
Example
# Set the TTL of HWPing ICMP test packets to 16.
[Router-administrator-icmp] ttl 16
2.1.32 username
Syntax
username name undo username
View
Parameter
name: User name used for logging onto the FTP server.
Description
Use the username command to configure a name used for logging onto the FTP server. Use the undo username command to cancel the username configuration. By default, no username is configured for logging onto the FTP server.
Note: This command applies to FTP test only.
Related command: password, ftp-operation.
Example
# Use administrator as the username for logging onto the FTP server.
[Router-administrator-ftp] username administrator
2.1.33 vpninstance
Syntax
vpninstance name undo vpninstance
View
Parameter
name: VPN instance name, a string of 1 to 19 characters.
Description
Use the vpninstance command to configure the VPN instance information for ICMP. Use the undo vpninstance command to cancel the VPN instance information of ICMP. By default, no VPN instance information is configured for ICMP.
Example
# Set the VPN instance name for ICMP to vpn1.
[Router] vpninstance vpn1
2.2 HWPing Server Commands

2.2.1 hwping-server enable
Syntax
hwping-server enable undo hwping-server enable
View
System view
Parameter
None
Description
Use the hwping-server enable command to enable HWPing Server. Use the undo hwping-server enable command to disable HWPing Server. By default, HWPing Server is disabled. You may use HWPing to test jitter, or the UDP or TCP connection of a specified port. If a 3Com router is used as the server in an HWPing test you must enable HWPing on the server. Related command: hwping-agent enable, hwping-server tcpconnect, hwping-server udpecho.
Example
# Enable HWPing Server.
[Router] hwping-server enable
2.2.2 hwping-server tcpconnect

Syntax
hwping-server tcpconnect ip-address port-number undo hwping-server tcpconnect ip-address port-number
View
System view
Parameter
ip-address: IP address where HWPing Server provides the TCP listening service. port-number: Port where HWPing Server provides the TCP listening service. This port number cannot be greater than 50,000 or be the one reserved for special purposes such as 1701.
Description
Use the hwping-server tcpconnect command to create a TCP listening service. Use the undo hwping-server tcpconnect command to delete the established TCP listening service. When you use a 3Com router as the server in a HWPing test on the TCP connection of a specified port you must create the TCP listening service on the server. Related command: hwping-server enable.
Example
# Create a TCP listening service, setting IP address to 169.254.10.2 and port number to 9000.
[Router] hwping-server tcpconnect 169.254.10.2 9000
2.2.3 hwping-server udpecho

Syntax
hwping-server udpecho ip-address port-number
undo hwping-server udpecho ip-address port-number
View
System view
Parameter
ip-address: IP address where HWPing server provides the UDP listening service. port-number: Port where HWPing Server provides the UDP listening service.
Description
Use the hwping-server udpecho command to create a UDP listening service. Use the undo hwping-server udpecho command to delete the established UDP listening service. If you want to use a 3Com router as the server in an HWPing test on the UDP connection of a specified port you must create the UDP listening service on the server. Related command: hwping-server enable.
Example
# Create a UDP listening service, setting IP address to 169.254.10.2 and port number to 9000.
[Router] hwping-server udpecho 169.254.10.2 9000
Chapter 3 File Management Commands

3.1 File System Commands
3.1.1 bootfile dir
Syntax bootfile dir View System view
Parameter
None Description Use the bootfile dir command to view the information about all the boot files in the Flash, including file type, date, time, file size, and file name. This command is available only with the routers that support dual image function. Related command: dir, bootfile main, bootfile backup.
Example
# Display the information about all the boot files in the Flash.
[3Com] bootfile dir Aviliable boot file(s): 'M' = MAIN, 'B' = BACKUP, 'S' = SECURE ------------------------------------------------------------[No.] [Type] [Date] [Time] [Size] [Name]
------------------------------------------------------------1 1 1 1 M B S N/A Mar/15/2004 Mar/15/2004 Mar/15/2004 Mar/15/2004 18:09:00 5556068 18:09:00 5556068 18:09:00 5556068 18:09:00 5556068 Main.bin Backup.bin Secure.bin Router.bin
-------------------------------------------------------------
3.1.2 bootfile main

Syntax
bootfile main { main-bootfile-name }
View
System view
Parameter
main-bootfile-name: Main boot file for booting the router.
Description
Use the bootfile main command to specify the main boot file. On a router supporting dual image function (a Flash larger than 8 MB must be available), three boot files are defined in the system by default: main boot file, backup boot file, and secure boot file. The system uses them in the following order: Main boot file, with the default name being main.bin and file type M, is the default file for system boot; Backup boot file, with the default name being backup.bin and file type B, is the boot file used in case of the boot failure using the main boot file; Secure boot file, with the default name being secure.bin and file type S, is the boot file used in case of the boot failure using the backup boot file. If the boot attempts using all these files fail, the system prompts the boot failure. This command is only available with the routers that support the dual image function. Related command: dir, bootfile dir, bootfile backup.
Example
# Specify the main boot file.
[3Com] bootfile main router.bin Set main boot file successfully!
# View information on the boot files in the Flash to verify that the main boot file has been successfully specified.
[3Com]bootfile dir Aviliable boot file(s): 'M' = MAIN, 'B' = BACKUP, 'S' = SECURE ------------------------------------------------------------[No.] [Type] [Date] [Time] [Size] [Name]
------------------------------------------------------------1 1 1 1 N/A B S M Mar/15/2004 18:09:00 5556068 Main.bin Mar/15/2004 18:09:00 5556068 Backup.bin Mar/15/2004 18:09:00 5556068 Secure.bin Mar/15/2004 18:09:00 5556068 Router.bin
-------------------------------------------------------------
3.1.3 bootfile backup

Syntax
bootfile backup { backup-bootfile-name }
View
System view
Parameter
backup-bootfile-name: Backup boot file for booting the router.
Description
Use the bootfile backup command to specify the backup boot file. For more information about boot files and the order in which they are used, see the section bootfile main. This command is only available with the routers that support dual image function. Related command: dir, bootfile dir, bootfile main.
Example
# Specify the backup boot file.
[3Com]bootfile backup router.bin Set backup boot file successfully!
# View information on the boot files in the Flash to verify that the backup boot file has been successfully specified.
[3Com] bootfile dir Available boot file(s): 'M' = MAIN, 'B' = BACKUP, 'S' = SECURE ------------------------------------------------------------[No.] [Type] [Date] [Time] [Size] [Name]
------------------------------------------------------------1 N/A Mar/15/2004 18:09:00 5556068 Main.bin

1 1 1 N/A S M+B
Mar/15/2004 18:09:00 5556068 Backup.bin Mar/15/2004 18:09:00 5556068 Secure.bin Mar/15/2004 18:09:00 5556068 Router.bin
-------------------------------------------------------------
3.1.4 cd
Syntax
cd directory
View
User view
Parameter
directory: Name of the target directory.
Description
Use the cd command to change the current working directory of the user to the specified directory. The default path for working directory is flash:.
Example
# Change the current working directory on the router to test.
<3Com> pwd flash: <3Com> cd test <3Com> pwd flash:/test
3.1.5 copy
Syntax
copy filename_source filename_dest
View
User view
Parameter
filename_source: Name of the source file. filename_dest: Name of the target file or directory.
Description
Use the copy command to copy a file. If the name of the target file is the same with an existing directory name, the target file is copied to the directory. If the name of the target file is the same with the name of the existing file, the system asks whether to overwrite the exiting file.
Example
<3Com> pwd flash: <3Com> dir Directory of flash:/
0 1 2
-rw-rw-rw-
7654528 4 300
Oct 10 2002 10:10:10 Aug 23 2052 15:44:54 Aug 23 2052 15:45:58
system snmpboots config.cfg
15621 KB total (8140 KB free)
# Copy the file config.cfg from Flash memory to the backup directory that has been created.
<3Com> copy config.cfg backup Copy flash:/config.txt to flash:/backup/config.cfg ?[Y/N]:y % Copied file flash:/config.cfg to flash:/backup/config.cfg <3Com> dir Directory of flash:/backup/
-rw-
300
Aug 23 2052 15:57:46
config.cfg
3.1.6 delete
Syntax
delete /unreserved filename
View
User view
Parameter
/unreserved: Deletes the specified file unreservedly, and the deleted file can never be restored. filename: Name of the file to be deleted including the path.
Description
Use the delete command to move the specified file from the storage device to the recycle bin where you can completely delete the file with the undelete command or restore it with the reset recycle-bin filename command. Note that if you delete two files in different directories but with the same filename, only the last one is stored in the recycle bin. Use the delete /unreserved command to delete the specified file completely; meaning the file cannot be restored. The asterisks (*) are acceptable when specifying the filename argument. The dir command does not display the deleted files. To view all the files including those in the recycle bin, use the dir /all command.
Caution: If there is only one application file (system file) in the system you are not allowed to delete the file.
Example
# Delete the file flash:/test/test.txt.
<3Com> delete flash:/test/test.txt Delete flash:/test/test.txt?[Y/N]: y %Deleted file flash:/test/test.txt.
3.1.7 dir
Syntax
dir [ /all | filename ]
View
User view
Parameter
/all: Displays all files (including the deleted files). filename: Name of the file or directory to be displayed including the path.
Description
Using the dir command you can view information about the specified file or directory in the router storage device. By default, this command displays the file information under the current directory. This command accepts asterisks (*) as wildcards. The dir /all command can display information about all the files, including those in the recycle bin. The names of these deleted files are enclosed by "[]", for example, [temp.cfg]. Such deleted files can be restored using the undelete command. To remove the files from the recycle bin completely use the reset recycle-bin command. The dir /h command displays information about the private files under the current path. The attribute of the private files is represented by ---h.
Example
# Display the files in Flash memory.
<3Com> dir flash: Directory of flash:/
0 1 2 3 4
-rw-rw-rw-rw-rw-
5878540 670 8271372 8701964 670
Jul 05 2004 10:39:36 Sep 15 2004 11:46:51 Aug 17 2004 14:04:15 Sep 22 2004 14:25:49 Sep 30 2004 10:49:15
r6000-V2.30-0006.BIN config.cfg r6000.bin main.bin r6000.cfg
3.1.8 execute
Syntax
execute filename
View
System view
Parameter
filename: Name of a batch file (including the path) with a .bat extension. It is in the range 1 to 256.
Description
Use the execute command to execute the specified batch file. Batch files are command line files. Executing a batch file is to execute a set of command lines in the file. Command lines fall into two categories: configuration command such as local-user, and operation command such as display current-configuration. If all the commands in a batch file are configuration commands, the file is called a configuration file; if all the commands in the file are operation commands the file is called an operation command file. Executing a configuration file can add to the systems new configurations or modify the current configurations. When doing this, the system adds those new configurations and rewrites the existing configurations that are different from the configuration file, while leaving the existing configurations that are not involved intact. You can execute an operation command file to have the system execute one or multiple operation commands automatically. For example, to view system operating information you need to execute the commands display version and display current-configuration. In addition, to view routing information you must execute the display rout-static command. You can however put these three commands in a file, running.bat for example, and save the file to Flash. After that, you can have the system execute execute running.bat each time you want to execute these three commands. You can put sets of commands that are always executed together in batch files. The execute command allows you, especially as a service engineer, to execute a batch file instead of entering each command individually. Note that: The extension of batch files must be .bat. A valid batch file contains only standard command lines.
Example
# Execute the batch file test.bat in the flash:/ directory.
[3Com] execute test.bat
3.1.9 file prompt

Syntax
file prompt {alert | quiet }
View
System view
Parameter
alert: Enables interactive acknowledgement when a user operation, deleting a file for example, may result in data loss or corruption. quiet: No prompt is displayed even when a user operation, deleting a file for example, may result in data loss or corruption.
Description
Use the file prompt command to enable or disable the router to warn when an operation may result in data loss or corruption. By default, the prompt mode is alert. When the prompt mode is set to quiet, the system does not notify you even when an operation could result in data loss or corruption.
Example
# Set the file operation prompt mode to quiet.
[3Com] file prompt quiet
# Set the file operation prompt mode to alert.

[3Com] file prompt alert
3.1.10 format
Syntax
format device-name
View
User view
Parameter
device-name: Device name.
Description
Use the format command to format a storage device. Formatting results in loss of all files on the specified storage device and these files cannot be restored.
Example
# Format the Flash memory.
<3Com> format flash: All data on flash: will be lost, proceed with format? [Y/N]: Format flash: completed
3.1.11 mkdir
Syntax
mkdir directory
View
User view
Parameter
directory: Name of directory.
Description
Use the mkdir command to create a directory under the specified directory on the specified storage device. The name of the directory to be created must be unique under the specified directory.
Example
# Create directory dd.
<3Com> mkdir dd Created dir flash:/dd.
3.1.12 more
Syntax
more filename
View
User view
Parameter
filename: File name.
Description
Using the more command you can view the contents of a specified file. By default, the file system displays files in the form of text, that is, the file contents.
Example
# Display the contents of file test.txt.
<3Com> more test.txt AppWizard has created this test application for you. This file contains a summary of what you will find in each of the files that make up your test application. Test.dsp This file (the project file) contains information at the project level and is used to build a single project or subproject. Other users can share the project (.dsp) file, but they should export the makefiles locally.
3.1.13 move
Syntax
move filename_source filename_dest
View
User view
Parameter
filename_source: Name of the source file. filename_dest: Name of the target file.
Description
Use the move command to move a file. If the name of the target file is the same as the name of an existing directory, the target file is moved to the directory, with the same file name. If the name of the target file is the same as an existing file name, you are prompted whether the existing file should be overwritten.
Example
<3Com> dir Directory of flash:/ 0 1 2 -rw-rwdrw2145123 595 0 Jul 12 2001 12:28:08 Jul 12 2001 10:47:50 Jul 12 2001 19:41:20 r6000.bin config.cfg test
6477 KBytes total (2144 KBytes free) <3Com> dir flash:/test/ Directory of flash:/test/ 0 1 2 drw-rw-rw595 50 Jul 12 2001 20:23:37 Jul 12 2001 20:13:19 Jul 12 2001 20:08:32 subdir config.cfg sample.txt
6477 KBytes total (2144 KBytes free)
# Move the file from flash:/test/sample.txt to flash:/sample.txt.

<3Com> move flash:/test/sample.txt flash:/sample.txt Move flash:/test/sample.txt to flash:/sample.txt ?[Y/N]:y % Moveded file flash:/test/sample.txt flash:/sample.txt <3Com> dir Directory of flash:/ 0 1 2 3 -rw-rwdrw-rw2145123 595 0 50 Jul 12 2001 12:28:08 Jul 12 2001 10:47:50 Jul 12 2001 19:41:20 Jul 12 2001 20:26:48 ne80.bin config.cfg test sample.txt
6477 KBytes total (2144 KBytes free) <3Com> dir flash:/test/ Directory of flash:/test/ 0 1 drw-rw595 Jul 12 2001 20:23:37 Jul 12 2001 20:13:19 subdir config.cfg
3.1.14 pwd
Syntax
pwd
View
User view
Parameter
None
Description
Using the pwd command you can view the current path. If the current path is not set the operation will fail.
Example
# Display the current path.
<3Com> pwd flash:/test
3.1.15 rename
Syntax
rename filename-source filename-dest
View
User view
Parameter
filename-source: Name of the source file. filename-dest: Name of the target file.
Description
Use the rename command to rename a file. Note that the target file name must not be the same as an existing directory or file name.
Caution: If only one application file (system file) exists in the system you cannot rename it. Any modification may cause boot failure when you upgrade the application in the router.
Example
<3Com> dir Directory of flash:/ 0 1 2 3 -rw-rwdrw-rw2145123 595 50 Jul 12 2001 12:28:08 Jul 12 2001 10:47:50 Jul 12 2001 19:41:20 Jul 12 2001 20:26:48 system.bin config.cfg test sample.txt
# Rename file sample.txt to sample.bak.

<3Com> rename sample.txt sample.bak Rename flash:/sample.txt to flash:/sample.bak ?[Y/N]:y % Renamed file flash:/sample.txt flash:/sample.bak <3Com> dir Directory of flash:/ 0 1 2 3 -rw-rwdrw-rw2145123 595 50 Jul 12 2001 12:28:08 Jul 12 2001 10:47:50 Jul 12 2001 19:41:20 Jul 12 2001 20:29:55 system.bin config.txt test sample.bak
3.1.16 reset recycle-bin

Syntax
reset recycle-bin [filename] [flash:/] [/force]
View
User view
Parameter
filename: Name of the file to be deleted. (You need to specify the path.) flash:/: Deletes all files from the Flash memory.
/force: Empties the recycle bin.
Description
Use the reset recycle-bin command to delete one or more files from the recycle bin completely. This command accepts the asterisks (*) as wildcards. The delete command only moves files to the recycle bin. To delete a file permanently use the reset recycle-bin command.
Example
# Delete the specified file from the recycle bin.
<3Com> reset recycle-bin flash:/p1h_logic.out reset flash:/plh_logic.out?[Y/N]
# Empty the recycle bin.

<3Com > reset recycle-bin /force Clear all files in recycle-bin directly?[Y/N]:y %Cleared file flash:/test/a.cfg. %Cleared file flash:/test/b.cfg. %Cleared file flash:/test/c.cfg. Finished.
3.1.17 rmdir
Syntax
rmdir directory
View
User view
Parameter
directory: Name of the directory.
Description
Use the rmdir command to delete a directory. The directory to be deleted must be empty.
Example
<3Com>dir Directory of flash:/

0 1 drw-rw595

subdir config.cfg
Jul 12 2001 20:23:37 Jul 12 2001 20:13:19
# Delete directory subdir.

<3Com> rmdir subdir Rmdir subdir?[Y/N]:y % Removed directory subdir <3Com> dir Directory of flash:/ 0 -rw595 Jul 12 2001 20:13:19 config.cfg
3.1.18 undelete
Syntax
undelete filename
View
User view
Parameter
filename: Name of the file to be restored.
Description
Use the undelete command to restore a file from the recycle bin. You cannot restore a file if its name is the same as that of the existing directory name. If the name of the file is the same as that of an exiting file, the system asks you whether to overwrite the existing file.
Example
<3Com> dir /all Directory of flash:/ 0 1 -rw-rw595 50 Jul 12 2001 20:13:19 Jul 12 2001 20:09:23 config.cfg [sample.bak]
# Restore file sample.bak from the recycle bin.

<3Com> undelete sample.bak Undelete flash:/test/sample.bak ?[Y/N]:y

% Undeleted file flash:/test/sample.bak <3Com> dir /all Directory of flash:/ 0 1 -rw-rw50 595
Jul 12 2001 20:34:19 Jul 12 2001 20:13:19
sample.bak config.cfg
3.2 FTP Server Configuration Commands

3.2.1 display ftp-server
Syntax
display ftp-server
View
Any view
Parameter
None
Description
Use the display ftp-server command to view the parameters of the current FTP server. After you configure FTP parameters you can verify them with this command.
Example
# Display the configured FTP server parameters.
<3Com> display ftp-server Ftp server is running Max user number User count Timeout(minute) P ut Method 5 2 30 fast
The information indicates that the FTP server is running with support to five concurrent login users; now two login users are present; the timeout of the users is 30 minutes, and file transfer mode is fast.
3.2.2 display ftp-user

Syntax
display ftp-user
View
Any view
Parameter
None
Description
Use the display ftp-user command to view the parameters of the current FTP users.
Example
# Display the settings of the FTP users.
<3Com> display ftp-user username 3Com host 10.110.3.5 1074 port topdir c:/3Com 2 idle
The information indicates that a connection is present between FTP user 3Com and the FTP server. The IP address of the remote host is 10.110.3.5 and the remote port number is 1074. The authorized path is flash:/3Com and the user has not sent any service requests to the FTP server for two minutes.
3.2.3 ftp server enable

Syntax
ftp server enable undo ftp server
View
System view
Parameter
None
Description
Use the ftp server enable command to enable the FTP server to allow login of FTP users.
Use the undo ftp server command to disable the FTP server as well as login of FTP users. By default, the FTP server is disabled.
Example
# Disable the FTP server.
[3Com] undo ftp server
3.2.4 ftp timeout

Syntax
ftp timeout minutes undo ftp timeout
View
System view
Parameter
minutes: Idle-timeout timer in minutes, in the range 1 to 35791. It defaults to 30 minutes.
Description
Use the ftp timeout command to set the idle-timeout timer. Use the undo ftp timeout command to restore the default. Once you log onto the FTP server, you set up a FTP connection. When the connection is disrupted or aborted, the FTP server, however, does not know if it is not notified and will maintain the connection. To address this issue, you can set an idle-timeout timer to have the FTP server disconnect if no command is received or/and transmitted before the timer expires.
Example
# Set the idle-timeout timer to 36 minutes.
[3Com] ftp timeout 36
3.2.5 ftp update

Syntax
ftp update { fast | normal } undo ftp update
View
System view
Parameter
fast: Fast update. normal: Normal update.
Description
Use the ftp update command to set the FTP update mode. Use the undo ftp update command to restore the default, or fast mode. Two ways are available for the FTP server to update the files that you FTP to the server using the put command: In fast mode, the FTP server starts writing data to the Flash memory after file transfer completes. This protects the existing files on the router from being ruined in the event that anomalies, power failure for example, occur during a file transfer. In normal mode, the FTP server writes data to the Flash memory during file transfer. This means that any anomaly, power failure for example, during file transfer might result in corruption of the files on the router. This mode, however consumes less memory than fast mode.
Example
# Set the FTP update mode to normal.
[Router] ftp update normal
3.3 FTP Client Commands

3.3.1 ascii
Syntax
ascii
View
FTP client view
Parameter
None
Description
Use the ascii command to set the type of the transmitted data to ASCII. Data type defaults to ASCII.
Example
# Set the type of the transmitted data to ASCII.
[ftp] ascii 200 Type set to A.
3.3.2 binary
Syntax
binary
View
FTP client view
Parameter
None
Description
Use the binary command to set data type to binary for file transfer.
Example
# Enable file transfer in binary mode.
[ftp] binary 200 Type set to B.
3.3.3 bye
Syntax
bye
View
FTP client view
Parameter
None
Description
Use the bye command to disconnect from the remote FTP server and exit to user view.
Example
# Terminate the connection with the remote FTP server and exit to user view.
[ftp] bye <3Com>
3.3.4 cd
Syntax
cd pathname
View
FTP client view
Parameter
pathname: Path name.
Description
Use the cd command to change the current working directory path on the remote FTP server. You can use this command to access another directory on the FTP server.
Example
# Change the current working directory path to d:/temp.
[ftp] cd d:/temp
3.3.5 cdup
Syntax
cdup
View
FTP client view
Parameter
None
Description
Use the cdup command to return from the current working directory path to the upper directory.
Example
# Change the current working directory path to the upper directory.
[ftp] cdup
3.3.6 close
Syntax
close
View
FTP client view
Parameter
None
Description
Use the close command to terminate the connection to the remote FTP server, but remain in FTP client view. This command terminates both control connection and data connection to the remote FTP server.
Example
# Terminate the connection to the remote FTP server but remain in FTP client view.
[ftp] close [ftp]
3.3.7 debugging
Syntax
debugging undo debugging
View
FTP client view
Parameter
None
Description
Use the debugging command to enable debugging. Use the undo debugging command to disable debugging. By default, FTP client debugging is disabled.
Example
# Enable debugging.
[ftp] debugging
3.3.8 delete
Syntax
delete remotefile
View
FTP client view
Parameter
remotefile: File name.
Description
Use the delete command to delete the specified file.
Example
# Delete file temp.c.
[ftp] delete temp.c
3.3.9 dir
Syntax
dir [ filename ]
View
FTP client view
Parameter
filename: Name of the queried directory or file.
Description
Use the dir command to query for a specified file. This command displays one or all of the files under the directory.
Example
# Query for file temp.c.
[ftp] dir temp.c
3.3.10 disconnect
Syntax
disconnect
View
FTP client view
Parameter
None
Description
Use the disconnect command to disconnect from the remote FTP server but remain in FTP client view. This command terminates both control connection and data connection to the remote FTP server.
Example
# Disconnect from the remote FTP server but remain in FTP client view.
[ftp] disconnect [ftp]
3.3.11 ftp
Syntax
ftp [host [ port ] ] [-a ip-address]
View
User view
Parameter
host: IP address or hostname of the remote FTP server. port: Port number of the remote FTP server. -a ip-address: Source address of the FTP client.
Description
Use the ftp command to set up control connection to the remote FTP server and enter FTP client view.
Example
# Connect to the remote FTP server with the IP address of 1.1.1.1.
<3Com> ftp 1.1.1.1
3.3.12 get
Syntax
get remotefile [ localfile ]
View
FTP client view
Parameter
localfile: Local file name. remotefile: File name on the remote FTP server.
Description
Use the get command to FTP a file from a remote server and save it. By default, if no name is specified, the local file uses the name of the source file on the FTP server.
Example
# Download file temp1.c and save it as temp.c.
[ftp] get temp1.c temp.c
3.3.13 lcd
Syntax
lcd
View
FTP client view
Parameter
None
Description
Use the lcd command to get the local working directory path of the FTP client.
Example
# Display the local working directory path.
[ftp] lcd % Local directory now flash:
3.3.14 ls
Syntax
ls [ remotefile ] [ localfile ]
View
FTP client view
Parameter
remotefile: Remote file for which you query. localfile: Name of the file to be saved at the local.
Description
Use the ls command to query for a specified file.
By default, if no file is specified, all the files are displayed.
Example
# Query for file temp.c.
[ftp] ls temp.c
3.3.15 mkdir
Syntax
mkdir pathname
View
FTP client view
Parameter
pathname: Directory name.
Description
Use the mkdir command to create a directory on the remote FTP server.
Example
# Create the directory test on the remote FTP server.
[ftp] mkdir test
3.3.16 open
Syntax
open ipaddr [ port ] [-a ip-address]
View
FTP client view
Parameter
ipaddr: IP address of the remote FTP server. port: Port number of the remote FTP server. -a ip-address: Source address of the FTP client.
Description
Use the open command to set up control connection to the remote FTP server.
Example
# Set up FTP connection to the FTP server on the host 10.110.3.1.
[ftp] open 10.110.3.1
3.3.17 passive
Syntax
passive undo passive
View
FTP client view
Parameter
None
Description
Use the passive command to set data transmission mode to passive. Use the undo passive command to set data transmission mode to active. The default transmission mode is passive.
Example
# Set data transmission mode to passive.
[ftp] passive
3.3.18 put
Syntax
put localfile [ remotefile ]
View
FTP client view
Parameter
localfile: Local file name. remotefile: File name on the remote FTP server.
Description
Use the put command to FTP a local file to the remote FTP server. If no name is assigned to the file to be saved on the FTP server, the name of the local file is used.
Example
# Upload the local file temp.c to the remote FTP server and save it as temp1.c.
[ftp] put temp.c temp1.c
3.3.19 pwd
Syntax
pwd
View
FTP client view
Parameter
None
Description
Use the pwd command to view the working directory on the remote FTP server.
Example
# Display the working directory on the remote FTP server.
[ftp] pwd "d:/temp" is current directory.
3.3.20 quit
Syntax
quit
View
FTP client view
Parameter
None
Description
Use the quit command to disconnect from the remote FTP server and exit to user view.
Example
# Disconnect from the remote FTP server and exit to user view.
[ftp] quit <3Com>
3.3.21 remotehelp
Syntax
remotehelp [ protocol-command ]
View
FTP client view
Parameter
protocol-command: FTP command.
Description
Use the remotehelp command to view the help for the FTP commands.
Example
# Display the syntax of the user command.
[ftp] remotehelp user 214 Syntax: USER <sp> <username>
3.3.22 rmdir
Syntax
rmdir pathname
View
FTP client view
Parameter
pathname: Directory name on the remote FTP server.
Description
Use the rmdir command to delete a specified directory from the FTP server.
Example
# Delete the d:/temp1 directory from the FTP server.
[ftp] rmdir d:/temp1
3.3.23 user
Syntax
user username [ password ]
View
FTP client view
Parameter
username: Login username. password: Login password.
Description
Use the user command to register an FTP user.
Example
# Log onto the FTP server with the username tom and the password bjhw.
[ftp] user tom bjhw
3.3.24 verbose
Syntax
verbose undo verbose
View
FTP client view
Parameter
None
Description
Use the verbose command to enable the verbose function to view information from the FTP server. Use the undo verbose command to disable the verbose function. By default, the verbose function is disabled.
Example
# Enable the verbose function.
[ftp] verbose
3.4 TFTP Configuration Commands

3.4.1 tftp
Syntax
tftp ip-address { get | sget | put } source-filename [ destination-filename ] [-a ip-address]
View
User view
Parameter
ip-address : IP address of the TFTP server. source-filename: Source file name. destination-filename: Target file name. get: Downloads the file without protection. In this mode, the router writes data to the Flash memory during file transfer, which is somewhat unsafe. For example, if you specify destination-filename to system, the new file rewrites the original system file at real time. The failure of this download attempt will cause an inability for a router to start. sget: Downloads the file with protection. In this mode, the router starts writing data to the Flash memory after file transfer completes. Then the original system file will not be
rewritten even when the download fails, thus ensuring higher reliability. This method however requires larger memory. put: Uploads the file. -a ip-address: Source address of the TFTP client.
Description
Use the tftp command to upload or download a file through TFTP. Related command: tftp-server acl.
Example
# Download file config.cfg from the root directory of the TFTP server at 1.1.254.2 and save it as config.bak.
<3Com> tftp 1.1.254.2 get config.cfg flash:/config.bak
# Upload file config.cfg stored under the root directory of the Flash memory onto the default directory on the TFTP server at 1.1.254.2 and save it as config.bak.
<3Com> tftp 1.1.254.2 put flash:/config.cfg config.bak
3.4.2 tftp-server acl

Syntax
tftp-server acl acl-number
View
System view
Parameter
acl-number: IP ACL number in the range 2000 to 2999.
Description
Use the tftp-server acl command to reference an ACL to control access to the TFTP server. Related command: tftp.
Example
# Reference ACL 2001 to control access to the TFTP server.
[3Com] tftp-server acl 2001
3.5 Configuration File Management Commands

3.5.1 display current-configuration
Syntax
display current-configuration [ controller | interface interface-type [ interface-number ] | configuration [ isp | luser | radius-template | system | user-interface| ] ] [ | [ begin | include | exclude ] string ]
View
Any view
Parameter
controller: Displays controller configurations. interface: Displays interface configurations. interface-type: Interface type. interface-number: Interface number. configuration: Displays the specified configurations. isp: Displays ISP configurations. luser: Displays local user configurations. radius-template: Displays radius-template configurations. system: Displays system configurations. user-interface: Displays user interface configuration. |: Uses a regular expression to filter output. begin: Displays the configurations beginning with the specified characters (string). include: Displays the configurations that include the specified characters (string). exclude: Displays the configurations that exclude the specified characters (string). string: The regular expression.
Description
Use the display current-configuration command to view the current configurations on the router. The current parameters that take the default values are not displayed. After you complete configuration tasks you can execute the display
current-configuration command to verify them. However, you may not be able to see
some parameters that you have configured, because the system displays them only after you validate their functions. Related command: save, reset saved-configuration, display saved-configuration.
Example
# Display the currently effective configuration parameters on the router.
<3Com> display current-configuration # sysname R1760 # super password level 3 simple 123456 # tcp window 8 # undo multicast igmp-all-enable # interface Aux0 link-protocol ppp # interface Ethernet0/0/0 # interface Serial0/0/0 link-protocol ppp # interface NULL0 # bgp 15535 undo synchronization # # ospf 2 router-id 1.1.1.1 # rip # user-interface con 0 set authentication password simple 123456 history-command max-size 30 user-interface aux 0 user-interface vty 0 4

# return
3.5.2 display saved-configuration

Syntax
display saved-configuration
View
Any view
Parameter
None
Description
Use the display saved-configuration command to view the saved router configurations. These configurations take effect at the next startup. Related command: save, reset saved-configuration, display current-configuration.
Example
# Display the router configuration file in the storage device.
<3Com> display saved-configuration # sysname 3Com # tcp window 8 # undo multicast igmp-all-enable # controller E1 3/0/0 # interface Aux0 link-protocol ppp # interface Ethernet0/0/0 # interface Serial0/0/0 link-protocol ppp #

interface NULL0 # user-interface con 0 user-interface aux 0 user-interface vty 0 4 # return
3.5.3 display startup

Syntax
display startup
View
User view
Parameter
None
Description
Use the display startup command to view the configuration file saved for boot.
Example
# Display the configuration file used for boot.
<3Com>display startup Startup saved-configuration file: Next startup saved-configuration file: flash:/config.cfg flash:/xhy.cfg
3.5.4 display this

Syntax
display this
View
Any view
Parameter
None
Description
Use the display this command to view the current configurations in current view.
Example
# Display the current configuration in current view.
<3Com> display this # sysname 3Com # tcp window 8 #
3.5.5 reset saved-configuration

Syntax
reset saved-configuration
View
User view
Parameter
None
Description
Use the reset saved-configuration command to erase the saved router configurations. Use this command with caution and under the guidance of technical staff. You may use this command to erase the configuration file before deploying the router in a new application environment where a new configuration is required. Related command: save, display current-configuration, display saved-configuration.
Example
# Erase the configuration file saved on the router.
<3Com> reset saved-configuration The saved configuration will be erased. Are you sure?[Y/N]y Configuration in the device is being cleared. Please wait ...

.... Configuration in the device is cleared.
3.5.6 save
Syntax
save [file-name | safely ]
View
Any view
Parameter
file-name: Filename, whose extension must be cfg. safely: Executing the command without the safely keyword is fast, but the file cannot survive a reboot or power-off during the saving process; executing this command with the safely keyword is slow, but the file can survive a reboot or power-off during the saving process.
Description
Use the save command to save the current configuration file to the storage device. After you finish and validate a set of configurations, you should save the current configuration file to the Flash memory. By default, fast saving applies. This mode is preferred in an environment where stable power supplies are available. In an environment where stable power supplies are not available or in the case of remote maintenance, however, the save safely command is preferred. Related command: reset saved-configuration, display current-configuration, display saved-configuration.
Example
# Save the current configuration file to the default storage device.
<3Com> save
3.5.7 startup saved-configuration

Syntax
startup saved-configuration filename
View
User view
Parameter
filename: Configuration file name.
Description
Use the startup saved-configuration command to specify the configuration file used at next boot. Table 3-1 shows how to name the configuration file: Table 3-1 Name the configuration file File name config.cfg config.def config.txt Description Default name for the configuration file to be saved. The name is specified by the manufacturer but you can modify the contents. Default ex-factory configuration file name; its contents are manufacturer specified. Name of the configuration file for some old 3Com devices.
The following is how configuration files are selected at boot: 1) 2) If you do not set to skip configuration file at boot, configuration files are selected in the order described in 2) and 3). Otherwise, the system boots with empty configuration. If you specify a configuration file, the system selects its boot configuration file in this order: the specified configuration file and then config.def. In case config.def does not exist, the system boots with empty configuration. 3) If you do not specify a boot configuration file, the configuration file is selected in this order: config.cfg, config.txt, and config.def. If none of them exists, the system boots with empty configuration.
Example
# Set the configuration file used at next boot to master.cfg.
<3Com> startup saved-configuration master.cfg
# Display the configuration files that the system saves for boot.
<3Com> display startup Startup saved-configuration file: Next startup saved-configuration file: flash:/config.cfg flash:/master.cfg
config.cfg is the default configuration file and master.cfg is the configuration file used at next reboot.
3.5.8 upgrade
Syntax
upgrade bootrom [ full ]
View
User view
Parameter
bootrom: Upgrades the Boot ROM. full: Upgrades the entire Boot ROM.
Description
Use the upgrade command to upgrade the Boot ROM. You may upgrade the Boot ROM on your router in service. After you execute the upgrade command, the Boot ROM file is extracted from the upgrade software package and written to the Boot ROM. When executing this command, make sure that the upgrade software package (named bootromfull) exists under the root directory in the Flash memory.
Example
# Upgrade the Boot ROM on the R1760, provided the upgrade software package is stored under the root directory on the Flash memory and the file name is bootromfull.
<3Com> upgrade bootrom full
Chapter 4 User Interface Configuration Commands

4.1.1 acl
Syntax
acl acl-number { inbound | outbound } undo acl { inbound | outbound }
View
User interface view
Parameter
acl-number: Address access control list number, in the range 2000 to 3999. inbound: Controls call-in. outbound: Controls call-out.
Description
Use the acl command to reference an ACL to control call-in and call-out of VTY (Telnet and SSH) users. Use the undo acl command to remove the ACL. By default, call-in and call-out of VTY users are not restricted.
Example
# Remove the restriction on outgoing Telnet calls.
[3Com-ui-vty0] undo acl outbound
4.1.2 authentication-mode
Syntax
authentication-mode { password | scheme [ command-authorization ] } authentication-mode none
View
User interface view
Parameter
password: Performs local password authentication. scheme: Performs authorization and authentication of AAA. command-authorization: Performs command line authorization. HWTACACS allows per-command authorization. An input command is executed only after it passes authorization. none: Performs no authentication.
Description
Use the authentication-mode command to set the authentication mode at login. Use the authentication-mode none command to set the authentication mode to none, that is, no authentication at login. By default, the authentication mode is password for TTY (asynchronous interface), VTY, and AUX user interfaces and is none for other user interfaces. Related command: set authentication password.
Example
# Enable local password authentication.
[3Com-ui0] authentication-mode password
4.1.3 auto-execute command

Syntax
auto-execute command command undo auto-execute command
View
User interface view
Parameter
command: Command to be automatically executed.
Description
Use the auto-execute command command to set a command to be automatically executed. Use the undo auto-execute command command to disable command auto-execution.
By default, command auto-execution is disabled. You should be aware of the following restrictions before using the auto-execute command command: You cannot execute the auto-execute command command on the console port. When the AUX port on your router functions as the console port, you cannot execute the auto-execute command on it. These restrictions do not apply to other types of user interfaces. When the user logs on from this interface, the system automatically executes the command configured using the auto-execute command command and disconnects the user connection after completing execution. A good example is configuring the auto-execute command telnet command to have users telnet to the specified host automatically. Take caution when using this command on a user interface. It disables you from configuring the system on the user interface.
Caution: Before configuring the auto-execute command command and saving it with the save command, make sure that means exist that allow you to access the system to remove the configuration.
Example
# Allow the system to execute the telnet 10.110.100.1 command automatically after a user logs on from the AUX interface.
[3Com-ui-aux0] auto-execute command telnet 10.110.100.1
4.1.4 databits
Syntax
databits { 5 | 6 | 7 | 8 } undo databits
View
User interface view
Parameter
5: Five data bits. 6: Six data bits. 7: Seven data bits. 8: Eight data bits.
Description
Use the databits command to set data bits on the user interface. Use the undo databits command to restore the default; eight. The configuration can take effect only when the serial interface works in asynchronous flow mode.
Example
# Set data bits to 5.
[3Com-ui-aux0] databits 5
4.1.5 debugging vty

Syntax
debugging vty { fsm | negotiate } undo debugging vty { fsm | negotiate }
View
User view
Parameter
fsm: Telnet state machine debugging. negotiate: VTY option negotiation debugging.
Description
Use the debugging vty command to enable VTY debugging. Use the undo debugging vty command to disable VTY debugging.
Example
# Enable VTY option negotiation debugging.
<3Com> debugging vty negotiate
4.1.6 display user-interface

Syntax
display user-interface [ type-name ] [ number ]
View
Any view
Parameter
type-name: User interface type. Together with a user interface index, it specifies a user interface. number: Number of a user interface. If type-name is not specified, number is an absolute index in the range 0 to 38. If type-name is specified, it is a relative index whose value depends on the user interface type.
Description
Use the display user-interface command to view detailed information about a user interface.
Example
# Display information about user interface 0.
<3Com> display user-interface 0 Idx + 0 Type CON 0 Tx/Rx 9600 Modem Privi Auth 3 N Int -
+ F Idx
: Current user-interface is active. : Current user-interface is active and work in async mode. : Absolute index of user-interface.
Type : Type and relative index of user-interface. Privi: The privilege of user-interface. Auth : The authentication mode of user-interface. Int A L N P : The physical location of UIs. : Authentication use AAA. : Authentication use local database. : Current UI need not authentication. : Authentication use current UI's password.
4.1.7 display users

Syntax
display users [ all ]
View
Any view
Parameter
all: Displays information about users of all user interfaces.
Description
Use the display users command to view the login information of the users on each user interface.
Example
# Display state about all user interface users.
<3Com> display users UI + 0 Delay CON 0 Type Ipaddress Username Userlevel 3 TEL 192.168.1.253 tb 2
00:00:00 00:00:05
130 VTY 0
You can see information on all active terminal lines. The following table describes the fields in the output. Table 4-1 Fields in the output of the display users command Field + UI Delay Type Ipaddress Username Description Indicates the terminal line in use. The first number and the second number are respectively the absolute index and relative index of the user interface. Interval since the last input, in the format of hh:mm:ss. User type, such as Telnet, SSH, and PAD Location where connection is initiated, or IP address of the call-in host. Username that the user uses to log in from this user interface. In this example, this field is void because AAA authentication is not required on this terminal line. User authority or level: 0 for visit, 1 for monitor, 2 for system, and 3 for manage.
Userlevel
# Execute the display users all command on the console.

<3Com> display users all UI + 0 CON 0 Delay 00:00:00 Type Ipaddress Username Userlevel 3
129 AUX 0 + 130 VTY 0 131 VTY 1 132 VTY 2 133 VTY 3 134 VTY 4 00:00:16 TEL 192.168.1.253 tb 2
All the terminal lines are displayed. The plus (+) signs indicate active terminal lines.
4.1.8 flow-control
Syntax
flow-control { hardware | software | none } undo flow-control
View
User interface view
Parameter
none: No flow control. software: Software flow control. hardware: Hardware flow control , only valid on the AUX port.
Description
Use the flow-control command to configure flow control mode. Use the undo flow-control command to restore the default. By default, TTY interfaces use hardware flow control. The configuration can become effective only when the serial interface works in the asynchronous flow mode. When the system is outputting, you may press <Ctrl+S> to halt outputting and <Ctrl+Q> to continue.
Example
# Configure software flow control in user interface view.
[3Com-ui-console0] flow-control software
4.1.9 free user-interface

Syntax
free user-interface [ type-name ] number
View
User view
Parameter
type-name: User interface type. number: Absolute/relative user interface index. If type-name is not specified, number is an absolute index in the range 0 to 38. If type-name is specified, it is a relative index whose value depends on the user interface type.
Description
Use the free user-interface number command to disconnect the user corresponding to the user interface specified by its absolute index. Use the free user-interface type-name number command to disconnect the user corresponding to the user interface specified by its type and relative index.
Example
# Disconnect the user corresponding to user interface 0.
<3Com> free user-interface 0
4.1.10 history-command max-size

Syntax
history-command max-size size-value undo history-command max-size
View
User interface view
Parameter
size-value: History buffer size in the range 0 to 256. It defaults to 10, that is, up to ten history commands can be stored.
Description
Use the history-command max-size command to set the size of the history command buffer. Use the undo history-command max-size command to restore the default, or 10.
Example
# Set the size of the history command buffer to 20.
[3Com-ui-console0] history-command max-size 20
4.1.11 idle-timeout
Syntax
idle-timeout minutes [ seconds ] undo idle-timeout
View
User interface view
Parameter
minutes: Number of minutes in the range 0 to 35791. seconds: Number of seconds in the range 0 to 59.
Description
Use the idle-timeout command to set the idle-timeout timer. When it expires the user connection is disconnected. Use the undo idle-timeout command to restore the default. The default idle-timeout is 10 minutes. Setting idle-timeout to zero disables the timer, and the connection is maintained regardless of whether it is idle.
Example
# Set the idle-timeout timer to 1 minute and 30 seconds.
[3Com-ui-console0] idle-timeout 1 30
4.1.12 modem
Syntax
modem [ both | call-in | call-out ] undo modem [ both | call-in | call-out ]
View
User interface view
Parameter
both: Allows both incoming and outgoing calls. call-in: Allows incoming calls. call-out: Allows outgoing calls.
Description
Use the modem or modem both command to allow incoming and outgoing modem calls to pass through. Use the modem [ call-in | call-out ] command to allow incoming or outgoing modem calls to pass through. Use the undo modem or undo modem both command to disable ingoing and outgoing modem calls from passing through. Use the undo modem [ call-in | call-out ] command to disable incoming or outgoing modem calls from passing through. By default, both incoming and outgoing modem calls are disabled to pass through. This command is only available with the AUX interface and other asynchronous interfaces (TTYs). You cannot use it on the console interface.
Example
# Set the modem call attribute on TTY 1.
[3Com-ui-tty1] modem
4.1.13 modem auto-answer

Syntax
modem auto-answer undo modem auto-answer
View
User interface view
Parameter
None
Description
Use the modem auto-answer command to set the answering mode to auto-answer. Use the undo modem auto-answer command to restore the default, or manual answer. This command applies only to the AUX interface and other TTYs. You cannot use it on the console interface. You must first set the modem parameters onto the user interface in order to allow a user interface to accept dial-up connections using modem.
Example
# Set the answering mode to auto-answer.
[3Com-ui-aux0] modem auto-answer
4.1.14 modem timer answer

Syntax
modem timer answer seconds undo modem timer answer
View
User interface view
Parameter
seconds: Timeout time in the range 1 to 60 seconds.
Description
Use the modem timer answer command to set the timeout time spent waiting for the carrier signal after the off-hook action when setting up an incoming call connection. Use the undo modem timer answer command to restore the default, or 30 seconds. This command is only available with the AUX interface and other TTYs. You cannot use it on the console interface.
Example
None
4.1.15 parity
Syntax
parity { none | even | odd | mark | space } undo parity
View
User interface view
Parameter
none: No parity check. even: Even parity check. odd: Odd parity check. mark: Mark parity check. space: Space parity check.
Description
Use the parity command to set the check bit of the user interface. Use the undo parity command to restore the default, or none. The configuration is effective only when the serial interface works in asynchronous flow mode.
Example
# Set the transmission check bit to odd on the AUX interface.
[3Com-ui-aux0] parity odd
4.1.16 protocol inbound

Syntax
protocol inbound { all | pad | ssh | telnet }
View
VTY interface view
Parameter
all: Supports all the protocols, PAD, Telnet, and SSH. pad: Supports PAD only. ssh: Supports SSH only. telnet: Supports Telnet only.
Description
Use the protocol inbound command to enable the current user interface to support Telnet, PAD, SSH, or all of them. By default, the VTY interface supports all these protocols. Note that even after you have configured the current user interface to support SSH (which has been enabled), the SSH service is unavailable if no local RSA key exists. After you configure the RSA key the configuration takes effect at next login. If SSH is configured you must set the authentication method to scheme, using the authentication-mode scheme command, to guarantee a successful login. The configuration of the authentication-mode password or authentication-mode none command fails the protocol inbound ssh command. Related command: user-interface vty.
Example
# Enable the VTYs 0 through 4 to support SSH only.
[3Com] user-interface vty 0 4 [3Com-ui-vty0-4] protocol inbound ssh
# Enable VTY 0 to support SSH only.

[3Com] user-interface vty 0 [3Com-ui-vty0] protocol inbound ssh
4.1.17 screen-length
Syntax
screen-length screen-length undo screen-length
View
User interface view
Parameter
screen-length: Number of lines displayed on the screen, in the range 0 to 512.
Description
Use the screen-length command to set the number of lines displayed on the terminal screen. Use the undo screen-length command to restore the default, or 24 lines. Setting the screen length to zero disables multiple-screen output.
Example
# Set the number of lines on the terminal screen to 30.
[3Com-ui-console0] screen-length 30
4.1.18 send
Syntax
send [ number | all | type-name number ]
View
User view
Parameter
number: Absolute/relative user interface index. all: Sends messages to all user interfaces. type-name: User interface type.
Description
Use the send command to transfer messages between user interfaces. Use the send all command to send messages to all user interfaces. Use the send number command to send messages to the user interface specified by its absolute index. Use the send type-name number command to send messages to the user interface specified by its interface type and relative index. For the user interface numbering rules, refer to the section Numbering User Interfaces in the chapter User Interface Configuration of the 3Com Router Software Configuration Guide System Management section.
Example
# Send messages to the console interface.
<3Com> send con 0 Enter message, end with CTRL+Z or Enter; abort with CTRL+C: Hello,good morning! Send message? [Y/N]
4.1.19 set authentication password

Syntax
set authentication password { simple | cipher } password undo set authentication password
View
User interface view
Parameter
simple: Plain text password. cipher: Encrypted password. password: If the password format is set to simple, the password argument must be in plain text. If it is set to cipher, password can be either in ciphertext or in plain text depending on what has been input. A plain text password can be a string of no more than 16 consecutive characters, 1234567 for example. An encrypted password, however, must comprise of 24 characters and must be in ciphertext, for example _(TT8F]Y\5SQ=^Q`MAF4<1!!.
Description
Use the set authentication password command to set a local authentication password. Use the undo set authentication password command to remove the local authentication password. Regardless of whether the password format is set to plain text or ciphertext, a user must input a plain text password at authentication time. When configuring a password, you must specify its format either to simple or to cipher to save it in plain text or ciphertext. In the latter case, the password is displayed in ciphertext regardless of whether the password you entered is in plain text or in ciphertext. By default, Telnet users must provide passwords at login, that is, the authentication-mode password command applies. If no password is configured, the following information appears:

Login password has not been set !
Related command: authentication-mode.
Example
# Set the local authentication password for the user interfaces VTYs 0 through 4 to 3Com.
[3Com-ui-vty0-4] authentication-mode password [3Com-ui-vty0-4] set authentication password simple 3Com
4.1.20 shell
Syntax
shell undo shell
View
User interface view
Parameter
None
Description
Use the shell command to enable terminal services on the user interface. Use the undo shell command to cancel the current setting. If you want to enable telnet redirect, you must configure this command. By default, terminal services are enabled on all user interfaces. The following are the restrictions on the use of the undo shell command: You cannot execute the command on the console port. You cannot execute the command when the AUX port on your router functions as the console port. These restrictions do not apply to other types of user interfaces.
Example
# Disable terminal services on the VTYs 0 through 4.
[3Com] user-interface vty 0 4 [3Com-ui-vty0-4] undo shell
# The following information appears when a Telnet terminal logs in:
The connection was closed by the remote host!
4.1.21 speed
Syntax
speed speed-value undo speed
View
User interface view
Parameter
speed-value: Transmission rate in bps.
Description
Use the speed command to set the transmission rate on the user interface. Use the undo speed command to restore the default, or 9600 bps. Only when the serial interface works in asynchronous flow mode will the configuration be effective. The transmission rates available with asynchronous serial interfaces include: 300 bps 600 bps 1200 bps 2400 bps 4800 bps 9600 bps 19200 bps 38400 bps 57600 bps 115200 bps
Example
# Set the transmission rate on the user interface to 19200 bps.
[3Com-ui-aux0] speed 19200
4.1.22 stopbits
Syntax
stopbits { 1.5 | 1 | 2 } undo stopbits
View
User interface view
Parameter
1.5: 1.5 stop bits. 1: 1 stop bit. 2: 2 stop bits.
Description
Use the stopbits command to set the stop bits on the user interface. Use the undo stopbits command to restore the default, or 1 stop bit. Only when the serial interface works in asynchronous flow mode will the configuration be effective.
Example
# Use 1.5 stop bits on the user interface.
[3Com-ui-vty0] stopbits 1.5
4.1.23 user privilege

Syntax
user privilege level level undo user privilege level
View
User interface view
Parameter
level: Command level in the range 0 to 3.
Description
Use the user privilege command to configure the command level that the login users on the current user interface can access. Use the undo user privilege command to cancel the current setting. By default, the default command level is three for the console user interface and zero for other user interfaces. When a user logs onto the router from a user interface, the command level that the user can access depends on two points. One is the command level that the user itself can access, the other is the command level assigned to this user interface. If the two levels are different, the former is taken. For example, the command level of the VTY 0 user interface is two; however, user 007 has the right to access command level 3. If 007 logs in from VTY 0 user interface, he can access commands at level 3 and lower.
Example
# Set the command level that the users logging in from VTY 0 to two.
[3Com-ui-vty0] user privilege level 2
# After the user telnets to the router from VTY 0, the terminal displays:
<3Com>
4.1.24 user-interface
Syntax
user-interface [ type-keyword ] number [ ending-number ]
View
System view
Parameter
type-keyword: User interface type. number: The first user interface to be configured. ending-number: The last user interface to be configured.
Description
Use the user-interface command to enter single-user interface view or multi-user interface view.
You can specify a user interface view by its relative index or absolute index. In the former case, you also need to specify the type of the user interface whereas in the latter case you do not need to do so. For more information on the numbering rules, refer to the section Numbering User Interfaces in the chapter User Interface Configuration of the 3Com Router Software Configuration Guide System Management section.
Example
# Enter the view of the console 0 user interface.
[3Com] user-interface console 0 [3Com-ui-console0]
# Enter the view of the VTY 0 user interface.

[3Com] user-interface vty 0 [3Com-ui-vty0]
# Enter the view of the user interfaces VTY 0 through VTY 3.

[3Com] user-interface vty 0 3 [3Com-ui-vty0-3]
# Enter user interface view to configure user interfaces 0 through 3. The types of the interfaces include console, AUX and VTY. The actual user interface types however depend on the interfaces provided by the router. If the router does not provide the AUX port, this example configures one console user interface and three VTY user interfaces.
[3Com] user-interface 0 3 [3Com-ui0-3]
Chapter 5 NTP Configuration Commands

5.1.1 debugging ntp-service
Syntax
debugging ntp-service { access | adjustment | authentication | event | filter | packet | parameter | refclock | selection | synchronization | validity | all } undo debugging ntp-service { access | adjustment | authentication | event | filter | packet | parameter | refclock | selection | synchronization | validity | all }
View
User view
Parameter
access: NTP access control debugging. adjustment: NTP clock adjustment debugging. all: All NTP debugging. authentication: NTP authentication debugging. event: NTP event debugging. filter: NTP filter information debugging. packet: NTP packet debugging. parameter: NTP clock parameter debugging. refclock: NTP reference clock debugging. selection: NTP clock selection debugging. synchronization: NTP clock synchronization debugging. validity: Validity debugging of NTP remote hosts.
Description
Use the debugging ntp-service command to enable NTP service debugging. Use the undo debugging ntp-service command to disable NTP service debugging. By default, all debugging is disabled.
Example
# Enable NTP access control debugging.
<3Com> debugging ntp-service access
5.1.2 display ntp-service sessions

Syntax
display ntp-service sessions [ verbose ]
View
Any view
Parameter
verbose: Displays session details.
Description
Use the display ntp-service sessions command to view brief information about all sessions maintained by the NTP at the local device. Use the display ntp-service sessions verbose command to view details about all sessions maintained by the NTP at the local device. By default, the status of all sessions maintained by NTP at the local device is displayed.
Example
# Display brief information about all sessions maintained by NTP at the local device.
<3Com> display ntp-service sessions source reference stra reach poll now offset delay disper
******************************************************************** [5]1.1.1.1 0.0.0.0 16 0 64 0.0 0.0 0.0
note: 1 source(master),2 source(peer),3 selected,4 candidate,5 configured
5.1.3 display ntp-service status

Syntax
display ntp-service status
View
Any view
Parameter
None
Description
Use the display ntp-service status command to view status about the NTP service.
Example
<3Com> display ntp-service status clock status: unsynchronized clock stratum: 16 reference clock ID: none nominal frequency: 100.0000 Hz actual frequency: 100.0000 Hz clock precision: 2^18 clock offset: 0.0000 ms root delay: 0.00 ms root dispersion: 0.00 ms peer dispersion: 0.00 ms reference time: 00:00:00.000 UTC Jan 1 1900(00000000.00000000)
The following table describes the output fields. Table 5-1 Status about the NTP service Field synchronized unsynchronized stratum reference nominal freq actual freq precision reference time offset Description Indicates that the local system is synchronized to a remote NTP server or a clock source Indicates that the local system is not synchronized to any remote NTP server. The NTP stratum of the local system. If the local system is synchronized to a remote NTP server or a clock source, it indicates the address of the remote server or clock source ID. Nominal frequency of the hardware clock in the local system. Actual frequency of the hardware clock in the local system. Precision of the local system clock Reference timestamp Offset of the NTP server relative to the local clock
root delay root dispersion peer dispersion
Total roundtrip delay to the master reference clock Dispersion relative to the master reference clock Dispersion relative to the remote NTP server
5.1.4 display ntp-service trace

Syntax
display ntp-service trace
View
Any view
Parameter
None
Description
Use the display ntp-service trace command to view a summary about each NTP time server from the local device back to the reference clock source. This command draws a picture of the NTP servers on the time synchronization path from the local device to the reference clock source.
Example
<3Com> display ntp-service trace server4: stratum 4, offset 0.0019529, synch distance 0.144135 server3: stratum 3, offset 0.0124263, synch distance 0.115784 server2: stratum 2, offset 0.0019298, synch distance 0.011993 server1: stratum 1, offset 0.0019298, synch distance 0.011993 refid 'GPS Reciever'
The output displays the synchronization path from server 4 to its reference clock source, where server 4 synchronizes to server 3, server 3 to server 2, server 2 to server 1, and server 1 to the reference clock source GPS Receiver.
5.1.5 ntp-service access

Syntax
ntp-service access { query | synchronization | server | peer } acl-number undo ntp-service access { query | synchronization | server | peer }
View
System view
Parameter
query: Query right. synchronization: access to the server is permitted. server: Both access to the server and query are allowed. peer: Full access right. acl-number: IP ACL number in the range 2000 to 2999.
Description
Use the ntp-service access command to control access to the NTP service on the local device. Use the undo ntp-service access command to cancel the limit on the access right. By default, no access right is configured. You can control access to the NTP service on the local device with this command. Each time the system receives a request, it compares the request against the access control restrictions from least to maximum: peer, server, synchronization, query. For more security you need to configure identification authentication.
Example
# Enable the peer in ACL 76 to perform time request, query control and time synchronization on the local device.
[3Com] ntp-service access peer 76
# Enable the peer in ACL 28 to perform time request, query control on the local device.
[3Com] ntp-service access server 28
5.1.6 ntp-service authentication enable

Syntax
ntp-service authentication enable undo ntp-service authentication enable
View
System view
Parameter
None
Description
Use the ntp-service authentication enable command to enable NTP service ID authentication. Use the undo ntp-service authentication enable command to disable NTP service ID authentication. By default, ID authentication is disabled.
Example
# Enable NTP service ID authentication.
[3Com] ntp-service authentication enable
5.1.7 ntp-service authentication-keyid

Syntax
ntp-service authentication-keyid number authentication-mode md5 value undo ntp-service authentication-keyid number
View
System view
Parameter
number: Key ID in the range 1 to 4294967295. value: The key, which comprises 1 to 32 ASCII characters.
Description
Use the ntp-service authentication-keyid command to set an NTP authentication key. Use the undo ntp-service authentication-keyid command to cancel the NTP authentication key. By default, no authentication key is configured. This command only supports MD5 authentication.
Example
# Set MD5 ID authentication key: the key ID number is 10 and the key is BetterKey.
[3Com] ntp-service authentication-keyid 10 authentication-mode md5 BetterKey
5.1.8 ntp-service broadcast-client

Syntax
ntp-service broadcast-client undo ntp-service broadcast-client
View
Interface view
Parameter
None
Description
Use the ntp-service broadcast-client command to configure NTP broadcast client mode. Use the undo ntp-service broadcast-client command to cancel NTP broadcast client mode. By default, NTP broadcast client service is not configured. This command specifies the interface to receive NTP broadcast packets. Operating in broadcast client mode, the device listens to broadcast packets from the server. When receiving the first broadcast packet, it first enters a transient client/server model to exchange messages with the remote server in order to estimate network delay. Then it enters client mode to listen to the broadcast packets, and synchronizes the local clock according to the received broadcast packets.
Example
# Enable the interface Ethernet 1/0/1 to receive NTP broadcast packets.
[3Com] interface ethernet 1/0/1 [3Com-Ethernet1/0/1] ntp-service broadcast-client
5.1.9 ntp-service broadcast-server

Syntax
ntp-service broadcast-server [ authentication-keyid keyid | version number ] * undo ntp-service broadcast-server
View
Interface view
Parameter
authentication-keyid: Specifies an ID authentication key. keyid: Key ID number used when transmitting messages to broadcast clients. It is in the range 1 to 4294967295. version: Specifies an NTP version. number: NTP version in the range 1 to 3.
Description
Use the ntp-service broadcast-server command to configure NTP broadcast server mode. Use the undo ntp-service broadcast-server command to cancel NTP broadcast server mode. By default, broadcast service is not configured and NTP version 3 is used. This command specifies the interface to transmit NTP broadcast packets. In broadcast server mode the local device operates as a broadcast server to transmit broadcast messages periodically to the broadcast clients.
Example
# Specify Ethernet 1/0/0 to transmit NTP broadcast packets, use the key numbered four for encryption, and set NTP version number to three.
[3Com] interface ethernet 1/0/0 [3Com-Ethernet1/0/0] ntp-service broadcast-server authentication-key 4 version 3
5.1.10 ntp-service max-dynamic-sessions

Syntax
ntp-service max-dynamic-sessions number undo ntp-service max-dynamic-sessions
View
System view
Parameter
number: Number of sessions allowed to be established locally. It is in the range 0 to 100.
Description
Use the ntp-service max-dynamic-sessions command to set the number of sessions allowed by the local device. Use the undo ntp-service max-dynamic-sessions command to restore the default, or 100.
Example
# Set the number of sessions allowed by the local device to 50.
[3Com] ntp-service max-dynamic-sessions 50
5.1.11 ntp-service multicast-client

Syntax
ntp-service multicast-client [ X.X.X.X ] undo ntp-service multicast-client [ X.X.X.X ]
View
Interface view
Parameter
X.X.X.X: Multicast IP address, or a class D address.
Description
Use the ntp-service multicast-client command to configure NTP multicast client mode. Use the undo ntp-service multicast-client command to cancel NTP multicast client mode. By default, multicast client service is not configured and X.X.X.X is 224.0.1.1. This command specifies the interface to receive NTP multicast packets. Operating in multicast client mode the local device listens to multicast packets from the server. When receiving the first multicast packet, the local device first enters a transient client/server model to exchange messages with the remote server in order to estimate network delay. Then it enters multicast client mode to listen to the multicast packets and synchronize the local clock according to the incoming multicast packets.
Example
# Configure Ethernet 1/0/0 to receive NTP multicast packets. The multicast address corresponding to the multicast packets is 224.0.1.1.
[3Com] interface ethernet 1/0/0 [3Com-Ethernet1/0/0] ntp-service multicast-client 224.0.1.1
5.1.12 ntp-service multicast-server

Syntax
ntp-service multicast-server [ X.X.X.X ] [ authentication-keyid keyid | ttl ttl-number | version number ] * undo ntp-service multicast-server [ X.X.X.X ]
View
Interface view
Parameter
X.X.X.X: Multicast IP address, a class D address. The default address is 224.0.1.1. authentication-keyid: Specifies the ID authentication key. keyid: Key ID used when transmitting messages to the multicast clients. It is in the range 1 to 4294967295. ttl: Lifetime of multicast packets. ttl-number: Lifetime of multicast packets, in the range 1 to 255. version: Specifies an NTP version. number: NTP version number in the range 1 to 3.
Description
Use the ntp-service multicast-server command to configure NTP multicast server mode. Use the undo ntp-service multicast-server command to cancel NTP multicast server mode. By default, multicast service is not configured, the IP address is 224.0.1.1, and NTP version 3 is used. This command specifies the interface to transmit NTP multicast packets. In multicast server mode the local device operates as a multicast server to transmit multicast messages periodically to the multicast clients.
Example
# Configure Ethernet 1/0/0 to transmit NTP multicast messages. Set the multicast address to 224.0.1.1, encryption key ID to four and NTP version to three.
[3Com] interface ethernet 1/0/0 [3Com-Ethernet1/0/0] ntp-service multicast-server 224.0.1.1
authentication-keyid 4 version 3
5.1.13 ntp-service refclock-master

Syntax
ntp-service refclock-master [ X.X.X.X ] [ layers-number ] undo ntp-service refclock-master [ X.X.X.X ]
View
System view
Parameter
X.X.X.X: IP address of the reference clock 127.127.t.u. layers-number: Specifies the stratum of the local clock. It is in the range 1 to 15.
Description
Use the ntp-service refclock-master command to set the external reference clock or the local clock to be the NTP master clock. Use the undo ntp-service refclock-master command to remove the setting of the NTP master clock. By default, the X.X.X.X is not specified and layers-number is eight. This command sets the external reference clock or the local clock to be the NTP master clock to provide synchronization source. The X.X.X.X is the IP address of the reference clock, 127.127.t.u. When no IP address is specified, the local clock is the NTP master clock by default. In addition, you can use this command to specify the stratum of the NTP master clock.
Example
# Use the local device as the NTP master clock to provide synchronization source for other peers. Set layers-number to three.
[3Com] ntp-service refclock-master 3
5.1.14 ntp-service reliable authentication-keyid

Syntax
ntp-service reliable authentication-keyid number undo ntp-service reliable authentication-keyid number
View
System view
Parameter
number: Key ID in the range 1 to 4294967295.
Description
Use the ntp-service reliable authentication-keyid command to specify a reliable key. Use the undo ntp-service reliable authentication-keyid command to cancel the setting. By default, no reliable authentication key is set. When ID authentication is enabled you can use this command to specify that one or more keys are reliable. The client only synchronizes to the server that provides a reliable key.
Example
# Enable ID authentication of NTP. Adopt MD5 encryption, and specify the key ID to 37 and the key to BetterKey. Specify the key to be reliable.
[3Com] ntp-service authentication enable [3Com] ntp-service authentication-keyid 37 authentication-mode md5 BetterKey [3Com] ntp-service reliable authentication-keyid 37
5.1.15 ntp-service source-interface

Syntax
ntp-service source-interface interface-type interface-number undo ntp-service source-interface
View
System view
Parameter
interface-type: Specifies an interface along with interface-number.
interface-number: Specifies an interface along with interface-type.
Description
Use the ntp-service source-interface command to specify an interface for the local end to transmit NTP messages. Use the undo ntp-service source-interface command to cancel the setting. Normally, the source IP address of a NTP message is the address of its output interface. However, you may use this command to specify the source IP address for all the NTP messages to be transmitted. As a result, the replies to these messages use that address as their destination address.
Example
# Use the IP address of interface Ethernet 1/0/0 as the source address of all the NTP messages to be transmitted.
[3Com] ntp-service source-interface ethernet 1/0/0
5.1.16 ntp-service unicast-peer

Syntax
ntp-service unicast-peer [ vpn-instance vpn-instance-name ] {X.X.X.X | server-name } [ version number | authentication-key keyid | source-interface interface-type interface-number | priority ] * undo ntp-service unicast-peer [ vpn-instance vpn-instance-name ] { X.X.X.X | server-name }
View
System view
Parameter
vpn-instance vpn-instance-name: Specifies a VPN instance, through which the router can synchronize to the remote server and vice versa. X.X.X.X: IP address of the remote server. server-name: Remote server name. version: NTP version number. number: NTP version number in the range 1 to 3. authentication-keyid: Specifies an ID authentication key.
keyid: Key ID in the range 1 to 4294967295. It is used when transmitting messages to the remote server. source-interface: Specifies an interface. interface-type: Specifies an interface along with interface-number. interface-number: Specifies an interface along with interface-type. The IP address of this interface is the source address in the NTP messages to be transmitted. priority: Specifies the server as the one always preferred.
Description
Use the ntp-service unicast-peer command to configure NTP peer mode. Use the undo ntp-service unicast-peer command to cancel the setting. By default, NTP version 3 is used, ID authentication is not configured, and the server is not preferred. This command sets the remote server specified by X.X.X.X as the peer of the local device while the local device is operating in symmetric active mode. X.X.X.X is a host address and cannot be the address of the broadcast, multicast, or reference clock. In this configuration, the local device and the remote server can synchronize to each other.
Example
# Allow the local device and its peer at 128.108.22.44 to synchronize to each other. Specify NTP version to three and use the IP address of Ethernet 1/0/0 as the source IP address of the NTP messages.
[3Com] ntp-service unicast-peer 128.108.22.44 version 3 source-interface ethernet 1/0/0
5.1.17 ntp-service unicast-server

Syntax
ntp-service unicast-server [ vpn-instance vpn-instance-name ] {X.X.X.X | server-name } [ version number | authentication-keyid keyid | source-interface interface-type interface-number | priority ] * undo ntp-service unicast-server [X.X.X.X | server-name ]
View
System view
Parameter
vpn-instance vpn-instance-name: Specifies a VPN instance, through which the local device can synchronize to the remote server, but not vice versa. X.X.X.X: IP address of the remote server. server-name: Remote server name. version: NTP version number. number: NTP version number in the range of 1 to 3. authentication-keyid: Specifies an ID authentication key. keyid: Key ID in the range 1 to 4294967295. It is used when transmitting messages to the remote server. source-interface: Specifies an interface. interface-type: Specifies an interface along with interface-number. interface-number: Specifies an interface along with interface-type. The IP address of this interface is the source address in the NTP messages to be transmitted. priority: Specifies the server as the preferred one.
Description
Use the ntp-service unicast-server command to configure NTP server mode. Use the undo ntp-service unicast-server command to cancel the setting. By default, NTP version 3 is used, ID authentication is not configured and the server is not the preferred one. This command sets the remote server specified by X.X.X.X or server-name as the local time server. The X.X.X.X is a host address and cannot be the IP address of the broadcast, multicast, or reference clock. In this configuration, the local device can synchronize to the remote server, but not vice versa.
Example
# Configure the local device to synchronize to the server at 128.108.22.44. NTP version 3 is used.
[3Com] ntp-service unicast-server 128.108.22.44 version 3
Chapter 6 SNMP Configuration Commands

6.1.1 debugging snmp-agent
Syntax
debugging snmp-agent { header | packet | process | trap } undo debugging snmp-agent { header | packet | process | trap }
View
User view
Parameter
header: Enables header debugging. packet: Enables packet debugging. process: Enables process debugging. trap: Enables trap debugging.
Description
Use the debugging snmp-agent command to enable SNMP agent debugging and specify the information to be output. Use the undo debugging snmp-agent command to disable SNMP agent debugging. By default, SNMP agent debugging is disabled.
Example
# Enable header debugging of the SNMP agent.
<3Com> debugging snmp-agent header
6.1.2 display snmp-agent

Syntax
display snmp-agent { local-engineid | remote-engineid }
View
Any view
Parameter
local-engineid: Engine ID of the local SNMP entity. remote-engineid: Engine ID of the remote SNMP entity.
Description
Use the display snmp-agent command to view the engine ID of the local or remote SNMP entity. Within an administrative domain, each SNMP engine ID uniquely identifies a SNMP engine, and thus the associated SNMP entity. SNMP engines are an indispensable part of SNMP entities, completing functions such as message dispatching, processing, authentication, and access control.
Example
# Display the engine ID of the local device.
<3Com> display snmp-agent local-engineid SNMP local EngineID: 000007DB7F0000013859
6.1.3 display snmp-agent community

Syntax
display snmp-agent community [ read | write ]
View
Any view
Parameter
read: Displays information on the read-only community. write: Displays information on the read-write community.
Description
Use the display snmp-agent community command to view information on the configured communities of SNMPv1 or SNMPv2.
Example
# Display information on the configured communities.
<3Com> display snmp-agent community Community name:8040zlz

Group name:8040zlz Storage-type: nonVolatile
Community name:8040core Group name:8040core Storage-type: nonVolatile
6.1.4 display snmp-agent group

Syntax
display snmp-agent group [ group-name ]
View
Any view
Parameter
group-name: Specifies the group name of the SNMP information to be displayed in the range 1 to 32 bytes.
Description
Use the display snmp-agent group command to view information about the specified, or all user security model (USM) based groups, including group name, security model, and storage type.
Example
# Display SNMP groups and their security model.
<3Com> display snmp-agent group Group name: v3r2 Security model: v3 noAuthnoPriv Readview: ViewDefault Writeview: <no specified> Notifyview :<no specified> Storage-type: nonVolatile
The following table describes the output fields: Table 6-1 Fields in the output of the display snmp-agent group command Field Groupname Description SNMP group name corresponding to the user
Readview Writeview Notifyview Storage-type
Name of the read-only MIB view corresponding to the group Name of the write MIB view corresponding to the group Name of the notify MIB view corresponding to the group Storage type
6.1.5 display snmp-agent mib-view

Syntax
display snmp-agent mib-view [ exclude | include | viewname view-name ]
View
Any view
Parameter
exclude: Excludes the SNMP MIB view attributes displayed and set. include: Includes the SNMP MIB view attributes displayed and set. viewname: Specifies the name of the view to be displayed.
Description
Use the display snmp-agent mib-view command to view the configured MIB views.
Example
# Display the configured MIB views.
<3Com> display snmp-agent mib-view View name:ViewDefault MIB Subtree:internet Subtree mask: Storage-type: nonVolatile View Type:included View status:active
View name:ViewDefault MIB Subtree:snmpUsmMIB Subtree mask: Storage-type: nonVolatile View Type:excluded

View status:active
View name:ViewDefault MIB Subtree:snmpVacmMIB Subtree mask: Storage-type: nonVolatile View Type:excluded View status:active
View name:ViewDefault MIB Subtree:snmpModules.18 Subtree mask: Storage-type: nonVolatile View Type:excluded View status:active
The following table describes the output fields. Table 6-2 Fields in the output of the display snmp-agent mib-view command Field View name MIB Subtree Storage-type ViewType: Included/excluded Active View name MIB subtree Storage type Indicates that the access to a MIB object is allowed or prohibited. Indicates the state of lines in the table. Description
6.1.6 display snmp-agent statistics

Syntax
display snmp-agent statistics
View
Any view
Parameter
None
Description
Use the display snmp-agent statistics command to view the state and statistics of SNMP.
Example
# Check the statistics about SNMP communication.
<3Com> display snmp-agent statistics 0 Messages delivered to the SNMP entity 0 Messages which were for an unsupported version 0 Messages which used a SNMP community name not known 0 Messages which represented an illegal operation for the community supplied 0 ASN.1 or BER errors in the process of decoding 0 Messages passed from the SNMP entity 0 SNMP PDUs which had badValue error-status 0 SNMP PDUs which had genErr error-status 0 SNMP PDUs which had noSuchName error-status 0 SNMP PDUs which had tooBig error-status (Maximum packet size 500) 0 MIB objects retrieved successfully 0 MIB objects altered successfully 0 GetRequest-PDU accepted and processed 0 GetNextRequest-PDU accepted and processed 0 GetBulkRequest-PDU accepted and processed 0 GetResponse-PDU accepted and processed 0 SetRequest-PDU accepted and processed 0 Trap PDUs accepted and processed
6.1.7 display snmp-agent sys-info

Syntax
display snmp-agent sys-info [ contact | location | version ]*
View
Any view
Parameter
contact: Displays the contact information of this node. location: Displays the physical location information of this node. version: Displays the SNMP version running in this agent.
Description
Use the display snmp-agent sys-info command to view the system information of this SNMP device.
Example
# Display the system information.
<3Com> display snmp-agent sys-info The contact person for this managed node: 3Com Marlborough, MA
The physical location of this node: Marlborough, MA
SNMP version running in the system: SNMPv3
6.1.8 display snmp-agent usm-user

Syntax
display snmp-agent usm-user [ engineid engineid | username user-name | group group-name ] *
View
Any view
Parameter
engineid: Displays information about the SNMPv3 users with the specified engine ID. engineid-string: Character string of the engine ID. username: Displays information about the specified SNMPv3 user. user-name: User name, in the range 1 to 32 bytes. group: Displays information about the users in the specified SNMP group. group-name: Group name, in the range 1 to 32 bytes.
Description
Use the display snmp-agent usm-user command to view information about a specified SNMP user, or all SNMP users. SNMP users are users that remotely execute SNMP management operation.
Example
# Display information about all current users.
<3Com> display snmp-agent usm-user User name: authuser Engine ID: 8000007DB20000000C025808 active
The following table describes the output fields. Table 6-3 Fields in the output of the display snmp-agent usm-user command Field User name Engine ID Active Description The character string identifies the SNMP user. The character string identifies the SNMP device. Indicates the state of the SNMP user.
6.1.9 snmp-agent
Syntax
snmp-agent undo snmp-agent
View
System view
Parameter
None
Description
Use the snmp-agent command to enable SNMP agent. Use the undo snmp-agent command to disable SNMP agent. By default, SNMP agent is disabled. Note that you can enable SNMP agent with any snmp-agent command except their undo commands. When SNMP agent is disabled configuring the undo form of any SNMP agent command is useless.
Example
# Disable the operating SNMP agent.

[3Com] undo snmp-agent
6.1.10 snmp-agent community

Syntax
snmp-agent community { read | write } community-name [ [ mib-view view-name ] | [ acl acl-number ] ]* undo snmp-agent community community-name
View
System view
Parameter
read: Indicates that the community name has read-only access to the specified view. write: Indicates that the community name has read-write access to the specified view. community-name: Community string. mib-view: MIB view that the specified community can access. view-name: Specifies a MIB view. acl: Applies an ACL to the community name. acl-number: Number of the ACL, in the range 2000 to 2999.
Description
Use the snmp-agent community command to configure the read/write attribute of a community, the MIB view that it can access, and the ACL applied to it. A new configuration will overwrite an old configuration in the community. Use the undo snmp-agent community command to cancel the setting. Related command: snmp-agent group, snmp-agent usm-user.
Example
# Set the community name to comaccess and grant it read-only access.
[3Com] snmp-agent community read comaccess
# Set the community name to mgr and grant it read-write access.

[3Com] snmp-agent community write mgr
# Delete the community name comaccess.

[3Com] undo snmp-agent community comaccess
6.1.11 snmp-agent group

Syntax
snmp-agent group { v1 | v2c } group-name { [ read read-view ] | [ write write-view ] | [ notify notify-view ] } [ acl acl-number ] snmp-agent group { v1 | v2c } group-name acl acl-number undo snmp-agent group { v1 | v2c } group-name snmp-agent group v3 group-name [ authentication | privacy ] { [ read read-view ] | [ write write-view ] | [ notify notify-view ] } [ acl acl-number ] snmp-agent group v3 group-name acl acl-number undo snmp-agent group v3 group-name [ authentication | privacy ]
View
System view
Parameter
v1: V1 security model. v2c: V2c security model. v3: V3 security model. group-name: Group name in the range 1 to 32 bytes. authentication: Authenticates the packets without encryption. privacy: Both authenticates and encrypts the packets. read: Specifies a read-only view. read-view: Name of the read-only view, in the range 1 to 32 bytes. write: Specifies a read-write view. write-view: Name of the read-write view, in the range 1 to 32 bytes. notify: Specifies a notify view. notify-view: Name of the notify view, in the range 1 to 32 bytes. acl: Specifies an ACL for the SNMP group. acl-number: Standard ACL in the range 2000 to 2999.
Description
Use the snmp-agent group command to configure a new SNMP group, or to map a SNMP user or group to a SNMP view.
Use the undo snmp-agent group command to delete a specified SNMP group. By default, the snmp-agent group group-name v3 command does not provide authentication or encryption. By default, if no view is specified the snmp-agent group v3 command considers ViewDefault view as read-only. The rights of other views need configuration. The snmp-agent group { v1 | v2c } command configures the SNMP community attribute. Its default is the same as the snmp-agent group v3 command. Related command: snmp-agent mib-view, snmp-agent usm-user.
Example
# Create the SNMPv3 group named Johngroup.
[3Com] snmp-agent group v3 Johngroup
6.1.12 snmp-agent local-engineid

Syntax
snmp-agent local-engineid engineid undo snmp-agent local-engineid
View
System view
Parameter
engineid: Engine ID string, comprising 10 to 64 hexadecimal numbers.
Description
Use the snmp-agent local-engineid command to configure an engine ID for the local SNMP entity. Use the undo snmp-agent local-engineid command to remove the current setting. The default engine ID is the enterprise number plus equipment information. Equipment information can be an IP address, MAC address, or a hexadecimal number string defined using this command. Related command: snmp-agent usm-user.
Example
# Set the name of the local equipment to 123456789A.
[3Com] snmp-agent local-engineid 123456789A
6.1.13 snmp-agent mib-view

Syntax
snmp-agent mib-view { included | excluded } view-name oid-tree undo snmp-agent mib-view view-name
View
System view
Parameter
view-name: Name of the view. oid-tree: OID MIB subtree for the MIB object subtree. It can be a character string of the variable OID or a character string of variable name, for example, 1.4.5.3.1, system, or 1.4.5.*.*.1. included: Includes the MIB subtree. excluded: Excludes the MIB subtree.
Description
Use the snmp-agent mib-view command to create or update the information of a view. Use the undo snmp-agent mib-view command to delete the view information. By default, the view name is ViewDefault and the OID is 1.3.6.1. This command accepts both variable OID strings and node names. Related command: snmp-agent group.
Example
# Create a view that includes all MIB-II objects.
[3Com] snmp-agent mib-view included mib2 1.3.6.1
6.1.14 snmp-agent packet max-size

Syntax
snmp-agent packet max-size byte-count undo snmp-agent packet max-size
View
System view
Parameter
byte-count: Maximum length of the SNMP packets that the agent can receive/send, in the range 484 to 17940 bytes. The default value is 1500 bytes.
Description
Use the snmp-agent packet max-size command to set the maximum length of the SNMP packets that the agent can receive/send. Use the undo snmp-agent packet max-size command to cancel the current setting.
Example
# Set the maximum length of SNMP packets that the agent can receive/send to 1042 bytes.
[3Com] snmp-agent packet max-size 1042
6.1.15 snmp-agent sys-info

Syntax
snmp-agent sys-info { contact sysContact | location sysLocation | version { { v1 | v2c | v3 } * | all } } undo snmp-agent sys-info { contact | location | version { { v1 | v2c | v3 } * | all } }
View
System view
Parameter
contact: Sets the system contact. sysContact: System contact string. location: Sets the physical location of the node. sysLocation: Physical location of the node. version: Sets the SNMP version. v1: SNMPv1. v2c: SNMPv2c. v3: SNMPv3. *: Indicates to select from the three options of v1, v2c, and v3, at least one and at most all. all: SNMPv1, SNMPv2c and SNMPv3.
Description
Use the snmp-agent sys-info command to set system information, including system contact, physical location of the node, and SNMP version. Use the undo snmp-agent sys-info command to cancel the current setting. By default, the system contact is Marlborough, 3Com Corporation, system location is Marlborough, MA and the version is SNMPv3. Related command: display snmp-agent sys-info.
Example
# Set the system contact to call Operator at 010-82882488.
[3Com] snmp-agent sys-info contact call Operator at 010-82882488
6.1.16 snmp-agent target-host

Syntax
snmp-agent target-host trap address udp-domain X.X.X.X [ udp-port port-number ] params securityname security-string [ v1 | v2c | v3 { authentication | privacy } ] undo snmp-agent target-host X.X.X.X securityname security-string
View
System view
Parameter
trap: Specifies a host as the trap host. address: Specifies the target host address in the SNMP messages to be transmitted. udp-domain: Specifies that the transport domain of the target host is UDP based. X.X.X.X: IP address of the host. udp-port: Specifies the UDP port. port-number: Specifies the port that receives traps. params: Specifies the log host that generates SNMP messages. securityname: Specifies a SNMPv1 or SNMPv2c community name or a SNMPv3 user name. security-string: SNMPv1 or SNMPv2c community name, or SNMPv3 user name, in the range 1 to 32 bytes. v1: SNMPv1.
v2c: SNMPv2c. v3: SNMPv3. authentication: Authenticates packets without encryption. privacy: Both authenticates and encrypts packets.
Description
Use the snmp-agent target-host command to set the destination that receives SNMP notifications. Use the undo snmp-agent target-host command to cancel the current setting. Use the snmp-agent target-host command in conjunction with the snmp-agent trap enable command. The snmp-agent trap enable command enables a device to send traps. To have a host send notices, you need to configure the snmp-agent target-host command on it. Related command: snmp-agent trap enable, snmp-agent trap source, snmp-agent trap life.
Example
# Allow the router to send SNMP traps to 10.1.1.1, using the community name of comaccess.
[3Com] snmp-agent trap enable standard [3Com] snmp-agent target-host trap address udp-domain 10.1.1.1 params
securityname comaccess
# Send SNMP traps to 10.1.1.1, using the community name of public.

[3Com] snmp-agent trap enable standard [3Com] snmp-agent target-host trap address udp-domain 10.1.1.1 params
securityname public
6.1.17 snmp-agent trap enable

Syntax
snmp-agent trap enable [ trap-type [ trap-list ] ] undo snmp-agent trap enable [ trap-type [ trap-list ] ]
View
System view
Parameter
trap-type: Specifies the trap type, or the module where traps are sent. trap-list: Parameter list corresponding to the trap type.
Description
Use the snmp-agent trap enable command to enable the device to send traps, and set the trap and notification parameters. Use the undo snmp-agent trap enable command to cancel the current setting. By default, trap sending is allowed. The snmp-agent trap enable command without any parameters specified allows the device to send all types of SNMP traps from all modules. Use the snmp-agent trap enable command in conjunction with the snmp-agent target-host command, which specifies the hosts to which the traps are sent. To send traps you must configure at least one snmp-agent target-host command. The trap-type argument specifies the module where traps are sent. It can be bgp, configuration, flash, ldp, lsp, ospf, standard, system, and vrrp. The standard traps include authentication, coldstart, linkdown, linkup, and warmstart. Related command: snmp-agent target-host, snmp-agent trap-source, snmp-agent trap-timeout.
Example
# Allow the system to send SNMP authentication traps to 10.1.1.1, with the trap format of SNMPv2c and the community name of public.
[3Com] snmp-agent trap enable standard authentication [3Com] snmp-agent target-host trap address udp-domain 10.1.1.1 params
securityname public v2c
# Allow the system to send all types of BGP traps to 10.1.1.1. Set the trap format to SNMPv3. Authenticate the traps without encryption and set the use name to super.
[3Com] snmp-agent trap enable bgp [3Com] snmp-agent target-host trap address udp-domain 10.1.1.1 params
securityname super v3 authentication
6.1.18 snmp-agent trap life

Syntax
snmp-agent trap life seconds undo snmp-agent trap life
View
System view
Parameter
seconds: Lifetime in seconds, in the range from 1 to 2592000, and defaults to 120.
Description
Use the snmp-agent trap life command to set the lifetime of traps. The expired traps are discarded without being retained or sent. Use the undo snmp-agent trap life command to cancel the current setting. Related command: snmp-agent trap enable, snmp-agent target-host.
Example
# Set the lifetime of traps to 60 seconds.
[3Com] snmp-agent trap life 60
6.1.19 snmp-agent trap queue-size

Syntax
snmp-agent trap queue-size size undo snmp-agent trap queue-size
View
System view
Parameter
size: Length of the message queue, in the range 1 to 1000.
Description
Use the snmp-agent trap queue-size command to set the length of the trap queue to the specified host. Use the undo snmp-agent trap queue-size command to cancel the setting. The default queue length is 100. Related command: snmp-agent trap enable, snmp-agent target-host, snmp-agent trap life.
Example
# Set the length of the outgoing trap queue to 200.
[3Com] snmp-agent trap queue-size 200
6.1.20 snmp-agent trap source

Syntax
snmp-agent trap source interface-type interface-number [ subinterface-type ] undo snmp-agent trap source
View
System view
Parameter
interface-type: Interface type. interface-number: Interface number. subinterface-type: Subinterface type.
Description
Use the snmp-agent trap source command to specify the source address of traps. Use the undo snmp-agent trap source command to cancel the current setting. The SNMP traps from a server have a trap address, regardless of which interface they are sent out of. Using trap addresses configured using this command you can trace a particular event. Related command: snmp-agent trap enable, snmp-agent target-host.
Example
# Specify the IP address of Ethernet interface 1/0/0 as the source address of trap packets.
[3Com] snmp-agent trap source ethernet 1/0/0
6.1.21 snmp-agent usm-user

Syntax
snmp-agent usm-user { v1 | v2c } user-name group-name [ acl acl-number ] undo snmp-agent usm-user { v1 | v2c } user-name group-name
snmp-agent usm-user v3 user-name group-name [ [ authentication-mode { md5 | sha } auth-password ] [ privacy des56 priv-password ] ] [ acl acl-number ] undo snmp-agent usm-user v3 user-name group-name { local | engineid
engineid-string }
View
System view
Parameter
v1: V1 security model. v2c: V2c security model. v3: V3 security model. user-name: User name, in the range of 1 to 32 bytes. group-name: Name of the group to which the user is assigned. It is in the range 1 to 32 bytes. authentication-mode: Sets the security level to authentication. md5: Sets the authentication protocol to HMAC-MD5-96. sha: Sets the authentication protocol to HMAC-SHA-96. auth-password: Authentication password, a character string in the range 1 to 64 bytes. privacy: Sets the security level to encrypt. des56: Sets the encryption protocol to DES. priv-password: Encryption password, a character string in the range 1 to 64 bytes. acl: Sets the ACL applied to the access view. acl-number: Standard ACL in the range 2000 to 2999. local: Local entity user. engineid: Specifies the engine ID associated with the user. engineid-string: Engine ID string.
Description
Use the snmp-agent usm-user command to add a new user to a SNMP group. Use the undo snmp-agent usm-user command to delete a SNMP group user. After you configure a remote user for an agent an engine ID is needed during authentication. If the engine ID changes then the user corresponding to the original engine ID becomes invalid.
For SNMPv1 and SNMPv2c, this command adds a new community name; for SNMPv3, it adds a new user to a SNMP group. Related command: snmp-agent group, snmp-agent community, snmp-agent local-engineid.
Example
# Add user John to the SNMP group of Johngroup, setting the security level to authentication, authentication protocol to HMAC-MD5-96 and password to hello.
[3Com] snmp-agent usm-user v3 John Johngroup authentication-mode md5 hello
Chapter 7 RMON Configuration Commands

7.1 RMON Configuration Commands
7.1.1 display rmon alarm
Syntax
display rmon alarm [ alarm-entry ]
View
Any view
Parameter
alarm-entry: Alarm index.
Description
Use the display rmon alarm command to display the alarm table of remote monitoring (RMON) or the specified alarm entry. Related command: rmon alarm.
Example
# Display the alarm table of RMON.
<3Com> display rmon alarm Alarm table 1 owned by 3COM is VALID. Samples absolute value : 1.3.6.1.2.1.16.1.1.1.4.1 <etherStatsOctets.1> Sampling interval Rising threshold Falling threshold When startup enables Latest value : 10(sec) : 1000(linked with event 1) : 100(linked with event 1) : risingOrFallingAlarm : 0
Table 7-1 Description on the fields of the display rmon alarm command Field Alarm table 1 3COM Alarm index 1 Owner Description
Field Samples absolute value VALID Sampling interval Rising threshold is 1000 Falling threshold is 100 When startup enables risingOrFallingAlarm
Description The sample type of the 1.3.6.1.2.1.16.1.1.1.4.1 node is absolute The alarm entry corresponding to the index is valid Sampling interval Rising threshold is 1000 Falling threshold is 100 : Type of the first alarm, which can be rising alarm, falling alarm, or both
7.1.2 display rmon event

Syntax
display rmon event [ event-entry ]
View
Any view
Parameter
event-entry: Event index.
Description
Use the display rmon event command to display the event table of RMON, or the specified event entry. The displayed information includes: event index, event owner, event description, action triggered by the event (log or trap), and last time the event occurred (the elapsed time since system initialization/startup in centiseconds). Related command: rmon event.
Example
# Display the event table of RMON.
<3Com> display rmon event Event table 1 owned by null is VALID. Description: null. Will cause log-trap when triggered, last triggered at 0days 00h:02m:27s.
Table 7-2 Description on the fields of the display rmon event command Field Event table 1 VALID cause log-trap when triggered last triggered at 0days 00h:02m:27s Event index 1 The event entry corresponding to the index is valid The event causes log-and-trap notification when triggered Last time the event was triggered Description
7.1.3 display rmon eventlog

Syntax
display rmon eventlog [ event-entry ]
View
Any view
Parameter
event-entry: Event index.
Description
Use the display rmon eventlog command to display the log table of RMON or the log entry for the specified event. The displayed information includes: index and current state of the event, time the log entry was created (the elapsed time since system initialization/startup in centiseconds), and event description.
Example
# Display the log entry for event entry 1.
<3Com> display rmon eventlog 1 Event table 1 owned by null is VALID. Generates eventLog 1.1 at 0days 00h:01m:39s. Description: The 1.3.6.1.2.1.16.1.1.1.4.1 defined in alarm table 1, less than(or =) 100 with alarm value 0. Alarm sample type is absolute. Generates eventLog 1.2 at 0days 00h:02m:27s. Description: The alarm formula defined in private alarm table 1,
less than(or =) 100 with alarm value 0. Alarm sample type is absolute.
Table 7-3 Description on the fields of the display rmon eventlog command Field Event table 1 VALID Generates eventLog 00h:02m:27s log description 1.2 at 0days Event index 1 The event entry corresponding to the index is valid Last time the event was triggered Event description Description
7.1.4 display rmon history

Syntax
display rmon history [ interface-type interface-number ]
View
Any view
Parameter
interface-type interface-number: Interface type and number.
Description
Use the display rmon history command to display the history control table of RMOM, and information about the latest sampling, such as utilization, number of errors and total number of packets. Related command: rmon history.
Example
# Display the history information about interface Ethernet2/0/1.
<3Com> display rmon history ethernet 2/0/1 History control entry 1 owned by null is VALID Samples interface Sampling interval : Ethernet2/0/1<ifEntry.642> : 10(sec) with 10 buckets max
Latest sampled values : Dropevents packets :0 :0 , octets , broadcast packets :0 :0

multicast packets :0 undersize packets :0 fragments collisions :0 :0

, CRC alignment errors :0 , oversize packets , jabbers , utilization :0 :0 :0
Table 7-4 Description on the fields of the display rmon history command Field History control entry 1 VALID Samples interface Sampling interval Buckets Latest sampled values Dropevents Octets Packet Broadcastpacket Multicastpacket CRC alignment errors undersize packets oversize packets Fragments Jabbers Collisions Utilization : 10(sec) Description Index of the history control entry State of history control entry 1 is valid Monitored interface Sampling every 10 seconds Number of buckets Latest sampling information Number of drop events Number of the received/transmitted bytes in this sample Number of the received/transmitted packets during the sampling period Number of broadcast packets Number of multicast packets Number of the packets with CRC errors Number of undersize packets Number of oversize packets Number of the undersize packets with CRC errors Number of the oversize packets with CRC errors Number of collisions Utilization ratio
7.1.5 display rmon prialarm

Syntax
display rmon prialarm [ prialarm-entry ]
View
Any view
Parameter
prialarm-entry: Prialarm entry index.
Description
Use the display rmon prialarm command to display information about the prialarm table of RMON, or the specified prialarm entry. Related command: rmon prialarm.
Example
# Display information about the prialarm table of RMON.
<3Com> display rmon prialarm Prialarm table 1 owned by null is VALID. Samples absolute value : .1.3.6.1.2.1.16.1.1.1.4.1 : 10(sec) : 1000(linked with event 1) : 100(linked with event 1) : risingOrFallingAlarm : forever. : 0
Sampling interval Rising threshold Falling threshold When startup enables This entry will exist Latest value
Table 7-5 Description on the fields of the display rmon prialarm command Field Prialarm table 1 owned by null VALID Samples absolute value : .1.3.6.1.2.1.16.1.1.1.4.1 Sampling interval Rising threshold : 10(sec) : 1000 Description Index of the prialarm entry Owner of the prialarm entry State of prialarm entry 1 is valid The sample type of the 1.3.6.1.2.1.16.1.1.1.4.1 node is absolute Sampling every 10 seconds Rising threshold. Rising alarm is triggered when a sample value reaches/exceeds this value Falling threshold. Falling alarm is triggered when a sample value reaches/exceeds this value
Falling threshold
: 100
linked with event 1 When startup enables risingOrFallingAlarm This entry will exist Latest value 0 : forever :
Event index corresponding rising/falling alarm
to
the
Type of the first alarm, which can be rising alarm or falling alarm, or both Lifetime of the entry, which can be forever or span the specified period Latest sample value
7.1.6 display rmon statistics

Syntax
display rmon statistics [interface-type interface-number]
View
Any view
Parameter
interface-type interface-number: Interface type and number.
Description
Use the display rmon statistics command to display the RMON statistics of the specified interface, or all interfaces. The displayed information includes: number of collisions, CRC and queues, oversize packets and undersize packets, timeout, fragments, broadcast, multicast, unicast, and bandwidth use. Related command: rmon statistics.
Example
# Display the RMON statistics about interface Ethernet 2/0/1.
<3Com> display rmon statistics ethernet2/0/1 Statistics entry 1 owned by monitor is VALID. Interface : Ethernet0/0/0<ifIndex.642> etherStatsOctets etherStatsBroadcastPkts etherStatsUndersizePkts etherStatsFragments : 9760 : 0 : 0 : 0 , etherStatsPkts : 79
, etherStatsMulticastPkts : 0 , etherStatsOversizePkts , etherStatsJabbers , etherStatsCollisions : 0 : 0 : 0
etherStatsCRCAlignErrors : 0
etherStatsDropEvents (insufficient resources): 0 Packets received according to length: 64 : 0 , , 65-127 : 0 , , 128-255 : 0
256-511: 0
512-1023: 0
1024-1518: 0
7.1.7 rmon alarm

Syntax
rmon alarm alarm-entry alarm-variable sampling-time { delta | absolute }
rising_threshold threshold-value1 event-entry1 falling_threshold threshold-value2 event-entry2 [ owner text ] undo rmon alarm entry-number
View
System view
Parameter
alarm-entry: Alarm index, in the range 1 to 65,535. alarm-variable: Alarm variable, a string of 1 to 256 characters. It adopts the dotted node object identifier (OID) format, such as 1.3.6.1.2.1.2.1.10.1 (or ifInOctets.1). sampling-time: Sampling interval, in the range 5 to 65,535 seconds. delta: Sets sample type to delta value. absolute: Sets sample type to absolute value. rising_threshold threshold-value1: Rising threshold, in the range 0 to 2,147,483,647. event-entry1: Event index corresponding to the rising threshold, in the range 0 to 65,535. falling_threshold threshold-value2: Falling threshold, in the range 0 to 2,147,483,647. event-entry2: Event index corresponding to the falling threshold, in the range 0 to 65,535. owner text: Owner of the entry, a string of 1 to 127 characters.
Description
Use the rmon alarm command to set an alarm entry. When an exception occurs the alarm is triggered. The alarm in turn triggers the corresponding event, which can be log, trap, or log-and-trap. Use the undo rmon alarm command to remove an alarm entry.
Example
# Remove alarm entry 15.
[3Com] undo rmon alarm 15
7.1.8 rmon event

Syntax
rmon event event-entry [ description string ] { log | trap trap-community | log-trap log-trapcommunity | none } [ owner text ] undo rmon event event-entry
View
System view
Parameter
event-entry: Event index, in the range 1 to 65,535. description string: Event description, a string of 1 to 127 characters. log: Sets event type to log. trap: Sets event type to trap. trap-community: Community name in the trap messages. log-trap: Sets event type to log-and-trap. log-trapcommunity: Community name in the log and trap messages. none: Event other than log, trap, and log-and-trap. owner text: Owner of the entry, a string of 1 to 127 characters.
Description
Use the rmon event command to add an event entry. Use the undo rmon event command to remove an event entry. The type of notification made about an event can be: log, sending a trap to the network management station, or both. Based on the received information the network management system can handle the event appropriately.
Example
# Add event entry 10 to the event table and set its type to log.
[3Com] rmon event 10 log
7.1.9 rmon history

Syntax
rmon history history-control-entry buckets number interval sampling-interval [ owner text-string ] undo rmon history entry-number
View
Ethernet interface view
Parameter
history-control-entry: History control index, in the range 1 to 65,535. buckets number: Specifies the number of buckets, the capacity desired for the specified entry, or the number of sampling actions in a sampling period. interval sampling-interval: Sampling interval in the range 5 to 3,600 seconds. owner text: Owner of the specified entry, a string of 1 to 127 characters.
Description
Use the rmon history command to add a history control entry. Use the undo rmon history command to remove a history control entry. The history control table of RMON retains data sampled in a sampling period. By using this command you can enable sampling on an interface, set sampling interval and the number of buckets. After that, RMON periodically collects and saves data on the specified interface, providing information such as utilization, number of errors, and total number of packets for later retrieval.
Example
# Add a history control entry.
[3Com-Ethernet0/0/0] rmon history 1 buckets 10 interval 10
7.1.10 rmon prialarm

Syntax
rmon prialarm prialarm-entry prialarm-formula prialarm-des sampling-timer { delta | absolute | changeratio } rising_threshold threshold-value1 event-entry1 falling_threshold threshold-value2 event-entry2 entrytype { forever | cycle cycle-period } [ owner text ]
undo rmon prialarm entry-number
View
System view
Parameter
prialarm-entry: Prialarm index, in the range 1 to 65,535. prialarm-formula: Prialarm formula, which returns a long integer. Create your prialarm formula with caution to prevent errors caused by overflow in each calculating step of your prialarm formula. alarm-des: Alarm description, a string of 0 to 127 characters. sampling-timer: Sampling interval, in the range 10 to 65,535 seconds. delta | absolute | changeratio: Sets sample type to delta value, change ratio, or absolute value. threshold-value1: Rising threshold, a number greater than zero. event-entry1: Index of the event associated with the rising threshold. It ranges from 0 to 65,535. threshold-value2: Falling threshold, a number greater than zero. event-entry2: Index of the event associated with the falling threshold. It ranges from 0 to 65535. forever | cycle cycle-period: Lifetime of the prialarm entry, which can be forever or span the specified period. owner text: Owner of the entry, a string of 1 to 127 characters.
Description
Use the rmon prialarm command to add an entry to the prialarm table. Use the undo rmon prialarm command to remove an entry from the prialarm table. The number of prialarm entries you can create is hardware-dependent.
Example
# Remove prialarm entry 10.
[3Com] undo rmon prialarm 10
7.1.11 rmon statistics

Syntax
rmon statistics entry-number [ owner text ] undo rmon statistics entry-number
View
Parameter
entry-number: Statistics index, in the range 1 to 65,535. owner text: Owner of the entry, a string of 1 to 127 characters.
Description
Use the rmon statistics command to add a statistics entry. Use the undo rmon statistics command to remove a statistics entry. You can use the statistics function of RMON to collect statistics about the monitored interface, such as collisions, CRCs and queues, undersize and oversize packets, timeout, fragments, broadcast, multicast, unicast, and use of bandwidth.
Example
# Add statistics entry 20 to the statistics table on interface Ethernet2/0/1.
[3Com-Ethernet2/0/1] rmon statistic 20 owner null
Chapter 8 Terminal Service Commands

8.1 Telnet and Telnet Redirect
8.1.1 debugging telnet
Syntax
debugging telnet undo debugging telnet
View
User view
Parameter
None
Description
Use the debugging telnet command to enable Telnet connection debugging. Use the undo debugging telnet command to disable Telnet connection debugging. By default, Telnet connection debugging is disabled. Related command: telnet.
Example
# Debug Telnet connections.
<3Com> debugging telnet
8.1.2 display tcp status

Syntax
display tcp status
View
Any view
Parameter
None
Description
Use the display tcp status command to view information about the current TCP connections on the router. Compared with display users, the display tcp status command can display more information about Telnet clients and servers. The information that this command provides includes local address of TCP connection, local port number, external address, external port number, and connection state. Related command: telnet.
Example
# Display information about TCP connections.
<3Com> display tcp status TCPCB Local Address 23 Foreign Address 129.102.001.092 0.0.0.0.0 State ESTABLISHED LISTEN
129.102.100.142 028ca414
0.0.0.0.23
The output indicates that one TCP connection is set up, where the local IP address is 129.102.100.142, local port is 23, and remote IP address is 129.102.001.92. In addition, a local server process is listening to port 23.
8.1.3 redirect enable

Syntax
redirect enable undo redirect enable
View
User interface view
Parameter
None
Description
Use the redirect enable command to enable redirect on the asynchronous serial interface.
Use the undo redirect enable command to disable redirect on the corresponding asynchronous serial interface. By default, the asynchronous serial interface does not support redirect. This command is only useful for AUX and TTY interfaces. Related command: telnet, display tcp status.
Example
# Enable redirect on user interface TTY7.
[3Com-ui-tty7] redirect enable
8.1.4 redirect listen-port

Syntax
redirect listen-port port-number undo redirect listen-port
View
User interface view
Parameter
port-number: Number of the listening port, in the range 2000 to 50000.
Description
Use the redirect listen-port command to specify a port to listen for redirected Telnet connections. Use the undo redirect listen-port command to restore the default listening port. The default number of the port that listens for redirected Telnet connections is TTY number plus 2000.
Example
# Set the number of the port that listens for the redirected Telnet connections to 50.
[Router-ui-tty7] redirect listen-port
8.1.5 redirect timeout

Syntax
redirect timeout minutes
undo redirect timeout
View
User interface view
Parameter
minutes: Idle timeout in the range 30 to 86400 seconds. It defaults to 360 seconds.
Description
Use the redirect timeout command to specify the amount of time that a redirected Telnet connection can stay idle. After that, the connection is disconnected. Use the undo redirect timeout command to allow the system to maintain an always-on redirected telnet connection.
Example
# Set the idle timeout for the redirected telnet connection to 200 seconds.
[Router-ui-tty7] redirect timeout 200
8.1.6 redirect return-deal from-telnet

Syntax
redirect return-deal from-telnet undo redirect return-deal from-telnet
View
User interface view
Parameter
None
Description
Use the redirect return-deal from-telnet command to have the router that redirects Telnet connection substitute 0x0d for 0x0d 0x0a and 0x0d 0x00, the carriage returns received from the Telnet client. Use the undo redirect return-deal from-telnet command to disable the router that redirects Telnet connection to process carriage returns. By default, carriage returns are not processed.
Example
# Enable the router that redirects Telnet connection to process the carriage returns received from the Telnet client.
[Router-ui-tty7] redirect return-deal from-telnet
8.1.7 redirect return-deal from-terminal

Syntax
redirect return-deal from-terminal undo redirect return-deal from-terminal
View
User interface view
Parameter
None
Description
Use the redirect return-deal from-terminal command to have the router that redirects Telnet connection substitute 0x0d for 0x0d 0x0a and 0x0d 0x00, the carriage returns received from the terminal (a PC connected to the console port for example). Use the undo redirect return-deal from-terminal command to disable the router that redirects Telnet connection to process the carriage returns. By default, carriage returns are not processed.
Example
# Enable the router that redirects Telnet connection to process the carriage returns received from the terminal.
[Router-ui-tty7] redirect return-deal from-terminal
8.1.8 redirect refuse-negotiation

Syntax
redirect refuse-negotiation undo redirect refuse-negotiation
View
User interface view
Parameter
None
Description
Use the redirect refuse-negotiation command to enable Telnet option negotiation when setting up a redirected telnet connection. Use the undo redirect refuse-negotiation command to disable Telnet option negotiation when setting up a redirected Telnet connection. By default, Telnet option negotiation is enabled.
Example
# Enable Telnet option negotiation when setting up a redirected Telnet connection.
[Router-ui-tty7] redirect refuse-negotiation
8.1.9 redirect disconnect

Syntax
redirect disconnect
View
User interface view
Parameter
None
Description
Use the redirect disconnect command to disconnect a redirected telnet connection manually.
Example
# Manually disconnect a redirected Telnet connection.
[Router-ui-tty7] redirect disconnect
8.1.10 telnet
Syntax
telnet [ vpn-instance vpn-instance-name ] host-ip-address [ service-port ]
View
User view
Parameter
vpn-instance vpn-instance-name: Sets the VPN instance name of MPLS VPN. host-ip-address: Host name or IP address of the remote device, in dotted decimal format. service-port: Number of the TCP port where the remote device provides the Telnet service, in the range 0 to 65535.
Description
Use the telnet command to telnet from this router to another device. By default, if the service-port is not specified, the Telnet port number is 23. By executing the telnet command you can telnet from this router to another device to manage it. Related command: display tcp status.
Example
# Telnet from router 3Com to router 3Com 2 at 129.102.0.1.
<3Com> telnet 129.102.0.1 Trying 129.102.0.1... Service port is 23 Connected to 129.102.0.1 <3Com2>
8.1.11 telnet source-interface

Syntax
telnet ip-address [ port ] source-interface interface-type interface-number
View
User view
Parameter
ip-address: Destination IP address. port: Destination port number. It defaults to 23. interface-type interface-number: Specifies the source interface for telnet.
Description
Use the telnet source-interface command to telnet from the main IP address of the specified interface to the destination IP address.
Example
# Telnet from the source interface ethernet 1/0/1 to the destination address 2.2.2.2.
<3Com> telnet 2.2.2.2 source-interface ethernet 1/0/1
8.1.12 telnet source-ip

Syntax
telnet ip-address [ port ] source-ip source-address
View
User view
Parameter
ip-address: Destination IP address. port: Destination port number. It defaults to 23. source-address: Source IP address used when setting up a Telnet connection.
Description
Use the telnet source-ip command to telnet from the specified source IP address to the specified destination IP address.
Example
# Telnet from source IP address 1.1.1.1 to destination IP address 2.2.2.2.
<3Com> telnet 2.2.2.2 source-ip 1.1.1.1
8.2 SSH Configuration Commands

8.2.1 debugging ssh server
Syntax
debugging ssh server { VTY index | all } undo debugging ssh server { VTY index | all }
View
User view
Parameter
index: Index of the SSH channel to be debugged. Its value range is restricted by VTY numbers and defaults to 0 to 4. all: All SSH channels.
Description
Use the debugging ssh server command to output information such as the negotiation process regulated by SSH1.5 protocol to the information center as debugging formation, and to debug a user interface separately. Use the undo debugging ssh server command to disable debugging. By default, debugging is disabled. Related command: ssh server authentication-retries, ssh server rekey-interval, ssh server timeout.
Example
# Print debugging information when SSH is running.
[3Com] debugging ssh server vty 0 00:23:20: SSH0: starting SSH control process 00:23:20: SSH0: sent protocol version id SSH-1.5-3Com-1.25 00:23:20: SSH0: protocol version id is - SSH-1.5-1.2.26 00:23:20: SSH0: SSH_SMSG_PUBLIC_KEY msg 00:23:21: SSH0: SSH_CMSG_SESSION_KEY msg - length 112, type 0x03 00:23:21: SSH: RSA decrypt started 00:23:21: SSH: RSA decrypt finished 00:23:21: SSH: RSA decrypt started 00:23:21: SSH: RSA decrypt finished
8.2.2 display rsa local-key-pair public

Syntax
display rsa local-key-pair public
View
Any view
Parameter
None
Description
Use the display rsa local-key-pair public command to view the public key of the host key pair and server key pair on the server. If no key is generated, the system displays: RSA keys not found. Related command: rsa local-key-pair create.
Example
# Display the public key of the host key pair and server key pair on the server.
<3Com> display rsa local-key-pair public ===================================================== Time of Key pair created: 13:41:21 Key name: 3Com_Host Key type: RSA encryption Key ===================================================== Key code: 3047 0240 C30B0C1E 1AC2A028 984B7801 9583105D 78E69F6C 62561976 95E3B92B 7D9EC59C 150AE9CC 92E7CEF7 F025D3E0 C15408F5 4C9F4945 308A2DCF 1BA59D60 53DB5825 0203 010001 2004/11/12
===================================================== Time of Key pair created: 13:41:25 Key name: SecPath1000_Server 2004/11/12

Key type: RSA encryption Key
===================================================== Key code: 3067 0260 E0DC0229 0525E04D AE3B8998 C56A18A1 997A609B 043B9302 F843715B FC727A3D 4A503B32 333DFD46 D95F4BD7 5AF63BBF 99100F9E EEAE4B3E DC6FBE42 1757F88D 1F7A098F 2C3FFFDF 8E2DA17D 991111ED C318E857 6D40D224 4114AD15 A42068B9 0203 010001
8.2.3 display rsa peer-public-key

Syntax
display rsa peer-public-key [ brief | name keyname ]
View
Any view
Parameter
brief: Displays the brief information about all peer public keys. keyname: Specifies the key to be displayed. A consecutive character string in the range 0 (exclusive) to 64 (inclusive).
Description
Use the display rsa peer-public-key command to view the specified RSA public key. If no public key specified then all public keys are displayed. Related command: rsa local-key-pair create.
Example
# Display all RSA public keys.
<3Com> display rsa peer-public-key ===================================== Key name: aa Key address: =====================================

Key Code: 308186 028180
6B494EC4 EBD23DEE 1375C2B5 AB892F69 F2529D09 5B559E26 26011A1F C58AA5E3 60258B01 26494D0E 7221BB98 1C844CCD 8F0F8AEA 4AA1CD5B 9C3C5EF5 3093319F 6F3AEA80 351E5E8D 29F1511C D4AC08B4 3FDF5B7B E30A4E47 6FF75B9A 63BE5E94 E9C344B7 F0EC9D53 AE54E0A3 0567184A 2E80BEC3 89A2DAFA 83C18591 5B29EAA1 0201 25
8.2.4 display ssh server

Syntax
display ssh server { status | session }
View
Any view
Parameter
status: Displays SSH status information. session: Displays SSH session information.
Description
Use the display ssh server command to view information on SSH status or sessions. Related command: ssh server authentication-retries, ssh server rekey-interval, ssh server timeout.
Example
# Display SSH status and configuration parameters.
[3Com]display ssh server status SSH version : 1.5 SSH connection timeout : 60 seconds SSH server key generating interval : 1 hours SSH Authentication retries : 3 times
# Display SSH sessions.

[3Com] display ssh server session Conn VTY0 Ver Encry 1.5 DES State Session started Retry Username 3Com

VTY3 1.5 DES Session started

router
8.2.5 display ssh user-information

Syntax
display ssh user-information [ username ]
View
Any view
Parameter
username: Valid SSH user name defined by AAA.
Description
Use the display ssh user-information command to view information about current SSH users, including user name, corresponding key name, and user authentication mode. If you specify the username parameter then only the information about the specified user is displayed. Related command: ssh user username assign rsa-key, ssh user username authentication-type.
Example
# Display user information.
[3Com] display ssh user-information Username Jin hanqi1 1024 4000 hanqi_rsa hanqi_all rsa all authentication-type rsa password rsa all user-public-key-name jin 816pub file3 hq_rsa hq_rsa hq_all
8.2.6 peer-public-key end

Syntax
peer-public-key end
View
Public key view
Parameter
None
Description
Use the peer-public-key end command to return to system view from public key view. Related command: rsa peer-public-key, public-key-code begin.
Example
# Exit public key view and save the configuration.
[3Com] rsa peer-public-key 3Com003 [3Com-rsa-public-key] peer-public-key end [3Com]
8.2.7 public-key-code begin

Syntax
public-key-code begin
View
Public key view
Parameter
None
Description
Use the public-key-code begin command to enter public key code view. Before using this command you must use the rsa peer-public-key command to specify a key name. With the public-key-code begin command you can enter public key code view to input key data. Spaces and carriage returns are accepted between characters. The configured public key must be a hex character string coded according to public key format. It is generated randomly by the SSH-supported client software. Related command: rsa peer-public-key, public-key-code end.
Example
# Enter public key code view to input the key.
[3Com] rsa peer-public-key 3Com003 [3Com-rsa-public-key] public-key-code begin
[3Com-key-code] 308186028180739A291ABDA704F5D93DC8FDF84C427463 [3Com-key-code] 1991C164B0DF178C55FA833591C7D47D5381D09CE82913 [3Com-key-code] D7EDF9C08511D83CA4ED2B30B809808EB0D1F52D045DE4 [3Com-key-code] 0861B74A0E135523CCD74CAC61F8E58C452B2F3F2DA0DC [3Com-key-code] C48E3306367FE187BDD944018B3B69F3CBB0A573202C16 [3Com-key-code] BB2FC1ACF3EC8F828D55A36F1CDDC4BB45504F020125 [3Com-key-code] public-key-code end
8.2.8 public-key-code end

Syntax
public-key-code end
View
Public key code view
Parameter
None
Description
Use the public-key-code end command to return from public key code view to public key view and to save the configured public key. Executing this command ends the public key edit process. The system verifies the key before saving it. If the key contains illegal characters, the system prompts the error and discards the key. The configuration fails. If the key is valid, it is saved to the linked list of client public keys. Related command: rsa peer-public-key, public-key-code begin.
Example
# Exit public key code view and save the configuration.
[3Com-rsa-key-code] public-key-code end [3Com-rsa-public-key]
8.2.9 rsa local-key-pair create

Syntax
rsa local-key-pair create
View
System view
Parameter
None
Description
Use the rsa local-key-pair create command to generate the local RSA host key pair and server key pair. Executing this command generates two files, hostkey and serverkey, each containing a local public key and private key. While the key pair in the serverkey file is updated automatically at regular intervals, the key pair in the hostkey file will not change after their creation. If the key pairs exist when you enter this command, the system warns that the existing keys are to be replaced. The names of the generated key pairs are respectively router name+ server and router name + host, for example, 3Com_host and 3Com_server. This command is not stored in the configuration file. After you enter this command, the system asks you to input the number of digits for the host key pair. The server key pair and the host key pair have at least 128 digits of difference. The minimum length of server key pair and host key pair is 512 digits and the maximum length is 2048 digits. If there have been key pairs you need to confirm whether to change them. To log onto the router through SSH, you must first generate local RSA key pairs using the rsa local-key-pair create command. You only need to execute this command once and do not need to execute it again at reboot. Related command: rsa local-key-pair destroy.
Example
# Generate the local host key pair and server key pair.
[3Com] rsa local-key-pair create The name for the keys will be: 3Com _Host % You already have RSA keys defined for rtvrp_Host % Do you really want to replace them? [yes/no]:y Choose the size of the key modulus in the range of 512 to 2048 for your Keys. Choosing a key modulus greater than 512 may take a few minutes. How many bits in the modulus [512]:512 Generating keys... .....++++++++++++

........................++++++++++++ ..........++++++++ ............................++++++++
8.2.10 rsa local-key-pair destroy

Syntax
rsa local-key-pair destroy
View
System view
Parameter
None
Description
Use the rsa local-key-pair destroy command to remove all RSA keys on the server (including the host key pair and the server key pair). The execution of this command needs your confirmation. This command is not stored in the configuration file. Related command: rsa local-key-pair create.
Example
# Remove all keys on the server.
[3Com] rsa local-key-pair destroy % Keys to be removed are named 3Com _Host . % Do you really want to remove these keys? [yes/no]:y
8.2.11 rsa peer-public-key

Syntax
rsa peer-public-key key-name
View
System view
Parameter
key-name: Name of the public key.
Description
Use the rsa peer-public-key command to enter public key view. You can use this command in conjunction with the public-key-code begin command to configure the public key of the client. The public key of the client is generated randomly by client software, which must support SSH1.5. Related command: public-key-code begin, public-key-code end.
Example
# Enter public key view.
[3Com] rsa peer-public-key 3Com002 [3Com-rsa-public-key]
8.2.12 ssh server authentication-retries

Syntax
ssh server authentication-retries times undo ssh server authentication-retries
View
System view
Parameter
times: Specifies the number of authentication retries in the range 1 to 5.
Description
Use the ssh server authentication-retries command to set the number of SSH connection authentication retries, which is validated at next login. Use the undo ssh server authentication-retries command to restore the default. Related command: display ssh sever.
Example
# Specify the number of authentication retries at login to four.
[3Com] ssh server authentication-retries 4
8.2.13 ssh server rekey-interval

Syntax
ssh server rekey-interval hours undo ssh server rekey-interval
View
System view
Parameter
hours: Update interval in the range 1 to 24 hours.
Description
Use the ssh server rekey-interval command to set the interval for updating the server key. Use the undo ssh server rekey-interval command to cancel the current setting. By default, the server key is not updated. Related command: display ssh sever.
Example
# Set the interval for updating the server key to three hours.
[3Com] ssh server rekey-interval 3
8.2.14 ssh server timeout

Syntax
ssh server timeout seconds undo ssh server timeout
View
System view
Parameter
seconds: Specifies the login timeout in the range 1 to 120 seconds.
Description
Use the ssh server timeout command to set a timeout for SSH connection authentication at login. It becomes valid at next login.
Use the undo ssh server timeout command to restore the default, or 60 seconds. Related command: display ssh sever.
Example
# Set authentication timeout to 80 seconds at login.
[3Com] ssh server timeout 80
8.2.15 ssh user assign

Syntax
ssh user username assign rsa-key keyname undo ssh user username assign rsa-key
View
System view
Parameter
username: In password authentication, it must be a valid SSH user name defined in AAA; in an RSH authentication, it is the local SSH user name, irrelevant to AAA. keyname: Public key name of the client, a string of 1 to 64 characters.
Description
Use the ssh user assign command to assign one existing public key to a user. If a key exists, the new assignment overrides. Use the undo ssh user assign command to delete the association. The AAA module is responsible for creating and deleting local users in the system. Each time AAA creates a SSH user, SSH receives a notification and adds the user into the user set that it maintains. Likewise, each time AAA deletes an SSH user, SSH receives a notification and deletes the user if there is any. The newly configured public key becomes valid at next login. Related command: display ssh user-information.
Example
# Assign key1 to user Smith.
[3Com] ssh user smith assign rsa-key key1 [3Com]
8.2.16 ssh user authentication-type

Syntax
ssh user username authentication-type { password | rsa | all } undo ssh user username authentication-type
View
System view
Parameter
username: In password authentication, it must be a valid SSH user name defined in AAA; in an RSH authentication, it is the local SSH user name, irrelevant to AAA. password: Specifies the authentication mode of the user to password. rsa: Specifies the authentication mode of the user to RSA. all: The authentication mode of the user can be either password or RSA.
Description
Use the ssh user authentication-type command to specify an authentication mode for the specified user. Use the undo ssh user authentication-type command to restore the default, where login is always denied. You must specify an authentication mode for each new user, or they will be unable to log in. The new authentication mode takes effect at next login. Related command: display ssh user-information.
Example
# Set the authentication mode to password for user Smith.
[3Com] ssh user smith authentication-type password
8.3 RSH Commands

8.3.1 rsh
Syntax
rsh host [ user username ] command remote-command
View
User View
Parameter
host: IP address or host name of the remote host. user username: Login user that is allowed to execute the RSH command on the remote host. If no user is specified, the system name of the router, which is specified using the sysname command, applies. command: Sets the command to be executed remotely. remote-command: The command to be executed on the remote host. The commands to be supported depend on the operating system running on the RSH server.
Description
Use the rsh command to execute a command on a remote host remotely. You can operate on the RSH client to invoke/execute commands, and query/access information on the RSH server as well.
Example
# Execute the dir command remotely on the remote server at 169.254.1.100 (the operating system is Windows 2000).
<3Com> rsh 169.254.1.100 com dir Trying 169.254.1.100 ... Press CTRL+K to abort Volume in drive C is SYSTEM Volume Serial Number is 2A0F-18DF
Directory of C:\WRSHDNT
2004-07-13 2004-07-13 2001-05-10 2001-12-05 1996-08-05 1998-10-13 2004-01-02 2003-02-26 1997-08-26
09:10 09:10 09:04 15:36 15:39 16:31 23:05 17:04 16:05
<DIR> <DIR>
. .. 162,304 UNWISE.EXE 45,056 wrshdcfg.exe 48,128 ctrlrshd.exe 31,744 forewin.exe 40,625 history.txt 6,822 order.txt 23,552 whoami.exe

2001-12-07 2003-06-21 2001-12-09 2001-12-09 2003-06-22 2003-06-23 2003-06-23 2003-06-22 2001-09-02 2003-06-21 2004-01-02 2004-01-02 2001-07-30 2004-07-13 17:28 10:51 16:41 16:26 11:14 18:18 18:18 11:13 15:41 10:32 15:54 15:54 18:05 09:10 21 files

122,880 wrshdctl.exe 192,512 wrshdnt.cpl 38,991 wrshdnt.hlp 1,740 wrshdnt.cnt 452,230 wrshdnt.htm 4,803 wrshdnt_header.htm 178 wrshdnt_filelist.xml 156,472 wrshdnt.pdf 49,152 wrshdrdr.exe 69,632 wrshdrun.exe 196,608 wrshdsp.exe 102,400 wrshdnt.exe 766 wrshdnt.ico 3,253 INSTALL.LOG
1,749,848 bytes 2,817,417,216 bytes free
2 directories
# Execute the interactive command time on the RSH server at 169.254.1.100 (the operating system is Windows 2000).
<3Com> rsh 169.254.1.100 command time Trying 169.254.1.100 ... Press CTRL+K to abort The current time is: 6:56:42.57
Enter the new time: 12:00 12:00
8.3.2 debugging rsh

Syntax
debugging rsh undo debugging rsh
View
User View
Parameter
None
Description
Use the debugging rsh command to enable RSH debugging. Use the undo debugging rsh command to disable RSH debugging. You can use this command to verify the configuration after you execute the rsh command.
Example
# Enable RSH debugging and then execute the rsh command.
<3Com> debugging rsh <3Com> rsh 169.254.1.100 command cd c: Trying 169.254.1.100 ... Press CTRL+K to abort *0.5850881 3Com RSH/8/REQUEST:User 3Com start connection to Server
(169.254.1.100)
*0.5850990 3Com RSH/8/SEND:User 3Com sent 23 byte(s) to server (169.254.1.100) *0.5851090 3Com RSH/8/RECV:User 3Com received 1 byte(s) from server
(169.254.1.100) *0.5851200 3Com RSH/8/CLOSECONN:Server (169.254.1.100) closed connection
8.4 Rlogin Configuration Commands

8.4.1 debugging rlogin
Syntax
debugging rlogin undo debugging rlogin
View
User view
Parameter
None
Description
Use the debugging rlogin command to enable remote login (rlogin) debugging. Use the undo debugging rlogin command to disable rlogin debugging. By default, rlogin debugging is disabled.
Example
# Enable rlogin debugging.
<Router> debugging rlogin
8.4.2 rlogin
Syntax
rlogin remote-host username
View
User view
Parameter
remote-host: IP address or name of the UNIX host onto which you want to log. username: User name for the remote login, which must have been registered with the Unix host.
Description
Use the rlogin command to rlogin onto the specified remote host with the specified user name. The rlogin client function of the router enables its logging terminal users to log onto a remote UNIX host using rlogin. After a terminal user logs onto the remote UNIX host and passes authentication, all characters input by the user except for local terminal escape sequences are sent to the remote server. The commands in escape sequences are locally executed. The local terminal can terminate the rlogin session in one of the following three ways: Press CTRL+K. Enter the local terminal escape character, or a tilde (~) at the beginning of a line, and then enter a dot (.). Enter an abort command requesting the server to terminate the session process. This command differs with servers, while exit and quit are commonly used.
Example
# Log as the user zhb onto the UNIX server at 192.168.0.200.
<3Com> rlogin 192.168.0.200 zhb Trying 192.168.0.200 ... Press CTRL+K to abort
Connected to 192.168.0.200 ... Password:
Enter your password at the prompt. After the authentication is passed, the server prompt appears.
Last login: Thu Oct 28 17:30:23 from 192.168.0.5 bash: Path: command not found [root@localhost zhb] #
Command Reference Guide Interface v2.30 Router Software
Table of Contents
Table of Contents
Chapter 1 Interface Management Commands ............................................................................ 1-1 1.1 Interface Management Commands ................................................................................... 1-1 1.1.1 debugging physical ................................................................................................. 1-1 1.1.2 description ............................................................................................................... 1-1 1.1.3 display brief interface .............................................................................................. 1-2 1.1.4 display interface ...................................................................................................... 1-3 1.1.5 flow-interval ............................................................................................................. 1-5 1.1.6 interface................................................................................................................... 1-6 1.1.7 reset counters interface........................................................................................... 1-8 1.1.8 restart ...................................................................................................................... 1-9 1.1.9 shutdown ............................................................................................................... 1-10 Chapter 2 Fundamental Ethernet Interface Configuration Commands ................................... 2-1 2.1 Fundamental Ethernet Interface Configuration Commands .............................................. 2-1 2.1.1 display interface ethernet ........................................................................................ 2-1 2.1.2 duplex...................................................................................................................... 2-3 2.1.3 flow-control .............................................................................................................. 2-4 2.1.4 force-link.................................................................................................................. 2-5 2.1.5 loopback (Ethernet/GE Interface)............................................................................ 2-6 2.1.6 mtu (Ethernet/GE Interface) .................................................................................... 2-6 2.1.7 promiscuous ............................................................................................................ 2-7 2.1.8 speed....................................................................................................................... 2-8 Chapter 3 Layer 2 Ethernet Port Configuration Commands ..................................................... 3-1 3.1 Layer 2 Ethernet Port Configuration Commands............................................................... 3-1 3.1.1 broadcast-suppression............................................................................................ 3-1 3.1.2 description ............................................................................................................... 3-2 3.1.3 display interface ...................................................................................................... 3-2 3.1.4 display port .............................................................................................................. 3-5 3.1.5 duplex...................................................................................................................... 3-5 3.1.6 flow-control .............................................................................................................. 3-6 3.1.7 interface................................................................................................................... 3-7 3.1.8 loopback .................................................................................................................. 3-7 3.1.9 mac-address timer aging......................................................................................... 3-8 3.1.10 port access vlan .................................................................................................... 3-8 3.1.11 port hybrid pvid vlan .............................................................................................. 3-9
3Com Corporation i
Table of Contents
3.1.12 port hybrid vlan.................................................................................................... 3-10 3.1.13 port link-type........................................................................................................ 3-11 3.1.14 port trunk permit vlan .......................................................................................... 3-11 3.1.15 port trunk pvid vlan.............................................................................................. 3-12 3.1.16 reset counters interface....................................................................................... 3-13 3.1.17 shutdown ............................................................................................................. 3-13 3.1.18 speed................................................................................................................... 3-14 Chapter 4 Fundamental WAN Interface Configuration Commands ......................................... 4-1 4.1 Fundamental Serial Interface Configuration Commands .................................................. 4-1 4.1.1 async mode ............................................................................................................. 4-1 4.1.2 baudrate .................................................................................................................. 4-2 4.1.3 clock (Serial Interface) ............................................................................................ 4-3 4.1.4 code nrzi.................................................................................................................. 4-4 4.1.5 country-code............................................................................................................ 4-5 4.1.6 detect....................................................................................................................... 4-6 4.1.7 eliminate-pulse ........................................................................................................ 4-7 4.1.8 idle-mark.................................................................................................................. 4-8 4.1.9 invert receive-clock ................................................................................................. 4-8 4.1.10 invert transmit-clock .............................................................................................. 4-9 4.1.11 loopback .............................................................................................................. 4-10 4.1.12 mtu (Serial Interface)........................................................................................... 4-10 4.1.13 physical-mode ..................................................................................................... 4-11 4.1.14 virtualbaudrate..................................................................................................... 4-12 4.2 Fundamental CE1/PRI Interface Configuration Commands............................................ 4-13 4.2.1 channel-set (CE1/PRI Interface) ........................................................................... 4-13 4.2.2 clock (CE1/PRI Interface)...................................................................................... 4-14 4.2.3 code (CEI/PRI Interface) ....................................................................................... 4-15 4.2.4 controller e1........................................................................................................... 4-15 4.2.5 display controller e1 .............................................................................................. 4-16 4.2.6 frame-format (CE1/PRI Interface) ......................................................................... 4-17 4.2.7 idlecode (in CE1/PRI Interface View).................................................................... 4-17 4.2.8 itfcode (in CE1/PRI Interface View)....................................................................... 4-18 4.2.9 loopback (CE1/PRI Interface View)....................................................................... 4-19 4.2.10 pri-set (CE1/PRI Interface).................................................................................. 4-20 4.2.11 using (CE1/PRI Interface) ................................................................................... 4-21 4.3 Fundamental CT1/PRI Interface Configuration Commands............................................ 4-22 4.3.1 alarm-threshold ..................................................................................................... 4-22 4.3.2 cable (CT1/PRI Interface) ..................................................................................... 4-23 4.3.3 channel-set (CT1/PRI Interface) ........................................................................... 4-24
3Com Corporation ii
Table of Contents
4.3.4 clock (CT1/PRI Interface)...................................................................................... 4-25 4.3.5 code (CT1/PRI Interface) ...................................................................................... 4-25 4.3.6 controller t1............................................................................................................ 4-26 4.3.7 display controller t1 ............................................................................................... 4-27 4.3.8 fdl........................................................................................................................... 4-27 4.3.9 frame-format (CT1/PRI Interface) ......................................................................... 4-28 4.3.10 idlecode (in CT1/PRI Interface View) .................................................................. 4-29 4.3.11 itfcode (in CT1/PRI Interface View)..................................................................... 4-29 4.3.12 loopback (CT1/PRI Interface).............................................................................. 4-30 4.3.13 pri-set (CT1/PRI Interface) .................................................................................. 4-31 4.3.14 sendloopcode ...................................................................................................... 4-32 4.4 E1-F Interface Configuration Commands ........................................................................ 4-33 4.4.1 display fe1 serial.................................................................................................... 4-33 4.4.2 fe1 clock ................................................................................................................ 4-35 4.4.3 fe1 code................................................................................................................. 4-35 4.4.4 fe1 frame-format.................................................................................................... 4-36 4.4.5 fe1 loopback .......................................................................................................... 4-36 4.4.6 fe1 timeslot-list ...................................................................................................... 4-37 4.4.7 fe1 unframed ......................................................................................................... 4-38 4.5 T1-F Interface Configuration Commands ........................................................................ 4-39 4.5.1 display ft1 serial..................................................................................................... 4-39 4.5.2 ft1 cable................................................................................................................. 4-40 4.5.3 ft1 clock ................................................................................................................. 4-41 4.5.4 ft1 code.................................................................................................................. 4-41 4.5.5 ft1 frame-format..................................................................................................... 4-42 4.5.6 ft1 loopback ........................................................................................................... 4-43 4.5.7 ft1 timeslot-list ....................................................................................................... 4-43 4.5.8 ft1 alarm-threshold ................................................................................................ 4-44 4.6 Fundamental CE3 Interface Configuration Commands................................................... 4-45 4.6.1 clock (CE3 Interface)............................................................................................. 4-45 4.6.2 controller e3........................................................................................................... 4-46 4.6.3 display controller e3 .............................................................................................. 4-47 4.6.4 e1 channel-set....................................................................................................... 4-48 4.6.5 e1 set clock ........................................................................................................... 4-49 4.6.6 e1 set frame-format............................................................................................... 4-50 4.6.7 e1 set loopback ..................................................................................................... 4-50 4.6.8 e1 shutdown .......................................................................................................... 4-51 4.6.9 e1 unframed .......................................................................................................... 4-52 4.6.10 loopback (CE3 Interface) .................................................................................... 4-53
Table of Contents
4.6.11 national-bit........................................................................................................... 4-53 4.6.12 using (CE3 Interface) .......................................................................................... 4-54 4.7 Fundamental CT3 Interface Configuration Commands ................................................... 4-55 4.7.1 cable (CT3 Interface) ............................................................................................ 4-55 4.7.2 clock (CT3 Interface)............................................................................................. 4-56 4.7.3 controller t3............................................................................................................ 4-56 4.7.4 crc.......................................................................................................................... 4-57 4.7.5 frame-format (CT3 Interface) ................................................................................ 4-58 4.7.6 loopback (CT3 Interface)....................................................................................... 4-58 4.7.7 t1 channel-set........................................................................................................ 4-59 4.7.8 t1 set clock ............................................................................................................ 4-60 4.7.9 t1 set frame-format................................................................................................ 4-61 4.7.10 t1 set loopback .................................................................................................... 4-61 4.7.11 t1 shutdown ......................................................................................................... 4-62 4.7.12 t1 unframed ......................................................................................................... 4-63 4.7.13 using (CT3 Interface) .......................................................................................... 4-64 4.7.14 display controller t3 ............................................................................................. 4-64 4.8 ISDN BRI Interface Configuration Commands ................................................................ 4-65 4.8.1 loopback (ISDN BRI Interface).............................................................................. 4-65 4.9 CPOS Interface Configuration Commands...................................................................... 4-66 4.9.1 clock ...................................................................................................................... 4-66 4.9.2 controller cpos ....................................................................................................... 4-67 4.9.3 display controller cpos........................................................................................... 4-67 4.9.4 display controller cpos e1...................................................................................... 4-70 4.9.5 display controller cpos t1....................................................................................... 4-71 4.9.6 e1 channel-set....................................................................................................... 4-73 4.9.7 e1 set clock ........................................................................................................... 4-75 4.9.8 e1 set frame-format............................................................................................... 4-75 4.9.9 e1 set loopback ..................................................................................................... 4-76 4.9.10 e1 shutdown ........................................................................................................ 4-77 4.9.11 e1 unframed ........................................................................................................ 4-78 4.9.12 flag....................................................................................................................... 4-79 4.9.13 frame-format........................................................................................................ 4-80 4.9.14 loopback .............................................................................................................. 4-80 4.9.15 multiplex mode .................................................................................................... 4-81 4.9.16 shutdown ............................................................................................................. 4-82 4.9.17 t1 channel-set...................................................................................................... 4-83 4.9.18 t1 set clock .......................................................................................................... 4-84 4.9.19 t1 set frame-format.............................................................................................. 4-85
3Com Corporation iv
Table of Contents
4.9.20 t1 set loopback .................................................................................................... 4-85 4.9.21 t1 shutdown ......................................................................................................... 4-86 4.9.22 t1 unframed ......................................................................................................... 4-87 4.10 POS Interface Configuration Commands ...................................................................... 4-88 4.10.1 clock .................................................................................................................... 4-88 4.10.2 crc........................................................................................................................ 4-89 4.10.3 display interface pos ........................................................................................... 4-89 4.10.4 flag....................................................................................................................... 4-90 4.10.5 frame-format........................................................................................................ 4-91 4.10.6 link-protocol ......................................................................................................... 4-91 4.10.7 loopback .............................................................................................................. 4-92 4.10.8 mtu (POS Interface) ............................................................................................ 4-93 4.10.9 scramble.............................................................................................................. 4-93 Chapter 5 ATM/DSL Interface Configuration Commands ......................................................... 5-1 5.1 ATM/DSL Interface Commands (Public) ........................................................................... 5-1 5.1.1 display interface atm ............................................................................................... 5-1 5.1.2 reset atm ................................................................................................................. 5-2 5.2 IMA-E1/T1 Interface Configuration Commands................................................................. 5-2 5.2.1 cable........................................................................................................................ 5-2 5.2.2 clock ........................................................................................................................ 5-3 5.2.3 code......................................................................................................................... 5-4 5.2.4 differential-delay ...................................................................................................... 5-5 5.2.5 display interface ima-group ..................................................................................... 5-5 5.2.6 display status interface ima-group .......................................................................... 5-7 5.2.7 frame-format............................................................................................................ 5-8 5.2.8 frame-length ............................................................................................................ 5-9 5.2.9 ima ima-group ......................................................................................................... 5-9 5.2.10 ima-clock ............................................................................................................. 5-10 5.2.11 ima-test................................................................................................................ 5-11 5.2.12 interface atm........................................................................................................ 5-12 5.2.13 interface ima........................................................................................................ 5-12 5.2.14 loopback .............................................................................................................. 5-13 5.2.15 min-active-links.................................................................................................... 5-14 5.2.16 scramble.............................................................................................................. 5-14 5.3 ATM E3/T3 Interface Configuration Commands.............................................................. 5-15 5.3.1 cable...................................................................................................................... 5-15 5.3.2 clock ...................................................................................................................... 5-16 5.3.3 frame-format.......................................................................................................... 5-16 5.3.4 loopback ................................................................................................................ 5-17
3Com Corporation v
Table of Contents
5.3.5 scramble................................................................................................................ 5-18 5.4 ATM 25M Interface Configuration Commands ................................................................ 5-19 5.4.1 clock ...................................................................................................................... 5-19 5.4.2 loopback ................................................................................................................ 5-19 5.5 ATM OC-3c/STM-1 Interface Configuration Commands ................................................. 5-20 5.5.1 clock ...................................................................................................................... 5-20 5.5.2 frame-format.......................................................................................................... 5-21 5.5.3 loopback ................................................................................................................ 5-21 5.5.4 scramble................................................................................................................ 5-22 5.6 G.SHDSL Interface Configuration Commands ................................................................ 5-23 5.6.1 activate .................................................................................................................. 5-23 5.6.2 shdsl annex ........................................................................................................... 5-24 5.6.3 shdsl rate............................................................................................................... 5-24 5.6.4 shdsl snr ................................................................................................................ 5-25 5.6.5 shdsl margin .......................................................................................................... 5-26 5.6.6 display dsl configuration........................................................................................ 5-26 5.6.7 display dsl status ................................................................................................... 5-28 5.6.8 display dsl version ................................................................................................. 5-31 5.6.9 shdsl mode ............................................................................................................ 5-32 5.7 ADSL Interface Configuration Commands ...................................................................... 5-33 5.7.1 activate .................................................................................................................. 5-33 5.7.2 adsl standard......................................................................................................... 5-34 5.7.3 adsl tx_attenuation ................................................................................................ 5-36 5.7.4 display dsl configuration........................................................................................ 5-36 5.7.5 display dsl status ................................................................................................... 5-38 5.7.6 display dsl version ................................................................................................. 5-40 Chapter 6 Fundamental Logical Interface Configuration Commands ..................................... 6-1 6.1 WAN Subinterface Configuration Commands ................................................................... 6-1 6.1.1 interface................................................................................................................... 6-1 6.2 Ethernet Subinterface Configuration Commands .............................................................. 6-2 6.2.1 display vlan.............................................................................................................. 6-2 6.2.2 display vlan interface............................................................................................... 6-3 6.2.3 display vlan max-packet-process ............................................................................ 6-3 6.2.4 display vlan statistics interface................................................................................ 6-4 6.2.5 display vlan statistics vid ......................................................................................... 6-5 6.2.6 interface ethernet .................................................................................................... 6-5 6.2.7 max-packet-process................................................................................................ 6-6 6.2.8 reset vlan statistics interface ................................................................................... 6-7 6.2.9 reset vlan statistics vid ............................................................................................ 6-7
3Com Corporation vi
Table of Contents
6.2.10 vlan-type dot1q...................................................................................................... 6-8 6.3 Logical Channel Interface .................................................................................................. 6-8 6.3.1 interface logic-channel ............................................................................................ 6-8 6.4 Configuration Commands of Virtual Template and Virtual Access Interface..................... 6-9 6.4.1 broadcast-limit link .................................................................................................. 6-9 6.4.2 display interface virtual-template........................................................................... 6-10 6.4.3 display virtual-access ............................................................................................ 6-10 6.4.4 interface virtual-template....................................................................................... 6-11 6.5 MP-Group Interface Configuration Commands ............................................................... 6-12 6.5.1 display interface mp-group.................................................................................... 6-12 6.5.2 interface mp-group ................................................................................................ 6-13 6.6 Virtual Ethernet Interface Configuration Commands ....................................................... 6-13 6.6.1 display interface virtual-ethernet ........................................................................... 6-13 6.6.2 interface virtual-ethernet ....................................................................................... 6-14 6.6.3 mac-address.......................................................................................................... 6-15 6.7 Configuration Command of Loopback Interface and Null Interface................................. 6-15 6.7.1 display interface loopback..................................................................................... 6-15 6.7.2 display interface null.............................................................................................. 6-16 6.7.3 interface loopback ................................................................................................. 6-17 6.7.4 interface null .......................................................................................................... 6-18
Chapter 1 Interface Management Commands

1.1 Interface Management Commands
1.1.1 debugging physical
Syntax
debugging physical { all | error | event | packet } [ interface interface-type interface-number ] undo debugging physical { all | error | event | packet } [ interface interface-type interface-number ]
View
User view
Parameter
all: Enables all debugging. error: Enables error debugging. event: Enables event debugging. packet: Enables packet debugging. interface interface-type interface-number: Specifies an interface by its type and number.
Description
Use the debugging physical command to enable debugging of the physical module on the specified interface. Use the undo debugging physical command to disable debugging on the specified interface.
Example
None
1.1.2 description
Syntax
description interface-description
undo description
View
Interface view
Parameter
interface-description: A string of characters up to 80. It describes the interface and defaults to xxxxxx interface.
Description
Use the description command to describe the interface. Use the undo description command to restore the default. This command has no special purpose or function other than identifying an interface. Related command: display interface.
Example
# Change the description of the interface Ethernet 0/0/0 to 3Com Router Ethernet interface.
[3Com] interface ethernet 0/0/0 [3Com-Ethernet0/0/0] description 3Com Router ethernet interface
1.1.3 display brief interface

Syntax
display brief interface [ type [ number ] ] [ | { begin | include | exclude} text ]
View
Any view
Parameter
type: Interface type. number: Interface number. begin: Displays information that begins with the specified regular expression. include: Displays information that includes the specified regular expression. exclude: Displays information that excludes the specified regular expression. text: Specifies a regular expression.
Description
Use the display brief interface command to display summary information about a specified interface or all interfaces.
Example
# Display summary information about all interfaces, with the regular expression down included.
<Router> display brief interface | include down Interface Analogmodem2/0/0 Analogmodem2/1/0 Atm1/0/0/0 Aux0 Dialer0 Ethernet0/0/0 NULL0 Serial0/0/0 Serial3/0/0:0 DOWN DOWN UP DOWN DOWN Link DOWN DOWN DOWN DOWN UP DOWN UP (spoofing) DOWN PPP Protocol-link Protocol type PPP PPP ATM PPP PPP ETHERNET NULL PPP -----Main IP -----
UP (spoofing) UP (spoofing) DOWN DOWN UP (spoofing)
1.1.4 display interface

Syntax
display interface type number [ .sub-number ]
View
Any view
Parameter
type: Interface type, along with number identifies an interface. number: Interface number, along with type, identifies an interface. sub-number: Subinterface number.
Description
Use the display interface command to view the current running state and other information about an interface.
Executing this command displays the following information: Physical and protocol state of the interface Physical features of the interface (including operating mode, DTE/DCE, clock selection, external cable, and so on.) IP address of the interface Link layer protocol of the interface and its operating state and statistics. Statistics about the incoming and outgoing packets on the interface Related command: reset counters interface.
Example
# View the running state and the relevant information about Serial 0/0/0.
[3Com] display interface serial 0/0/0 Serial0/0/0 is up , line protocol is up
Description : Serial0/0/0 Interface Virtualbaudrate is 300 bps The Maximum Transmit Unit is 1500, The keepalive is 10(sec) Internet protocol processing : disabled Link layer protocol is PPP LCP opened, MPLSCP stopped FIFO queuing: FIFO: 0/75/0 (Outbound queue:Size/Length/Discards)
Physical layer is synchronous,Baudrate is 64000 bps Interface is DCE, Cable type is V35 5 minutes input rate 0.56 bytes/sec, 0.04 packets/sec 5 minutes output rate 0.66 bytes/sec, 0.05 packets/sec 51 packets input, 640 bytes, 0 no buffers
55 packets output, 700 bytes, 0 no buffers 0 input errors, 0 CRC, 0 frame errors 0 overrunners, 0 aborted sequences, 0 input no buffers DCD=UP DTR=UP DSR=UP RTS=UP CTS=UP
Table 1-1 Description on the displayed information Field Serial0 is up line protocol is up 5 minutes input rate Description Physical layer state of the interface Link layer state of the interface The input rate of the interface within the last five minutes
Field 5 minutes output rate FIFO queueing: FIFO 51 packets input, 640 bytes, 0 no buffers 55 packets output, 700 bytes, 0 no buffers input errors:0, CRC:0, frame errors:0 DCD=UP DTR=UP DSR=UP RTS=UP CTS=UP
Description The output rate of the interface within the last five minutes Type of the output queue on the interface Packets and bytes received by the interface and the packets discarded due to the unavailability of receive-buffer. Packets and bytes sent by the interface and the packets discarded due to the unavailability of send-buffer. The received packets that contain errors, including CRC errors and frame errors. State of the physical electrical signals DCD, DTR, DSR, RTS, and CTS
1.1.5 flow-interval
Syntax
flow-interval seconds undo flow-interval
View
System view
Parameter
seconds: Statistic interval in the range 1 to 1500 seconds. It defaults to 5 seconds.
Description
Use the flow-interval command to configure the interval for measuring the average rate of the interfaces. Use the undo flow-interval command to restore the default. Related command: display interface.
Example
# Set the interval for measuring the average interface rate to 10 seconds.
[3Com] flow-interval 10
# Display information on Ethernet0/0/0.

[3Com] display interface Ethernet 0/0/0 Ethernet0/0/0 current state :UP Line protocol current state :UP Description : Ethernet0/0/0 Interface
The Maximum Transmit Unit is 1500, Hold timer is 10(sec) Internet Address is 202.82.28.28/28 Internet Address is 10.0.103.254/24 Sub Internet Address is 10.0.102.254/24 Sub IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is 00e0-fc12-384f Media type is twisted pair, loopback not set, promiscuous mode not set 100Mb/s, Full-duplex, link type is force link Output flow-control is disabled, input flow-control is disabled Output queue : (Urgent queue : Size/Length/Discards) 0/50/0
Output queue : (Protocol queue : Size/Length/Discards) 0/500/0 Output queue : (FIFO queuing : Size/Length/Discards) 0/75/0
Last 30 seconds input rate 138.36 bytes/sec, 1.63 packets/sec Last 30 seconds output rate 5.59 bytes/sec, 0.13 packets/sec Input: 492731 packets, 84128872 bytes, 492731 buffers 156266 broadcasts, 145584 multicasts, 0 pauses 79 errors, 78 runts, 0 giants 1 crc, 0 align errors, 0 overruns 0 dribbles, 0 drops, 0 no buffers Output:230681 packets, 165591360 bytes, 230683 buffers 10916 broadcasts, 0 multicasts, 0 pauses 0 errors, 0 underruns, 0 collisions 0 deferred, 0 lost carriers
1.1.6 interface
Syntax
interface type number [ .sub-number ] undo interface type number [ .sub-number ]
View
System view
Parameter
type: Interface type. Table 1-2 lists the interfaces that 3Com Router Software supports so far. number: Interface number. 3Com Router Software numbers the interfaces separately by interface type, with the numbers of each type of interfaces beginning at 0 or 1. sub-number: Subinterface number, which is separated from the main interface number by a dot (.).
Description
Use the interface command to enter the specified interface view, or create a logical interface or subinterface. Use the undo interface command to delete a specified logical interface or subinterface. Table 1-2 Interfaces supported by 3Com Router Software Interface ATM AUX AnalogModem Async Bri Bridge-Template controller e1 controller t1 controller e3 controller t3 Dialer Ethernet gigabitethernet Logic-Channel Loopback NULL MFR Serial Description ATM interface AUX interface Analog modem interface Asynchronous serial interface ISDN BRI interface Bridge-group virtual interface E1 interface T1 interface E3 interface T3 interface Dialer interface Ethernet interface Gigabit Ethernet interface Logical-channel interface Loopback interface Null interface Multi-link FR (MFR) interface Synchronous serial interface
Attribute Physical interface Physical interface Physical interface Physical interface Physical interface Logical interface Physical interface Physical interface Physical interface Physical interface Logical interface Physical interface Physical interface Logical interface Logical interface Logical interface Logical interface Physical interface
Virtual-Ethernet Virtual-Template Tunnel
VE interface Virtual-template interface Tunnel interface
Logical interface Logical interface Logical interface
Remembering the interface numbering convention mentioned earlier, you should know that the name of a physical interface is represented by interface type + interface number. For example, Ethernet0/0/0 represents the Ethernet interface numbered 0/0/0, and Serial0/0/0.1 the first subinterface on the interface Serial0/0/0, and interface Serial3/0/0:2 the second channel set of the CE1/PRI interface (namely controller interface) numbered 3/0/0. The name of a logical interface is represented by interface type + interface number, for example, tunnel 0. However, you can shorten the type portion in the interface name by inputting only the leading conflict-free letters, for example, e0/0/0 for Ethernet 0/0/0 and s0/0/0.1 for Serial 0/0/0.1. You can enter the view of the desired physical interface, and create logical interfaces or subinterfaces as needed by executing the interface command. You can create subinterfaces for an Ethernet interface or a serial interface encapsulated with X.25 or Frame Relay (FR). The subinterface numbered 0 is the actually corresponding main interface. Note that executing the undo interface command deletes the defined logical interfaces (such as Dialer, tunnel, and virtual-template interfaces) and subinterfaces.
Example
# Enter the Ethernet interface view in system view.
[3Com]interface ethernet 0/0/0 [3Com-Ethernet0/0/0]
# Switch from Ethernet0/0/0 view to the view of the subinterface Serial0/0/0.1.

[3Com-Ethernet0/0/0]interface serial0/0/0.1 [3Com-Serial0/0/0.1]
1.1.7 reset counters interface

Syntax
reset counters interface [ type number ]
View
User view
Parameter
type: Interface type, along with number identifies an interface. number: Interface number, along with type identifies an interface.
Description
Use the reset counters interface command to clear statistics about the transmitted and received packets, IP, ARP, and ICMP on the specified interface or all interfaces. To count the traffic size on an interface within some period, you need to clear the existing statistics on the interface before making a new count. Related command: display interface.
Example
# Clear the statistics on Serial 0/0/0.
<3Com> reset counters interface serial 0/0/0
1.1.8 restart
Syntax
restart
View
Interface view
Parameter
None
Description
Use the restart command to reset the physical interface. In special circumstances, after modifying the operating parameters on an interface for example, the modification will not take effect immediately. To make new configurations take effect, you must perform the commands shutdown and undo shutdown on the interface, or alternatively the restart command. In remote management, this command can reset the managed interface without disrupting management.
Example
# Reset the interface Ethernet 1/0/0.
[3Com-Ethernet1/0/0] restart
1.1.9 shutdown
Syntax
shutdown undo shutdown
View
Interface view
Parameter
None
Description
Use the shutdown command to shut down the interface. Use the undo shutdown command to enable the interface. This command can take effect not only on physical interfaces, but also on loopback, tunnel, and MFR interfaces. In special circumstances, after modifying the operating parameters on an interface for example, the modification will not take effect immediately. To make new configurations take effect, you must perform the commands shutdown and undo shutdown on the interface, or alternatively the restart command. Related command: display interface.
Example
# Shut down Ethernet 0/0/0.
[3Com-Ethernet0/0/0] shutdown %Dec 15 13:48:39:630 2004 28-31 PHY/2/PHY: Ethernet0/0: change status to down
%Dec 15 13:48:39:730 2004 28-31 IFNET/5/UPDOWN:Line protocol on the interface Et hernet0/0 is DOWN
Chapter 2 Fundamental Ethernet Interface Configuration Commands

2.1 Fundamental Ethernet Interface Configuration Commands
2.1.1 display interface ethernet
Syntax
display interface { ethernet | gigabitethernet } interface-number
View
Any view
Parameter
ethernet: Displays state about the FE interfaces. gigabitethernet: Displays state about the GE interfaces. interface-number: Interface number. If no interface is specified, the configuration and state information on all the interfaces is displayed.
Description
Use the display interface { ethernet | gigabitethernet } command to view information about Ethernet interfaces, such as their configurations and current running state.
Example
# Display state information about the Ethernet interface 2/0/0.
<3Com> display interface ethernet 2/0/0 Ethernet2/0/0 current state : UP Line protocol current state : UP Description : Ethernet2/0/0 Interface The Maximum Transmit Unit is 1500, Hold timer is 10(sec) Internet Address is 172.31.29.103/16 IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is 00e0.fc06.3085 Media type is twisted pair, loopback not set, promiscuous mode not set 100Mb/s-speed mode,Full-duplex mode,link type is autonegotiation Output flow-control is unsupported, input flow-control is unsupported

0/500/0 0/75/0
Output queue : (Urgent queue : Size/Length/Discards) Output queue : (FIFO queuing : Size/Length/Discards)
Last 5 minutes input rate 227.13 bytes/sec, 2.67 packets/sec Last 5 minutes output rate 0.00 bytes/sec, 0.00 packets/sec Input: 542665 packets, 47721004 bytes 271460 broadcasts, 271205 multicasts 0 errors, 0 runts, 0 giants, 0 CRC, 0 align errors, 0 overruns, 0 dribbles, 0 aborts, 0 no buffers Output:0 packets, 0 bytes 0 errors, 0 underruns, 0 collisions 0 deferred
# Display the running state and relevant information on the GE interface 1/0/1.
[3Com] display interface GigabitEthernet 1/0/1 GigabitEthernet1/0/1 current state : DOWN IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is 00e0-fc00-1500 The Maximum Transmit Unit is 1500 Media type is twisted pair, loopback not set Port hardware type is 1000_BASE_SFP 100Mbps-speed mode, unknown-duplex mode Link speed type is force link, link duplex type is autonegotiation Flow-control is not enabled The Maximum Frame Length is 1500 Broadcast MAX-ratio: 100% Unicast MAX-ratio: 100% Multicast MAX-ratio: 100% Allow jumbo frame to pass PVID: 1 Mdi type: across Port link-type: access Tagged VLAN ID : none
Untagged VLAN ID : 1 Last 300 seconds input: Last 300 seconds output: Input(total): 0 packets/sec 0 bytes/sec 0 packets/sec 0 bytes/sec
0 packets, 0 bytes
0 broadcasts, 0 multicasts, 0 pauses Input(normal): 0 packets, 0 bytes
0 broadcasts, 0 multicasts, 0 pauses Input: 0 input errors, 0 runts, 0 giants, 0 throttles, 0 CRC

0 frame,

0 overruns, 0 aborts, 0 ignored, 0 parity errors
Output(total): 0 packets, 0 bytes 0 broadcasts, 0 multicasts, 0 pauses Output(normal): 0 packets, 0 bytes 0 broadcasts, 0 multicasts, 0 pauses Output: 0 output errors, 0 underruns, 0 buffer failures
0 aborts, 0 deferred, 0 collisions, 0 late collisions 0 lost carrier, 0 no carrier
Note: For an SFP port, the detailed information about the optic module including vender type, wavelength, transmission distance, and serial number are as follows: The transceiver Detail Information: The transceiver type: Xenpak The standard compliance: 1000BASE_CX Transfers distance(m) :9um Fiber: 0 50um Fiber: 0 625um Fiber: 1000 copper line: 100 Serial Num is 123456789 Vender Name is 3com 3C Number is 123456789
2.1.2 duplex
Syntax
duplex { full | half | negotiation } undo duplex
View
Parameter
full: Sets the Ethernet interface to work in full duplex. half: Sets the Ethernet interface to work in half duplex.
negotiation: Sets the Ethernet interface to work in auto-negotiation mode.
Description
Use the duplex command to set the operating mode of the Ethernet interface. Use the undo duplex command to restore the default operating mode of the Ethernet interface. By default, the Ethernet interface is working in auto-negotiation mode. Connected to a hub, the Ethernet interface on a router must be specified to work in half-duplex mode. Connected to a network device supporting full-duplex, a LAN Switch for example, it must be specified to work in full-duplex mode. FE and GE electrical interfaces can support both full-duplex and half-duplex, whereas FE and GE optical interfaces can only work in full-duplex mode. Before setting the Ethernet interface to work in auto-negotiation mode you must make sure that the connected remote end has been working in auto-negotiation mode. If this cannot be guaranteed, the two parties are recommended to use the forced setting for consistency in operating mode. Related command: speed, display interface.
Example
# Set the Ethernet interface to work in full duplex.
[3Com-Ethernet0/0/0] duplex full
2.1.3 flow-control
Syntax
flow-control undo flow-control
View
Parameter
None
Description
Use the flow-control command to enable flow control on the Ethernet interface, which is useful only when the peer end also supports flow control.
Use the undo flow-control command to restore the default. By default, flow control is disabled. When using this command keep the configuration the same as that of the peer end.
Example
# Enable flow control on GE interface 0/0/0.
<3Com> system-view [3Com] interface gigabitethernet 0/0/0 [3Com-GigabitEthernet0/0/0] flow-control negotiation
2.1.4 force-link
Syntax
force-link undo force-link
View
GE interface view
Parameter
None
Description
Use the force-link command to enable the GE interface to work in force mode. Use the undo force-link command to restore the default operating mode. The default operating mode is negotiation. GE optical interfaces provide two operating modes, negotiation and force. In negotiation mode, the interface chip checks negotiation code, negotiating the format of the PAUSE frame and the peer state (that is, whether it is faulty). In force mode, no negotiation stream is present on the line. The interface chip decides whether an interface can be brought up depending on how much light intensity it reads. You must set the two ends to work in the same operating mode. Any inconsistency can prevent the interface adopting negotiation mode from going up.
Example
# Enable negotiation on the GE interface 0/0/0.
[Router-GigabitEthernet0/0/0] force-link
2.1.5 loopback (Ethernet/GE Interface)

Syntax
loopback undo loopback
View
Parameter
None
Description
Use the loopback command to enable local loopback on the Ethernet interface. Use the undo loopback command to disable local loopback on the Ethernet interface. By default, local loopback is disabled on the Ethernet interface. You need to enable local loopback on the Ethernet interface only when testing some special functions.
Note: The Ethernet interface works in full duplex mode after you enable loopback. The original mode resumes after loopback is disabled.
Example
# Enable local loopback on the FE interface.
[3Com-Ethernet0/0/0]loopback
2.1.6 mtu (Ethernet/GE Interface)

Syntax
mtu size undo mtu
View
Parameter
size: Maximum transmission unit (MTU) size of the Ethernet interface, which is in bytes. It is in the range 46 to 1500 when the frame format is Ethernet_II, and in the range 46 to 16384 when the frame format is GE.
Description
Use the mtu command to set the MTU size of the Ethernet interface. Use the undo mtu command to restore the default or 1500 bytes. The MTU setting of an Ethernet interface can affect the assembly and fragmentation of IP packets on the interface. Related command: display interface.
Example
# Set MTU of the FE interface 0/0/0 to 1492.
[3Com-Ethernet0/0/0] mtu 1492
2.1.7 promiscuous
Syntax
promiscuous undo promiscuous
View
Parameter
None
Description
Use the promiscuous command to set the Ethernet interface to operate in promiscuous mode. Use the undo promiscuous command to disable the Ethernet interface to operate in promiscuous mode. By default, the Ethernet interface is operating in non-promiscuous mode.
When the Ethernet interface is operating in promiscuous mode, it receives all correct Ethernet packets without checking their MAC addresses, This mode is configured when network listening applies. After you enable the bridging function on an Ethernet interface and add it to a bridge-set, the interface enters promiscuous mode automatically. After removed from the bridge-set, the interface enters non-promiscuous mode automatically.
Example
# Set interface ethernet 0/0/0 to operate in promiscuous mode.
[3Com-Ethernet0/0/0] promiscuous
2.1.8 speed
Syntax
speed { 10 | 100 | 1000 | negotiation } undo speed
View
Parameter
10: Forces the Ethernet interface to work at 10 Mbps. 100: Forces the Ethernet interface to work at 100 Mbps. 1000: Forces the Ethernet interface to work at 1000 Mbps (only applied to GE interfaces). negotiation: Sets the Ethernet interface to work in auto-negotiation mode.
Description
Use the speed command to set the operating speed of the Ethernet interface. Use the undo speed command to restore the default operating speed of the Ethernet interface. By default, the Ethernet interface is working in auto-negotiation mode. Before setting the Ethernet interface to work in auto-negotiation mode make sure that the connected end is working in auto-negotiation mode. If you cannot check, manually set the same operating mode at the two ends. You can set the rate of FE electrical interface to 10 Mbps, 100 Mbps, or auto-sensing and the rate of GE electrical interface to 10 Mbps, 100 Mbps, 1000 Mbps, or auto-sensing.
Nevertheless, the rate of the FE optical interface is fixed to 100Mbps and the rate of GE optical interface is fixed to 1000Mbps, which cannot be changed by using commands.
Note: As for GE electrical interface, the operating rate of 1000Mbps and the mode of half-duplex are mutually exclusive. Do not set these two values to be the same time.
Related command: duplex, display interface.
Example
# Set the FE interface to work in 10Base-T mode.
[3Com-Ethernet0/0/0] speed 10
Chapter 3 Layer 2 Ethernet Port Configurat ion Commands
Chapter 3 Layer 2 Ethernet Port Configuration Commands

3.1 Layer 2 Ethernet Port Configuration Commands
3.1.1 broadcast-suppression
Syntax
broadcast-suppression pct undo broadcast-suppression
View
Ethernet port view
Parameter
pct: Specifies the maximum wire speed ratio of the broadcast traffic allowed on the Ethernet port. It ranges from 5 to 100 and defaults to 100. The smaller the ratio is, the smaller the broadcast traffic allowed.
Description
Use the broadcast-suppression command to restrict the broadcast traffic size on the port. Once broadcast traffic exceeds the specified value, the system starts discarding broadcast packets until the broadcast traffic decreases below the acceptable degree. Use the undo broadcast-suppression command to restore the default (100), allowing all broadcast traffic to pass through without broadcast suppression. Related command: display VLAN.
Example
# Allow 20% of broadcast traffic to pass, meaning 80% of broadcast traffic is suppressed on the port.
[3Com-Ethernet1/0/1] broadcast-suppression 20
3.1.2 description
Syntax
description text undo description
View
Ethernet port view
Parameter
text: Port description, a string of up to 80 characters.
Description
Use the description command to configure port description. Identifying a port is the only function of this command. Use the undo description command to restore the default port description, that is, port name plus interface.
Example
# Set the description of port Ethernet 1/0/1 to Ethernet-interface.
[3Com-Ethernet1/0/1] description Ethernet-interface

Syntax
display interface [ interface_type | interface_type interface_num | interface_name ]
View
Any view
Parameter
interface_type: Port type. interface_num: Port number. interface_name: Port name, in interface_type interface_num format.
Description
Use the display interface command to view configuration information on the port.
If port type and port number are not specified when displaying the port information, information on all the ports is displayed. If only the port type is specified, information on all the ports of this type is displayed. If both port type and port number are specified, information on the specified port is displayed.
Example
# Display configuration information on port Ethernet 1/0/1.
<3Com> display interface ethernet1/0/1 Ethernet1/0/1 current state :DOWN Line protocol current state :DOWN Description : Ethernet1/0/1 Interface loopback not set
Media type is twisted pair, 100Mb/s, Full-duplex,
link type is autonegotiation
Mac aging time is 300 seconds, Broadcast MAX-ratio: 100 Output flow-control is disabled, input flow-control is disabled PVID : 1 Port link-type : access Tagged VLAN ID : none Untagged VLAN ID : 1 Last 300 seconds input rate 0.00 bytes/sec, 0.00 packets/sec Last 300 seconds output rate 0.00 bytes/sec, 0.00 packets/sec Input: 6 packets, 574 bytes, 0 buffers 0 broadcasts, 0 multicasts, 0 pauses 0 errors, 0 runts, 0 giants 0 crc, 0 align errors, 0 overruns 0 dribbles, 0 drops, 0 no buffers Output:18095 packets, 5951855 bytes, 0 buffers 18090 broadcasts, 0 multicasts, 0 pauses 0 errors, 0 underruns, 0 collisions 0 deferred, 0 lost carriers
Table 3-1 Description on the fields of the display interface command Field Ethernet1/0/1 current state Line protocol current state Description Media type Description Current state of the port, enabled or disabled State about the link layer protocol on the port Port description Media type
Field loopback not set Port hardware type 100Mbps-speed full-duplex mode mode,
Description State about loopback on the port Hardware type of the port Both duplex mode and port rate are set to auto-negotiation, but full-duplex and 100 Mbps are adopted as the result of negotiation with the peer. Flow control setting on the port Aging time of MAC addresses Broadcast storm suppression ratio on the port Output flow control and input flow control are disabled. Default VLAN ID of the port Link type of the port Indicates the VLAN from which the packets must be tagged. Indicates the VLAN from which the packets are not to be tagged. 0 0 The input and output rates as well as the input and output packets in the last 300 seconds on the port
Link speed type is autonegotiation, link duplex type is autonegotiation Flow-control is not supported Mac-aging time Broadcast MAX-ratio Output flow-control is disabled, input flow-control is disabled PVID Port link-type Tagged VLAN ID Untagged VLAN ID Last 300 seconds output: packets/sec 0 bytes/sec Last 300 seconds input: packets/sec 0 bytes/sec
Input: 6 packets, 574 bytes, 0 buffers 0 broadcasts, 0 multicasts, 0 pauses 0errors,0runts,0giants 0 crc, 0 align errors, 0 overruns 0 dribbles, 0 drops, 0 no buffers Output: 0 packets, 0 bytes,0 buffers 0 broadcasts, 0 multicasts, 0 pauses 0 errors, 0 underruns, 0 collisions 0 deferred, 0 lost carriers
Statistics about input/output packets and errors on the port
3.1.4 display port

Syntax
display port { hybrid | trunk }
View
Any view
Parameter
hybrid: Displays hybrid ports. Trunk: Displays trunk ports.
Description
Use the display port command to check whether the current system has hybrid or trunk ports. If there is any, its port name is displayed.
Example
# Display the hybrid ports in the current system.
<3Com> display port hybrid Now, the following hybrid ports exist: Ethernet1/0/1 Ethernet1/0/2
The output indicates that the current system has two hybrid ports, Ethernet 1/0/1 and Ethernet 1/0/2.
3.1.5 duplex
Syntax
duplex { full | half | negotiation } undo duplex
View
Ethernet port view
Parameter
full: The port is in full duplex mode. half: The port is in half duplex mode. negotiation: The port is in auto-negotiation mode.
Description
Use the duplex command to configure the duplex mode of the Ethernet port. Use the undo duplex command to restore the default duplex mode of the port, that is, auto-negotiation. When the port is connected to a Hub, it must operate in half duplex mode. When the port is connected to a full duplex-supported network device that is operating in full duplex mode, a LAN switch for example, it must operate in full duplex also. When setting the port to auto-negotiation mode, you must ensure that the connected port is operating in the same mode. If not you must set both ports to operate in the same mode manually. Related command: speed.
Example
# Set duplex mode on port Ethernet1/0/1 to auto-negotiation.
[3Com-Ethernet1/0/1] duplex negotiation
3.1.6 flow-control
Syntax
flow-control undo flow-control
View
Ethernet port view
Parameter
None
Description
Use the flow-control command to enable flow control on the Ethernet port to avoid packet drop when congestion occurs. Use the undo flow-control command to disable flow control. By default, flow control on the Ethernet port is disabled.
Example
# Enable flow control on port Ethernet1/0/1.

[3Com-Ethernet1/0/1] flow-control
3.1.7 interface
Syntax
interface { interface_type interface_num | interface_name }
View
System view
Parameter
interface_type: Port type. It can be Ethernet only. interface_num: Port number. interface_name: Port name, in interface_type interface_num format.
Description
Use the interface command to enter Ethernet port view. Before you can configure an Ethernet port you must enter its view first using this command.
Example
# Enter the view of Ethernet 1/0/1 port.
[3Com] interface ethernet1/0/1
3.1.8 loopback
Syntax
View
Ethernet port view
Parameter
None
Description
Use the loopback command to enable loopback on the Ethernet port for test purposes.
Use the undo loopback command to disable loopback on the Ethernet port. By default, loopback is disabled. Related command: display interface.
Example
# Enable loopback on port Ethernet 1/0/1.
[3Com-Ethernet1/0/1] loopback
3.1.9 mac-address timer aging

Syntax
mac-address timer aging {age-time | no-age } undo mac-address timer aging
View
Ethernet port view
Parameter
age-time: Address aging time on the port, in the range 10 to 1000000 seconds. It defaults to 300 seconds. no-age: The MAC addresses are never aged out of the table on the port.
Description
Use the mac-address timer aging command to set the aging timer for the MAC address table on the port. Use the undo mac-address timer aging command to restore the default, which is 300 seconds.
Example
# Set the aging timer for the MAC address table on port Ethernet 1/0/1 to 20 seconds.
[3Com-ethernet1/0/1] mac-address timer aging 20
3.1.10 port access vlan

Syntax
port access vlan vlan_id undo port access vlan
View
Ethernet port view
Parameter
vlan_id: VLAN ID defined in IEEE 802.1Q, in the range 2 to 4094.
Description
Use the port access vlan command to add the port whose link type is access to a specified VLAN. Use the undo port access vlan command to remove the access port from the specified VLAN.
Example
# Add port Ethernet 1/0/1 to VLAN 3.
[3Com-Ethernet1/0/1] port access vlan 3
3.1.11 port hybrid pvid vlan

Syntax
port hybrid pvid vlan vlan_id undo port hybrid pvid
View
Ethernet port view
Parameter
vlan_id: VLAN ID defined in IEEE802.1Q, in the range 1 to 4094. It defaults to 1.
Description
Use the port hybrid pvid vlan command to assign a default VLAN ID to the hybrid port. Use the undo port hybrid pvid command to restore the default VLAN ID of the hybrid port. To ensure correct transmission of packets, the default VLAN ID of the hybrid port must be the same as the one used by the connected hybrid port. Related command: port link-type.
Example
# Set the default VLAN ID of hybrid port Ethernet 1/0/1 to 100.
[3Com-Ethernet1/0/1] port hybrid pvid vlan 100
3.1.12 port hybrid vlan

Syntax
port hybrid vlan vlan_id_list { tagged | untagged } undo port hybrid vlan vlan_id_list
View
Ethernet port view
Parameter
vlan_id_list: Equals [ vlan_id1 [ to vlan_id2 ] ]&<1-10>. It specifies a range of contiguous or discrete VLANs to which the hybrid port is to be assigned. The vlan_id ranges from 1 to 4094. &<1-10> indicates that the former arguments can be input 10 times repeatedly at most. tagged: The packets from the specified VLAN are to be tagged. untagged: Packets from the specified VLAN are not to be tagged.
Description
Use the port hybrid vlan command to assign the hybrid port to the specified VLANs, which must have existed in the system. Use the undo port hybrid vlan command to remove the hybrid port from the specified VLANs. A hybrid port can belong to multiple VLANs. If multiple VLAN lists are configured using the port hybrid vlan vlan_id_list { tagged | untagged } command, all the VLANs of these list can pass through the port. Related command: port link-type.
Example
# Assign hybrid port Ethernet 1/0/1 to VLANs 2, 4 and 50 through 100. All packets from these VLANs are to be tagged.
[3Com-Ethernet1/0/1] port hybrid vlan 2 4 50 to 100 tagged
3.1.13 port link-type

Syntax
port link-type { access | hybrid | trunk } undo port link-type
View
Ethernet port view
Parameter
access: Sets the link type of the port to access. hybrid: Sets the link type of the port to hybrid. trunk: Sets the link type of the port to trunk.
Description
Use the port link-type command to configure the link type of the Ethernet port. Use the undo port link-type command to restore the default link type of the port, that is, access.
Example
# Set the link type of port Ethernet 1/0/1 to trunk.
[3Com-Ethernet1/0/1] port link-type trunk
3.1.14 port trunk permit vlan

Syntax
port trunk permit vlan { vlan_id_list | all } undo port trunk permit vlan { vlan_id_list | all }
View
Ethernet port view
Parameter
vlan_id_list: Equals [ vlan_id1 [ to vlan_id2 ] ]&<1-10>. It specifies a range of contiguous or discrete VLANs to which the hybrid port is to be assigned. The vlan_id ranges from 2 to 4094. &<1-10> indicates that the former arguments can be input 10 times repeatedly at most.
all: Assign the trunk port to all VLANs.
Description
Use the port trunk permit vlan command to assign the trunk port to the specified VLANs. Use the undo port trunk permit vlan command to remove the trunk port from the specified VLANs. A trunk port can belong to multiple VLANs. If multiple VLAN lists are configured using the port trunk permit vlan command, all the VLANs of the list can pass through the port. This command can be used on the condition that the VLAN specified using vlan_id is not the default. Related command: port link-type.
Example
# Assign trunk port Ethernet 1/0/1 to VLANs 2, 4, and 50 through 100.
[3Com-Ethernet1/0/1] port trunk permit vlan 2 4 50 to 100
3.1.15 port trunk pvid vlan

Syntax
port trunk pvid vlan vlan_id undo port trunk pvid
View
Ethernet port view
Parameter
vlan_id: VLAN ID defined in IEEE802.1Q, in the range 1 to 4094. It defaults to 1.
Description
Use the port trunk pvid vlan command to configure the default VLAN ID of the trunk port. Use the undo port trunk pvid command to restore the default VLAN ID of the port. To ensure correct transmission of packets, the default VLAN ID of the hybrid port must be the same as the one used by the connected hybrid port. Related command: port link-type.
Example
# Set the default VLAN ID of trunk port Ethernet 1/0/1 to 100.
[3Com-Ethernet1/0/1] port trunk pvid vlan 100
3.1.16 reset counters interface

Syntax
reset counters interface [ interface_type | interface_type interface_num |
interface_name ]
View
User view
Parameter
interface_type: Port type. interface_num: Port number. interface_name: Port name in interface_type interface_num format. For parameter description, refer to the interface command.
Description
Use the reset counters interface command to reset the statistics about the port. If port type and port number are not specified when clearing the statistics, information on all the ports is cleared. If only port type is specified, information on all the ports of this type is cleared. If both port type and port number are specified information on the specified port is cleared.
Example
# Clear statistics about port Ethernet 1/0/1.
<3Com> reset counters interface ethernet1/0/1
3.1.17 shutdown
Syntax
View
Ethernet port view
Parameter
None
Description
Use the shutdown command to shut down the Ethernet port. Use the undo shutdown command to enable the Ethernet port. By default, the Ethernet port is enabled.
Example
# Enable port Ethernet 1/0/1.
[3Com-Ethernet1/0/1] undo shutdown
3.1.18 speed
Syntax
speed { 10 | 100 | negotiation } undo speed
View
Ethernet port view
Parameter
10: Port rate is 10 Mbps. 100: Port rate is 100 Mbps. negotiation: Port rate is to be negotiated.
Description
Use the speed command to configure the rate of the port. Use the undo speed command to restore the default port rate, that is, negotiation. When setting the port to auto-negotiation mode, you must ensure that the connected port is operating in the same mode. If not, you must set both ports to operate in the same mode manually. Related command: duplex.
Example
# Set port rate on port Ethernet 1/0/1 to 100 Mbps.

[3Com-Ethernet1/0/1] speed 100
Chapter 4 Fundamental WAN Interface Configuration Commands

4.1 Fundamental Serial Interface Configuration Commands
4.1.1 async mode
Syntax
async mode { protocol | flow | terminal template-name tty-number }
View
Asynchronous serial interface view, AUX interface view, AM interface view
Parameter
protocol: Protocol mode, with which the local end directly adopts the configured link layer protocol parameters to set up a link with the remote end after setting up a physical link. flow: Flow mode, also known as interactive mode. With this approach, the two ends set up a link by interacting with each other upon the setup of a physical link. Specifically, the calling party sends the configuration commands to the called party (it is equal to the operation of manually inputting configuration commands at the remote end), sets the link layer protocol operating parameters of the called party, and then sets up the link. This approach normally applies to man-machine interaction. terminal: Terminal mode, applied for terminal access service. So far, it is supported only on asynchronous serial and synchronous/asynchronous serial interfaces. template-name: Terminal template name. tty-number: The allocated TTY number.
Description
Use the async mode command to set the operating mode of the asynchronous serial interface. By default, the asynchronous serial interface is working in protocol mode, and the AUX interface in flow mode. Related command: modem.
Example
# Set the asynchronous serial interface 0/0/0 to work in flow mode.
[3Com-Serial0/0/0] async mode flow
4.1.2 baudrate
Syntax
baudrate baudrate
View
Serial interface view
Parameter
baudrate: Baud rate of the serial interface in bps. It is in the range 300 to 115,200 for an asynchronous serial interface, and 1200 to 2,048,000 for a synchronous serial interface.
Description
Use the baudrate command to set the baud rate of a serial interface. By default, the baud rate is 9,600 bps on the asynchronous serial interface, and 64,000 bps on a synchronous serial interface. The following are the baud rates available with asynchronous serial interfaces: 300 bps, 600 bps, 1,200 bps, 2,400 bps, 4,800 bps, 9,600 bps, 19,200 bps, 38,400 bps, 57,600 bps, 115,200 bps The following are the baud rates available with synchronous serial interfaces: 1,200 bps, 2,400 bps, 4,800 bps, 9,600 bps, 19,200 bps, 38,400 bps, 57,600 bps, 64,000 bps, 72,000 bps, 115,200 bps, 128,000 bps, 192,000 bps, 256,000 bps, 384,000 bps, 512,000 bps, 1,024,000 bps, 2,048,000 bps Note that the baud rates of 192,000 bps, 256,000 bps, 512,000 bps, and 1,024,000 bps are available with some types of serial interfaces only. You can know whether these baud rates are available by reading the terminal display of this command. The baud rate range available with synchronous serial interfaces depends on the applied physical electric specifications. V.24 DTE/DCE supports the range of 1200 bps to 64000 bps V.35 DCE/DCE, X.21 DTE/DCE, EIA/TIA-449 DTE/DCE and EIA-530 DTE/DCE supports the range of 1200 bps to 2048000 bps
After a synchronous/asynchronous serial interface makes the synchronous/asynchronous switchover, the baud rate of the interface resumes the default baud rate in the new operating mode. When setting baud rate for a serial interface, you should take into consideration the elements such as operating mode (synchronous/asynchronous mode) and the electric specifications of the connected external cable. In addition, you should note that the baud rate of asynchronous serial interface is only significant for the connection between router and modem. If two modems are concerned, the baud rate between them will be directly negotiated by themselves. Therefore, different baud rate settings can be set on the routers at the two ends of a connection if the routers are working in asynchronous mode. In synchronous mode the router working as DCE will determine the baud rate for the line transmission; therefore, you need to set baud rate at the DCE side in this case.
Example
# Set the baud rate of the asynchronous serial interface at DCE side to 115200 bps.
[3Com-Serial0/0/0] baudrate 115200
4.1.3 clock (Serial Interface)

Syntax
clock { dteclk1 | dteclk2 | dteclk3 | dteclk4 }
View
Parameter
dteclk1: Sets the interface clock selection mode to DTE clock option 1. dteclk2: Sets the interface clock selection mode to DTE clock option 2. dteclk3: Sets the interface clock selection mode to DTE clock option 3. dteclk4: Sets the interface clock selection mode to DTE clock option 4.
Description
Use the clock command to set clock selection mode for a synchronous serial interface. If the synchronous serial interface operates as DCE, its clock defaults to DCE clock; if the interface operates as DCE, its clock defaults to dteclk1. Different operating clocks are selected for the synchronous serial interfaces working as DTE and DCE, as shown in the following figure.
TxClk DCE RxClk DTE
Figure 4-1 Selecting a clock for a synchronous serial interface In the figure, TxClk represents transmitting clock, and RxClk is receiving clock. As a DCE device is required to provide clock for the remote DTE device, you must select DCEclk as the operating clock for the synchronous serial interface working as DCE. Working as DTE, the synchronous serial interface must accept the clock provided by the remote DCE. As transmitting and receiving clocks of synchronization devices are independent, the receiving clock of a DTE device can be either the transmitting or receiving clock of the DCE device; so is the transmitting clock. Therefore, there are four clock options are available for a DTE device. The following table gives the four clock selection options. Table 4-1 Clock options available for a synchronous serial interface working as DTE Clock selection option DTEclk1 DTEclk2 DTEclk3 DTEclk4 Description TxClk = TxClk, RxClk = RxClk TxClk = TxClk, RxClk = TxClk TxClk = RxClk, RxClk = TxClk TxClk = RxClk, RxClk = RxClk
In the table, the clock ahead of = is the DTE clock and the one behind is the DCE clock.
Example
# Set the synchronous serial interface working as DTE to use the clock selection option dteclk2.
[3Com-Serial0/0/0] clock dteclk2
4.1.4 code nrzi

Syntax
code nrzi
undo code
View
Synchronous serial interface view
Parameter
None
Description
Use the code nrzi command to set the digital signal coding format to
None-Return-to-Zero-Inverse (NRZI) for a synchronous serial interface. Use the undo code command to restore the digital coding format of the synchronous serial interface to NRZ. The digital signal coding format defaults to NRZ on the synchronous serial interface.
Example
# Set the digital signal coding format to NRZI on the synchronous serial interface.
[3Com-Serial0/0/0] code nrzi
4.1.5 country-code
Syntax
country-code area-name
View
Asynchronous serial interface view, AM interface view
Parameter
area-name: Includes australia, austria, belgium, brazil, bulgaria, canada, china, czechoslovakia, denmark, finland, france, germany, greece, hongkong, hungary, india, ireland, israel, italy, japan, korea, luxembourg, malaysia, mexico, netherlands, new-zealand, norway, philippines, poland, portugal, russia, singapore, southafrica, spain, sweden, switzerland, taiwan, united-kingdom, and united-states.
Description
Use the country-code command to configure the coding format of the Modem connected to the serial interface. The default area code format is united-states.
In different areas, the coding formats of Modem are different. To adapt to coding formats in different areas use this command. On the asynchronous serial interface, only after the command modem is enabled can this command be configured.
Example
# Set the area-code toUSA.
[3Com-Serial0/0/0] country-codeUSA
4.1.6 detect
Syntax
1) Asynchronous serial interface
detect dsr-dtr undo detect dsr-dtr 2) Synchronous serial interface
detect { dcd | dsr-dtr } undo detect { dcd | dsr-dtr }
View
Synchronous serial interface view, asynchronous serial interface view
Parameter
dsr-dtr: Detects DSR and DTR signals of DSU/CSU. dcd: Detects the DCD signal of the DSU/CSU on the serial interface.
Description
Use the detect command to enable data carrier detection as well as level detection on a serial interface. Use the undo detect command to disable data carrier detection as well as level detection on the serial interface. By default, the serial interface is enabled to make data carrier and level detection. If this function is disabled on the serial interface, the system does not detect the DCD and DSR/DTR signals when determining the state (UP or DOWN) of the interface. When level detection is disabled on a serial interface, the system does not detect whether a cable is connected if the interface is asynchronous, AUX, or Async for example, and the
state of the interface is up automatically. If the interface is synchronous/asynchronous, however, it goes up only when the system detects that a cable is connected.
Example
# Disable the serial interface to make data carrier detection.
[3Com-Serial0/0/0] undo detect dcd
4.1.7 eliminate-pulse
Syntax
eliminate-pulse undo eliminate-pulse
View
Asynchronous serial interface view
Parameter
None
Description
Use the eliminate-pulse command to eliminate the pulses with a width less than 3.472us, increasing signal reliability. This is useful when the line is seriously interfered. Use the undo eliminate-pulse command to restore the the default, eliminating the pulses with a width less than 1.472 us.
Note: You can use this command only when the baud rate of the interface is less than 115,200 bps. After you configure this command the baud rate of the interface cannot be set to 115,200 bps or greater. This command is restricted to the 8ASE and 16ASE interface cards and modules.
Example
# Eliminate the pulses with a width less than 3.472 us on interface Async1/0/0.
[Router-Async1/0/0] eliminate-pulse
4.1.8 idle-mark
Syntax
idle-mark undo idle-mark
View
Parameter
None
Description
Use the idle-mark command to set the line idle-mark of the synchronous serial interface to FF. Use the undo idle-mark command to restore the line idle-mark of the synchronous serial interface to 7E. Line idle-mark of synchronous serial interfaces defaults to 7E. In normal circumstances, the synchronous serial interface uses the code 7E to identify the idle state of the line. However, there are still some devices that use FF (that is, the high level of all 1s) to make the identification. For the sake of compatibility in this case, it is necessary to configure the line idle-mark of the synchronous serial interface.
Example
# Set the line idle-mark of the synchronous serial interface to FF.
[3Com-Serial0/0/0] idle-mark
4.1.9 invert receive-clock

Syntax
invert receive-clock undo invert receive-clock
View
Parameter
None
Description
Use the invert receive-clock command to invert the receive-clock signal on the DTE-side synchronous serial interface. Use the undo invert transmit-clock command to disable inverting the signal. By default, receive-clock signal inversion is disabled on the synchronous serial interface at DTE side. You may invert the receive-clock signal on a DTE-side serial interface for the special purpose of eliminating the half clock-period delay on the line. This command is useful only for some special DCE devices. For common applications clock must not be inverted. Related command: physical-mode, invert transmit-clock, clock.
Example
# Invert the receive-clock on the DTE-side synchronous serial interface.
[3Com-Serial0/0/0] invert receive-clock
4.1.10 invert transmit-clock

Syntax
invert transmit-clock undo invert transmit-clock
View
Parameter
None
Description
Use the invert transmit-clock command to enable the inverting of the transmit-clock signal of the synchronous serial interface at the DTE side. Use the undo invert transmit-clock command to disable inverting the signal. By default, transmit-clock signal inversion is disabled on the synchronous serial interface at DTE side.
In some special cases, for eliminating the half-period delay of the clock on the line, you may make the configuration to have the system invert the transmit-clock signal of the synchronous serial interface at the DTE side. This command can take effect only on specific DCE devices. Clock inversion is unnecessary in general applications. Related command: physical-mode, invert receive-clock, clock.
Example
# Invert the transmit-clock of the synchronous serial interface at DTE side.
[3Com-Serial0/0/0] invert transmit-clock
4.1.11 loopback
Syntax
View
Serial interface view, AUX interface view, AM interface view
Parameter
None
Description
Use the loopback command to enable a serial interface to perform loopback. Use the undo loopback command to disable the serial interface to perform loopback. By default, loopback of the serial interface is disabled. You need to enable loopback on the serial interface only when testing special functions.
Example
# Enable loopback on the serial interface.
[3Com-Serial0/0/0]loopback
4.1.12 mtu (Serial Interface)

Syntax
mtu size undo mtu
View
Serial interface view, AUX interface view, AM interface view
Parameter
size: MTU size of the serial interface in the range 128 to 1500 bytes. It defaults to 1500 bytes.
Description
Use the mtu command to set MTU of the serial interface. Use the undo mtu command to restore the default. The MTU setting can affect the assembly and fragmentation of IP packets on the interface.
Example
# Set MTU of the serial interface to 1200.
[3Com-Serial0/0/0] mtu 1200
4.1.13 physical-mode
Syntax
physical-mode { sync | async }
View
Parameter
sync: Sets the synchronous/asynchronous serial interface to work in synchronous mode. async: Sets the synchronous/asynchronous serial interface to work in asynchronous mode.
Description
Use the physical-mode command to set the operating mode of the
synchronous/asynchronous serial interface. By default, the synchronous/asynchronous serial interface is working in synchronous mode.
Example
# Set the synchronous/asynchronous serial interface to work in asynchronous mode.

[3Com-Serial0/0/0] physical-mode async
4.1.14 virtualbaudrate
Syntax
virtualbaudrate virtualbaudrate undo virtualbaudrate
View
Parameter
virtualbaudrate: Specifies a baudrate in bps, which must be consistent with the one configured at the DCE side and can be 1200, 2400, 4800, 9600, 19200, 38400, 56000, 57600, 64000, 72000, 115200, 128000, 384000, 2048000, or 4096000.
Description
Use the virtualbaudrate command to set a virtual baudrate for the DTE interface. Use the undo virtualbaudrate command to cancel the specified virtual baudrate. When working as DTE, the serial interface determines its baudrate through negotiation with the DCE side. The virtualbaudrate command, however, allows you to configure DTE-side baudrate manually, but the configured value must be the same as the one set at the DCE side. To validate the configured baudrate value for routing, execute the shutdown command and then the undo shutdown command on the interface.
Note: Configure the baudrate command at DCE side and the virtualbaudrate command at DTE side (only when the interface is operating in synchronous mode). Avoid configuring the two commands at the same end of a link. At DCE side, you can use the display interface command to view the baudrate of the interface; at the DTE end, you can use the display interface command to view the virtual baudrate of the interface, if it is configured.
Example
# Set virtual baudrate of a DTE interface to 19200.
[3Com-Serial4/0/0] virtualbaudrate 19200
# Cancel the specified virtual baudrate of the DTE interface.

[3Com-Serial4/0/0] undo virtualbaudrate
4.2 Fundamental CE1/PRI Interface Configuration Commands

4.2.1 channel-set (CE1/PRI Interface)
Syntax
channel-set set-number timeslot-list range undo channel-set set-number
View
CE1/PRI interface view
Parameter
set-number: The number of the channel set formed by bundling the timeslots on the interface, in the range 0 to 30. range: The number of the timeslots that are bundled, in the range 1 to 31. When specifying the timeslots to be bundled to specify a single timeslot by specifying a number, a range of timeslots by specifying a range between number1-number2, or several discrete timeslots by specifying number1, number2-number3.
Description
Use the channel-set command to bundle some timeslots of a CE1/PRI interface into a channel-set. Use the undo channel-set command to remove the specified timeslot bundle. By default, no timeslots are bundled into channel-sets. A CE1/PRI interface in CE1/PRI mode is physically divided into 32 timeslots numbered from 0 through 31. In actual applications, all the timeslots except for timeslot 0 can be bundled into multiple channel-sets, and the system will automatically create a serial interface for each set. This serial interface has the same logic features of synchronous serial interface.
The serial interface is numbered in the form of serial interface-number :set-number. Where, interface-number starts from the maximum serial interface number plus 1, and set-number is the number of the channel-set. Only one timeslot bundling mode can be supported on one CE1/PRI interface at a time. In other words, this command cannot be used together with the pri-set command. Related command: pri-set.
Example
# Bundle the timeslots 1, 2, 5, 10 through 15, and 18 on the CE1/PRI interface into channel-set 0.
[3Com-E1 3/0/0] channel-set 0 timeslot-list 1,2,5,10-15,18
# Make the same configuration on the CE1/PRI interface on the remote router.
[3Com-E1 3/0/0] channel-set 0 timeslot-list 1,2,5,10-15,18
4.2.2 clock (CE1/PRI Interface)

Syntax
clock { master | slave } undo clock
View
Parameter
master: Adopts the internal clock mode. slave: Adopts the line clock mode.
Description
Use the clock command to set the clock mode on a CE1/PRI interface. Use the undo clock command to restore the default clock mode on the interface. By default, the CE1/PRI interface adopts the line clock mode (slave). When a CE1/PRI interface is working as DCE, chose the internal clock for it, that is, master clock mode. When it is working as DTE, chose the line clock, that is, slave clock mode for it.
Example
# Set the clock mode of the CE1/PRI interface to internal clock (master) mode.

[3Com-E1 3/0/0] clock master
4.2.3 code (CEI/PRI Interface)

Syntax
code { ami | hdb3 } undo code
View
Parameter
ami: Adopts alternate mark inversion (AMI) line code format. hdb3: Adopts high density bipolar 3 (HDB3) line code format. This parameter is only significant for a CE1/PRI interface.
Description
Use the code command to set the line code format for a CE1/PRI interface. Use the undo code command to restore the default line code format of the interface. The line code format of CE1/PRI interface defaults to hdb3. You should keep the line code format of the interface in consistency with that used by the remote device.
Example
# Set the line code format of the interface E1 3/0/0 to ami.
[3Com-E1 3/0/0]code ami
4.2.4 controller e1
Syntax
controller e1 number
View
System view
Parameter
number: CE1/PRI interface number.
Description
Use the controller e1 command to enter CE1/PRI interface view.
Example
# Enter the view of the interface E1 3/0/0.
[3Com] controller E1 3/0/0 [3Com-E1 3/0/0]
4.2.5 display controller e1

Syntax
display controller [ e1 number ]
View
Any view
Parameter
number: Interface number.
Description
Use the display controller e1 command to display the information related to a CE1/PRI interface. Executing this command will display the following information: Physical state of interface Clock mode of interface Frame check mode of interface Line code format of interface
Example
# Display the information related to the E1 interface.
[3Com] display controller E1 3/0/0 E1 3/0 current state :DOWN Description : E1 3/0/0 Interface
Work mode Cable type Frame-format Line Code
: : : :
E1 FRAMED 75 OHM unbalanced NO-CRC4 HDB3

Idle Code Itf Code Source Clock Loopback Alarm State : : : : : FF FF SLAVE Not set
Loss-of-Signal
Data in current interval (17350 seconds elapsed): 17350 Loss Frame Alignment Secs, 0 Framing Error Secs, 0 CRC Error Secs, 0 Alarm Indication Secs, 17337 Loss-of-signals Secs, 0 Code Violations Secs, 0 Slip Secs, 0 E-Bit error Secs.
4.2.6 frame-format (CE1/PRI Interface)

Syntax
frame-format { crc4 | no-crc4 } undo frame-format
View
Parameter
crc4: Sets the frame format on the CE1 interface to CRC4. no-crc4: Sets the frame format on the CE1 interface to no-CRC4.
Description
Use the frame-format command to set the frame format on the CE1 interface. Use the undo frame-format command to restore the default, or no-crc4. A CE1/PRI interface in CE1 mode supports both CRC4 and no-CRC4 frame formats. Among them, CRC4 supports four-bit cyclic redundancy check (CRC) on physical frames whereas no-CRC4 does not.
Example
# Set the frame format on the interface E1 3/0/0 to CRC4.
[3Com-E1 3/0/0] frame-format crc4
4.2.7 idlecode (in CE1/PRI Interface View)

Syntax
idlecode { 7e | ff }
undo idlecode
View
Parameter
7e: Sets the line idle code to 0x7e. ff: Sets the line idle code to 0xff.
Description
Use the idlecode command to set the line idle code on the CE1/PRI interface. Two types of line idle code are available, 0x7e and 0xff. Use the undo idlecode command to restore the default, or 0xff. The line idle code is sent in the timeslots that are not bundled into the logical channels on the interface.
Example
# Set the line idle code to 0x7e on CE1/PRI interface 3/0/0.
[3Com-E1 3/0/0] idlecode 7e
4.2.8 itfcode (in CE1/PRI Interface View)

Syntax
itfcode { 7e | ff } undo itfcode
View
Parameter
7e: Sets the interframe padding character to 0x7e. ff: Sets the interframe padding character to 0xff.
Description
Use the itfcode command to set the interframe padding character on the CE1/PRI interface. Two interframe padding character types are available, 0x7e and 0xff. Use the undo itfcode command to restore the default, or 0x7e.
Interframe padding characters are sent when no service data is sent on the slots bundled into the logical channels on the interface.
Example
# Set the interframe padding character to 0xff on CE1/PRI interface 3/0/0.
[3Com-E1 3/0/0] itfcode ff
4.2.9 loopback (CE1/PRI Interface View)

Syntax
loopback { local | remote | payload } undo loopback
View
Parameter
local: Enables the interface to perform local loopback. remote: Enables the interface to perform remote loopback. payload: Enables the interface to perform external payload loopback.
Description
Use the loopback command to enable a CE1/PRI interface to perform loopback. Use the undo loopback command to disable the CE1/PRI interface to perform local, remote, or external payload loopback. By default, the interface is disabled from performing loopback in any form. You can use loopback to check the condition of interfaces or cables. When they are operating normally disable this function. You can bundle timeslots on the CE1/PRI interface to form a serial interface and encapsulate it with PPP. After you enable loopback on this serial interface, it is normal that the state of the link layer protocol is reported down.
Example
# Set the interface E1 3/0/0 to perform local loopback.
[3Com-E1 3/0/0] loopback local
4.2.10 pri-set (CE1/PRI Interface)

Syntax
pri-set timeslot-list [ range ] undo pri-set
View
Parameter
range: Number of the timeslots in the bundle. It is in the range 1 to 31. When specifying the timeslots to be bundled you can configure a single timeslot using the form of number, or a range of timeslots using the form of number1-number2, or multiple discrete timeslots using the form of number1, number2-number3.
Description
Use the pri-set command to have timeslots on the CE1/PRI interface form a pri-set. Use the undo pri-set command to remove the bundle. By default, no pri-set is created. When creating a pri-set on a CE1/PRI interface, note that timeslot 16 is D channel for transmitting signaling; it cannot form a bundle that includes itself only. The attempt to bundle only timeslot 16 will fail. In a pri-set formed by timeslot bundling on a CE1/PRI interface, timeslot 0 is used for frame synchronization control (FSC), timeslot 16 as a D channel for signaling transmission, and other timeslots as B channels for data transmission. You may bundle the timeslots except for timeslot 0 into a pri-set (as the D channel, timeslot 16 is automatically bundled). The logic features of this pri-set will be the same like those of an ISDN PRI interface. If no timeslot is specified, all the timeslots except for timeslot 0 are bundled into an interface similar to an ISDN PRI interface in the form of 30B+D. The system automatically creates a serial interface after timeslot bundling on the interface. This serial interface has the same logic features of ISDN PRI interface. The serial interface is numbered in the form of serial number:15, where number is the maximum serial interface number plus 1. Only one timeslot bundling mode is supported on one CE1/PRI interface at a time. In other words you cannot use this command and the channel-set command together. Related command: channel-set.
Example
# Bundle the timeslots 1, 2, and 8 through 12 of the CE1/PRI interface into a pri-set.
[3Com-E1 3/0/0] pri-set timeslot-list 1,2,8-12
4.2.11 using (CE1/PRI Interface)

Syntax
using { ce1 | e1 } undo using
View
Parameter
e1: The interface is operating in E1 mode. ce1: The interface is operating in CE1/PRI mode.
Description
Use the using command to configure the operating mode of the CE1/PRI interface. Use the undo using command to restore the default or CE1/PRI mode. A CE1/PRI interface can work in either E1 mode (non-channelized mode) or CE1/PRI mode (channelized mode). A CE1/PRI interface in E1 mode equals a 2 Mbps interface without timeslot division. Its logic features are the same like those of a synchronous serial interface. When working in CE1/PRI mode, it is physically divided into 32 timeslots numbered from 0 to 31. Among them, timeslot 0 is used for transmitting the FSC information. This interface can work as either a CE1 interface or a PRI interface. After the CE1/PRI interface is enabled to work in E1 mode by using the using e1 command, the system automatically creates a serial interface numbered serial interface-number:0, where interface-number starts from the maximum serial interface number plus 1.
Example
# Set the CE1/PRI interface to work in E1 mode.
[3Com-E1 3/0/0] using e1
4.3 Fundamental CT1/PRI Interface Configuration Commands

4.3.1 alarm-threshold
Syntax
alarm-threshold los pulse-detection value alarm-threshold los pulse-recovery value alarm-threshold ais { level-1 | level-2 } alarm-threshold lfa { level-1 | level-2 | level-3 | level-4 } undo alarm-threshold
View
CT1/PRI interface view
Parameter
los: Sets a loss of signal (LOS) alarm threshold. Two LOS alarm thresholds are available, pulse-detection for the pulse detection duration threshold with LOS, and pulse-recovery for the pulse threshold with LOS. The threshold of pulse-detection ranges from 16 to 4,096 pulse intervals and defaults to 176. The threshold of pulse-recovery ranges from 1 to 256 and defaults to 22. If the number of the pulses detected during the total length of the specified pulse detection interval is smaller than the pulse-recovery threshold, a LOS alarm occurs. ais: Sets the alarm threshold of alarm indication signal (AIS). Two AIS alarm threshold options are available, level-1 and level-2. If level-1 is specified, an AIS alarm occurs when the number of 0s in the bit stream of an SF or ESF frame is less than or equal to 2. If level-2 is specified, an AIS alarm occurs when the number of 0s is less than or equal to 3 in the bit stream of an SF frame or less than or equal to 5 in the bit stream of an ESP frame. By default, level-1 AIS alarm threshold applies. lfa: Sets the loss of frame align (LFA) alarm threshold. Four threshold options are available: level-1, level-2, level-3, and level-4. If level-1 is specified, an LFA alarm occurs when two of four frame alignment bits are lost. If level-2 is specified, an LFA alarm occurs when two of five frame alignment bits are lost. If level-3 is specified, an LFA alarm occurs when two of six frame alignment bits are lost. Level-4 applies only to ESF frames; an LFA alarm occurs when four consecutive ESF frames have errors. By default, level-1 LFA alarm threshold applies.
Description
Use the alarm-threshold command to configure the alarm thresholds on the CT1/PRI interface as needed. Use the undo alarm-threshold command to restore the default alarm threshold values.
Example
# Set the number of detection intervals to 300 for the pulse detection duration threshold.
[3Com-T1 1/0/0] alarm-threshold los pulse-detection 300
4.3.2 cable (CT1/PRI Interface)

Syntax
cable { long { 0db | -7.5db | -15db | -22.5db } | short { 133ft | 266ft | 399ft | 533ft | 655ft } } undo cable
View
Parameter
long: Matches a 655-feet or longer transmission line. The options for this parameter include 0db, -7.5db, -15db, and -22.5db. The attenuation parameter is selected depending on the signal quality received at the receiving end. In this case no external CSU is needed. short: Matches a transmission cable under 655 feet. The options for this parameter include 133ft, 266ft, 399ft, 533ft, and 655ft. The length parameter is selected depending on the actual transmission segment.
Description
Use the cable command to set cable attenuation and length on a CT1/PRI interface to match the distance of the transmission line. Use the undo cable command to restore the default or long 0db. You can use this command to configure the signal waveform for transmission to accommodate different needs. Whether to use this command depends on the quality of the signal received by the receiver. If the signal quality is relatively good, you can use the default setting, where the CT1/PRI interface does not need an external CSU device.
Example
# Set the transmission cable that the CT1/PRI interface matches to 133 feet.
[3Com-T1 1/0/0] cable short 133ft
4.3.3 channel-set (CT1/PRI Interface)

Syntax
channel-set set-number timeslot-list range [ speed { 56k | 64k } ] undo channel-set set-number
View
Parameter
set-number: The number of the channel-set formed by timeslot bundling on the interface. It is in the range 0 to 23. range: The number of timeslots that are bundled, which is in the range 1 to 24. When specifying the timeslots to be bundled, you can specify one timeslot by specifying its number, a timeslot range by specifying a range in the form number1-number2, or several discrete timeslots by specifying number1, number2-number3. speed { 56k | 64k }: Speed of the timeslot bundle in kbps. If 56k is selected, the timeslots are bundled into N x 56 kbps bundles. If 64k, the default, is selected the timeslots are bundled into N x 64 kbps bundles.
Description
Use the channel-set command to bundle timeslots on the CT1/PRI interface into a channel-set. Use the undo channel-set command to remove the specified channel-set. By default, no timeslots are bundled into channel-sets. A CT1/PRI interface is physically divided into 24 timeslots numbered from 1 to 24. In actual applications all timeslots can be bundled into multiple channel-sets, and for each of them the system automatically creates a serial interface. This serial interface has the same logic features as synchronous serial interfaces. The serial interface is numbered in the form of serial interface-number:set-number, where interface-number starts from the maximum serial interface number plus 1, and set-number is the number of the channel-set.
Only one timeslot bundling mode is supported on a CT1/PRI interface at a time. In other words, you cannot use this command together with the pri-set command. Related command: pri-set.
Example
# Bundle the timeslots 1, 2, 5, 10 through 15 and 18 of the CE1/PRI interface into channel-set 0.
[3Com-T1 1/0/0] channel-set 0 timeslot-list 1,2,5,10-15,18
4.3.4 clock (CT1/PRI Interface)

Syntax
View
Parameter
master: Adopts the internal clock. slave: Adopts the line clock.
Description
Use the clock command to set clocking on the CT1/PRI interface. Use the undo clock command to restore the default, or slave the line clock. When the CT1/PRI interface is working as DCE use internal clock for it, that is, master. When it is working as DTE chose the line clock, that is, slave for it.
Example
# Set the clock of the CT1/PRI interface to internal (master).
[3Com-T1 1/0/0] clock master
4.3.5 code (CT1/PRI Interface)

Syntax
code { ami | b8zs } undo code
View
Parameter
ami: AMI line code format. b8zs: Bipolar with 8-zero substitution (b8zs) line code format.
Description
Use the code command to set the line code format on the CT1/PRI interface. Use the undo code command to restore the default or b8zs. You should keep the line code format of the interface consistent with the one used by the remote device.
Example
# Set the line code format of the interface T1 1/0/0 to ami.
[3Com-T1 1/0/0] code ami
4.3.6 controller t1
Syntax
controller t1 number
View
System view
Parameter
number: CT1/PRI interface number.
Description
Use the controller t1 command to enter a CT1/PRI interface view.
Example
# Enter the view of the interface T1 1/0/0.
[3Com] controller t1 1/0/0 [3Com-T1 1/0/0]
4.3.7 display controller t1

Syntax
display controller t1 number
View
Any view
Parameter
number: Interface number.
Description
Use the display controller t1 command to display the information about the specified CT1/PRI interface. This command displays the following information about the specified interface: Physical state Cable type Clock mode Line code format Loopback mode Line idle code Interframe padding character Alarm states Error statistics gathered at 15-minute intervals during the last 24 hours
Example
# Display the information about T1 interface 1/0/0.
[3Com] display controller t1 1/0/0
4.3.8 fdl
Syntax
fdl { none | ansi | att | both } undo fdl
View
Parameter
none: Disables facilities data link (FDL). ansi: Implements ANSI T1.403 FDL. att: Implements AT&T TR 54016 FDL. both: Implements ANSI T1.403 or AT&T TR 54016.
Description
Use the fdl command to set the behavior of the CT1/PRI interface on the FDL in ESF framing. Use the undo fdl command to restore the default. FDL is an embedded 4 kbps overhead channel within the ESF format for transmitting performance statistics or loopback code. By default, FDL is enabled and ANSI T1.403 is implemented. You can however change the setting depending on the setting at the far end.
Example
# Implement AT&T TR 54016 FDL on interface T1 1/0/0.
[3Com-T1 1/0/0] fdl att
4.3.9 frame-format (CT1/PRI Interface)

Syntax
frame-format { sf | esf } undo frame-format
View
Parameter
sf: Sets the frame format to super frame (SF). esf: Sets the frame format to extended super frame (ESF).
Description
Use the frame-format command to set the frame format on the CT1/PRI interface. Use the undo frame-format command to restore the default or esf.
A CT1/PRI interface supports two frame formats, that is, SF and ESF. In SF format, multiple frames can share the same FSC and signaling information, so that more significant bits are available for transmitting user data. The use of ESF allows you to test the system without affecting the ongoing service.
Example
# Set the frame format of T1 1/0/0 to SF.
[3Com-T1 1/0/0] frame-format sf
4.3.10 idlecode (in CT1/PRI Interface View)

Syntax
idlecode { 7e | ff } undo idlecode
View
Parameter
7e: Sets the line idle code to 0x7e. ff: Sets the line idle code to 0xff.
Description
Use the idlecode command to set the line idle code on the CT1/PRI interface. Two types of line idle code are available, 0x7e and 0xff. Use the undo idlecode command to restore the default, or 0xff. The line idle code is sent in the timeslots that are not bundled into the logical channels on the interface.
Example
# Set the line idle code to 0x7e on CT1/PRI interface 3/0/0.
[3Com-T1 3/0/0] idlecode 7e
4.3.11 itfcode (in CT1/PRI Interface View)

Syntax
itfcode { 7e | ff }
undo itfcode
View
Parameter
7e: Sets the interframe padding character to 0x7e. ff: Sets the interframe padding character to 0xff.
Description
Use the itfcode command to set the interframe padding character on the CT1/PRI interface. Two interframe padding character types are available, 0x7e and 0xff. Use the undo itfcode command to restore the default, or 0x7e. Interframe padding characters are sent when no service data is sent on the slots bundled into the logical channels on the interface.
Example
# Set the interframe padding character to 0xff on CT1/PRI interface 3/0/0.
[3Com-T1 3/0/0] itfcode ff
4.3.12 loopback (CT1/PRI Interface)

Syntax
View
Parameter
local: Enables the CT1/PRI interface to perform local loopback. remote: Enables the interface to perform remote loopback. payload: Enables the interface to perform external payload loopback.
Description
Use the loopback command to enable a CT1/PRI interface to perform local, remote, or external payload loopback.
Use the undo loopback command to disable the CT1/PRI interface from performing loopback. By default, the interface is disabled from performing loopback in any form. You can use loopback to check the condition of interfaces or cables. When they are operating normally disable this function. You can bundle timeslots on the CT1/PRI interface to form a serial interface and encapsulate it with PPP. After you enable loopback on this serial interface it is normal for the state of the link layer protocol to be reported down.
Example
# Set the interface T1 1/0/0 to perform remote loopback.
[3Com-T1 1/0/0] loopback remote
4.3.13 pri-set (CT1/PRI Interface)

Syntax
pri-set [ timeslot-list range ] undo pri-set
View
Parameter
range: The number of the timeslots that are bundled, which is in the range 1 to 24. When specifying the timeslots to be bundled you can specify one timeslot by specifying its number, a timeslot range by specifying a range in the form number1-number2, or several discrete timeslots by specifying number1, number2-number3.
Description
Use the pri-set command to bundle the timeslots of the CT1/PRI interface into a pri-set. Use the undo pri-set command to remove the timeslot bundle. By default, no timeslots are bundled into pri-sets. When creating a pri-set on a CT1/PRI interface, note that timeslot 24 is D channel for transmitting signaling; it cannot form a bundle that includes itself only. The attempts to bundle only timeslot 24 will fail. In a pri-set formed by timeslot bundling on a CT1/PRI interface, timeslot 24 is used as D channel for signaling transmission, and other timeslots are used as B channels for data
transmission. You may randomly bundle these timeslots into a pri-set (as the D channel, timeslot 24 is automatically bundled). The logic features of this pri-set will be the same as those of an ISDN PRI interface. If no timeslot is specified all the timeslots are bundled into an interface similar to an ISDN PRI interface in the form of 23B+D. The system automatically creates a serial interface after timeslot bundling on the interface. This serial interface has the same logic features as an ISDN PRI interface. The serial interface is numbered in the form of serial number:23, where number is the maximum serial interface number plus 1. Only one timeslot bundling mode is supported on a CT1/PRI interface at a time. In other words, you cannot use this command and the channel-set command together. Related command: channel-set.
Example
# Bundle the timeslots 1, 2, and 8 through 12 of the CT1/PRI interface into a pri-set.
[3Com-T1 1/0/0] pri-set timeslot-list 1,2,8-12
4.3.14 sendloopcode
Syntax
sendloopcode { esf-llb-act | esf-llb-deact | esf-plb-act | esf-plb-eact | sf-llb-act | sf-llb-deact }
View
Parameter
esf-llb-act: Sends line loopback (LLB) activation request code in the FDL within the ESF format to enable remote loopback. esf-llb-deact: Sends LLB deactivation request code in the FDL within the ESF format to disable loopback. esf-plb-act: Sends payload loopback (PLB) activation request code in the FDL within the ESF format to enable remote loopback. esf-plb-deact: Sends PLB deactivation request code in the FDL within the ESF format to disable loopback. sf-llb-act: Sends LLB activation request code by using the effective bandwidth to enable remote loopback.
sf-llb-deact: Sends LLB dactivation request code by using the effective bandwidth to disable loopback.
Description
Use the sendloopcode command to send the remote loopback control code. By default, no remote loopback control code is sent. You may configure loopback on the far-end CT1/PRI interface by sending the loopback request code. In LLB mode, all 193 bits (one synchronization bit and 192 effective bandwidth bits) in a T1 PCM frame are looped back. In PLB mode, however, only 192 effective bandwidth bits are looped back. The format of loopback code can be compliant with ANSI T1.403 or AT&T TR 54016. In SF framing, LLB code is sent using the effective bandwidth. In ESF framing, both LLB code and PLB code are sent/received in the FDL in ESF frames. You can use this command only when the far-end CT1/PRI interface can automatically detect loopback request code from the network.
Example
# Send LLB activation request code within the ESF format.
[3Com-T1 1/0/0] sendloopcode esf-llb-act
4.4 E1-F Interface Configuration Commands

4.4.1 display fe1 serial
Syntax
display fe1 [ serial serial-number ]
View
Any view
Parameter
serial serial-number: Number of the serial interface. If no interface is specified, information on all the E1-F interfaces is displayed.
Description
Use the display fe1 serial command to view the configuration and state of the specified or all E1-F interfaces. If the specified interface is a serial interface rather than an E1-F interface, the system will prompt that the serial interface is not a factional E1 interface.
Example
# Display information on an E1-F interface.
[Router] display fe1 serial 0/0/0 Serial4 Fractional E1, status is down. Work mode is FRAMED - 120 OHM balanced. Framing : NO-CRC4, Line Code is HDB3, Clock : Slave. Alarm State : Loss-of-Signal. Serial0/0/0 Physical type is FE1 - 75 OHM unbalanced
Work mode is FRAMED Frame-format is NONE,Line Code is HDB3,Source Clock is SLAVE
Alarm State is None. Data in current interval (19349 seconds elapsed): 129 Loss Frame Alignment Secs, 0 Framing Error Secs, 0 CRC Error Secs, 0 Alarm Indication Secs, 129 Loss-of-signals Secs, 0 Code Violations Secs, 0 Slip Secs, 0 E-Bit error Secs.
Table 4-2 Description on the fields of the display fe1 serial command Field Physical type Work mode Frame-format Line Code Source Clock Alarm State Description Interface type (75-ohm unbalanced/120-ohm balanced) Operating mode (frame/unframed) Frame format (CRC4/no-CRC4) Line code format (AMI/HDB3) Clock mode (master/slave) Alarm information
4.4.2 fe1 clock

Syntax
fe1 clock { master | slave } undo fe1 clock
View
E1-F interface view
Parameter
master: Internal clock. slave: Line clock.
Description
Use the fe1 clock command to configure clocking on the E1-F interface. Use the undo fe1 clock command to restore the default or slave, the line clock. When the E1-F interface works as DCE internal clock (master) must be used. If the interface works as DTE, however, line clock (slave) must be used.
Example
# Set the E1-F interface to use internal clock.
[Router-Serial0/0/0] fe1 clock master
4.4.3 fe1 code

Syntax
fe1 code { ami | hdb3 } undo fe1 code
View
E1-F interface view
Parameter
ami: AMI line code format. hdb3: HDB3 line code format.
Description
Use the fe1 code command to configure the line code format of the E1-F interface. Use the undo fe1 code command to restore the default or hdb3. The line code of an interface should be set in consistency with that of the peer.
Example
# Set the line code format of the E1-F interface to AMI.
[Router-Serial0/0/0] fe1 code ami
4.4.4 fe1 frame-format

Syntax
fe1 frame-format { crc4 | no-crc4 } undo fe1 frame-format
View
E1-F interface view
Parameter
crc4: Adopts CRC4 as the framing format for the E1-F interface. no-crc4: Adopts no-CRC4 as the framing format for the E1-F interface..
Description
Use the fe1 frame-format command to configure the framing format of the E1-F interface. Use the undo fe1 frame-format command to restore the default or no-crc4.
Example
# Set the framing format of the E1-F interface to CRC4.
[Router-Serial0/0/0] fe1 frame-format crc4
4.4.5 fe1 loopback

Syntax
fe1 loopback { local | remote } undo fe1 loopback
View
E1-F interface view
Parameter
local: Places the interface in local loopback. remote: Places the interface in remote loopback.
Description
Use the fe1 loopback command to place the E1-F interface in local or remote loopback. Use the undo fe1 loopback command to disable the local and remote loopback on the interface. By default, loopback is disabled. Enable loopback only when testing the state of interfaces or cables.
Example
# Place the E1-F interface in local loopback.
[Router-Serial0/0/0] fe1 loopback local
4.4.6 fe1 timeslot-list

Syntax
fe1 timeslot-list range undo fe1 timeslot-list
View
E1-F interface view
Parameter
range: Timeslots participating in binding, in the range 1 to 31. When specifying timeslots for binding you can specify one timeslot by specifying its number, a timeslot range by specifying a range in the form number1-number2, or multiple discrete timeslots by specifying number1, number2-number3.
Description
Use the fe1 timeslot-list command to bundle timeslots on the E1-F interface. Use the undo fe1 timeslot-list command to restore the default.
By default, all the timeslots on the E1-F interface are bundled to form a 1984 kbps interface. Time slot bundling results in interface rate change. For example, after you bundle timeslots 1 through 10 on the interface, the interface rate becomes 10 x 64 kbps. When the E1-F interface is working in unframed mode you cannot configure the fe1 timeslot-list command. Related command: fe1 unframed.
Example
# Bundle the timeslots 1, 2, 5, 10 through 15, and 18 on the E1-F interface.
[Router-Serial0/0/0] fe1 timeslot-list 1,2,5,10-15,18
4.4.7 fe1 unframed

Syntax
fe1 unframed undo fe1 unframed
View
E1-F interface view
Parameter
None
Description
Use the fe1 unframed command to configure an E1-F interface to work in unframed mode. Use the undo fe1 unframed command to configure the E1-F interface to work in framed mode. By default, the E1-F interface works in framed mode. When the E1-F interface is working in unframed mode, it is a 2048 kbps interface without timeslot division, and is logically equivalent to a synchronous serial interface. When it works in framed mode, however, it is physically divided into 32 timeslots numbered in the range 0 to 31, and timeslot 0 is used for transmitting synchronization information. Related command: fe1 timeslot-list.
Example
# Set the E1-F interface to work in unframed mode.

[Router-Serial0/0/0] fe1 unframed
4.5 T1-F Interface Configuration Commands

4.5.1 display ft1 serial
Syntax
display ft1 [ serial serial-number ]
View
Any view
Parameter
serial serial-number: Number of the serial interface. If no interface is specified, the information on all the T1-F interfaces is displayed.
Description
Use the display ft1 serial command to view the configuration and state of the T1-F interface. If the specified interface is a common serial interface rather than a T1-F interface, the system prompts that the serial interface is not a fractional T1 interface.
Example
# Display information on the T1-F interface.
[Router] display ft1 Serial1/0/0 Applique type is FT1 - 100 OHM balanced
Work mode is FRAMED Frame-format is ESF,Line Code is B8ZS,Source Clock is SLAVE Loopback is not set, Alarm State is Loss-of-Signal.
Data in current interval (416 seconds elapsed): 416 Loss Frame Alignment Secs, 0 Framing Error Secs, 0 CRC Error Secs, 0 Alarm Indication Secs, 416 Loss-of-signals Secs, 0 Code Violations Secs, 10 Slip Secs, 0 E-Bit error Secs.
Table 4-3 Description on the fields of the display ft1 serial command Field Applique type Description Interface type (100-ohm balanced)
Field Work mode Frame-format Line Code Source Clock Alarm State
Description Operating mode (framed/unframed) Frame format (EF/ESF) Line code format (AMI/B8ZS) Clock mode (master/slave) Alarm information
4.5.2 ft1 cable

Syntax
ft1 cable { long decibel | short length } undo ft1 cable
View
T1-F interface view
Parameter
long decibel: Matches the transmission segment longer than 655 feet. The argument decibel can take 0db, -7.5db, -15db, or -22.5db, depending on the signal quality at the receiving end. In this case, no external CSU is required. short length: Matches the transmission segment shorter than 655 feet. The argument length can take 133ft, 266ft, 399ft, 533ft, or 655ft, depending on the transmission segment.
Description
Use the ft1 cable command to configure the attenuation or transmission segment matching the T1-F interface. Use the undo ft1cable command to restore the default. By default, the transmission line attenuation matching the T1-F interface is long 0db. This command is used for configuring the signal waveform required for different types of transmission. In practice, you can decide whether to use this command according to the signal quality at the receiving end. If the signal quality is acceptable you can use the default setting.
Example
# Set the transmission segment matching the T1-F interface to 133 feet.
[Router-Serial0/0/0] ft1 cable short 133ft
4.5.3 ft1 clock

Syntax
ft1 clock { master | slave } undo ft1 clock
View
T1-F interface view
Parameter
master: Internal clock is used. slave: Line clock is used.
Description
Use the ft1 clock command to configure clocking on the T1-F interface. Use the undo ft1 clock command to restore the default or slave. If the T1-F interface is working as DCE, use internal clock (master) for it. If the interface is working as DTE, use line clock (slave) for it.
Example
# Set clocking on the T1-F interface to internal.
[Router-Serial0/0/0] ft1 clock master
4.5.4 ft1 code

Syntax
ft1 code { ami | b8zs } undo ft1 code
View
T1-F interface view
Parameter
ami: AMI line code format. b8zs: B8ZS line code format.
Description
Use the ft1 code command to configure line code format for a T1-F interface. Use the undo ft1 code command to restore the default or b8zs. The line code of an interface should be set in consistency with that of its peer.
Example
# Set the line code format of the T1-F interface to AMI.
[Router-Serial0/0/0] ft1 code ami
4.5.5 ft1 frame-format

Syntax
ft1 frame-format { sf | esf } undo ft1 frame-format
View
T1-F interface view
Parameter
sf: Sets the framing format to super frame (SF). esf: Sets the framing format to extended super frame (ESF).
Description
Use the ft1 frame-format command to configure the framing format on the T1-F interface. Use the undo ft1 frame-format command to restore the default or esf. T1-F interfaces support two framing formats, SF and ESF. In SF, multiple frames share the same frame synchronization and signaling information, allowing more significant bits for transmitting user data. ESP allows you to test the system without affecting the ongoing service.
Example
# Set the framing format of the T1-F interface to SF.

[Router-Serial0/0/0] ft1 frame-format sf
4.5.6 ft1 loopback

Syntax
ft1 loopback { local | remote } undo ft1 loopback [ local | remote ]
View
T1-F interface view
Parameter
local: Places the interface in local loopback. remote: Places the interface in remote loopback.
Description
Use the ft1 loopback command to place the T1-F interface in local or remote loopback. Use the undo ft1 loopback command to disable loopback on the interface. By default, the interface is not in local or remote loopback. Enable loopback only when testing the state of interfaces or cables.
Example
# Place the T1-F interface in local loopback.
[Router-Serial0/0/0] ft1 loopback local
4.5.7 ft1 timeslot-list

Syntax
ft1 timeslot-list range [ speed { 56k | 64k } ] undo ft1 timeslot-list
View
T1-F interface view
Parameter
range: Timeslots participating in bundling, in the range 1 to 24. When specifying timeslots to be bundled you can configure one timeslot by specifying its number, a timeslot range by
specifying a range in the form number1-number2, or discrete timeslots by specifying number1, number2-number3. speed { 56k | 64k }: Time slot bundling speed in kbps. If 56k applies, timeslots are bundled into an N x 56 kbps bundle. If 64k applies, timeslots are bundled into an N X 64 kbps bundle.
Description
Use the ft1 timeslot-list command to bundle timeslots on the T1-F interface. Use the undo ft1 timeslot-list command to restore the default. By default, all the timeslots on the T1-F interface are bundled to form a 1536 kbps interface. Time slot bundling results in interface rate change. For example, after you bundle timeslots 1 through 10 on the interface, the interface rate becomes 10 x 64 kbps or 10 x 56 kbps.
Example
# Bind the timeslots 1, 2, 5, 10 through 15, and 18 on the T1-F interface.
[Router-Serial0/0/0] ft1 timeslot-list 1,2,5,10-15,18
4.5.8 ft1 alarm-threshold

Syntax
ft1 alarm-threshold los pulse-detection value ft1 alarm-threshold los pulse-recovery value ft1 alarm-threshold ais { level-1 | level-2 } ft1 alarm-threshold lfa { level-1 | level-2 | level-3 | level-4 } undo ft1 alarm-threshold
View
T1-F interface view
Parameter
los: Sets a loss of signal (LOS) alarm threshold. Two LOS alarm thresholds are available, pulse-detection for the pulse detection duration threshold with LOS, and pulse-recovery for the pulse threshold with LOS. The threshold of pulse-detection ranges from 16 to 4,096 pulse intervals, and defaults to 176. The threshold of pulse-recovery ranges from 1 to 256, and defaults to 22.
If the number of the pulses detected during the total length of the specified pulse detection intervals is smaller than the pulse-recovery threshold a LOS alarm occurs. ais: Sets the alarm threshold of alarm indication signal (AIS). Two AIS alarm threshold options are available, level-1 and level-2. If level-1 is specified, an AIS alarm occurs when the number of 0s in the bit stream of an SF or ESF frame is less than or equal to 2. If level-2 is specified, an AIS alarm occurs when the number of 0s is less than or equal to 3 in the bit stream of an SF frame or less than or equal to 5 in the bit stream of an ESP frame. By default, level-1 AIS alarm threshold applies. lfa: Sets the loss of frame align (LFA) alarm threshold. Four threshold options are available, level-1, level-2, level-3, and level-4. If level-1 is specified, an LFA alarm occurs when two of four frame alignment bits are lost. If level-2 is specified, an LFA alarm occurs when two of five frame alignment bits are lost. If level-3 is specified, an LFA alarm occurs when two of six frame alignment bits are lost. Level-4 applies only to ESF frames; an LFA alarm occurs when four consecutive ESF frames have errors. By default, level-1 LFA alarm threshold applies.
Description
Use the alarm-threshold command to configure the alarm thresholds on the T1-F interface as needed. Use the undo alarm-threshold command to restore the default alarm threshold values.
Example
# Set the number of detection intervals to 300 for the pulse detection duration threshold.
[Router-Serial0/0/0] ft1 alarm-threshold los pulse-detection 300
4.6 Fundamental CE3 Interface Configuration Commands

4.6.1 clock (CE3 Interface)
Syntax
View
CE3 interface view
Parameter
Description
Use the clock command to set the clock mode on the CE3 interface. Use the undo clock command to restore the default, or slave. The clock is selected depending on the connected remote device. If it is a transmission device the local end uses line clock. If the CE3 interfaces on the two routers are directly connected, one router should use internal clock and the other router should use line clock.
Example
# Sets the clock on the CE3 interface to internal.
[3Com-E3 1/0/0] clock master
4.6.2 controller e3
Syntax
controller e3 interface-number
View
System view
Parameter
interface-number: CE3 interface number.
Description
Use the controller e3 command to enter the CE3 interface view. Related command: display controller e3.
Example
# Enter the view of the interface E3 1/0/0.
[3Com] controller e3 1/0/0 [3Com-E3 1/0/0]
4.6.3 display controller e3

Syntax
display controller e3 interface-number
View
Any view
Parameter
interface-number: CE3 interface number.
Description
Use the display controller e3 command to view state information on a CE3 interface. In addition to the state information of the CE3 interface, the command can display the information about each E1 line on the CE3 interface if the interface is working in CE3 mode.
Example
# Display the information on the interface E3 1/0/0.
[3Com] display controller e3 1/0/0 E3 1/0/0 is up Description : E3 1/0 Interface Applique type is CE3 - 75 OHM unbalanced Frame-format G751, line code HDB3,
clock slave, national-bit 1,loopback not set Alarm: none ERROR: 0 BPV, 0 EXZ, 0 FrmErr, 0 FEBE E3-0 CE1 1 is up
Frame-format NO-CRC4, clock master, loopback not set E3-0 CE1 2 is up
Frame-format NO-CRC4, clock slave, loopback local E3-0 CE1 3 is up
Frame-format NO-CRC4, clock slave, loopback remote E3-0 CE1 4 is up
Frame-format CRC4, clock slave, loopback not set E3-0 CE1 5 is up
Frame-format NO-CRC4, clock slave, loopback not set E3-0 CE1 6 is up
Frame-format NO-CRC4, clock slave, loopback not set
4.6.4 e1 channel-set
Syntax
e1 line-number channel-set set-number timeslot-list range undo e1 line-number channel-set set-number
View
CE3 interface view
Parameter
line-number: E1 line number in the range 1 to 16. set-number: The number of the channel-set formed by a timeslot bundle on the E1 line, in the range of 0 to 30. range: The number of the timeslots to be bundled, in the range of 1 to 31. When specifying the timeslots to be bundled you can specify one timeslot by specifying its number, a timeslot range by specifying a range in the form number1-number2, or discrete timeslots by specifying number1, number2-number3.
Description
Use the e1 channel-set command to bundle timeslots on an E1 line. Use the undo e1 channel-set command to remove the timeslot bundle. By default, no timeslots are bundled into channel-sets. A CE3 interface can be channelized into 64Kbps lines, and the timeslots of each E1 line can be bundled up to 31 channels. When an E1 line operates in framed (CE1) mode you can bundle timeslots on it. The system will automatically create a serial interface numbered serial number / line-number:set-number. For example, the serial interface formed by channel-set 0 on the first E1 line on E3 7/0 is numbered 7/0/1:0. This interface can operate at N x 64 kbps and equals a synchronous serial interface logically on which you make other configurations. Related command: e1 unframed.
Example
# Bundle a 128 kbps serial interface on the first E1 line on the interface E3 1/0/0.
[3Com-E3 1/0/0] e1 1 channel-set 1 timeslot-list 1,2
4.6.5 e1 set clock

Syntax
e1 line-number set clock { master | slave } undo e1 line-number set clock
View
CE3 interface view
Parameter
line-number: E1 line number in the range 1 to 16. master: Internal clock. slave: Line clock.
Description
Use the e1 set clock command to set clocking of an E1 line on the CE3 interface. Use the undo e1 clock command to restore the default or line clock. When the CE3 interface is working in channelized mode you can set separate clock for each E1 line on it.
Example
# Configure the first E1 line on the E3 interface to adopt line clock mode.
[3Com-E3 1/0/0] e1 1 set clock slave
4.6.6 e1 set frame-format

Syntax
e1 line-number set frame-format { crc4 | no-crc4 } undo e1 line-number set frame-format
View
CE3 interface view
Parameter
line-number: E1 line number in the range 1 to 16. crc4: The frame format adopted by an E1 line is CRC4. no-crc4: The frame format adopted by an E1 line is no-CRC4.
Description
Use the e1 set frame-format command to configure the frame format on an E1 line. Use the undo e1 set frame-format command to restore the default, or no-crc4. You can configure this command only when the specified E1 line is working in framed format (which can be set using the undo e1 unframed command). Related command: e1 unframed.
Example
# Configure the first E1 line on the E3 interface to adopt the frame format CRC4.
[3Com-E3 1/0/0] e1 1 set frame-format crc4
4.6.7 e1 set loopback

Syntax
e1 line-number set loopback { local | remote } undo e1 line-number set loopback
View
CE3 interface view
Parameter
line-number: E1 line number in the range 1 to 16. local: Enables local loopback on the E1 line. remote: Enables remote loopback on the E1 line.
Description
Use the e1 set loopback command to set the loopback mode of the specified E1 line on the E3 interface. Use the undo e1 set loopback command to disable loopback on the E1 line. By default, loopback is disabled on E1 lines. If an E1 line encapsulated with PPP is placed in a loopback, it is normal for the state of the link layer protocol to be reported down.
Example
# Set the loopback mode of the first E1 line on the E3 interface to local.
[3Com-E3 1/0/0] e1 1 set loopback local
4.6.8 e1 shutdown
Syntax
e1 line-number shutdown undo e1 line-number shutdown
View
CE3 interface view
Parameter
line-number: E1 line number in the range 1 to 16.
Description
Use the e1 shutdown command to shut down an E1 line on the CE3 interface. Use the undo e1 shutdown command to enable the E1 line. By default, E1 lines are enabled.
This command affects not only the specified E1 line but also the serial interfaces formed by E1 line bundling. Executing the e1 shutdown command on the specified E1 line shuts down all these serial interfaces. Data transmission and receiving stops as a result. Likewise, executing the undo e1 shutdown command will restart all these serial interfaces.
Example
# Shut down the first E1 line on the E3 interface.
[3Com-E3 1/0/0] e1 1 shutdown
4.6.9 e1 unframed
Syntax
e1 line-number unframed undo e1 line-number unframed
View
CE3 interface view
Parameter
line-number: E1 line number in the range 1 to 16.
Description
Use the e1 unframed command to set an E1 line on a CE3 interface to work in unframed mode (E1 mode). Use the undo e1 unframed command to set the E1 line on the CE3 interface to work in framed mode (CE1 mode, the default). An E1 line in unframed mode does not contain the frame control information; it cannot be divided into timeslots. Naturally, no timeslot bundling can be performed on it. In this case, the system automatically creates a serial interface numbered serial number / line-number:0 for it. This interface operates at 2048 kbps and has the same logic features as a synchronous serial interface on which you can make other configurations. Related command: e1 channel-set.
Example
# Set the first E1 line on the E3 interface to work in unframed mode.
[3Com-E3 1/0/0] e1 1 unframed
4.6.10 loopback (CE3 Interface)

Syntax
loopback { local | payload | remote } undo loopback
View
CE3 interface view
Parameter
local: Enables the CE3 interface to perform local loopback. payload: Places the CE3 interface in a remote payload loopback. Data passes the framer in this case and is looped back after payload is generated. remote: Enables the CE3 interface to perform remote loopback. Data does not go through the framer in this case and will be looped back before the payload has been generated.
Description
Use the loopback command to configure the loopback mode of a CE3 interface. Use the undo loopback command to disable the CE3 interface to perform loopback. By default, loopback is disabled on the CE3 interface. It is necessary for you to enable the CE3 interface to perform loopback only for testing special functions. If a CE3 interface encapsulated with PPP is placed in a loopback it is normal for the state of the link layer protocol to be reported down.
Example
# Enable the interface E3 1/0/0 to perform local loopback.
[3Com-E3 1/0/0] loopback local
4.6.11 national-bit
Syntax
national-bit { 0 | 1 } undo national-bit
View
CE3 interface view
Parameter
0: Sets the national bit of the CE3 interface to 0. 1: Sets the national bit of the CE3 interface to 1.
Description
Use the national-bit command to configure national bit on the CE3 interface. Use the undo national-bit command to restore the default, or 1. You need to set the national bit to 0 on an E3 interface only in special circumstances. Related command: controller e3.
Example
# Set the national bit to 0 on the interface E3 1/0/0.
[3Com-E3 1/0/0] national-bit 0
4.6.12 using (CE3 Interface)

Syntax
using { e3 | ce3 } undo using
View
CE3 interface view
Parameter
e3: Sets the CE3 interface to work in unchannelized mode. ce3: Sets the CE3 interface to work in channelized mode.
Description
Use the using command to configure the operating mode of a CE3 interface. Use the undo using command to restore the default setting. By default, the CE3 interface is working in channelized mode. Only when the CE3 interface is working in channelized mode can you configure the E1 lines on it.
When the CE3 interface is working in unchannelized mode the system automatically creates a serial interface numbered serial number / 0:0 for it. This interface operates at 34.368 Mbps and has the same logic features of a synchronous serial interface on which you can make other configurations. Related command: controller e3.
Example
# Configure the interface E3 1/0/0 to work in unchannelized mode.
[3Com-E3 1/0/0] using e3
4.7 Fundamental CT3 Interface Configuration Commands

4.7.1 cable (CT3 Interface)
Syntax
cable feet undo cable
View
CT3 interface view
Parameter
feet: Cable length in the range 0 to 450 feet.
Description
Use the cable command to configure the length of the cable with which a CT3 interface is connected. Use the undo cable command to restore the default length of the cable with which the CT3 interface is connected. The parameter feet defaults to 49. The length of the cable for CT3 interface connection refers to the distance between the router and the cable distribution rack.
Example
# Set the cable length to 50 feet on the interface T3 1/0/0.
[3Com-T3 1/0/0] cable 50
4.7.2 clock (CT3 Interface)

Syntax
View
CT3 interface view
Parameter
master: Internal clock. slave: Line clock.
Description
Use the clock command to set the clock mode on the CT3 interface. Use the undo clock command to restore the default clock mode, or slave. The clock is selected depending on the connected remote device. If it is a transmission device the local end uses line clock. If the CT3 interfaces on the two routers are directly connected, one router should use the internal clock whereas the other router should use line clock.
Example
# Configure the CT3 interface with internal clock.
[3Com-T3 1/0/0] clock master
4.7.3 controller t3
Syntax
controller t3 interface-number
View
System view
Parameter
interface-number: CT3 interface number.
Description
Use the controller t3 command to enter CT3 interface view. Related command: display controller t3.
Example
# Enter the view of the interface T3 1/0/0.
[3Com] controller t3 1/0/0 [3Com-T3 1/0/0]
4.7.4 crc
Syntax
crc { 16 | 32 | no-crc} undo crc
View
Parameter
16: Adopt 16-bit CRC. 32: Adopt 32-bit CRC. no-crc: Adopt no CRC.
Description
Use the crc command to configure CRC mode of the serial interface formed by CT3. Use the undo crc command to restore the default, or 16-bit CRC. Related command: t1 channel-set, t1 unframed, using.
Example
# Apply 32-bit CRC to the serial interface formed by the interface T3 1/0/0 in fractional mode.
[3Com-Serial1/0/0:0] crc 32
4.7.5 frame-format (CT3 Interface)

Syntax
frame-format { c-bit | m23 } undo frame-format
View
CT3 interface view
Parameter
c-bit: Sets the frame format to C-bit. m23: Sets the frame format to m23.
Description
Use the frame-format command to configure the frame format used by the CT3 interface. Use the undo frame-format command to restore the default, or C-bit frame format.
Example
# Set the frame format of the interface T3 1/0/0 to m23.
[3Com-T3 1/0/0] frame-format m23
4.7.6 loopback (CT3 Interface)

Syntax
loopback { local | payload | remote } undo loopback
View
CT3 interface view
Parameter
local: Enables the CT3 interface to perform local loopback. payload: Places the CT3 interface in an external payload loop. Data passes the framer in this case and is looped back after payload is generated. remote: Enables the CT3 interface to perform remote loopback. Data does not go through the framer in this case, and will be looped back before the payload has been generated.
Description
Use the loopback command to configure the loopback mode of the CT3 interface. Use the undo loopback command to disable the CT3 interface to perform loopback. By default, loopback is disabled on the CT3 interface. Loopback is usually used for special tests; in normal cases it should be disabled. If you place a CT3 interface encapsulated with PPP in a loopback, it is normal for the state of the link layer protocol to be reported down.
Example
# Enable the interface T3 1/0/0 to perform local loopback.
[3Com-T3 1/0/0] loopback local
4.7.7 t1 channel-set
Syntax
t1 line-number channel-set set-number timeslot-list range [ speed { 56k | 64k } ] undo t1 line-number channel-set set-number
View
CT3 interface view
Parameter
line-number: T1 line number in the range of 1 to 28. set-number: The number of the channel-set formed by bundling the timeslots of T1 line, which is in the range of 0 to 23. range: The number of timeslots bundled, which is in the range of 1 to 24. When specifying the timeslots to be bundled you can specify one timeslot by specifying its number, a timeslot range by specifying a range in the form number1-number2, or discrete timeslots by specifying number1, number2-number3. speed: Timeslot bundling mode. If 56k applies, the timeslots are bundled into an N x 56 kbps bundle. If 64k applies, the timeslots are bundled into an N x 64 kbps bundle. It defaults to 64k.
Description
Use the t1 channel-set command to bundle the timeslots of a T1 line. Use the undo t1 channel-set command to remove the timeslot bundle.
By default, no timeslots are bundled into channel-sets. When a T1 line is operating in framed (CT1) mode, you can bundle timeslots on it. The system will automatically create a serial interface numbered serial number / line-number:set-number for the channel-set. This interface operates at N x 64 Kbps (or N x 56 kbps) and has the same logic features as a synchronous serial interface on which you can make other configurations. Related command: t1 unframed.
Example
# Bundle a 128 kbps serial interface on the first T1 line on the interface T3 1/0/0.
[3Com-T3 1/0/0]t1 1 set channel-set 1 timeslot-list 1,2
4.7.8 t1 set clock

Syntax
t1 line-number set clock { master | slave } undo t1 line-number set clock
View
CT3 interface view
Parameter
line-number: T1 line number in the range 1 to 28. master: Internal clock. slave: Line clock.
Description
Use the t1 set clock command to set the clock mode for a T1 line on the CT3 interface. Use the undo e1 clock command to restore the default, or line clock. When the CE3 interface is working in channelized mode its E1 lines may use separate clocks.
Example
# Configure the first T1 line on the T3 interface to adopt line clock.
[3Com-T3 1/0/0] t1 1 set clock slave
4.7.9 t1 set frame-format

Syntax
t1 line-number set frame-format { esf | sf } undo t1 line-number set frame-format
View
CT3 interface view
Parameter
line-number: T1 line number in the range 1 to 28. esf: Set the T1 line to use the ESF format. sf: Set the T1 line to use the SF format.
Description
Use the t1 set frame-format command to configure the frame format of T1 line. Use the undo t1 set frame-format command to restore the default, or esf. You can configure this command only when the T1 line is working in framed format (which can be set by using the undo t1 unframed command). Related command: t1 set unframed, using.
Example
# Adopt the frame format SF for the first T1 line on the T3 interface.
[3Com-T3 1/0/0] t1 1 set frame-format sf
4.7.10 t1 set loopback

Syntax
t1 line-number set loopback { local | remote } undo t1 line-number set loopback
View
CT3 interface view
Parameter
line-number: T1 line number in the range 1 to 28.
local: Enables the T1 line to perform local loopback. remote: Enables the T1 line to perform remote loopback.
Description
Use the t1 set loopback command to set the loopback mode of a T1 line on the T3 interface. Use the undo t1 set loopback command to disable the T1 line to loop back. By default, T1 lines are disabled to loop back. If a T1 line encapsulated with PPP is placed in a loopback it is normal for the state of the link layer protocol to be reported down. Loopback is usually used for special tests; it should be disabled in normal cases.
Example
# Set the loopback mode on the first T1 line on the T3 interface to local.
[3Com-T3 1/0/0] t1 1 set loopback local
4.7.11 t1 shutdown
Syntax
t1 line-number shutdown undo t1 line-number shutdown
View
CT3 interface view
Parameter
line-number: T1 line number in the range 1 to 28.
Description
Use the t1 shutdown command to shut down a T1 line on the CT3 interface. Use the undo t1 shutdown command to open a T1 line. By default, T1 lines are open. This command will affect not only the specified T1 line but also the serial interfaces formed by bundling timeslots on the T1 line. Executing the t1 shutdown command on the specified T1 line will shut down all these serial interfaces. Data transmission and receiving will stop as a result. Likewise, executing the undo t1 shutdown command will re-enable all these serial interfaces.
Example
# Shut down the first T1 line on the T3 interface.
[3Com-T3 1/0/0] t1 1 shutdown
4.7.12 t1 unframed
Syntax
t1 line-number unframed [ speed { 56k | 64k } ] undo t1 line-number unframed
View
CT3 interface view
Parameter
line-number: T1 line number in the range 1 to 28. speed: Timeslot bundling mode. If 56k applies, the timeslots are bundled into an N x 56 kbps bundle. If 64k applies, the timeslots are bundled into an N x 64 kbps bundle. It defaults to 64k.
Description
Use the t1 unframed command to set a T1 line on the CT3 interface to work in unframed mode (T1 mode). Use the undo t1 unframed command to set the T1 line on the CT3 interface to work in framed mode (CT1 mode). By default, T1 lines are working in framed mode. A T1 line in unframed mode does not contain the frame control information; it cannot be divided into timeslots. Naturally, no timeslot bundling can be performed on it. In this case, the system automatically creates a serial interface numbered serial number / line-number:0 for it. This interface operates at 1544 kbps and has the same logic features of a synchronous serial interface on which you can make other configurations. Related command: t1 channel-set.
Example
# Set the first T1 line on the T3 interface to work in unframed mode.
[3Com-T3 1/0/0] t1 1 unframed
4.7.13 using (CT3 Interface)

Syntax
using { t3 | ct3 }
View
CT3 interface view
Parameter
t3: Sets the CT3 interface to work in unchannelized mode. ct3: Sets the CT3 interface to work in channelized mode.
Description
Use the using command to configure the operating mode of a CT3 interface. Use the undo using command to restore the default or channelized mode. Only when the CT3 interface is working in channelized mode can you configure the T1 lines on it. When the CT3 interface is working in unchannelized mode, the system automatically creates a serial interface numbered serial number / 0:0 for it. This interface operates at 44.736 Mbps and has the same logic features as a synchronous serial interface on which you can make other configurations.
Example
# Configure the interface T3 1/0/0 to work in unchannelized mode.
[3Com-T3 1/0/0] using t3
4.7.14 display controller t3

Syntax
display controller t3 interface-number
View
Any view
Parameter
interface-number: CT3 interface number.
Description
Use the display controller t3 command to view the state of a CT3 interface. In addition to the state information about the CT3 interface, the command can display the information about each T1 line on the CT3 interface if the interface is working in CT3 mode.
Example
# Display the information related to the interface T3 1/0/0.
[3Com]display controller t3 1/0/0 T3 1/0/0 is down Description : T3 1/0/0 Interface Frame-format C-BIT Parity, line code B3ZS, cable 49 feet, clock slave, loopback not set Alarm: none ERROR: 0 BiPolarViolation, 0 EXcessiveZero, 1 FrameError 0 ParityBitError, 0 C-BitParityBitError, 0 FarEndBlockError
4.8 ISDN BRI Interface Configuration Commands

4.8.1 loopback (ISDN BRI Interface)
Syntax
loopback { b1 | b2 | both } undo loopback
View
ISDN BRI interface view
Parameter
b1: Places the B1 channel in a remote loopback. b2: Places the B2 channel in a remote loopback. both: Places both B1 and B2 channels in a remote loopback.
Description
Use the loopback command to place the B1, B2, or both channels on the BRI interface in a remote looback. This can send data from a line back to the line. Use the undo loopback command to disable remote loopback. By default, remote loopback is disabled on the ISDN BRI interface.
On the ISDN BRI interface, you can place its B1, B2, or both channels in a remote loopback.
Caution: The modules with loopback-supported ISDN interfaces include 4BS (MIM), and 1BS\1BU\2BS\2BU (SIC). In addition, loopback is also supported by the fixed ISDN interfaces on the routers, if there is any.
Example
# Place the B1 and B2 channels on the BRI interface in a remote loopback.
[Router-bri0/0/0] loopback both
4.9 CPOS Interface Configuration Commands

4.9.1 clock
Syntax
View
CPOS interface view
Parameter
master: Sets the clock mode of the CPOS interface to master. slave: Sets the clock mode of the CPOS interface to slave.
Description
Use the clock command to set the clock mode of the CPOS interface. Use the undo clock command to restore the default, or slave clock.
Example
# Set the clock mode of CPOS 1/0/0 to master.
<3Com> system-view

[3Com] controller cpos 1/0/0 [3Com-Cpos1/0/0] clock master
4.9.2 controller cpos

Syntax
controller cpos cpos-number
View
System view
Parameter
cpos-number: represented by slot number/card number/interface number.
Description
Use the controller cpos command to enter CPOS interface view. Before you can configure a CPOS physical interface you must enter its CPOS interface view. This is similar to interfaces that support channelization such as CE1, CE3, and CT1.
Example
# Enter the interface view of CPOS 1/0/0.
<3Com> system-view [3Com] controller cpos 1/0/0 [3Com-Cpos1/0/0]
4.9.3 display controller cpos

Syntax
display controller cpos [ cpos-number ]
View
Any view
Parameter
cpos-number: represented by slot number/card number/interface number. If no CPOS number is specified information on all the channels on the CPOS interfaces is displayed.
Description
Use the display controller cpos command to view information about CPOS interfaces, such as state of the E1/T1 channels and alarms, and errors that occur to regeneration section, multiplex section, and higher-order path. The following table describes the possible error types in the displayed information: Table 4-4 Possible error types Item FRED COFA SEF FERR CERR FEBE BERR BIP REI Description Receive loss of basic frame alignment, or receive the frame with red alarm error Change of frame alignment. Severely errored frame. Four consecutive frame synchronization errors generate one SEF. Framing Bit Error. It refers to the frame with Ft/FPS/FAS error. CRC error Far end block error. This occurs when the CRC4 frame format applies on the E1 channel. PRBS bit error (Pseudo-random binary sequence bit error for test only). Bit-interleaved parity Remote error indication
In this table, FRED, COFA, and SEF are alarm errors (AERRs). Related command: display controller cpos e1, display controller cpos t1.
Example
# View the path information of the interface CPOS 4/0/0.
<3Com> display controller cpos 4/0/0 Cpos4/0/0 current state : UP Description : Cpos4/0/0 Interface Frame-format SDH, multiplex AU-3, clock master, loopback not set Tx: J0: 0x01, J1: "NetEngine", C2: 0x02 Rx: J0: 0x01, J1: "NetEngine", C2: 0x02 Regenerator section: Alarm: none Error: 0 BIP, 0 SEF

Multiplex section: Alarm: none Error: 0 BIP, 0 REI Higher order path(VC-3-1): Alarm: none Error: 0 BIP, 0 REI Higher order path(VC-3-2): Alarm: none Error: 0 BIP, 0 REI Higher order path(VC-3-3): Alarm: none Error: 0 BIP, 0 REI Cpos4/0/0 CT1 1 is up
Frame-format ESF, clock master, loopback not set Cpos4/0 CT1 2 is up
Frame-format ESF, clock master, loopback not set Cpos4/0/0 CT1 3 is up
Frame-format ESF, clock master, loopback not set
(Some information on T1 channels is omitted)

Cpos4/0/0 CT1 83 is up
Frame-format ESF, clock master, loopback not set Cpos4/0/0 CT1 84 is up
Frame-format ESF, clock master, loopback not set
Here is the description of the displayed information: Table 4-5 Description of the display controller cpos command Field Cpos4/0/0 current state: Description: Frame-format SDH, multiplex AU-3, clock master, loopback not set Tx: J0: 0x01, J1: "NetEngine", C2: 0x02 Rx: J0: 0x01, J1: "NetEngine", C2: 0x02 Description Current physical state of the CPOS interface Interface description Physical layer information of the CPOS interface: SDH frame format, AU-3 multiplexing path, master clock mode (use internal clock signal), and no loopback. The sent overhead bytes The received overhead bytes
Field Regenerator section: Multiplex section:
Description Alarm and error statistics about the regeneration section Alarm and error statistics about the multiplexing section Alarm and error statistic about the higher-order path. The x in VC-3-x indicates the path number. When adopting AU-3 multiplexing path, one STM-1 is multiplexed by three VC-3s with three higher-order multiplexing path while in the AU-4 multiplexing path, there are one higher-order path VC-4s. Alarm statistic Error statistic The current physical state of T1 channel 1 of the CPOS interface 4/0/0 Physical layer information of T1 channel: ESF frame format, master clock mode (use internal clock signal), and no loopback
Higher order path(VC-3-x):
Alarm: Error: Cpos4/0/0 CT1 1 is up Frame-format ESF, clock master, loopback not set
4.9.4 display controller cpos e1

Syntax
display controller cpos cpos-number e1 e1-number
View
Any view
Parameter
e1-number: Number of an E1 channel on a CPOS interface. It is in the range 1 to 63.
Description
Use the display controller cpos e1 command to view the physical layer configuration information of a specified E1 channel on the specified CPOS interface. Different from the display controller cpos command, this command can display the error and alarm information of the corresponding lower-order path and that of E1 frames.
Example
# View state about E1 channel 1 on the interface CPOS 1/0/0.

<3Com> display controller cpos 1/0/0 e1 1 Cpos1/0/0 current state : UP Description : Cpos1/0/0 Interface
Frame-format SDH, multiplex AU-4, clock master, loopback not set Tx: J0: 0x01, J1: "NetEngine", C2: 0x02 Rx: J0: 0x01, J1: "NetEngine", C2: 0x02
Regenerator section: Alarm: none Error: 0 BIP, 0 SEF
Multiplex section: Alarm: none Error: 0 BIP, 0 REI
Higher order path(VC-4-1): Alarm: none Error: 0 BIP, 0 REI
Lower order path: Alarm: none Error: 0 BIP, 0 REI
Cpos2/0
CE1 1 is up
Frame-format NO-CRC4, clock slave, loopback not set
E1 framer(1-1-1-1): Alarm: none Error: 0 FERR, 0 FEBE, 0 AERR
Where, E1 framer(1-1-1-1) presents how the E1 channel is multiplexed. 1-1-1-1 represents the number of VC-4 to which this E1 channel belongs, TUG-3 number, TUG-2 number, and TUG-12 number in order.
4.9.5 display controller cpos t1

Syntax
display controller cpos cpos-number t1 t1-number
View
Any view
Parameter
t1-number: Number of a T1 channel on a CPOS interface, ranging from 1 to 84.
Description
Use the display controller cpos t1 command to view the physical layer configuration information of a specified T1 channel on the specified CPOS interface. Different from the display controller cpos command, this command can display the error and alarm information of the corresponding lower-order path and that of T1 frames.
Example
# View the state about the T1 channel 2 on the interface CPOS 4/0/0.
<3Com> display controller cpos 4/0/0 t1 2 Cpos4/0/0 current state : UP loopback not set Tx: J0: 0x01, J1: "NetEngine", C2: 0x02 Rx: J0: 0x01, J1: "NetEngine", C2: 0x02 Regenerator section: Alarm: none Error: 0 BIP, 0 SEF Multiplex section: Alarm: none Error: 0 BIP, 0 REI Higher order path(VC-3-2): Alarm: none Error: 0 BIP, 0 REI Lower order path: Alarm: none Error: 4095 BIP, 2047 REI Cpos4/0/0 CT1 2 is up Frame-format SDH, multiplex AU-3, clock master,
Frame-format ESF, clock master, loopback not set T1 framer(2-1-1): Alarm: none Error: 4095 FERR, 79 AERR
The following table describes the displayed information:
Table 4-6 Description on the fields of the display controller cpos t1 command Field Cpos1/0/0 current state : Frame-format SDH, multiplex AU-3, clock master, loopback not set Tx: J0: 0x01, J1: "NetEngine", C2: 0x02 Rx: J0: 0x01, "NetEngine", C2: 0x02 Regenerator section: Multiplex section: Higher order path(VC-3-2): Lower order path: Error: Cpos4/0/0 CT1 2 is up Frame-format ESF, clock master, loopback not set J1: Description The current physical state of the CPOS interface Physical layer information of the CPOS interface.
The sent overhead bytes The received overhead bytes Alarms and errors about the regenerator sections. Alarms and errors about the regenerator sections. Alarm and error statistic of the higher-order path to which the T1 channel belongs. VC-3-2 means the second VC-3. Alarm and error statistic of the lower-order path Error statistics The current physical state of T1 channel 1 on interface CPOS 4/0/0 Information about the physical layer of the T1 channel: the frame format is set to ESF, master clock (internal clock) is used, loopback is disabled. Presents how the T1 channel is multiplexed. 2-1-1 represents the number of VC-3 to which this T1 channel belongs, TUG-2 number, and TUG-11 number in order. For the concrete calculation principle, refer to the associated Configuration Guide.
T1 framer(2-1-1):
4.9.6 e1 channel-set
Syntax
e1 e1-number channel-set set-number timeslot-list range undo e1 e1-number channel-set range
View
CPOS interface view
Parameter
e1-number: Number of an E1 channel on the CPOS interface, ranging from 1 to 63.
set-number: channel set number, ranging from 0 to 30. range: Timeslots assigned to the channel set, ranging from 1 to 31.
Description
Use the e1 channel-set command to bundle multiple timeslots on an E1 channel into one channel set. Use the undo e1 channel-set command to remove the bundle. When the E1 channel is channelized, its timeslot 0 is used for synchronization, and the other 31 timeslots can be bundled to form one or multiple serial interfaces.
Note: To guarantee the processing capacity you can only have up to 256 virtual serial interfaces on one CPOS physical port. The e1 channel-set command is only supported by the CPOS(E) interface module.
Related command: e1 unframed.
Example
# Bundle timeslots on E1 channel 63.
<3Com> system-view [3Com] controller cpos 1/0/0 [3Com-Cpos1/0/0] e1 63 channel-set 1 timeslot-list 1-31
# Enter the view of the serial interface formed by the timeslot bundle.
[3Com-Cpos1/0/0] quit [3Com] interface serial 1/0/0/63:1 [3Com-Serial1/0/0/63:1]
# View information about the serial interface formed by a timeslot bundle.

<3Com> display interface serial 1/0/0/63:1
4.9.7 e1 set clock

Syntax
e1 e1-number set clock { master | slave } undo e1 e1-number set clock
View
CPOS interface view
Parameter
e1-number: Number of an E1 channel on the CPOS interface, ranging from 1 to 63. master: Sets the clock mode of the E1 channel to master. slave: Sets the clock mode of the E1 channel to slave.
Description
Use the e1 set clock command to set the clock mode of the E1 channel. Use the undo e1 set clock command to restore the default, or slave mode. Different E1 channels on the same CPOS physical interface can use different clock modes.
Note: The e1 channel-set command is only supported by the CPOS(E) interface module.
Example
# Set the clock mode of E1 channel 1 to master.
<3Com> system-view [3Com] controller cpos 1/0/0 [3Com-Cpos1/0/0] e1 1 set clock master
4.9.8 e1 set frame-format

Syntax
e1 e1-number set frame-format { crc4 | no-crc4 } undo e1 e1-number set frame-format
View
CPOS interface view
Parameter
e1-number: Number of an E1 channel on the CPOS interface, ranging from 1 to 63. crc4: sets the frame format to CRC4. no-crc4: sets the frame format to no-CRC4.
Description
Use the e1 set frame-format command to set the frame format of an E1 channel. Use the undo e1 set frame-format command to restore the default frame format, no-CRC4.
Example
# Set E1 channel 1 to use the frame format with CRC4 check.
<3Com> system-view [3Com] controller cpos 1/0/0 [3Com-Cpos1/0/0] e1 1 set frame-format crc4
4.9.9 e1 set loopback

Syntax
e1 e1-number set loopback { local | payload | remote } undo e1 e1-number set loopback
View
CPOS interface view
Parameter
e1-number: Number of an E1 channel on the CPOS interface, ranging from 1 to 63. local: Places the E1 channel in local loopback.
payload: Places the E1 channel in remote payload loopback. remote: Places the E1 channel in remote loopback.
Description
Use the e1 set loopback command to configure the loopback mode of the E1 channel. Use the undo e1 set loopback command to disable loopback (default). You can test an E1 channel by placing it in local, remote payload, or remote loopback. In local loopback, data of the sender is directly looped to the receiver. In remote payload loopback, an E1 framer is used to handle the data received by the receiver and generate payload before it is looped back. In remote loopback, data received by the receiver is looped back without passing through the E1 framer to generate payload. Related command: display controller cpos e1.
Example
# Place E1 channel 1 in remote payload loopback.
<3Com> system-view [3Com] controller cpos 1/0/0 [3Com-Cpos1/0/0] e1 1 set loopback payload
4.9.10 e1 shutdown
Syntax
e1 e1-number shutdown undo e1 e1-number shutdown
View
CPOS interface view
Parameter
Description
Use the e1 shutdown command to shut down an E1 channel. Use the undo e1 shutdown command to enable the E1 channel. By default, E1 channels are enabled. Disabling an E1 channel also disables the serial interfaces that are formed on it, if there are any.
Example
# Disable E1 channel 1.
<3Com> system-view [3Com] controller cpos 1/0/0 [3Com-Cpos1/0/0] e1 1 shutdown
4.9.11 e1 unframed
Syntax
e1 e1-number unframed undo e1 e1-number unframed
View
CPOS interface view
Parameter
Description
Use the e1 unframed command to set an E1 channel on the CPOS interface to unframed mode or E1 mode. Use the undo e1 unframed command to restore the default setting, channelized mode. When the E1 channel is set to work in unframed mode, it does not include frame control information and does not allow timeslot division or bundling.
Example
# Set E1 channel 3 on the CPOS interface 1/0/0 to operate in unframed mode.
<3Com> system-view [3Com] controller cpos 1/0/0 [3Com-Cpos 1/0/0] e1 3 unframed
4.9.12 flag
Syntax
flag { j0 j0-string | j1 j1-string | c2 c2-value } undo flag { j0 | j1 | c2 }
View
CPOS interface view
Parameter
j0: Regeneration section trace message, a string of 1 to 15 characters. The default value is 0x01. j1: Path trace message, a string of 1 to 15 characters. The default value is NetEngine. c2: Path signal label byte. The value is a hexadecimal number ranging from 00 to FF. The default value is 0x02.
Description
Use the flag command to set the overhead byte of SONET/SDH frames. Use the undo flag command to restore the default. SONET/SDH frames provide a variety of overhead bytes for operation and maintenance (OAM) such as layered management on transmission networks. j1, j0 and c2 are used to support interoperability between devices from different countries, areas or, vendors. Related command: display controller cpos.
Example
# Set the path trace message j1 of the interface CPOS 1/0/0 to 3COM.
<3Com> system-view [3Com] controller cpos 1/0/0 [3Com-Cpos1/0/0] flag j1 3COM
4.9.13 frame-format
Syntax
frame-format { sdh | sonet } undo frame-format
View
CPOS interface view
Parameter
sdh: Sets frame type to synchronous digital hierarchy (SDH). sonet: Sets frame type to synchronous optical network (SONET).
Description
Use the frame-format command to set the frame type of the CPOS interface. Use the undo frame-format command to restore the default or SDH.
Example
# Set the specified CPOS physical interface to operate in SONET mode.
<3Com> system-view [3Com] controller cpos 1/0/0 [3Com-Cpos1/0/0] frame-format sonet
4.9.14 loopback
Syntax
loopback { local | remote } undo loopback
View
CPOS interface view
Parameter
local: Places the CPOS interface in local loopback. remote: Places the CPOS interface in remote loopback.
Description
Use the loopback command to configure the loopback function of the CPOS interface. Use the undo loopback command to disable loopback. By default, loopback is disabled. The CPOS module provides loopback of different depths that allows you to troubleshoot the ports or connection cables. In normal conditions loopback should be disabled.
Example
# Place CPOS 1/0/0 in remote line loopback.
<3Com> system-view [3Com] controller cpos 1/0/0 [3Com-Cpos1/0/0] loopback remote
4.9.15 multiplex mode

Syntax
multiplex mode { au-4 | au-3 } undo multiplex mode
View
CPOS interface view
Parameter
au-4: gests AUG through AU-4. au-3: gets AUG through AU-3.
Description
Use the multiplex mode command to set AUG multiplexing mode. Use the undo multiplex mode command to restore the default setting, au-4. SDH provides two payload map/multiplex solutions: ANSI and ETSI. The multiplex schemes of ANSI and ETSI are AU-3 and AU-4 respectively.
When the CPOS interface is operating in SDH mode, you can choose to multiplex AUG to AU-4 or AU-3 by using the multiplex mode command. When the CPOS interface operates in SONET mode, AUG can only be multiplexed to AU-3 and the multiplex mode command is invalid in this case. Related command: frame-format.
Example
# In SDH mode, multiplex AUG to AU-3.
<3Com> system-view [3Com] controller cpos 1/0/0 [3Com-Cpos1/0/0] frame-format sdh [3Com-Cpos1/0/0] multiplex mode au-3
4.9.16 shutdown
Syntax
View
CPOS interface view
Parameter
None
Description
Use the shutdown command to shut down the CPOS physical interface. Use the undo shutdown command to enable the CPOS physical interface. By default, the CPOS physical interface is enabled. Executing the shutdown command on the CPOS physical interface disables all E1/T1 channels and serial interfaces formed by timeslot bundles. They stop transmitting or receiving data as a result. If you execute the undo shutdown command on the CPOS physical interface again, all E1/T1 channels and serial interfaces go up.
Example
# Disable CPOS physical port 1/0/0.
<3Com> system-view

[3Com] controller cpos 1/0/0 [3Com-Cpos1/0/0] shutdown
4.9.17 t1 channel-set
Syntax
t1 t1-number channel-set set-number timeslot-list range [ speed { 56k | 64k } ] undo t1 t1-number channel-set set-number
View
CPOS interface view
Parameter
t1-number: Number of a T1 channel on the CPOS interface, ranging from 1 to 84. set-number: Channel set number in the range 0 to 23. range: Timeslots assigned to the channel set. speed: Specifies how timeslots are bundled. If 56k applies, the timeslots form an N 56 kbps bundle. If 64k applies, timeslots form an N 64 kbps bundle. If the speed is not specified the default is 64 kbps applies.
Description
Use the t1 channel-set command to bundle timeslots on the T1 channel. Use the undo t1 channel-set command to remove the bundle. Related command: t1 unframed.
Note: The t1 channel-set command is only supported by the CPOS(T) interface module.
Example
# Bundle timeslots on T1 channel 1.
<3Com> system-view [3Com] controller cpos 1/0/0 [3Com-Cpos1/0/0] t1 1 channel-set 1 timeslot-list 0-23
# Enter the serial interface view after the bundling operation.


[3Com-Cpos1/0/0] quit [3Com] interface serial 1/0/0/1:1 [3Com-Serial1/0/0/1:1]
# View information on the serial interface formed by the timeslot bundle.

<3Com> display interface serial 1/0/0/1:1
4.9.18 t1 set clock

Syntax
t1 t1-number set clock { master | slave } undo t1 t1-number set clock
View
CPOS interface view
Parameter
t1-number: Number of a T1 channel on the CPOS, ranging from 1 to 84. Master: Set the clock mode of T1 channel to master. slave: Set the clock mode of the T1 channel to slave.
Description
Use the t1 set clock command to configure the clock mode of T1 channel. Use the undo t1 set clock command to restore the default or slave. Different E1 channels on the same CPOS physical interface can use different clock modes.
Example
# Set the clock mode of T1 channel 1 to master.
<3Com> system-view [3Com] controller cpos 1/0/0 [3Com-Cpos1/0/0] t1 1 set clock master
4.9.19 t1 set frame-format

Syntax
t1 t1-number set frame-format { esf | sf } undo t1 t1-number set frame-format
View
CPOS interface view
Parameter
t1-number: Number of a T1 channel on the CPOS interface, ranging from 1 to 84. esf: Sets the T1 channel to use the extended super frame (ESF) format. sf: Sets the T1 channel to use the super frame (SF) format.
Description
Use the t1 set frame-format command to set a frame format for T1 channel. Use the undo t1 set frame-format command to restore the default or ESF.
Example
# Set the frame format of T1 channel 1 to SF.
<3Com> system-view [3Com] controller cpos 1/0/0 [3Com-Cpos1/0/0] t1 1 set frame-format sf
4.9.20 t1 set loopback

Syntax
t1 t1-number set loopback { local | payload | remote } undo t1 t1-number set loopback
View
CPOS interface view
Parameter
t1-number: Number of a T1 channel on the CPOS interface, ranging from 1 to 84. local: Places the T1 channel in local loopback. payload: Places the T1 channel in remote payload loopback. remote: Places the T1 channel in remote loopback.
Description
Use the t1 set loopback command to configure the loopback mode of T1 channel. Use the undo t1 set loopback command to disable loopback (default). Loopback is used for troubleshooting purposes. Disable loopback when the device is working normally. Related command: display controller cpos t1.
Example
# Place T1 channel 1 in remote payload loopback.
<3Com> system-view [3Com] controller cpos 1/0/0 [3Com-Cpos1/0/0] t1 1 set loopback payload
4.9.21 t1 shutdown
Syntax
t1 t1-number shutdown undo t1 t1-number shutdown
View
CPOS interface view
Parameter
t1-number: Number of a T1 channel on the CPOS interface, ranging from 1 to 84.
Description
Use the t1 shutdown command to shut down a T1 channel. Use the undo t1 shutdown command to enable the T1 channel. By default, T1 channel is enabled. Disabling a T1 channel disables the serial interfaces formed on it, if there are any.
Example
# Shut down T1 channel 1.
<3Com> system-view [3Com] controller cpos 1/0/0 [3Com-Cpos1/0/0] t1 1 shutdown
4.9.22 t1 unframed
Syntax
t1 t1-number unframed undo t1 t1-number unframed
View
CPOS interface view
Parameter
t1-number: Number of a T1 channel on the CPOS interface, ranging from 1 to 84.
Description
Use the t1 unframed command to set a T1 channel on the CPOS interface to unframed mode. Use the undo t1 unframed command to restore the default, channelized mode.
T1 channel does not contain frame control information, perform timeslot division, or perform timeslot binding after it is configured to work in unframed mode. Its 24 timeslots and F-bit works as a path to form a serial interface at 1.544Mbit/s. When the T1 channel is set to work in unframed mode, it does not include frame control information and does not allow timeslot division or bundling. Its 24 timeslots and F-bit form a 1.544 Mbps serial interface as a channel.
Example
# Set T1 channel 3 on the CPOS interface 1/0/0 to operate in unframed mode.
<3Com> system-view [3Com] controller cpos 1/0/0 [3Com-Cpos 1/0/0] t1 3 unframed
4.10 POS Interface Configuration Commands

4.10.1 clock
Syntax
View
POS interface view
Parameter
master: Sets the clock mode of the POS interface to master. slave: Sets the clock mode of the POS interface to slave.
Description
Use the clock command to set the clock mode of the POS interface. Use the undo clock command to restore the default, slave.
Example
# Set the clock mode of the interface POS 1/0/0 to master.
<3Com> system-view [3Com] interface pos 1/0/0 [3Com-Pos1/0/0] clock master
4.10.2 crc
Syntax
crc { 16 | 32 } undo crc
View
POS interface view
Parameter
16: Sets CRC length to 16 bits. 32: Sets CRC length to 32 bits.
Description
Use the crc command to set the CRC length on the POS interface. Use the undo crc command to restore the default setting, 32 bits.
Example
# Set the CRC length on the interface POS 1/0/0 to 16 bits.
<3Com> system-view [3Com] interface pos 1/0/0 [3Com-Pos1/0/0] crc 16
4.10.3 display interface pos

Syntax
display interface pos [ interface-number ]
View
Any view
Parameter
interface-number: Interface number. If no interface number is specified, the configuration and state information of all the POS interfaces is displayed.
Description
Use the display interface pos command to view the configuration and state information of one or all POS interfaces.
Example
# Display the configuration and the state information of the interface POS 3/1/0.
<3Com> display interface pos 3/1/0
4.10.4 flag
Syntax
flag { c2 | j0 } hex-value undo flag { c2 | j0 }
View
POS interface view
Parameter
c2: Path signal label byte, a higher-order path overhead byte used to indicate the multiplex structure of virtual container (VC) frames and property of payload. The default value is the hexadecimal number 16. j0: Regeneration section trace message, a section overhead byte used to test continuity of the connection between two ports at the section level. The default value is the hexadecimal number 0. hex-value: Hexadecimal number in the range 0 to ff.
Description
Use the flag command to set the SDH overhead byte. Use the undo flag command to restore the default. Related command: display interface pos.
Example
# Set the overhead byte J0.

<3Com> system-view [3Com] interface pos 1/0/0 [3Com-Pos1/0/0] flag j0 ff
4.10.5 frame-format
Syntax
View
POS interface view
Parameter
sdh: Sets frame type to SDH. sonet: Sets frame type to SONET.
Description
Use the frame-format command to set the frame format of the POS interface. Use the undo frame-format command to restore the default, or SDH. By default, the frame format is SDH.
Example
# Set the frame format of the POS interface to SDH.
<3Com> system-view [3Com] interface pos 1/0/0 [3Com-Pos1/0/0] frame-format sdh
4.10.6 link-protocol
Syntax
link-protocol { fr | hdlc | ppp }
View
POS interface view
Parameter
fr: Specifies Frame Relay as the link layer protocol of the interface.
hdlc: Specifies HDLC as the link layer protocol of the interface. ppp: Specifies PPP as the link layer protocol of the interface.
Description
Use the link-protocol command to set the link layer protocol of the interface. By default, PPP is used.
Example
# Specify HDLC as the link protocol on the POS interface 1/0/0.
<3Com> system-view [3Com] interface pos 1/0/0 [3Com-Pos1/0/0] link-protocol hdlc
4.10.7 loopback
Syntax
loopback { local | remote } undo loopback
View
POS interface view
Parameter
local: Places the POS interface in local loopback. remote: Places the POS interface in remote loopback.
Description
Use the loopback command to configure the loopback function of the POS interface. Use the undo loopback command to disable loopback. By default, loopback is disabled. Loopback is enabled on an interface only for troubleshooting purposes.
Note: If you enable loopback on a POS interface encapsulated with PPP, it is normal for the state of the link layer protocol to be reported down.
Example
# Place the interface POS 1/0/0 in local loopback.
<3Com> system-view [3Com] interface pos 1/0/0 [3Com-Pos1/0/0] loopback local
4.10.8 mtu (POS Interface)

Syntax
mtu size undo mtu
View
POS interface view
Parameter
size: MTU size of the POS interface, which is in bytes. It ranges from 128 to 16384 and defaults to 4470.
Description
Use the mtu command to set the MTU size of the POS interface. Use the undo mtu command to restore the default or 4470 bytes. The MTU setting of a POS interface can affect the assembly and fragmentation of IP packets on the interface. Related command: display interface.
Example
# Set MTU of POS interface 0/0/0 to 1492.
[3Com-pos0/0/0] mtu 1492
4.10.9 scramble
Syntax
scramble undo scramble
View
POS interface view
Parameter
None
Description
Use the scramble command to enable the POS interface to scramble payload data. Use the undo scramble command to disable data scrambling. By default, the POS interface is enabled to scramble payload data.
Example
# Disable the POS interface to scramble payload data.
<3Com> system-view [3Com] interface pos 1/0/0 [3Com-Pos1/0/0] undo scramble
Chapter 5 ATM/DSL Interface Configuratio n Commands
Chapter 5 ATM/DSL Interface Configuration Commands

5.1 ATM/DSL Interface Commands (Public)
5.1.1 display interface atm
Syntax
display interface atm [ interface-number ]
View
Any view
Parameter
interface-number: ATM interface number. If no interface is specified, the configuration and state information of all ATM interfaces is displayed.
Description
Use the display interface atm command to display the configuration and state information about the specified or all ATM interfaces.
Example
# Display the configuration and state information about ATM E1 interface 3/0/0.
[3Com-Atm3/0/0] display interface atm 3/0/0 Atm3/0/0 current state :DOWN Line protocol current state :DOWN Description : Atm3/0/0 Interface
The Maximum Transmit Unit is 1500 Internet protocol processing : disabled AAL enabled: AAL5, Maximum VCs: 128 Current VCs: 0 (0 on main interface) ATM over E1, Scramble enabled, frame-format crc4-adm code hdb3, clock slave,Cable-length long, loopback not set Cable type: 75 ohm non-balanced
Line Alarm: LOS LOF
Line Error: 0 FERR, 0 LCV, 0 CERR, 0 FEBE
Last 0 seconds input
rate 0.00 bytes/sec, 0.00 packets/sec
Last 0 seconds output rate 0.00 bytes/sec, 0.00 packets/sec Input : 0 packets, 0 bytes, 0 buffers 0 errors, 0 crcs, 0 lens, 0 giants, 0 pads, 0 aborts, 0 timeouts 0 overflows, 0 overruns,0 no buffer Output: 0 packets, 0 bytes, 0 buffers 0 errors, 0 overflows, 0 underruns
5.1.2 reset atm

Syntax
reset atm interface [ atm number ]
View
User view
Parameter
atm number: ATM interface number.
Description
Use the reset atm command to clear statistics of all PVCs on the specified ATM interface, excluding statistics about the ATM interface. To clear statistics about ATM interfaces use the reset counters interface command.
Example
# Clear statistics about all PVCs on the specified ATM interface.
<Router> reset atm inter atm 1/0/0
5.2 IMA-E1/T1 Interface Configuration Commands

5.2.1 cable
Syntax
cable { long | short } undo cable
View
ATM E1/T1 interface view
Parameter
long: Long haul mode, with a cable length in the range 151 to 500 meters or 495 to 1640 feet. short: Short haul mode, with a cable length in the range 0 to 150 meters or 0 to 495 feet.
Description
Use the cable command to set the cable length of the ATM E1 interface. Use the undo cable command to restore the default, that is, long haul mode. In this mode, the system can automatically adjust long haul mode and short haul mode. To have the system use short haul mode use the cable short command. Related command: frame-format, code.
Example
# Set the cable length of ATM E1 interface 1/0/1 to long haul.
<3Com> system-view [3Com] interface atm 1/0/1 [3Com-Atm1/0/1] cable long
5.2.2 clock
Syntax
View
Parameter
master: Sets the clock mode of the ATM E1/T1 interface to master. slave: Sets the clock mode of the ATM E1/T1 interface to slave.
Description
Use the clock command to set the clock mode of the ATM E1/T1 interface.
Use the undo clock command to restore the default clock mode, that is, slave. When the ATM E1/T1 interface is operating as DCE set its clock mode to master. When the interface is operating as DTE set its clock mode to slave. When the ATM interfaces on two routers are connected directly through a fiber-optic cable, set the clock mode to master at one end and to slave at the other end.
Example
# Set the clock mode of ATM E1/T1 interface 1/0/1 to master.
<3Com> system-view [3Com] interface atm 1/0/1 [3Com-Atm1/0/1] clock master
5.2.3 code
Syntax
code { hdb3 | ami } code { b8zs | ami } undo code
View
Parameter
ami: Alternate mark inversion. hdb3: High density bipolar of order 3. b8zs: Bipolar with 8-zero substitution.
Description
Use the code command to configure the line coding/decoding format of the E1/T1 line. Use the undo code command to restore the default, that is, HDB3 for E1 and B8ZS for T1. Note that the configured line coding/decoding format must be the same as the one adopted on the peer device.
Example
# Set the line coding/decoding format of ATM E1 interface 1/0/2 to AMI.
<3Com> system-view [3Com] interface atm 1/0/2

[3Com-Atm1/0/2] code ami
5.2.4 differential-delay
Syntax
differential-delay milliseconds undo differential-delay
View
IMA group interface view
Parameter
milliseconds: Maximum differential delay, in the range 25 to 100 milliseconds.
Description
Use the differential-delay command to set the maximum differential delay for the member links in the IMA group. Use the undo differential-delay command to restore the default, that is, 25 milliseconds.
Example
# Set the maximum differential delay for the member links in IMA group 1/0/1 to 25 milliseconds.
[3Com] interface ima 1/0/1 [3Com-Ima-group 1/0/1] differential-delay 25
5.2.5 display interface ima-group

Syntax
display interface ima-group [ slot/card/group-number ]
View
Any view
Parameter
slot: Number of the slot for the ATM E1/T1 interface card. card: Number of the ATM E1/T1 interface card. group-number: IMA group number, an integer in the range 0 to 7.
If no IMA group interface is specified, the configuration of all existing IMA group interfaces and their state information is displayed.
Description
Use the display interface ima-group command to view the configuration and state information about the specified, or all IMA group interfaces.
Example
# Display the configuration and state information about IMA group interface 3/0/1.
[3Com-Atm3/0/0] display interface ima-group 3/0/1 Ima-group3/0/1 current state :DOWN Line protocol current state :DOWN Description : Ima-group3/0/1 Interface
Total available baudrate is 1544000 bps,the baudrate now is 1544000 bps

The Maximum Transmit Unit is 1500 Internet protocol processing : disabled AAL enabled: AAL5, Maximum VCs: 128 Current VCs: 0 (0 on main interface) Physical layer is ATM over IMA IMA-clock: CTC, active-links-minimum: 1 Frame-length: 128, differential-delay-maximum: 25 symmetry: symmetrical configuration and operation
Ima-group state: ImaGroupNeState ImaGroupNeFailureStatus Ima-Link state: IMA Link Number : Test Status: Disabled 1 , First Link: 0 START_UP START_UP ImaGroupFeState ImaGroupFeFailureStatus START_UP START_UP
Last 300 seconds input
rate 0.00 bytes/sec, 0.00 packets/sec
Last 300 seconds output rate 0.00 bytes/sec, 0.00 packets/sec Input : 0 packets, 0 bytes, 0 buffers 0 errors, 0 crcs, 0 lens, 0 giants, 0 pads, 0 aborts, 0 timeouts 0 overflows, 0 overruns,0 no buffer Output: 0 packets, 0 bytes, 0 buffers 0 errors, 0 overflows, 0 underruns
5.2.6 display status interface ima-group

Syntax
display status interface ima-group slot/card/group-number
View
Any view
Parameter
slot: Number of the slot for the ATM E1/T1 interface card. card: Number of the ATM E1/T1 interface card. group-number: IMA group number, an integer in the range 0 to 7.
Description
Use the display status interface ima-group command to view detailed information about the specified IMA group interface.
Example
# Display the detailed information about IMA group interface 3/0/1.
[3Com-Ima-group3/0/1] display status interface ima-group 3/0/1 Set default value for BGP Atm IMA port basic statistic as follows:licy Shutdowns/Noshuts:0/0 LinkUps/LinkDowns:0/0 Specify a BGP pee Set route filtering poli
Ima-group configuration and status : policy ImaGroupTxImaId reflect ImaGroupTxTRLSrc ImaGroupTxTRLSrcCfg S = 0 ImaGroupRxImaId = 0
Specify reflect = 32 = 0 ImaGroupRxTRLSrc ImaGroupRxTRLSrcCfg = 32 = 0
ImaGroupLeastDelayLink = 0 ImaGroupNeTxClkMode ImaGroupTxFrameLen ImaGroupNumTxCfgLinks ImaGroupNumTxActLinks ImaGroupNumTestLink IMA Link Information : Link 0 : = ctc = 128 = 1 = 0 = 0
ImaGroupDiffDelayMaxObs = 0 ImaGroupFeTxClkMode ImaGroupRxFrameLen ImaGroupNumRxCfgLinks ImaGroupNumRxActLinks ImaGroupTestPattern = ctc = 128 = 1 = 0 = 0xff

LinkState : NeTx NeRx FeTx FeRx = = = = Unusable Unusable No_In_Group No_In_Group
LinkFailureStatus : NeRx FeRx = = Lif NoFailure
Link Information : RxLinkId = 0 0
LinkRelDelay =
5.2.7 frame-format
Syntax
frame-format { crc4-adm | no-crc4-adm } frame-format { sf-adm | esf-adm } undo frame-format
View
Parameter
crc4-adm: Sets the ATM over E1 framing format to 4-bit cyclic redundancy check ATM direct mapping (CRC4 ADM). no-crc4-adm: Sets the ATM over E1 framing format to no-CRC4 ADM. sf-adm: Sets the ATM over T1 framing format to super frame ADM (SF ADM). esf-adm: Sets the ATM over T1 framing format to extended super frame ADM (ESF ADM).
Description
Use the frame-format command to configure the ATM over E1/T1 framing format. Use the undo frame-format command to restore the default, that is, CRC4 ADM for ATM E1 and ESF ADM for ATM T1. ADM directly maps the ATM cells transmitted over the E1/T1 line into E1/T1 frames. Its process is defined by ITU-T G.804 and ATM forum. Related command: cable, code.
Example
# Configure no-CRC4 ADM framing on ATM E1 interface 2/0/1.
<3Com> system-view [3Com] interface atm 2/0/1 [3Com-Atm2/0/1] frame-format no-crc4-adm
5.2.8 frame-length
Syntax
frame-length { 32 | 64 | 128 | 256 } undo frame-length
View
Parameter
32, 64, 128, 256: Specifies the number of ATM cells in an IMA frame.
Description
Use the frame-length command to configure the number of ATM cells in an IMA frame. Use the undo frame-length command to restore the default, that is, 128 ATM cells in an IMA frame.
Example
# Set the number of ATM cells in an IMA frame to 64 on IMA group interface 1/0/1.
[3Com] interface ima 1/0/1 [3Com-Ima-group 1/0/1] frame-length 64
5.2.9 ima ima-group

Syntax
ima ima-group group-number undo ima ima-group
View
Parameter
group-number: IMA group number, in the range 1 to 8.
Description
Use the ima ima-group command to add the ATM E1/T1 interface to the specified IMA group. If the specified IMA group does not exist, create it first. Use the undo ima ima-group command to remove the interface from the IMA group.
Note: The first link in the IMA group is the primary link. You can delete it only when you delete the IMA group.
Example
# Add ATM E1 interface 1/0/1 to IMA group 1.
[3Com-Atm 1/0/1] ima ima-group 1
5.2.10 ima-clock
Syntax
ima-clock { itc | ctc [ link_number number ] } undo ima-clock
View
Parameter
itc: Independent transmit clock configuration. In this mode the links in the IMA group use at least two clock sources. ctc: Common transmit clock configuration. In this mode all links in the IMA group share a clock source, which can be an external clock or the one extracted from a member link. link_number number: Number of the E1/T1 link that provides the clock source.
Description
Use the ima-clock command to configure the clock mode of the IMA group.
Use the undo ima-clock command to restore the default, that is, CTC. When the IMA group adopts ITC mode you must set the clock mode of each member ATM E1/T1 link to slave with the clock slave command. When the IMA group adopts CTC mode you must set the clock mode of each member ATM E1/T1 link to master with the clock master command.
Example
# Set the clock mode to ITC on IMA group interface 1/0/1.
[3Com] interface ima 1/0/1 [3Com-Ima-group 1/0/1] ima-clock itc
5.2.11 ima-test
Syntax
ima-test [ link_number number ] [ pattern-id id ] undo ima-test
View
Parameter
link_number number: Number of the test E1/T1 link in the IMA group. pattern-id id: Test pattern, a hexadecimal number in the range 0 to FE.
Description
Use the ima-test command to set a test pattern for testing the connectivity of a specified link to the rest of the IMA group. Use the undo ima-test command to cancel the test. You may test the connectivity of a link to the rest of the IMA group by sending a test pattern over the link. This test pattern is looped over all the active links at the far end and back to the transmitter. To display the connectivity test result execute the display interface ima-group command. If no E1/T1 link is specified, by default, the system sends the test pattern over the first link in the IMA group. If no test pattern is specified, by default, 0xAA applies. By default, IMA group test is disabled.
Example
# Send test pattern AB over link 0 on IMA group interface 1/0/1.
[3Com] interface ima 1/0/1 [3Com-Ima-group 1/0/1] ima-test link-number 0 pattern-id ab
5.2.12 interface atm

Syntax
interface atm number
View
System view
Parameter
number: ATM E1/T1 interface number.
Description
Use the interface atm command to enter the view of the specified ATM E1/T1 interface.
Example
# Enter the view of ATM E1/T1 interface 1/0/1.
<3Com> system-view [3Com] interface atm 1/0/1 [3Com-Atm1/0/1]
5.2.13 interface ima

Syntax
interface ima slot/card/group-number
View
System view
Parameter
slot: Slot number. card: Card number. group-number: IMA group number, in the range 1 to 8.
Description
Use the interface ima command to enter the specified IMA group interface view.
Example
# Enter the view of IMA group interface 1/0/1.
[3Com] interface ima 1/0/1 [3Com-Ima-group 1/0/1]
5.2.14 loopback
Syntax
loopback { cell | local | remote | payload } undo loopback
View
Parameter
cell: Internal cell loopback for checking that the local physical chip is operating. local: Internal loopback for checking that the local service chip is operating. remote: External line loopback for checking that the remote end is normal. payload: External payload loopback for checking that payload framing is normal.
Description
Use the loopback command to configure the loopback mode on the ATM E1/T1 interface. Use the undo loopback command to disable loopback. By default, loopback is disabled.
Example
# Enable payload loopback on ATM E1/T1 interface 1/0/2.
<3Com> system-view [3Com] interface atm 1/0/2 [3Com-Atm1/0/2] loopback payload
5.2.15 min-active-links
Syntax
min-active-links number undo min-active-links
View
Parameter
number: Number of links, in the range 1 to 8.
Description
Use the min-active-links command to configure the minimum number of available links required for the IMA group to operate. Use the undo min-active-links command to restore the default, that is, 1.
Example
# Set the minimum number of available links required for IMA group 1/0/1 to operate to 2.
[3Com] interface ima 1/0/1 [3Com-Ima-group 1/0/1] min-active-links 2
5.2.16 scramble
Syntax
View
Parameter
None
Description
Use the scramble command to enable payload scrambling on the ATM E1/T1 interface. This, however, does not affect cell headers.
Use the undo scramble command to disable payload scrambling. By default, payload scrambling is enabled on the ATM E1/T1 interface.
Example
# Disable payload scrambling on ATM E1/T1 interface 1/0/0.
<3Com> system-view [3Com] interface atm 1/0/0 [3Com-Atm1/0/0] undo scramble
5.3 ATM E3/T3 Interface Configuration Commands

5.3.1 cable
Syntax
cable { long | short } undo cable
View
ATM T3 Interface view
Parameter
long: Long distance mode. Cable length ranges from 151 to 500 meters. short: Short distance mode. Cable length ranges from 0 to 150 meters.
Description
Use the cable command to configure the cable mode of an ATM T3 cable, i.e., to set the distance between the router and the cable distribution frame. Use the undo cable command to restore the default. By default, short distance mode is used.
Example
# Set the cable length mode of ATM T3 1/0/0 to long.
<3Com> system-view [3Com] interface atm 1/0/0 [3Com-Atm1/0/0] cable long
5.3.2 clock
Syntax
View
ATM E3/T3 interface view.
Parameter
master: Sets the clock mode of ATM E3/T3 to master mode. slave: Sets the clock mode of ATM E3/T3 to slave mode.
Description
Use the clock command to set the clock mode of ATM E3/T3 interface. Use the undo clock command to restore the default setting. By default, the clock mode of ATM E3/T3 interface is slave mode.
Example
# Set clock mode of ATM E3/T3 interface 2/0/0 as master.
5.3.3 frame-format
Syntax
frame-format { g832-adm | g751-adm | g751-plcp } frame-format { cbit-adm | cbit-plcp | m23-adm | m23-plcp } undo frame-format
View
Parameter
g832-adm: Configures frame format of ATM E3 as G.823 ATM direct mapping. g751-adm: Configures frame format of ATM E3 as G.751 ATM direct mapping.
g751-plcp: Configures frame format of ATM E3 as G.751 Physical Layer Convergence Protocol (PLCP). cbit-adm: Configures frame format of ATM T3 as C-bit ATM direct mapping. cbit-plcp: Configures frame format of ATM T3 as C-bit PLCP. m23-adm: Configures frame format of ATM T3 as M23 ATM direct mapping. m23-plcp: Configures frame format of ATM T3 as M23 PLCP.
Description
Use the frame-format command to configure frame format of ATM E3/T3 interface. Use the undo frame-format command to restore the default configuration. By default, frame format g751-plcp is used for ATM E3 and cbit-plcp used for ATM T3.
Example
# Configure ATM E3 interface 1/0/0 to use frame format G.832 ADM.
<3Com> system-view [3Com] interface atm 1/0/0 [3Com-Atm1/0/0] frame-format g832-adm
5.3.4 loopback
Syntax
loopback { cell | local | payload | remote } undo loopback
View
Parameter
cell: Internal cell loopback local: Internal loopback. payload: External payload loopback. remote: External line loopback.
Description
Use the loopback command to enable loopback function of interface. Use the undo loopback command to disable loopback function.
By default, loopback is disabled.
Example
# Enable external payload loopback of ATM E3/T3 interface 2/0/0.
<3Com> system-view [3Com] interface atm 2/0/0 [3Com-Atm2/0/0] loopback payload
5.3.5 scramble
Syntax
View
Parameter
None
Description
Use the scramble command to enable scrambling function of ATM E3/T3 interface. Use the undo scramble command to disable scrambling function. By default, scrambling function of ATM E3/T3 interface is enabled. The scramble command scrambles and descrambles the payload without touching the cell header.
Example
# Disable scramble function of ATM E3/T3 interface 2/0/0.
<3Com> system-view [3Com] interface atm 2/0/0 [3Com-Atm2/0/0] undo scramble
5.4 ATM 25M Interface Configuration Commands

5.4.1 clock
Syntax
View
ATM interface view
Parameter
Description
Use the clock command to set the clock mode on an ATM interface. Use the undo clock command to restore the default clock mode on the interface. By default, the ATM interface adopts slave clock. When an ATM interface is working as DCE choose master clock mode. When it is working as DTE choose slave clock mode. When the ATM interfaces of two routers are directly connected by fiber, one end should be configured with master clock mode and the other with slave clock mode.
Example
# Adopt the master clock on the ATM interface 4/0/0.
<3Com> system-view [3Com] interface atm 4/0/0
5.4.2 loopback
Syntax
loopback { cell | local | remote } undo loopback
View
ATM interface view
Parameter
cell: Enables ATM interface cells local loop. local: Enables ATM interface local loop. remote: Enables ATM interface remote loopback.
Description
Use the loopback command to set the loopback function on an ATM OC-3c/STM-1 interface. Use the undo loopback command to cancel the loopback function. By default, loop back is forbidden. Set the interface configuration to local loop or loopback when testing some special functions. In normal circumstances loopback is to be disabled.
Example
# Enable local loopback on the ATM interface.
[3Com-Atm4/0/0] loopback local
5.5 ATM OC-3c/STM-1 Interface Configuration Commands

5.5.1 clock
Syntax
View
ATM interface view
Parameter
Description
Use the clock command to set the clock mode on the ATM interface. Use the undo clock command to restore the default, or slave.
When an ATM interface is working as DCE choose master clock mode. When it is working as DTE choose slave clock mode. When the ATM interfaces of two routers are directly connected by fiber, one end should be configured with master clock mode and the other with slave clock mode.
Example
# Adopt the master clock on the ATM interface 4/0/0.
5.5.2 frame-format
Syntax
View
ATM interface view
Parameter
sdh: Sets the frame format to SDH STM-1. sonet: Sets the frame format to SONET OC-3.
Description
Use the frame-format command to set the frame format of ATM OC-3c/STM-1 interface. Use the undo frame-format command to restore the default setting. By default, the frame format on the ATM OC-3c/STM-1 interface is SONET.
Example
# Set the frame format on the ATM OC-3c/STM-1 interface to SDH.
[3Com-Atm4/0/0] frame-format sdh
5.5.3 loopback
Syntax
loopback { cell | local | remote }
undo loopback
View
ATM interface view
Parameter
cell: Enables the ATM interface to perform cell loopback. local: Enables the ATM interface to perform local loopback. remote: Enables the ATM interface to perform the remote loopback.
Description
Use the loopback command to enable the loopback function on an ATM OC-3c/STM-1 interface. Use the undo loopback command to disable the loopback function. By default, loopback function is disabled. Enable loopback only when performing certain tests.
Example
# Enable the ATM interface to perform local loopback.
[3Com-Atm4/0/0] loopback local
5.5.4 scramble
Syntax
View
ATM interface view
Parameter
None
Description
Use the scramble command to enable an undo scramble to scramble the payload on ATM OC-3c/STM-1 interface. Use the undo scramble command to disable the scrambling function.
By default, the ATM OC-3c/STM-1 interface is enabled to scramble the payload. Executing the scramble command will make an interface scramble and descramble the payload without touching the cell header.
Example
# Disable the ATM interface to scramble the payload.
[3Com-Atm4/0/0] undo scramble
5.6 G.SHDSL Interface Configuration Commands

5.6.1 activate
Syntax
activate undo activate
View
ATM interface view
Parameter
None
Description
Use the activate command to enable the G.SHDSL interface. Use the undo activate command to disable the G.SHDSL interface. By default, the G.SHDSL interface is active. A G.SHDSL interface must be activated before it can transmit services. Activation refers to the training between the G.SHDSL office end and the STU-C end, based on preset items such as SHDSL standard, channel mode, upstream and downstream rates, and SNR margin in link template. The training process detects line distance and performance, negotiates between two ends, and determines if the interface can run normally under such condition. If the training succeeds, a communication link is set up between two ends and the interface is activated on which services can be transferred. Upon deactivation of the interface the office end and the remote device are disconnected. To transmit services over the interface again you must activate it. The commands are mainly used in link testing and fault diagnosis.
The activate/undo activate command differs from the shutdown/undo shutdown command in that it only functions on the G.SHDSL interface. Since a G.SHDSL interface is always on, it enters the active state automatically and remains in this state as long as the link is in good condition. The router supports timed loop detection, so the G.SHDSL interface will be activated again when the link performance has deteriorated.
Example
# Deactivate the G.SHDSL interface.
[3Com-Atm3/0/0] undo activate
5.6.2 shdsl annex

Syntax
shdsl annex { a | b } undo shdsl annex
View
ATM interface view
Parameter
a: Annex a b: Annex b
Description
Use the shdsl annex command to configure annex standard at an SHDSL interface. You cannot activate a link with different standard types at both ends. Use the undo shdsl annex command to restore the default standard, or annex b.
Example
# Restore the default standard type on the SHDSL interface.
[3680E-Atm1/0/0] undo shdsl annex
5.6.3 shdsl rate

Syntax
shdsl rate { auto | rate }
undo rate
View
ATM interface view
Parameter
auto: Auto-negotiation mode rate: Specifies maximum rate. It is in the range 64 to 2312 kbps for a two-wire interface, and 128 to 4624 kbps for a four-wire interface.
Description
Use the shdsl rate command to specify maximum rate at SHDSL interface or just select auto-negotiation mode. Use the undo rate command to restore the default, or auto.
Example
# Restore the auto-negotiation mode on the interface.
[3Com-Atm1/0/0] undo shdsl rate
5.6.4 shdsl snr

Syntax
shdsl snr threshold undo snr
View
ATM interface view
Parameter
threshold: In the range 5 to 30. It defaults to 25.
Description
Use the shdsl snr command to specify the signal-to-noise ratio (SNR) on the SHDSL interface. Use the undo snr command to restore the default value.
Example
# Restore SNR value to the default value.

[3Com-Atm1/0/0] undo shdsl snr
5.6.5 shdsl margin

Syntax
shdsl margin { disable | value } undo margin
View
ATM interface view
Parameter
disable: Ignores target margin in link negotiation. value: Target margin value in the range of 0 to 10.
Description
Use the shdsl margin command to enable SNR target margin. Use the undo margin command to restore the default, or 3.
Example
# Set target margin to eight.
[3Com-Atm1/0/0] shdsl margin 8
5.6.6 display dsl configuration

Syntax
display dsl configuration interface atm interface-number
View
Any view
Parameter
interface-number: Interface number
Description
Use the display dsl configuration command to view the actual DSL configurations.
Example
# Display the actual G.SHDSL configurations.
[3Com-Atm3/0/0]display dsl configuration interface atm 3/0/0 GSHDSL line parameter and mode Configuration Mode: Standard: Annex: Wire Type: Framing: SNR Threshold: Line Rate: Target Margin: Psd Mode: Power-Backoff: CPE G991.2 B 2 3 25 dB Auto Adaptive 3 dB Sym PSD Disable
--Actual Handshake Status -00: 0002 0000 0000 0000 0000 0000 0000 0000 0000 0000 10: 0000 0008 0000 0000 0000 0000 0000 0000 0008 0000 20: 0000 0000 0002 0002 0004 0010 --Local Handshake Status -00: 0002 0001 0000 0000 0000 0000 0034 003f 003f 003f 10: 003f 003f 0003 0034 003f 003f 003f 003f 003f 0003 20: 0000 0000 0003 0003 000f 0010 --Remote Handshake Status -00: 0002 0000 0000 0000 0000 0000 0030 003f 003f 003f 10: 003f 000f 0000 0030 003f 003f 003f 003f 000f 0000 20: 0000 0000 0003 0003 0004 0010
Table 5-1 Description on the output of the display dsl configuration command Field Operating Mode Wire Type Phy Op State Xcvr Op State Description CPE stands for customer premises equipment and CO for central office. The options include 2-line type and 4-line type. Currently only 2-linetype is available. Interface state and the options include activating, active, startup, deactivated and test mode. Transceiver state and the options include idle, data mode, handshaking and training.
Field Mode Standard Annex Wire Type SNR Threshold Target Margin Line Rate PSD Mode Power-Backoff Actual Status Handshake
Description Operating mode, customer premises equipment (CPE) or central office (CO) The supported standard The available options are a and b. Two-wire system or four-wire system. So far, only two-wire system is available. Signal to noise ratio threshold Power spectral density mode: symmetric or asymmetric Power compensation
Remote Handshake Status
5.6.7 display dsl status

Syntax
display dsl status interface atm interface-number
View
Any view
Parameter
Description
Use the display dsl status interface atm command to view the state of the specified DSL interface.
Example
# Display state about the specified G.SHDSL interface.
[3Com-Atm3/0/0] display dsl status interface atm 3/0/0

Operating Mode: CPE Standard: Wire Type: Phy Op State: Xcvr Op State: LineRate Mode: Target Margin: LOC Detect: Losw Defect: Frm Sync: G991.2 2 Active Data Mode Adaptive 3 dB 0 0 1
Tx Cells: Rx Cells: Drop Cells: HecErr Cells: CRCS: SEGAS: LOSWS:
0 0 0 0 135 335 4
Int Count TX EOC: RX EOC: RX LOSD: RX SEGA: RX PS: RX SEGD: RX LOSWS: 0 4 0 0 0 0 1
Actual Rate(kbps): Actual Annex: Actual SNR (dB): Actual LoopAttn(dB): Actual RecvGain(dB): Actual TxPower(dBm): Actual Wire Type: FrmOH Stat: Rmt Encoder A : Rmt Encoder B : Rmt NSF Cusdata :
2064 B 38 0.9 11.4 14.5 2 0x0f 0x6e010000 0x31030000 0x0000

Rmt NSF CusID : Rmt Country Code : Rmt Provider Code: 0x0000 0x00b5 0x4753504e NPSG Rmt Vendor Data:
0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00
Table 5-2 Description on the output of the display dsl status command Field Operating Mode Wire Type Phy Op State Xcvr Op State Target Margin Line Rate CPE or CO Two-wire system or four-wire system. So far, only two-wire system is available. Interface state. The options include activating, active, startup, deactivate, and test mode. Transceiver state. The options include idle, data mode, handshaking, and training. Description
The following information is displayed for active lines only. Actual Rate(kbps) Actual Annex Actual SNR (dB) Actual LoopAttn(dB) Actual RecvGain(dB) Actual TxPower(dBm) Actual Wire Type FrmOH Stat Rmt Encoder A Rmt Encoder B Rmt NSF Cusdata Rmt NSF CusID Rmt Country Code Actual rate, decided through line negotiation The actual annex supported by the interface The actual signal to noise ratio threshold applied to the line Actual loop attenuation Actual receive gain Actual transmit gain Firmware over head state Encoding coefficient A Encoding coefficient B User data User ID Country code
Field Rmt Provider Code Rmt Vendor Data
Description The code and acronym of the chip provider The code of the chip vendor
5.6.8 display dsl version

Syntax
display dsl version interface atm interface-number
View
Any view
Parameter
Description
Use the display dsl version command to view the DSL version and the available functionality.
Example
# Display the G.SHDSL version on interface ATM 3/0/0.
[3Com-Atm3/0/0] display dsl version interface atm 3/0/0 Dsl Line Type: ATM SAR Device: ATM SAR Revision: Chipset Vendor: Firmware Rel-Rev: DSP Version: PCB Version: CPLD Version: Driver Version: Hardware Version: ITU G991.2 ANNEX A: ITU G991.2 ANNEX B: G.SHDSL 0x823614f1 0x02 GSPN R2.30.1-0 1 0.0 0.0 2.0 1.0 Supported Supported
Table 5-3 Description on the output of display dsl version interface atm Field Operating Mode Wire Type Phy Op State Xcvr Op State Target Margin Line Rate CPE or CO Two-wire system or four-wire system. So far, only two-wire system is available. Interface state. The options include activating, active, startup, deactivate, and test mode. Transceiver state. The options include idle, data mode, handshaking, and training. Description
The following information is displayed for active lines only. Actual Rate(kbps) DSL line Type ATM SAR Device ATM SAR Revision Chipset Vendor Firmware Rel-Rev DSP Version PCB Version CPLD Version Driver Version Hardware Version ITU G991.2 ANNEX A, ITU G991.2 ANNEX B Actual rate, decided through line negotiation Type of the user access line Identifier of the SAR chip Revision identifier of the SAR chip Identifier of the DSL chipset vendor Identifier and version of the firmware Logic version Driver software version Standards and the annexes supported by the interface
5.6.9 shdsl mode

Syntax
shdsl mode { co | cpe }
View
ATM interface view
Parameter
co: Sets to the central office (CO) mode. cpe: Sets to the customer premises equipment (CPE) mode.
Description
Use the shdsl mode command to set the operating mode of the G.SHDSL interface. On a back-to-back connection you must set one end to CO mode and the other end to CPE mode. By default, the G.SHDSL interface is operating in CPE mode.
Example
# Set the operating mode of interface ATM 1/0/0 to CO mode.
[3Com-Atm1/0/0] shdsl mode co
5.7 ADSL Interface Configuration Commands

5.7.1 activate
Syntax
activate undo activate
View
ADSL interface view
Parameter
None
Description
Use the activate command to activate the ADSL interface. Use the undo activate command to deactivate the ADSL interface. By default, the ADSL interface is active. Before an ADSL port can operate services you must activate it. ACTIVATE in this particular context refers to the training conducted between the ADSL central office and the
remote ATU-R. The activation procedure is specified in compliance with the ADSL standard, channel mode, uplink and downlink speeds, and the noise tolerance specified in the line configuration template. It will test the line distance and state, make the central office and the remote device make negotiation, and confirm whether the normal operation is allowed in the above conditions. If the training succeeds, the central office and the remote device can set up a communication connection for transporting services between them. This process is also called port activation. This connection will disappear upon the deactivation of the ADSL port. To transport new services you must re-activate the port. This command is used to activate/deactivate an ADSL line manually for the purpose of testing and troubleshooting. The commands activate/undo activate and shutdown/undo shutdown are different in the sense that the former can only take effect on ADSL lines. You should note that ADSL is always on line, which is different from DCC. Therefore, after the device is booted, the ADSL interface will automatically enable the activation task and enter active state. It will stay active so long as the line is in good condition. The router tests the line performance at a regular interval and will automatically deactivate the line, and make a new training and re-activation once it finds out that the line performance has deteriorated.
Example
# Deactivate the ADSL interface.
[3Com-Atm1/0/0] undo activate
5.7.2 adsl standard

Syntax
adsl standard { auto | gdmt | glite | t1413 } undo adsl standard
View
ADSL interface view
Parameter
auto: Auto-sensing mode. gdmt: G.DMT (G992.1) standard. glite: G.Lite (G992.2) standard. t1413: T1.413 standard.
Description
Use the adsl standard command to set the standard applied to the ADSL interface. Use the undo adsl standard command to restore the default, or auto. Note that this configuration will not take effect unless you activate the interface again. If you want to have it take effect immediately execute the shutdown/undo shutdown command or the activate/undo activate command.
Example
# Set the standard for the interface atm1/0/0 as T1.413.
[3Com-Atm1/0/0]adsl stand t1413 [3Com -Atm1/0/0]shutdown Interface Atm1/0/0 has already been shutdown [3Com -Atm1/0/0]undo shutdown [3Com -Atm1/0/0] %Nov 20 21:17:12 2003 3680E PHY/2/PHY: Atm1/0: change status to up
%Nov 20 21:17:13 2003 3680E IFNET/5/UPDOWN:Line protocol on the interface Atm1/0/0 turns into UP state
[3Com -Atm1/0/0]display dsl configuration int atm 1/0/0
Line Params Set by User Standard: Annex: Framing: Coding Gain(dB): Tx Pow Attn(dB): Bit-Swap: LinkCheck: T1.413 A 3 Auto 0 disable Enable
Actual Config Standard: Trellis Coding: Framing: Vendor ID:
Near End T1.413 Enable 3 0x0039
Far End T1.413 Enable 3 0x0004
AS0 (DS) Rate(Bytes): Rate(kbps): 238 7616
LS0(US) 26 832

Latency: FEC(fast): S/D/R(Inlv): Intlv 0 1/64/16

Intlv 0 8/8/16
DMT Bits Allocation Per Bin (Up/Down Bits:249/2148) 00: 0 0 0 0 0 0 7 8 a a a a 8 a b c c c b b b b b b 9 9 a a 9 8 8 0 20: 0 0 0 0 2 2 2 3 4 4 5 6 6 7 7 8 8 8 8 8 9 9 a a a a a a a 8 9 a 40: 0 a a a a b b b b b a b b b b b b b b b b b b b b b b b b b b b 60: b b b b b b b b b b b b b b b b b b b a 9 4 a b b b b b b b b b 80: b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b a0: b b b a b a b a b b a b b b b b a a b a a b b a a a a a a a a a c0: a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a e0: a 9 9 a 9 9 9 9 9 9 8 9 9 9 9 9 9 9 9 9 8 8 8 8 8 7 7 7 7 6 6 6
5.7.3 adsl tx_attenuation

Syntax
adsl tx_attenuation attenuation undo adsl tx_attenuation
View
ADSL interface view
Parameter
attenuation: Attenuation value in the range 0 to 12. It defaults to 0.
Description
Use the adsl tx_attenuation command to set attenuation value for ADSL transmit power. Use the undo adsl tx_attenuation command to restore the default value.
Example
[3Com-Atm1/0/0] adsl tx_attenuation 10
5.7.4 display dsl configuration

Syntax
display dsl configuration interface atm interface-number
View
Any view
Parameter
interface-number: Interface number.
Description
Use the display dsl configuration command to view the actual ADSL configurations.
Example
# Display the actual ADSL configurations.
[3Com-Atm1/0/0]display dsl configuration interface atm 1/0/0 Line Params Set by User Standard: Annex: Framing: Coding Gain(dB): Tx Pow Attn(dB): Bit-Swap: LinkCheck: T1.413 A 3 Auto 0 disable Enable
Actual Config Standard: Trellis Coding: Framing: Vendor ID:
Near End T1.413 Enable 3 0x0039
Far End T1.413 Enable 3 0x0004
AS0 (DS) Rate(Bytes): Rate(kbps): Latency: FEC(fast): S/D/R(Inlv): 238 7616 Intlv 0 1/64/16
LS0(US) 26 832 Intlv 0 8/8/16
DMT Bits Allocation Per Bin (Up/Down Bits:249/2148) 00: 0 0 0 0 0 0 7 8 a a a a 8 a b c c c b b b b b b 9 9 a a 9 8 8 0 20: 0 0 0 0 2 2 2 3 4 4 5 6 6 7 7 8 8 8 8 8 9 9 a a a a a a a 8 9 a 40: 0 a a a a b b b b b a b b b b b b b b b b b b b b b b b b b b b
60: b b b b b b b b b b b b b b b b b b b a 9 4 a b b b b b b b b b 80: b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b b a0: b b b a b a b a b b a b b b b b a a b a a b b a a a a a a a a a c0: a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a e0: a 9 9 a 9 9 9 9 9 9 8 9 9 9 9 9 9 9 9 9 8 8 8 8 8 7 7 7 7 6 6 6
Table 5-4 Description on the output of the display dsl configuration command Field Line Params Set by User Description Line parameters at ATU-R end, for example, standard, DMT mode, framing, trellis coding or not. You can only modify the standard for special testing or diagnosis, but not the others.
The following information appears after the link is activated. Actual Config Rate(kbps) Latency DMT Bits Allocation Per Bin Actual operating parameters after the link is activated Negotiated rate, AS0 (DS) downlink and LS0 (US) uplink, in units of kbps Delay mode and the options include fast and interleave. The actual bits allocated to each Bin.
5.7.5 display dsl status

Syntax
display dsl status interface atm interface-number
View
Any view
Parameter
Description
Use the display dsl status command to view the DSL state information.
Example
# Display state about the ADSL on interface ATM 1/0/0.
[3Com-Atm1/0/0]display dsl status interface atm 1/0/0

State of driver/chipsets Phy Op State: Xcvr Op State: Active Data Mode
Active Params SNR Margin(dB): Attenuation(dB): Coding Gain(dB): Tx Power(dBm): Tx Bin Number: Rate(kbps):
Near End 16.0 1.0 5.5 8.3 25 832
Far End 3.0 2.0
21.7 219 7616
Adsl Count SEF(sef): LOS(los): RSI(fec-I): RSF(fec-F): CRCI(crc-I): CRCF(crc-F): ATM Count NCDI(ncd-I): NCDF(ncd-F): OCDI(ocd-I): OCDF(ocd-F): HECI(hec-I): HECF(hec-F):
Near End 0 0 0 0 2 0
Far End 0 0 0 0 0 0
0 0 0 0 0 0
0 0
0 0
Adsl Defects Overall: SEF(sef): LOS(LOS): ATM Defects NCDI(ncd-I): NCDF(ncd-F): LCDI(lcd-I): LCDF(lcd-F): 0 0 0 0 0 0 0 0 0 0 0 0 0
Table 5-5 Description on the output of the display dsl status command Field State driver/chipsets Phy Xcvr of Description Interface state and transceiver state Interface state and options include activating, active, startup, deactivated and test mode Transceiver state and options include idle, data mode, handshaking and training.
The following information appears after the link is activated. Line parameters and indices, including SNR margin, attenuation, Tx Bin Number, and so on. The present rate (kbps) is consistent with the output of the display dsl configuration command. Error and correction statistics form the chipset. For their types, refer to ITU-T G. 992 and ANSI T1.413-1998. It shows the current link situation. When the link is deteriorated, non-zero value may appear. While it turns to normal or is activated again, those existing statistics will be cleared. The overall failures is an aggregate value, but others not.
Active Params
Adsl Count
Adsl Defects
5.7.6 display dsl version

Syntax
display dsl version interface atm interface-number
View
Any view
Parameter
Description
Use the display dsl version command to view DSL version and the available capabilities.
Example
# Display the ADSL version information.
[3Com-Atm1/0/0] display dsl version interface atm 1/0/0
Adsl board chipset and version info Dsl Line Type: Dsl Line Type: ATM SAR Device: ATM SAR Revision: Chipset Vendor: FW Release: Revision: DSP Version: AFE Version: PCB Version: CPLD Version: Driver Version: Hardware Version: Adsl Over Pots Adsl Over Pots 0x823614f1 0x02 GSPN T7941 1 0 0 0.0 1.0 2.0 1.0
Adsl Capability ANSI T1.413 Issue 2: ITU G992.1 ITU G992.2 ANNEX A: : Supported Supported Supported
Table 5-6 Description on the output of the display adsl version command Field Adsl board chipset and version info DSL line Type SAR Device Chipset Vendor FW Release DSP Version AFE Version PCB Version Driver Version CPLD Version Adsl Capability Description The components of the interface board and the version Type of the user access line Identifier of the SAR chip Identifier of the ADSL chipset vendor Identifier and version of the firmware Version of the driver software Version of the logic The standard and annex supported by the interface.
Chapter 6 Fundamental Logical Interface Configuration Commands

This chapter only discusses basic configurations of logical interfaces. For the configuration of link and network layer protocols refer to the relevant parts in this manual.
6.1 WAN Subinterface Configuration Commands

6.1.1 interface
Syntax
interface interface-type interface-number.subinterface-number [ p2mp | p2p ] undo interface interface-type interface-number.subinterface-number
View
System view
Parameter
interface-type: Type of interface. interface-number: Interface number. subinterface-number: Number of subinterface, in the range 1 to 1024. p2mp: Sets the type of the subinterface to point to multipoint. It is the default subinterface type. p2p: Sets the type of the subinterface to point to point.
Description
Use the interface command to create a P2MP or P2P subinterface. Use the undo interface command to delete the specified subinterface. By default, the type of subinterface is point to multipoint. You may configure point to multipoint or point to point subinterfaces on interfaces that are ATM, or on interfaces encapsulated with Frame Relay or X.25. You may create up to 1,024 subinterfaces on a main interface.
Example
# Create a subinterface on ATM interface 2/0/0.
<3Com> system-view [3Com] interface atm 2/0/0.1 [3Com-Atm2/0/0.1]
6.2 Ethernet Subinterface Configuration Commands

6.2.1 display vlan
Syntax
display vlan [ vlan_id [ to ] vlan_id | all ]
View
Any view
Parameter
vlan_id: Specifies a VLAN by its VLAN ID, which is defined in IEEE802.1Q, in the range 1 to 4094. It defaults to 1. all: Displays information on all VLANs.
Description
Use the display vlan command to view information on VLANs. If vlan_id or all is specified, information on the specified VLAN or all VLANs is displayed including VLAN ID and the included ports. If no parameter is specified all VLAN lists that have been created in the system are displayed.
Example
# Display information on VLAN 2.
<3Com> display vlan 2 VLAN ID: 2 Tagged Ports: none
Untagged Ports: Ethernet3/1 Ethernet3/2 Ethernet3/3
Table 6-1 Description on the information on VLAN2 Field VLAN ID Tagged Ports Untagged Ports ID of the VLAN Indicates on which ports the VLAN packet should be tagged. Indicates on which ports the VLAN packet is not to be tagged. Description
6.2.2 display vlan interface

Syntax
display vlan interface interface-type interface-num
View
Any view
Parameter
interface-type interface-num: Specifies the interface. At present, the interface types supported include Ethernet interface and Gigabit Ethernet interface, and it only supports sub-interface.
Description
Use the display vlan interface command to view VLAN configuration information on a certain interface (only supporting sub-interface).
Example
# Display the VLAN configuration information at the Ethernet interface 2/0/0.1.
<3Com> display vlan interface ethernet 2/0/0.1 encapsulation isl vid 60
6.2.3 display vlan max-packet-process

Syntax
display vlan max-packet-process vid
View
Any view
Parameter
vid: VLAN ID, used to identify a VLAN.
Description
Use the display vlan max-packet-process command to view the maximum number of processed packets configured on a certain VLAN per second. Related command: max-packet-process.
Example
# Display the maximum number of processed packets configured on the VLAN 10.
<3Com> display vlan max-packet-process 10 Max Packet Process Count for Vid 10 is 300000
6.2.4 display vlan statistics interface

Syntax
display vlan statistics interface interface-type interface-num protocol { arp | ip }
View
Any view
Parameter
interface-type interface-num: Used to specify the interface. At present, the interface types supported include Ethernet interface and Gigabit Ethernet interface, and it only supports sub-interface. arp: packet type is ARP. ip: packet type is IP.
Description
Use the display vlan statistics interface command to view the packet statistics on a certain VLAN. Related command: reset vlan statistics interface.
Example
# Display the VLAN statistics on Ethernet subinterface 2/0/0.1.
<3Com> display vlan statistics interface ethernet 2/0/0.1 Packets Discarded : 0

Packets forwarded to IP/ARP module Packets forwarded by VLAN module: 0 : 0
6.2.5 display vlan statistics vid

Syntax
display vlan statistics vid vid
View
Any view
Parameter
Description
Use the display vlan statistics vid command to view the packet statistics on a certain VLAN, e.g. the received packet number and the sent packet number. Related command: reset vlan statistics interface.
Example
# Display the packet statistics on VLAN 10.
<3Com> display vlan statistics vid 10 Packets received: 53 Packets transmitted: 14
6.2.6 interface ethernet

Syntax
interface ethernet interface-number.subinterface-number undo interface ethernet interface-number.subinterface-number
View
System view
Parameter
interface-number: Interface number. subinterface-number: Subinterface number, in the range 1 to 4096.
Description
Use the interface ethernet command to create Ethernet subinterface. Use the undo interface ethernet command to delete the specified Ethernet subinterface. You need to create Ethernet subinterfaces when configuring VLANs. To know how to create and configure VLANs refer to the section Link Layer Protocol in the manual. You may create up to 256 subinterfaces on one main Ethernet interface.
Example
# Create a subinterface on Ethernet interface 1/0/0.
[3Com] interface ethernet 1/0/0.1 [3Com-Ethernet1/0/0.1]
6.2.7 max-packet-process
Syntax
max-packet-process count vid undo max-packet-process vid
View
System view
Parameter
count: Maximum number of processed packets. vid: VLAN ID, used to identify a VLAN.
Description
Use the max-packet-process command to set the maximum number of processed packets per second on a certain VLAN. Use the undo max-packet-process command to restore it to the default setting. By default, the system has no limitation on the maximum number of processed packets. After setting the maximum number of processed packets per second on a certain VLAN, and the received packet number belonging to this VLAN reaches the limitation, the subsequently received packets belonging to the VLAN will be discarded. Through this command you can perform flow control. Related command: display vlan max-packet-process.
Example
# Set the maximum number of processed packets per second on the VLAN 10 as 200000.
[3Com] max-packet-process 200000 10
6.2.8 reset vlan statistics interface

Syntax
reset vlan statistics interface interface-type interface-num
View
User view
Parameter
interface-type interface-num: Used to specify the interface. At present, the interface types supported include Ethernet interface and Gigabit Ethernet interface, and it only supports sub-interface.
Description
Use the reset vlan statistics interface command to clear VLAN statistics on a certain interface. Related command: display vlan statistics interface.
Example
# Clear the VLAN statistics on Ethernet subinterface 2/0/0.1.
<3Com> reset vlan statistics interface ethernet 2/0/0.1
6.2.9 reset vlan statistics vid

Syntax
reset vlan statistics vid vid
View
User view
Parameter
Description
Use the reset vlan statistics vid command to clear the VLAN statistics. Related command: display vlan statistics vid.
Example
# Clear the statistics with VLAN ID 10.
<3Com> reset vlan statistics vid 10
6.2.10 vlan-type dot1q

Syntax
vlan-type dot1q vid vid
View
Interface view
Parameter
vid: VLAN ID, used to identify a VLAN, its value ranges from 1 to 4094.
Description
Use the vlan-type dot1q command to set the encapsulation types on the sub-interface. By default, there is no encapsulation on the subinterface, nor a VLAN ID related to the subinterface. Related command: display vlan interface.
Example
# Set the Ethernet sub-interface 2/0/0.1 to be related to VLAN ID 60, and its encapsulation format is dot1q.
[3Com-Ethernet2/0/0.1] vlan-type dot1q vid 60
6.3 Logical Channel Interface

6.3.1 interface logic-channel
Syntax
interface logic-channel interface-number undo interface logic-channel interface-number
View
System view
Parameter
interface-number: Number of the logical channel interface, in range of 0 to 1023.
Description
Use the interface logic-channel command to create a logical channel interface. Use the undo interface logic-channel command to delete the specified logical channel interface. Once created, the logical channel interface will maintain the UP state until deleted.
Example
# Create the logical channel interface 100.
[3Com] interface logic-channel 100 [3Com-Logic-Channel100]
6.4 Configuration Commands of Virtual Template and Virtual Access Interface

6.4.1 broadcast-limit link
Syntax
broadcast-limit link number undo broadcast-limit link
View
Virtual template view
Parameter
number: Maximum number of links that the virtual template supports for sending multicast or broadcast packets. It is in the range of 0 to 128, and defaults to 30.
Description
Use the broadcast-limit link command to configure the maximum number of links that the virtual template supports for sending multicast or broadcast packets. Use the undo broadcast-limit link command to restore the default.
When there are many links on the virtual template, sending multicast or broadcast packets from each link may influence the function of the system. In this case, the broadcast-limit link command can be used for limitation, so that multicast or broadcast packets will be discarded if the link number exceeds the limitation.
Example
# Configure maximum link number of virtual template 1 supporting sending multicast or broadcast packet to be 100.
[3Com] interface virtual-template 1 [3Com-Virtual-Template1] broadcast-limit link 100
6.4.2 display interface virtual-template

Syntax
display interface virtual-template [ number ]
View
Any view
Parameter
virtual-template: Virtual template. number: Number of the virtual template, in the range of 0 to 1023. If no virtual template is specified the state of all virtual templates is displayed.
Description
Use the display interface virtual-template command to view the state of the specified or all virtual templates.
Example
# View the state about the specified virtual template.
<3Com> display interface virtual-template 1
6.4.3 display virtual-access

Syntax
display virtual-access { dialer [ number ] | vt [ vt-number ] | user user-name | peer peer-address | va-number }*
View
Any view
Parameter
dialer number: Dialer interface number. vt-number: Number of the virtual template to which the virtual access interface is assigned. user-name: Login username of virtual access interface. peer-address: Peer address of the virtual access interface. va-number: Sequence number of the virtual access interface.
Description
Use the display virtual-access command to view the state information about the specified or all virtual access interfaces.
Example
# Display state information about all virtual access interfaces.
<3Com> display virtual-access vt Virtual-Template1:0 current state :UP Line protocol current state :UP Description : Virtual-Template1:0 Interface The Maximum Transmit Unit is 1500 Link layer protocol is PPP LCP opened, MP opened, IPCP opened, OSICP opened Physical is MP, baudrate: 64000 Output queue : (Urgent queue : Size/Length/Discards) 0/50/0
Output queue : (Protocol queue : Size/Length/Discards) 0/500/0 Output queue : (FIFO queuing : Size/Length/Discards) Last 300 seconds input: Last 300 seconds output: 0/75/0
0 bytes/sec 0 packets/sec 0 bytes/sec 0 packets/sec
4 packets input, 50 bytes, 0 drops 4 packets output, 50 bytes, 0 drops
6.4.4 interface virtual-template

Syntax
interface virtual-template number undo interface virtual-template number
View
System view
Parameter
number: Number of the virtual template, in the range 0 to 1023.
Description
Use the interface virtual-template command to create a virtual template or enter the existing virtual template view. Use the undo interface virtual-template command to delete the specified virtual template. You must create a virtual template before creating virtual access interfaces, and disable it after disabling the virtual access interface. In deleting a virtual template, make sure that all its virtual access interfaces have been removed and this virtual template is no longer in use.
Example
# Create virtual template 10.
[3Com] interface virtual-template 10 [3Com-Virtual-Template10]
6.5 MP-Group Interface Configuration Commands

6.5.1 display interface mp-group
Syntax
display interface mp-group [ number ]
View
Any view
Parameter
number: Number of the MP-group interface. If no MP-group interface is specified, the state of all MP-group interfaces is displayed.
Description
Use the display interface mp-group command to view the state of the specified or all MP-group interfaces.
Example
# Display the state about all MP-group interfaces.
<3Com> display interface mp-group
6.5.2 interface mp-group

Syntax
interface mp-group number undo interface mp-group number
View
System view
Parameter
number: Number of MP-group interface, in the range of 0 to 1023. That is, an interface board supports up to 1024 MP-group interfaces.
Description
Use the interface mp-group command to create an MP-group interface. Use the undo interface mp-group command to delete the specified MP-group interface. Use this command in conjunction with the ppp mp mp-group command to create an MP-group interface and add an interface to it. These two tasks are order independent.
Example
# Create MP-group interface 3.
[3Com] interface mp-group 3 [3Com-mp-group 3]
6.6 Virtual Ethernet Interface Configuration Commands

6.6.1 display interface virtual-ethernet
Syntax
display interface virtual-ethernet [ number ]
View
Any view
Parameter
number: Number of the virtual Ethernet interface, in the range of 0 to 1023. If no interface is specified the state of all virtual Ethernet interfaces is displayed.
Description
Use the display interface virtual-ethernet command to view the state of of the specified or all virtual Ethernet interfaces.
Example
# View the state about virtual Ethernet interface 1.
<3Com> display interface virtual-ethernet 1
6.6.2 interface virtual-ethernet

Syntax
interface virtual-ethernet number undo interface virtual-ethernet number
View
System view
Parameter
number: Number of virtual Ethernet interface, in the range of 0 to 1023.
Description
Use the interface virtual-ethernet command to create a virtual Ethernet interface. Use the undo interface virtual-ethernet command to delete the specified virtual Ethernet interface. Virtual Ethernet interfaces are mainly applied to PPPoEoA and IPoEoA.
Example
# Create virtual Ethernet interface 12.
[3Com] interface virtual-ethernet 12 [3Com-Virtual-Ethernet12]
6.6.3 mac-address
Syntax
mac-address H-H-H undo mac-address
View
Virtual Ethernet interface view
Parameter
H-H-H: Mac address of virtual Ethernet interface, in hexadecimal format.
Description
Use the mac-address command to configure the Mac address of virtual Ethernet interface. Use the undo mac-address command to restore the default. By default, for virtual Ethernet interface created on VIU, its MAC address is the same as the MAC address of Ethernet interface carried by VIU itself. For virtual Ethernet interface created on RSU, its MAC address is 0 by default.
Example
# Configure MAC address of virtual Ethernet interface 10.
[3Com] interface virtual-ethernet 10 [3Com-Virtual-Ethernet10/0/0] mac-address 1000-1000-1000
6.7 Configuration Command of Loopback Interface and Null Interface

6.7.1 display interface loopback
Syntax
display interface loopback [ number ]
View
Any view
Parameter
number: Number of loopback interface, which must have been created. If no loopback interface is specified the state of all created loopback interfaces is displayed.
Description
Use the display interface loopback command to view state of the specified or all created loopback interfaces. Related command: interface loopback.
Example
# View state about the specified loopback interface.
<3Com> display interface loopback 0 LoopBack0 current state :UP Line protocol current state :UP (spoofing) Description : LoopBack0 Interface
The Maximum Transmit Unit is 1536 Internet Address is 1.1.1.1/32 Physical is Loopback Last 300 seconds input: Last 300 seconds output: 0 bytes/sec 0 packets/sec 0 bytes/sec 0 packets/sec
6.7.2 display interface null

Syntax
display interface null [ 0 ]
View
Any view
Parameter
0: Number of null interface, fixed as 0.
Description
Use the display interface null command to view the state of the null interface. Whether you specify the keyword does not affect the result. Related command: interface null.
Example
# View the state about null 0 interface.

<3Com> display interface null 0 NULL0 current state :UP
Line protocol current state :UP (spoofing) Description : NULL0 Interface
The Maximum Transmit Unit is 1500 Internet protocol processing : disabled Physical is NULL DEV Last 300 seconds input: Last 300 seconds output: 0 bytes/sec 0 packets/sec 0 bytes/sec 0 packets/sec
6.7.3 interface loopback

Syntax
interface loopback number undo interface loopback number
View
System view
Parameter
number: Number of the loopback interface, in the range of 0 to 1023.
Description
Use the interface loopback command to create a loopback interface or its view. Use the undo interface loopback command to delete the specified loopback interface. After created, the loopback interface keeps up until it is shutdown. As it has the loopback feature, it is often used to improve reliability. You can shut down a loopback interface using the shutdown command. When you do this, Line protocol current state :UP (spoofing) is displayed describing the current state of the link layer protocol on the interface. Related command: display interface loopback.
Example
# Create loopback interface 5.
[3Com] interface loopback 5 [3Com-LoopBack5]
6.7.4 interface null

Syntax
interface null 0
View
System view
Parameter
None
Description
Use the interface null command to enter null interface view. There is only one null interface, that is, null 0, which always keeps up, and cannot be shut down or deleted. Related command: display interface null.
Example
# Enter the view of null 0 interface.
[3Com] interface null 0 [3Com-NULL0]
Command Reference Guide Link Layer Protocol v2.30 Router Software
Table of Contents
Table of Contents
Chapter 1 PPP and MP Configuration Commands .................................................................... 1-1 1.1 PPP and MP configuration commands.............................................................................. 1-1 1.1.1 display ppp mp ........................................................................................................ 1-1 1.1.2 link-protocol ppp ...................................................................................................... 1-3 1.1.3 ppp mp binding-mode ............................................................................................. 1-4 1.1.4 ppp authentication-mode......................................................................................... 1-5 1.1.5 ppp chap password ................................................................................................. 1-6 1.1.6 ppp chap user.......................................................................................................... 1-7 1.1.7 ppp ipcp dns ............................................................................................................ 1-8 1.1.8 ppp ipcp dns admit-any ........................................................................................... 1-8 1.1.9 ppp ipcp remote-address forced ............................................................................. 1-9 1.1.10 ppp ipcp dns request........................................................................................... 1-10 1.1.11 ppp lqc................................................................................................................. 1-11 1.1.12 ppp mp ................................................................................................................ 1-12 1.1.13 ppp mp mp-group................................................................................................ 1-13 1.1.14 ppp mp lfi............................................................................................................. 1-14 1.1.15 ppp mp max-bind ................................................................................................ 1-14 1.1.16 ppp mp min-bind ................................................................................................. 1-15 1.1.17 ppp mp min-fragment .......................................................................................... 1-16 1.1.18 ppp mp user ........................................................................................................ 1-17 1.1.19 ppp mp virtual-template....................................................................................... 1-18 1.1.20 ppp pap local-user............................................................................................... 1-19 1.1.21 ppp timer negotiate ............................................................................................. 1-20 1.1.22 timer hold............................................................................................................. 1-20 1.2 PPP Link Efficiency Mechanism Commands................................................................... 1-21 1.2.1 debugging ppp compression iphc rtp .................................................................... 1-21 1.2.2 debugging ppp compression iphc tcp ................................................................... 1-22 1.2.3 display ppp compression iphc rtp.......................................................................... 1-23 1.2.4 display ppp compression iphc tcp ......................................................................... 1-23 1.2.5 display ppp compression stac-lzs ......................................................................... 1-24 1.2.6 ip tcp vjcompress................................................................................................... 1-24 1.2.7 ppp compression iphc ........................................................................................... 1-25 1.2.8 ppp compression iphc rtp-connections ................................................................. 1-26 1.2.9 ppp compression iphc tcp-connections................................................................. 1-27 1.2.10 ppp compression stac-lzs.................................................................................... 1-28
3Com Corporation i
Table of Contents
1.2.11 ppp mp lfi............................................................................................................. 1-28 1.2.12 ppp mp lfi delay-per-frag ..................................................................................... 1-29 1.2.13 reset ppp compression iphc ................................................................................ 1-30 1.2.14 reset ppp compression stac-lzs........................................................................... 1-30 Chapter 2 PPPoE Configuration Commands.............................................................................. 2-1 2.1 PPPoE Server Configuration Commands.......................................................................... 2-1 2.1.1 display pppoe-server session.................................................................................. 2-1 2.1.2 pppoe-server bind virtual-template.......................................................................... 2-2 2.1.3 pppoe-server log-information off ............................................................................. 2-3 2.1.4 pppoe-server max-sessions local-mac ................................................................... 2-4 2.1.5 pppoe-server max-sessions remote-mac................................................................ 2-4 2.1.6 pppoe-server max-sessions total ............................................................................ 2-5 2.1.7 reset pppoe-server .................................................................................................. 2-6 2.2 PPPoE Client Configuration Commands ........................................................................... 2-6 2.2.1 debugging pppoe-client........................................................................................... 2-6 2.2.2 display pppoe-server session.................................................................................. 2-7 2.2.3 pppoe-client............................................................................................................. 2-9 2.2.4 reset pppoe-client.................................................................................................. 2-10 Chapter 3 ISDN Configuration Commands ................................................................................. 3-1 3.1 ISDN Configuration Commands ........................................................................................ 3-1 3.1.1 debugging isdn ........................................................................................................ 3-1 3.1.2 dialer isdn-leased (ISDN BRI Leased Line Configuration)...................................... 3-2 3.1.3 display isdn active-channel ..................................................................................... 3-3 3.1.4 display isdn call-info ................................................................................................ 3-3 3.1.5 display isdn call-record............................................................................................ 3-5 3.1.6 display isdn parameters .......................................................................................... 3-6 3.1.7 display isdn spid ...................................................................................................... 3-7 3.1.8 isdn bch-local-manage ............................................................................................ 3-9 3.1.9 isdn bch-select-way............................................................................................... 3-10 3.1.10 isdn caller-number............................................................................................... 3-10 3.1.11 isdn calling........................................................................................................... 3-11 3.1.12 isdn check-called-number ................................................................................... 3-12 3.1.13 isdn crlength ........................................................................................................ 3-12 3.1.14 isdn ignore connect-ack ...................................................................................... 3-14 3.1.15 isdn ignore hlc ..................................................................................................... 3-15 3.1.16 isdn ignore llc ...................................................................................................... 3-16 3.1.17 isdn ignore sending-complete ............................................................................. 3-17 3.1.18 isdn L3-timer........................................................................................................ 3-18 3.1.19 isdn number-property .......................................................................................... 3-19
3Com Corporation ii
Table of Contents
3.1.20 isdn overlap-sending ........................................................................................... 3-24 3.1.21 isdn pri-slipwnd-size............................................................................................ 3-25 3.1.22 isdn protocol-type................................................................................................ 3-26 3.1.23 isdn send-restart ................................................................................................. 3-27 3.1.24 isdn spid auto_trigger.......................................................................................... 3-28 3.1.25 isdn spid nit ......................................................................................................... 3-28 3.1.26 isdn spid timer ..................................................................................................... 3-29 3.1.27 isdn spid service.................................................................................................. 3-30 3.1.28 isdn spid resend .................................................................................................. 3-31 3.1.29 isdn spid1 ............................................................................................................ 3-32 3.1.30 isdn spid2 ............................................................................................................ 3-33 3.1.31 isdn statistics ....................................................................................................... 3-34 3.1.32 isdn two-tei .......................................................................................................... 3-35 Chapter 4 SLIP Configuration Commands ................................................................................. 4-1 4.1 SLIP Configuration Commands ......................................................................................... 4-1 4.1.1 debugging slip ......................................................................................................... 4-1 4.1.2 link-protocol slip....................................................................................................... 4-1 Chapter 5 HDLC Configuration Commands ............................................................................... 5-1 5.1 HDLC Configuration Commands ....................................................................................... 5-1 5.1.1 link-protocol hdlc ..................................................................................................... 5-1 5.1.2 timer hold................................................................................................................. 5-1 Chapter 6 Frame Relay Configuration Commands .................................................................... 6-1 6.1 Frame Relay Configuration Commands ............................................................................ 6-1 6.1.1 debugging fr ............................................................................................................ 6-1 6.1.2 debugging fr compress............................................................................................ 6-3 6.1.3 debugging fr compression....................................................................................... 6-4 6.1.4 debugging pppofr .................................................................................................... 6-4 6.1.5 display fr compress ................................................................................................. 6-5 6.1.6 display fr dlci-switch ................................................................................................ 6-6 6.1.7 display fr inarp-info.................................................................................................. 6-7 6.1.8 display fr interface ................................................................................................... 6-8 6.1.9 display fr lmi-info ..................................................................................................... 6-8 6.1.10 display fr map-info................................................................................................. 6-9 6.1.11 display fr map pppofr........................................................................................... 6-10 6.1.12 display fr pvc-info ................................................................................................ 6-11 6.1.13 display fr statistics ............................................................................................... 6-12 6.1.14 display interface mfr ............................................................................................ 6-13 6.1.15 display mfr ........................................................................................................... 6-14
Table of Contents
6.1.16 fr compression frf9 .............................................................................................. 6-17 6.1.17 fr compression iphc ............................................................................................. 6-18 6.1.18 fr dlci.................................................................................................................... 6-19 6.1.19 fr dlci-switch......................................................................................................... 6-19 6.1.20 fr inarp ................................................................................................................. 6-20 6.1.21 fr interface-type ................................................................................................... 6-21 6.1.22 fr iphc................................................................................................................... 6-22 6.1.23 fr lmi n391dte....................................................................................................... 6-23 6.1.24 fr lmi n392dce...................................................................................................... 6-24 6.1.25 fr lmi n392dte....................................................................................................... 6-25 6.1.26 fr lmi n393dce...................................................................................................... 6-26 6.1.27 fr lmi n393dte....................................................................................................... 6-27 6.1.28 fr lmi t392dce....................................................................................................... 6-28 6.1.29 fr lmi type............................................................................................................. 6-29 6.1.30 fr map ip .............................................................................................................. 6-29 6.1.31 fr map ppp interface virtual-template .................................................................. 6-30 6.1.32 fr switch ............................................................................................................... 6-31 6.1.33 fr switching .......................................................................................................... 6-32 6.1.34 interface mfr ........................................................................................................ 6-33 6.1.35 interface serial [ p2p | p2mp ].............................................................................. 6-34 6.1.36 link-protocol fr...................................................................................................... 6-34 6.1.37 link-protocol fr mfr ............................................................................................... 6-35 6.1.38 mfr bundle-name ................................................................................................. 6-36 6.1.39 mfr fragment ........................................................................................................ 6-37 6.1.40 mfr fragment-size ................................................................................................ 6-37 6.1.41 mfr link-name....................................................................................................... 6-38 6.1.42 mfr retry ............................................................................................................... 6-39 6.1.43 mfr timer ack........................................................................................................ 6-40 6.1.44 mfr timer hello...................................................................................................... 6-40 6.1.45 mfr window-size................................................................................................... 6-41 6.1.46 shutdown ............................................................................................................. 6-42 6.1.47 reset fr inarp ........................................................................................................ 6-42 6.1.48 timer hold............................................................................................................. 6-43 Chapter 7 ATM Configuration Commands.................................................................................. 7-1 7.1 ATM Configuration Commands ......................................................................................... 7-1 7.1.1 atm-class ................................................................................................................. 7-1 7.1.2 atm class ................................................................................................................. 7-1 7.1.3 atm-link check ......................................................................................................... 7-2 7.1.4 clock ........................................................................................................................ 7-3
3Com Corporation iv
Table of Contents
7.1.5 debugging atm all .................................................................................................... 7-4 7.1.6 debugging atm error................................................................................................ 7-5 7.1.7 debugging atm event............................................................................................... 7-5 7.1.8 debugging atm packet............................................................................................. 7-6 7.1.9 display atm class ..................................................................................................... 7-8 7.1.10 display atm interface ............................................................................................. 7-9 7.1.11 display atm map-info ........................................................................................... 7-10 7.1.12 display atm pvc-group ......................................................................................... 7-11 7.1.13 display atm pvc-info ............................................................................................ 7-12 7.1.14 encapsulation ...................................................................................................... 7-13 7.1.15 interface atm........................................................................................................ 7-14 7.1.16 ip-precedence...................................................................................................... 7-15 7.1.17 map bridge .......................................................................................................... 7-16 7.1.18 map ip.................................................................................................................. 7-18 7.1.19 map ppp .............................................................................................................. 7-19 7.1.20 mtu ...................................................................................................................... 7-20 7.1.21 oam ais-rdi........................................................................................................... 7-21 7.1.22 oam frequency..................................................................................................... 7-21 7.1.23 oamping interface................................................................................................ 7-22 7.1.24 pvc....................................................................................................................... 7-23 7.1.25 pvc-group ............................................................................................................ 7-25 7.1.26 pvc max-number.................................................................................................. 7-26 7.1.27 pvp limit ............................................................................................................... 7-27 7.1.28 service cbr ........................................................................................................... 7-28 7.1.29 service ubr........................................................................................................... 7-29 7.1.30 service vbr-nrt...................................................................................................... 7-30 7.1.31 service vbr-rt........................................................................................................ 7-31 7.1.32 transmit-priority.................................................................................................... 7-32 Chapter 8 LAPB and X.25 configuration commands ................................................................. 8-1 8.1 LAPB and X.25 Configuration Commands ........................................................................ 8-1 8.1.1 channel.................................................................................................................... 8-1 8.1.2 debugging lapb........................................................................................................ 8-1 8.1.3 debugging pad......................................................................................................... 8-2 8.1.4 debugging x25......................................................................................................... 8-3 8.1.5 debugging x25 xot................................................................................................... 8-4 8.1.6 debugging x25 x2t................................................................................................... 8-4 8.1.7 display interface ...................................................................................................... 8-5 8.1.8 display x25 alias-policy ........................................................................................... 8-8 8.1.9 display x25 cug........................................................................................................ 8-9
3Com Corporation v
Table of Contents
8.1.10 display x25 hunt-group-info................................................................................. 8-10 8.1.11 display x25 map .................................................................................................. 8-11 8.1.12 display x25 pad ................................................................................................... 8-12 8.1.13 display x25 switch-table pvc................................................................................ 8-13 8.1.14 display x25 switch-table svc................................................................................ 8-13 8.1.15 display x25 vc...................................................................................................... 8-15 8.1.16 display x25 xot..................................................................................................... 8-17 8.1.17 display x25 x2t switch-table ................................................................................ 8-18 8.1.18 lapb max-frame ................................................................................................... 8-19 8.1.19 lapb modulo......................................................................................................... 8-19 8.1.20 lapb retry ............................................................................................................. 8-20 8.1.21 lapb timer............................................................................................................. 8-21 8.1.22 lapb window-size ................................................................................................. 8-22 8.1.23 link-protocol lapb ................................................................................................. 8-22 8.1.24 link-protocol x25 .................................................................................................. 8-23 8.1.25 pad ...................................................................................................................... 8-24 8.1.26 reset xot............................................................................................................... 8-25 8.1.27 reset x25.............................................................................................................. 8-25 8.1.28 reset lapb............................................................................................................. 8-26 8.1.29 translate ip........................................................................................................... 8-26 8.1.30 translate X25 ....................................................................................................... 8-27 8.1.31 x25 alias-policy.................................................................................................... 8-28 8.1.32 x25 call-facility ..................................................................................................... 8-30 8.1.33 x25 cug-service ................................................................................................... 8-31 8.1.34 x25 default-protocol............................................................................................. 8-32 8.1.35 x25 hunt-group .................................................................................................... 8-33 8.1.36 x25 ignore called-address ................................................................................... 8-34 8.1.37 x25 ignore calling-address .................................................................................. 8-35 8.1.38 x25 local-cug ....................................................................................................... 8-36 8.1.39 x25 map............................................................................................................... 8-37 8.1.40 x25 modulo.......................................................................................................... 8-39 8.1.41 x25 packet-size ................................................................................................... 8-40 8.1.42 x25 pvc ................................................................................................................ 8-41 8.1.43 x25 queue-length ................................................................................................ 8-43 8.1.44 x25 receive-threshold.......................................................................................... 8-43 8.1.45 x25 response called-address .............................................................................. 8-44 8.1.46 x25 response calling-address ............................................................................. 8-45 8.1.47 x25 reverse-charge-accept ................................................................................. 8-46 8.1.48 x25 roa-list........................................................................................................... 8-47
3Com Corporation vi
Table of Contents
8.1.49 x25 switch pvc ..................................................................................................... 8-47 8.1.50 x25 switch svc hunt-group................................................................................... 8-49 8.1.51 x25 switch svc interface ...................................................................................... 8-51 8.1.52 x25 switch svc xot ............................................................................................... 8-52 8.1.53 x25 switching....................................................................................................... 8-53 8.1.54 x25 timer hold...................................................................................................... 8-54 8.1.55 x25 timer idle ....................................................................................................... 8-55 8.1.56 x25 timer tx0........................................................................................................ 8-56 8.1.57 x25 timer tx1........................................................................................................ 8-56 8.1.58 x25 timer tx2........................................................................................................ 8-57 8.1.59 x25 timer tx3........................................................................................................ 8-58 8.1.60 x25 vc-per-map ................................................................................................... 8-59 8.1.61 x25 vc-range........................................................................................................ 8-59 8.1.62 x25 window-size .................................................................................................. 8-60 8.1.63 x25 x121-address................................................................................................ 8-61 8.1.64 x25 xot pvc .......................................................................................................... 8-62 8.1.65 x29 timer inviteclear-time .................................................................................... 8-64 Chapter 9 Bridge Configuration Commands .............................................................................. 9-1 9.1 Bridge Configuration Commands....................................................................................... 9-1 9.1.1 bridge aging-time..................................................................................................... 9-1 9.1.2 bridge bridge-set enable ......................................................................................... 9-1 9.1.3 bridge bridging......................................................................................................... 9-2 9.1.4 bridge enable........................................................................................................... 9-3 9.1.5 bridge learning......................................................................................................... 9-3 9.1.6 bridge mac-address ................................................................................................ 9-4 9.1.7 bridge routing .......................................................................................................... 9-5 9.1.8 bridge routing-enable .............................................................................................. 9-6 9.1.9 bridge-set ................................................................................................................ 9-7 9.1.10 debugging bridge .................................................................................................. 9-7 9.1.11 display bridge address-table ................................................................................. 9-8 9.1.12 display bridge information ..................................................................................... 9-9 9.1.13 display bridge traffic ............................................................................................ 9-11 9.1.14 display firewall ethernet-frame-filter .................................................................... 9-13 9.1.15 dlsw ethernet-frame-filter .................................................................................... 9-14 9.1.16 firewall ethernet-frame-filter ................................................................................ 9-15 9.1.17 fr map bridge ....................................................................................................... 9-16 9.1.18 interface bridge-template .................................................................................... 9-16 9.1.19 reset bridge address-table .................................................................................. 9-17 9.1.20 reset bridge traffic ............................................................................................... 9-18
Table of Contents
9.1.21 reset firewall ethernet-frame-filter ....................................................................... 9-18 9.1.22 x25 map bridge.................................................................................................... 9-19
3Com Corporation viii
Chapter 1 PPP and MP Configuration Commands

1.1 PPP and MP configuration commands
1.1.1 display ppp mp
Syntax
display ppp mp [ interface interface-type interface-num ]
View
Any view
Parameter
interface-type interface-num: Specifies the interface to be checked.
Description
Use the display ppp mp command to view all interface information and statistics of MP. Related command: link-protocol ppp, ppp mp.
Example
# Display information about MP interfaces, which are configured using virtual templates.
<3Com> display ppp mp Template is Virtual-Template1 max-bind: 100, min-fragment: 128 ,LFI max-delaly: 100
Bundle Multilink, 2 member, slot 0, Master link is Virtual-Template1:0 Peer's endPoint descriptor: 244258d44d45 Bundle Up Time: 2005/03/13 15:04:08:870
0 lost fragments, 0 reordered, 0 unassigned, 0 interleaved, sequence 0/0 rcvd/sent The bundled member channels are: Serial1/0/0 Serial1/0/1 Up-Time:2005/03/13 Up-Time:2005/03/13 15:04:08:870 15:04:08:870
Table 1-1 Description on the fields of the display ppp mp command Field Template is Virtual-Template1 max-bind: 100 min-fragment: 128 LFI max-delaly: 100 Bundle Multilink 2 member slot 3 Peer's endPoint 244258d44d45 descriptor: Description Virtual-template interface. The MP bundle can accommodate up to 100 links Minimum size of an MP fragment is 128 bytes Maximum delay of transmitting an LFI fragment is 100 milliseconds Remote MP user name is multilink Two channels in the bundle Bundled in slot 3. The endpoint descriptor of the peer is 244258d44d45 Master link is Virtual-Template1:0 Lost fragments. Number of reordered packets. Fragments waiting for reorder. Number of interleaved packets Received sequence number/sent sequence number The following displays all the member channels bundled on this logical channel Subchannel Serial1/0/0 is up at 15:04:08:870 on March 13, 2005
Master link is Virtual-Template1:0 0 lost fragments 0 reordered 0 unassigned 0 interleaved sequence 0/0 rcvd/sent The bundled member channels are: Serial1/0/0 Up-Time:2005/03/13 15:04:08:870
# Display information about MP interfaces, which are configured using MP-groups.

<3Com> display ppp mp Mp-group is Mp-group0 max-bind: 20, min-fragment: 128 ,LFI max-delaly: 100
Bundle Multilink, slot 0, Master link is Mp-group0 Peer's endPoint descriptor: 1e9935f57c85 Bundle Up Time: 2005/03/13 19:54:23:60
0 lost fragments, 0 reordered, 0 unassigned, 0 interleaved, sequence 0/0 rcvd/sent
Member channels: 6 active, 4 inactive Serial1/0/1:15 Serial1/0/1:16 Serial1/0/1:17 Serial1/0/1:18 Serial1/0/1:19 Serial1/0/1:20 Serial1/0/1:21 Serial1/0/1:22 Serial1/0/1:23 Serial1/0/1:24 Up-Time:2005/03/13 Up-Time:2005/03/13 Up-Time:2005/03/13 Up-Time:2005/03/13 Up-Time:2005/03/13 Up-Time:2005/03/13 (inactive) (inactive) (inactive) (inactive) 19:54:23:60 19:54:23:60 19:54:23:60 19:54:23:60 19:54:23:60 19:54:23:60
# Display PPP configuration and operating state of the interface.

<3Com> display interface serial4/0/0 Serial3/0/0 current state : UP Line protocol current state : UP Description : Serial0 Interface The Maximum Transmit Unit is 1500, The keepalive is 10(sec) Internet Address is 1.1.1.1/8 Link protocol is PPP LCP opened, IPCP opened, MPLSCP opened FIFO queueing: FIFO: 0/75/0 (Outbound queue:Size/Length/Discards)
Interface is V35 3196 packets input, 3557 packets output, 41596 bytes 81749 bytes
The related information includes the current status of LCP and IPCP. Users can diagnose some faults according to the information.
1.1.2 link-protocol ppp

Syntax
link-protocol ppp
View
Interface view
Parameter
None
Description
Use the link-protocol ppp command to configure the link-layer protocol encapsulated on the interface as PPP. By default, the link-layer protocol for interface encapsulation is PPP. PPP is a link-layer protocol bearing network-layer packets over the point-to-point link. It defines a whole set of protocols including LCP (link control protocol), NCP (network-layer control protocol), PAP (Password Authentication Protocol), and CHAP (Challenge Handshake Authentication Protocol). It is widely used for it supports user authentication, easy scalability, and synchronization/asynchronization. Related command: display interface.
Example
# Configure PPP encapsulation on interface Serial 0/0/0.
[3Com- Serial0/0/0] link-protocol ppp
1.1.3 ppp mp binding-mode

Syntax
ppp mp binding-mode { authentication | both | descriptor } undo ppp mp binding-mode
View
Virtual template view, dialer interface view
Parameter
authentication: Performs the MP binding according to the authentication user name of PPP. both: Performs the MP binding based on both the authentication user name of PPP and the terminal identifier. descriptor: Performs the MP binding according to the terminal identifier.
Description
Use the ppp mp binding-mode command to set the MP binding condition. Use the undo ppp mp binding-mode command to restore the default value of the MP binding condition.
By default, it performs the MP binding based on both the authentication user name of PPP and the terminal identifier. User name is the peer received by the PPP link performing PAP or CHAP authentication, while the terminal identifier, as a unique flag of a Router, is the peer received in performing the LCP negotiation. The system can perform the MP binding based on the received user name and terminal identifier, and then the interfaces with the identical user name or the same terminal identifier are bound together. Related command: ppp mp user.
Example
# Perform MP bundling only based on the user name of the PPP authentication.
[3Com-Dialer0] ppp mp binding-mode authentication
1.1.4 ppp authentication-mode

Syntax
ppp authentication-mode { chap | pap } [ domain isp-name ] undo ppp authentication-mode
View
Interface view
Parameter
chap, pap: Authentication mode. You must specify one option, not both of them. domain: Domain name in user authentication.
Description
Use the ppp authentication-mode command to set the mode that the local PPP uses to authenticate the peer router. Use the undo ppp authentication-mode command to disable authentication. If you configure the ppp authentication-mode { pap | chap } command without specifying a domain, the system-default domain or default_system applies by default, adopting local authentication and using the global address pool for address allocation. You may view the configuration of this default domain with the display domain command. If a domain is specified you must configure an address pool in the specified domain.
If a received username includes a domain name, this domain name is used for authentication (if the name does not exist, authentication is denied). Otherwise, the domain name configured for PPP authentication applies. If the username does not include a domain name, and the domain name configured for PPP authentication does not exist, authentication is also denied. By default, no authentication is performed. There are two PPP authentication algorithms: PAP is a two-way handshake authentication, which sends the password in plain text. CHAP is a three-way handshake authentication, which sends the password in encrypted text. In addition, the defined AAA authentication algorithm list can be used. CHAP and PAP are just an authentication processes. The success of the authentication is decided by AAA, which can authenticate on the basis of the local authentication database or AAA server. Related command: local-user, ppp chap user, ppp pap local-user, ppp pap password, ppp chap password.
Example
# Authenticate the peer router by means of PAP on interface Serial 0/0/0.
[3Com-Serial0/0/0] ppp authentication-mode pap domain system
1.1.5 ppp chap password

Syntax
ppp chap password { simple | cipher } password undo ppp chap password
View
Interface view
Parameter
password: Password. simple, cipher: Passwords in plain text or in encrypted text.
Description
Use the ppp chap password command to configure the default CHAP password while performing CHAP authentication.
Use the undo ppp chap password command to cancel the configuration. While configuring CHAP authentication, you should configure the local password to be the same as the user password at the other end. Related command: ppp authentication-mode chap, local-user.
Example
# Set the user password as 3Com in plain text when the local router perform the authentication via CHAP.
[3Com-Serial1/0/0] ppp chap password simple 3Com
1.1.6 ppp chap user

Syntax
ppp chap user username undo ppp chap user
View
Interface view
Parameter
username: User name of CHAP authentication, which is the one sent to the peer equipment to be authenticated. username is a string of 1 to 80 characters.
Description
Use the ppp chap user command to configure the user name when performing the CHAP authentication. Use the undo ppp chap user command to delete the existing configuration. By default, the user name of CHAP authentication is blank. While configuring CHAP authentication you should configure the username of each end as the local-user of the peer end, and configure the corresponding password accordingly. Related command: ppp authentication-mode, local-user.
Example
# Configure the local user name as Root when CHAP authentication is performed on interface Serial0/0/0.
[3Com-Serial1/0/0] ppp chap user Root
1.1.7 ppp ipcp dns

Syntax
ppp ipcp dns primary-dns-address [ secondary-dns-address ] undo ppp ipcp dns primary-dns-address [ secondary-dns-address ]
View
Interface view
Parameter
primary-dns-address: Address of the primary DNS server. secondary-dns-address: Address of the secondary DNS server.
Description
Use the ppp ipcp dns command to enable the router to allocate a DNS address to the peer. Use the undo ppp ipcp dns command to disable the router to allocate a DNS server address to the peer. By default, the router does not allocate DNS server addresses. The router can allocate DNS server addresses after being solicited to the devices connected to it using PPP, PCs dialed to it for example, allowing these devices to access the network using their domain names. If you are connected to the router using a PC, you can execute the winipcfg command or the ipconfig/all command to view the provided DNS server address. Related command: ppp authentication-mode pap, ppp ipcp dns admit-any, ppp ipcp request, local-user.
Example
# Configure the primary DNS address of the local Router as 100.1.1.1, and the secondary DNS address as 100.1.1.2.
[3Com-Serial0/0/0] ppp ipcp dns 100.1.1.1 100.1.1.2
1.1.8 ppp ipcp dns admit-any

Syntax
ppp ipcp dns admit-any undo ppp ipcp dns admit-any
View
Interface view
Parameter
None
Description
Use the ppp ipcp dns admit-any command to enable the router to accept the unsolicited DNS server address allocated by the peer without sending a DNS request. When the router is connected using PPP to another device, a network access server of a service provider for example, this allows the router to use the unsolicited DNS server allocated by the peer after negotiation to resolve domain names. Use the undo ppp ipcp dns admit-any command to disable the router to accept the unsolicited DNS server address allocated by the peer. By default, the router does not accept the unsolicited DNS address allocated by the peer. Related command: ppp authentication-mode pap, ppp ipcp dns, ppp ipcp request, local-user.
Example
# Enable the router to accept the unsolicited DNS server address allocated by the peer.
[3Com-Serial0/0/0] ppp ipcp dns admit-any
1.1.9 ppp ipcp remote-address forced

Syntax
ppp ipcp remote-address forced undo ppp ipcp remote-address forced
View
Interface view
Parameter
None
Description
Use the ppp ipcp remote-address forced command to forbid the peer to use the fix self-configured IP address, but to use the one allocated by this router.
Use the undo ppp ipcp remote-address forced command to cancel the setting of forcible address allocation, allowing the peer to use its self-configured IP address. By default, the peer can use its self-configured IP address in PPP IPCP negotiation. If the peer explicitly requests this end for an address, this end acts as requested; if the peer already has a self-configured IP address, this end does not allocate one to the peer. If the peer is not allowed to use self-configured IP address you must configure the ppp ipcp remote-address forced command on the local interface. Related command: remote address.
Example
# The PPP-encapsulated interface serial 0/0/0 wants to allocate the IP address 10.0.0.1 to the peer. The peer can accept this allocated address, a self-configured address, or have no address.
[3Com-Serial0/0/0] remote address 10.0.0.1
# The PPP-encapsulated interface serial 0/0/0 wants to allocate the IP address 10.0.0.1 to the peer. The peer must accept this allocated address and cannot use a self-configured address or have no address.
[3Com-Serial0/0/0] remote address 10.0.0.1 [3Com-Serial0/0/0] ppp ipcp remote-address forced
1.1.10 ppp ipcp dns request

Syntax
ppp ipcp dns request undo ppp ipcp dns request
View
Interface view
Parameter
None
Description
Use the ppp ipcp dns request command to enable the router to request the peer for a DNS server address. When the router is connected using PPP to another device, a network access server of a service provider for example, this allows the router to use the DNS server allocated by the peer after negotiation to resolve domain names.
Use the undo ppp ipcp dns request command to disable the router to request the peer for a DNS server address. By default, the router is disabled from requesting the peer for a DNS server address.
Note: The valid DNS server address obtained after negotiation is displayed in the output information about the corresponding interface.
Related command: ppp authentication-mode pap, ppp ipcp dns, ppp ipcp dns admit-any, local-user.
Example
# Enable interface Dialer0 to request for a DNS server address.
[Router-Dialer0] ppp ipcp dns request
1.1.11 ppp lqc

Syntax
ppp lqc forbidden-percentage [ resumptive-percentage ] undo ppp lqc
View
Interface view
Parameter
forbidden-percentage: Link quality percentage threshold. Once the quality of a link decreases below this percentage, the link is taken down. It is in the range of 0 to 100. resumptive-percentage: Link quality percentage threshold. The link that has been taken down is brought up again once its quality exceeds this percentage. It is in the range of 0 to 100.
Description
Use the ppp lqc command to enable PPP link quality control (LQC). Use the undo ppp lqc command to disable PPP link quality control. By default, PPP LQC is disabled.
By default, the arguments resumptive-percentage and forbidden-percentage are equal. You may use PPP LQC to monitor the quality of PPP links including those in MP bundles. The system shuts down a link when its quality decreases below the forbidden-percentage, and brings it up when its quality ameliorates exceeding the resumptive-percentage. When re-enabling the link, PPP LQC experiences a delay to avoid link flapping. Note that the value of resumptive-percentage must be equal to or greater than that of forbidden-percentage. When enabling LQC at both ends of a PPP link, you must use the same parameter settings on the routers at both ends. Normally, you are not encouraged to enable LQC at both ends of a link. In addition, you are not encouraged to enable PPP LQC on a dial-up line. That is, in case the link is disabled the DCC would disconnect the dial-up line, resulting in inability of LQC to work. LQC can operate again only after the DCC brings the dial-up line up again for transmitting data. Related command: timer hold.
Example
# Enable LQC on interface Serial 0/0/0, setting forbidden-percentage to 90% and resumptive-percentage to 95%.
[Router-Serial0/0/0] ppp lqc 90 95
1.1.12 ppp mp
Syntax
ppp mp undo ppp mp
View
Interface view
Parameter
None
Description
Use the ppp mp command to enable the interface encapsulated with PPP to operate in the MP mode. Use the undo ppp mp command to enable the interface to operate in Single PPP mode.
By default, the interface encapsulated with PPP operates in Single PPP mode. To increase the bandwidth, multiple PPP links can be bound to form a logical MP interface. For this purpose, it is necessary to specify a virtual-template in system view. MP can be configured and used only at the physical interfaces which can encapsulate PPP. To enable MP, you must configure the ppp mp command and the PAP or CHAP authentication at the physical interface. Related command: link-protocol ppp, ppp mp user, interface virtual-template.
Example
# Configure the PPP encapsulated interface Serial0/0/0 to work in MP mode.
[3Com-Serial1/0/0] ppp mp
1.1.13 ppp mp mp-group

Syntax
ppp mp mp-group number undo ppp mp mp-group number
View
Interface view
Parameter
number: MP-group interface number.
Description
Use the ppp mp mp-group command to add the current interface to the specified MP-group. Use the undo ppp mp mp-group command to remove the current interface from the specified MP-group. Use this command in conjunction with the interface mp-group command to create an MP-group interface and add an interface to the MP-group. These two tasks are order independent. Note that the interfaces added to an MP group must be physical. The logical interfaces such as tunnel interfaces do not support this command.
Example
# Add serial interface 3/0/0 to MP-group 3.

[3Com] interface serial 3/0/0
[3Com-Serial3/0/0] ppp mp mp-group 3
# Remove serial interface 3/0/0 from MP-group 3.

[3Com-Serial3/0/0] undo ppp mp mp-group 3
1.1.14 ppp mp lfi

Syntax
ppp mp lfi [ delay-per-frag max-delay ] undo ppp mp lfi [ delay-per-frag ]
View
Virtual template interface view
Parameter
max-delay: Maximum delay in millisecond, its value ranges from 1 to 1000.
Description
Use the ppp mp lfi command to configure the link fragmentation and interleaving features. Use the undo ppp mp lfi command to restore the default configuration. By default, the value of number is 10.
Example
# Set a maximum delay of 100 milliseconds for per fragmentation.
[3Com-Virtual-Template0] ppp mp lfi delay-per-frag 100
1.1.15 ppp mp max-bind

Syntax
ppp mp max-bind max-bind-num undo ppp mp max-bind
View
Virtual template view, dialer interface view
Parameter
max-bind-num: Indicates maximum number of links which can be bound, in the range from 1 to 128.
Description
Use the ppp mp max-bind command to configure maximum number of bound links of MP. Use the undo ppp mp max-bind command to restore the default configuration. By default, its value is 16. Normally, it is not necessary to configure the parameter, which should be performed under the guidance of technical engineers when necessary. Such a configuration may have an impact on the performance of PPP. If it is necessary to bind more than 16 PPP channels, the parameter max-bind-num can be changed.
Note: If MP fails to delete links, it is possible that the maximum binding number is smaller than the configured one. Make sure that the maximum binding number is larger than the actual one. After you change the maximum number of links in an MP bundle on a virtual-template or dialer interface, you must shutdown and undo shutdown all the physical interfaces to validate the modification.
Related command: ppp mp.
Example
# Set the maximum number of bound links to 12.
[3Com-Virtual-Template10] ppp mp max-bind 12
1.1.16 ppp mp min-bind

Syntax
ppp mp min-bind min-bind-num undo ppp mp min-bind
View
Dialer interface view
Parameter
min-bind-num: Minimum number of links in an MP bundle. It is in the range 1 to 128 and defaults to 1.
Description
In a dial application where multiple links are required to carry services, it is necessary to allow a packet trigger to call up multiple links to guarantee the minimum bandwidth needed. Use the ppp mp min-bind command to configure the minimum number of PPP links that a MP bundle must have. Use the undo ppp mp min-bind command to restore the default when a call requires only one PPP link. You should note that after you configure the ppp mp min-bind command, the router does not look at the ratio of traffic to bandwidth when making calls to bring up links. As for links that already exist, they are not torn down because of timeout. The ppp mp min-bind command voids the dialer timer idle command, just as the dialer threshold 0 command would. The argument min-bind-num must be less than max-bind-num. Related command: dialer threshold, ppp mp.
Example
# Set the minimum number of the bound channels of MP to 4.
[3Com-dialer0] ppp mp min-bind 4
# Delete the minimum number of channels that you set and restore the default value.
[3Com-dialer0] undo ppp mp min-bind
1.1.17 ppp mp min-fragment

Syntax
ppp mp min-fragment size undo ppp mp min-fragment
View
Virtual template view
Parameter
size: Minimum packet size for MP outgoing packet fragmentation. When the MP outgoing packet is smaller than this value, fragmentation is avoided. When the MP packet is larger than this value fragmentation is involved. It is in byte in the range from 128 to 1500.
Description
Use the ppp mp min-fragment command to set minimum size of outgoing fragments. Use the undo ppp mp min-fragment command to restore the default, that is, 128 bytes. If the small packet fragmentation is not expected, this command can be used to set larger packet size value of the MP packet fragment. Related command: ppp mp.
Example
# Set the minimum packet of the MP packet fragmentation to 500 bytes.
[3Com-Virtual-Template10] ppp mp min-fragment 500
1.1.18 ppp mp user

Syntax
ppp mp user username bind virtual-template number undo ppp mp user username
View
System view
Parameter
username: User name, which is a string of 1 to 80 characters. number: Virtual-template number.
Description
Use the ppp mp user command to bind an MP user to a virtual template. Use the undo ppp mp user command to remove the specified binding. During the establishment of a PPP connection, after PPP authentication succeeds, if a virtual-template is specified, MP will be bound on the basis of parameters of the virtual-template, and a new virtual interface will be formed to transfer data. Operating parameters that could be configured on the virtual-template include:
Local IP address and the IP address (or IP address pool) assigned to the peer PPP PPP working parameter Related command: ppp mp, ppp mp max-bind.
Example
# Specify the corresponding virtual-template as 1 for the username 3Com, and configure the IP address of the virtual-template as 202.38.60.1.
[3Com] ppp mp user 3Com bind virtual-template 1 [3Com] interface virtual-template 1 [3Com-virtual-template1] ip address 202.38.60.1 255.255.255.0
1.1.19 ppp mp virtual-template

Syntax
ppp mp virtual-template number undo ppp mp
View
Interface view
Parameter
number: Configures the virtual template number to be bound by the interface, which ranges from 0 to 1023.
Description
Use the ppp mp virtual-template command to configure the virtual template number to be bound by the interface. Use the undo ppp mp command to disable the MP binding of the interface. By default, the MP binding of the interface is disabled and the interface works in ordinary PPP mode. This command specifies the virtual template number to be bound on the interface. The interface using this command to perform the MP binding does not need PAP or CHAP authentication configured. Two or more interfaces with the same virtual template number are bound directly together. Moreover, this command is mutually exclusive with the ppp mp command. That is, only one of the two commands can be configured on the same interface. Related command: link-protocol ppp and interface virtual-template.
Example
# Configure the PPP encapsulated interface Serial0/0/0 to work in MP view.
[3Com-Serial0/0/0] ppp mp virtual-template 1
1.1.20 ppp pap local-user

Syntax
ppp pap local-user username password { simple | cipher } password undo ppp pap local-user
View
Interface view
Parameter
username: Username sent, which is a string of 1 to 80 characters. password: Password sent. simple: Password in plain text. cipher: Password in encrypted text.
Description
Use the ppp pap local-user command to configure the username and password sent by the local router when it is authenticated by the peer router via the PAP method. Use the undo ppp pap local-user command to disable the configuration. By default, when the local router is authenticated by the peer router via the PAP method, both the username and password sent by the local router are empty. When the local router is authenticated via the PAP method by the peer router, the username and password sent by the local router must be the same as the user and password of the peer router. Related command: ppp authentication pap-mode, local-user.
Example
# Set the username of the local router authenticated by the peer end via the PAP method as 3Com and the password as 3Com.
[3Com-Serial1/0/0] ppp pap local-user 3Com password simple 3Com
1.1.21 ppp timer negotiate

Syntax
ppp timer negotiate seconds undo ppp timer negotiate
View
Interface view
Parameter
seconds: Time of negotiation timeout in seconds. During PPP negotiation, if the local end does not receive the response packet of the peer end, PPP will resend the last packet. The time ranges from 1 to 10 seconds.
Description
Use the ppp timer negotiate command to set the PPP negotiation timeout. Use the undo ppp timer negotiate command to restore the default value. By default, the PPP timeout is 3 seconds. Related command: link-protocol ppp.
Example
# Set the PPP negotiation timeout to 5 seconds.
[3Com-Serial1/0/0] ppp timer negotiate 5
1.1.22 timer hold

Syntax
timer hold seconds undo timer hold
View
Parameter
seconds: Time interval for the interface to send a keepalive packet in seconds. The value ranges from 0 to 32767, and defaults to 10.
Description
Use the timer hold command to set the timer to send keepalive packets. Use the undo timer hold command to restore the default value. For very slow data links, the seconds parameter must not be set too small. Because the long datagram can only be transferred totally after a long period of time, the transfer of keepalive datagram is delayed. The data link would be regarded broken if the interface has not received the keepalive packet from the other end for many keepalive periods. When the keepalive time is set to a very long time, the link is considered broken by the other end, and is then closed. The keepalive time must be set the same at the two ends of a ppp link. Related command: display interface.
Example
# Set the PPP timer hold to 20 seconds.
[3Com-Serial1/0/0] timer hold 20
1.2 PPP Link Efficiency Mechanism Commands

1.2.1 debugging ppp compression iphc rtp
Syntax
debugging ppp compression iphc rtp { all | context_state | error | full_header | general_info } undo debugging ppp compression iphc rtp { all | context_state | error | full_header | general_info }
View
User view
Parameter
all: Enables all IPHC RTP debugging. context_state: Enables IPHC RTP context_state packet debugging. error: Enables IPHC RTP error debugging. full_header: Enables IPHC RTP full_header debugging. general_info: Enables general IPHC RTP debugging.
Description
Use the debugging ppp compression iphc rtp command to view the single packet information of the RTP header compression. Use the undo debugging ppp compression iphc rtp command to disable IP/UDP/RTP header debugging in IP header compression.
Example
# Enable IP/UDP/RTP header error debugging of IP header compression.
<3Com> debugging ppp compression iphc rtp error
1.2.2 debugging ppp compression iphc tcp

Syntax
debugging ppp compression iphc tcp { all | context_state | error | full_header | general_info } undo debugging ppp compression iphc tcp { all | context_state | error | full_header | general_info }
View
User view
Parameter
all: Enables all IPHC TCP debugging. context_state: Enables IPHC TCP context_state packet debugging. error: Enables IPHC TCP error debugging. full_header: Enables IPHC TCP full_header debugging. general_info: Enables general IPHC TCP debugging.
Description
Use the debugging ppp compression iphc tcp command to view the single packet information of the IP/TCP header compression. Use the undo debugging ppp compression iphc tcp command to disable IP/TCP header debugging in IP header compression.
Example
# Enable IP/TCP header error debugging of IP header compression.
<3Com> debugging ppp compression iphc tcp error
1.2.3 display ppp compression iphc rtp

Syntax
display ppp compression iphc rtp [ interface-type interface-number ]
View
Any view
Parameter
Description
Use the display ppp compression iphc rtp command to view the statistic information of the RTP header compression.
Example
[3Com] display ppp compression iphc rtp
1.2.4 display ppp compression iphc tcp

Syntax
display ppp compression iphc tcp [ interface-type interface-number ]
View
Any view
Parameter
Description
Use the display ppp compression iphc tcp command to view the statistic information of the TCP header compression.
Example
[3Com] display ppp compression iphc tcp
1.2.5 display ppp compression stac-lzs

Syntax
display ppp compression stac-lzs [ interface-type interface-number ]
View
Any view
Parameter
Description
Use the display ppp compression stac-lzs command to view information about STAC-LZS compression.
Example
# Display information about STAC-LZS compression.
[3Com] display ppp compression stac-lzs Staz-lzs compression Interface: Serial1/0/1:0 Received: Compress/Error/Discard/Total: 302/0/0/302 (Packets) Sent: Compress/Error/Total: 302/0/302 (Packets)
1.2.6 ip tcp vjcompress

Syntax
ip tcp vjcompress undo ip tcp vjcompress
View
Interface view
Parameter
None
Description
Use the ip tcp vjcompress command to enable a PPP interface to compress the VJ TCP header. Use the undo ip tcp vjcompress command to disable the PPP interface to compress the VJ TCP header. If the VJ TCP header is permitted to compress at the PPP interface, the interface at the opposite end will also permit the compression of the VJ TCP header. This command is only used in the centralized environment. By default, the VJ TCP header is disabled from compressing at the PPP interface.
Example
# Permit VJ TCP header compression on the PPP interface.
[3Com-dialer0] ip tcp vjcompress
1.2.7 ppp compression iphc

Syntax
ppp compression iphc [ nonstandard ] undo ppp compression iphc
View
Interface view
Parameter
nonstandard: Nonstandard encapsulation mode.
Description
Use the ppp compression iphc command to enable IP header compression on the interface. Use the undo ppp compression iphc command to disable IP header compression. IP header compression discussed here refers to compression of TCP and RTP headers. By default, TCP header compression and RTP header compression are disabled on the interface. The compression command can take effect on a link only when it is configured at both ends of the link.
The configuration will take effect only when the shutdown and undo shutdown operations are performed on the interface. If the configuration is applied on MP, the shutdown and undo shutdown operations should be performed on all the MPs. Related command: ppp compression iphc rtc-connection, ppp compression iphc tcp-connections.
Example
# Enable TCP header compression and RTP header compression on interface serial0/0/0.
[3Com-serial0/0/0] ppp compression iphc
1.2.8 ppp compression iphc rtp-connections

Syntax
ppp compression iphc rtp-connections number undo ppp compression iphc rtp-connections
View
Interface view
Parameter
number: The maximum connection number (from 3 to 256) of IP Header Compression mode on the interface. By default, the number is 16.
Description
Use the ppp compression iphc rtp-connections command to designate the connections number of IP Header Compression allowed on one interface. Use the undo ppp compression iphc rtp-connections command to cancel the configuration and restore the default value. RTP is connection oriented; the number of RTP connections that a link can accommodate is relatively large. The use of compression, however, requires the router to maintain some information for each connection when compressing headers. To restrict the memory load generated by compression you can use the ppp compression iphc rtp-connections command to limit the number of compression-enabled RTP connections to three for example. As a result, the packets on the fourth RTP connection are not compressed. The configuration will take effect after the commands shutdown and undo shutdown have been executed on the interface. When configuring MP, the commands shutdown and undo shutdown must be executed on all MPs.
Example
# Set the number of compression-enabled RTP connections to 10 on interface serial0/0/0.
[3Com-serial0/0/0] ppp compression iphc rtp-connections 10
1.2.9 ppp compression iphc tcp-connections

Syntax
ppp compression iphc tcp-connection number undo ppp compression iphc tcp-connection
View
Interface view
Parameter
number: The maximum connection number (from 3 to 256) of TCP compression mode on the interface. By default, the number is 16.
Description
Use the ppp compression iphc tcp-connection command to configure the connection number of TCP compression mode. Use the undo ppp compression iphc tcp-connection command to restore the default connection number of TCP compression mode. TCP is connection oriented; the number of TCP connections that a link can accommodate is relatively large. The use of compression however requires the router to maintain some information for each connection when compressing headers. To restrict the memory load generated by compression you can use the ppp compression iphc tcp-connections command to limit the number of compression-enabled TCP connections to three for example. As a result, the packets on the fourth TCP connection are not compressed. The configuration can become valid on an interface only after you perform the shutdown and then the undo shutdown operations on the interface. If the configuration is for MPs, you should perform the operations on all the MPs.
Example
# Set the number of compression-enabled TCP connections to 10 on interface serial0/0/0.
[3Com-serial0/0/0] ppp compression iphc tcp-connections 10
1.2.10 ppp compression stac-lzs

Syntax
ppp compression stac-lzs undo ppp compression stac-lzs
View
Interface view
Parameter
None
Description
Use the ppp compression stac-lzs command to enable STAC-LZS compression for PPP. Use the undo ppp compression stac-lzs command to disable STAC-LZS compression on the current interface. By default, compression is disabled. You can configure STAC-LZS compression on an interface to reduce the size of data frames through lossless compression. However, as this can increase the load on the router, you are recommended to disable the function when the load on the router is heavy. Note that STAC-LZS compression can take effect on a PPP link only when the stac-lzs option is configured on both ends of the link. Related command: link-protocol ppp.
Example
# Enable STAC compression on the local router.
[3Com-Serial0/0/0] ppp compression stac-lzs
1.2.11 ppp mp lfi

Syntax
ppp mp lfi undo ppp mp lfi
View
Virtual template interface view, MP-GROUP view
Parameter
None
Description
Use the ppp mp lfi command to enable link fragmentation and interleaving (LFI) on the interface. Use the undo ppp mp lfi command to remove LFI from the interface. By default, the time delay of the fragment is 10ms after LFI is enabled on the Virtual Template interface. Related command: ppp mp lfi delay-per-frag.
Example
[3Com-Virtual-Template1] ppp mp lfi
1.2.12 ppp mp lfi delay-per-frag

Syntax
ppp mp lfi delay-per-frag time undo ppp mp lfi delay-per-frag
View
Virtual template interface view, MP-GROUP view
Parameter
time: The maximum time delay of LFI fragment in ms in the range of 1 to 1000.
Description
Use the ppp mp lfi delay-per-frag command to set the maximum time delay for transmitting a LFI fragment. Use the undo ppp mp lfi delay-per-frag command to restore the default maximum time delay for transmitting a LFI fragment. By default, the time delay of the fragment is 10ms after LFI is enabled on the Virtual Template interface. Related command: ppp mp lfi.
Example
# Set the maximum time delay of LFI fragment of Virtual-Template 1 to 20ms.
[3Com-Virtual-Template1] ppp mp lfi delay-per-frag 20
1.2.13 reset ppp compression iphc

Syntax
reset ppp compression iphc [ interface-type interface-number ]
View
User view
Parameter
Interface-type: Interface type. Interface-number: Interface number.
Description
Use the reset ppp compression iphc command to delete the invalid IP/UDP/RTP header compression or decompression context storage table, and clear statistic information of IP/UDP/RTP header compression. If no parameter is specified, the storage table entries of IP header compression on all interfaces will be cleared.
Example
None
1.2.14 reset ppp compression stac-lzs

Syntax
reset ppp compression stac-lzs [ interface-type interface-number ]
View
User view
Parameter
Description
Use the reset ppp compression stac-lzs command to clear statistics about STAC-LZS compression. If no interface is specified statistics about STAC-LZS compression on all interfaces are cleared.
Example
# Clear statistics about STAC-LZS on all the interfaces. <Router> reset ppp compression stac-lzs
Chapter 2 PPPoE Configuration Commands

2.1 PPPoE Server Configuration Commands
2.1.1 display pppoe-server session
Syntax
display pppoe-server session { all | packet | statistics interface interface-type interface-number }
View
Any view
Parameter
all: Displays all information about each PPPoE session. packet: Displays statistics about the packets on each PPPoE session. statistics: Displays the statistics information of PPPoE sessions over an interface. interface-type interface-number: Specifies an interface.
Description
Use the display pppoe-server session command to view the status and statistics of PPPoE session. Related command: link-protocol ppp, pppoe-server bind.
Example
# View all the session information of PPPoE.
<3Com> display pppoe-server session all SID 2 Intf State UP OIntf Ethernet0/2/0 RemMAC 0050.ba22.7369 LocMAC 00e0.fc08.f4de
Virtual-Template1:0
Table 2-1 Output information description Field SID Intf Description Session Identifier The corresponding Virtual-Template interface
Field State OIntf RemMAC LocMAC State of sessions
Description
corresponding Ethernet interface Remote MAC, MAC address of the other end. Local MAC
# View the statistics information of PPPoE session.

<3Com> display pppoe-server session packet SID 1 RemMAC LocMAC InP 42 InO 2980 0 InD 16 OutP OutO 343 0 OutD
0050ba1a02ce 0001af02a40f
Table 2-2 Description of the output Field InP InO InD OutP OutO OutD Description In Packets, Packages received In Octets, Bytes received In Discards, Received and then discarded packages Out Packets, Packages sent Out Octets, Bytes sent Out Discard, Discarded packages that might be sent.
2.1.2 pppoe-server bind virtual-template

Syntax
pppoe-server bind virtual-template number undo pppoe-server bind
View
Interface view
Parameter
number: Number of the virtual-template for access to PPPoE, and its value ranges from 0 to 1023.
Description
Use the pppoe-server bind virtual-template command to enable PPPoE on the virtual-template specified by the Ethernet interface. Use the undo pppoe-server bind command to disable PPPoE protocol on the relevant interface. By default, PPPoE protocol is disabled. Related command: link-protocol ppp.
Example
# Enable PPPoE on virtual-template 1 of Ethernet interface Ethernet1/0/0.
[3Com-Ethernet1/0/0] pppoe-server bind virtual-template 1
2.1.3 pppoe-server log-information off

Syntax pppoe-server log-information off undo pppoe-server log-information off View
System view
Parameter
None
Description
Use the pppoe-server log-information off command to enable the PPPoE server to to output the PPP-related log information. Use the undo pppoe-server log-information off command to disable the PPPoE server to output the PPP-related log information. By default, the PPPoE server outputs the PPP-related log information.
Example
# Disable the PPPoE server to output the PPP-related log information.
[Router] pppoe-server log-information off
2.1.4 pppoe-server max-sessions local-mac

Syntax
pppoe-server max-sessions local-mac number undo pppoe-server max-sessions local-mac
View
System view
Parameter
number: Maximum number of sessions that can be established at a local MAC address, which ranges from 1 to 4069.
Description
Use the pppoe-server max-sessions local-mac command to set the maximum number of PPPoE sessions that can be established at a local MAC address. Use the undo pppoe-server max-sessions local-mac command to restore the default configuration. By default, the value of number is 100. Related command: pppoe-server max-sessions remote-mac and pppoe-server max-sessions total.
Example
# Set the maximum number of PPPoE sessions that can be established at a local MAC address to 50.
[3Com] pppoe-server max-sessions local-mac 50
2.1.5 pppoe-server max-sessions remote-mac

Syntax
pppoe-server max-sessions remote-mac number undo pppoe-server max-sessions remote-mac
View
System view
Parameter
number: Maximum number of PPPoE sessions that can be established at a peer MAC address, which ranges from 1 to 4096.
Description
Use the pppoe-server max-sessions remote-mac command to set the maximum number of PPPoE sessions that can be established at a peer MAC address. Use the undo pppoe-server max-sessions remote-mac command to restore the default configuration. By default, the value of number is 1000. Related command: pppoe-server max-sessions local-mac, pppoe-server
max-sessions total.
Example
# Display how to set the maximum number of PPPoE sessions that can be established at a remote MAC address to 50.
[3Com] pppoe-server max-sessions remote-mac 50
2.1.6 pppoe-server max-sessions total

Syntax
pppoe-server max-sessions total number undo pppoe-server max-sessions total
View
System view
Parameter
number: Maximum number of PPPoE sessions that the system can establish, which ranges from 1 to 65535.
Description
Use the pppoe-server max-sessions total command to set the maximum number of PPPoE sessions that the system can establish. Use the undo pppoe-server max-sessions total command to restore the default configuration. By default, the value of number is 4096.
Related command: pppoe-server max-sessions remote-mac and pppoe-server max-sessions local-mac.
Example
# Set the maximum number of PPPoE sessions established by the system to 3000.
[3Com] pppoe-server max-sessions total 3000
2.1.7 reset pppoe-server

Syntax
reset pppoe-server { all | virtual-template number | interface interface-type interface-num }
View
User view
Parameter
all: Clears all PPPoE sessions. virtual-template number: Specifies a virtual template by its number. interface interface-type interface-num: Specifies an interface by its type and number.
Description
Use the reset pppoe-server command to clear PPPoE sessions at the server end.
Example
# Clear the sessions on virtual template 1.
<Router> reset pppoe-server virtual-template 1
2.2 PPPoE Client Configuration Commands

2.2.1 debugging pppoe-client
Syntax
debugging pppoe-client option [ interface type number ]
View
User view
Parameter
option: PPPoE Client debugging switch type, see the following table for more details. interface type number: Interface type and number, used to enable the debugging switch of the specified interface. If no interface is specified, the system will enable the debugging switch of all interfaces. Table 2-3 PPPoE Client debugging switch type and explanation Debugging switch type All data error event packet verbose Explanation Enable all PPPoE Client debugging switches Enable the PPPoE Session phase data packet debugging switch Enable PPPoE Client error information debugging switch Enable PPPoE Client event debugging switch Enable PPPoE Discovery phase negotiation packet debugging switch Display the verbose contents of PPPoE data
Description
The command debugging pppoe-client is used to enable the PPPoE Client debugging switch.
Example
None
2.2.2 display pppoe-server session

Syntax
display pppoe-client session { summary | packet } [ dial-bundle-number number ]
View
Any view
Parameter
summary: Displays the summary of PPPoE session. packet: Displays the statistics of PPPoE session data packet.
dial-bundle-number number: Displays the statistics of the specified PPPoE session. If a PPPoE session is not specified, the system will display the statistics of all PPPoE sessions.
Description
The command display pppoe-client session is used to display the status and statistics of a PPPoE session.
Example
# Display the summary of PPPoE session.
[3Com]display pppoe-client session summary PPPoE Client Session: ID 1 2 Bundle 1 2 Dialer Intf 1 2 Eth0 Eth0 Client-MAC Server-MAC State PPPUP PPPUP
00e0fc0254f3 00e0fc0254f3
00049a23b050 00049a23b050
For more details of the display information, see the following table. Table 2-4 Explanation of display pppoe-client session summary Field ID Server-MAC Client-MAC Dialer Bundle Intf State Description Session ID, PPPoE session ID Server MAC, server MAC address Client MAC, client MAC address Corresponding Dialer interface of PPPoE session Dialer Bundle containing PPPoE session Ethernet interface containing PPPoE session State of PPPoE session
# Display the statistics of PPPoE session data packet

<3Com> display pppoe-server session packet PPPoE Client Session: SID InP InO InD OutP OutO OutD
============================================================= 1 2 164 304 6126 9886 0 0 83 156 1069 2142 0 0
For more details of the display information, see the following table.
Table 2-5 Explanation of the information displayed by pppoe-client session packet Field SID InP InO InD OutP OutO Explanation Session ID, PPPoE session ID In Packets: number of received packets In Octets: number of received octets In Discards: number of received illegal and discarded packets Out Packets: number of sent packets Out Octets: number of sent octets
2.2.3 pppoe-client
Syntax
pppoe-client dial-bundle-number number [ no-hostuniq ] [ idle-timeout seconds [ queue-length packets ] ] undo pppoe-client dial-bundle-number number
View
Ethernet interface view, virtual Ethernet interface view
Parameter
dial-bundle-number number: Dialer Bundle number corresponding to PPPoE session, and its value ranges from 1 to 255.The parameter number can be used to identify a PPPoE session, or as a PPPoE session. no-hostuniq: The call originated from PPPoE Client that does not carry the Host-Uniq field. By default, no no-hostuniq parameter is configured, i.e. by default, PPPoE session works in permanent online mode. idle-timeout seconds: Idle time of PPPoE session in seconds, and its value ranges from 1 to 65535. If the parameter is not configured, PPPoE session will work in permanent online mode. Otherwise, it will work in packet trigger mode. queue-length packets: packet number cached in the system before PPPoE session is established, its value ranges from 1 to 100. Only after idle-timeout is configured will the parameter be enabled. By default, packets is 10.
Description
Use the pppoe-client command to establish a PPPoE session, and specify the Dialer Bundle corresponding to the session. Use the undo pppoe-client command to delete a PPPoE session. By default, no PPPoE session is configured. Multiple PPPoE sessions can be configured at one Ethernet interface, i.e. one Ethernet interface might simultaneously belong to multiple Dialer Bundles. However, one Dialer Bundle only has one Ethernet interface. PPPoE session and Dialer Bundle are one-to-one. If the Dialer Bundle at a certain Dialer has had one Ethernet interface used by PPPoE, any other interfaces cannot be added to this Dialer Bundle. Likewise, if Dialer Bundle has had interfaces other than the PPPoE Ethernet interface, this Dialer Bundle can not be added to the Ethernet interface used by PPPoE Client. When PPPoE session works in permanent online mode, and the physical lines go UP, the Router will immediately initiate PPPoE call to establish a PPPoE session. This PPPoE connection will exist constantly unless users use the command undo pppoe-client to delete PPPoE session. When PPPoE session works in packet trigger mode, the Router will not initiate PPPoE call to establish PPPoE session unless it has data to transmit. If there is no data transmission on the PPPoE link within seconds, the Router will automatically terminate the PPPoE session. Only after it has new data to transmit will the PPPoE session be re-established. Related command: reset pppoe-client.
Example
# Create a PPPoE session on the interface Ethernet 0/0/0.
[3Com-Ethernet0/0/0]pppoe-client dial-bundle-number 1
2.2.4 reset pppoe-client

Syntax
reset pppoe-client { all | dial-bundle-number number }
View
User view
Parameter
all: Clears all PPPoE sessions.
dial-bundle-number number: Dialer Bundle number, its value ranges from 1 to 255. This is used to clear the PPPoE session corresponding to Dialer Bundle.
Description
Use the reset pppoe-client command to terminate a PPPoE session and re-initiate the connection later. If PPPoE session in permanent online mode is terminated using the command reset pppoe-client, the Router will automatically re-establish PPPoE session in sixteen seconds. If PPPoE session is terminated in packet trigger mode using the command reset pppoe-client, the Router will not re-establish PPPoE session unless it has data to transmit. Related command: pppoe-client.
Example
# Clear all PPPoE sessions, and re-initiate PPPoE session later.
<3Com> reset pppoe-client all
Chapter 3 ISDN Configuration Commands

3.1 ISDN Configuration Commands
3.1.1 debugging isdn
Syntax
debugging isdn { cc | q921 | q931 | qsig | | spid } [ interface type number ] undo debugging isdn { cc | q921 | q931| qsig | spid } [ interface type number ]
View
User view
Parameter
cc: Enables ISDN CC module debugging. q921: Enables Q.921 debugging. q931: Enables ISDN Q.931 module debugging. qsig: Enables ISDN Q.SIG module debugging. spid: Enables SPID debugging for the BRI interfaces running the NI protocol. interface type number: Interface type and number. You can enable ISDN signaling debugging on an interface by specifying its type and number. If no interface has been specified, the system will enable ISDN signaling debugging on all the ISDN interfaces.
Description
Use the debugging isdn command to enable ISDN debugging. Use the undo debugging isdn command to disable ISDN debugging. You must enable terminal debugging first before ISDN debugging can take effect.
Example
# Enable CC debugging.
<3Com> debugging isdn cc
# Disable CC debugging.
<3Com> undo debugging isdn cc
3.1.2 dialer isdn-leased (ISDN BRI Leased Line Configuration)

Syntax
dialer isdn-leased { 128k | number } undo dialer isdn-leased { 128k | number }
View
Parameter
128k: 128K ISDN leased line connection. number: 64K ISDN leased line connection. It can be 0 or 1.
Description
Use the dialer isdn-leased 128k command to configure a 128K leased line connection. Use the undo dialer isdn-leased 128k command to delete a 128K leased line connection. Use the dialer isdn-leased number command to configure a 64K leased line connection. Use the undo dialer isdn-leased number command to delete a 64K leased line connection. By default, no ISDN leased line connection is configured. You must manually delete the existing leased line configuration before switching from single B channel lease line to 128K leased line.
Note: You cannot configure this command on the BRI interfaces provided by 2S1B modules. For more information about configuring ISDN leased lines on CE1/PRI and CT1/PRI interfaces, refer to the dialer isdn-leased command in the Dial-up section of this manual.
Related command: dialer isdn-leased ( in the Dial-up part of this manual).
Example
# Configure 128K leased line connection.
[Router-Bri0/0/0] dialer isdn-leased 128k
3.1.3 display isdn active-channel

Syntax
display isdn active-channel [ interface type number ]
View
Any view
Parameter
interface type number: Interface type and number.
Description
Use the display isdn active-channel command to view the active call information on ISDN interfaces. If no interface has been specified, the system will display the active call information on all the ISDN interfaces. The displayed information can help you with ISDN call troubleshooting.
Example
# Display the active call information on the interface bri 0/0/0.
[3Com] display isdn active-channel interface bri 0/0/0 Bri0/0/0 : ------------------------------------------------------------Channel Info B1 B2 Call Property Digital Analog Call Type Out In Calling Number 8810124 8810118 380 8810150 2201 Calling Subaddress Called Number Called Subaddress
-------------------------------------------------------------
3.1.4 display isdn call-info

Syntax
display isdn call-info [ interface type number ]
View
Any view
Parameter
interface type number: Interface type and number.
Description
Use the display isdn call-info command to view the current states of ISDN interfaces. If no interface has been specified, the system will display the current states of all the ISDN interfaces. Executing this command will output the state of each layer of the ISDN protocol on one or all interfaces, including the information of Q.921, Q.931, and CC modules. You may make troubleshooting based on the output information. Related command: display interface.
Example
# Display the current states of all ISDN interfaces.
Bri0/0 /0: ACTIVE Link Layer 1: Link Layer 2: TEI = 66, State = MULTIPLE_FRAME_ESTABLISHED
TEI = NONE, State = TEI_UNASSIGNED TEI = NONE, State = TEI_UNASSIGNED TEI = NONE, State = TEI_UNASSIGNED TEI = NONE, State = TEI_UNASSIGNED TEI = NONE, State = TEI_UNASSIGNED
Link Layer 3: Link Layer 4: Link Layer 5: Link Layer 6: Link Layer 7: Link Layer 8:
TEI = NONE, State = TEI_UNASSIGNED TEI = NONE, State = TEI_UNASSIGNED
Network Layer: 1 connection(s) Connection 1 : CCIndex:0x0003 , State: Active , CES:1 , Channel:0x00000002 TEI: 65 Calling_Num[:Sub]: 006
Called_Num[:Sub]: 007
Table 3-1 Description on the displayed information Field Bri0/0 /0 ACTIVE Link Layer 1 TEI = 66, State = MULTIPLE_FRAME_ ESTABLISHED Network Layer connection(s) CCIndex 0x0003 1 Explanation The interface Bri0/0/0 runs ISDN; the D channel is active Parameters related to the link layer protocol Q.921 of ISDN on the interface Only one network layer connection is present on the interface. The call index is 0x0003.
Field State Active CES1 Channel TEI 65 Calling_Num[:Sub]: 006 Called_Num[:Sub] Call state
Explanation
The CES of the Q.921 link for the call is 1. 0x00000002 Channel map TEI for the call is 65. Calling number: calling sub-address. The calling number is 006. Called number: called sub-address. The called number is 007.
Note: Disabling an interface will clear all the statistic data related to the interface and new counting will be started.
3.1.5 display isdn call-record

Syntax
display isdn call-record [ interface type number ]
View
Any view
Parameter
interface type number: Displays only the call history of the specified interface.
Description
Use the display isdn call-record command to view the information of ISDN call history. Executing this command will display information of the calls activated in the last 15 minutes, but the number of retained entries is limited to 100.
Example
# Display the information of ISDN call history.
[3Com] display isdn call-record Call Calling Called Start Stop Seconds

Type Number Number Time

Time Used
--------------------------------------------------------------------In 10660016 In Out Out In In 10660016 03-07-05 11:23:09 03-07-05 11:23:04 03-07-05 11:23:04 03-07-05 11:23:04 03-07-05 11:23:04 0 0 3 3 3 3
10660022 10660016 10660022
10660022 660016 660022 10660016 10660022
03-07-05 11:23:09 03-07-05 11:23:01 03-07-05 11:23:01 03-07-05 11:23:01 03-07-05 11:23:01
3.1.6 display isdn parameters

Syntax
display isdn parameters { protocol | interface type number }
View
Any view
Parameter
protocol: ISDN protocol type, which can be DSS1, NTT, NI, ETSI, ANSI or AT&T. interface type number: ISDN interface type and number.
Description
Use the display isdn parameters command to view the system parameters at layers 2 and 3 of the ISDN protocol, such as the durations of system timers and frame size. If only ISDN protocol is specified, the system will display the default system parameters of ISDN. Related command: display interface.
Example
# Display the system parameters of the ISDN protocol DSS1.
[3Com] display isdn parameters dss1 DSS1 ISDN layer 2 system parameters: T200(sec) 1 T202(sec) 2 T203(sec) N200 10 K(Bri) 3 K(Pri) 1 7
DSS1 ISDN layer 3 system timers: Timer-Number T301 Value(sec) 240

T302 T303 T304 T305 T308 T309 T310 T313 T314 T316 T317 T318 T319 T321 T322 15 4 30 30 4 90 40 4 4 120 10 4 4 30 4
Table 3-2 Description of the displayed system parameters of ISDN Item T200(sec) T202(sec) T203(sec) N200 K(Bri) K(Pri) Timer-Number Value(sec) Description Retransmit-timer (in seconds) of the L2 protocol of ISDN Retransmit-timer (in seconds) for the TEI request messages of the ISDN L2 protocol The maximum link idle time (in seconds) of the ISDN L2 protocol The maximum retransmission times The maximum number of unacknowledged frames (slide window size) on the ISDN BRI port. The maximum number of unacknowledged frames (slide window size) on the ISDN PRI port. ISDN L3 timer Duration (in seconds) of each ISDN L3 timer
3.1.7 display isdn spid

Syntax
display isdn spid [ interface type number ]
View
Any view
Parameter
interface type number: Specifies interface type and number.
Description
Use the display isdn spid command to view information of SPID on the BRI interface encapsulated with the NI protocol. You may execute this command to view the SPID type, SPID value, and other information when ISDN is running. Executing this command without specifying an interface, you may view information on SPI on all the SPID-supported BRI interfaces. Alternatively, you may view the information only on one interface by specifying its type and number.
Example
# Display the related information of SPID on the NI-supported interface bri 0/0/0.
[3Com] display isdn spid interface bri 0/0/0 Interface bri 0/0/0: SPID Type : AUTO SPID B1 :
SPID Num: 124345 LDN:1234321
Neg State : SPID_ASSIGNED Init State: INIT_NULL SPID B2 : 45645754
SPID Num: LDN:1234321
Neg State : SPID_ASSIGNED Init State: INIT_NULL SPID timer : 30 seconds
SPID resend: 2
Table 3-3 Description of the SPID parameters Item SPID Type Description SPID Type, which can be NIT, STATIC (having only the L3 initialization process), or AUTO (including both the negotiation and the L3 initialization)
Item SPID B1 LDN SPID Num
Description SPID value of the BRI interface B1 channel. It can be a static configuration or the result of a dynamic negotiation, all depending on the specified SPID Type. Local dialing number SPID value of the BRI interface. It can be a static configuration or the result of a dynamic negotiation, all depending on the specified SPID Type. Negotiation state of the SPID, which can be SPID_UNASSIGNED, ASSIGN_AWAITING_SPID, SPID_ASSIGNED, ASSIGN_AWAITING_CALL_CLEAR. Initialization state of the SPID, which can be INIT_NULL, INIT_IND, INIT_PROCEEDING, INIT_END, INIT_AWAITING_CALL_CLEAR. SPID value of the BRI interface B2 channel. It can be a static configuration or the result of a dynamic negotiation, all depending on the specified SPID Type. Duration of the timer TSPID SPID message retransmission times
Neg State
Init State
SPID B2 SPID timer SPID resend
3.1.8 isdn bch-local-manage

Syntax
isdn bch-local-manage undo isdn bch-local-manage
View
ISDN interface view
Parameter
None
Description
Use the isdn bch-local-manage command to enable local ISDN B channel management. Use the undo isdn bch-local-manage command to disable the setting. It is very important to put appropriate control on the B channels used for calls in process, especially in PRI mode. Proper channel management can improve call efficiency and
reduce call loss. Normally, the centralized B channel management provided by exchanges can work well. For this reason, you are recommended to adopt the management function, provided by exchanges in most cases, despite that the ISDN module can provide the channel management function as well.
Example
# Enable local ISDN B channel management.
[3Com-Bri2/0/0] isdn bch-local-manage
3.1.9 isdn bch-select-way

Syntax
isdn bch-select-way { ascending | descending }
View
ISDN interface view
Parameter
ascending: Selects B channels in ascending order. descending: Selects B channels in descending order.
Description
Use the isdn bch-select-way command to set a B channel selection method. By default, B channels are selected in ascending order.
Example
# Configure B channel selection method on the interface Bri2/0/0 to descending order.
[3Com-Bri2/0/0] isdn bch-select-way descending
3.1.10 isdn caller-number

Syntax
isdn caller-number caller-number undo isdn caller-number
View
ISDN interface view
Parameter
caller-number: Caller number that an incoming ISDN call can carry, which is a character string of 1 to 24 characters.
Description
Use the isdn caller-number command to configure the range of the numbers that the router can receive. Use the undo isdn caller-number command to delete the configured caller number.
Example
# Configure the router to receive only the incoming calls from the caller numbers with 400.
[3Com-Serial0/0/0:15] isdn caller-number 400
3.1.11 isdn calling

Syntax
isdn calling calling-number undo isdn calling
View
ISDN interface view
Parameter
calling-number: Calling number.
Description
Use the isdn calling command to have the messages from a calling party to a called party carry the calling number. Use the undo isdn calling command to delete calling number in the messages that a calling party transmitted. This command mainly applies on BRI interfaces. If a calling party has configured this command on its BRI interface, the call party will be able to see the calling number by viewing the call history information.
Example
# Configure the message from a calling party to a called party on interface Bri0/0/0 to carry calling number.

[3Com-Bri0/0/0] isdn calling 8060170
3.1.12 isdn check-called-number

Syntax
isdn check-called-number check-index called-party-number [ : subaddress ] undo isdn check-called-number check-index
View
ISDN BRI interface view, ISDN PRI interface view
Parameter
check-index: Called number or subaddress checking index, which is in the range of 1 to 3. called-party-number: Called number, a string comprising 1 to 20 digits. subaddress: Subaddress, which is a string comprising digits and/or case-insensitive English letters and is 1 to 20 characters in length.
Description
Use the isdn check-called-number command to configure the called number or subaddress that the system should verify when receiving a digital call. Use the undo isdn check-called-number command to remove the configuration. By default, the system does not check the called number or subaddress carried by incoming digital calls. This command is used for setting the examined item when a digital call is received. If a subaddress is specified, the system will deny an incoming digital call if the calling party sends a wrong subaddress or does not send one at all.
Example
# Check whether the called number carried by incoming digital calls is 66668888 on the interface Bri 0/0/0.
[3Com-Bri0/0/0] isdn check-called-number 1 66668888 : 123
3.1.13 isdn crlength

Syntax
isdn crlength call-reference-length undo isdn crlength
View
ISDN interface view
Parameter
call-reference-length: ISDN call reference length, which can be one or two bytes.
Description
Use the isdn crlength command to set length of the call reference used when a call is placed on an ISDN interface. Use the undo isdn crlength command to restore the default ISDN call reference length on the interface. Call reference is equal to the sequence number that the protocol assigns to each call. It is one or two bytes in length and can be used cyclically.
Note: When the router receives a call from a remote device, it can automatically identify the length of the call reference. However, some devices on the network do not have such a capability. In the event that the router is required to place calls to such a device connected to it, you must configure the router to use the same call reference length configured on the connected device.
By default, the call reference length is two bytes for E1 PRI and T1 PRI interfaces, and one byte for BRI interfaces. You are not allowed to configure this command on an ISDN interface if there is still a call on it. This command can take effect only if it is configured when there is no call on the interface. Alternatively you can manually disable the interface by executing the shutdown command, configure the command, and then enable the interface by executing the undo shutdown command. These operations, however, will lead to the disconnection of the call existing on the interface.
Example
# Set the call reference length carried by the ISDN messages on the PRI interface serial0/0/0:15 to 1 byte.
[3Com-serial0/0/0:15] isdn crlength 1
3.1.14 isdn ignore connect-ack

Syntax
isdn ignore connect-ack undo isdn ignore connect-ack
View
ISDN interface view
Parameter
None
Description
Use the isdn ignore connect-ack command to configure the router to switch the ISDN protocol state to ACTIVE to start the data and voice service communications after sending a CONNECT message without having to wait for a CONNECT ACK message. Use the undo isdn ignore connect-ack command to restore the default setting. By default, in the event that the router is communicating with an exchange, the ISDN protocol must wait for the CONNECT ACK message in response to the CONNECT message before it can switch to the ACTIVE state to start data and voice service communications.
Note: In the event that the router is communicating with an ISDN exchange, its settings must be the same as those on the exchange.
You are not allowed to configure this command on an ISDN interface if there is still a call on it. This command can take effect only if it is configured when there is no call on the interface. Alternatively, you can manually disable the interface by executing the shutdown command, configure the command, and then enable the interface by executing the undo shutdown command. These operations, however, will lead to the disconnection of the call existing on the interface.
Example
# Set the call process on the BRI interface 0/0/0 to proceed to the ACTIVE state without waiting for CONNECT ACK messages.

[3Com-Bri0/0/0] isdn ignore connect-ack
3.1.15 isdn ignore hlc

Syntax
isdn ignore hlc undo isdn ignore hlc
View
ISDN interface view
Parameter
None
Description
Use the isdn ignore hlc command to disable ISDN from carrying the higher layer compatibility (HLC) information element in the SETUP messages sent when placing voice calls. Use the undo isdn ignore hlc command to configure ISDN to carry the HLC information element in SETUP messages. By default, HLC information element is carried in SETUP messages when placing voice calls.
You are not allowed to configure this command on an ISDN interface if there is still a call on it. This command can take effect only if it is configured when there is no call on the interface. Alternatively, you can manually disable the interface by executing the shutdown command, configure the command, and then enable the interface by executing the undo shutdown command. These operations, however, will lead to the disconnection of the call existing on the interface.
Example
# Configure ISDN to carry the HLC information element in the SETUP messages for the voice calls placed on the Bri interface 0/0/0.
[3Com-Bri0/0/0] isdn ignore hlc
3.1.16 isdn ignore llc

Syntax
isdn ignore llc undo isdn ignore llc
View
ISDN interface view
Parameter
None
Description
Use the isdn ignore llc command to disable ISDN from carrying the Lower Layer Compatibility (LLC) information element in the SETUP messages sent when placing voice calls. Use the undo isdn ignore llc command to configure ISDN to carry the LLC information element in SETUP messages. By default, LLC information element is carried in SETUP messages when placing voice calls.
You are not allowed to configure this command on an ISDN interface if there is still a call on it. This command can take effect only if it is configured when there is no call on the interface. Alternatively, you can manually disable the interface by executing the shutdown command, configure the command, and then enable the interface by executing the undo
shutdown command. These operations, however, will lead to the disconnection of the call existing on the interface.
Example
# Disable ISDN to carry the LLC information element in the SETUP messages for the voice calls placed on the interface Bri 0/0/0.
[3Com-Bri0/0/0] isdn ignore llc
3.1.17 isdn ignore sending-complete

Syntax
isdn ignore sending-complete [ incoming | outgoing ] undo isdn ignore sending-complete [ incoming | outgoing ]
View
ISDN interface view
Parameter
incoming: Ignores the Sending Complete Information Element in SETUP messages with respect to incoming calls. outgoing: Sends SETUP messages without the Sending Complete Information Element with respect to outgoing calls.
Description
Use the isdn ignore sending-complete command to configure the ISDN protocol to ignore the processing on the Sending Complete Information Element. Use the undo isdn ignore sending-complete command to restore the default setting. By default, in the event that the router is communicating with an exchange, the ISDN protocol checks whether the received SETUP messages carry the Sending Complete Information Element with respect to incoming calls, and carries the Sending Complete Information Element in SETUP messages with respect to outgoing calls.
You are not allowed to configure this command on an ISDN interface if there is still a call on it. This command can take effect only if it is configured when there is no call on the interface. Alternatively, you can manually disable the interface by executing the shutdown command, configure the command, and then enable the interface by executing the undo shutdown command. These operations, however, will lead to the disconnection of the call existing on the interface. You can configure this command on an interface only when the ISDN protocol running on the interface is DSS1 or ETSI.
Example
# Ignore the Sending Complete Information Element in the received SETUP messages.
[3Com-Bri0/0/0] isdn ignore sending-complete incoming
# Disable carrying the Sending Complete Information Element in the transmitted SETUP messages.
[3Com-Bri0/0/0] isdn ignore sending-complete outgoing
3.1.18 isdn L3-timer

Syntax
isdn L3-timer timer-name time-interval undo isdn L3-timer { timer-name | all }
View
ISDN interface view
Parameter
timer-name: Name of a L3 timer of the ISDN protocol. time-interval: Timer duration, which can take on one of the values listed in the following table. all: Restores the default durations of all the L3 timers. Table 3-4 Description of Q931 timers timer-name t301 t302 t303 Value range (in units) 30 to 1200 5 to 60 2 to 10 240 15 4 Default (in units)
timer-name t304 t305 t308 t309 t310 t313 t316 t322
Value range (in units) 10 to 60 4 to 30 2 to 10 10 to 180 10 to 180 2 to 10 2 to 180 2 to 10 30 30 4 90 40 4 120 4
Default (in units)
Description
Use the isdn L3-timer command to configure the duration of an ISDN L3 timer. Use the undo isdn L3-timer command to restore the default duration of the ISDN L3 timer on the interface. You can view the default durations of the L3 timers in the ISDN protocol by executing the display isdn parameters command.
Example
# Set the duration of the L3 timer T301 on the interface Bri 0/0/0 to 160 seconds.
[3Com-Bri0/0/0] isdn l3-timer t301 160
3.1.19 isdn number-property

Syntax
isdn number-property number-property [ calling | called ] undo isdn number-property [ calling | called ]
View
ISDN interface view
Parameter
number-property: Type and number scheme of ISDN numbers. The argument takes on a hex value in the range of 0 to FF. When it is expressed in 8 bits, bits 1 through 4 represent the code scheme, bits 5 through 7 represent the code type, and bit 8 is reserved. The
following table lists the possible number type and code schemes. For more information, see the related protocol for reference. Table 3-5 Types and code schemes of ISDN numbers Field (Bit) value Protoc ol 8 7 Type 6 Code scheme 5 4 3 2 0 0 1 0 0 0 0 0 0 0 0 1 0 0 0 0 0 1 AT&T 1 0 0 1 0 0 0 0 0 0 0 0 1 0 0 0 1 1 0 1 1 1 User-specified National network identification International network identification Unknown/user-specified Carrier identification code Data network identification code (ITU-T Recommendation X.121) Unknown International number National number Subscriber number Unknown ISDN/telephony numbering ( Recommendation E.164/E.163) Private numbering plan loan Definition
0 0 0 1 0 1 ANSI
Field (Bit) value Protoc ol 8 7 Type 6 Code scheme 5 4 3 2 0 1 0 1 0 0 1 0 0 0 0 0 0 0 0 1 0 1 0 1 0 0 1 0 0 1 1 1 0 1 1 0 0 1 1 1 Unknown
Definition
0 0 0 0 0 1 0 1 1 0 1 1 1 1 DSS1
International number National number Network specific number Subscriber number Abbreviated number Reserved for extension Unknown ISDN/telephony numbering plan( Recommendation E.164) Data numbering plan( Recommendation X.121) Telex numbering plan( Recommendation F.69) National standard numbering plan Private numbering plan Reserved for extension
Field (Bit) value Protoc ol 8 7 Type 6 Code scheme 5 4 3 2 0 1 0 1 0 0 1 0 0 0 0 0 0 0 0 1 0 1 0 1 0 0 1 0 0 1 1 1 0 0 0 0 0 1 NI 0 1 1 0 1 1 1 1 0 0 0 0 0 0 0 1 0 0 1 1 1 0 0 0 0 1 0 0 0 0 0 0 0 0 1 1 0 0 1 1 0 1 1 1 Unknown
Definition
0 0 0 0 0 1 0 1 1 0 1 1 1 1 ETSI
International number National number Network specific number Subscriber number Abbreviated number Reserved for extension Unknown ISDN/telephony numbering plan( Recommendation E.164) Data numbering plan( Recommendation X.121) Telex numbering plan( Recommendation F.69) National standard numbering plan Private numbering plan Reserved for extension Unknown number in Unknown numbering plan International number in ISDN numbering plan (Rec. E.164) National number in ISDN numbering plan (Rec. E.164) Network specific numbering plan number in in private ISDN
Local (directory) number numbering plan (Rec. E.164)
Abbreviated number in private numbering plan
Field (Bit) value Protoc ol 8 7 Type 6 Code scheme 5 4 3 2 0 0 1 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 1 0 1 QSIG 0 0 0 0 0 1 0 1 1 0 0 1 0 0 1 1 0 0 0 1 0 0 1 1 0 0 0 1 0 0 1 1 1 1 1 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 1 0 0 0 0 1 1 0 1 1 1 1 1 Unknown
Definition
0 0 0 1 0 1 NTT 1 0
National number Network specific number Subscriber number Unknown ISDN/telephony numbering plan( Recommendation E.164) Private numbering plan Unknown number in Unknown numbering plan Unknown number in ISDN/Telephony numbering plan (ITU-T Rec.E.164/E.163) International number in ISDN/Telephony numbering plan (ITU-T Rec.E.164/E.163) National number in ISDN/Telephony numbering plan (ITU-T Rec.E.164/E.163) Subscriber number in ISDN/Telephony numbering plan (ITU-T Rec.E.164/E.163) Unknown number in private numbering plan Level 2 regional numbering plan Level 1 regional numbering plan number number in in private private
PISN specific number in private numbering plan Level 0 regional numbering plan number in private
Note: The undefined bits in all the protocols are reserved for other purposes.
calling: Code scheme of the calling number. called: Code scheme of the called number.
Description
Use the isdn number-property command to set type and code scheme of ISDN calling numbers or called numbers. Use the undo isdn number-property command to restore the default type and code scheme of ISDN calling numbers or called numbers. By default, the number type and code scheme are respectively unknown, and ISDN for both ISDN calling numbers and called numbers, and the number-property representing them is 01 in hex format. You are not allowed to configure this command on an ISDN interface if there is still a call on it. This command can take effect only if it is configured when there is no call on the interface. Alternatively, you can manually disable the interface by executing the shutdown command, configure the command, and then enable the interface by executing the undo shutdown command. These operations, however, will lead to the disconnection of the call existing on the interface.
Example
# Set both number type and code scheme of ISDN calling numbers on the interface Bri 0/0/0 to unknown.
[3Com-Bri0/0/0] isdn number-property 0 calling
3.1.20 isdn overlap-sending

Syntax
isdn overlap-sending [ digits ] undo isdn overlap-sending
View
ISDN interface view
Parameter
digits: The number of the digits, which is sent each time in overlap-sending mode, and is in the range of 1 to 15. By default, digits is 10.
Description
Use the isdn overlap-sending command to set the system to send the called number information in the overlap mode on the ISDN interface. Use the undo isdn overlap-sending command to set the system to send the called information in full mode. In "overlap-sending mode, the digits of each called number will be sent separately and the number of the digits sent each time can be set using this command. In "full-sending" mode, all the digits of each called number will be collected and sent at one time. By default, full-sending mode applies. You are not allowed to configure this command on an ISDN interface if there is still a call on it. This command can take effect only if it is configured when there is no call on the interface. Alternatively, you can manually disable the interface by executing the shutdown command, configure the command, and then enable the interface by executing the undo shutdown command. These operations, however, will lead to the disconnection of the call existing on the interface. Overlap-sending is only suitable for five ISDN protocols: ANSI, DSS1, ETSI, NI, and QSIG.
Example
# Apply the overlap-sending function on the interface Bri0/0/0 and set the number of digits allowed to send each time to 12 digits.
[3Com-Bri0/0/0] isdn overlap-sending 12
3.1.21 isdn pri-slipwnd-size

Syntax
isdn pri-slipwnd-size window-size isdn pri-slipwnd-size default
View
Interface view
Parameter
window-size: Slide window size in the range of 5 to 14. By default, the slide window size on PRI interfaces is 7.
Description
Use the isdn pri-slipwnd-size command to set the slide window size on a PRI interface. Use the isdn pri-slipwnd-size default command to restore the default slide window size on the PRI interface.
Example
# Configure the slide window size on the interface e1 0/0/0 to 10.
[3Com] controller e1 0/0/0 [3Com-E1 0/0/0] using [3Com-E1 0/0] pri-set [3Com-Serial0/0/0:15] isdn pri-slipwnd-size 10
3.1.22 isdn protocol-type

Syntax
isdn protocol-type protocol
View
ISDN interface view
Parameter
protocol: ISDN protocol, which can be DSS1, NTT, NI, QSIG, ETSI, ANSI, or AT&T.
Description
Use the isdn protocol-type command to set the ISDN protocol to be run on an ISDN interface. By default, both BRI and PRI interfaces run the ISDN protocol DSS1. You are not allowed to configure this command on an ISDN interface if there is still a call on it. This command can take effect only if it is configured when there is no call on the interface. Alternatively, you can manually disable the interface by executing the shutdown command, configure the command, and then enable the interface by executing the undo shutdown command. These operations, however, will lead to the disconnection of the call existing on the interface.
Note: You are allowed to configure: ANSI ISDN on BRI and T1 PRI interfaces;
AT&T ISDN on T1 PRI interfaces; DSS1 ISDN on BRI, E1 PRI, and T1 PRI interfaces; ETSI ISDN on BRI, E1 PRI, and T1 PRI interfaces; NI (National ISDN) on BRI interfaces; QSIG ISDN on E1 PRI and T1 PRI interfaces; NTT ISDN on BRI and T1 PRI interfaces.
Example
# Apply ISDN ETSI on the interface Bri0/0/0.
[3Com-Bri0/0/0] isdn protocol-type etsi
3.1.23 isdn send-restart

Syntax
isdn send-restart undo isdn send-restart
View
System view
Parameter
None
Description
Use the isdn send-restart command to set restart mark in a distributed system (3Com 6000 Routers), so that the MPU will control the PRI interface to send a RESTART message after re-establishing a link. Use the undo isdn send-restart command to remove the restart mark. This command is invalid for the MCU in a centralized system, for example, 3Com 5000 Routers.
Example
# Enable the MCU to send RESTART messages automatically to interface boards automatically.
[3Com] isdn send-restart
# Disable automatic RESTART message sending.


[3Com] undo isdn send-restart
3.1.24 isdn spid auto_trigger

Syntax
isdn spid auto_trigger
View
Parameter
None
Description
Use the isdn spid auto_trigger command to enable SPID auto-negotiation once on the BRI interface running the NI protocol. On a BRI interface compliant with the North American ISDN protocol, the router can place a call only after SPID negotiation or initialization. SPID information can be obtained via static configuration or dynamic negotiation. You may manually trigger a new SPID negotiation request by executing this command if the SPID negotiation in dynamic negotiation fails or just for the purpose of testing. By default, a BRI interface does not originate a SPID negotiation request unless triggered by a call. This command applies only on the BRI interface running the NI protocol.
Example
# Manually trigger a new SPID negotiation request on the interface bri0/0/0.
[3Com-bri0/0/0] isdn spid auto_trigger
3.1.25 isdn spid nit

Syntax
isdn spid nit undo isdn spid nit
View
Parameter
None
Description
Use the isdn spid nit command to set the SPID processing mode to NIT (Not Initial Terminal) on a NI-compliant BRI interface. Use the undo isdn spid nit command to disable the NIT mode on the BRI interface. By default, NIT mode does not apply on BRI interfaces. Instead, static SPID or dynamic SPID negotiation is applied. On an NI-compliant BRI interface, calls can be placed only after the SPID negotiation or initialization is finished. When the router is communicating with an NI-compliant exchange that does not support SPID negotiation, you can use this command to set the SPID processing mode on the router to NIT and the ISDN will ignore ISPID negotiation and initialization. This command applies only on NI-compliant BRI interfaces.
Example
# Ignore SPID negotiation and initialization on the interface bri0/0/0, i.e., adopting the NIT mode.
[3Com-bri0/0/0] isdn spid nit
3.1.26 isdn spid timer

Syntax
isdn spid timer seconds undo isdn spid timer
View
Parameter
seconds: Duration of the SPID timer, which is in the range of 1 to 255 seconds, and defaults to 30 seconds.
Description
Use the isdn spid timer command to set the duration of the timer TSPID for an NI-compliant BRI interface to timer_length.
Use the undo isdn spid timer command to restore the default duration of the timer TSPID for the NI-compliant BRI interface. On a BRI interface compliant with the ISDN protocol in North America, calls can be placed only after the SPID negotiation or initialization is finished. SPID information can be obtained via static configuration or dynamic negotiation. The timer TSPID is started when the terminal originates a negotiation or initialization request by sending the INFORMATION message. You can use this command to modify the duration of TSPID. This command applies only on NI-compliant BRI interfaces.
Example
# Set the duration of TSPID on the interface bri0/0/0 to 50 seconds.
[3Com-bri0/0/0] isdn spid timer 50
3.1.27 isdn spid service

Syntax
isdn spid service [ audio | data | speech ] undo isdn spid service
View
Parameter
audio: Supports audio service. data: Supports data service. speech: Supports voice service.
Description
Use the isdn spid service command to configure the service types that must be supported in SPI negotiation on the BRI interface adopting NI protocol. Use the undo isdn spid service command to delete the service types that must be supported in SPI negotiation on the BRI interface adopting NI protocol. There are three types of services, and you can select any one or none. None means all services are supported. By default, SPID needs to support data and voice service simultaneously. Generally, as for the BRI interface adopting North America ISDN protocol, you need to negotiate or initialize SPID before originating a call. During negotiation, SPCS may send
multiple SPIDs and carry the service types supported by the SPID; therefore, the router needs to choose a proper SPID according to the local service type. This command can only be applied on the BRI interface adopting NI protocol.
Example
# Set the service type supported by BRI interface to data and voice.
[3Com-bri0/0/0] isdn spid service data [3Com-bri0/0/0] isdn spid service speech
3.1.28 isdn spid resend

Syntax
isdn spid resend times undo isdn spid resend
View
Parameter
times: An integer in the range of 1 to 255 times, which defaults to 1.
Description
Use the isdn spid resend command to set the number of INFORMATION message retransmission attempts for SPID negotiation or initialization on an NI-compliant BRI interface. Use the undo isdn spid resend command to restore the default number of INFORMATION message retransmission attempts on the interface. On a BRI interface compliant with the ISDN protocol in North America, calls can be placed only after the SPID negotiation or initialization has finished. The timer TSPID is started when the terminal originates a negotiation or initialization request by sending the INFORMATION message. If the terminal does not receive any response upon the expiration of TSPID, it will retransmit the INFORMAITON message. You can use this command to modify the number of INFORMATION message retransmission attempts. This command applies only on NI-compliant BRI interfaces.
Example
# Set the allowed number of INFORMATION retransmission attempts to five.

[3Com-bri0/0/0] isdn spid resend 5
3.1.29 isdn spid1

Syntax
isdn spid1 spid [ LDN ] undo isdn spid1
View
Parameter
spid: String comprising 1 to 20 digits. LDN: Local dialing number, a string comprising 1 to 30 digits.
Description
Use the isdn spid1 command to configure SPID information for the B1 channel on the NI-compliant BRI interface. Use the undo isdn spid1 command to remove the SPID information of the B1 channel on the interface. On a BRI interface compliant with the ISDN protocol (North America), calls can be placed only after the SPID negotiation or initialization has finished. SPID information can be obtained via static configuration or dynamic negotiation. Only after SPID information is configured for the B1 channel on the BRI interface can the system make the L3 initialization to place calls normally. In addition, when the router works with an ISDN NI compliant switch (the DMS100 for example) in North America, you must use this command to configure a unique SPID and LDN for each B channel to ensure a successful MP channel call. Otherwise, only one B channel can be brought up. Also note that both SPID and LDN are provided by your service provider and the configuration of LDN voids the configuration of the ISDN calling command. By default, Both SPID and LDN for the B1 channel on the BRI interface are null. This command applies only on NI-compliant BRI interfaces.
Example
# Set SPID to 012345 for the B1 channel on the interface bri0/0/0.
[3Com-bri0/0/0] isdn spid1 012345
# Assign the SPID 012345 and the LDN 54321 to the B1 channel on the BRI interface.
[3Com-bri0/0/0] isdn spid1 012345 54321
3.1.30 isdn spid2

Syntax
isdn spid2 spid [ LDN ] undo isdn spid2
View
Parameter
spid: String comprising 1 to 20 digits. LDN: Local dialing number, a string comprising 1 to 30 digits.
Description
Use the isdn spid2 command to configure SPID information for the B1 channel on an NI-compliant BRI interface. Use the undo isdn spid2 command to remove the SPID information of the B1 channel on the interface. On a BRI interface compliant with the ISDN protocol in North America, calls can be placed only after the SPID negotiation or initialization has finished. SPID information can be obtained via static configuration or dynamic negotiation. Only after SPID information is configured for the B2 channel on the BRI interface can the system make the L3 initialization to place calls normally. In addition, when the router works with an ISDN NI compliant switch (the DMS100 for example) in North America, you must use this command to configure a unique SPID and LDN for each B channel to ensure a successful MP channel call. Otherwise, only one B channel can be brought up. Also note that both SPID and LDN are provided by your service provider and the configuration of LDN voids the configuration of the ISDN calling command. By default, both SPID and LDN for the B2 channel on the BRI interface are null. This command applies only on NI-compliant BRI interfaces.
Example
# Set SPID to 012345 for the B2 channel on the interface bri0/0/0.

[3Com-bri0/0/0] isdn spid2 012345
# Assign the SPID 012345 and the LDN 54321 to the B2 channel on the BRI interface.
[3Com-bri0/0/0] isdn spid2 012345 54321
3.1.31 isdn statistics

Syntax
isdn statistics { clear | continue | display [ flow ] | start | stop }
View
ISDN interface view
Parameter
clear: Clears the statistics. continue: Continues counting. display: Displays the statistics. display flow: Displays the statistic information about message flows. start: Starts counting. stop: Stops counting.
Description
Use the isdn statistics command to have the system create statistics on the information received and transmitted at an ISDN interface. By default, no statistics are created on the information transmitted and received at interfaces. Use the isdn statistics start command in the view of an interface to start creating statistics on the messages received and transmitted at the interface. Use the isdn statistics display command to view the statistic information. Use the isdn statistics continue command to continue the effort in creating statistics. Use the isdn statistics display flow command to view the statistics in the form of flow. Use the isdn statistics stop command to stop creating statistics.
Example
# Display statistics information on the PRI interface.
[3Com-serial0/0/0:15] isdn statistics display Q.931 message received and sent out on current port:

CALL_PROC SETUP CONN SETUP_ACK CONNECT_ACK DISCONNECT RELEASE RELEASE_COM Send(0) Send(6) Send(13) Send(0) Send(5) Send(3) Send(1) Send(18)

Recv(6) Recv(13) Recv(5) Recv(6) Recv(13) Recv(16) Recv(18) Recv(1)
3.1.32 isdn two-tei

Syntax
isdn two-tei undo isdn two-tei
View
BRI interface view
Parameter
None
Description
Use the isdn two-tei command to have the router request the connected switch for a new TEI value before calling for a B channel. Use the undo isdn two-tei command to restore the default TEI handling practice on the BRI interface. This command applies to the situation where the switch with which the router works is an ISDN NI compliant switch (the DMS100 for example) in North America. In this case, you must ensure that the TEI value assigned to each B channel is unique to ensure a successful MP channel call. Otherwise, only one B channel can be brought up. By default, all the B channels on the BRI interface use one TEI value. Related command: isdn protocol-type NI, isdn spid1, isdn spid2, and ppp mp.
Example
# Configure the router to request the connected switch for a new TEI value before calling to bring up a B channel.
[Router-bri0/0/0] isdn two-tei
Chapter 4 SLIP Configuration Commands

4.1 SLIP Configuration Commands
4.1.1 debugging slip
Syntax
debugging slip { event | error | packet | all }
View
User view
Parameter
packet: Enables packet debugging. event: Enables event debugging. error: Enables error debugging.
Description
Use the debugging slip command to enable the debugging switch of the SLIP protocol.
Example
None
4.1.2 link-protocol slip

Syntax
link-protocol slip
View
Interface view
Parameter
None
Description
Use the link-protocol slip command to set the link layer protocol of the interface as SLIP.
By default, the link-layer protocol for interface is PPP. P2P link can use simpler link layer protocol SLIP(Serial Line IP), which is mainly used to run TCP/IP on the P2P serial port. SLIP is only used for the asynchronous link. SLIP only defines the start and end identifiers of frame, so as to intercept IP packet on the serial line. Compared with PPP, SLIP has no address concept, negotiation process, differentiation of packet types (so only one network protocol can be supported at the same time) and error correction function. The link layer protocol of the interface shall be consistent with that of the peer interface.
Example
# Configure the link layer protocol on the interface Serial0/0/0 as SLIP.
[3Com-Serial0/0/0] link-protocol slip
Command Reference Guide Link Layer Protocol v2.30 Router Softwarev
Chapter 5 HDLC Configuration Commands

5.1 HDLC Configuration Commands
5.1.1 link-protocol hdlc
Syntax
link-protocol hdlc
View
Interface view
Parameter
None
Description
Use the link-protocol hdlc command to configure the interface encapsulation as HDLC. HDLC is a link layer protocol and can bear network layer protocols, such as IP and IPX. By default, the interface is encapsulated with PPP. Related command: timer hold and display interface.
Example
# Configure HDLC encapsulation on interface Serial1/0/0.
[3Com-Serial1/0/0] link-protocol hdlc
5.1.2 timer hold

Syntax
View
Interface view
Command Reference Guide Link Layer Protocol v2.30 Router Softwarev
Parameter
seconds: Value of the polling interval. The value is in the range from 0 to 32767 in seconds. 0 indicates that the link detection function is disabled.
Description
Use the timer hold command to set the polling interval. Use the undo timer hold command to restore the default value of the polling interval. By default, the value of seconds is 10. The polling interval should be equal at the two ends of the data link. A zero polling interval set in both ends will close the polling operation of the data link. Related command: display interface.
Example
# Set the value of polling interval on interface Serial1/0/0 to 100 seconds.
[3Com-Serial1/0/0] timer hold 100
Chapter 6 Frame Relay Configuration Commands

6.1 Frame Relay Configuration Commands
6.1.1 debugging fr
Syntax
debugging fr { all | congestion | de | event | fragment | inarp | lmi | mfr control | packet | transmit-rate } [ interface interface-type interface-number [ dlci dlci-number ] ] undo debugging fr { all | congestion | de | event | fragment | inarp | lmi | mfr control | packet | transmit-rate } [ interface interface-type interface-number [ dlci dlci-number ] ]
View
User view
Parameter
all: All frame relay information debugging. congestion: Information debugging of frame relay traffic congestion management. de: DE information debugging of FRTS. event: Information debugging of frame relay event. When this parameter is used no interface can be specified. fragment: Information debugging of frame relay fragment. When this parameter is in use DLCI must be specified. inarp: Information debugging of frame relay address resolution protocol. When this parameter is in use DLCI can be specified. lmi: Information debugging of frame relay LMI (Local Management Interface) protocol. mfr control: Information debugging of multilink frame relay bundle and bundle link. packet: Information debugging of frame relay packet. When this parameter is in use DLCI can be specified. transmit-rate: Information debugging of FRTS transmit rate. interface-type: Interface type. interface-number: Interface number. dlci dlci-number: DLCI number of virtual circuit, in the range 16 to 1007.
Description
Use the debugging fr command to enable frame relay information debugging. Use the undo debugging fr command to disable frame relay information debugging. By default, frame relay information debugging is disabled. For multilink frame relay, if the information debugging of multilink frame relay bundle and bundle link (mfr control) are enabled, the sent/received bundle link controlling information and status change of bundle link will be displayed. If FRTS function is enabled, the change of frame relay sending rate can be seen after the transmit rate information debugging (transmit-rate) is enabled. The enabling of frame relay information debugging greatly affects system performance, so this command should be used with caution.
Example
# Enable the FRTS congestion management debugging of serial interface 5/0/1.
<3Com> debugging fr congestion interface serial 5/0/1
# Enable DE debugging of FRTS on serial interface 5/0/1.

<3Com> debugging fr de interface serial 5/0/1
# Enable FRTS transmit rate debugging of serial interface 5/0/1.

<3Com> debugging fr transmit-rate interface serial 5/0/1
# Enable debugging of the bundle interface MFR1, supposing several links have been bundle on it.
<3Com> debugging fr mfr control interface mfr1 serial3/0/2(Out): MFR msg=Add_link, Length=28, Link=serial5/1/0, BL state=Add_sent e1 00 01 01 07 4d 46 52 30 00 02 0c 53 65 72 69 61 6c 32 3a serial3/0/2(In): MFR msg=Add_link, Length=30, Link=serial5/1/0, BL state=Add_sent e1 00 01 01 09 6b 70 6c 6b 70 6c 00 02 0c 53 65 72 69 61 6c serial3/0/2(Out): MFR msg=Add_link_ack, Length=28, Link=serial5/1/0, BL state=Add_rx e1 00 02 01 07 4d 46 52 30 00 02 0c 53 65 72 69 61 6c 32 3a serial3/0/2(Out): MFR msg=Hello, Length=9, Link=serial5/1/0, BL state=Up e1 00 05 03 06 43 4b 01 f6 serial3/0/2(In): MFR msg=Hello_ack, Length=9, Link=serial5/1/0, BL state=Up

e1 00 05 03 06 2f f7 00 a5
Table 6-1 Description on the fields of the debugging fr command Field MFR msg Length Link BL state Description Type of the control packets received and transmitted on the bundle link. Length of the control packets. Interface number of the bundle link. Operating state about the bundle link.
6.1.2 debugging fr compress

Syntax
debugging fr compress [ interface interface-type interface-number] undo debugging fr compress [ interface interface-type interface-number]
View
User view
Parameter
interface interface-type interface-number: Specifies an interface by its type and number.
Description
Use the debugging fr compress command to enable FRF9 IPHC debugging of frame relay. Use the undo debugging fr compress command to disable FRF9 IPHC debugging of frame relay.
Example
# Enable FRF9 IPHC debugging of frame relay.
<3Com> debugging fr compress
6.1.3 debugging fr compression

Syntax
debugging fr compression iphc { rtp | tcp } { all | context_state | error | full_header | general_info } undo debugging fr compression iphc { rtp | tcp } { all | context_state | error | full_header | general_info }
View
User view
Parameter
all: Enables all FRF20 IPHC RTP/TCP debugging. context_state: Enables FRF20 IPHC RTP/TCP context_state packet debugging. error: Enables FRF20 IPHC RTP/TCP error debugging. full_header: Enables FRF20 IPHC RTP/TCP packet debugging. general_info: Enables general FRF20 IPHC RTP/TCP debugging.
Description
Use the debugging fr compression iphc command to enable FRF20 IPHC debugging of frame relay. Use the undo debugging fr compression iphc command to disable FRF20 IPHC debugging of frame relay.
Example
# Enable FRF20 IPHC RTP error debugging of frame relay.
<Router> debugging fr compression iphc rtp error
6.1.4 debugging pppofr

Syntax
debugging pppofr { all | packet | event } [ interface virtual-template number ]
View
User view
Parameter
all: Enable all PPPoFR debugging switches. packet: Enable PPPoFR packet debugging switch. event: Enable event debugging switch. interface virtual-template number: Virtual template interface number
Description
Use the debugging pppofr command to enable PPPoFR debugging. Use the undo debugging pppofr command to disable PPPoFR debugging.
Example
# Enable PPPoFR packet debugging on all virtual templates.
<Router> debugging pppofr packet
6.1.5 display fr compress

Syntax
display fr compress [ interface interface-type interface-number ]
View
Any view
Parameter
interface-type: Interface type. interface-number: Interface number, in 3-dimension form: slot number/card number/interface number.
Description
Use the display fr compress command to view the statistics information of the frame relay compression. If no interface is specified, the DLCI statistics information of all the interfaces will be displayed. Related command: fr compression frf9.
Example
# View the frame relay compression statistics information of MFR interface 4/0/0.
<3Com> display fr compress interface mfr 4/0/0 MFR4/0/0 -DLCI:25

uncompressed bytes xmt/rcv 0/0 1 min avg ratio xmt/rcv

compressed bytes xmt/rcv 0/0 5 min avg ratio xmt/rcv 0.000/0.000
0.000/0.000
6.1.6 display fr dlci-switch

Syntax
display fr dlci-switch [ interface interface-type interface-num ]
View
Any view
Parameter
interface-type: Type of the interface. interface-number: Number of the interface, including slot-number/ card-number/ port-number. The specified interface can only be main interface. The information of all interfaces will be displayed without specifying interface.
Description
Use the display fr dlci-switch command to view the information of the configured FR switching to check if the frame relay switching of a user is correctly configured. Related command: fr dlci-switch.
Example
# View the information of the configured FR switching.
<3Com> display fr dlci-switch Status Inactive Interface(Dlci) < -----> Interface(Dlci) Serial1/1/0:10(100)
Serial0/1/1:10(100)
Table 6-2 Description of the output information of command display fr dlci-switch Field Status Interface(Dlci) Interface(Dlci) < -> Description The status of FR switching function. Input interface and its DLCI, output interface and its DLCI.
6.1.7 display fr inarp-info

Syntax
display fr inarp-info [ interface interface-type interface-num ]
View
Any view
Parameter
interface-type interface-num: Used to specify the interface to be viewed. Only the main interface can be specified here. The information of all interfaces will be displayed for the command without specifying an interface.
Description
Use the display fr inarp-info command to view the packet statistics of the FR inverse address resolution protocol. The packets of FR inverse ARP include the address resolution request packet and address resolution reply packet. According to the output information via this command, you can diagnose if the inverse ARP operates normally. Related command: fr inarp.
Example
# Display the packet statistics of the FR inverse address resolution protocol.
<3Com> display fr inarp-info interface Serial1/1/1:1: dlci 200 type FRF12(ETE) size 80 in/out/drop 0/0/0
Table 6-3 Output information description Field interface dlci type size in/out/drop Current interface DLCI number Fragment type Fragment size Received/transmitted/dropped fragments Description
6.1.8 display fr interface

Syntax
display fr interface interface-type interface-num
View
Any view
Parameter
interface-type interface-num: Used to specify the interface to be viewed. The specified interface can be a main interface or a sub-interface. The information of all interfaces will be displayed for the command without specifying an interface.
Description
Use the display fr interface command to view the FR status, which is helpful for performing fault diagnosis. Related command: display interface.
Example
# Display the FR protocol status.
<3Com> display fr interface Serial1/0/0, DTE, physical up, protocol up Serial1/0/0.1, multi-point, protocol up Serial1/0/0.2, point-to-point, protocol down Serial2/0/0, DCE, physical down, protocol down
This command displays the protocol status of each interface encapsulated with FR. The above information indicates that: Frame Relay interface type of Serial1/0/0 is DTE. Physical layer protocol and link layer protocol of Serial1/0/0 are activated.
6.1.9 display fr lmi-info

Syntax
display fr lmi-info [ interface interface-type interface-num ]
View
Any view
Parameter
interface-type interface-num: Used to specify the interface to be viewed. The information of all interfaces will be displayed for the command without specifying an interface.
Description
Use the display fr lmi-info command to view the statistics of LMI protocol frame. The LMI protocol is used to maintain the current Frame Relay link, including the status enquiry packet and status packet. The displayed information helps to diagnose the faults. Related command: fr interface-type.
Example
# Display the statistics of LMI protocol frame.
<3Com> display fr lmi-info Frame relay LMI statistics for interface Serial1/0/0(DTE) T391DTE = 10 (keepalive 10) N391DTE = 6, N392DTE = 3, N393DTE = 4 out status enquiry = 96, in status = 85 status timeout = 3, discarded messages = 3 Frame relay LMI statistics for interface Serial2/0/0 (DCE, ANSI) T391DTE = 0 (no keepalive) T392DCE = 15, N392DCE = 3, N393DCE = 4 in status enquiry = 0, out status = 0 status enquiry timeout = 0, discarded messages = 0
The above shows various information about the FR LMI protocol. For example, the Frame Relay interface type of Serial1/0/0 is DTE. LMI protocol type is Cisco-compatible protocol. T391 parameter on DTE side is 10. N391 parameter on DTE side is 6. N392 parameter on DTE side is 3. N393 parameter on DTE side is 4. The number Status Enquiry packets sent through Serial1/0/0 is 96. Received Status Enquiry packets are 85. Timeout packets are 3. Discarded packets are 3.
6.1.10 display fr map-info

Syntax
display fr map-info [ interface interface-type interface-num ]
View
Any view
Parameter
Description
Use the display fr map-info command to view the FR address mapping table. The displayed information via the command indicates whether the static mapping configured by a user is correct, and whether the dynamic address mapping operates normally. Related command: fr map ip and fr inarp.
Example
# Display Frame Relay address mapping table.
<3Com> display fr map-info Map Statistics for interface Serial1/0/2 (DTE) DLCI = 100, IP INARP 100.100.1.1, Serial1/0/2 create time = 2002/10/21 14:48:44, status = ACTIVE encapsulation = ietf, vlink = 14, broadcast DLCI = 200, IP INARP 100.100.1.1, Serial1/0/2 create time = 2002/10/21 14:34:42, status = ACTIVE encapsulation = ietf, vlink = 0, broadcast DLCI = 300, IP 1.1.1.1, Serial1/0/2 create time = 2002/10/21 15:03:35, status = ACTIVE encapsulation = ietf, vlink = 15
The above indicates the information of each MAP configured with Frame Relay protocol. For example, as for the first address mapping, the mapping indicates that PVC (DLCI=100) on Serial1/0/2 establishes the address mapping with the peer end (IP address is 100.100.1.1) through Inverse ARP. The time of creating the mapping is 2002/10/21 14:48:44, and its status is active. Encapsulation format is IETF, and broadcast packet is available.
6.1.11 display fr map pppofr

Syntax
display fr map pppofr
View
Any view
Parameter
None
Description
Use the display fr map pppofr command to display PPPoFR MAP and its state in the current system.
Example
# Display PPPoFR MAP and its state in the current system.
[3Com] dis fr map pppofr Fr Interface Serial0/0/0 Serial0/0/0 DLCI 100 200 Fr State down down PPP Interface Virtual-Template1 Virtual-Template2 PPP Phase Phase:0 Phase:0
6.1.12 display fr pvc-info

Syntax
display fr pvc-info [ interface interface-type interface-num ]
View
Any view
Parameter
Description
Use the display fr pvc-info command to view the FR PVC table. This command displays the statistics of the FR PVC status and receiving/sending data on this VC. Related command: fr dlci.
Example
# Display the FR PVC table.

<3Com> display fr pvc-info
PVC statistics for interface Serial1/0/0 (DTE, physical UP) DLCI = 100, USAGE = UNUSED (0000), INTERFACE = Serial1/0/0 create time = 2000/04/01 23:55:39, status = active in BECN = 0, in FECN = 0 in packets = 0, in bytes = 0 out packets = 0, out bytes = 0 DLCI = 102, USAGE = LOCAL (0010), INTERFACE = Serial1/0/0.1 create time = 2000/04/01 23:56:14, status = active in BECN = 0, in FECN = 0 in packets = 0, in bytes = 0 out packets = 0, out bytes = 0
The information listed above shows various information about the FR PVC. The above information indicates that: The PVC (DLCI=100) is the one (UNUSED) obtained through negotiating with the peer end via LMI. It is configured on Serial1/0/0. Establishing time is 2000/04/01 23:55:39. PVC status is active. The packets received of Forward Explicit Congestion Notifications (FECN) and Backward Explicit Congestion Notifications (BECN) are both 0. Received/sent frames are 0. Received/sent bytes are 0.
6.1.13 display fr statistics

Syntax
display fr statistics [ interface interface-type interface-num ]
View
Any view
Parameter
interface-type interface-num: Used to specify the interface to be viewed. Only the main interface can be specified here. The information of all interfaces will be displayed for the command without specifying an interface.
Description
Use the display fr statistics command to view the current Frame Relay statistics about receiving and sending packets. The output information of this command can help the user to perform FR traffic statistics and fault diagnosis. Related command: display interface.
Example
# Display the Frame Relay statistics about receiving and sending packets.
<3Com> display fr statistics Frame relay packet statistics for interface Serial1/0/0 (DTE) in packets = 84, in bytes = 1333 out packets = 92, out bytes = 1217 discarded in packets = 13, discarded out packets = 0 Frame relay packet statistics for interface Serial1/1/0 (DCE) in packets = 0, in bytes = 0 out packets = 0, out bytes = 0 discarded in packets = 0, discarded out packets = 0
The above information displays Frame Relay statistics about receiving and sending packets. For instance, it is known from the above information that the Frame Relay interface type of Serial1/0/0 is DTE. Received packets are 84. Received bytes are 1333. Sent packets are 92. Sent bytes are 1217. Discarded packets in received ones are 13. Discarded packets in sent ones are 0.
6.1.14 display interface mfr

Syntax
display interface mfr [ interface-number [ .subnumber ] ]
View
Any view
Parameter
interface-number: MFR interface number. .subnumber: MFR subinterface number.
Description
Use the display interface mfr command to view information on one or all MFR interfaces including configuration, state, and packet statistics.
Example
# To view the configuration and status information about interface MFR 4
<3Com> display interface mfr 4

MFR4 current state : UP Line protocol current state : UP Description : MFR4 Interface The Maximum Transmit Unit is 1500 Internet Address is 12.12.12.2/16 link-protocol is FRAME-RELAY IETF
LMI DLCI is 0, LMI type is Q.933a, frame relay DTE LMI status enquiry sent 435, LMI status received 435 LMI status timeout 0, LMI message discarded 0 FIFO queuing: FIFO: 0/75/0 (Outbound queue:Size/Length/Discards)
5 minutes input rate 0 bytes/sec, 0 packets/sec 5 minutes output rate 0 bytes/sec, 0 packets/sec 1058 packets input, 832389 bytes, 0 drops 619 packets output, 828190 bytes, 0 drops
6.1.15 display mfr

Syntax
display mfr [ interface interface-type interface-number | verbose ]
View
Any view
Parameter
interface-type: Interface type. interface-number: Interface number. verbose: Displays detailed statistics information, including the number of controlling packets sent and received.
Description
Use the display mfr command to view configuration and statistics information of multilink frame relay bundle and bundle link. If no bundle or bundle link is specified, information of all bundles and bundle links will be displayed. Related command: link-protocol fr mfr, interface mfr.
Example
# View configuration and state information of all frame relay bundles and frame relay bundle links.
<3Com> display mfr Bundle interface:MFR0, Bundle State = up, Bundle Class = A fragment disabled Bundle name = MFR0 Bundle links: Serial0/0/0, PHY state = up, link state = up, Link name = Serial0/0/0
# View detailed state information of all frame relay bundle links.

<3Com> display mfr verbose LID :Serial0/0/0 Peer LID: Serial1/0/0
Bound to MFR0 (BID:MFR0) Physical state :up, link state : add sent Bundle Link statistics: Add_link: Add_link_ack: Add_link_rej: Hello: Hello_ack: Remove_link: sent sent sent sent sent sent 40, 0 , received received 0 0 0 0 0 0 0
0 , received 0 , 0, 0, 0, 0.
received received received received out 0
Remove_link_ack: sent Pkts dropped : Timer: Retry : Ack max 4, Hello 2, in 10
Current 0
Cause code: differential delay
Bundle interface:MFR1, Bundle state = down, fragment disabled Bundle name = MFR1 Bundle links: LID : Serial1/1/1:4 Peer LID:
Bundle class = A,
Bound to MFR1 (BID:MFR1) Physical state: down, link state: down, Bundle Link statistics: Hello(TX/RX): Add_link(TX/RX): Add_link_rej(TX/RX): 0/0 0/0 0/0 Hello_ack(TX/RX): Add_link_ack(TX/RX): 0/0 0/0

Remove_link(TX/RX): 0/0

Remove_link_ack(TX/RX): 0/0
Pkts dropped(in/out): 0/0 Timer: ACK Retry: Max 4, Hello 10
2, Current 0
Cause code: nonew
Table 6-4 Description on the fields of the display mfr command Field Bundle interface Bundle state Bundle class Bundle links LID Peer LID Physical state link state Bundle statistics: Link Operating state of the bundle interface. Class A indicates if there is one bundle link is in up state, the bundle is flagged as up. Moreover, all bundle links should be tagged as down before the bundle is down. Physical interfaces of the links in the bundle. Identifier of the bundle link. Identifier of the peer bundle link. Operating state of the physical interface. Operating state of the link protocol on the bundle link. Statistics about the packets on the bundle link. Number of the transmitted and received Hello messages. Hello messages are sent for maintaining link state. Number of transmitted and received Hello acknowledgement messages. Hello_ack messages are sent notifying receipt of the Hello messages. Number of transmitted and received Add_link messages. Add_link(TX/RX) Add_link messages are sent notifying the peer that the local node is ready for processing frames. Number of transmitted and received Add_link acknowledgment messages. Add_link_ack messages are sent notifying receipt of the Add_link messages. Number of transmitted and received Add_link reject messages. Add_link_rej messages are sent notifying reject of the Add_link messages. Description
Hello(TX/RX)
Hello_ack(TX/R X)
Add_link_ack(TX /RX)
Add_link_rej(TX/ RX)
Field Remove_link(TX /RX)
Description Number of transmitted and received Remove_link messages. Remove_link messages are sent notifying removal of a link from the bundle. Number of messages. transmitted and received Remove_link_ack
Remove_link_ac k(TX/RX) Pkts dropped(in/out) Timer: Ack 4 Hello 10 Retry: max 2 Current 0 Cause code
Remove_link_ack messages are sent notifying receipt of the Remove_link messages. Number of dropped incoming and outgoing packets. Time waiting for a Hello_ack message before a Hello message or an Add_link message (for initial synchronization) is retransmitted on the bundle link. Intervals for sending Hello messages. Maximum number of Hello or Add_link sending retries made when no Hello_ack or Add_link_ack is received on the bundle link. Number of retries Cause resulting in the current state of the bundle link.
6.1.16 fr compression frf9

Syntax
fr compression frf9 undo fr compression
View
Frame relay interface view
Parameter
None
Description
Use the fr compression frf9 command to enable FRF9 compression function. Use the undo fr compression command to disable FRF9 compression function. By default, frame relay compression function is disabled.
This command is only valid for point-to-point interfaces. In other words, it is used for frame relay sub-interfaces of point-to-point type. Only when the frame relay packets type of interface is IETF, can frame relay compression take effect. When this command is configured, the system will automatically change the packet type of the interface into IETF if the frame relay packets type of interface is not IETF. Related command: fr map.
Example
# Enable frame relay compression on the point-to-point frame relay sub-interface Serial4/1/3.1.
[3Com] interface serial 4/1/3.1 p2p [3Com-Serial4/1/3.1] fr compression frf9
6.1.17 fr compression iphc

Syntax
fr compression iphc undo fr compression iphc
View
Frame Relay interface view
Parameter
None
Description
Use the fr compression iphc command to enable the IP header compression. Use the undo fr compression iphc command to disable the function. By default, the Frame Relay compression function is disabled. Related command: fr map.
Example
# Configure the Frame Relay interface Serial 4/1/0 to adopt IP header compression.
[3Com-Serial4/1/0] fr compression iphc
6.1.18 fr dlci
Syntax
fr dlci dlci undo fr dlci dlci
View
Interface view
Parameter
dlci: Virtual circuit number allocated for Frame Relay interface. The range of the number is 16 to 1007. 0 to 15 and 1008 to 1023 are reserved by the protocol for special purposes.
Description
Use the fr dlci command to configure the virtual circuit for Frame Relay interface. Use the undo fr dlci command to cancel the configuration. When the Frame Relay interface type is DCE or NNI, it is necessary to manually configure virtual circuit for interface (either main interface or sub-interface). When the Frame Relay interface type is DTE, if the interface is the main interface, the system will automatically configure the virtual circuit according to the peer device. Related command: fr interface-type.
Example
# Assign a virtual circuit with DLCI 100 to Frame Relay sub-interface Serial1/0/0.1.
[3Com-Serial1/0/0.1] fr dlci 100
6.1.19 fr dlci-switch
Syntax
fr dlci-switch in-dlci interface interface-type interface-number dlci out-dlci undo fr dlci-switch in-dlci
View
Frame relay interface view, MFR interface view
Parameter
in-dlci: DLCI in the packets received on the interface, in the range 16 to 1007.
interface-type: Specified interface type. interface-number: Specified interface number. out-dlci: DLCI in the sent packets. It is in the range 16 to 1007.
Description
Use the fr dlci-switch command to configure a static route for frame relay PVC switching. Use the undo fr dlci-switch command to delete a static route for frame relay PVC switching. By default, no static route is configured for frame relay PVC switching. Before the static route of frame relay PVC is configured, it is necessary to enable the frame relay PVC switching first by using the command fr switching. The default type of the forwarding interface can be frame relay or MFR. You can however specify a tunnel interface for forwarding if one has been configured, thus transmitting frame relay packets over IP networks. Related command: fr switching.
Example
# Configure a static route, allowing the packets on the link with DLCI of 100 on Serial 1/0/0 to be forwarded over the link with DLCI of 200 on interface Serial 2/0/0.
[3Com-Serial1/0/0] fr dlci-switch 100 interface serial2/0/0 dlci 200
# Configure a static route, allowing the packets on the link with DLCI of 200 on Serial 4/1/2 to be forwarded over the link with DLCI of 300 on tunnel interface 4.
[3Com-Serial4/1/2] fr dlci-switch 200 interface Tunnel4 dlci 300
6.1.20 fr inarp
Syntax
fr inarp [ ip ] [ dlci ] undo fr inarp [ ip ] [ dlci ]
View
Interface view
Parameter
ip: Indicates that the inverse address resolution is performed on the ip network protocol.
dlci: Data link connection identifier number, i.e., virtual circuit number, indicating that the inverse address resolution is performed for this DLCI number only.
Description
Use the fr inarp command to enable the inverse address resolution of Frame Relay. Use the undo fr inarp command to disable this function. By default, system permits enabling the Frame Relay inverse address resolution. When the Frame Relay sends data over the interface, it is necessary to map the network address to the DLCI numbers. Such a map can be specified manually or can be completed via the function of automatic inverse address resolution. Automatic inverse address resolution can be started by using the command. If it is expected to enable the inverse address resolution function of all PVCs, the command without any parameters is adopted. If it is expected to enable the inverse address resolution function in the specified data link, the command with dlci parameter is adopted. The fr inarp command configured on an FR main interface also applies to its subinterfaces. Related command: fr map, reset fr inarp, and display fr map-info.
Example
# Enable the inverse address resolution at all PVCs of the Frame Relay interface Serial1/0/0.
[3Com-Serial1/0/0] fr inarp
6.1.21 fr interface-type
Syntax
fr interface-type { dce | dte | nni } undo fr interface-type
View
Interface view
Parameter
dte, dce and nni: Three types of Frame Relay interfaces.
Description
Use the fr interface-type command to set the Frame Relay interface type. Use the undo fr interface-type command to restore the default Frame Relay interface type. By default, the frame relay interface type is DTE In Frame Relay, there are two communicating parties, namely, the user side and network side. The user side is called Data Terminal Equipment (DTE), and the network side is called Data Communications Equipment (DCE). In a Frame Relay network, the interface between the Frame Relay switches is Network-to-Network Interface (NNI), and the corresponding interface adopts the NNI operating view. If the device is used as Frame Relay switching, the Frame Relay interface should operate in the NNI view or DCE mode. NE16E/08E/05 routers support the three modes. In NE16E/08E/05 routers, while configuring the Frame Relay interface type as DCE or NNI, it is unnecessary to perform the fr switching command in System view. Please notice that this is different from Cisco. Related command: link-protocol fr.
Example
# Set the type of the Frame Relay interface Serial1/0/0 to DCE.
[3Com] interface Serial1/0/0 [3Com-Serial1/0/0] fr interface-type dce
6.1.22 fr iphc
Syntax
fr iphc { nonstandard | rtp-connections number1 | tcp-connections number2 | tcp-include } undo fr iphc { nonstandard | rtp-connections number1 | tcp-connections number2 | tcp-include }
View
Parameter
nonstandard: Nonstandard compatible compression format. rtp-connections number1: The number of RTP compression connections, in the range 3 to 255. By default, the number of RTP compression connections is 256.
tcp-connections number2: The number of TCP compression connections, in the range 3 to 255. By default, the number of TCP compression connections is 256. tcp-include: Includes TCP header compression when performing RTP compression.
Description
Use the fr iphc command to enable IP header compression function, including RTP/TCP header compression. Use the undo fr iphc command to disable this function. For the related configuration see fr map ip.
Example
# Configure the number of RTP compression connections as 200 on the frame relay Serial1/0/0.
[3Com-Serial1/0/0] fr iphc rtp-connections 200
6.1.23 fr lmi n391dte

Syntax
fr lmi n391dte n391-value undo fr lmi n391dte
View
Interface view
Parameter
Status counter of the PVC. The range of the value is 1 to 255.
Description
Use the fr lmi n391dte command to configure N391 parameter at the DTE side. Use the undo fr lmi n391dte command to restore the default value. By default, its value is 6. The DTE sends a Status-Enquiry packet at regular intervals set by T391 to the DCE. There are two types of Status-Enquiry packets: link integrity authentication packet and link status enquiry packet. The N391 parameter defines the ratio of sending the two types of packets, that is, link integrity authentication packets: link status enquiry packets = (N391 - 1): 1. Related command: fr interface-type.
Example
# Set DTE as the operating mode of Frame Relay interface Serial1/0/0, and the counter value of the PVC status to 10.
[3Com-Serial1/0/0] link-protocol fr [3Com-Serial1/0/0] fr interface-type dte [3Com-Serial1/0/0] fr lmi n391dte 10
6.1.24 fr lmi n392dce

Syntax
fr lmi n392dce n392-value undo fr lmi n392dce
View
Interface view
Parameter
n392-value: Error threshold, which ranges from 1 to 10.
Description
Use the fr lmi n392dce command to set N392 parameter at the DCE side. Use the undo fr lmi n392dce command to restore the default configuration. By default, the parameter value is 3. The DCE requires the DTE to send a Status-Enquiry packet at a regular interval (set by T392). If the DCE does not receive the Status-Enquiry packet within a period of time, it will record the error by adding 1 to the error count. If the errors exceed the threshold, the DCE will consider the physical channels and all the DLCIs to be unavailable. N392 and N393 together define the error threshold. N393 defines the event number observed and N392 defines the error threshold of that number (N393). That is, if number of errors that occurred to the DCE reaches N392 in N393 events, DCE will consider the errors to have reached the threshold and declare the physical channels and all DLCIs to be unavailable. N392 should be less than N393. Related command: fr interface-type and fr lmi n393dce.
Example
# Set the operation of frame relay interface Serial1/0/0 as DCE mode and sets N392 to 5 and N393 to 6.
[3Com] interface Serial1/0/0 [3Com-Serial1/0/0] link-protocol fr [3Com-Serial1/0/0] fr interface-type dce [3Com-Serial1/0/0] fr lmi n392dce 5 [3Com-Serial1/0/0] fr lmi n393dce 6

Syntax
View
Interface view
Parameter
n392-value: Error threshold, which ranges from 1 to 10.
Description
Use the fr lmi n392dte command to set N392 parameter at the DTE side. Use the undo fr lmi n392dte command to restore the default configuration. By default, the parameter is 3. The DTE sends a Status-Enquiry packet at a regular interval to the DCE to inquire the link status. On receiving this packet, the DCE will immediately send a Status-Response packet. If the DTE does not receive the response packet in the specified time, it will record the error by adding 1 to the error count. If the errors exceed the threshold, the DTE will consider the physical channels and all the DLCIs to be unavailable. N392 and N393 together define the error threshold. N393 indicates the event number observed and N392 indicates the error threshold of that number (N393). That is, if N392 errors occurred in N393 Status-Enquiry packets in the DTE, the DTE will consider that the error had exceeded the threshold and declare the physical channels and all DLCIs to be unavailable. N392 at DTE side should be less than N393 at DTE side. Related command: fr interface-type and fr lmi n393dte.
Example
# Set the operation of frame relay interface Serial1/0/0 as the DTE mode and sets N392 to 5 and N393 to 6.
[3Com-Serial1/0/0] link-protocol fr [3Com-Serial1/0/0] fr interface-type dte [3Com-Serial1/0/0] fr lmi n392dte 5 [3Com-Serial1/0/0] fr lmi n393dte 6
6.1.26 fr lmi n393dce

Syntax
fr lmi n393dce n393-value undo fr lmi n393dce
View
Interface view
Parameter
Event counter. in the range 1 to 10.
Description
Use the fr lmi n393dce command to set the N393 parameter at the DCE side. Use the undo fr lmi n393dce command to restore the default configuration. By default, the parameter value is 4. The DCE requires the DTE to send a Status-Enquiry packet at a regular interval (set by T392). If the DCE does not receive the Status-Enquiry packet, it will record the error by adding 1 to the error count. If the errors exceed the threshold, the DCE will consider the physical channels and all the DLCIs to be unavailable. N392 and N393 together define the error threshold. N393 defines the event number observed and N392 defines the error threshold of that number (N393). That is, if the number of errors that occurred to the DCE reach N392 in N393 events, DCE will consider the errors to have reached the threshold and declare the physical channels and all DLCIs to be unavailable. N392 at DCE side should be less than N393 at DCE side. Related command: fr interface-type and fr lmi n392dce.
Example
# Set the operation of frame relay interface Serial1/0/0 as DCE mode and sets N392 to 5 and N393 to 6.
[3Com] interface Serial1/0/0 [3Com-Serial1/0/0] link-protocol fr [3Com-Serial1/0/0] fr interface-type dce [3Com-Serial1/0/0] fr lmi n392dce 5 [3Com-Serial1/0/0] fr lmi n393dce 6

Syntax
View
Interface view
Parameter
Event counter. In the range 1 to 10.
Description
Use the fr lmi n393dte command to set N393 parameter at the DTE side. Use the undo fr lmi n393dte command to restore the default configuration. By default, the parameter value is 4. The DTE sends a Status-Enquiry packet at a regular interval to the DCE to inquire the link status. On receiving this packet, the DCE will immediately send a Status-Response packet. If the DTE does not receive the response packet in the specified time, it will record the error by adding 1 to the error count. If the errors exceed the threshold, the DTE will consider the physical channels and all the DLCIs to be unavailable. N392 and N393 together define the error threshold. N393 indicates the event number observed and N392 indicates the error threshold of that number (N393). That is, if N392 errors occurred in N393 Status-Enquiry packets in the DTE, the DTE will consider that the error count had exceeded the threshold and declare the physical channels and all DLCIs to be unavailable. N392 at DTE side should be less than N393 at DTE side. Related command: fr interface-type and fr lmi n392dte.
Example
# Set the operation of frame relay interface Serial1/0/0 as the DTE mode and sets N392 to 5 and N393 to 6.
[3Com-Serial1/0/0] link-protocol fr [3Com-Serial1/0/0] fr interface-type dte [3Com-Serial1/0/0] fr lmi n392dte 5 [3Com-Serial1/0/0] fr lmi n393dte 6
6.1.28 fr lmi t392dce

Syntax
fr lmi t392dce t392-value undo fr lmi t392dce
View
Interface view
Parameter
t392-value: Value of the polling timer. The range of the value is 5 to 30, in seconds.
Description
Use the fr lmi t392dce command to set T392 parameter at the DCE side. Use the undo fr lmi t392dce command to restore the default configuration. By default, the parameter value is 15s. This parameter defines the maximum time for DCE waiting for a Status-Enquiry. T392 at DCE side should be greater than T391 at DTE side. Related command: fr interface-type.
Example
# Set the Frame Relay interface Serial1/0/0 to operate in DCE mode and set T392 to 10s.
[3Com] interface Serial1/0/0 [3Com-Serial1/0/0] link-protocol fr [3Com-Serial1/0/0] fr interface-type dce [3Com-Serial1/0/0] fr lmi t392dce 10
6.1.29 fr lmi type

Syntax
fr lmi type { ansi | nonstandard | q933a } undo fr lmi type
View
Interface view
Parameter
ansi: Standard LMI protocol type of ANSI T1.617 Appendix D. nonstandard: Nonstandard compatible LMI protocol type. q933a: Standard LMI protocol type of Q.933 Appendix A.
Description
Use the fr lmi type command to configure the Frame Relay LMI protocol type. Use the undo fr lmi type command to restore the default value of LMI protocol type. By default, the LMI protocol type is q933a. The NE16E/08E/05 routers usually support three LMI protocols, namely, Q.933 Appendix A, ANSI T1.617 Appendix D and Nonstandard compatible LMI protocol. Related command: display interface.
Example
# Set the FR LIMI type of Serial1/0/0 to nonstandard.
[3Com-Serial1/0/0] fr lmi type nonstandard
6.1.30 fr map ip
Syntax
fr map ip { protocol-address [ ip-mask ] | default } dlci [ broadcast ] [ nonstandard | ietf ] [ compression { frf9 | iphc } undo fr map ip { protocol-address | default } dlci
View
Interface view
Parameter
protocol-address: Peer protocol address. ip-mask: IP mask used to establish a network segment map. dlci: Local virtual circuit number, and the range of the value is 16 to 1007. default: Indicates that the system establishes one default map. broadcast: Specifies if broadcast packets can be sent on the map. nonstandard: Indicates that map adopts nonstandard compatible encapsulation format. letf: Indicates that map adopts ietf encapsulation format. compression: Enables frame relay compression. frf9: Adopts payload compression. iphc: Adopts IP, UDP, or RTP header compression.
Description
Use the fr map ip command to add a FR address mapping. Use the undo fr map ip command to cancel the configuration. By default, no static address mapping existing and inverse address resolution enabled. The mapping can be manually established or can be completed via the inverse address resolution protocol. Manually configure the static mapping when there are a few peer hosts, or when there is a default route. When the peer router supports inverse address resolution protocol and the network is rather complex, the dynamic address mapping is established via the inverse address resolution protocol. Related command: display fr map and fr inarp.
Example
# The peer router IP address connected to the local interface serial1/0/0 is 202.38.163.252. There is a virtual circuit with DLCI 50 on local Serial1/0/0 connected to this router. Configure the static address mapping as follows:
[3Com-Serial1/0/0] fr map ip 202.38.163.252 50
6.1.31 fr map ppp interface virtual-template

Syntax
fr map ppp dlci interface virtual-template interface-number undo fr map ppp dlci
View
Interface view
Parameter
interface-number: Virtual template interface number. Dlci: Specific DLCI number.
Description
Use the fr map ppp interface virtual-template command to map the FR DLCI (corresponds to an FR PVC) to a PPP link, so the PPPoFR link is established, and thus PPP packets can be sent/received on FR PVC. The configuration parameter of this PPP link is up to the parameters configured on the interface which is specified by interface virtual-template interface-number. Use the undo map ppp command to cancel this map, and thus eliminates this PPPoFR link. See interface virtual-template for related configurations.
Example
# Map DLCI 100 to PPP and establish PPPoFR link.
[Router-serial 0\0\0] fr map ppp interface virtual-template 1
6.1.32 fr switch
Syntax
fr switch name [ interface interface-type interface-number dlci dlci1 interface interface-type interface-number dlci dlci2 ] undo fr switch name
View
System view
Parameter
name: Name of PVC used for frame relay switching, consisting of 30 characters at most. interface interface-type interface-number dlci dlci: DLCI number at both ends of PVC as well as the type and number of its interface. The peer can be specified as Tunnel interface.
Description
Use the fr switch command to create a PVC used for frame relay switching and enter frame relay switching view. Use the undo fr switch command to delete a specified PVC. By default, there is no PVC used for frame relay switching. The interface for forwarding packets can be either a frame relay interface or an MFR interface. If Tunnel interface is specified as the forwarding interface, frame relay packets over IP can thus be realized. In frame relay switching view, the shutdown/undo shutdown operation can be executed on a PVC. Related command: display fr pvc-info, fr dlci-switch, fr switching, and fr dlci.
Example
# Create a PVC named pvc1 on the DCE serving as the switch, which is from the DCLI 100 of serial interface 0/0/0 to the DLCI 200 of serial interface 1/0/0.
[3Com] fr switching [3Com] fr switch pvc1 interface serial 0/0/0 dlci 100 interface serial 1/0/0 dlci 200 [3Com-fr-switching-pvc1]
6.1.33 fr switching
Syntax
fr switching undo fr switching
View
System view
Parameter
None
Description
Use the fr switching command to enable frame relay PVC switching. Use the undo fr switching command to disable frame relay PVC switching. By default, no FR switching is enabled.
The command is used to enable Frame Relay PVC switching.
Example
# Enable PVC switching on FR interface.
[3Com] fr switching
6.1.34 interface mfr

Syntax
interface mfr interface-number [ .subnumber ] undo interface mfr interface-number [ .subnumber ]
View
System view
Parameter
interface-number: MFR interface number, in the range 0 to 1023. subnumber: MFR subinterface number, in the range 0 to 4095.
Description
Use the interface mfr command to create a multilink frame relay bundle interface or sub-interface, and enter the corresponding interface view. Use the undo interface mfr command to delete a specified multilink frame relay bundle interface or sub-interface. By default, there is no multilink frame relay interface or sub-interface. Before using the undo interface mfr command to delete a MFR interface, you must delete all physical interfaces from the MFR interface. Before an MFR sub-interface can be created, the MFR interface must be created first. Related command: link-protocol fr mfr, mfr bundle-name.
Example
# Create a multilink frame relay bundle interface with a point-to-multipoint sub-interface.
[3Com] interface mfr 4 [3Com-MFR4] quit [3Com] interface mfr 4.1 [3Com-MFR4.1]
6.1.35 interface serial [ p2p | p2mp ]

Syntax
interface serial interface-number.subinterface-number [ p2p | p2mp ] undo interface serial interface-number.subinterface-number [ p2p | p2mp ]
View
System view
Parameter
interface-number.subinterface-number: subinterface-number in the range 1 to 1024. p2p: Point-to-point subinterface. p2mp: Point-to-multipoint subinterface. Specifies a subinterface, with
Description
Use the interface serial [ p2p | p2mp ] command to configure the type of the specified FR subinterface and enter frame relay subinterface view. Use the undo interface serial [ p2p | p2mp ] command to restore the default frame relay subinterface type. By default, the link-layer protocol encapsulated on the interface is PPP, and the Frame Relay encapsulation format is IETF. FR subinterface type defaults to p2mp.
Example
# Configure a point-to-point FR subinterface s0/0/0.1.
[Router] interface serial0/0/0.1 p2p
6.1.36 link-protocol fr
Syntax
link-protocol fr [ nonstandard | ietf ]
View
Interface view
Parameter
nonstandard: Nonstandard compatible encapsulation format. ietf: Default encapsulation format according to the Internet Engineering Task Force (IETF) standard.
Description
Use the link-protocol fr command to encapsulate interface link layer protocol as Frame Relay. By default, the link-layer protocol encapsulated on the interface is PPP, and the Frame Relay encapsulation format is IETF. In 3Com Router Software, the Frame Relay encapsulation can be either ietf or nonstandard compatible encapsulation (nonstandard). IETF encapsulation conforms to RFC1490, that is, it supports the IETF standard. Related command: display interface.
Example
# Configure Frame Relay encapsulation on interface Serial1/0/0 and select the nonstandard encapsulation compatible format.
[3Com-Serial1/0/0] link-protocol fr nonstandard
6.1.37 link-protocol fr mfr

Syntax
link-protocol fr mfr interface-number
View
Interface view
Parameter
Description
Use the link-protocol fr mfr command to configure the current physical interface as a MFR bundle link and bundle it onto a specified MFR interface. By default, there is no MFR bundle link. When this command is configured, the specified MFR interface must exist. A maximum of 16 physical interfaces can be bundled onto a MFR interface.
To delete a physical interface from a MFR interface, use the link-protocol command to apply a link layer protocol of non frame relay MFR to the interface. Related command: interface mfr, mfr link-name.
Example
# Configure the current serial interface as a bundle link and add it onto the frame relay bundle interface mfr4.
[3Com-Serial4/1/2] link-protocol fr mfr 4
6.1.38 mfr bundle-name

Syntax
mfr bundle-name [ name ] undo mfr bundle-name [ name ]
View
MFR interface view
Parameter
name: Bundle identification, a string comprising 1 to 49 characters.
Description
Use the mfr bundle-name command to set frame relay bundle identification (BID). Use the undo mfr bundle-name command to restore the default value. By default, BID is represented by mfr plus frame relay bundle number, for example, mfr4. Each MFR bundle has a BID, which only has local significance. Therefore, the same BID can be used at both ends of the link. When changing the BID of an interface, you must execute the shutdown/undo shutdown command on the interface to validate the new BID. Related command: mfr link-name.
Example
# Set the frame relay link BID to bundle 1.
[3Com-MFR4] mfr bundle-name bundle1
6.1.39 mfr fragment

Syntax
mfr fragment undo mfr fragment
View
MFR interface view
Parameter
None
Description
Use the mfr fragment command to enable fragmentation of a multilink frame relay bundle. Use the undo mfr fragment command to disable the function. By default, the fragmentation of a multilink frame relay bundle is disabled. Related command: mfr fragment-size and mfr window-size.
Example
# Enable fragmentation on interface MFR 4.
[3Com] interface mfr 4 [3Com-MFR4] mfr fragment
6.1.40 mfr fragment-size

Syntax
mfr fragment-size bytes undo mfr fragment-size
View
Frame relay interface view and MFR interface view
Parameter
bytes: Fragment size, in bytes, in the range 60 to 1500.
Description
Use the mfr fragment-size command to configure the maximum fragment size allowed on a frame relay bundle link. Use the undo mfr fragment-size command to restore the default setting. By default, the maximum fragment size allowed on a frame relay bundle link is of 300 bytes. The priority of the fragment size configured in frame relay interface view is higher than that of the one configured in MFR interface view. Related command: mfr fragment and mfr window-size.
Example
# Configure the maximum fragment size allowed on the multilink frame relay bundle link Serial4/1/2 to be 70 bytes.
[3Com-Serial4/1/2] mfr fragment-size 70
6.1.41 mfr link-name

Syntax
mfr link-name [ name ] undo mfr link-name [ name ]
View
Parameter
name: Name of a bundle link identification in the form of character string, in the range of 1 to 49.
Description
Use the mfr link-name command to set the frame relay bundle link identification (LID). Use the undo mfr link-name command to restore the default setting. By default, LID is the name of the corresponding physical interface. The peer equipment identifies a frame relay bundle link via LID or associates the bundle link with a frame relay bundle by using LID. LID is locally valid; therefore, the LIDs at both ends of a link can be the same.
When changing the bundle LID on an interface you must execute the shutdown/undo shutdown command on the interface to make the new bundle LID valid. Related command: mfr bundle-name.
Example
# Set the bundle LID of the multilink frame relay bundle link Serial4/1/2 to be bl1.
[3Com-Serial4/1/2] mfr link-name bl1
6.1.42 mfr retry

Syntax
mfr retry number undo mfr retry
View
Parameter
number: The maximum times that a bundle link can resend hello messages, in the range of 1 to 5. By default, it is 2.
Description
Use the mfr retry command to set the maximum times that a frame relay bundle link can resend a hello message when waiting for a hello acknowledgement message. Use the undo mfr retry command to restore the default setting. If the number of times that a bundle link resends a hello message reaches the maximum without receiving acknowledgement from the peer, the system will regard the link protocol on the bundle link to be malfunctioning. Only after the link-protocol fr mfr command is used to associate a frame relay bundle link interface with a frame relay bundle, can this command be configured. Related command: mfr timer ack and mfr timer hello.
Example
# Set the bundle link Serial4/1/2 to resend hello message for 3 times at most.
[3Com-Serial4/1/2] mfr retry 3
6.1.43 mfr timer ack

Syntax
mfr timer ack seconds undo mfr timer ack
View
Parameter
seconds: Time of waiting for hello acknowledgment message before resending a hello message, in seconds, in the range of 1 to 10. It defaults to 4 seconds.
Description
Use the mfr timer ack command to set the time of waiting for hello acknowledgment message before frame relay bundle link resends a hello message. Use the undo mfr timer ack command to restore the default setting. Related command: mfr timer hello and mfr retry.
Example
# Set the frame relay bundle link Serial4/1/2 to wait for six seconds before resending hello message.
[3Com-Serial4/1/2] link-protocol fr mfr 4 [3Com-Serial4/1/2] mfr timer ack 6
6.1.44 mfr timer hello

Syntax
mfr timer hello [ seconds ] undo mfr timer hello [ seconds ]
View
Parameter
seconds: Interval for a bundle link to send a hello message, in seconds, in the range of 1 to 180. By default, it is 10 seconds.
Description
Use the mfr timer hello command to set the interval for a frame relay bundle link to send a hello message. Use the undo mfr timer hello command to restore the default setting. Both ends of a frame relay bundle link periodically send hello messages to the peer end. After the peer receives the hello message, it will respond with a hello acknowledgement message. Related command: mfr timer ack, mfr retry.
Example
# Set the bundle link Serial4/1/2 to send hello message once every 15 seconds.
[3Com-Serial4/1/2] mfr timer hello 15
6.1.45 mfr window-size

Syntax
mfr window-size number undo mfr window-size
View
MFR interface view
Parameter
number: Number of fragments, in the range 1 to 16.
Description
Use the mfr window-size command to configure the number of fragments that can be held by the window used in sliding window algorithm when multilink frame relay reassembles received fragments. By default, the size of a sliding window is equal to the number of physical interfaces of a MFR bundle. Related command: interface mfr, mfr fragment, mfr fragment-size.
Example
# Set the size of the sliding window of the MFR bundle interface MFR4 to be 8.
[3Com-MFR4] mfr window-size 8
6.1.46 shutdown
Syntax
View
Frame relay switching view
Description
Use the shutdown command to disable any current switching PVCs. Use the undo shutdown command to enable any current switching PVCs. By default, switching PVC is enabled.
Example
# Disable all the current switching PVCs.
[3Com] fr switch pvc1 interface serial 1/0/0 dlci 100 interface serial 2/0/0 dlci 200 [3Com-fr-switching-pvc1] shutdown
6.1.47 reset fr inarp

Syntax
reset fr inarp
View
User view
Parameter
None
Description
Use the reset fr inarp command to clear the address mapping established by inverse ARP. In special cases, for example, when the network architecture changes, the dynamic address maps originally established will become invalid. Therefore, it is necessary to establish them again. Users can use this command to clear all the dynamic address maps.
Related command: fr inarp.
Example
# Clear all the Frame Relay dynamic address maps.
<3Com> reset fr inarp
6.1.48 timer hold

Syntax
View
Interface view
Parameter
seconds: Value of polling timer, which ranges from 0 to 32767 in seconds. 0 indicates that the LMI protocol is disabled.
Description
Use the timer hold command to configure the polling timer at the DTE side. Use the undo timer hold command to restore its default value. By default, the parameter is 10 seconds. The parameter defines the interval of Status-Enquiry packets sent by DTE. Related command: fr interface-type and fr lmi t392dce.
Example
# Configure that Frame Relay interface serial1/0/0 to work in DTE mode, and set the value of polling timer to 15 seconds.
[3Com-Serial1/0/0] link-protocol fr [3Com-Serial1/0/0] fr interface-type dte [3Com-Serial1/0/0] timer hold 15
Chapter 7 ATM Configuration Commands

7.1 ATM Configuration Commands
7.1.1 atm-class
Syntax
atm-class atm-class-name undo atm-class atm-class-name
View
Interface view, PVC view
Parameter
atm-class-name: Name of ATM-Class.
Description
Use the atm-class command to apply a set of parameters (which are defined in ATM-Class) to an ATM interface or PVC. Use the undo atm-class command to delete the specified ATM-Class. Related command: atm class.
Example
# Apply an ATM-Class named "main" to the interface Atm1/0/0.
[3Com-Atm1/0/0] atm-class main
7.1.2 atm class

Syntax
atm class atm-class-name undo atm class atm-class-name
View
System view
Parameter
atm-class-name: Name of ATM-Class.
Description
Use the atm class command to create an ATM-Class and enter the ATM-Class view. Use the undo atm class command to delete the specified ATM-Class. An ATM-Class is a group of predefined parameters that can be used for ATM interface or PVC. Related command: atm-class.
Example
# Create an ATM-Class named "main".
[3Com] atm class main [3Com-atm-class-main]
7.1.3 atm-link check

Syntax
atm-link check undo atm-link check
View
ATM P2P subinterface view
Parameter
None
Description
Use the atm-link check command to get the protocol state of the ATM P2P subinterface changes depending on whether the physical interface is up and whether a PVC is configured on the subinterface. The protocol of the subinterface, which comes down otherwise, goes up when the the physical interface is up and a PVC is configured on the subinterface. Use the undo atm-link check command to restore the default protocol state on the ATM P2P subinterface. By default, the protocol of the ATM P2P subinterface goes up or comes down depending on whether the physical interface is up or down.
This command applies only to ATM P2P subinterfaces.
Example
# Enable the protocol sate of ATM P2P subinterface 4/0/0.1 to change depending on whether the physical interface is up and whether a PVC is configured on the subinterface.
[Router-Atm4/0/0.1] atm-link check
7.1.4 clock
Syntax
View
ATM master interface view
Parameter
master: Specify the ATM interface to use the internal transmission clock signal. slave: Restore the line clock signal.
Description
Use the clock command to specify the ATM interface to use internal transmission clock signal. Use the undo clock command to restore the usage of network clock signal. By default, ATM interface uses the network clock signal. This clock signal is usually provided by the device that provides ATM interfaces. When two network devices are directly connected in the back-to-back method through the ATM interfaces, this command is used to set the internal transmission clock at the ATM interface of one device.
Note: Although this command is valid on both ATM main interface and sub-interface, it can only be used in ATM main interface view and this command is not found in ATM sub-interface view.
Related command: display atm interface.
Example
# Specify ATM interface Atm1/0/0 to use the internal transmission clock.
[3Com-Atm1/0/0] clock master
7.1.5 debugging atm all

Syntax
debugging atm all undo debugging atm all
View
User view
Parameter
None
Description
Use the debugging atm all command to enable all the debugging switches of ATM. Use the undo debugging atm all command to disable the debugging. By default, all the ATM debugging switches are disabled.
Note: The use of this command can lead to a mass of output information, which may disable users from controling network devices through terminals, and the efficiency of packet transmitting and receiving may be greatly damaged.
Related command: debugging atm error, debugging atm event, debugging atm packet.
Example
# Refer to the examples for the commands debugging atm error, debugging atm event, and debugging atm packet.
7.1.6 debugging atm error

Syntax
debugging atm error [ interface interface-type interface-num [ pvc { pvc-name | vpi/vci } ] ] undo debugging atm error [ interface interface-type interface-num [ pvc { pvc-name | vpi/vci } ] ]
View
User view
Parameter
interface-type: Interface type, specifies an ATM interface together with interface-num. interface-num: Interface number, specifies an ATM interface together with interface-type. pvc-name: PVC name, optional. If no PVC name and VPI/VCI pair are specified, all the error debugging of the PVC will be enabled. vpi/vci: VPI/VCI pair, optional. For more details refer to Parameter Description for the pvc command.
Description
Use the debugging atm error command to enable the error debugging of ATM. Use the undo debugging atm error command to disable the debugging. By default, all ATM error debugging switches are disabled. If no interface is specified, all ATM error debugging, global, interface level, or PVC level are enabled. Related command: display debugging, debugging atm all.
Example
# Enable all the error debugging of ATM.
<3Com> debugging atm error
7.1.7 debugging atm event

Syntax
debugging atm event [ interface interface-type interface-num [ pvc { pvc-name [ vpi/vci ] | vpi/vci } ] ]
undo debugging atm event [ interface interface-type interface-num [ pvc { pvc-name [ vpi/vci ] | vpi/vci } ] ]
View
User view
Parameter
interface-type: Interface type, specifies an ATM interface together with interface-num. interface-num: Interface number, specifies an ATM interface together with interface-type. pvc-name: PVC name, optional. If no PVC name and no VPI/VCI pair are specified, all the event debugging of PVC will be enabled. vpi/vci: VPI/VCI pair, optional. For more information refer to Parameter Description for the pvc command.
Description
Use the debugging atm event command to enable the event debugging of ATM. Use the undo debugging atm event command to disable the debugging. By default, all ATM event debugging is disabled. If no interface is specified, all ATM event debugging, global, interface level, or PVC level are enabled. This command is used to enable all the debugging of events that happen at the ATM interface or a PVC, which can be used to trace some essential events of the system. Such information may be helpful for detecting network faults.
Example
The example is a case to enable the debugging of ATM events and display the results. # Enable all ATM event debugging.
<3Com> debugging atm event
7.1.8 debugging atm packet

Syntax
debugging atm packet [ interface interface-type interface-num [ pvc { pvc-name [ vpi/vci ] | vpi/vci } ] ] undo debugging atm packet [ interface interface-type interface-num [ pvc { pvc-name [ vpi/vci ] | vpi/vci } ] ]
View
User view
Parameter
interface-type: Interface type, specifies an ATM interface together with interface-num. interface-num: Interface number, specifies an ATM interface together with interface-type. pvc-name: PVC name, optional. If no PVC name and no VPI/VCI pair are specified, all the packet debugging of PVC will be enabled. vpi/vci: VPI/VCI pair, optional. For more details please refer to Parameter Description in the pvc command.
Description
Use the debugging atm packet command to enable the packet debugging of ATM. Use the undo debugging atm packet command to disable the debugging. By default, all the debugging of ATM packets is disabled. If no interface is specified, all ATM packet debugging, global, interface level or PVC level are enabled. After the packet switch is enabled, the detailed information about receiving/sending packets at the ATM interface or PVC will be displayed. This will be very helpful for system troubleshooting. The received packets will display all the information about received frames, which can indicate whether the sending side correctly encapsulates these frames. This will be greatly helpful for the network device detection. Packet debug information displays the PDU byte information in hex, through which technical support personnel or engineers can locate some system errors.
Note: Since the use of this command can lead to a mass of output information during each packet receiving and transmitting, this may disable users from controling network devices through their terminals, and thus greatly affect the efficiency of packet transmitting and receiving.
Example
The example is a case to enable the debugging of ATM packet and display the results. # Enable all the packet debugging of ATM.
<3Com> debugging atm packet
After some time, the following messages may appear:

*515396.229644-atm-8-debug8: *515396.229710-atm-8-debug8: *515396.229812-atm-8-debug8: *515396.232644-atm-8-debug8: *515396.232710-atm-8-debug8: *515396.232812-atm-8-debug8: Atm1/0/0 pvc 1/32 out ppp pkt, snap, 22 FE FE 03 CF FF 03 C0 21 01 22 00 0E 01 04 05 DC 05 06 00 00 1F 38 Atm1/0/0 pvc 1/32 out ppp pkt, snap, 22 FE FE 03 CF FF 03 C0 21 01 23 00 0E 01 04 05 DC 05 06 00 00 1F 38
It indicates that PPP packets are being output from PVC 1/32 of Atm1/0/0.
7.1.9 display atm class

Syntax
display atm class [ atm-class-name ]
View
Any view
Parameter
atm-class-name: ATM-Class name.
Description
Use the display atm class command to view the information about ATM-Class. By default, if no ATM-Class name is specified, the information of all ATM-Class is displayed. Related command: atm class.
Example
# Display the information about the ATM-Class named "main" in devices.
<3Com> display atm class main
The following information is displayed:

ATM VC-CLASS: main

Service ubr 8000 encapsulation aal5snap
The explanation on the above messages is: ATM-Class name is "main", and the following contents are set in the ATM-Class: the service type is unspecified bit rate and the output peak rate of ATM cells is 8000 and the AAL encapsulation type is SNAP.
7.1.10 display atm interface

Syntax
display atm interface [ interface-type interface-num ]
View
Any view
Parameter
interface-type: Interface type, specifies an ATM interface together with interface-num. interface-num: Interface number, specifies an ATM interface together with interface-type.
Description
Use the display atm interface command to locate the problems efficiently and get detailed information related to ATM configuration. By default, if no interface is specified, information on all ATM interfaces is displayed. Related command: display atm.
Example
# Display the information about ATM interface atm4/0/0.
<3Com> display atm interface atm 4/0/0

ATM interface Atm4/0/0, State UP Port Information: Maximum VCs: 1024, PVCs: 4, MAPs: 4 input pkts: 0, input bytes: 0, input pkt errors: 0 output pkts: 69, output bytes: 2218, output pkt errors: 8 Sub-interface Information: PVCs: 4, MAPs: 4
input pkts: 0, input bytes: 0, input pkt errors: 0 output pkts: 69, output bytes: 2218, output pkt errors: 8
The explanation on the above messages is: The maximum number of PVCs on the ATM interface is 1024. The input packets, bytes and errors of input packets are all 0; output packets are 69, output bytes are 2218 and output packet errors are 8; there are totally 4 PVCs and 4 MAPs at the interface and the interface status is active (UP).
7.1.11 display atm map-info

Syntax
display atm map-info [ interface { interface-type interface-num } [ pvc { pvc-name | vpi/vci } ] ]
View
Any view
Parameter
interface-type: Interface type, specifies an ATM interface together with interface-num. interface-num: Interface number, specifies an ATM interface together with interface-type. pvc-name: PVC name, optional parameter. If no PVC name and no VPI/VCI pair are specified, the information of the higher layer protocol mapping table about all PVCs within a specified ATM interface will be displayed by default. vpi/vci: VPI/VCI pair, optional. For more details please refer to Parameter Description in the pvc command.
Description
Use the display atm map-info command to view the information about the upper layer protocol mapping table of ATM. Bu default, if no interface is specified, information about the upper layer protocol maps on all ATM interfaces is displayed. Related command: map ip, map ppp, map bridge.
Example
# Display the information about the upper layer protocol mapping table of all ATM interfaces.
<3Com> display atm map-info

Atm1/0/0, PVC 1/32, PPP, Virtual-Template10, UP Atm1/0/0, PVC 1/33, IP & Mask, State UP 100.11.1.1, mask 255.255.0.0, vlink 1 Atm1/0/0, PVC 2/101, ETH, Virtual-Ethernet1/1/1, MAC 00E0.FC01.0203, UP
The explanation on the above messages is: PVC 1/32 of Atm 1/0/0 interface uses PPPoA mapping, the VT interface numbered 10 is used and the status is activated (UP); PVC 1/33 of Atm 1/0/0 interface uses IPoA mapping, the configured mapping static IP address is 100.11.1.1, the address mask is 255.255.0.0, it occupies No.1 vlink and its status is activated (UP); PVC 2/101 of Atm 1/0/0 interface uses PPPoEoA mapping or IPoEoA mapping, VE interface numbered 1/1/1 is adopted, the configured MAC address is 00E0.FC01.0203 and its status is activated (UP).
7.1.12 display atm pvc-group

Syntax
display atm pvc-group [ interface interface-type interface-num [ pvc { pvc-name [ vpi/vci ] | vpi/vci } ] ]
View
Any view
Parameter
interface-type: Interface type, specifies an ATM interface together with interface-num. interface-num: Interface number, specifies an ATM interface together with interface-type. pvc-name: PVC name, optional. By default, if no PVC name and no VPI/VCI pair are specified, the information about all PVC-Groups within the specified ATM interface will be displayed. vpi/vci: VPI/VCI pair, optional. For more details please refer to Parameter description in the pvc command.
Description
Use the display atm pvc-group command to view the information about a PVC-Group. By default, if no interface is specified, information about the PVC-groups on all ATM interfaces is displayed.
Related command: pvc-group.
Example
# Display the information about PVC-Group of all ATM interfaces.
<3Com> display atm pvc-group

VPI/VCI 1/32 1/33 3/34 2/32 2/33 PVC-NAME 3Com STATE UP UP UP UP UP ENCAP PROT SNAP IP IP IP IP IP INTERFACE Atm10/1/0(UP) Atm10/1/0(UP) Atm10/1/0(UP) Atm10/1/0.1(UP) Atm10/1/0.1(UP) GROUP 1/32 1/32 1/32 2/32 2/32
SNAP SNAP MUX MUX
The explanation on the above messages is as follows (Taking the first record as an example, and the last four records can refer to the following explanation.): PVC with VPI/VCI pair as 1/32, its has been activated (UP) and the name is "3Com". The AAL encapsulation type is SNAP. The application type is IPoA. The interface is ATM main interface: Slot number is 1, adapter number is 1 and the interface number is 0. The PVC-Group is created based on PVC "1/32".
7.1.13 display atm pvc-info

Syntax
display atm pvc-info [ interface interface-type interface-num [ pvc { pvc-name [ vpi/vci ] | vpi/vci } ] ]
View
Any view
Parameter
interface-type: Interface type, specifies an ATM interface together with interface-num. interface-num: Interface number, specifies an ATM interface together with interface-type. pvc-name: PVC name, optional parameter. By default, if no PVC name and no VPI/VCI pair are specified, the information about all PVCs within the specified ATM interface will be displayed. vpi/vci: VPI/VCI pair, optional. For more details please refer to Parameter Description in the pvc command.
Description
Use the display atm pvc-info command to view the information about PVC. By default, if no interface is specified, information about PVCs on all ATM interfaces is displayed. Related command: pvc.
Example
# Display the information about PVC of all ATM interfaces.
<3Com> display atm pvc-info

VPI/VCI | STATE | PVC-NAME | INDEX | ENCAP | PROT | INTERFACE --------|-------|----------|-------|-------|------|---------1/32 1/33 1/55 2/66 2/101 |UP |UP |UP |UP |UP |3Com |3Com |1 |5 |2 |4 |3 |SNAP |MUX |IP |None |Atm1/0/0 (UP) |Atm1/0/0 (UP) |Atm1/0/0.1 (UP) |Atm1/0/0.4 (UP) |ETH |Atm1/0/0.2 (UP)
|datacomm |
|SNAP |SNAP
|PPP |IP
|Marlborough
|SNAP
The explanation on the above messages is as follows (Taking the first record as an example, and the last four records can refer to the following explanation.): PVC with VPI/VCI pair as 1/32, its has been activated (UP) and the name is "3Com". The index number is 1. The AAL encapsulation type is SNAP. The application type is IPoA. The interface is ATM main interface: Slot number is 1, adapter number is 0 and the interface number is 0.
7.1.14 encapsulation
Syntax
encapsulation aal5-encap undo encapsulation
View
PVC view
Parameter
aal5-encap: AAL5 encapsulation type, its possible values are as follows:
aal5snap: LLC/SNAP (Logical Link Control / Subnet Access Protocol) encapsulation type aal5mux: MUX encapsulation type aal5nlpid: RFC1490 encapsulation type
Description
Use the encapsulation command to specify ATM AAL5 encapsulation type for PVC. Use the undo encapsulation command to restore the default encapsulation. By default, aal5snap encapsulation is adopted. Only aal5snap encapsulation supports InARP protocol. InARP is not supported when aal5mux and aal5nlpid encapsulations are adopted. To change the encapsulation type for PVC to aal5mux or aal5nlpid, InARP must first be deleted. In addition, some types of encapsulations may not support some application methods (one or more of IPoA, IPoEoA, PPPoA and PPPoEoA). When such cases appear, the system will give a prompt.
Example
The two examples can both specify AAL5 encapsulation type of PVC as aal5snap. # Display how to specify AAL5 encapsulation type of PVC 1/32 as aal5snap.
[3Com-atm-pvc-Atm1/0/0-1/32] encapsulation aal5snap
# Display how to specify AAL5 encapsulation type of PVC 1/33 as aal5snap.

[3Com-atm-pvc-Atm1/0/0-1/33] undo encapsulation
7.1.15 interface atm

Syntax
interface atm interface-num interface atm interface-number.subinterface-num [ multi-point | point-to-point ] undo interface atm interface-number.subinterface-num
View
System view
Parameter
Interface number: ATM master interface number. For detailed numbering rules please refer to the Interface Configuration section of this manual. subinterface number: ATM sub-interface number. For detailed numbering rules please refer to the Interface Configuration section of this manual. multi-point | point-to-point: Sub-interface connection type.
Description
Use the interface atm command to create an ATM sub-interface or enter an ATM interface view. Use the undo interface atm command to delete an ATM sub-interface. By default, the connection type of sub-interface is multi-point.
Note: ATM sub-interface has two connection types, multi-point and point-to-point. Multiple PVCs can be created at the sub-interface of multi-point connection type, but only one PVC can be created at the sub-interface of point-to-point type.
Example
The two examples display how to enter the ATM main interface or create/enter the ATM sub-interface. # Enter the main interface Atm1/0/0.
[3Com] interface atm 1/0/0
# Create/enter the sub-interface Atm1/0/0.1 and set its connection type as point-to-point.
[3Com] interface atm 11/1/0.1 p2p
7.1.16 ip-precedence
Syntax
ip-precedence{ pvc-name [ vpi/vci ] | vpi/vci } { min [ max ] | default } undo ip-precedence{ pvc-name [ vpi/vci ] | vpi/vci }
View
ATM PVC-Group view
Parameter
pvc-name: PVC name, whose maximum length is 16 characters (case insensitive). It should be unique at the ATM interface, and it should not be legal VPI/VCI pair. For example, "1/20" cannot be a PVC name. The PVC corresponding to pvc-name must have already been created. vpi/vci: vpi is ATM Virtual Path Identifier (VPI), which ranges from 0 to 255; vci is ATM Virtual Channel Identifier (VCI) , which ranges from 0 to 2047. Usually, the vci values from 0 to 31 are reserved for special usage and cannot be used. PVC corresponding to vpi/vci must have already been created. min: Minimum preference of IP packets carried by the PVC. max: Maximum preference of IP packets carried by the PVC. default: Packets carried by the PVC with default preference.
Description
Use the ip-precedence command to set the precedence of IP packets carried over PVC. Use the undo ip-precedence command to delete the precedence configuration of IP packets carried over PVC. This command can be only used to set the PVC within the PVC-Group. The specified minimum preference min must be less than or equal to the specified maximum preference max. Related command: pvc-group and pvc.
Example
# Display how to set an IP packet named "3Com" whose VPI/VCI is 1/32 and the PVC carrying preference is 0 to 3.
[3Com-atm-pvc-group-Atm1/0/0-1/32-3Com] ip-precedence 3Com 1/32 0 3
7.1.17 map bridge

Syntax
map bridge virtual-ethernet interface-num undo map bridge
View
PVC view
Parameter
interface-num: Interface number of the VE interface, which is determined by a set of tri-dimensional indices, i.e., slot number/module number/port number.
Description
Use the map bridge command to establish the IPoEoA mapping or PPPoEoA mapping on the PVC. Use the undo map bridge command to delete the mapping. By default, no mapping is configured. Before using this command, make sure that a VE has been created.
Note: As the upper layer of the link layer on the VE interface is Ethernet and the lower layer is carried by AAL5, the MAC address used by VE is not the actual MAC addres, cannot be obtained from the hardware and must be configured manually. Users need to configure the correct MAC address manually.
Example
The following example shows a complete process of IPoEoA configuration. # Establish a VE interface Virtual-Ethernet 2.
[3Com] interface virtual-ethernet 2
# Configure IP address 10.1.1.1/16 for the VE interface.

[3Com-Virtual-Ethernet2] ip address 10.1.1.1 255.255.0.0 [3Com-Virtual-Ethernet2] quit
# Establish PVC 1/102 on the ATM interface Atm2/0/0

[3Com] interface atm 2/0/0 [3Com-Atm2/0/0] pvc 1/102
# Establish the IPoE mapping using the established VE interface in PVC view.
[3Com-atm-pvc-Atm2/0/0-1/102] map bridge virtual-ethernet2
7.1.18 map ip
Syntax
map ip { ip-address [ ip-mask ] | default | inarp [ minutes ] } [ broadcast ] undo map ip { ip-address | default | inarp }
View
PVC view
Parameter
ip-address: Opposite IP address mapping to PVC. ip-mask: IP address mask, optional. If a packet cannot find the next hop at the interface, but the next hop address belongs to the network segment specified by ip-address and ip-mask, it can be sent over the PVC. default: A mapping with the default route property is set. If a packet cannot find a mapping with the same address of next hop at the interface, but one PVC has the default mapping, the packet can be sent over the PVC. inarp: Enables Inverse Address Resolution Protocol (InARP) at PVC. minutes: Time interval to send InARP packets in minutes, optional. The range of the value is 1 to 600, and the default value is 15. broadcast: Pseudo-broadcast, an optional keyword parameter. If the IPoA map of the PVC is configured with pseudo-broadcast, the router sends on the PVC a copy of each broadcast packet that it sends out to the interface to which the PVC belongs. You must configure the broadcast keyword on an ATM PVC where broadcast or multicast packets must be sent, for example, to allow PIM multicast to create a neighbor relationship with the router connected using the ATM interface.
Description
Use the map ip command to create IPoA mapping for PVC. Use the undo map ip command to delete the mapping. By default, no mapping is configured. By default, if mapping is set, pseudobroadcast is not supported. When InARP is used, it must be aal5snap encapsulation type. InARP is not supported when aal5mux and aal5nlpid encapsulations are adopted.
Example
The two examples are the cases creating IPoA mapping for PVC.
# Display how to create a static mapping at PVC 1/32, specify the opposite IP address to 61.123.30.169 and support pseudobroadcast.
[3Com-atm-pvc-Atm1/0/0-1/32] map ip 61.123.30.169 broadcast
# Display how to enable InARP at PVC 1/33 to automatically obtain the opposite address and send InARP packets every 10 minutes.
[3Com-atm-pvc-Atm1/0/0.1-1/33] map ip inarp 10
7.1.19 map ppp

Syntax
map ppp virtual-template vt-number undo map ppp
View
PVC view
Parameter
Virtual-template (VT) Interface number corresponding to PPPoA. It should be created previously.
Description
Use the map ppp command to create PPPoA mapping at PVC in PVC view. Use the undo map ppp command to delete mapping. By default, no mapping is configured. Before this command is used the VT must have already been created.
Example
Display a complete PPPoA configuration process. # At first, a VT interface with the number 10 is created and its IP address is configured.
[3Com] interface virtual-template 10 [3Com-Virtual-Template10] ip address 202.38.160.1 255.255.255.0 [3Com-Virtual-Template10] quit
# And then PVC 1/101 at ATM interface Atm1/0/0 is created.

[3Com] interface atm 1/0/0 [3Com-Atm1/0/0] pvc 1/101
# The newly created VT interface is used to create the PPPoA mapping.

[3Com-atm-pvc-Atm1/0/0-1/101] map ppp virtual-template 10
7.1.20 mtu
Syntax
mtu mtu-number undo mtu
View
Interface view
Parameter
mtu-number: MTU size of ATM interface in bytes; the range of the value is 128 to 2000.
Description
Use the mtu command to set the size of Maximum Transmission Unit (MTU) of the ATM interface. Use the undo mtu command to restore the default value. By default, 1500 bytes. MTU of ATM interface only influences the packet assembling and packet disassembling of IP layer at the ATM interface. Because of the limit of the QoS queue length (for example, the default length of the FIFO queue is 75), a small MTU will lead to too many fragments and will be dropped by the QoS queue. In this case, the length of the QoS queue can be enlarged appropriately. FIFO is the queue dispatching mechanism used by PVC by default, and its queue length can be changed by using the fifo queue-length command in PVC view.
Note: This command can be used in ATM main interface and sub-interface at the same time.
Example
# Display how to set MTU of ATM interface Atm1/0/0 to 1492 bytes.
[3Com-Atm1/0/0] mtu 1492
7.1.21 oam ais-rdi

Syntax
oam ais-rdi [ up up-count down down-count ] undo oam ais-rdi
View
PVC view, ATM Class view
Parameter
up-count: Number of contiguous seconds during which no alarm indication signal/remote defect indication (AIS/RDI) alarm cell is received. It ranges from 3 to 60 seconds, and defaults to 3 seconds. Upon its expiration the specified PVC goes up. down-count: Number of contiguous AIS/RDI alarm cells received on the specified PVC. It ranges from 1 to 60 seconds, and defaults to 1. Upon its expiration the PVC goes up.
Description
Use the oam ais-rdi command to change the parameters related to AIS/RDI alarm cell detection. If no argument is specified the default value applies. Use the undo oam ais-rdi command to restore the default. By default, AIS/RDI alarm cell detection is enabled, allowing a PVC to come down after receiving the number of AIS/RDI alarm cells specified by down-count, and to go up if no AIS/RDI alarm cell is present for contiguous seconds specified by up-count.
Example
# Modify the AIS/RDI alarm detection parameters on PVC1/32, setting both up-count and down-count to 5.
[3Com-atm-pvc-Atm1/0/0-1/32] oam ais-rdi up 5 down 5
7.1.22 oam frequency

Syntax
oam frequency frequency [ up up-count down down-count retry-frequency retry-frequency ] undo oam frequency
View
PVC view, ATM Class view.
Parameter
frequency: Time interval to send OAM F5 Loopback cells in seconds, and the range of the value is 1 to 600. up-count: The number of OAM F5 Loopback cells continuously and correctly received before PVC status changes to UP. The range of the number is 1 to 600. down-count: The number of OAM F5 Loopback cells continuously and correctly not received before PVC status changes to DOWN. The range of the number is 1 to 600. retry-frequency: Before PVC status changes, the sending interval of OAM F5 Loopback cell in retransmission check, in seconds. The range of the value is 1 to 1000.
Description
Use the oam frequency command to enable the transmission of OAM F5 Loopback cell so as to check the PVC status. You can also enable OAM F5 Loopback retransmission check, or modify the related parameters of the retransmission check. Use the undo oam frequency command to disable the transmission and retransmission check of the cell. By default, OAM F5 Loopback cell transmission is disabled, but if OAM F5 Loopback cell is received, it should be responded. By default, up-count is 3, down-count is 5 and retry-frequency is 1 second.
Example
# Display how to enable OAM F5 Loopback check at PVC 1/32, with the period of 12 seconds. And set the retransmission check up-count as 4, down-count as 4 and retransmission period as 1 second.
[3Com-atm-pvc-Atm1/0/0-1/32] oam frequency 12 up 4 down 4 retry-frequency 1
7.1.23 oamping interface

Syntax
oamping interface atm interface-num pvc { vc-name | vpi / vci } [ number ] timeout
View
ATM interface view
Parameter
atm interface-num: ATM interface number. vc-name: VC name. vpi/vci: VPI/VCI number. number: Number of OAM cells to be transmitted consecutively. It defaults to 5. timeout: OAM response timeout time in seconds. It defaults to 2.
Description
Use the oamping interface command to enable the specified ATM interface to send OAM cells on the specified PVC for checking link state. Receiving no response upon expiration of the specified time indicates that the link is disconnected, busy, or prone to packet loss.
Example
# Check the link state about PVC 1/32 on ATM interface 3/0/0, sending three cells and setting timeout time to one second.
[Router-Atm1/0/0] oamping interface atm 3/0/0 pvc 1/32 3 1 PING interface Atm3/0/0 pvc 1/32 with 3 of 53 bytes of oam F5 end-to-end cell(s), timeout is 1 second(s), press CTRL_C to break Receive reply from pvc 1/32: time=1 ms Receive reply from pvc 1/32: time=1 ms Receive reply from pvc 1/32: time=1 ms
7.1.24 pvc
Syntax
pvc { pvc-name [ vpi/vci ] | vpi/vci } undo pvc { pvc-name [ vpi/vci ] | vpi/vci }
View
ATM interface view, PVC-Group view
Parameter
pvc-name: PVC name, whose maximum length is 16 characters. It shall be unique at ATM interface (case insensitive), and can not be a legal VPI/VCI pair. For example, "1/20" cannot be a PVC name. vpi/vci: vpi is ATM Virtual Path Identifier (VPI) in the range 0 to 255; vci is ATM Virtual Channel Identifier (VCI). Its value range depends on interface type. See the following table
for reference. Usually, the vci values from 0 to 31 are reserved for special usage and cannot be used. Table 7-1 VCI range for each type of ATM interface Interface type ADSL GSHDSL ATMOC3 ATM25 ATME3 ATMT3 IMA-E1/T1 <0-255> <0-255> <0-1023> <0-511> <0-1023> <0-1023> <0-511> VCI
Note: vpi and vci cannot both be 0. A PVC in certain PVC-Group cannot be deleted at ATM interface.
Description
Use the pvc command to create a PVC or enter PVC view at ATM interface or in PVC-Group view. Use the undo pvc command to delete the specified PVC. By default, no PVC is created. This command is used to create a PVC with specified VPI/VC. Once pvc-name is specified for one PVC (e.g. "3Com"), it is possible to re-enter PVC view by inputting pvc pvc-name (e.g. " pvc 3Com"). The deletion of the PVC can be done by inputting undo pvc pvc-name (e.g. " undo pvc 3Com") or through the undo pvc vpi/vci (if the VPI/VCI of this PVC is 1/32, it is " undo pvc 1/32") command. The VPI/VCI pair of each PVC is unique at an ATM interface (including main interface and sub-interface). The actual number of PVCs that can be created is determined by the pvc max-number command. Related command: display atm pvc-info and pvc max-number.
Example
# Display how to create a PVC named "3Com" with VPI/VCI as 1/101.
[3Com-Atm1/0/0] pvc 3Com 1/101
7.1.25 pvc-group
Syntax
pvc-group { pvc-name [ vpi/vci ] | vpi/vci } undo pvc-group { pvc-name [ vpi/vci ] | vpi/vci }
View
ATM interface view
Parameter
pvc-name: PVC name, whose maximum length is 16 characters. It is case insensitive and should be unique at the ATM interface, and it should not be a legal VPI/VCI pair. For example, "1/20" cannot be a PVC name. The PVC corresponding to pvc-name must have already been created. vpi/vci: vpi is ATM Virtual Path Identifier (VPI) in the range 0 to 255; vci is ATM Virtual Channel Identifier (VCI). For its value range, refer to Table 7-1. Usually, the vci values from 0 to 31 are reserved for special usage and cannot be used. PVC corresponding to vpi/vci must have already been created.
Description
Use the pvc-group command to create a PVC-Group or enter the PVC-Group view at ATM interface. Use the undo pvc-group command to delete the specified PVC-Group. Once pvc-name is specified for some PVC (e.g. "3Com"), it is possible to enter PVC-Group view by inputting pvc-group pvc-name (e.g. "pvc-group 3Com"). The deletion of the PVC-Group can be done by inputting undo pvc-group pvc-name (e.g. "undo pvc-group 3Com") or through the undo pvc-group vpi/vci (if the VPI/VCI of this PVC is 1/32, it is " undo pvc-group 1/32") command. Related command: ip-precedence and pvc.
Example
# Display how to create a PVC-Group based on the name "3Com" and the PVC with VPI/VCI as 1/32.

[3Com-Atm1/0/0] pvc-group 3Com 1/32.
7.1.26 pvc max-number

Syntax
pvc max-number max-number undo pvc max-number
View
Parameter
max-number: Maximum number of supported VCs. Value range of this parameter depends on interface type, as shown in the following table: Table 7-2 The maximum number of VCs allowed for each type of ATM interface Interface type ADSL GSHDSL ATMOC3 ATM25 ATME3 ATMT3 <1-32> <1-32> <1-1024> <1-256> <1-1024> <1-1024> max-number
Description
Use the pvc max-number command to set the maximum number of ATM interface virtual circuits (VC). Use the undo pvc max-number command to restore the default value. This command is used to set the maximum number of the total available VCs for ATM main interfaces and sub-interfaces.
Note: Although this command is valid on both ATM main interface and sub-interface, it can only be used in ATM main interface view and this command is not found in ATM sub-interface view.
Example
# Configure ATM interface Atm 1/0/0 to support up to 1024 VCs.
[3Com-Atm1/0/0] pvc max-number 1024
# Configure ATM interface Atm 1/0/0 to support the default maximum number of VCs (1024).
[3Com-Atm1/0/0] undo pvc max-number
7.1.27 pvp limit

Syntax
pvp limit vpi peak-rate undo pvp limit vpi
View
Parameter
vpi: Virtual path identifier of ATM network, its value ranges from 0 to 255. peak-rate: Normal flow to be held. Value range of this parameter depends on interface type, as shown in the following table: Table 7-3 Value ranges of peak-rate Interface type ADSL GSHDSL ATMOC3 ATM25 <64-640> <64-2312> <2000-155000> <64-25600> peak-rate
ATME3 ATMT3
<64-34000> <64-45000>
Description
Use the pvp limit command to set the parameters for VP policing. Use the undo pvp limit command to delete the VP policing. By default, VP policing is not performed. When applying VP policing, the parameters of PVC are still valid. Only when the parameters of PVC and VP policing are satisfied will the packets be transmitted. When calculating the traffic, the LLC/SNAP, MUX and NLPID headers are included, but the ATM cell head is not included. Related command: pvc, service cbr, service vbr-nrt, service vbr-rt, service ubr.
Example
# Set the traffic of VP with vpi 1 to 2M.
[3Com-Atm1/0/0] pvp limit 1 2000
7.1.28 service cbr

Syntax
service cbr output-pcr [ cdvt cdvt_value ]
View
PVC view
Parameter
output-pcr: Output peak rate of ATM cell in kbps. Value range of this parameter depends on interface type, as shown in the following table Table 7-4 Value ranges of output-pcr Interface type ADSL GSHDSL ATMOC3 ATM25 <64-640> <64-2312> <64-155000> <64-25600>
output-pcr
ATME3 ATMT3
<64-34000> <64-44000>
cdvt_value: cell delay variation tolerance, in s, and the range of the value is 0 to 10000s.
Description
Use the service cbr command to specify the PVC service type as constant bit rate (CBR). By default, the service type is UBR after creating a PVC. By default, when the value of cdvt is not specified it is 500s. This command is used to set the PVC service type and parameter. The newly specified PVC service type will replace the existing service type. It is recommended that the PVC with larger bandwidth be created first, and then the one with smaller bandwidth. If the creation fails, the cdvt_value can be made larger to create the PVC once more. The above case will be prompted in the command line, as follows:
fail to set service parameter, please adjust cdvt value
The command does not support ATM E1 interface and ATM E3 interface. Related command: service vbr-nrt, service vbr-rt, and service ubr.
Example
# Create a PVC named "3Com" with VPI/VCI as 1/101.
# Specify the service type of the PVC as cbr and the peak rate of ATM cell as 50,000Kbits/s.Cell delay variation tolerance is 1000s.
[3Com-atm-pvc-Atm1/0/0-1/101-3Com] service cbr 50000 cdvt 1000
7.1.29 service ubr

Syntax
service ubr output-pcr
View
PVC view
Parameter
output-pcr: Output peak rate of ATM cell in kbps. For the value ranges of this parameter see Table 7-4.
Description
Use the service ubr command to specify the service type of PVC as Unspecified Bit Rate (UBR) and specify the related rate parameters. By default, the service type is UBR after creating a PVC. This command as well as the service vbr-nrt, service vbr-rt and service cbr commands can be used to set the service type and service parameters of PVC. The newly specified PVC service type will supersede the existing service type. Related command: service vbr-nrt, service vbr-rt, and service cbr.
Example
# Display how to specify the service type of the PVC as ubr and the peak cell rate of ATM cell as 100,000Kbps.
[3Com-atm-pvc-Atm1/0/0-1/101-3Com] service ubr 100000
7.1.30 service vbr-nrt

Syntax
service vbr-nrt output-pcr output-scr output-mbs
View
PVC view
Parameter
output-pcr: Peak rate of ATM cell output in kbps. For the value ranges of this parameter see Table 7-4. output-scr: Sustainable rate of ATM cell output in Kbps. Its value ranges are the same as those of output-pcr. output-mbs: Maximum burst size of ATM cell output, i.e., the maximum cache size of ATM cell output at the interface in cell number.
Description
Use the service vbr-nrt command to specify the service type of PVC as Variable Bit Rate-Non Real Time (VBR-NRT) and specify the related rate parameters. By default, the service type is UBR after creating a PVC.
This command as well as the service ubr, service vbr-rt and service cbr commands can be used to set the service type and service parameters of PVC. The newly specified PVC service type will supercede the existing service type. Related command: service vbr-rt, service ubr, and service cbr.
Example
# Display how to specify the service type of the PVC as VBR-NRT and set the peak bit rate of ATM cell to 100,000kbps, sustainable bit rate to 50,000Kbps, the maximum burst size to 320 cells.
[3Com-atm-pvc-Atm1/0/0-1/101-3Com] service vbr-nrt 100000 50000 320
7.1.31 service vbr-rt

Syntax
service vbr-rt output-pcr output-scr output-mbs
View
PVC view
Parameter
output-pcr: Peak cell rate of ATM output in Kbps. For the value ranges of this parameter see Table 7-4. output-scr: Sustainable cell rate of ATM output in Kbps. Its value ranges are the same as those of output-pcr. output-mbs: Maximum burst size of ATM cell output, i.e., the maximum cache size of ATM cell output at the interface in cell number. The range of the value is 1 to 512. When it is used in ATM E3 interface the range of the parameter is 1 to 512.
Description
Use the service vbr-rt command to set the service type of PVC to Variable Bit Rate - Real Time (VBR-RT) and specify the related rate parameters in PVC view. By default, the service type is UBR after creating a PVC. This command as well as the service ubr, service cbr and service vbr-nrt commands can be used to set the service type and service parameters of PVC. The newly specified
PVC service type will supercede the existing service type. The command does not support ATM E1 interface. Related command: service cbr, service ubr, and service vbr-nrt.
Example
[3Com-if-Atm1/0/0] pvc 3Com 1/101
# Display how to specify the service type of the PVC as VBR-NRT and set the peak cell rate of ATM to 100,000kbps, sustainable cell rate to 50,000Kbps, the maximum burst size to 320 cells.
[3Com-atm-pvc-Atm1/0/0-1/101-3Com] service vbr-rt 100000 50000 320
7.1.32 transmit-priority
Syntax transmit-priority value undo transmit-priority View
ATM PVC view
Parameter
value: Priority in the range 0 to 9, with a higher value indicating a higher priority. The transmit priority for the UBR service ranges from 0 to 4 and defaults to 0. The transmit priority for the VBR-NRT service ranges from 5 to 7 and defaults to 5. The transmit priority for the VBR-RT service ranges from 8 to 9 and defaults to 8.
Description
Use the transmit-priority command to assign a transmit priority to the ATM PVC associated with the UBR, VBR-T, or VBR-NRT service. At the time of bandwidth allocation, the higher priority PVC has priority over other PVCs. Use the undo transmit-priority command to restore the default transmit priority of the PVC according to the associated service type. After you change the service type of the PVC, its transmit priority changes to the default of the current service.
Example
# Assign the transmit priority of 3 to ATM PVC1/32.
[3Com-atm-pvc-Atm5/0/0-1/32-hun] transmit-priority 3 [3Com-atm-pvc-Atm5/0/0-1/32-hun] display atm pvc-info interface atm 5/0/0 pvc 1/32
Atm5/0/0, VPI: 1, VCI: 32, Name: hun, INDEX: 0 AAL5 Encaps: SNAP, Protocol: IP Service-type:UBR, output-pcr: 100000 kbps Transmit-Priority: 3 OAM interval: 0 sec(disabled), OAM retry interval: 1 sec OAM retry count (up/down): 3/5 input pkts: 0, input bytes: 0, input pkt errors: 0 output pkts: 0, output bytes: 0, output pkt errors: 0 Interface State: UP, OAM State: UP, PVC State: UP Output queue : (Urgent queue : Size/Length/Discards) 0/50/0
Output queue : (Protocol queue : Size/Length/Discards) 0/500/0 Output queue : (FIFO queuing : Size/Length/Discards) 0/75/0
Chapter 8 LAPB and X.25 configuration commands

8.1 LAPB and X.25 Configuration Commands
8.1.1 channel
Syntax
channel { interface serial interface-number | xot ip-address } undo channel { interface serial interface-number | xot ip-address }
View
X.25 hunt group view
Parameter
interface-number: Interface number, its value ranges from 0 to 3. ip-address: IP address of the peer XOT host.
Description
Use the channel command to add X.25 interface or XOT channel of one serial port to the current hunt group. Use the undo channel command to delete the specified interface or XOT channel from the current hunt group. One interface may belong to six hunt groups, at most, at the same time. Related command: X25 hunt-group.
Example
# Add the serial interface serial0/0/0 to the hunt group hg1.
[3Com] x25 hunt-group hg1 round-robin [3Com-hg-hg1] channel interface serial0/0/0
8.1.2 debugging lapb

Syntax
debugging lapb { all | error [ interface type number ] | event [ interface type number ] | packet { i-frame | us-frame } [ interface type number ] }
undo debugging lapb { all | error [ interface type number ] | event [ interface type number ] | packet { i-frame | us-frame }[ interface type number ] }
View
User view
Parameter
all: All LAPB debugging. error: LAPB error debugging. event: LAPB event debugging. packet: LAPB packet debugging. interface type number: Debugging on the specified interface. i-frame: I-frame debugging. us-frame: U-frame and S-frame debugging.
Description
Use the debugging lapb command to enable LAPB debugging. Use the undo debugging lapb command to disable LAPB debugging. By default, LAPB debugging is disabled.
Example
# Enable LAPB error debugging.
<Router> debugging lapb error
8.1.3 debugging pad

Syntax
debugging pad { all | error | event | packet } undo debugging pad { all | error | event | packet }
View
User view
Parameter
all: All PAD debugging. error: PAD error debugging.
event: PAD event debugging. packet: PAD packet debugging.
Description
Use the debugging pad command to enable PAD debugging. Use the undo debugging pad command to disable PAD debugging.
Example
# Enable PAD packet debugging.
<Router> debugging pad packet
8.1.4 debugging x25

Syntax
debugging x25 { all | error | event | packet } undo debugging x25 { all | error | event | packet }
View
User view
Parameter
all: All X.25 debugging. error: X.25 error debugging. event: X.25 event debugging. packet: X.25 packet debugging.
Description
Use the debugging x25 command to enable X.25 debugging. Use the undo debugging x25 command to disable X.25 debugging.
Example
# Enable X.25 error debugging.
<Router> debugging x25 error
8.1.5 debugging x25 xot

Syntax
debugging x25 xot { all | event | packet } undo debugging x25 xot { all | event | packet }
View
User view
Parameter
all: All XOT debugging. event: XOT event debugging. packet: XOT packet debugging.
Description
Use the debugging x25 xot command to enable XOT debugging Use the undo debugging x25 xot command to disable XOT debugging.
Example
# Enable XOT packet debugging.
<Router> debugging x25 xot packet
8.1.6 debugging x25 x2t

Syntax
debugging x25 x2t { all | event | packet } undo debugging x25 x2t { all | event | packet }
View
System view
Parameter
all: All X2T debugging. event: X2T event debugging. packet: X2T packet debugging.
Description
Use the debugging x25 x2t command to enable X2T debugging. Use the undo debugging x25 x2t to disable X2T debugging. The debugging information includes event and packet information. You can enable/disable debugging for one piece or all information by using the debugging command.
Example
# Enable all X2T debugging.
[Router] debugging x25 x2t all
# Enable X2T packet debugging.

[Router] debugging x25 x2t packet
# Enable X2T event debugging.

[Router] debugging x25 x2t event

Syntax
display interface serial [ number ]
View
Any view
Parameter
number: Serial interface number.
Description
Use the display interface command to view the LAPB or X.25 interface information. After configuring PVC of X.25, users can use the command to obtain the status information on one interface.
Example
# Encapsulate Serial0/0/0 with LAPB protocol and view the encapsulated interface information using the following commands.
<3Com> system-view [3Com] interface Serial1/0/0 [3Com-Serial0/0/0] link-protocol lapb [3Com-Serial0/0/0] display interface serial 0/0/0

Serial0/0/0 current state : UP Line protocol current state : UP
Description : Serial0/0/0 Interface The Maximum Transmit Unit is 1500, Holder timer is 10(sec) Internet protocol processing : disabled Link-protocol is X.25 DCE Ietf, address is , state R1, modulo 8 input/output: window sizes 7/7, packet sizes 256/256 Channels: Incoming-only 10-20, Two-way 30-40, Outgoing-only 50-60 Timers: T10 60, T11 180, T12 60, T13 60, Idle_Timer 0 (seconds) New configuration(will be effective after restart): modulo 8 input/output: window sizes 7/7, packet sizes 256/256 Channels: Incoming-only 10-20, Two-way 30-40, Outgoing-only 50-60 Statistic: Restarts 0 (Restart Collisions 0) Refused Incoming Call 0, Failing Outgoing Call 0 input/output: RESTART 1/1 DATA 119/121 RR 6/113 Invalid Pr: 0 CALL 9/2 DIAGNOSE 0/0 Bytes 2497/2731
INTERRUPT 0/0 REJ 0/0
RNR 0/0
Invalid Ps: 0
Unknown: 0
Link-protocol is LAPB LAPB DCE, module 8, window-size 7, max-frame 12056, retry 10 Timer: T1 3000, T2 1500, T3 0 (milliseconds), x.25-protocol
state CONNECT, VS 6, VR 3, Remote VR 6 IFRAME 147/254, RR 11/6, RNR 0/0, REJ 0/0 FRMR 0/0, SABM 0/1, DM 0/0, UA 1/0 DISC 0/0, invalid ns 0, invalid nr 0, link resets 0 FIFO queuing: FIFO 0/75/0 (Outbound queue:Size/Length/Discards)
Physical layer is synchronous, Interface is DTE, Cable type is V24 5 minutes input rate 0.00 bytes/sec, 0.01 packets/sec 5 minutes output rate 0.07 bytes/sec, 0.01 packets/sec 159 packets input, 3338 bytes, 0 no buffers
261 packets output, 4057 bytes, 0 no buffers 0 input errors, 0 CRC, 0 frame errors 0 overrunners, 0 aborted sequences, 0 input no buffers DCD=UP DTR=UP DSR=UP RTS=UP CTS=UP
The following table describes the description on the fields of the display interface command.
Table 8-1 Description on the fields of the display interface command Field Link-protocol is X.25 DCE Ietf address is state modulo input/output: Window sizes 7/7, packet sizes 256/256 Description Current encapsulation protocol of this interface is X.25 protocol that works in DCE mode, and the data packet encapsulation format is IETF. X.121 address of this X.25 interface; this field will be empty if there is no address. Current status of this X.25 interface. Data packets and traffic control packets sent by this X.25 interface are numbered in modulo 8 mode. Flow control parameters of this X.25 interface, including receiving window size, sending window size, maximum received packet size (in bytes), and maximum sent packet size (in bytes). Channel range division of this X.25 interface, sequentially as incoming-only channel section, two-way channel section, outgoing-only channel section; if both demarcating values of an section are 0, this section is disabled. Delay values of various timers of this X.25 interface, in seconds. New configuration of this X.25 interface taking effect after next restart; if this configuration is wrong, the default value will be restored. Statistics of this X.25 interface, including times of restart (including restart collision). Statistics information of this X.25 interface: times of call refusals. times of call failures. Number of failed outgoing calls. Statistics information of this X.25 interface: quantities of received and sent packets, format: received quantity/sent quantity. Error statistics information of this X.25 interface: total of received data packets and traffic control packets carrying erroneous acknowledgement numbers. Error statistics information of this X.25 interface: total of received data packets carrying erroneous sequence numbers. Error statistics information of this X.25 interface: total of received irresolvable packets.
Channels
Timers
New Configuration Restarts 0 ( Restart Collision 0) Refused Incoming Call Failing Outgoing Call input/output: RESTART 1/1 ... REJ 0/0 Invalid Pr
Invalid Ps
Unknown
Field Link-protocol is LAPB LAPB DCE module 8 window-size 7 max-frame 12056 retry 10 timer state VS VR Remote VR IFRAME 147/254 ... DISC 0/0 Invalid ns
Description Current encapsulation protocol of this interface is LAPB protocol. LAPB of this interface works in DCE mode. Information frame and monitoring frame sent by this interface LAPB are numbered in the modulo 8 view. Window size of this interface LAPB is 7. The maximum length of frame sent by the interface LAPB is 12056 bits. Maximum re-sending times of information frame of this interface LAPB is 10. Delay value of timers of this interface LAPB, in milliseconds. The unit of T3 is second. Current status of this interface LAPB. Sending variable of this interface LAPB. Receiving variable of this interface LAPB. Peers last acknowledgment on information frame received by this interface LAPB. Statistics information of frames sent and received by this interface LAPB, format: received quantity/sent quantity. Error statistics of this interface LAPB, including total of received information frames carrying erroneous sequence numbers. Error statistics of this interface LAPB, including total of received information frames and monitoring frames carrying erroneous acknowledgment numbers. Restarting times of this interface LAPB link.
Invalid nr Link resets
8.1.8 display x25 alias-policy

Syntax
display x25 alias-policy [ interface interface-type interface-number ]
View
Any view
Parameter
Description
Use the display x25 alias-policy command to view X.25 alias table. Related command: x25 alias-policy.
Example
# Display X.25 alias table.
<3Com> display x25 alias-policy Alias for Serial0/0/0: Alias for Serial1/0/0: AliasAliasAlias1: $20112405$ 2: $20112450 3: 20112450$ strict left right
The above information indicates: the interface Serial0/0/0 is set without alias, and the interface Serial1/0/0 is set with 3 aliases, which are $20112405$ (in strict match mode), $20112405 (in left alignment match mode) and 20112405$ (in right alignment match mode).
8.1.9 display x25 cug

Syntax
display x25 cug
View
Any view
Parameter
None
Description
Use the display x25 cug command to view the CUG configuration on router ports.
Example
# Display the CUG configuration on the router ports.

[Router]display x25 cug
Interface:Serial0, CUG Service enable local-cug 2 <-> network-cug 4
Interface:Serial1, CUG Service enable local-cug local-cug 1 <-> network-cug 1 3 <-> network-cug 5 , no-incoming , preferential
8.1.10 display x25 hunt-group-info

Syntax
display x25 hunt-group-info [ hunt-group-name ]
View
Any view
Parameter
hunt-group-name: hunt group name
Description
Use the display x25 hunt-group-info command to view the status information of X.25 hunt group. You can use this command to learn the hunt group of the Router and the information about the interfaces and XOT channel inside the hunt group. Related command: x25 hunt-group.
Example
# Display the status information of X.25 hunt group hg1.
[3Com] display x25 hunt-group-info hg1 HG_ID : hg1 member HG_Type: round-robin state vc-used 2 1 1 in-pkts 51 21 24 out-pkts 20 15 3
Serial0/0/0 Last Serial1/0/0 Next 1.1.1.1 Normal
The following table introduces the meaning of each field in the displayed information. Table 8-2 Explanation of each field in the command display x25 hunt-group-info Field hg1 Hunt group name
Explanation
round-robin member
Hunt group call channel selection policy Interfaces or XOT channel contained in hunt group The state of the current interface or XOT channel, including: Last:Last: last used
State
Next: interfaces or XOT channel selected by rotary selection policy next Normal: normal state Call number on the interface or XOT channel (including call success and call failure) Input flow on the interface or XOT channel in packets Output flow on the interface or XOT channel in packets
vc-used in-pkts out-pkts
8.1.11 display x25 map

Syntax
display x25 map
View
Any view
Parameter
None
Description
Use the display x25 map command to view the X.25 address mapping table. The X.25 address mapping can be configured using two methods, special configuration (through the x25 map command) or implied configuration (through the x25 pvc command). The display x25 map command can be used to show all the address mappings. Related command: x25 map, x25 pvc, x25 switch pvc, x25 xot pvc, and x25 fr pvc.
Example
# Display the X.25 address map table.
<3Com> display x25 map Interface:Serial3/0/0(protocol status is up): ip address:202.38.162.2 map-type: SVC_MAP X.121 address: 22
VC-number: 0

Facility: ACCEPT_REVERSE; BROADCAST; PACKET_SIZE: I 512 O 512 ;
8.1.12 display x25 pad

Syntax
display x25 pad [ pad-id ]
View
Any view
Parameter
pad-id: PAD ID, its value ranges from 0 to 255. If it is not specified, all PAD connection information will be displayed.
Description
Use the display x25 pad command to view X.25 PAD connection information. PAD is a kind of application similar to telnet. It can establish the connection between two ends through X121 address, and then, carry out configuration operations. Related command: display x25 vc and x25 xot.
Example
# Display X.25 PAD connection information.
[3Com] display x25 pad UI-INDEX130: From remote 22 connected to local 11, State: Normal X.3Parameters(In): 1:1,2:0,3:2,4:1,5:0,6:0,7:21,8:0,9:0,10:0,11:14 12:0,13:0,14:0,15:0,16:127,17:21,18:18,19:0,20:0,21:0,22:0 X.3Parameters(Out): 1:1,2:0,3:2,4:1,5:0,6:0,7:21,8:0,9:0,10:0,11:14 12:0,13:0,14:0,15:0,16:127,17:21,18:18,19:0,20:0,21:0,22:0 Input: Pkts(total/control): 13/2 queue(size/max) :0/200 Output: bytes:12

Pkts(total/control): 15/2
bytes:320
8.1.13 display x25 switch-table pvc

Syntax
display x25 switch-table pvc
View
Any view
Parameter
None
Description
Use the display x25 switch-table pvc command to view X.25 switching virtual circuit table. Related command: x25 pvc, x25 switch pvc, x25 xot pvc, x25 fr pvc, and x25 switch svc.
Example
# Display X.25 switching virtual circuit table.
[3Com] display x25 switch-table pvc #1 #2 (In: Serial0/0/0-vc1024)< >(Out: Serial1/0/0-vc1} (In: Serial1/0/0-vc1024)< >(Out: Serial0/0/0-vc1}
8.1.14 display x25 switch-table svc

Syntax
display x25 switch-table svc { dynamic | static }
View
Any view
Parameter
None
Description
The command display x25 switch-table svc is used to display X.25 switching routing table. Related command: x25 switch svc.
Example
# Display X.25 switching routing table.
[3Com] display x25 switch-table svc static Number Destination Substitute- Substitute- CUD src 1 2 3 4 5 11 22 133 132 133 dst I/Serial2/0/0 I/Serial2/1/0 H/hg1 T/123.123.123.123 T/123.123.123.123 SwitchTo(type/name)
T/124.124.124.124 T/125.125.125.125 6 111 222 333 T/4.4.4.4
Total of static svc is 6. The item type of SwitchTo meaning: I: interface H: hunt-group T: xot
The following table introduces the meaning of each field in the displayed information. Table 8-3 Explanation of each field in the command display x25 switch-table svc Field Number Substitute-src Substitute-dst CUD SwitchTo Explanation Sequence number of this route in the routing table X.121 source address after substitution, if the content is blank, it means no substitution. X.121 destination address after substitution, if the content is blank, it means no substitution. Call User Data Forwarding address of this route, including interface, XOT channel and hunt group
8.1.15 display x25 vc

Syntax
display x25 vc [ lci ]
View
Any view
Parameter
lci: Logical channel identifier, its value ranges from 1 to 4095. If the logical channel identifier is not specified all virtual circuits will be displayed.
Description
Use the display x25 vc command to view information about the X.25 virtual circuit. SVC (Switched Virtual Circuit) is set up temporarily by X.25 through call connection when data transmission is required. PVC is configured manually and exists regardless of the data transmission requirement. When the router works in X.25 switched mode, virtual circuits will be set up in order to transfer the switched data. The information about these virtual circuits can be shown via this command, and only some fields in the displayed information differ. Related command: x25 pvc, x25 switch pvc, x25 xot pvc, and x25 fr pvc.
Example
# Display X.25 virtual circuit.
<3Com> display x25 vc Interface: Serial2/0/0 SVC 1 State: P4 Map: ip 10.1.1.2 to 130 Window size: input 2 output 2 output 128 Remote PS: 5 Remote PR: 4
Packet Size: input 128 Local PS: 5
Local PR: 5
Local Busy: FALSE Input/Output: DATA 5/5 RR 0/0
Reset times: 0
RNR 0/0
Bytes 420/420 Snd Queue(Current/Max): 0/200

Interface: Serial2/1/0 SVC 10 State: P4 SVC <--> Serial2/0/0 SVC 60 Window size: input 2
output 2 output 128 Remote PS: 0 Remote PR: 0
Local PR: 0
Reset times: 0
RNR 0/0
Bytes 420/420 Snd Queue(Current/Max): 0/200 Interface: Serial2/0/0-1.1.1.1 PVC 1 State: P/Inactive XOT PVC <--> Serial2/0/0 PVC 1 connected Window size: input 2 output 2 output 128 Remote PS: 0 Remote PR: 0
Local PR: 0
Reset times: 0
RNR 0/0
Bytes 0/0 Snd Queue(Current/Max): 1/200 Interface: Serial2/0 PVC 1 State: D3 PVC <--> XOT Serial2/0/0-1.1.1.1 PVC 1 connected Window size: input 2 output 2 output 128 Remote PS: 0 Remote PR: 0
Local PR: 0
Reset times: 0
RNR 0/0

Interface: Serial2/0/0 SVC 59 State: P4
PAD: UI-130 From remote 130 connected to local 220 Window size: input 2 output 2 output 128 Remote PS: 1 Remote PR: 2
Local PR: 1
Reset times: 0
RNR 0/0
8.1.16 display x25 xot

Syntax
display x25 xot
View
Any view
Parameter
None
Description
Use the display x25 xot command to view XOT link information. You can use the command display x25 xot to view detailed information about all XOT links, including peer ip and port, local ip and port, keepalive setting of socket and come/go interface names. Related command: x25 switch svc xot and x25 xot pvc.
Example
# Display XOT link information.
[3Com] display x25 xot SVC 1024: ( ESTAB )
tcp peer ip: 10.1.1.1, peer port: 1998 tcp local ip: 10.1.1.2, local port: 1024
socket keepalive period: 5, keepalive tries: 3 come interface name: Serial0/0/0-10.1.1.1-1024 go interface name: Serial0/0/0:
The above information indicates: there is one established XOT link via SVC, whose peer IP is 10.1.1.1, peer port is 1998, local IP is 10.1.1.2, local port is 1024, keepalive period of socket is 5 seconds, keepalive tries are 3, come interface name is Serial0/0/0-10.1.1.1-1024 (XOT interface), and go interface name is Serial0/0/0.
8.1.17 display x25 x2t switch-table

Syntax
display x25 x2t switch-table
View
Any view
Parameter
None
Description
Use the display x25 x2t switch-table command to display the dynamic switching routing table and static routing table. You can view the switch entry from X25 to TCP dynamically established by router with the display x25 x2t switch-table command. When a router sets up a connection this entry exists, and when you close the connection the entry is deleted.
Example
# Display the X2T dynamic switching routing table on the router.
[Router] display x25 x2t switch-table X.121 Interface [LCD ]<--> Ip Address port SocketId
========================================================== 222 NULL Serial0/0/0 Serial0/0/0 [SVC:1024 [PVC:1 ] <--> 20.1.1.1 ] <--> 20.1.1.1 102 104 2 2
From the first entry in this table, we know that the router has established an X2T SVC connection with one end connecting X.25 of Serial0/0/0 and the other a TCP connection. The X.25 uses a virtual circuit (VC) whose LCD is 1024 and the TCP connection whose port is 102, socket is 2 and the remote IP address is 20.1.1.1.
From the second entry in this table, we know that the router has established an X2T PVC connection with one end connecting X.25 of Serial0/0/0 and the other a TCP connection. The X.25 uses a virtual circuit (VC) whose LCD is 1 and the TCP connection of which the Socket is 2, remote IP address is 20.1.1.1 and the port is 102.
8.1.18 lapb max-frame

Syntax
lapb max-frame n1-value undo lapb max-frame
View
Interface view
Parameter
n1-value: The value of the parameter N1 in bits, and its value ranges from 1096 to 12104. By default, the parameter N1 of LAPB is 12032.
Description
Use the lapb max-frame command to configure the LAPB parameter N1. Use the undo lapb max-frame command to restore the default value. N1 shall indicate the maximum bit of I frame that DCE or DTE wishes to receive from DTE or DCE, and its value is the maximum transmission unit (MTU) plus the total bytes of protocol header times 8, which stipulates the maximum length of transmission frame.
Example
# Set the parameter N1 of LAPB on the interface Serial 0/0/0 is 1160.
[3Com-Serial0/0/0] lapb max-frame 1160
8.1.19 lapb modulo

Syntax
lapb modulo { 128 | 8 } undo lapb modulo
View
Interface view
Parameter
128: Using modulus 128 numbering view. 8: Using modulus 8 numbering view.
Description
Use the lapb modulo command to specify the LAPB frame numbering view (also called modulo). Use the undo lapb modulo command to restore the default value. By default, the LAPB frame protocol view is modulo 8. There are two LAPB frame numbering views, modulo 8 and modulo 128. Each information frame (I frame) is numbered in sequence, in the range 0 to the modulo minus 1. In addition, sequential numbers will cycle within the range of modulo. Modulo 8 is a basic view, LAPB can implement all the standards via the view. It is sufficient for most links. Related command: lapb window-size.
Example
# Set the LAPB frame numbering view on Serial0/0/0 to modulo 8.
[3Com-Serial0/0/0] lapb modulo 8
8.1.20 lapb retry

Syntax
lapb retry n2-value undo lapb retry
View
Interface view
Parameter
n2-value: The value of N2, its value ranges from 1 to 255.By default, the parameter N2 of LAPB is 10.
Description
Use the lapb retry command to configure LAPB parameter N2. Use the undo lapb retry command to restore the default value.
The value of N2 indicates the maximum retries that DCE or DTE sends one frame to DTE or DCE.
Example
# Set the LAPB parameter N2 on Serial0/0/0 to 20.
[3Com-Serial0/0/0] lapb retry 20
8.1.21 lapb timer

Syntax
lapb timer { t1 t1-value | t2 t1-value | t3 t3-value } undo lapb timer { t1 | t2 | t3 }
View
Interface view
Parameter
t1-value: The value of timer T1 in the range 1 to 64000 milliseconds. It defaults to 3000 milliseconds. t2-value: Value of the timer T2 in the range 1 to 32000 milliseconds. It defaults to 1500 milliseconds. t3-value: Value of the timer T3 in the range 0 to 255 milliseconds. It defaults to 0 milliseconds.
Description
Use the lapb timer command to configure the LAPB timers T1, T2 and T3. Use the undo lapb timer command to restore their default values. T1 is a transmission timer. When T1 expires, DTE (DCE) will start retransmission. The value of T1 will be greater than the maximum time between the sending of a frame and the receiving of its response frame. T2 is a reception timer. When it expires, the DTE/DCE must send an acknowledgement frame so that this frame can be received before the peer DTE/DCE T1 timer expires (T2<T1). T3 is an idle channel timer. When it expires the DCE reports to the packet layer that the channel is staying idle for a long time. T3 should be greater than the timer T1 (T3>T1) on a DCE. When T3 is 0, it indicates that it is not functioning yet.
Example
# Set the LAPB timer T1 on Serial0/0/0 to 3000ms.
[3Com-Serial0/0/0] lapb timer t1 3000
8.1.22 lapb window-size

Syntax
lapb window-size k-value undo lapb window-size
View
Interface view
Parameter
k-value: Maximum number of I frame of unacknowledged sequence number that DTE or DCE may send. If the modulus is 8, the value of the window parameter K ranges 1 to 7. If the modulus is 128, the value of the window parameter K ranges 1 to 127. By default, the window parameter K is 7.
Description
Use the lapb window-size command to configure the LAPB window parameter K. Use the undo lapb window-size command to restore the default value of the LAPB window parameter K. The value of the window parameter K is determined by the value of modulus. Related command: lapb modulo.
Example
# Set the LAPB window parameter K on the interface Serial 0/0/0 to be 5.
[3Com-Serial0/0/0] lapb window-size 5
8.1.23 link-protocol lapb

Syntax
link-protocol lapb [ dte | dce ] [ ip | multi-protocol ]
View
Interface view
Parameter
dte: Indicates that the interface works in DTE mode of LAPB. dce: Indicates that the interface works in DCE mode of LAPB. ip: Indicates that the network layer protocol borne by LAPB is IP.
Description
Use the link-protocol lapb command to specify the link layer protocol of the interface as LAPB. By default, DTE is the default LAPB operating mode. IP is the default network layer protocol. Though LAPB is a layer-2 protocol of X.25, it can act as an independent link-layer protocol for simple data transmission. Generally, LAPB can be used when two routers are directly connected with a dedicated line. At that time one end works in DTE mode, and the other in DCE mode. Related command: display interface.
Example
# Configure LAPB as the link layer protocol of the interface Serial 0/0/0, and enable it to work in DCE mode.
[3Com-Serial0/0/0] link-protocol lapb dce
8.1.24 link-protocol x25

Syntax
link-protocol x25 [ dte | dce ] [ ietf | nonstandard ]
View
Interface view
Parameter
dte: Indicates that the interface works in DTE mode. dce: Indicates that the interface works in DCE mode. letf: Based on the standard stipulation of the IETF RFC 1356, encapsulate IP or other network protocols on the X.25 network. nonstandard: Encapsulates IP or other network protocols on the X.25 network with nonstandard.
Description
Use the link-protocol x25 command to encapsulate X.25 protocol to the specified interface. By default, the link-layer protocol for interface is PPP. By default, when the interface uses X.25 protocol it works in DTE IETF mode. If the X.25 switching function is not used, and two Routers are directly connected back to back via the X.25 protocol, one Router will work in DTE mode, while the other will work in DCE mode. When two Routers are connected via the X.25 public packet network, they will generally work in DTE mode. If the X.25 switching function is used, the Router will generally work in DCE mode. In practice, if there is no special requirement, select the IETF format of datagram. Related command: display interface.
Example
# Specify X.25 as the link layer protocol of the interface Serial 0/0/0 that works in DTE IETF mode.
[3Com-Serial0/0/0] link-protocol x25 dte ietf
8.1.25 pad
Syntax
pad x121-address
View
User view
Parameter
x121-address: x121 destination address.
Description
Use the pad command to establish a PAD connection with the remote site. PAD is an application similar to telnet. It can establish the connection between two ends through X121 address, and then, carry out configuration operations.
Example
# Establish a PAD connection, and the destination x121 address is 2.
<03Com> pad 2
8.1.26 reset xot

Syntax
reset xot local local-ip-address local-port remote remote-ip-address remote-port
View
User view
Parameter
local-ip-address: Local IP address of the XOT connection. local-port: Local port number of the XOT connection. remote-ip-address: Remote IP address of the XOT connection. remote-port: Remote port number of the XOT connection.
Description
For SVC, use the reset xot command to initiatively clear an XOT link. For PVC, use the reset xot command to initiatively reset an XOT link. You can initiatively clear or reset the XOT link using the command reset xot. When you clear or reset the XOT link, you can obtain the required ports using the commands display x25 xot or display tcp status. Related command: display x25 vc, x25 switching, display x25 xot, and display tcp status.
Example
# Clear or reset an XOT link.
<3Com> reset xot local 10.1.1.1 1998 remote 10.1.1.2 1024
8.1.27 reset x25

Syntax
reset x25 { counters interface type number | vc interface type number [ pvc-number ] }
View
User view
Parameter
counters: Resets interface statistics.
vc: Rests X.25 circuits. interface type number: Specifies an interface by its type and number. pvc-number: PVC number in the range 1 to 4095.
Description
Use the reset x25 command to reset statistics of X.25 on the specified interface or to reset the specified X.25 VC.
Example
# Reset the statistics about X.25 on the specified interface.
[Router] reset x25 counters interface serial 0/0/0
8.1.28 reset lapb

Syntax
reset lapb statistics
View
Interface view
Parameter
None
Description
Use the reset lapb statistics command to clear the statistics about LAPB.
Example
# Clear the statistics about LAPB.
[Router-Serial1/0/0] reset lapb statistics
8.1.29 translate ip
Syntax
translate ip ip-address port port-number { x25 x.121-address | pvc { interface-type interface-number } pvc-number } undo translate ip ip-address port port-number
View
System view
Parameter
ip-address: Local IP address. port-number: TCP port number on which the local router listen messages. x.121-address: Destination address of X.121 after translation. interface-type: Interface type. interface-number: Number of the port encapsulated with X25. pvc-number: PVC number.
Description
Use the translate ip command to configure an X2T forwarding route from IP network to X.25 network. Use the undo translate ip command to cancel a configured X2T forwarding route from IP network to X.25 network. When the host in an IP network transmits packets to the specified IP address and port number of the router, the router will translate these IP packets to X.25 and then forward them to a specified X1.121 address or PVC in X.25 network. x.121-address supports wildcard. For details on how to use wildcard refer to the X25 route command.
Example
# Configure an X2T forwarding route to forward the packets that the local device receives at 10.1.1.1:102 to the X.121 address 111.
[Router] Translate ip 10.1.1.1 port 102 x25 111
# Configure an X2T forwarding route to forward the packets that the local device receives at 10.1.1.1:102 to PVC 1 on the interface serial 0/0/0. .
[Router] Translate ip 10.1.1.1 port 102 pvc serial 0/0/0 1
8.1.30 translate X25

Syntax
translate x25 x.121-address ip ip-address port port-number undo translate x25 x.121-address
View
System view
Parameter
x.121-address: Destination address of X.121. ip: IP address of the remote host to be connected. port: Port number of the remote host to be connected.
Description
Use the translate x25 command to configure an X2T forwarding route from an X.25 network to IP network. Use the undo translate x25 command to cancel this configuration. Users can implement the packet forwarding between X25 and IP network. The program compares the destination address in the X.25 call request packet with x.121-address, then initiates a TCP connection to a specified IP address and port number according to the configuration if the matching result describes as an X2T application. You can establish mapping between port numbers and X.121 addresses by multiple commands. x.121-address supports wildcard. For details on how to use wildcard refer to the X25 route command.
Example
# Configure an X2T forwarding route to forward the packets that are received at the X.121 address 111 to the IP address 10.1.1.1:102.
[Router] Translate x25 1111 ip 10.1.1.1 port 102
8.1.31 x25 alias-policy

Syntax
x25 alias-policy match-type alias-string undo x25 alias-policy match-type alias-string
View
Interface view
Parameter
match-type: Match type of the alias. There are 9 optional match types:
free: Free match free-ext: Extended free match left: Left alignment match left-ext: Extended left alignment match right: Right alignment match right-ext: Extended right alignment match strict: Strict match whole: Whole match whole-ext: Extended whole match alias-string: String of the alias
Description
Use the x25 alias-policy command to configure the alias of an X.121 address. Use the undo x25 alias-policy command to delete the alias of an X.121 address. By default, no X.25 alias is configured. When an X.25 call is forwarded between networks, different X.25 networks may perform some operations on the destination addresses (that is, the called DTE address) carried by this call packet, for example, regularly adding or deleting the prefix and suffix. In this case, a user needs to set an interface alias for the router to adapt this change. Please consult your ISP to learn if the network supports this function before deciding whether the alias function is enabled or not. For details on the X.25 alias matching method please see the chapter LAPB and X.25 Configurations in the Configuration Guide. Related command: display x25 alias-policy, x25 x121-address.
Example
# Configure the link-layer protocol on interface Serial0/0/0 as X.25 and its X.121 address to 20112451, and set two aliases with different match types for it.
[3Com] interface serial 0/0/0 [3Com-Serial0/0/0] link-protocol x25 [3Com-Serial0/0/0] x25 x121-address 20112451 [3Com-Serial0/0/0] x25 alias-policy right 20112451$ [3Com-Serial0/0/0] x25 alias-policy left $20112451
With the above configurations, a call whose destination address is 20112451 can be accepted as long as it can reach the local X.25 interface Serial0/0/0, no matter whether the network is performing the prefix adding operation or suffix adding operation.
8.1.32 x25 call-facility

Syntax
x25 call-facility facility-option undo x25 call-facility facility-option
View
Interface view
Parameter
facility-option: User facility option, its value includes: closed-user-group number: Specifies a closed user group (CUG) number for the X.25 interface. The facility enables DTE to belong to one or more CUGs. CUG allows the DTEs in it to communicate with each other, but not to communicate with other DTEs. packet-size input-size output-size: Specifies the maximum packet size negotiation in initiating call from X.25 interface. Maximum packet size negotiation is part of flow control parameter negotiation. It needs two parameters: maximum reception packet size and maximum transmission packet size, which must range from 16 to 1024 (including 16 and 1024), and must be the integer power of 2. reverse-charge-request: Specifies reverse charging request while calling from X.25 interface. roa-list name: Specifies an ROA list name configured by the command X25 roa-list in system view for the X.25 interface. send-delay value: Specifies the maximum network send delay request while calling from X.25 interface. You can set this request to any value in the range 0 to 65534 ms (including 0 and 65534). threshold in out: Specifies throughput negotiation while calling from X.25 interface. The values of in/out are defined as 75, 150, 300, 600, 1200, 2400, 4800, 9600, 19200, and 48000. window-size input-window-size output-window-size: Specifies the window size negotiation while calling from X.25 interface. Window size negotiation is a part of flow control parameter negotiation. It needs two parameters: reception window size and transmission window size, which must be in the range of 1 to modulo -1 (including 1 and modulo -1).The default value of the two parameters is 2.
Description
Use the x25 call-facility command to set user options for an X.25 interface. After an option is set, all X.25 calls from the X.25 interface will carry the relevant information field in call packet. Use the undo x25 call-facility command to delete the set option. By default, no facility is set. The user facilities set via this command are available for all the calls originating from this X.25 interface. You can set a user option for an X.25 call from a certain address mapping through the command x25 map protocol-name protocol-address x.121-address x.121-address [ option ]. Related command: x25 map.
Example
# Specify the flow control parameter negotiation with the peer end for the calls from the X.25 interface serial0/0/0.
[3Com-Serial0/0/0] x25 call-facility packet-size 512 512 [3Com-Serial0/0/0] x25 call-facility window-size 5 5
8.1.33 x25 cug-service

Syntax
x25 cug-service [ incoming-access ] [ outgoing-access ] [ suppress { all | preferential } ] undo x25 cug-service
View
Interface view
Parameter
incoming-access: Performs the suppress processing of incoming access outgoing-access: Performs the suppress processing of outgoing access all: Suppresses all CUGs configured with preferential suppress preferential: Only processes those CUGs configured with preferential suppress
Description
Use the x25 cug-service command to enable CUG service and suppression policies.
Use the undo x25 cug-service command to disable CUG service. By default, CUG service is disabled. The command is used at DEC end. You can use the link-protocol x25 dce command to set the interface operating in DCE mode. After CUG service is enabled, the system suppresses those calls matching the preset conditions. The details are: If no parameter is set, the system suppresses all calls (including the calls with or without CUG facilities). If the incoming-access parameter is chosen, the system suppresses incoming calls. That is, it suppresses the incoming calls with CUG facilities, but lets the incoming calls without CUG facilities pass through. If the outgoing-access parameter is chosen, the system suppresses outgoing calls. That is, it suppresses the outgoing calls with CUG facilities, but lets the outgoing calls without CUG facilities pass through. If the suppress all parameter is chosen, the system removes CUG facilities for the incoming calls with CUG facilities and makes call processing. This parameter is ineffective to outgoing calls. The suppress preferential parameter, if an incoming call with CUG facilities and the suppression rule is preferential, the system then removes its CUG facilities and makes call processing. If the suppression rule is not preferential, the system does not remove its CUG facilities, but lets them pass through. This parameter is ineffective to outgoing calls. Related command: x25 call-facility, x25 local-cug.
Example
# Define the suppress processing of incoming access on the interface Serial0/0/0.
[3Com-Serial0/0/0] x25 cug-service incoming-access
8.1.34 x25 default-protocol

Syntax
x25 default-protocol protocol-type undo x25 default-protocol
View
Interface view
Parameter
protocol-type: Protocol type, may be IP.
Description
Use the x25 default-protocol command to set the default upper-layer protocol carried over X.25 for the X.25 interface. Use the undo x25 default-protocol command to restore the default upper-layer protocol. By default, IP is carried over X.25. During X.25 SVC setup, the called device will check the call user data field of a X.25 call request packet. If it is an unidentifiable one, the called device will deny the setup of the call connection. However, a user can specify a default upper-layer protocol carried over X.25. When X.25 receives a call with unknown CUD, the call can be treated based on the default upper-layer protocol specified by a user. Related command: x25 map.
Example
# Set the default upper-layer protocol over the X.25 interface Serial0/0/0 as IP.
[3Com-Serial0/0/0] x25 default-protocol ip
8.1.35 x25 hunt-group

Syntax
x25 hunt-group hunt-group-name { round-robin | vc-number } undo x25 hunt-group hunt-group-name
View
System view
Parameter
hunt-group-name: Name of hunt group. round-robin: Select call channel using cyclic selection policy. vc-number: Select call channel using the policy of computing available logical channel.
Description
Use the x25 hunt-group command to create or enter an X.25 hunt group. Use the undo x25 hunt-group command to delete the specified X.25 hunt group.
X.25 hunt group supports two call channel selection policies: round-robin mode and vc-number mode. A hunt group only uses one channel selection policy. The round-robin mode will select next interface or XOT channel inside hunt group for each call request using cyclic selection method. The vc-number mode will select the interface with the most idle-logical channels in hunt group for each call request. A hunt group can have 10 interfaces or XOT channels at most, and it may arbitrarily select the available channels between interface and XOT channel. XOT channel cannot join the hunt group that adopts the vc-number selection policy. Related command: display x25 hunt-group.
Example
# Create hunt group hg1 which uses cyclic selection policy.
[3Com] x25 hunt-group hg1 round-robin [3Com-hg-hg1]
8.1.36 x25 ignore called-address

Syntax
x25 ignore called-address undo x25 ignore called-address
View
Interface view
Parameter
None
Description
Use the x25 ignore called-address command to enable it to ignore the X.121 address of the called DTE when X.25 initiates calls. Use the undo x25 ignore called-address command to disable this function. By default, this function is disabled. According to X.25, the calling request packet must carry the address bits. However, on some occasions, the X.25 calling request does not have to carry the called/calling DTE address in a specific network environment or as is required by the application. This command enables users to specify whether the call request packet sent by X.25 in the 3Com routers carries the called DTE address.
Related command: x25 response called-address, x25 response calling-address, and x25 ignore calling-address.
Example
# Specify the call request packet from the X.25 interface Serial0/0/0 not to carry the called DTE address.
[3Com-Serial0/0/0] x25 ignore called-address
8.1.37 x25 ignore calling-address

Syntax
x25 ignore calling-address undo x25 ignore calling-address
View
Interface view
Parameter
None
Description
Use the x25 ignore calling-address command to enable it to ignore the X.121 address of the calling DTE when X.25 initiates calls. Use the undo x25 ignore calling-address command to disable this function. By default, this function is disabled. According to X.25, the calling request packet must carry the address bits. However, on some occasions, the X.25 calling request does not have to carry the called/calling DTE address in a specific network environment or as is required by the application. This command enables users to specify whether the call request packet sent by X.25 in the 3Com routers carries the calling DTE address. Related command: x25 response called-address, x25 response calling-address, and x25 ignore called-address.
Example
# Specify the call request packet from the X.25 interface Serial0/0/0 not to carry the calling DTE address.
[3Com-Serial0/0/0] x25 ignore calling-address
8.1.38 x25 local-cug

Syntax
x25 local-cug cug-number network-cug cug-number [ no-incoming ] [ no-outgoing ] [ preferential ] undo x25 local-cug cug-number
View
Interface view
Parameter
local-cug cug-number: Number of local cug. network-cug cug-number: Number of network cug. no-incoming: Suppresses incoming access. no-outgoing: Suppresses outgoing access. preferential: Suppresses the CUGs configured with preferential.
Description
Use the x25 local-cug command to configure mapping from local CUG to network CUG and define its suppression rule. Use the undo x25 local-cug command to remove mapping from local CUG to network CUG. Two types of CUG suppression policies are available. One is to suppress all incoming calls, where the system removes the CUG facilities of all incoming calls with CUG facilities. The other is to suppress the incoming calls matching the mapping specified as preference rule, where the system removes the CUG facilities only of those incoming calls matching the mapping specified as preference rule, but lets other incoming calls with CUG facilities pass through. By default, no suppress rule is defined. Related command: x25 call-facility and x25 cug-service.
Example
# Define the rule on the serial interface Serial0/0/0: the incoming calls with 100 local CUGs or 200 network CUGs are denied.
[3Com-Serial0/0/0] x25 cug-service [3Com-Serial0/0/0] x25 local-cug 100 network-cug 200 no-incoming
8.1.39 x25 map

Syntax
x25 map { ip | compressedtcp } protocol-address x121-address x.121-address [ option ] undo x25 map { ip | compressedtcp } protocol-address
View
Interface view
Parameter
ip: Uses IP protocol. compressedtcp: Uses TCP header compression. protocol-address: Network protocol address of the peer host. x.121-address: X.121 address of the peer host. option: Specifies some attributes or user facilities for the address mapping.
Description
Use the x25 map command to set the address mapping between IP address used by LANs and X.121 address. Use the undo x25 map command to delete one existing mapping. By default, no address mapping is set. Since X.25 protocol can multiplex more logical virtual circuits on a physical interface, you need to manually specify the mapping relation between all network addresses and X.121 address. Once you have specified an address mapping, its contents (including protocol address, X.121 address and all options) cannot be changed. To make modifications, you can first delete this address mapping via the undo x25 map command, and then establish a new address mapping. Two or more address mappings with an identical protocol address can not exist on the same X.25 interface. Detailed explanations are as follows: broadcast: Sends any broadcasts of internetworking protocol and the multicast of IP to the destination. This option provides powerful support for some routing protocols (such as Routing Information Protocol). closed-user-group group-number: Number of the closed user group corresponding to this address mapping.
encapsulation-type: Encapsulation type, optional types include nonstandard, ietf, multi-protocol and snap. idle-timer minutes: Maximum idle time for the VC associated with the address mapping. 0 means that the idle time is infinite. no-callin: Disables accepting call to the address mapping. no-callout: Disables call originating from address mapping. packet-size input-packet output-packet: When address mapping is used to originate a call, it will negotiate the maximum packet size in bytes with the peer end. Its value must range from 16 to 4096 (including 16 and 4096), and must be the integer power of 2. reverse-charge-accept: If a call initiated by address mapping carries reverse charging request, to accept the call, this option must be configured in address mapping. reverse-charge-request: Specifies reverse charging request while calling from the address mapping. roa-list name: Specifies an ROA list name configured by the command X25 roa-list in system view for the X.25 interface. send-delay milliseconds: When address mapping is used to originate a call, it carries the maximum transmission delay request. threshold in out: When address mapping is used to originate a call, it negotiates throughput with the peer end. The values of in/out are defined to be 75, 150, 300, 600, 1200, 2400, 4800, 9600, 19200, and 48000. vc-per-map count: Maximum number of VCs associated with the address mapping. window-size input-window-size output-window-size: When address mapping is used to originate a call, it negotiates the window size with the peer end. The values of input-window-size and output-window-size range between 1 and the number that is 1 less than the modulus of the X.25 interface where the address mapping exists (including 1 and modulus minus 1). Related command: display x25 map, x25 reverse-charge-accept, x25 call-facility, x25 timer idle, and x25 vc-per-map.
Example
# Set two address mappings on the X.25 interfaces Serial0/0/0 and Serial1/0/0, respectively, and the four address mappings have different attributes.
[3Com] interface serial 0/0/0 [3Com-Serial0/0/0] x25 map ip 202.38.160.11 x121-address 20112451
reverse-charge-request reverse-charge-accept
[3Com-Serial0/0/0] x25 map ip 202.38.160.138 x121-address 20112450 packet-size 512 512 idle-timer 10 [3Com] interface serial1/0/0 [3Com-Serial1/0/0] x25 map ip 20.30.4.1 x121-address 25112451 window-size 4 4 broadcast [3Com-Serial0/0/0] x25 map ip 20.30.4.8 x121-address 25112450 no-callin
8.1.40 x25 modulo

Syntax
x25 modulo modulus undo x25 modulo
View
Interface view
Parameter
modulus: Modulus, whose value is 8 or 128.
Description
Use the x25 modulo command to set the window modulus of an X.25 interface. Use the undo x25 modulo command to restore its default window modulus. By default, the window modulus of X.25 interface is modulus 8 mode. The slip window is the basis for X.25 traffic control, and the key of the slip window is that the sent packets are numbered cyclically in order and are to be acknowledged by the peer end. The order in numbering refers to the ascending order, like 2, 3, 4, 5, 6 Cyclically means that the numbering starts again from the beginning when a certain number (called modulus) is reached. For example, when the modulus is 8, the numbering goes 4, 5, 6, 7, 0, 1. X.25 defines two numbering modulus: 8 (also called the basic numbering) and 128 (also called extended numbering), and the X.25 of the 3Com routers supports both views. Related command: display interface, x25 call-facility, x25 map, x25 pvc, x25 switch pvc, x25 xot pvc, x25 fr pvc, and x25 window-size.
Example
# Set the modulus on the X.25 interface Serial0/0/0 to 128.
[3Com-Serial0/0/0] x25 modulo 128
8.1.41 x25 packet-size

Syntax
x25 packet-size input-packet output-packet undo packet-size
View
Interface view
Parameter
input-packet: Maximum input packet length in bytes, its value ranges from 16 to 1024 (including 16 and 1024) and must be the integer power of 2. By default, the maximum input packet length of X.25 interface is 128 bytes. output-packet: Maximum output packet length in bytes, its value ranges from 16 to 1024 (including 16 and 1024) and must be the integer power of 2. By default, the maximum output packet length of X.25 interface is 128 bytes.
Description
Use the x25 packet-size command to set the maximum input and output packet lengths of X.25 interface. Use the undo x25 packet-size command to restore their default values. Usually, the X.25 packet-switching network has a limitation of the transmission packet size, and the maximum size of a data packet sent by the DTE shall not exceed this size (otherwise it will trigger the reset of the VC).In this way, the DTE devices at sending end and receiving end are required to have datagram fragmentation and reassembly functions. The DTE device at sending end fragments the datagram with a length exceeding the maximum transmission packet length based on the maximum transmission packet length, and sets M bit in other fragments besides the final fragment. After receiving these fragments, the DTE at the receiving end will reassemble them as a datagram to submit the upper-layer protocol based on the M bit. Please consult users' ISP about this maximum receiving packet length. Normally, the maximum receiving packet length is equivalent to the maximum send packet. Unless users' ISP allows it, please do not set these two parameters to different values. Related command: x25 call-facility, x25 pvc, x25 switch pvc, x25 xot pvc and x25 fr pvc.
Example
# Set the maximum receiving packet length and maximum sending packet length on X.25 interface Serial0/0/0 to 256 bytes.
[3Com-Serial0/0/0] x25 packet-size 256 256
8.1.42 x25 pvc

Syntax
x25 pvc pvc-number protocol-type protocol-address x121-address x.121-address [ option ] undo x25 pvc pvc-number
View
Interface view
Parameter
pvc-number: PVC number, which must range from 1 to 4094 (inclusive), and must be in the PVC channel range. protocol-type: Upper-layer protocol carried over the permanent virtual circuit, which may be IP or compressedtcp. protocol-address: Network protocol address of the peer end of the PVC. x.121-address: X.121 address of the peer end of this PVC. option: Attribute of the PVC.
Description
Use the x25 pvc command to configure one PVC route encapsulated with datagram. Use the undo x25 pvc command to delete this route. By default, no PVC encapsulated with datagram is created. When creating such a PVC, you do not set the relevant attributes for the PVC, its flow control parameters will be the same as that of the X.25 interface on which it resides (the flow control parameters on an X.25 interface can be set by the x25 packet-size and x25 window-size commands). As one corresponding address mapping is impliedly established while establishing the PVC, it is unnecessary (or impossible) to establish address mapping first before establishing PVCs. Before establishing PVCs, users should enable the PVC channel section. The section is between 1 and the latest unprohibited channel section PVC number minus 1 (including 1
and the lowest PVC number minus 1). Naturally, if the lowest PVC number is 1, the PVC section will be disabled naturally. The following table shows some typical PVC sections. Table 8-4 PVC channel section of some typical configurations Incoming-only channel range [0, 0] [0, 0] [1, 10] [5, 10] [0, 0] [0, 0] Two-way channel range [1, 1024] [10, 24] [15, 30] [15, 25] [0, 0] [0, 0] Outgoing-only channel range [0, 0] [0, 0] [0, 0] [30, 32] [20, 45] [0, 0] PVC channel range Disabled [1, 9] Disabled [1, 4] [1, 19] [1, 4094]
Detailed explanations of PVC options are follows: broadcast: Forward broadcast packet to the peer PVC. encapsulation-type: Encapsulation type, which may be nonstandard, ietf, multi-protocol and snap. packet-size input-packet output-packet: Specifies the maximum receiving packet length and maximum sending packet length. The length is counted in byte, which must range from 16 to 4096 (including 16 and 4096), and must be the integer power of 2. window-size input-window-size output-window-size: Specifies the receiving window and transmitting window sizes of the VC, which range between 1 and the number that is 1 less than the modulus of the X.25 interface where the address mapping exists (including 1 and modulus minus 1). Related command: display x25, x25 map.
Example
# Configure the link layer protocol on the interface Serial0/0/0 to X.25, enable PVC channel section, and set two VCs.
[3Com] interface serial 0/0/0 [3Com-Serial0/0/0] link-protocol x25 [3Com-Serial0/0/0] x25 vc-range bi-channel 8,102 4 [3Com-Serial0/0/0] x25 pvc 2 ip 202.38.168.1 x121-address 20112451 broadcast packet-size 512 512 [3Com-Serial0/0/0] x25 pvc 6 ip 202.38.168.3 x121-address 20112453 broadcast window-size 5 5
8.1.43 x25 queue-length

Syntax
x25 queue-length queue-length undo x25 queue-length
View
Interface view
Parameter
queue-length: Queue length in packets, which ranges from 0 to 9999 for the 3Com 5000/6000 Routers. The default queue length on X.25 VC is 200.
Description
Use the x25 queue-length command to set the data queue length on X.25 VC. Use the undo x25 queue-length command to restore its default value. When the data traffic is too heavy, you can use this command to extend the receiving queue and sending queue of the X.25 VC to avoid data loss that may affect transmission performance. It should be noted here that modifying this parameter would not affect the existing data queue of VC. Related command: x25 packet-size
Example
# Set the VC data queue length of the X.25 interface Serial0/0/0 to 75 datagrams.
[3Com-Serial0/0/0] x25 queue-length 75
8.1.44 x25 receive-threshold

Syntax
x25 receive-threshold count undo x25 receive-threshold
View
Interface view
Parameter
count: The number of data packets that can be received before previous acknowledgement, in the range 0 to input window size. If it is set to 0 or the input window size, this function will be disabled. If it is set to 1, X.25 of the 3Com serial routers will send an acknowledgement for each correct packet received. By default, the number of data packets that can be received on X.25 before previous acknowledgement is 0.
Description
Use the x25 receive-threshold command to set the number of receivable maximum packets before X.25 sends the acknowledged packet. Use the undo x25 receive-threshold command to restore its default value. After enabling this function, 3Com routers can send acknowledgement to the peer router upon the receipt of correct packets, even if the input window is not yet full. If there is not much data traffic in users' application environment and users pay more attention to the response speed, they can appropriately adjust this parameter to meet the requirement. Related command: x25 window.
Example
# Specify that each VC on the X.25 interface Serial0/0/0 acknowledges each correctly received data packet.
[3Com-Serial0/0/0] x25 receive-threshold 1
8.1.45 x25 response called-address

Syntax
x25 response called-address undo x25 response called-address
View
Interface view
Parameter
None
Description
Use the x25 response called-address command to enable X.25 to carry the address information of the called DTE in sending call reception packet.
Use the undo x25 response called-address command to disable the above function. By default, this function is disabled. According to X.25, the call receiving packet of a call may or may not carry an address code group, depending on the specific network requirements. This command enables users to easily specify whether the call receiving packet of a call sent by X.25 of the 3Com routers carries the called DTE address. Related command: x25 response calling-address, x25 ignore called-address, and x25 ignore calling-address.
Example
# Specify that the call receiving packet of a call sent from the X.25 interface Serial0/0/0 carries the called DTE address.
[3Com-Serial0/0/0] x25 response called-address
8.1.46 x25 response calling-address

Syntax
x25 response calling-address undo x25 response calling-address
View
Interface view
Parameter
None
Description
Use the x25 response calling-address command to enable X.25 to carry the address information of the calling DTE in sending call reception packet. Use the undo x25 response calling-address command to disable the above function. By default, this function is disabled. According to X.25, the call receiving packet of a call may or may not carry an address code group, depending on the specific network requirements. This command enables users to easily specify whether the call receiving packet of a call sent by X.25 of the 3Com routers carries the calling DTE address. Related command: x25 response called-address, x25 ignore called-address, and x25 ignore calling-address.
Example
# Specify that the call receiving packet of a call sent from the X.25 interface Serial0/0/0 carries the calling DTE address.
[3Com-Serial0/0/0] x25 response calling-address
8.1.47 x25 reverse-charge-accept

Syntax
x25 reverse-charge-accept undo x25 reverse-charge-accept
View
Interface view
Parameter
None
Description
Use the x25 reverse-charge-accept command to enable this interface to accept the call with reverse charging request, the information added by some certain user facilities. Use the undo x25 reverse-charge-accept command to disable this above function. By default, this function is disabled. This function does not affect any call without reverse charging request. If you enable this function on an X.25 interface, all these calls that reach the interface will be accepted. If you enable this function for a certain address mapping by the option reverse-charge-accept in the command x25 map, only such calls that reach the interface and map this address will be accepted, while other calls (carrying reverse charging request, and not mapping this address) will be cleared. Related command: x25 map.
Example
# Set the accepting calls with reverse charging request function on interface Serial0/0/0.
[3Com-Serial0/0/0] x25 reverse-charge-accept
8.1.48 x25 roa-list

Syntax
x25 roa-list roa-name roa-id1 [ , id2, id3.... ] undo x25 roa-list roa-name id1 [ , id2, id3.... ]
View
System view
Parameter
roa-name: Name of ROA. id: ID specified for this ROA, and its value ranges from 0 to 9999. You can specify multiple IDs for the ROA.
Description
Use the x25 roa-list command to define ROA list. Use the undo x25 roa-list command to delete ROA list items. By default, no ROA list is defined. You can configure multiple (0 to 20) ROAs, and each ROA can be specified with multiple(1 to 10) IDs. After configuring ROA, you can cite it by its name in the commands x25 call-facility or x25 map. Related command: x25 call-facility, x25 map.
Example
# Define two ROA lists, and cite them on the interfaces Serial 0/0/0 and Serial 1/0/0.
[3Com] x25 roa-list list1 11 23 45 [3Com] x25 roa-list list2 345 [3Com] interface serial 0/0/0 [3Com-Serial0/0/0] x25 call-facility roa-size list1 [3Com] interface serial 1/0/0 [3Com-Serial0/0/0] x25 call-facility roa-list list2
8.1.49 x25 switch pvc

Syntax
x25 switch pvc pvc-number1 interface serial number pvc pvc-number2 [ option ] undo x25 switch pvc pvc-number1
View
Interface view
Parameter
pvc-number1: PVC number on the input interface, and its value ranges from 1 to 4095. pvc-number2: PVC number on the output interface, and its value ranges from 1 to 4095. number: Number of the output interface. It cannot be a subinterface. option: Attribute of PVC.
Description
Use the x25 switch pvc (packet switching) command to configure one PVC route. Use the undo x25 switch pvc command to delete one PVC route. By default, no PVC route is defined. Based on the X.25 switching configuration, you can use the 3Com Routers as a simple X.25 switch. When PVC switching is configured, the link layer protocols on the input and output interfaces must be X.25. Moreover, the specified PVCs on the two interfaces have been presented and enabled. Note that PVC switching cannot be configured on the X.25 sub-interface. Detailed explanations of PVC options are as follows: broadcast: Forwards broadcast packet to the peer PVC. encapsulation-type: Encapsulation type, which may be nonstandard, ietf, multi-protocol and snap. packet-size input-packet output-packet: Specifies the maximum receiving packet length and maximum sending packet length. The length is counted in byte, which must range from 16 to 4096 (including 16 and 4096), and must be the integer power of 2. window-size input-window-size output-window-size: Specifies the input window and output window sizes of the VC, which range between 1 and the number that is 1 less that the modulus of the X.25 interface where the address mapping exists (including 1 and modulus minus 1). Related command: display x25 vc and x25 switching.
Example
# Perform the packet switching between PVC1 on the Serial0/0/0 and PVC1 on the Serial1/0/0.
[3Com-Serial0/0/0] link-protocol x25 dce ietf
[3Com-Serial0/0/0] interface serial1/0/0 [3Com-Serial0/0/0] link-protocol x25 dce ietf [3Com-Serial1/0/0] x25 switch pvc 1 interface serial 0/0/0 pvc 1
8.1.50 x25 switch svc hunt-group

Syntax
x25 switch svc x.121-address [ sub-dest destination-address ] [ sub-source source-address ] hunt-group hunt-group-name undo x25 switch svc x.121-address [ sub-dest destination-address ] [ sub-source source-address ] hunt-group hunt-group-name
View
System view
Parameter
x.121-address: Destination address of X.121.This parameter consists of mode matching string, and its length ranges from 1 to 15 characters. For the specific description of mode matching see the segment Description. sub-dest destination-address: Substitution destination address. sub-source source-address: Substitution source address. hunt-group-name: Name of hunt group.
Description
Use the x25 switch svc hunt-group command to add an X.25 switching route whose forwarding address is a hunt group. Use the undo x25 switch svc hunt-group command to delete the specified X.25 switching route. By default, no X.25 switching route is configured. After the X.25 switching route whose forwarding address is a hunt group is configured, the relevant X.25 call request packet will be forwarded to different interfaces or XOT channels in the specified hunt group, so as to implement the load sharing under X.25 protocol. Note that you cannot configure SVC on X.25 subinterfaces.
Table 8-5 X.121 mode matching rules Wildcard characters * + ^ $ \char . .* .+ Matching rules Matching zero or more previous characters Matching zero or more previous characters Matching the beginning entered characters of the Example Matchable character string fo, foo, fooo fo, foo, fooo hell, hellaaa hello,
fo* fo+ ^hell ar$ b\+ l.st fo.* fo.+
Matching the end of the entered characters Matching a single character specified by char. Matching arbitrary single character Matching arbitrary zero or more characters. Matching arbitrary one or more characters.
ar, car, hear b+ last, lbst, lost fo, foo, fot foo, fot, foot
Table 8-6 Input rules of X.121 address mode matching string Characters * Input rules Cannot be placed at the beginning of character string Cannot be placed after the symbol ^ Cannot be placed before and after the symbols + and *. Cannot be placed at the beginning of character string + \ ^ Cannot be placed after the symbol ^ Cannot be placed before and after the symbols + and *. Cannot be placed at the end of character string Cannot be placed before the symbols + and *.
Related command: display x25 switch-table svc.
Example
# Add an X.25 switching route, whose destination address is 8888 and forwarding address is the hunt group hg1, and substitute the destination address with 9999.
[3Com] x25 switch svc 111 sub-dest 9999 sub-source 8888 hunt-group hg1
8.1.51 x25 switch svc interface

Syntax
x25 switch svc x.121-address [ sub-dest destination-address ] [ sub-source source-address ] interface serial interface-number undo x25 switch svc x.121-address [ sub-dest destination-address ] [ sub-source source-address ] [ interface serial interface-number ]
View
System view
Parameter
x.121-address: Destination X.121 address, a pattern matching string that is 1 to 30 characters long. number: Outgoing interface number. It cannot be a subinterface. sub-dest destination-address: Substitution destination address. sub-source source-address: Substitution source address.
Description
Use the x25 switch svc interface command to add an X.25 switching route whose forwarding address is a serial interface or Annex G DLCI. Use the undo x25 switch svc xot command to delete the specified X.25 switching route. By default, no X.25 switching route is configured. You can configure the router with X.25 switching to have it function as a simple X.25 switch. Note that on X.25 subinterfaces you cannot configure SVCs. Before using this command enable X.25 switching with the x25 switching command. Related command: x25 switch svc xot, display x25 switch-table, x25 switching.
Example
# Switch SVC 1 to interface Serial 0/0/0 and SVC 2 to interface Serial 1/0/0.
[Router] interface serial 0/0/0 [Router-Serial0/0/0] link-protocol x25 dce ietf [Router-Serial0/0/0] interface serial 1/0/0 [Router-Serial1/0/0] link-protocol x25 dce ietf [Router-Serial1/0/0] quit
[Router] x25 switch svc 1 interface serial 0/0/0 [Router] x25 switch svc 2 interface serial 1/0/0
8.1.52 x25 switch svc xot

Syntax
x25 switch svc x.121-address [ sub-dest destination-address ] [ sub-source source-address ] xot ip-address1 [ ip-address2 ] [ ip-address6 ] [ xot-option ] undo x25 switch svc x.121-address [ sub-dest destination-address ] [ sub-source source-address ] [ xot ip-address1 [ ip-address2 ] [ ip-address6 ] ]
View
System view
Parameter
x.121-address: Destination X.121 address, a pattern matching string that is 1 to 15 characters long. For the specific description of mode matching see Table 8-5 and Table 8-6. sub-dest destination-address: Substitution destination address. sub-source source-address: Substitution source address. ip-address1 - ip-address6: Destination IP address of XOT connection, and up to 6 addresses can be configured. xot-option: XOT channel parameter option. For the specific configuration see Table 8-7.
Description
Use the x25 switch svc xot command to add an X.25 switching route whose forwarding address is XOT channel. Use the undo x25 switch svc xot command to delete the specified X.25 switching route. By default, no X.25 switching route is configured. After configuring the XOT switching command of X.25 SVC, a user can cross IP network from the local X.25 network to implement the interconnection with the remote X.25 network. If a user configures the keepalive attribute, the link detection for XOT will be supported.
Table 8-7 XOT channel parameter option Option timer seconds Description Keepalive timer delay of XOT connection. The timer sends the keepalive packet upon timeout to detect the connection availability. Its value ranges from 1 to 3600. Number of maximum retries of sending keepalive. If the number exceeds times, the XOT connection will be disconnected. Its value ranges from 3 to 3600. Type and number of the interface that initiates the XOT connection.
retry times source interface-type interface-number
Related command: x25 switch svc interface, display x25 switch-table svc, x25 switching.
Example
# Switch SVC 1 to the destination address 10.1.1.1.
[3Com] x25 switch svc 1 xot 10.1.1.1
8.1.53 x25 switching

Syntax
x25 switching undo x25 switching
View
System view
Parameter
None
Description
Use the x25 switching command to enable the X.25 switching function. Use the undo x25 switching command to disable this function, which will not affect the established VC switching function. By default, X.25 packet switching function is disabled.
X.25 packet switching is used to accept packets from an X.25 interface and send them to a certain interface based on the destination information contained in the packets. The Router can be used as a small-sized packet switch by the packet layer switching function. Related command: x25 pvc, x25 switch pvc, x25 xot pvc, x25 fr pvc, x25 switch svc, display x25 vc, display x25 switch-table svc.
Example
# Enable X.25 switching function.
[3Com] x25 switching
8.1.54 x25 timer hold

Syntax
x25 timer hold minutes undo x25 timer hold
View
Interface view
Parameter
minutes: Value of delay time in minutes, and its value ranges from 0 to 1000. If the previous call failed at one destination, the X.25 would not send calls to such a destination again within the time set by this command. By default, the delay time is 0.
Description
Use the x25 timer hold command to set the delay to send calls to a destination with failed calls. Use the undo x25 timer hold command to restore its default value. Frequently sending call requests to a wrong destination (which does not exist or is faulty) will deteriorate the operating efficiency of the 3Com router. The use of this function can avoid this problem to a certain extent. If this parameter is set to 0, it is equal to disabling the function. In addition, this function is only effective to the calls originating from the local. That is to say, this parameter is meaningless when the X.25 operates in switching mode. Related command: display interface.
Example
# Set the parameter of the X.25 interface Serial0/0/0 to 5 minutes.
[3Com-Serial0/0/0] x25 timer hold 5
8.1.55 x25 timer idle

Syntax
x25 timer idle minutes undo x25 timer idle
View
Interface view
Parameter
minutes: Maximum idle time of SVC in minutes, and its value ranges from 0 to 255.By default, this value is 0.
Description
Use the x25 timer idle command to set the maximum idle time of the SVC on the interface. Use the undo x25 timer idle command to restore its default value. When a SVC stays idle (no data transmission) for a certain period (the period length is decided by the parameter), the router will clear this SVC automatically. If this parameter is set to 0, this SVC will be reserved regardless of how long it stays idle. The configuration of this parameter will affect all the SVCs on this X.25 interface. Also, users can set the maximum idle time for a SVC attached to this address mapping through the option in the command x25 map. For PVC or the established SVC for X.25 switching the command will be disabled. Related command: x25 map.
Example
# Set the maximum idle time of the SVC on the interface Serial 0/0/0 to 10 minutes.
[3Com-Serial0/0/0] x25 timer idle 10
8.1.56 x25 timer tx0

Syntax
x25 timer tx0 seconds undo x25 timer tx0
View
Interface view
Parameter
seconds: Delay time for the X.25 restarting timer in seconds. It ranges 0 to 1000. By default, the delay on the X.25 DTE restarting timer is 180 seconds and that on the DCE timer is 60 seconds.
Description
Use the x25 timer tx0 command to set the restart/retransmission timer delay for DTE (or DCE). Use the undo x25 timer tx0 command to restore their default values. According to X.25, a timer should be started when a DTE sends a restart request (or a DCE sends a restart indication). If no peer acknowledgement is received after this timer is timeout, the sending end will take some measures to guarantee the normal proceeding of the local procedure. This parameter specifies the delay time of this timer before the timeout. Related command: x25 timer tx1, x25 timer tx2, and x25 timer tx3.
Example
# Set the restarting timer delay on the X.25 interface Serial0/0/0 to 120 seconds.
[3Com-Serial0/0/0] x25 timer tx0 120

Syntax
View
Interface view
Parameter
seconds: Delay time of calling request (indication) transmission timer in seconds, and its value ranges from 0 to 1000. By default, the delay time on a DTE call timer is 200 seconds; that on a DCE call sending timer is 180 seconds.
Description
Use the x25 timer tx1 command to set calling request (indication) transmission timer delay for DTE (or DCE). Use the undo x25 timer tx1 command to restore its default value. According to X.25, a timer should be started when a DTE sends a call request (or a DCE sends a call indication). If no peer acknowledgement is received after this timer is timeout, the sending end will take some measures to guarantee the normal proceeding of the local procedure. This parameter specifies the delay time of this timer before the timeout. Related command: x25 timer tx0, x25 timer tx2, and x25 timer tx3.
Example
# Set the timer delay on the X.25 interface Serial0/0/0 to 100 seconds.
[3Com-Serial0/0/0] x25 tx1 100

Syntax
View
Interface view
Parameter
seconds: Delay time of resetting request (indication) timer in seconds, and its value ranges from 0 to 1000. By default, the delay time on a DTE reset timer is 180 seconds; that on a DCE reset timer is 60 seconds.
Description
Use the x25 timer tx2 command to set resetting request (indication) transmission timer delay for DTE (or DCE). Use the undo x25 timer tx2 command to restore its default value.
According to X.25, a timer should be started when a DTE sends a reset request (or a DCE sends a reset indication). If no peer acknowledgement is received after this timer is timeout, the sending end will take some measures to guarantee the normal proceeding of the local procedure. This parameter specifies the delay time of this timer before the timeout. Related command: x25 timer tx0, x25 timer tx1, and x25 timer tx3.
Example
# Set the reset timer delay on the X.25 interface Serial0/0/0 to 120 seconds.
[3Com-Serial0/0/0] x25 tx2 120

Syntax
View
Interface view
Parameter
seconds: Delay time of clearing request (indication) transmission timer in seconds, and its value ranges from 0 to 1000. By default, the delay time on a DTE clearing timer is 180 seconds; that on a DCE clearing timer is 60 seconds.
Description
Use the x25 timer tx3 command to set clearing request (indication) transmission timer delay for DTE (or DCE). Use the undo x25 timer tx3 command to restore its default value. According to X.25, a timer should be started when a DTE sends a clear request (or a DCE sends a clear indication). If no peer acknowledgement is received after this timer is timeout, the sending end will take some measures to guarantee the normal proceeding of the local procedure. This parameter specifies the delay time of this timer before the timeout. Related command: x25 timer tx0, x25 timer tx1, and x25 timer tx2.
Example
# Set the delay time of clearing timer on the X.25 interface Serial0/0/0 to 100 seconds.
[3Com-Serial0/0/0] x25 timer tx3 100
8.1.60 x25 vc-per-map

Syntax
x25 vc-per-map count undo x25 vc-per-map
View
Interface view
Parameter
count: Maximum number of VCs, and its value ranges from 1 to 8.By default, its value is 1.
Description
Use the x25 vc-per-map command to set the maximum number of VCs for connections with the same destination device. Use the undo x25 vc-per-map command to restore their default values. If the parameter is greater than 1, and the sending window and the sending queue of VC are full, the system will create a new VC to the same destination. If the new VC cannot be created, the datagram will be discarded. Related command: display interface and x25 map.
Example
# Set the maximum value of VCs on the X.25 interface Serial 0/0/0 to 3.
[3Com-Serial0/0/0] x25 vc-per-map 3
8.1.61 x25 vc-range

Syntax
x25 vc-range [ bi-channel ltc htc ] [ in-channel lic hic ] [ out-channel loc hoc ] undo x25 vc-range
View
Interface view
Parameter
ltc htc: Lowest and highest two-way channels of X.25 VC, and its value ranges from 0 to 4095. If htc (highest two-way channel) is set to 0, ltc (lowest two-way channel) must also be set to 0, which indicates that the two-way channel section is disabled. By default, the htc of X.25 VC is 1024. lic hic: Lowest and highest incoming-only channels of X.25 VC, and its value ranges from 0 to 4095.If hic (highest incoming-only channel) is set to 0, lic (lowest incoming-only channel) must also be set to 0, which indicates that the incoming-only channel section is disabled. By default, the hic in X.25 VC range is 0. loc hoc: Lowest and highest outgoing-only channels of X.25 VC, and its value ranges from 0 to 4095. If hoc (highest outgoing-only channel) is set to 0, loc (lowest outgoing-only channel) must also be set to 0, which indicates that the outgoing-only channel section is disabled. By default, the hoc in X.25 VC range is 0.
Description
Use the x25 vc-range command to set highest and lowest values of X.25 VC range. Use the undo x25 vc-range command to restore their default values. By default, 3Com Router Software X.25 disables incoming-only channel range and outgoing-only channel, and only the two-way channel range (1-1024) is reserved for use. Please set the VC range correctly according to the requirements of the ISP.
Example
# Configure the link layer protocol on the interface Serial 0/0/0 to X.25, enable incoming-only channel section and two-way channel section and disable outgoing only channel section. After executing a series of commands, the three sections are [1, 7], [8, 1024] and [0, 0], respectively.
[3Com] interface serial 0/0/0 [3Com-Serial0/0/0] link-protocol x25 [3Com-Serial0/0/0] x25 vc-range in-channel 1 7 bi-channel 8 1024
8.1.62 x25 window-size

Syntax
x25 window-size input-window-size output-window-size undo x25 window-size
View
Interface view
Parameter
input-window-size: Size of input window. When X.25 window modulus is 8, its value ranges from 1 to 7. When X.25 window modulus is 128, its value ranges from 1 to 127. By default, its value is 2. output-window-size: Size of output window. When X.25 window modulus is 8, its value ranges from 1 to 7. When X.25 window modulus is 128, its value ranges from 1 to 127. By default, its value is 2.
Description
Use the x25 window-size command to set the sizes of input and output windows on the interface X.25. Use the undo x25 window-size command to restore their default values. This parameter in-packets determines the maximum number of correctly received packets before X.25 sends the acknowledgement information. As long as the bandwidth allows, the greater the window size, the higher the transmission efficiency. Out-packets determines the maximum number of data packets sent by X.25 before it receives the correct acknowledgment information. As long as the bandwidth allows, the greater the window size, the higher the transmission efficiency. Please consult users' ISP about the sending and receiving window sizes. Unless supported by the network do not set these two parameters to different values. Related command: display interface, x25 map, x25 pvc, x25 switch pvc, x25 xot pvc, x25 fr pvc, and x25 receive-threshold.
Example
# Set the receiving and sending window sizes on the X.25 interface Serial0/0/0 to 5.
[3Com-Serial0/0/0] x25 window-size 5 5
8.1.63 x25 x121-address

Syntax
x25 x121-address x.121-address undo x25 x121-address
View
Interface view
Parameter
x.121-address: X.121 address of an interface. It is formatted using the numerical string from 1 to 15 bytes.
Description
Use the x25 x121-address command to set the X.121 address of an X.25 interface. Use the undo x25 x121-address command to delete the address. If the Router is accessed to X.25 public packet network, the ISP must assign a valid X.121 address to it. If two Routers are only directly connected back to back, a user can randomly specify the valid X.121 address. If you only want the Router to work in switching mode, the X.121 address does not need to be configured. When you reconfigure an X.121 address for an X.25 interface, you do not need to delete the original X.121 address, because the new address will overwrite the old one. After an X.25 interface is re-configured, the original X.121 address will be deleted. So the X.121 address must be re-configured to work properly. Note: For the format of the X.121 address and the dynamic conversion between IP address and X.121 address please refer to ITU-T Recommendation X.121 and the relative RFC document. Related command: display interface.
Example
# Configure the link layer protocol on the interface Serial 0/0/0 as X.25, and X.121 address as 20112451.
[3Com] interface serial 0/0/0 [3Com-Serial0/0/0] link-protocol x25 [3Com-Serial0/0/0] x25 x121-address 20112451
8.1.64 x25 xot pvc

Syntax
x25 xot pvc pvc-number1 ip-address interface type number pvc pvc-number2 [ xot-option ] [ packet-size input-packet output-packet window-size input-window-size output-window-size ] undo x25 pvc pvc-number1
View
Interface view
Parameter
pvc-number1: Number of PVC on the local interface, in the range 1 to 4095. pvc-number2: Number of PVC on the peer interface, in the range 1 to 4095. ip-address: IP address of the peer destination for connection with XOT. interface type number: Type and number of interface, and the interface type can only be Serial. xot-option: XOT channel parameter option. see the following table. Table 8-8 XOT channel parameter option Option timer seconds Description Keepalive timer delay of XOT connection. The timer sends the keepalive packet upon timeout to detect the connection availability. Its value ranges from 1 to 3600. Number of maximum retries of sending keepalive. If the number exceeds times, the XOT connection will be disconnected. Its value ranges from 3 to 3600. Type and number of the interface that initiates the XOT connection.
retry times source interface-type interface-number
packet-size input-packet output-packet: Specifies the maximum receiving packet length and maximum sending packet length. The length is counted in byte, which must range from 16 to 4096 (including 16 and 4096), and must be the integer power of 2. window-size input-window-size output-window-size: Specifies the receiving window and sending window sizes of the VC, which range between 1 and the number that is 1 less than the modulus of the X.25 interface where the address mapping exists (including 1 and modulus minus 1).
Description
Use the x25 xot pvc command to add a PVC route of XOT. Use the undo x25 pvc command to delete the specified PVC route of XOT. By default, no PVC route is configured.
After configuring the XOT switching command of X.25 PVC, a user can cross IP network from the local X.25 network to implement the interconnection with the remote X.25 network. If a user configures the keepalive attribute, the link detection for XOT will be supported. Related command: display x25 vc and x25 switching.
Example
# Connect PVC1 on the interface Serial0/0/0(10.1.1.1) of Router RTA with PVC2 on the interface Serial1/0/0(10.1.1.2) of Router RTB via XOT tunnel, and then perform packet switching. # Perform the configurations on the Router RTA.
[3Com-Serial0/0/0] ip address 10.1.1.1 255.255.255.0 [3Com-Serial0/0/0] link-protocol x25 dce ietf [3Com-Serial0/0/0] x25 xot pvc 1 10.1.1.2 interface serial 1/0/0 pvc 2
# Perform the configurations on the Router RTB.

[3Com-Serial1/0/0] ip address 10.1.1.2 255.255.255.0 [3Com-Serial0/0/0] link-protocol x25 dce ietf [3Com-Serial1/0/0] x25 xot pvc 2 10.1.1.1 interface serial 0/0/0 pvc 1
8.1.65 x29 timer inviteclear-time

Syntax
x29 timer inviteclear-time seconds undo x29 timer inviteclear-time
View
System view
Parameter
seconds: Delay time in seconds, in the range 5 to 2147483. The delay of waiting for response after inviting PAD clear procedure, its default value is 5.
Description
Use the x29 timer inviteclear-time command to set the delay to wait for a response after inviting PAD clear procedure. After exceeding the time, the system will forcedly exit from the PAC connection and start x.25 clear procedure. Use the undo x29 timer inviteclear-time command to restore the default.
Example
# Set the parameter of X.29 to 10 seconds.
[3Com] x29 timer inviteclear-time 10
Chapter 9 Bridge Configuration Commands

9.1 Bridge Configuration Commands
9.1.1 bridge aging-time
Syntax
bridge aging-time seconds undo bridge aging-time
View
System view
Parameter
seconds: Aging time of the dynamic address table, in the range 10 to 1000000 seconds. By default, the aging time of a dynamic address table is 300 seconds.
Description
Use the bridge aging-time command to configure the aging time of the dynamic address table. Use the undo bridge aging-time command to restore the default aging time of the dynamic address table. Upon the timeout of the timer, the dynamic address entries will be deleted.
Example
# Configure the aging time of the dynamic address table to 500 seconds.
[3Com] bridge aging-time 500
9.1.2 bridge bridge-set enable

Syntax
bridge bridge-set enable undo bridge bridge-set enable
View
System view
Parameter
bridge-set: Bridge-set number, an integer in the range 1 to 255.
Description
Use the bridge bridge-set enable command to enable the specified bridge set. Use the undo bridge bridge-set enable command to disable the specified bridge set.
Example
# Enable bridge-set 1.
[Router] bridge 1 enable
9.1.3 bridge bridging

Syntax
bridge bridge-set bridging { ip | ipx } undo bridge bridge-set bridging { ip | ipx }
View
System view
Parameter
bridge-set: Bridge set number, in the range 1 to 255. ip: Internet Protocol. ipx: Internet Packet Exchange Protocol.
Description
Use the bridge bridging command to enable the bridging function of a network layer protocol on a specified bridge set. Use the undo bridge bridging command to disable the bridging function of a network layer protocol on specified bridge set. By default, the bridging function is enabled. The packets that cannot be routed will be discarded when the bridging function of the IP or IPX protocol is disabled on a bridge set.
Example
# Disable the bridging function of the IP protocol from bridge 1.
[3Com] undo bridge 1 bridging ip
# Enable the bridging function of the IP protocol on bridge 1.

[3Com] bridge 1 bridging ip
9.1.4 bridge enable

Syntax
bridge enable undo bridge enable
View
System view
Parameter
None
Description
Use the bridge enable command to enable the bridging function. Use the undo bridge enable command to disable the bridging function. By default, the bridging function is disabled. Only after the bridging function is enabled can the configuration of a bridge be valid.
Example
# Disable the bridging function.
[3Com] undo bridge enable
9.1.5 bridge learning

Syntax
bridge bridge-set learning undo bridge bridge-set learning
View
System view
Parameter
bridge-set: Bridge set number which the interface belongs to; an integer in the range 1 to 255.
Description
Use the bridge learning command to enable forwarding by dynamic address table. Use the undo bridge learning command to disable forwarding by dynamic address table and forward by static address table only. By default, the dynamic address table is used in forwarding. The dynamic address table does not require manual maintenance, as it is automatically refreshed whenever the network topology changes.
Example
# Enable dynamic MAC address learning.
[3Com] bridge 1 learning
9.1.6 bridge mac-address

Syntax
bridge bridge-set mac-address mac-address { permit | deny } [ interface interface-type interface-number | dlsw ] [ dynamic | static ] undo bridge bridge-set mac-address mac-address [ interface ethernet interface-number ]
View
System view
Parameter
bridge-set: Bridge set number which the interface belongs to; an integer in the range 1 to 255. mac-address: Ethernet MAC address in the xxxx-xxxx-xxxx format, which is used to match the source addresses or destination addresses in an Ethernet. deny: Discard the frames whose source address or destination address is the specified address on the specified interface. permit: Forward the frames whose source address or destination address is the specified address on the specified interface.
interface: Specify an outbound interface. interface-type: Interface type. interface-number: Interface number. dlsw: The output interface is DLSW module. dynamic: Dynamic MAC address entry. static: Static MAC address entry.
Description
Use the bridge mac-address command to manually configure a static/ dynamic address table entry of bridge. Use the undo bridge mac-address command to delete the static/ dynamic address entry. Normally, an address table is generated according to the mapping relationship between the acquired MAC addresses and the interfaces. The static address entries in the bridging address table, however, are manually configured and maintained by administrators and will never age.
Example
# Enable the interface Ethernet 0/0/0 to forward the frames with MAC address 0000-0000-0111.
[3Com] bridge 1 mac-address 0000-0000-0111 permit interface ethernet 0/0/0
9.1.7 bridge routing

Syntax
bridge bridge-set routing { ip | ipx } undo bridge bridge-set routing { ip | ipx }
View
System view
Parameter
bridge-set: Bridge-set number in the range 1 to 255. ip: IP ipx: IPX
Description
Use the bridge routing command to enable the routing function of a specified bridge-set for the specified network protocol. Use the undo bridge routing command to disable the routing function of the bridge-set for the specified network protocol. By default, the routing function is disabled. When a bridge is configured to route for a particular network protocol, the PDUs of the protocol are routed if needed.
Example
# Enable IP routing in bridge-set 1.
[Router]bridge 1 routing ip
9.1.8 bridge routing-enable

Syntax
bridge routing-enable undo bridge routing-enable
View
System view
Parameter
None
Description
Use the bridge routing-enable command to enable the routing function of the bridge. Use the undo bridge routing-enable command to disable the routing function of the bridge. By default, the routing function of the bridge is disabled. The routing function for a protocol can be implemented only when routing is enabled on the bridge.
Example
# Enable routing on the bridge.
[Router] bridge routing-enable
9.1.9 bridge-set
Syntax
bridge-set bridge-set undo bridge-set bridge-set
View
Interface view
Parameter
bridge-set: Bridge set number; an integer in the range 1 to 255.
Description
Use the bridge set command to add an interface to a bridge set. Use the undo bridge set command to delete the interface from the bridge set. By default, no interface is added to the bridge set. Bridging can only be implemented between interfaces of the same bridge set.
Example
# Add Ethernet0/0/0 to bridge set 1.
[3Com] interface ethernet0/0/0 [3Com-Ethernet0/0/0] bridge-set 1
9.1.10 debugging bridge

Syntax
debugging bridge eth-forwarding [ dlsw | interface interface-type interface-number ] undo debugging bridge eth-forwarding [ dlsw | interface interface-type interface-number ]
View
User view
Parameter
Description
Use the debugging bridge command to enable the debugging function of a bridge set. Use the undo debugging bridge command to disable the debugging function.
Example
# Enable the debugging function of the bridge set.
<3Com> debugging bridge eth-forwarding
9.1.11 display bridge address-table

Syntax
display bridge address-table [ bridge-set bridge-set | interface interface-type interface-number | mac mac-address | dlsw ] [ dynamic | static ]
View
Any view
Parameter
bridge-set: Bridge set number, in the range 1 to 255. interface-type: Interface type. interface-number: Interface number. mac-address: MAC address, a group of numbers in hex with the form of xxxx-xxxx-xxxx. dlsw: Displays the MAC address table of DLSW. dynamic: Displays dynamic address entries. static: Displays static address scanning entries.
Description
Use the display bridge address-table command to view the information of MAC address forwarding table.
Example
# Display all the static table entries in the address table.
[3Com] display bridge address-table static
# Display the dynamic address entry with MAC address 1-1-1.

[3Com] display bridge address-table mac 1-1-1 dynamic
The information displayed, and to be described in the following table is:

Mac-address Set Flag meaning: Flag Aging-time P--PERMIT Receive Send Interface-name S--STATIC
N--DENY
D--DYNAMIC
Table 9-1 Description on the fields of the display bridge address-table command Field Mac-Address Set MAC address Bridge set number Four options available: P--PERMIT, N--DENY, D--DYNAMIC and S--STATIC Flag P refers to the "permit" rule in the MAC address filtering; N refers to the "deny" rule in the MAC address filtering; D refers to an dynamic entry; S refers to a static entry. Aging-time Receive Send Interface-name Time a forwarding table entry has existed. Number of Packets number received with this destination MAC address Number of Packets sent to this destination MAC address Name of the outbound interface Description
9.1.12 display bridge information

Syntax
display bridge information [ bridge-set bridge-set ]
View
Any view
Parameter
bridge-set: Bridge set number, in the range 1 to 255.
Description
Use the display bridge information command to view the information of one or all the enabled bridge sets in bridge module.
Example
# Display the information of all the enabled bridge sets.
<3Com> display bridge information Bridge module is activated,4 port take part in bridge module at all; Address table has 0 item, with 0 static one; life cycle is 100 (s).
Bridge set 1: Configure: bridge ip; undo bridge ipx; bridge 1 learning;
interface:
Ethernet4/2/0 :up Ethernet5/2/0 :up
total 2 interface(s) in the set
Bridge set 2: Configure: bridge ip; undo bridge ipx; undo bridge 2 learning ;
interface:
Ethernet4/2/0.1 :up Ethernet5/2/0.1 :up
total 2 interface(s) in the set
From the output information to see that the two bridge sets (bridge sets 1 and 2) are active. Each comprises configure- and interface-related information. For description of the information, see: Table 9-2 Description of the output information of display bridge information command Field Description This section records the configuration attributes of the bridge set. For example, the configure section of bridge set 1 tells that it can bridge IP packet but not IPX packet, and can perform dynamic MAC address learning.
Configure
Interface
This section records the interfaces contained in the bridge set and their statuses. For example, the interface section of bridge set 1 tells that there are two interfaces in bridging: Ethernet4/2/0 and Ethernet5/2/0, both in up status. Here, UP indicates the activated status of an interface and DOWN the inactivated. Only when the interface is in up status, can a bridge set implement bridging function.
9.1.13 display bridge traffic

Syntax
display bridge traffic [ bridge-set bridge-set | interface interface-type interface-number | dlsw ]
View
Any view
Parameter
bridge-set: Bridge set number, in the range 1 to 255. interface-type: Interface type. interface-number: Interface number. dlsw: Display the information of the traffic through DLSW module.
Description
Use the display bridge traffic command to view the traffic statistics on an interface.
Example
# Display the traffic information on Ethernet0/0/0.
[3Com] display bridge traffic interface ethernet 0/0/0
The information displayed and described in the following table is:

the statistic of interface Ethernet0/0/0 in bridge set 1 : Input: 10 total, 1 bpdu, 2 single, 0 multi, 0 broadcast; 0 ip,0 ipx, 0 other protocol; 0 eth2, 0 snap, 0 dlsw, 0 other, 0 vlan;

Output: 0 total, 0 bpdu, 0 single, 0 multi, 0 broadcast; 0 ip, 0 ipx, 0 other protocol; 0 eth2, 0 snap, 0 dlsw, 0 other, 0 vlan;
Send Way: 0 broadcast, 0 fast, 0 other
Discard: 0 by inport state, 0 for local frame , 0 by mac table, 0 by inport filter, 0 by outport filter, 0 by ip filter , 0 other
Table 9-3 Description of the output information of display bridge traffic command Field Input Output Send way Discard 0 by inport state 0 for local frame 0 by table mac Description Type and quantity of input packets on the interface. 10 total,1bpdu, 2 single indicates there are totally 10 data packets input, with 1 BPDU packet and 2 single broadcast packets. Type and quantity of output packets on the interface. Way of data transmission. Reason for discarding and quantity of discarded packets. Frames discarded due to the abnormal in-port state. Frames discarded as the out-port is also the in-port. Frames discarded due to the "deny" entry configured in MAC forwarding table. Frames discarded due to the filter rule configured on the in-port. Frames discarded due to the filter rule configured on the out-port. Frames discarded due to the filter rule configured at the IP layer.
0 by inport filter 0 by outport filter 0 by ip filter
Field 0 other
Description Frames discarded due to other reasons.
9.1.14 display firewall ethernet-frame-filter

Syntax
display firewall ethernet-frame-filter { all | dlsw | interface interface-type interface-number }
View
Any view
Parameter
interface-type: Interface type. interface-number: Interface number. all: Firewall statistics on all the interfaces. dlsw: Firewall statistics when data traffic passes DLSW module.
Description
Use the display firewall ethernet-frame-filter command to view the filtering statistics by ACL on the interface, namely, the detailed filtering information based on the ACL configured via the firewall ethernet-frame-filter { acl-number | acl-name } { inbound | outbound } command.
Example
# Display firewall statistics on the interface Ethernet0/0/0.
[3Com] display firewall ethernet-frame-filter interface e0/0/0 Interface: Ethernet0/0/0 In-bound Policy: acl nameacl From 2003-06-07 14:46:59 to 2003-06-07 16:16:23
0 packets, 0 bytes, 0% permitted, 0 packets, 0 bytes, 0% denied, 0 packets, 0 bytes, 0% permitted default, 0 packets, 0 bytes, 0% denied default, Totally 0 packets, 0 bytes, 0% permitted, Totally 0 packets, 0 bytes, 0% denied.

Out-bound Policy: acl 4000 From 2003-06-07 15:59:23
to 2003-06-07 16:16:23
0 packets, 0 bytes, 0% permitted, 0 packets, 0 bytes, 0% denied, 0 packets, 0 bytes, 0% permitted default, 0 packets, 0 bytes, 0% denied default, Totally 0 packets, 0 bytes, 0% permitted, Totally 0 packets, 0 bytes, 0% denied.
The information is explained in the table below: Table 9-4 Description of the output information of display firewall ethernet-frame-filter command Field Interface: Ethernet0/0/0 In-bound Policy Out-bound Policy Interface name. It indicates that In-bound ACL rules are configured on the interface. Behind the colon is the ACL number or name. It indicates that Out-bound ACL rules are configured on the interface, Behind the colon is the ACL number or name. Description
9.1.15 dlsw ethernet-frame-filter

Syntax
dlsw ethernet-frame-filter acl-number { inbound | outbound } undo dlsw ethernet-frame-filter acl-number { inbound | outbound }
View
System view
Parameter
acl-number: Number of an extended Access Control List.
Description
Use the dlsw ethernet-frame-filter command to apply an ACL in the transmitting and receiving directions of DLSW module towards bridge module so that it can transmit and receive only the Ethernet frames with permitted source MAC addresses.
Use the undo dlsw ethernet-frame-filter command to delete the MAC-address-based ACL applied in the transmitting or receiving direction. For more information on MAC-based ACLs refer to the security part of this manual. Related command: acl.
Example
# Configure filtering rule (ACL 4000) in the receiving direction of DLSW module.
[3Com] dlsw ethernet-frame-filter 4000 inbound
9.1.16 firewall ethernet-frame-filter

Syntax
firewall ethernet-frame-filter acl-number { inbound | outbound } undo firewall ethernet-frame-filter acl-number { inbound | outbound }
View
Parameter
acl-number: Number of an extended Access Control List.
Description
Use the firewall ethernet-frame-filter command to apply an ACL on a specified interface so that it can transmit and receive only the Ethernet frames with permitted MAC addresses. Use the undo firewall ethernet-frame-filter command to delete the MAC-address-based ACL. For more information on MAC-based ACLs refer to the security part of this manual. Related command: acl.
Example
# Configure filtering rule (ACL 4000) in the receiving direction on the interface Ethernet0/0/0.
[3Com-Etherhet0/0/0] firewall ethernet-frame-filter 4000 inbound
9.1.17 fr map bridge

Syntax
fr map bridge dlci broadcast undo fr map bridge dlci
View
Interface view
Parameter
dlci: Local VC number in the range 16 to 1007. broadcast: Specifies the broadcast attribute of the map.
Description
Use the fr map bridge command to add a bridge-set to frame relay map entry. Use the undo fr map bridge command to delete a bridge-set to frame relay map entry. By default, no bridge-set to frame relay map is configured. Related command: display fr map.
Example
# On the interface Serial1/0/0, configure a bridge-set to frame relay map entry on the VC with DLCI 50.
[3Com-Serial1/0/0] fr map bridge 50 broadcast
9.1.18 interface bridge-template

Syntax
interface bridge-template bridge-set undo interface bridge-template bridge-set
View
System view
Parameter
bridge-set: Bridge set number, an integer in the range 1 to 255.
Description
Use the interface bridge-template command to create a bridge template interface, connecting the specified bridge set to the routing network. Use the undo interface bridge-template command to delete the bridge template interface. Each bridge set can have only one bridge template interface. Related command: bridge routing-enable.
Example
# Create interface bridge-template 1.
[Router] interface bridge-template 1 [3Com-Bridge-template1]
9.1.19 reset bridge address-table

Syntax
reset bridge address-table [ bridge-set bridge-set | interface interface-type interface-number ]
View
User view
Parameter
bridge-set: Bridge set number, an integer in the range 1 to 255. interface-type: Interface type. interface-number: Interface number.
Description
Use the reset bridge command to clear all the dynamic address entries or the entries of a specified bridge set or a specified interface in the forwarding table.
Example
# Clear all the dynamic address entries pf bridge set 1 in the forwarding table.
<3Com> reset bridge address-table bridge-set 1
9.1.20 reset bridge traffic

Syntax
reset bridge traffic [ bridge-set bridge-set | interface interface-type interface-number | dlsw ]
View
User view
Parameter
bridge-set: Bridge set number, in the range 1 to 255. interface-type: Interface type. interface-number: Interface number. dlsw: Displays the information of traffic passing DLSW module.
Description
Use the reset bridge traffic command to clear the traffic statistics of a bridge set on a interface.
Example
# Clear the traffic statistics of bridge set 1.
<3Com> reset bridge traffic bridge-set 1
9.1.21 reset firewall ethernet-frame-filter

Syntax
reset firewall ethernet-frame-filter { all | dlsw | interface interface-type
interfacenumber }
View
User view
Parameter
all: Statistics of all ACLs. dlsw: Statistics about DLSw on the firewall. interface-type: Interface type. interface-number: Interface number.
Description
Use the reset firewall ethernet-frame-filter command to clear the ACL-based firewall statistics.
Example
# Clear firewall statistics of all ACLs.
<3Com> reset firewall ethernet-frame-filter all
9.1.22 x25 map bridge

Syntax
x25 map bridge x121-address x.121-address broadcast undo x25 map bridge x121-address x.121-address
View
Interface view
Parameter
x121-address x.121-address: Remote X.121 address. broadcast: Sends broadcast packets to the X.25 destination.
Description
Use the x25 map bridge command to map an X.121 address to a bridge-set. Use the undo x25 map bridge command to delete the configured map entry. By default, no bridge-set to X.25 map is configured. Related command: display x25 map.
Example
# Configure a map entry on the X.25 interface Serial0/0/0.
[3Com] interface serial 0/0/0 [3Com-Serial0/0/0] x25 map bridge x121-address 20112451 broadcast
Command Reference Guide Network Protocol v2.30 Router Software
Table of Contents
Table of Contents
Chapter 1 IP Address Configuration Commands....................................................................... 1-1 1.1 IP Address Configuration Commands ............................................................................... 1-1 1.1.1 ip address................................................................................................................ 1-1 1.1.2 ip address ppp-negotiate......................................................................................... 1-2 1.1.3 ip address unnumbered .......................................................................................... 1-3 1.1.4 remote address ....................................................................................................... 1-4 Chapter 2 IP Application Configuration Commands ................................................................. 2-1 2.1 ARP Configuration Commands.......................................................................................... 2-1 2.1.1 arp static.................................................................................................................. 2-1 2.1.2 arp check enable ..................................................................................................... 2-2 2.1.3 debugging arp packet.............................................................................................. 2-2 2.1.4 display arp ............................................................................................................... 2-3 2.1.5 naturemask-arp ....................................................................................................... 2-4 2.1.6 reset arp .................................................................................................................. 2-5 2.2 Proxy ARP Configuration Commands ............................................................................... 2-5 2.2.1 arp-proxy enable ..................................................................................................... 2-5 2.3 Static Domain Name Resolution........................................................................................ 2-6 2.3.1 display ip host.......................................................................................................... 2-6 2.3.2 ip host...................................................................................................................... 2-7 2.4 DNS Client Configuration Commands ............................................................................... 2-8 2.4.1 debugging dns......................................................................................................... 2-8 2.4.2 dns resolve .............................................................................................................. 2-8 2.4.3 dns server................................................................................................................ 2-9 2.4.4 dns domain............................................................................................................ 2-10 2.4.5 display dns domain ............................................................................................... 2-10 2.4.6 display dns server ................................................................................................. 2-11 2.4.7 display dns dynamic-host...................................................................................... 2-12 2.4.8 nslookup type ........................................................................................................ 2-13 2.4.9 reset dns dynamic-host ......................................................................................... 2-14 2.5 URPF Configuration Commands ..................................................................................... 2-14 2.5.1 ip urpf .................................................................................................................... 2-14 2.5.2 debugging ip urpf .................................................................................................. 2-15 Chapter 3 UDP Helper Configuration Commands...................................................................... 3-1 3.1 UDP Helper Configuration Commands.............................................................................. 3-1
3Com Corporation i
Table of Contents
3.1.1 debugging udp-helper ............................................................................................. 3-1 3.1.2 display udp-helper server........................................................................................ 3-1 3.1.3 udp-helper enable ................................................................................................... 3-2 3.1.4 udp-helper port ........................................................................................................ 3-3 3.1.5 udp-helper server .................................................................................................... 3-3 Chapter 4 BOOTP Client Configuration Commands.................................................................. 4-1 4.1 BOOTP Client Configuration Command............................................................................ 4-1 4.1.1 ip address bootp-alloc ............................................................................................. 4-1 Chapter 5 DHCP Configuration Commands ............................................................................... 5-1 5.1 DHCP Public Configuration Commands............................................................................ 5-1 5.1.1 dhcp enable............................................................................................................. 5-1 5.1.2 dhcp select (in Interface View) ................................................................................ 5-2 5.1.3 dhcp select (in System View) .................................................................................. 5-2 5.1.4 dhcp server detect................................................................................................... 5-3 5.2 DHCP Server Configuration Commands ........................................................................... 5-4 5.2.1 debugging dhcp server............................................................................................ 5-4 5.2.2 dhcp server dns-list ................................................................................................. 5-6 5.2.3 dhcp server dns-list interface (in System View) ...................................................... 5-6 5.2.4 dhcp server domain-name (in Interface View) ........................................................ 5-7 5.2.5 dhcp server domain-name (in System View) .......................................................... 5-8 5.2.6 dhcp server expired (in Interface View) .................................................................. 5-9 5.2.7 dhcp server expired interface (in System View).................................................... 5-10 5.2.8 dhcp server forbidden-ip ....................................................................................... 5-11 5.2.9 dhcp server ip-pool................................................................................................ 5-12 5.2.10 dhcp server nbns-list (in Interface View)............................................................. 5-13 5.2.11 dhcp server nbns-list (in System View)............................................................... 5-14 5.2.12 dhcp server netbios-type (in Interface View)....................................................... 5-15 5.2.13 dhcp server netbios-type (in System View)......................................................... 5-16 5.2.14 dhcp server option (in Interface View) ................................................................ 5-17 5.2.15 dhcp server option interface (in System View).................................................... 5-18 5.2.16 dhcp server ping.................................................................................................. 5-19 5.2.17 dhcp server static-bind ........................................................................................ 5-20 5.2.18 display dhcp server conflict ................................................................................. 5-20 5.2.19 display dhcp server expired ................................................................................ 5-21 5.2.20 display dhcp server free-ip .................................................................................. 5-22 5.2.21 display dhcp server ip-in-use .............................................................................. 5-23 5.2.22 display dhcp server statistics .............................................................................. 5-24 5.2.23 display dhcp server tree ...................................................................................... 5-26 5.2.24 dns-list ................................................................................................................. 5-29
3Com Corporation ii
Table of Contents
5.2.25 domain-name ...................................................................................................... 5-30 5.2.26 expired................................................................................................................. 5-31 5.2.27 gateway-list ......................................................................................................... 5-32 5.2.28 nbns-list ............................................................................................................... 5-32 5.2.29 netbios-type......................................................................................................... 5-33 5.2.30 network................................................................................................................ 5-34 5.2.31 option................................................................................................................... 5-35 5.2.32 reset dhcp server conflict .................................................................................... 5-36 5.2.33 reset dhcp server ip-in-use.................................................................................. 5-36 5.2.34 reset dhcp server statistics.................................................................................. 5-37 5.2.35 static-bind ip-address .......................................................................................... 5-38 5.2.36 static-bind mac-address ...................................................................................... 5-38 5.3 DHCP Client Configuration Commands .......................................................................... 5-39 5.3.1 debugging dhcp client ........................................................................................... 5-39 5.3.2 display dhcp client................................................................................................. 5-40 5.3.3 ip address dhcp-alloc ............................................................................................ 5-42 5.4 DHCP Relay Configuration Commands .......................................................................... 5-43 5.4.1 debugging dhcp relay............................................................................................ 5-43 5.4.2 dhcp relay release................................................................................................. 5-44 5.4.3 display dhcp relay address.................................................................................... 5-44 5.4.4 display dhcp relay statistics................................................................................... 5-45 5.4.5 ip relay address ..................................................................................................... 5-46 5.4.6 ip relay address cycle............................................................................................ 5-47 5.4.7 ip relay address interface ...................................................................................... 5-48 5.4.8 reset dhcp relay statistics...................................................................................... 5-49 Chapter 6 IP Performance Configuration Commands ............................................................... 6-1 6.1 IP Performance Configuration Commands........................................................................ 6-1 6.1.1 debugging ip............................................................................................................ 6-1 6.1.2 debugging tcp event................................................................................................ 6-2 6.1.3 debugging tcp md5.................................................................................................. 6-4 6.1.4 debugging tcp packet .............................................................................................. 6-4 6.1.5 debugging udp packet............................................................................................. 6-5 6.1.6 display fib ................................................................................................................ 6-6 6.1.7 display fib acl........................................................................................................... 6-7 6.1.8 display fib begin....................................................................................................... 6-8 6.1.9 display fib ip-prefix .................................................................................................. 6-9 6.1.10 display fib longer ................................................................................................. 6-10 6.1.11 display fib statistics ............................................................................................. 6-11 6.1.12 display icmp statistics.......................................................................................... 6-12
Table of Contents
6.1.13 display ip fast-forwarding cache.......................................................................... 6-13 6.1.14 display ip interface .............................................................................................. 6-14 6.1.15 display ip interface brief ...................................................................................... 6-15 6.1.16 display ip socket.................................................................................................. 6-16 6.1.17 display ip statistics .............................................................................................. 6-18 6.1.18 display tcp statistics ............................................................................................ 6-19 6.1.19 display tcp status................................................................................................. 6-22 6.1.20 display udp statistics ........................................................................................... 6-22 6.1.21 ip fast-forwarding................................................................................................. 6-24 6.1.22 reset ip fast-forwarding cache ............................................................................. 6-25 6.1.23 reset ip statistics.................................................................................................. 6-25 6.1.24 reset tcp statistics................................................................................................ 6-26 6.1.25 reset udp statistics .............................................................................................. 6-27 6.1.26 tcp mss ................................................................................................................ 6-27 6.1.27 tcp timer fin-timeout............................................................................................. 6-28 6.1.28 tcp timer syn-timeout........................................................................................... 6-29 6.1.29 tcp window........................................................................................................... 6-29 Chapter 7 NAT Configuration Commands .................................................................................. 7-1 7.1 NAT Configuration Commands.......................................................................................... 7-1 7.1.1 debugging nat.......................................................................................................... 7-1 7.1.2 display nat ............................................................................................................... 7-1 7.1.3 nat address-group ................................................................................................... 7-3 7.1.4 nat aging-time.......................................................................................................... 7-4 7.1.5 nat outbound ........................................................................................................... 7-5 7.1.6 nat outbound static.................................................................................................. 7-7 7.1.7 nat server ................................................................................................................ 7-7 7.1.8 nat static ................................................................................................................ 7-10 7.1.9 reset nat ................................................................................................................ 7-10 Chapter 8 IP Unicast Policy Routing Configuration Commands.............................................. 8-1 8.1 IP Unicast Policy Routing Configuration Commands ........................................................ 8-1 8.1.1 apply default output-interface.................................................................................. 8-1 8.1.2 apply ip-address default next-hop ........................................................................... 8-2 8.1.3 apply ip-address next-hop....................................................................................... 8-2 8.1.4 apply ip-precedence................................................................................................ 8-3 8.1.5 apply output-interface.............................................................................................. 8-4 8.1.6 display ip policy ....................................................................................................... 8-5 8.1.7 display ip policy setup ............................................................................................. 8-6 8.1.8 display ip policy statistic .......................................................................................... 8-6 8.1.9 if-match acl .............................................................................................................. 8-7
3Com Corporation iv
Table of Contents
8.1.10 if-match packet-length........................................................................................... 8-8 8.1.11 ip local policy route-policy ..................................................................................... 8-9 8.1.12 ip policy route-policy.............................................................................................. 8-9 Chapter 9 IP Multicast Policy Routing Configuration Commands ........................................... 9-1 9.1 IP Multicast Policy Routing Configuration Commands ...................................................... 9-1 9.1.1 apply ip-address next-hop....................................................................................... 9-1 9.1.2 apply output-interface.............................................................................................. 9-2 9.1.3 debugging ip multicast-policy .................................................................................. 9-3 9.1.4 display ip multicast-policy........................................................................................ 9-3 9.1.5 if-match acl .............................................................................................................. 9-4 9.1.6 ip multicast-policy route-policy ................................................................................ 9-5 9.1.7 route-policy.............................................................................................................. 9-6 Chapter 10 IPX Configuration Commands................................................................................ 10-1 10.1 IPX Configuration Commands ....................................................................................... 10-1 10.1.1 debugging ipx packet .......................................................................................... 10-1 10.1.2 debugging ipx ping .............................................................................................. 10-2 10.1.3 debugging ipx rip................................................................................................. 10-3 10.1.4 debugging ipx rtpro-flash..................................................................................... 10-4 10.1.5 debugging ipx rtpro-interface .............................................................................. 10-5 10.1.6 debugging ipx rtpro-routing ................................................................................. 10-7 10.1.7 debugging ipx sap packet ................................................................................... 10-8 10.1.8 display ipx interface............................................................................................. 10-9 10.1.9 display ipx routing-table .................................................................................... 10-12 10.1.10 display ipx routing-table statistics.................................................................... 10-14 10.1.11 display ipx service-table .................................................................................. 10-15 10.1.12 display ipx statistics......................................................................................... 10-17 10.1.13 ipx enable ........................................................................................................ 10-19 10.1.14 ipx encapsulation ............................................................................................ 10-20 10.1.15 ipx netbios-propagation................................................................................... 10-21 10.1.16 ipx network ...................................................................................................... 10-22 10.1.17 ipx rip import-route .......................................................................................... 10-23 10.1.18 ipx rip mtu........................................................................................................ 10-23 10.1.19 ipx rip multiplier ............................................................................................... 10-24 10.1.20 ipx rip timer update.......................................................................................... 10-25 10.1.21 ipx route........................................................................................................... 10-26 10.1.22 ipx route load-balance-path............................................................................. 10-27 10.1.23 ipx route max-reserve-path ............................................................................. 10-28 10.1.24 ipx sap disable ................................................................................................ 10-28 10.1.25 ipx sap gns-disable-reply ................................................................................ 10-29
3Com Corporation v
Table of Contents
10.1.26 ipx sap gns-load-balance ................................................................................ 10-30 10.1.27 ipx sap max-reserve-servers........................................................................... 10-31 10.1.28 ipx sap mtu ...................................................................................................... 10-31 10.1.29 ipx sap multiplier ............................................................................................. 10-32 10.1.30 ipx sap timer update........................................................................................ 10-33 10.1.31 ipx service ....................................................................................................... 10-33 10.1.32 ipx split-horizon ............................................................................................... 10-35 10.1.33 ipx tick ............................................................................................................. 10-35 10.1.34 ipx update-change-only................................................................................... 10-36 10.1.35 ping ipx ............................................................................................................ 10-37 10.1.36 reset ipx statistics............................................................................................ 10-38 10.1.37 reset ipx routing-table statistics....................................................................... 10-38 Chapter 11 DLSw Configuration Commands ........................................................................... 11-1 11.1 DLSw Configuration Commands ................................................................................... 11-1 11.1.1 bridge-set (in synchronous serial interface view)................................................ 11-1 11.1.2 bridge-set (in Ethernet Interface view) ................................................................ 11-2 11.1.3 code nrzi.............................................................................................................. 11-2 11.1.4 debugging dlsw ................................................................................................... 11-3 11.1.5 debugging llc2 ..................................................................................................... 11-4 11.1.6 debugging sdlc .................................................................................................... 11-4 11.1.7 display dlsw bridge-entry..................................................................................... 11-5 11.1.8 display dlsw circuits............................................................................................. 11-5 11.1.9 display dlsw information ...................................................................................... 11-6 11.1.10 display dlsw remote........................................................................................... 11-8 11.1.11 display dlsw reachable-cache ........................................................................... 11-9 11.1.12 display llc2....................................................................................................... 11-10 11.1.13 dlsw bridge-set ................................................................................................ 11-10 11.1.14 dlsw diverse..................................................................................................... 11-11 11.1.15 dlsw enable ..................................................................................................... 11-12 11.1.16 dlsw local......................................................................................................... 11-13 11.1.17 dlsw reachable ................................................................................................ 11-14 11.1.18 dlsw reachable-cache ..................................................................................... 11-15 11.1.19 dlsw remote ..................................................................................................... 11-16 11.1.20 dlsw timer ........................................................................................................ 11-17 11.1.21 idle-mark.......................................................................................................... 11-18 11.1.22 link-protocol sdlc ............................................................................................. 11-19 11.1.23 llc2 max-ack .................................................................................................... 11-20 11.1.24 llc2 max-send-queue....................................................................................... 11-21 11.1.25 llc2 max-transmission...................................................................................... 11-21
3Com Corporation vi
Table of Contents
11.1.26 llc2 modulo ...................................................................................................... 11-22 11.1.27 llc2 receive-window ......................................................................................... 11-23 11.1.28 llc2 timer ack ................................................................................................... 11-23 11.1.29 llc2 timer ack-delay ......................................................................................... 11-24 11.1.30 llc2 timer busy ................................................................................................. 11-25 11.1.31 llc2 timer poll ................................................................................................... 11-25 11.1.32 llc2 timer reject ................................................................................................ 11-26 11.1.33 reset dlsw bridge-entry.................................................................................... 11-27 11.1.34 reset dlsw circuits............................................................................................ 11-27 11.1.35 reset dlsw reachable-cache ............................................................................ 11-28 11.1.36 sdlc controller .................................................................................................. 11-28 11.1.37 sdlc mac-map local ......................................................................................... 11-29 11.1.38 sdlc mac-map remote...................................................................................... 11-30 11.1.39 sdlc max-pdu ................................................................................................... 11-30 11.1.40 sdlc max-send-queue...................................................................................... 11-31 11.1.41 sdlc max-transmission..................................................................................... 11-32 11.1.42 sdlc modulo ..................................................................................................... 11-33 11.1.43 sdlc sap-map local .......................................................................................... 11-33 11.1.44 sdlc sap-map remote....................................................................................... 11-34 11.1.45 sdlc simultaneous............................................................................................ 11-35 11.1.46 sdlc status ....................................................................................................... 11-35 11.1.47 sdlc timer ack .................................................................................................. 11-36 11.1.48 sdlc timer lifetime ............................................................................................ 11-37 11.1.49 sdlc timer poll .................................................................................................. 11-38 11.1.50 sdlc window ..................................................................................................... 11-38 11.1.51 sdlc xid ............................................................................................................ 11-39 Chapter 12 SOT Configuration Commands .............................................................................. 12-1 12.1 SOT Configuration Commands...................................................................................... 12-1 12.1.1 display sot ........................................................................................................... 12-1 12.1.2 link-protocol sot ................................................................................................... 12-3 12.1.3 sot counter keepalive .......................................................................................... 12-3 12.1.4 sot gather ............................................................................................................ 12-4 12.1.5 sot group-set ....................................................................................................... 12-5 12.1.6 sot peer ............................................................................................................... 12-6 12.1.7 sot sdlc broadcast ............................................................................................... 12-6 12.1.8 sot sdlc controller ................................................................................................ 12-7 12.1.9 sot sdlc-status primary ........................................................................................ 12-8 12.1.10 sot sdlc-status secondary.................................................................................. 12-9 12.1.11 sot send address............................................................................................... 12-9
Table of Contents
12.1.12 sot send all tcp ................................................................................................ 12-10 12.1.13 sot timer keepalive .......................................................................................... 12-11
3Com Corporation viii
Chapter 1 IP Address Configuration Commands

1.1 IP Address Configuration Commands
1.1.1 ip address
Syntax
ip address ip-address net-mask [ sub ] undo ip address [ ip-address net-mask [sub] ]
View
Interface view
Parameter
ip-address: Interface IP address, in dot delimitated decimal format. net-mask: The mask of the corresponding subnet, in dot delimitated decimal format. sub: To enable communications among different subnets, the configured slave IP address should be used.
Description
Use the ip address command to set an IP address for an interface. Use the undo ip address command to delete an IP address of the interface. By default, no IP address is configured. IP address is classified into five types, and users can select proper IP subnet according to actual conditions. Moreover, in the case that part of the host address is composed of 0 or the entire host address is composed of 1, the address has some special use and can not be used as ordinary IP address. The mask identifies the network number in an IP address. Under normal conditions, one interface only needs to be configured with one IP address. However, to enable one interface of a router to connect to several subnets, one interface can be configured with several IP addresses. Among them, one is master IP address, and others are slave IP addresses. Following is the relationship between the master and slave IP addresses:
If a master IP address is configured while theres already an existing master IP address, the original one will be deleted and the newly configured will take effect. The command undo ip address without parameters indicates to delete all the IP addresses of the interface. The command undo ip address ip-address net-mask indicates to delete the master IP address and undo ip address ip-address net-mask sub indicates to delete the slave address. All the slave addresses must be deleted before the master IP address can be deleted. In addition, any two IP addresses configured for all interfaces on a router cannot be located in the same subnet. Related command: ip route-static, display ip interface, and display interface.
Example
# Configure the interface Serial 0/0/0 with the master IP address as 129.102.0.1, the slave IP address is 202.38.160.1, and the subnet mask of both is 255.255.255.0. [3Com-Serial1/0/0] ip address 129.102.0.1 255.255.255.0
[3Com-Serial1/0/0] ip address 202.38.160.1 255.255.255.0 sub
1.1.2 ip address ppp-negotiate

Syntax
ip address ppp-negotiate undo ip address ppp-negotiate
View
Interface view
Parameter
None
Description
Use the ip address ppp-negotiate command to allow IP address be assigned through negotiation at the interface. Use the undo ip address ppp-negotiate command to disable this function. By default, no interface IP address negotiation is allowed. As PPP supports IP address negotiation, only when the interface is encapsulated with the link-layer protocol PPP, can the IP address negotiation at this interface be configured.
Normally, it is not necessary to configure IP address negotiation. Only in some special circumstances such as accessing Internet through the ISP, the IP addresses of the interface that is connected with the ISP are allocated by the ISP through negotiation. When IP address negotiation for the interface is configured, it is not necessary to configure the IP address manually for this interface.
Example
# Display how to set IP address of interface Serial 0/0/0 to be allocated by peer through negotiation. [3Com-Serial0/0/0] ip address ppp-negotiate
1.1.3 ip address unnumbered

Syntax
ip address unnumbered interface interface-type interface-number undo ip address unnumbered
View
Interface view
Parameter
interface-type: Name of the unnumbered interface. interface-number: Serial number of the unnumbered interface.
Description
Use the ip address unnumbered command to enable an interface to borrow the IP address of another interface. Use the undo ip address unnumbered command to disable this function on the interface. By default, the interface does not borrow IP addresses from other interfaces. This command is used to enable serial interfaces encapsulated with PPP, HDLC, Frame Relay, SLIP or Tunnel to borrow IP addresses from Ethernet interface or other interfaces. Ethernet interfaces however cannot use unnumbered IP addresses. The interface that uses an unnumbered address has no IP address itself. Its route cannot be added into the routing table as a result. For connectivitys purpose, you must configure two static routes for it. For more information refer to the Routing Protocol section in this manual.
Example
# Display how to make the serial interface 0/0/0 encapsulated with PPP borrow the unnumbered IP address from Ethernet interface 0/0/0. [3Com-Serial0/0/0] ip address unnumbered Ethernet 0/0/0
1.1.4 remote address

Syntax
remote address { ip-address | pool [ pool-number ] } undo remote address
View
Interface view
Parameter
ip-address: IP address. pool-number: Address pool number, i.e., assigning one address in the pool-number to the peer interface. It is a number ranging 0 to 99 with the default value as 0.
Description
Use the remote address command to configure to assign an IP address for the peer interface. Use the undo remote address command to disable assigning an IP address for the peer interface. By default, the interface does not assign an address for the peer interface. When an interface is encapsulated with PPP, but not configured with an IP address, perform the following task to configure the negotiable attribute of IP address for this interface (configuring the ip address ppp-negotiate command on local router while configuring the remote address command on the peer router), so that the local interface can accept the IP address originated from PPP negotiation. This IP address is assigned by the opposite end. This configuration is mainly used to obtain the IP address assigned by ISP when accessing Internet via ISP.
Caution: This command does not forbid the peer to configure IP address itself. To forbid the peer to configure IP address itself, you must configure the ppp ipcp remote-address forced command.
Related command: ip address ppp-negotiate, ppp ipcp address forced.
Example
# The serial interface encapsulated with PPP assigns an IP address 10.0.0.1 for the peer. [3Com-Serial0/0/0] remote address 10.0.0.1
Chapter 2 IP Application Configuration Commands

2.1 ARP Configuration Commands
2.1.1 arp static
Syntax
arp static ip-address ethernet-address [ vpn-instance-name ] undo arp ip-address [ vpn-instance-name ]
View
System view
Parameter
ip-address: IP addresses of the ARP mapping entries in dotted decimal format. ethernet-address: Ethernet MAC address of ARP mapping entries. Its format is H-H-H, in which H is a hexadecimal number with 1 to 4 bits. vpn-instance-name: The name of VPN instance.
Description
Use the arp static command to configure ARP mapping table. Use the undo arp command to delete mapping items corresponding to some addresses in the ARP mapping table. By default, the mapping table of the system ARP is empty and the address mapping can be obtained through dynamic ARP. Normally, ARP mapping table is maintained by dynamic ARP, only in special circumstances is manual configuration needed. ARP mapping table is used for LAN only, WAN address resolution is accomplished in a different way, for instance the inverse address resolution of Frame Relay. Related command: arp static and display arp.
Example
# Configure the Ethernet MAC address e0-fc01-0 corresponding to the IP address 129.102.0.1.
[3Com] arp static 129.102.0.1 e0-fc01-0
# Configure the Ethernet MAC address aa-fcc-12 corresponding to the IP address 11.0.0.1.
[3Com] arp static 11.0.0.1 aa-fcc-12
2.1.2 arp check enable

Syntax
arp check enable undo arp check enable
View
System view
Parameter
None
Description
Use the arp check enable command to enable ARP entry check to disable the device from learning the ARP entries with broadcast MAC addresses. Use the undo arp check enable command to disable ARP entry check to have the system learn the ARP entries with broadcast MAC addresses. By default, ARP entry check is enabled. The device does not learn the ARP entries with broadcast MAC addresses.
Example
# Enable ARP entry check.
[Router] arp check enable
2.1.3 debugging arp packet

Syntax
debugging arp packet undo debugging arp packet
View
User view
Parameter
None
Description
Use the debugging arp packet command to enable ARP packet debugging. Use the undo debugging arp packet command to disable the function.
Example
# Enable ARP packets debugging.
<3Com> debugging arp packet
2.1.4 display arp

Syntax
display arp [ static | dynamic | all | | { begin text | exclude text | include text } ]
View
Any view
Parameter
static: Indicates to show the static ARP entries. dynamic: Indicates to show the dynamic ARP entries. all: Indicates to show all ARP entries. |: Outputs the matched entries. begin: Matches the strings beginning with the regular expression. exclude: Matches the strings that exclude the regular expression. include: Matches the strings that include the regular expression. text: Regular expression.
Description
Use the display arp command to view the ARP mapping table. By default, all the ARP entries of the RSU are displayed. Related command: arp static, reset arp.
Example
# Display all ARP entries.

<3Com> display arp Type: S-Static IP Address 1.1.1.1 10.153.72.2 D-Dynamic MAC Address 0012-0012-0012 00e0-fc00-0007
Type S D
Vpn-instance Name
Interface
Eth0/0/1
# Display static ARP entries.

<3Com> display arp static Type: S-Static IP Address 1.1.1.1 D-Dynamic MAC Address 0012-0012-0012 Type S Vpn-instance Name Interface
# Display dynamic ARP entries.

<3Com> display arp dynamic Type: S-Static IP Address 10.153.72.2 D-Dynamic MAC Address 00e0-fc00-0007 D Type Vpn-instance Name Eth0/0/1 Interface
2.1.5 naturemask-arp
Syntax
naturemask-arp enable undo naturemask-arp enable
View
System view
Parameter
None
Description
Use the naturemask-arp enable command to support ARP within natural network segments rather than subnets. Use the undo naturemask-arp enable command to disable the support to ARP within natural network segments.
Example
# Enable ARP within natural network segments.
[Router6000] naturemask-arp enable
2.1.6 reset arp

Syntax
reset arp [ all | dynamic | static | interface interface-type interface-number ]
View
User view
Parameter
all: Indicates to clear all ARP entries. dynamic: Indicates to clear the dynamic ARP entries. static: Indicates to clear the static ARP entries. interface: Indicates the selected interface. interface-type: Interface type. interface-number: Interface sequence number.
Description
Use the reset arp command to clear the ARP entries in the ARP mapping table. When operation is performed to the interface with specified interface, the interface type can only be Ethernet, GE or virtual Ethernet and only the dynamic entries can be deleted on the interface. Related command: arp static and display arp.
Example
# The following example shows how to delete the dynamic entries in the ARP mapping table on Ethernet 0/0/0.
<3Com> reset arp interface Ethernet 0/0/0
2.2 Proxy ARP Configuration Commands

2.2.1 arp-proxy enable
Syntax
arp-proxy enable undo arp-proxy enable
View
Parameter
None
Description
Use the arp-proxy enable command to enable proxy ARP on an interface. Use the undo arp-proxy enable command to disable proxy arp on the interface. By default, the proxy ARP is disabled. This command is applied on Ethernet interface. As for hosts in the same hop but on different physical networks, the proxy ARP function hides the fact that the physical network is separated, and makes the user feel like he is on the same and one physical network.
Example
# Enable proxy ARP at Ethernet 0/0/0.
[Router-Ethernet0/0/0] arp-proxy enable
2.3 Static Domain Name Resolution

2.3.1 display ip host
Syntax
display ip host
View
Any view
Parameter
None
Description
Use the display ip host command to display all the host names and their corresponding IP addresses.
Example
# Display all the host names and their corresponding IP addresses.

<3Com> display ip host Host eth 3Com 0 Age 0
Flags
Address(es)
static 6.1.1.1 static 1.1.1.1
2.3.2 ip host
Syntax
ip host hostname ip-address undo ip host hostname [ ip-address ]
View
System view
Parameter
hostname: The name of a host, a character string with its length from 1 to 20. ip-address: The IP address corresponding to a host name, whose format can be A.B.C.D
Description
Use the ip host command to configure the IP address corresponding to a host name. Use the undo ip host command to remove the IP address corresponding to a host name. A hostname can be mapped to one IP address only. By default, the static domain name table is empty, that is, no hostname-to-IP map.
Example
# Configure the IP address corresponding to the host name router1 as 10.110.0.1.
[3Com] ip host router1 10.110.0.1
# Configure the IP address corresponding to the host name router2 as 10.110.0.2.

# Configure to assign the IP address 10.110.0.3 to the host name router3.

# Remove the IP address 10.110.0.2 corresponding to the host name router2.

[3Com] undo ip host router2 10.110.0.2
2.4 DNS Client Configuration Commands

2.4.1 debugging dns
Syntax
debugging dns undo debugging dns
View
User view
Parameter
None
Description
Use the debugging dns command to enable DNS client debugging. Use the undo debugging dns command to disable DNS client debugging. By default, DNS client debugging is disabled.
Example
# Enable DNS client debugging.
<Router> debugging dns
# Disable DNS client debugging.

<Router> undo debugging dns
2.4.2 dns resolve

Syntax
dns resolve undo dns resolve
View
System view
Parameter
None
Description
Use the dns resolve command to enable DNS resolving. Use the undo dns resolve command to disable DNS resolving. By default, DNS resolving is disabled.
Example
# Enable DNS resolving.
[Router] dns resolve
2.4.3 dns server

Syntax
dns server ip-address undo dns server [ ip-address ]
View
System view
Parameter
ip-address: IP address of a DNS server.
Description
Use the dns server command to configure IP address of a DNS server. Use the undo dns server command to delete IP address of a DNS server.
Example
# Configure IP address of a DNS server.
[Router] dns server 10.110.66.1
# Delete IP address of a specified DNS server.

[Router] undo dns server 10.110.66.1
# Delete IP addresses of all the DNS servers.

[Router] undo dns server
2.4.4 dns domain

Syntax
dns domain domain-name undo dns domain [ domain-name ]
View
System view
Parameter
domain-name: DNS domain name.
Description
Use the dns domain command to configure a DNS domain name. Use the undo dns domain command to delete one or all DNS domain names.
Example
# Configure a DNS domain name.
[Router] dns domain 3com.com
# Delete a specified DNS domain name.

[Router] undo dns domain 3com.com
# Delete all the DNS domain names.

[Router] undo dns domain
2.4.5 display dns domain

Syntax
display dns domain [dynamic]
View
Any view
Parameter
dynamic: displays DNS domain names that are dynamically obtained through DHCP or by other means.
Description
Use the display dns domain command to view the DNS domain names that are manually configured. Use the display dns domain dynamic command to view the DNS domain names that are dynamically obtained through DHCP or other protocols.
Example
# Display the DNS domain names that are manually configured.
[Router] display dns domain No 0 Domain-name 3Com.com
# Display the DNS domain names that are dynamically obtained.

[Router]display dns domain dynamic No 0 Domain-name 3com.com
2.4.6 display dns server

Syntax
display dns server [ dynamic ]
View
Any view
Parameter
dynamic: displays DNS server addresses that are dynamically obtained through DHCP or other protocols.
Description
Use the display dns server command to view the DNS server addresses manually configured. Use the display dns server dynamic command to view the DNS server addresses that are dynamically obtained through DHCP or other protocols.
Example
# Display the DNS server addresses that are dynamically obtained.
[Router]display dns server dynamic

Domain-server 0 IpAddress 10.72.66.36
# Display the DNS server addresses that are manually configured.

[Router]display dns server Domain-server 0 IpAddress 10.72.74.5
2.4.7 display dns dynamic-host

Syntax
display dns dynamic-host
View
Any view
Parameter
None
Description
Use the display dns dynamic-host command to view the current contents in the domain name cache of the DNS client. The DNS client retains the result of each successful domain name resolution in its cache. If it receives the same resolving request later, it first looks up the cache for a match. If no match is found, it sends a domain name resolving request to the DNS server. You can use this command to view the current contents in the buffer.
Example
# Display the current contents in the domain name cache of the DNS client.
[Router]display dns dynamic-host No 1 2 Host www.sohu.com www.sina.com.cn -Ipaddress 91.1.1.1 87.1.1.1 3521 3000 TTL Alias
No 1 2
Host www.163.com www.263.com
--
Ipaddress 191.1.1.1 187.1.1.1 3561 3300
TTL
Alias
Note: The first part of the output is the result of class A query, or the result queried by host; the second part of the output is the result of PTR class query, or the result queried by IP address.
2.4.8 nslookup type

Syntax
nslookup type { ptr ip-address | a domain-name }
View
Any view
Parameter
ptr ip-address: Resolves the specified IP address to a domain name. a domain-name: Resolves the specified domain name to an IP address. The domain name is a string of up to 30 characters. Automatic domain name appending is supported.
Description
Use the nslookup type command to resolve the specified IP address or domain name to a domain name or IP address.
Example
# Resolve the address 192.168.3.2 to a domain name.
<3Com> nslookup type ptr 192.168.3.2 Trying DNS server (10.72.66.36) Name: Address: www.3Com.com 192.168.3.2
# Resolve www.3Com.com to an IP address.

<3Com> nslookup type a www.3Com.com Trying DNS server Name: Address: (10.72.66.36)
www.3Com.com 192.168.3.2
2.4.9 reset dns dynamic-host

Syntax
reset dns dynamic-host
View
User view
Parameter
None
Description
Use the reset dns dynamic-host command to clear the current contents in the domain name cache of the DNS client.
Example
# Clear the current contents in the domain name cache of the DNS client.
[Router]reset dns dynamic-host
2.5 URPF Configuration Commands

2.5.1 ip urpf
Syntax
ip urpf { strict | loose } [ allow-default ] [ acl acl-number ] undo ip urpf { strict | loose } [ allow-default ] [ acl acl-number ]
View
Interface view
Parameter
strict: Strict check. The packets source address must be in the routers FIB table. It searches reversely for outgoing interfaces for the packet. At least one outgoing address must match the packets incoming interface; otherwise URPF rejects the packet. loose: Loose check. The only requirement is that the packets source address is in the routers FIB table; otherwise URPF rejects the packet.
allow-default: Allows special treatment for the default route. When the default route and the allow-default parameters are both configured, the principles of strict check and loose check change. acl-number: ACL number, ranges from 2000 to 3999.
Description
Use the ip urpf command to enable URPF check on the interface. Use the undo ip urpf command to disable URPF check. By default, URPF is disabled.
Example
# Enable strict URPF check on Ethernet2/2/0, allow special treatment for the default route, and set ACL number to 2999.
[3Com-Ethernet2/2/0] ip urpf strict allow-default acl 2999
2.5.2 debugging ip urpf

Syntax
debugging ip urpf discards [ interface interface-type interface-number ] undo debugging ip urpf discards [ interface interface-type interface-number ]
View
User view
Parameter
interface-type interface-number: Interface name. If not specified, it represents all the interfaces.
Description
Use the debugging ip urpf command to display the information on the rejected packets by URPF. Use the undo debugging ip urpf command to disable the function.
Example
# Suppose URPF is enabled on Ethernet2/2/0, configure as follows to display the information on the rejected packets.
<3Com> debugging ip urpf discards interface Ethernet2/2/0
Chapter 3 UDP Helper Configuration Commands

3.1 UDP Helper Configuration Commands
3.1.1 debugging udp-helper
Syntax
debugging udp-helper { event | packet [ receive | send ] } undo debugging udp-helper { event | packet [ receive | send ] }
View
User view
Parameter
event: UDP Helper event debugging. packet: UDP Helper packet debugging. receive: UDP Helper inbound packet debugging. send: UDP Helper outbound packet debugging.
Description
Use the debugging udp-helper command to enable UDP Helper debugging. Use the undo debugging udp-helper command to disable UDP Helper debugging. By default, UDP Helper debugging is disabled.
Example
# Enable UDP Helper packet debugging.
<3Com> debugging udp-helper packet
3.1.2 display udp-helper server

Syntax
display udp-helper server [interface number ]
View
Any view
Parameter
number: Ethernet interface number.
Description
Use the display udp-helper server command to display the information about the destination servers associated with the specified or all Ethernet interfaces.
Example
# Display the information about the destination servers associated with Ethernet interface 0/0/0.
<3Com> display udp-helper server interface ethernet 0/0/0 interface name ethernet0/0/0 server address 192.1.1.2 0 packets send
3.1.3 udp-helper enable

Syntax
udp-helper enable undo udp-helper enable
View
System view
Parameter
None
Description
Use the udp-helper enable command to enable UDP Helper. Use the undo udp-helper enable command to disable UDP Helper. By default, UDP Helper is disabled.
Example
# Enable UDP Helper.
[3Com] udp-helper enable
3.1.4 udp-helper port

Syntax
udp-helper port { port | dns | netbios-ds | netbios-ns | tacacs | tftp | time } undo udp-helper port { port | dns | netbios-ds | netbios-ns | tacacs | tftp | time }
View
System view
Parameter
port: UDP port number in the UDP broadcasts to be forwarded. It ranges from 1 to 65,535. dns: Domain name service, corresponding to UDP port 53. netbios-ds: NetBios datagram service, corresponding to UDP port 138. netbios-ns: NetBios name service, corresponding to UDP port 137. tacacs: TAC access control system, corresponding to UDP port 49. tftp: Trivial file transfer protocol, corresponding to UDP port 69. time: Time service, corresponding to UDP port 37.
Description
Use the udp-helper port command to specify the UDP port number in the UDP broadcasts to be forwarded. Use the undo udp-helper port command to disable the system to forward the UDP broadcasts with the specified UDP port number.
Example
# Configure the system to forward the UDP broadcasts with the UDP port number of DNS.
[3Com] udp-helper port dns
3.1.5 udp-helper server

Syntax
udp-helper server ip-address undo udp-helper server [ip-address ]
View
Parameter
ip-address: IP address of the destination server, in dotted decimal format.
Description
Use the udp-helper server command to configure the destination server to which the UDP broadcasts received on the interface are forwarded. Use the undo udp-helper server command to remove the configured destination server. By default, no destination server is configured. Related command: display udp-helper server.
Example
# Configure the system to forward all UDP broadcasts received on interface Ethernet 0/0/0 to 192.1.1.2.
[3Com-ethernet 0/0/0] udp-helper server 192.1.1.2
Chapter 4 BOOTP Client Configuration Commands
Chapter 4 BOOTP Client Configuration Commands

4.1 BOOTP Client Configuration Command
4.1.1 ip address bootp-alloc
Syntax
ip address bootp-alloc undo ip address bootp-alloc
View
Parameter
None
Description
Use the ip address bootp-alloc command to configure the Ethernet interface to obtain IP address using BOOTP. Use the undo ip address bootp-alloc command to disable the Ethernet interface from obtaining IP address using BOOTP. By default, the Ethernet interface does not obtain IP address using BOOTP.
Example
# Configure interface Ethernet 0/0/0 to obtain IP address using BOOTP.
[3Com-Ethernet 0/0/0] ip address bootp-alloc
Chapter 5 DHCP Configuration Commands

5.1 DHCP Public Configuration Commands
5.1.1 dhcp enable
Syntax
dhcp enable undo dhcp enable
View
System view
Parameter
None
Description
Use the dhcp enable command to enable DHCP. Use the undo dhcp enable command to disable DHCP. By default, DHCP is enabled. Before you can configure DHCP, you must enable DHCP. This configuration is essential to both DHCP server and DHCP relay.
Note: DHCP can operate normally only after you correctly set the system clock.
Example
# Enable DHCP on the current router.
[3Com] dhcp enable
5.1.2 dhcp select (in Interface View)

Syntax
dhcp select { global | interface | relay } undo dhcp select
View
Interface view
Parameter
global: The address DHCP client gets is the one selected by the local DHCP server from a global address pool upon the receipt of the DHCP request from the client. interface: The address DHCP client gets is the one selected by the local DHCP server from an interface address pool upon the receipt of the DHCP request from the client. relay: The address DHCP client gets is allocated by an external DHCP server.
Description
Use the dhcp select command in interface view to select a method for disposing the DHCP packets destined to the local device. Use the undo dhcp select command in interface view to restore the default setting. By default, DHCP packets destined to the local device will be sent to the internal server and the clients sending them will be allocated with addresses selected from a global address pool (in global approach). Related command: dhcp select (in system view).
Example
# Allocate addresses selected from an interface address pool on the internal DHCP server to the clients sending DHCP packets destined to the local device.
[3Com-Ethernet1/0/0] dhcp select interface
5.1.3 dhcp select (in System View)

Syntax
dhcp select { global | interface | relay } { interface ethernet-subinterface-range | all } undo dhcp select { interface ethernet-subinterface-range | all }
View
System view
Parameter
global: The address DHCP client gets is the one selected by the local DHCP server from a global address pool upon the receipt of the DHCP request from the client. interface: The address DHCP client gets is the one selected by the local DHCP server from an interface address pool upon the receipt of the DHCP request from the client. relay: The address DHCP client gets is allocated by an external DHCP server. ethernet-subinterface-range: Includes all the subinterfaces between two subinterfaces (including these two subinterfaces) by inserting the keyword to between these two interfaces. all: All the interfaces.
Description
Use the dhcp select command in system view to select a method for multiple interfaces in a specified range to dispose the DHCP packets destined to the local device. Use the undo dhcp select command in system view to restore the default setting. By default, DHCP packets destined to the local device will be sent to the internal server and the clients sending them will be allocated with addresses selected from a global address pool (in global approach). Related command: dhcp select (in interface view).
Example
# Configure the interfaces in the range of Ethernet2/0/0.1 to Ethernet2/0/0.5 to allocate addresses selected from an interface address pool maintained by the internal server to the clients sending DHCP packets destined to the local device.
[3Com] dhcp select interface interface ethernet 2/0/0.1 to ethernet 2/0/0.5
5.1.4 dhcp server detect

Syntax
dhcp server detect undo dhcp server detect
View
System view
Parameter
None
Description
Use the dhcp server detect command to enable pseudo-DHCP-server detection. Use the undo dhcp server detect command to disable the function. By default, pseudo-DHCP-server detection is disabled.
Example
# Enable pseudo DHCP server detection.
[3Com] dhcp server detect
5.2 DHCP Server Configuration Commands

5.2.1 debugging dhcp server
Syntax
debugging dhcp server { all | error | events | packets } undo debugging dhcp server { all | error | events | packets }
View
User view
Parameter
all: All debugging functions of DHCP server. error: Error debugging on the DHCP server, specifically, the debugging on the errors that occur when the DHCP server processes DHCP packets, allocates addresses, etc. events: Event debugging on the DHCP server, specifically, the debugging on the events such as address allocation, ping detection timeout, etc. packet: DHCP packet debugging, specifically, the debugging on the packets that the DHCP server has received and sent and on the ping packets sent for the purpose of detection and the received response packets.
Description
Use the debugging dhcp server command to enable debugging on the DHCP server. Use the undo debugging dhcp server command to disable debugging. By default, debugging is disabled on the DHCP server.
Example
# Enable event debugging on the DHCP server.
<3Com> debugging dhcp server events *0.62496500-DHCP SER-8-DHCPS_DEBUG_COMMON: DhcpServer: ICMP Timeout *0.62496583-DHCP SER-8-DHCPS_DEBUG_COMMON: DhcpServer: Still Need to ICMP detect for 1 times *0.62497000-DHCP SER-8-DHCPS_DEBUG_COMMON: DhcpServer: ICMP Timeout *0.62497083-DHCP SER-8-DHCPS_DEBUG_COMMON: DhcpServer: All Try finished *0.62497166-DHCP SER-8-DHCPS_DEBUG_COMMON: DhcpServer: Ack User's Lease
# Enable packet debugging on the DHCP server.

<3Com> debugging dhcp server packet *0.62080906-DHCP SER-8-DHCPS_DEBUG_COMMON: DhcpServer: receive DHCPRELEASE from 00.05.5D.85.D5.45. *0.62081016-DHCP SER-8-DHCPS_DEBUG_COMMON: DhcpServer: Release Lease for MAC 00.05.5D.85.D5.45. IP is 5.5.5.2 *0.62082240-DHCP SER-8-DHCPS_DEBUG_COMMON: DhcpServer: receive DHCPDISCOVER from 00.05.5D.85.D5.45. *0.62082350-DHCP SER-8-DHCPS_DEBUG_COMMON: DhcpServer: Sending ICMP ECHO to Target IP: 5.5.5.2 *0.62082733-DHCP SER-8-DHCPS_DEBUG_COMMON: DhcpServer: Sending ICMP ECHO to Target IP: 5.5.5.2 *0.62083233-DHCP SER-8-DHCPS_DEBUG_COMMON: DhcpServer: Send DHCPOFFER to MAC=> 00.05.5D.85.D5.45. Offer IP=> 5.5.5.2 *0.62083366-DHCP SER-8-DHCPS_DEBUG_COMMON: DhcpServer: receive DHCPREQUEST from 00.05.5D.85.D5.45. *0.62083483-DHCP SER-8-DHCPS_DEBUG_COMMON: DhcpServer: Send DHCPACK to MAC=> 00.05.5D.85.D5.45. Offer IP=> 5.5.5.2
# Enable error debugging on the DHCP server.

<3Com> debugging dhcp server error *0.63269475-DHCP SER-8-DHCPS_DEBUG_COMMON: DhcpServer: Icmp Packet is not EHHOREPLY!
5.2.2 dhcp server dns-list

Syntax
dhcp server dns-list ip-address [ ip-address ] undo dhcp server dns-list { ip-address | all }
View
Ethernet interface (including subinterface) view
Parameter
ip-address: IP address of DNS. You can configure up to eight IP addresses separated by spaces in a command.
Description
Use the dhcp server dns-list command in interface view to configure DNS IP addresses for an interface configured with a DHCP address pool. Use the undo dns-list command in interface view to delete the configuration. By default, no DNS address is configured. By far, only up to eight DNS server addresses can be set in each DHCP address pool. Related command: dhcp server dns-list (in system view), dhcp server ip-pool, and dns-list.
Example
# Configure the DNS server address 1.1.1.254 for the DHCP address pool of the interface Ethernet1/0/0.
[3Com] interface ethernet 1/0/0 [3Com-Ethernet 1/0/0] dhcp server dns-list 1.1.1.254
5.2.3 dhcp server dns-list interface (in System View)

Syntax
dhcp server dns-list ip-address [ ip-address ] { interface ethernet-subinterface-range | all }
undo dhcp server dns-list { ip-address | all } { interface ethernet-subinterface-range | all }
View
System view
Parameter
ip-address: IP address of DNS. You can configure up to eight IP addresses separated by spaces in a command. ethernet-subinterface-range: Includes any subinterface whose interface number lies between the two given subinterface number (including these two subinterfaces) by inserting the keyword to between these two interface numbers. all: In the undo form of the command, the first all refers to all the Gateway (GW) addresses and the second, all the interfaces.
Description
Use the dhcp server dns-list interface command to assign DNS IP addresses to the DHCP address pool of multiple interfaces in a specified range. Use the undo server dns-list interface command in system view to delete the allocated IP addresses. By default, no DNS address is configured. Only up to eight DNS server addresses, by far, can be set in each DHCP address pool. Related command: dhcp server dns-list, dhcp server ip-pool, dns-list.
Example
# Assign the DNS server address 1.1.1.254 to the DHCP address pool of the interfaces in the range of Ethernet1/0/0.0 to Ethernet2/0/0.5.
[3Com] dhcp server dns-list 1.1.1.254 interface ethernet 2/0/0.0 to ethernet 2/0/0.5
5.2.4 dhcp server domain-name (in Interface View)

Syntax
dhcp server domain-name domain-name undo dhcp server domain-name domain-name
View
Parameter
domain-name: Domain name that the DHCP server allocates to clients, which is a string comprising at least three characters and at most 50 characters.
Description
Use the dhcp server domain-name command in interface view to configure the domain name that the DHCP address pool of the current interface allocates to clients. Use the undo dhcp server domain-name command in interface view to delete the configured domain name. By default, no domain name has been allocated to DHCP clients and domain name is null. Related command: dhcp server ip-pool, dhcp server domain-name (in system view), and domain-name.
Example
# Configure the domain name eth1_0_0.com.cn in an interface DHCP address pool.
[3Com] interface ethernet 1/0/0 [3Com-Ethernet 1/0/0] dhcp server domain-name eth1_0_0.com.cn
5.2.5 dhcp server domain-name (in System View)

Syntax
dhcp server domain-name domain-name { interface ethernet-subinterface-range | all } undo dhcp server domain-name domain-name { interface ethernet-subinterface-range | all }
View
System view
Parameter
domain-name: Domain name that the DHCP server allocates to clients, which is a string comprising 3 to 50 characters.
ethernet-subinterface-range: Includes any subinterface whose interface number lies between two subinterface numbers (including these two subinterfaces) by inserting the keyword to between these two interface numbers. all: All the interfaces.
Description
Use the dhcp server domain-name command in system view to configure the domain name that the DHCP address pool of the interfaces in a specified range allocates to DHCP clients. Use the undo dhcp server domain-name command in system view to delete the configured domain name. By default, no domain name is configured for clients. After configuring this command, you cannot view the configuration of this command by executing the display current-configuration command. By executing the dhcp server domain-name command respectively on the specified interfaces, you can fulfill the batch configurations of the command. Related command: dhcp server ip-pool.
Example
# Configure eth2_1_5.com.cn as the domain name in the interface DHCP address pool of the interfaces Ethernet2/0/0.1 through Ethernet2/0/0.5.
[3Com] dhcp server domain-name eth1_0_0.com.cn interface ethernet 2/0/0.1 to ethernet 2/0/0.5
5.2.6 dhcp server expired (in Interface View)

Syntax
dhcp server expired { day day [ hour hour [ minute minute ] ] | unlimited } undo dhcp server expired
View
Parameter
day day: Number of days in the range of 0 to 365. hour hour: Number of hours in the range of 0 to 23.
minute minute: Number of hours in the range of 0 to 59. unlimited: The valid period is unlimited.
Description
Use the dhcp server expired command in interface view to configure a valid period allowed for leasing IP addresses in the current interface DHCP address pool. Use the undo dhcp server expired command in interface view to restore the default setting. By default, the leasing valid period is one day. Related command: dhcp server ip-pool, dhcp server expired (in system view), and expired.
Example
# Set the valid period for leasing IP addresses in the interface address pool maintained by Ethernet1/0/0 to unlimited.
[3Com] interface ethernet 1/0/0 [3Com-Ethernet 1/0/0] dhcp server expired unlimited
5.2.7 dhcp server expired interface (in System View)

Syntax
dhcp server expired { day day [ hour hour [ minute minute ] ] | unlimited } { interface ethernet-subinterface-range | all } undo dhcp server expired { interface ethernet-subinterface-range | all }
View
System view
Parameter
day day: Number of days in the range of 0 to 365. hour hour: Number of hours in the range of 0 to 23. minute minute: Number of hours in the range of 0 to 59. unlimited: The valid period is unlimited. ethernet-subinterface-range: Includes any subinterface whose interface number lies between two subinterface numbers (including these two subinterfaces) by inserting the keyword to between these two interface numbers.
all: All the interfaces.
Description
Use the dhcp server expired interface command in system view to configure a valid period allowed for leasing IP addresses in the interface DHCP address pool of the interfaces in a specified range. Use the undo dhcp server expired interface command in system view to restore the default setting. By default, the leasing valid period is one day. After configuring this command, you cannot view the configuration by executing the display current-configuration command. By calling the dhcp server expired command respectively on the specified interfaces you can fulfill the batch configurations of the command. Related command: dhcp server ip-pool, dhcp server expired (in interface view), expired.
Example
# Set the valid period for leasing IP addresses in the interface address pool of the interfaces in the range of Ethernet2/0/0.1 to Ethernet2/0/0.5 to unlimited.
[3Com] dhcp server expired unlimited interface ethernet 2/0/0.1 to ethernet 2/0/0.5
5.2.8 dhcp server forbidden-ip

Syntax
dhcp server forbidden-ip low-ip-address [ high-ip-address ] undo dhcp server forbidden-ip low-ip-address [ high-ip-address ]
View
System view
Parameter
low-ip-address: The low IP address that does not participate in the auto-allocation. high-ip-address: The high IP address that does not participate in the auto-allocation. It must belong to the same segment to which the low-ip-address belongs, and must not be smaller than the low-ip-address. If this parameter is not specified, there will be only one IP address, i.e., low-ip-address.
Description
Use the dhcp server forbidden-ip command to exclude IP addresses in a specified range to participate in the auto-allocation. Use the undo dhcp server forbidden-ip command to delete the configuration. By default, all the IP addresses in address pools participate in the auto-allocation. You can configure multiple IP address ranges that do not participate in the auto-allocation. Before using the undo dhcp server forbidden-ip command to delete the setting, you must make sure that you are using exactly the same parameters that you have configured. In other words, you cannot delete only some addresses from the configured range. Related command: dhcp server ip-pool, network, and static-bind ip-address.
Example
# Reserve the IP addresses in the range of 10.110.1.1 to 10.110.1.63 so that these addresses will not participate in the address auto-allocation.
[3Com] dhcp server forbidden-ip 10.110.1.1 10.110.1.63
5.2.9 dhcp server ip-pool

Syntax
dhcp server ip-pool pool-name undo dhcp server ip-pool pool-name
View
System view
Parameter
pool-name: Address pool name uniquely identifying an address pool, which is a string comprising at least one character and 35 characters at most.
Description
Use the dhcp server ip-pool command to create a DHCP address pool and access the DHCP address pool view. Use the undo dhcp server ip-pool command to delete the specified address pool. By default, no DHCP address pool is created. If the specified address pool has existed, executing the dhcp server ip-pool command will directly access the DHCP address pool view. If the address pool does not exist, the DHCP
server will create it before accessing the DHCP address pool view. Each DHCP server is allowed to configure no more than 50 address pools. Related command: dhcp enable, expired, and network.
Example
# Create DHCP address pool 0.
[3Com] dhcp server ip-pool 0 [3Com-dhcp-0]
5.2.10 dhcp server nbns-list (in Interface View)

Syntax
dhcp server nbns-list ip-address [ ip-address ] undo dhcp server nbns-list { ip-address | all }
View
Parameter
ip-address: IP address of NetBIOS server. You can configure up to eight IP addresses separated by spaces in a command. all: All the NetBIOS server IP addresses.
Description
Use the dhcp server nbns-list command in interface view to configure NetBIOS server addresses in the DHCP address pool of the current interface. Use the undo dns-list command in interface view to delete the configuration. By default, no NetBIOS address is configured. By far, only up to eight NetBIOS addresses can be configured in each DHCP address pool. Related command: dhcp server ip-pool, dhcp server nbns-list (in system view), nbns-list, and netbios-type.
Example
# In the DHCP address pool of Ethernet1/0/0, allocate the NetBIOS server at 10.12.1.99 to the clients.
[3Com] interface ethernet 1/0/0
[3Com-Ethernet 1/0/0] dhcp server nbns-list 10.12.1.99
5.2.11 dhcp server nbns-list (in System View)

Syntax
dhcp server nbns-list ip-address [ ip-address ] { interface ethernet-subinterface-range | all } undo dhcp server nbns-list { ip-address | all } { interface ethernet-subinterface-range | all }
View
System view
Parameter
ip-address: IP address of NetBIOS server. You can configure up to eight IP addresses separated by spaces in a command. all: In the undo form of the command, the first all refers to all the NetBIOS server addresses and the second, all the interfaces. ethernet-subinterface-range: Includes any the subinterfaces whose interface number lies between two subinterface numbers (including these two subinterfaces) by inserting the keyword to between these two interface numbers.
Description
Use the dhcp server nbns-list command in system view to configure NetBIOS server addresses for the clients that get ip address from the DHCP address pool of the interfaces in a specified range. Use the undo dhcp server nbns-list command in system view to delete the configuration. By default, no NetBIOS address is configured. By far, only up to eight NetBIOS addresses can be configured in each DHCP address pool. After configuring this command, you cannot view the configuration by executing the display current-configuration command. By calling the dhcp server nbns-list command respectively on the specified interfaces you can fulfill the batch configurations of the command. Related command: dhcp server ip-pool, dhcp server nbns-list (in interface view), nbns-list, and netbios-type.
Example
# In the DHCP address pool of interfaces in the range of Ethernet2/0/0.1 to Ethernet2/0/0.5, assign the NetBIOS server at 10.12.1.99 to the clients.
[3Com] dhcp server nbns-list 10.12.1.99 interface ethernet 2/0/0.1 to ethernet 2/0/0.5
5.2.12 dhcp server netbios-type (in Interface View)

Syntax
dhcp server netbios-type { b-node | h-node | m-node | p-node } undo dhcp server netbios-type
View
Parameter
b-node: Broadcast mode, i.e., hostname-IP maps are obtained by means of broadcast. p-node: Peer-to-peer mode, i.e., maps are obtained by means of communicating with the NetBIOS server. m-node: Mixed (m) mode, i.e., the mode of type b nodes running peer-to-peer communications mechanism. h-node: Hybrid (h) mode, i.e., the mode of type p nodes possessing some of the broadcast features.
Description
Use the dhcp server netbios-type command in interface view to configure the NetBIOS node type of the DHCP clients of the current interface. Use the undo dhcp server netbios-type command in interface view to restore the default setting. By default, clients adopt type h node (h-node). Hostname-IP maps are required in the event that DHCP clients use the NetBIOS protocol on a WAN. Related command: dhcp server ip-pool, netbios-type, dhcp server netbios-type (in system view), and nbns-list.
Example
# In the DHCP address pool of Ethernet1/0/0, set the NetBIOS node type of its clients to p-node.
[3Com] interface ethernet 1/0/0 [3Com-Ethernet 1/0/0] dhcp server netbios-type p-node
5.2.13 dhcp server netbios-type (in System View)

Syntax
dhcp server netbios-type { b-node | h-node | m-node | p-node } { interface ethernet-subinterface-range | all } undo dhcp server netbios-type { interface ethernet-subinterface-range | all }
View
System view
Parameter
b-node: Broadcast mode, i.e., hostname-IP maps are obtained by means of broadcast. p-node: Peer-to-peer mode, i.e., maps are obtained by means of communicating with the NetBIOS server. m-node: Mixed (m) mode, i.e., the mode of type b nodes running peer-to-peer communications mechanism. h-node: Hybrid (h) mode, i.e., the mode of type p nodes possessing some of the broadcast features. ethernet-subinterface-range: Includes all the subinterfaces between two subinterfaces (including these two subinterfaces) by inserting the keyword to between these two interfaces. all: All the interfaces.
Description
Use the dhcp server netbios-type command in system view to configure a NetBIOS node type for the DHCP clients of the interfaces in a specified range. Use the undo dhcp server netbios-type command in system view to restore the default setting. By default, clients adopt a type h node (h-node).
Hostname-IP maps are required in the event that DHCP clients use the NetBIOS protocol on a WAN. After configuring this command, you cannot view the configuration by executing the display current-configuration command. By calling dhcp server netbios-type respectively on the specified interfaces you can fulfill the batch configurations of the command. Related command: dhcp server ip-pool, netbios-type, dhcp server netbios-type, and nbns-list.
Example
# In the DHCP address pool of interfaces in the range of Ethernet2/0/0.1 to Ethernet2/0/0.5, set the NetBIOS node type of clients to p-node.
[3Com] dhcp server netbios-type p-node interface ethernet 2/0/0.1 to ethernet 2/0/0.5
5.2.14 dhcp server option (in Interface View)

Syntax
dhcp server option code { ascii ascii-string | hex hex-string | ip-address ip-address } undo dhcp server option code
View
Parameter
code: Option value that needs to be assigned by the user. ascii ascii-string: ASCII string. hex hex-string: 2-digit or 4-digit hexadecimal string, such as hh or hhhh. ip-address ip-address: IP address.
Description
Use the dhcp server option command in interface view to configure a DHCP self-defined option for the DHCP address pool of the current interface. Use the undo dhcp server option command in interface view to delete the configuration. Related command: option, dhcp server option (in system view).
Example
# Define the hexadecimal strings of the option code 100 to 0x11 and 0x22 for the DHCP address pool of the interface Ethernet1/0/0.
[3Com] interface ethernet 1/0/0 [3Com-Ethernet 1/0/0] dhcp server option 100 hex 11 22
5.2.15 dhcp server option interface (in System View)

Syntax
dhcp server option code { ascii ascii-string | hex hex-string | ip-address ip-address } { interface ethernet-subinterface-range | all } undo dhcp server option code { interface ethernet-subinterface-range | all }
View
System view
Parameter
code: Option value that needs to be assigned by the user. ascii ascii-string: ASCII string. hex hex-string: 2-digit or 4-digit hexadecimal string, such as hh or hhhh. ip-address ip-address: IP address. ethernet-subinterface-range: Includes all the subinterfaces between two subinterfaces (including these two subinterfaces) by inserting the keyword to between these two interfaces. all: All the interfaces.
Description
Use the dhcp server option command in system view to configure a DHCP self-defined option for the interfaces in a specified range. Use the undo dhcp server option command in system view to delete the configuration. After you configure this command, you cannot view the configuration by executing the display current-configuration command. By calling the dhcp server option cyclically, you can fulfill the batch configurations of the command. Related command: dhcp server option (in interface view) and option.
Example
# Define the hexadecimal strings of the option code 100 to 0x11 and 0x22 for the interface DHCP address pool of the interfaces in the range of Ethernet2/0/0.1 to Ethernet2/0/0.5.
[3Com] dhcp server option 100 hex 11 22 interface ethernet 2/0/0.1 to ethernet 2/0/0.5
5.2.16 dhcp server ping

Syntax
dhcp server ping { packets number | timeout milliseconds } undo dhcp server ping { packets | timeout }
View
System view
Parameter
packets number: The maximum number of ping packets allowed to be sent, which is in the range of 0 to 10 and defaults to 2, with 0 indicating that no ping operation will be performed. timeout milliseconds: The longest time period that the DHCP server waits for the response to each ping packet, which is in the range of 0 to 10000 milliseconds and defaults to 500 milliseconds.
Description
Use the dhcp server ping command to configure the maximum number of ping packets that the DHCP server is allowed to send and the longest time period that the DHCP server should wait for the response to each ping packet. Use the undo dhcp server ping command to restore the default settings. To prevent the address collision resulting from repeated IP address allocation, DHCP server sends ping packets to detect that an address is available.
Example
# Allow the DHCP server to send up to ten ping packets and wait 500 milliseconds (the default setting) for the response to each packet.
[3Com] dhcp server ping packets 10
5.2.17 dhcp server static-bind

Syntax
dhcp server static-bind ip-address ip-address mac-address mac-address undo dhcp server static-bind { ip-address ip-address | mac-address mac-address }
View
Parameter
ip-address: Statically bound IP address. It must be a valid IP address selected from the current interface address pool. mac-address: Statically bound MAC address.
Description
Use the dhcp server static-bind command to configure a static address binding in the DHCP address pool of the current interface. Use the undo dhcp server static-bind command to delete the configuration. By default, static address binding is not configured in any interface address pool. In all the static address binding operations performed on an interface, the IP addresses and the MAC addresses must be unique.
Example
# Statically bind the MAC address 0000-e03f-0305 with the IP address 10.1.1.1.
[3Com-Ethernet1/0/0] dhcp server static-bind 10.1.1.1 0000-e03f-0305
5.2.18 display dhcp server conflict

Syntax
display dhcp server conflict { ip ip-address | all }
View
Any view
Parameter
ip-address: A specified IP address.
all: All the IP addresses.
Description
Use the display dhcp server conflict command to view the DHCP address conflict statistics, including the information in conflicted IP address, conflict detection type, and conflict time. Related command: reset dhcp server conflict.
Example
# View the DHCP address conflict statistics.
<3Com> display dhcp server conflict Address 10.110.1.2 Discover Time Jan 11 2003 11:57: 7 PM
Table 5-1 Description on fields of the display dhcp server conflict command Field Address Discover Time Description The conflicted IP address Time when the conflict is discovered
5.2.19 display dhcp server expired

Syntax
display dhcp server expired { ip ip-address | pool [ pool-name ] | interface [ interface-type interface-number ] all }
View
Any view
Parameter
ip-address: A specified IP address. pool-name: Name of a global address pool. All the global address pools will apply if no address pool has been specified. interface-type interface-number: Interface address pool. All the interface address pools will apply if no interface has been specified. all: All the IP addresses.
Description
Use the display dhcp server expired command to view the expired address leases in a DHCP address pool. In certain conditions, the addresses of the expired leases will be allocated to other DHCP clients.
Example
# View the expired leases in DHCP address pools.
<3Com> display dhcp server expired all Global pool: IP address Interface pool: IP address Hardware address Lease expiration Type Hardware address Lease expiration Type
Table 5-2 Description of the information displayed by executing display dhcp server expired Major item Global pool: Interface pool: IP address Hardware address Lease expiration Type Description Expired address leases in global address pools. Expired address leases in interface address pools. The bound IP address The bound MAC address The lease expiration time Address binding type
5.2.20 display dhcp server free-ip

Syntax
display dhcp server free-ip
View
Any view
Parameter
None
Description
Use the display dhcp server free-ip command to view the ranges of available addresses in DHCP address pools, i.e., information of the IP addresses that have not been allocated yet.
Example
# View the ranges of the available addresses in DHCP address pools.
<3Com> display dhcp server free-ip IP Range from 1.0.0.0 IP Range from 2.2.2.3 IP Range from 4.0.0.0 IP Range from 5.5.5.0 IP Range from 5.5.5.2 to to to to to 2.2.2.1 2.255.255.255 4.255.255.255 5.5.5.0 5.5.5.255
5.2.21 display dhcp server ip-in-use

Syntax
display dhcp server ip-in-use { all | ip ip-address | pool [ pool-name ] | interface [ interface-type interface-number ] }
View
Any view
Parameter
all: Displays all the information. ip-address: Specifies an IP address. If no IP address has been specified, information of all the bound addresses will be displayed. pool-name: Specifies a global address pool. If no global address pool has been specified, the bound addresses in all the global address pools will be displayed. interface-type interface-number: Specifies an interface address pool. If no interface address pool has been specified, the bound addresses in all the interface address pools will be displayed.
Description
Use the display dhcp server ip-in-use command to view the address binding information of DHCP clients, such as the information in hardware address, IP address, and address lease expiration.
Related command: reset dhcp server ip-in-use.
Example
# View the DHCP address binding information.
<3Com> display dhcp server ip-in-use all Global pool: IP address Hardware address VlanId Lease expiration Type
Interface pool: IP address 192.168.80.1 Hardware address VlanId 00e0-fc30-f627 0 Lease expiration Type
Mar31200514:35:40 PM Auto:COMMITTED
--- total 1 entry ---
Table 5-3 Description on the fields of the display dhcp server ip-in-use command Field Global pool: Interface pool: IP address Hardware address VlanId Lease expiration Type Description Address binding information of global address pools Address binding information of interface address pools The bound IP address The bound MAC address Identifies a user uniquely together with a MAC address The lease expiration time Address binding type
5.2.22 display dhcp server statistics

Syntax
display dhcp server statistics
View
Any view
Parameter
None
Description
Use the display dhcp server statistics command to view the statistics on the DHCP server, including such information as number of DHCP address pools, automatically or manually bound address and expired addresses, number of unknown packets, number of DHCP request packets, and number of response packets. Related command: reset dhcp server statistics.
Example
# View the statistic information on the DHCP server.
<3Com> display dhcp server statistics Global Pool: Pool Number: Binding Auto: Manual: Expire: Interface Pool: Pool Number: Binding Auto: Manual: Expire: Boot Request: Dhcp Discover: Dhcp Request: Dhcp Decline: Dhcp Release: Dhcp Inform: Boot Reply: Dhcp Offer: Dhcp Ack: Dhcp Nak: Bad Messages: 0 1 0 0 6 1 4 0 1 0 4 1 3 0 1 0 1 0 5
Table 5-4 Description of the information output by executing display dhcp server statistics Major item Global Pool: Interface Pool: Pool Number Auto Manual Expire Boot Request Dhcp Discover, Dhcp Request, Dhcp Decline, Dhcp Release, Dhcp Inform Boot Reply Dhcp Offer, Dhcp Ack, Dhcp Nak Bad Messages Description Statistics of global address pools Statistics of interface address pools Number of address pools Number of automatically bound IP addresses Number of manually bound IP addresses Number of IP addresses of expired leases Number of messages that DHCP clients sent to the DHCP server
Statistics of the received DHCP packets
Number of messages that the DHCP server sent to DHCP clients Statistics of the transmitted DHCP packets Statistics of packets containing errors
5.2.23 display dhcp server tree

Syntax
display dhcp server tree { pool [ pool-name ] | interface [ interface-type interface-number ] | all }
View
Any view
Parameter
pool-name: Name of a global address pool. All the global address pools will apply if no address pool has been specified. interface-type interface-number: Interface address pool. All the interface address pools will apply if no interface has been specified. all: All the DHCP address pools.
Description
Use the display dhcp server tree command to view the tree-structure information of DHCP address pools, including the address pool at each node, option, address lease period, and DNS server information.
Example
# View the tree-structure information of DHCP address pools.
<3Com> display dhcp server tree all Global pool: Pool name: 5 Child node:6 Sibling node:7 option 1 ip-address 255.0.0.0 expired 1 0 0 option 58 hex 00 00 A8 C0 option 59 hex 00 00 00 3C network 10.10.1.0 255.255.255.0
Pool name: 6
host 10.10.1.2
255.0.0.0
hardware-address 1111.2222.3333 ethernet Parent node:5 option 1 ip-address 255.255.0.0 expired 1 0 0 option 58 hex 00 00 A8 C0 option 59 hex 00 00 00 3C
Pool name: 7
network 10.10.1.64
255.255.255.192
PrevSibling node:5 Sibling node:8 option 1 ip-address 255.0.0.0
Pool name: 8 Child node:9
network 20.10.1.1
255.255.255.0
PrevSibling node:7 option 1 ip-address 255.0.0.0 gateway-list 2.2.2.2 nbns-list 3.3.3.3 netbios-type expired 2 0 0 m-node
option 58 hex 00 01 51 80 option 59 hex 00 00 00 3C
Pool name: 9 Parent node:8
network 30.10.1.64
255.255.255.0
option 1 ip-address 255.0.0.0 gateway-list 2.2.2.2 dns-list 1.1.1.1 domain-name 444444 nbns-list 3.3.3.3 netbios-type expired 2 0 0 option 58 hex 00 01 51 80 option 59 hex 00 00 00 3C Interface pool: Pool name: Ethernet11/2/0 network 5.5.5.0 mask 255.255.255.0 option 1 ip-address 255.255.255.0 gateway-list 5.5.5.5 expired 1 0 0 option 58 hex 00 00 A8 C0 option 59 hex 00 00 00 3C m-node
Table 5-5 Description on the fields of the display dhcp server tree command Field Global pool: Interface pool: Pool Name: Network host 255.0.0.0 10.10.1.2 Statically bound IP address and MAC address Description Global address pool information Interface address pool information Address pool name Address ranges available for allocation
hardware-address 1111.2222.3333 ethernet
Field
Description The child node of the current node is address pool 6. The node in this position can be: Child node, which is the child node (subnet) address pool of the current address pool
child node:6
Parent node, which is the father node (natural network segment) address pool of the current node Sibling node, which is the next sibling node (another subnet on the same natural network segment) address pool. The order of sibling nodes depends on the order in which they are configured. PrevSibling node, which is the previous sibling node of the current node
Option Expired gateway-list dns-list domain-name nbns-list netbios-type
Self-definable DHCP option The address lease period that is indicated by days, hours, and minutes The egress GW router allocated to DHCP clients The DNS servers allocated to DHCP clients Domain name specified for DHCP clients The NetBIOS server allocated to DHCP clients NetBIOS node type specified for DHCP clients
5.2.24 dns-list
Syntax
dns-list ip-address [ ip-address ] undo dns-list { ip-address | all }
View
DHCP address pool view
Parameter
ip-address: IP address of the DNS. You can configure up to eight IP addresses separated by spaces in a command.
Description
Use the dns-list command to configure DNS server IP addresses in a global DHCP address pool. Use the undo dns-list command to delete the configuration. By default, no DNS server address is configured. By far, only up to eight DNS server addresses can be set in each DHCP address pool. Related command: dhcp server dns-list interface, dhcp server dns-list, and dhcp server ip-pool.
Example
# Specify 1.1.1.254 as a DNS server address for DHCP address pool 0.
[3Com] dhcp server ip-pool 0 [3Com-dhcp-0] dns-list 1.1.1.254
5.2.25 domain-name
Syntax
domain-name domain-name undo domain-name domain-name
View
Parameter
domain-name: Domain name that the DHCP server allocates to clients, which is a string comprising of at least three characters and at most 50 characters.
Description
Use the domain-name command to configure the domain name that a global address pool of the DHCP server allocates to clients. Use the undo domain-name command to delete the configured domain name. By default, no domain name has been allocated to DHCP clients, and domain name is null. Related command: dhcp server ip-pool, dhcp server domain-name interface, and dhcp server domain-name.
Example
# Set the domain name of DHCP address pool 0 to mydomain.com.cn.
[3Com] dhcp server ip-pool 0 [3Com-dhcp-0] domain-name mydomain.com.cn
5.2.26 expired
Syntax
expired { day day [ hour hour [ minute minute ] ] | unlimited } undo expired
View
Parameter
day day: Number of days in the range of 0 to 365. hour hour: Number of hours in the range of 0 to 23. minute minute: Number of hours in the range of 0 to 59. unlimited: The valid period is unlimited.
Description
Use the expired command to configure a valid period allowed for leasing IP addresses in a global DHCP address pool. Use the undo expired command to restore the default setting. By default, the leasing valid period is one day. Related command: dhcp server ip-pool, dhcp server expired, and dhcp server expired interface.
Example
# Set the IP address lease period of global address pool 0 to three minutes, two hours, and one day.
[3Com] dhcp server ip-pool 0 [3Com-dhcp-0] expired 1 2 3
5.2.27 gateway-list
Syntax
gateway-list ip-address [ ip-address ] undo gateway-list { ip-address | all }
View
Parameter
ip-address: IP address of egress GW router. You can configure up to eight IP addresses separated by spaces in a command. all: IP addresses of all the egress GW routers.
Description
Use the gateway-list command to configure IP addresses of the egress GW routers used by DHCP clients. Use the undo gateway-list command to delete the configuration. By default, no egress GW router is configured. Related command: dhcp server ip-pool and network.
Example
# Associate the egress GW router at 10.110.1.99 with DHCP address pool 0.
[3Com] dhcp server ip-pool 0 [3Com-dhcp-0] gateway-list 10.110.1.99
5.2.28 nbns-list
Syntax
nbns-list ip-address [ ip-address ] undo nbns-list { ip-address | all }
View
Parameter
ip-address: IP address of NetBIOS server. You can configure up to eight IP addresses separated by spaces in a command. all: All the NetBIOS server IP addresses.
Description
Use the nbns-list command to configure NetBIOS server addresses in a global DHCP address pool for the clients. Use the undo nbns-list command to remove the configured NetBIOS server addresses. By default, no NetBIOS address is configured. By far, only up to eight NetBIOS addresses can be configured in each DHCP address pool. Related command: dhcp server ip-pool, dhcp server nbns-list, dhcp server nbns-list interface, and netbios-type.
Example
# In the DHCP address pool 0, allocate the NetBIOS server at 10.12.1.99 to the clients.
[3Com] dhcp server ip-pool 0 [3Com-dhcp-0] nbns-list 10.12.1.99
5.2.29 netbios-type
Syntax
netbios-type { b-node | h-node | m-node | p-node } undo netbios-type
View
Parameter
b-node: Broadcast mode, i.e., hostname-IP maps are obtained by means of broadcast. p-node: Peer-to-peer mode, i.e., maps are obtained by means of communicating with the NetBIOS server. m-node: Mixed (m) mode, i.e., the mode of type b nodes running peer-to-peer communications mechanism.
h-node: Hybrid (h) mode, i.e., the mode of type p nodes possessing some of the broadcast features.
Description
Use the netbios-type command to configure the NetBIOS node type of the clients of a global DHCP address pool. Use the undo netbios-type command to restore the default setting. By default, clients adopt a type h node (h-node). Related command: dhcp server ip-pool, dhcp server netbios-type (in interface view), dhcp server netbios-type (in system view), and nbns-list.
Example
# Specify b-node as the NetBIOS node type of clients of DHCP address pool 0.
[3Com] dhcp server ip-pool 0 [3Com-dhcp-0] netbios-type b-node
5.2.30 network
Syntax
network ip-address [ mask netmask ] undo network
View
Parameter
ip-address: The subnet address of an IP address pool used for dynamic allocation. mask netmask: Network mask of the IP address pool. Natural mask will be adopted if the parameter is not specified.
Description
Use the network command to configure an IP address range used for dynamic allocation. Use the undo network command to delete the configuration. By default, no IP address range has been configured for dynamic allocation.
Each DHCP address pool can be configured with a network segment and the new configuration will replace the old one. If the system requires several such address segments, you should configure them in multiple address pools. Related command: dhcp server ip-pool and dhcp server forbidden-ip.
Example
# Use 192.168.8.0/24 as the address space for DHCP address pool 0.
[3Com-dhcp-0] network 192.168.8.0 mask 255.255.255.0
5.2.31 option
Syntax
option code { ascii ascii-string | hex hex-string | ip-address ip-address } undo option code
View
Parameter
code: Option value that needs to be assigned by the user. ascii ascii-string: ASCII string. hex hex-string: 2-digit or 4-digit hexadecimal string, such as hh or hhhh. ip-address ip-address: IP address.
Description
Use the option command to configure the self-defined options for a DHCP global address pool. Use the undo option command to delete the DHCP self-defined options. New options are emerging along with the development of DHCP. In order to accommodate these options, manual option addition is supported so that they can be added into the attribute list maintained by the DHCP server. Related command: dhcp server option (in interface view) and dhcp server option interface (in system view).
Example
# Define the hexadecimal strings of the option code 100 to 0x11 and 0x22.
[3Com-dhcp-0] option 100 hex 11 22
5.2.32 reset dhcp server conflict

Syntax
reset dhcp server conflict { ip-address | all }
View
User view
Parameter
ip-address: A specified IP address. all: All the address pools.
Description
Use the reset dhcp server conflict command to clear the statistics of DHCP address collision. Related command: display dhcp server conflict.
Example
# Clear all the address collision statistics.
<3Com> reset dhcp server conflict
5.2.33 reset dhcp server ip-in-use

Syntax
reset dhcp server ip-in-use { ip ip-address | pool [ pool-name ] | interface [ interface-type interface-number ] | all }
View
User view
Parameter
ip-address: Binding information of a specified IP address. pool-name: Specifies a global address pool. All the global address pools will apply if no address pool has been specified.
interface-type interface-number: Specifies an interface address pool. If no interface has been specified, all the interface address pools will apply. all: All the address pools.
Description
Use the reset dhcp server ip-in-use command to clear the DHCP dynamic address binding information. Related command: display dhcp server ip-in-use.
Example
# Clear the binding information of the address 10.110.1.1.
<3Com> reset dhcp server ip-in-use ip 10.110.1.1
5.2.34 reset dhcp server statistics

Syntax
reset dhcp server statistics
View
User view
Parameter
None
Description
Use the reset dhcp server statistics command to clear the statistics on the DHCP server, including such information as number of DHCP address pools, automatically and manually bound addresses and expired addresses, number of unknown packets, number of DHCP request packets, and number of response packets. Related command: display dhcp server statistics.
Example
# Clear statistic information of the DHCP server.
<3Com> reset dhcp server statistics
5.2.35 static-bind ip-address

Syntax
static-bind ip-address ip-address [ mask netmask ] undo static-bind ip-address
View
Parameter
ip-address: IP address to be bound. netmask: Mask of the IP address to be bound. If it is not specified, the natural mask will be adopted.
Description
Use the static-bind ip-address command to bind an IP address statically. Use the undo static-bind ip-address command to delete the statically bound IP address. By default, no IP address is bound statically. The commands static-bind ip-address and static-bind mac-address must be used in pairs so that an IP address and MAC address can be bound together. Related command: dhcp server ip-pool, network, and static-bind mac-address.
Example
# Bind the PC at the MAC address 0000-e03f-0305 with the IP address 10.1.1.1 using the mask 255.255.255.0.
[3Com-dhcp-0] static-bind ip-address 10.1.1.1 mask 255.255.255.0 [3Com-dhcp-0] static-bind mac-address 0000-e03f-0305
5.2.36 static-bind mac-address

Syntax
static-bind mac-address mac-address undo static-bind mac-address
View
Parameter
mac-address: The host MAC address to be bound, which is in the format of H-H-H.
Description
Use the static-bind mac-address command to bind a MAC address statically. Use the undo static-bind mac-address command to delete the statically bound MAC address. By default, no MAC address is bound statically. The commands static-bind mac-address and static-bind ip-address must be used in pairs so that a MAC address and an IP address can be bound together. Related command: dhcp server ip-pool, and static-bind ip-address.
Example
# Bind the PC at the MAC address 0000-e03f-0305 with the IP address 10.1.1.1 using the mask 255.255.255.0.
[3Com-dhcp-0] static-bind ip-address 10.1.1.1 mask 255.255.255.0 [3Com-dhcp-0] static-bind mac-address 0000-e03f-0305
5.3 DHCP Client Configuration Commands

5.3.1 debugging dhcp client
Syntax
debugging dhcp client { event | packet | error | all } undo debugging dhcp client { event | packet | error | all }
View
User view
Parameter
event: Protocol events of the DHCP client, which include address allocation and data updating. packet: DHCP packets received and sent by the DHCP client. error: Unknown packet information or error information. all: Enables debugging of the DHCP client in all the information (event, packet, and error).
Description
Use the debugging dhcp client command to enable debugging on the DHCP client. Use the undo debugging dhcp client command to disable debugging on the DHCP client. By default, DHCP client debugging is disabled.
Example
# Enable event debugging on the DHCP client.
<3Com>debugging dhcp client event
5.3.2 display dhcp client

Syntax
display dhcp client [ verbose ]
View
Any view
Parameter
verbose: Statistic details of the DHCP client.
Description
Use the display dhcp client command to display the statistic information of the DHCP client. Executing the command attached without the keyword parameter verbose will display only the brief address allocation information on the DHCP client.
Example
# Display the statistic details of the DHCP client.
[3Com] display dhcp client verbose DHCP client statistic information: Ethernet0/0: Current machine state: BOUND Alloced IP: 169.254.0.2 255.255.0.0 Alloced lease: 86400 seconds, T1: 43200 seconds, T2: 75600 seconds Lease from 2002.09.20 01:05:03 Server IP: 169.254.0.1 Transaction ID = 0x3d8a7431 Default router: 2.2.2.2 to 2002.09.21 01:05:03
DNS server: 1.1.1.1 Domain name: 3Com.com Client ID: 3COM-00e0.fc0a.c3ef-Ethernet0/0 Next timeout will happen after 0 days 11 hours 56 minutes 1 seconds.
Ethernet2/0: Current machine state: HALT
The statistic information shows that two interfaces, i.e., Ethernet0/0 and Ethernet2/0, have been configured to be DHCP clients. Ethernet0/0 has been assigned with the address 169.254.0.2/16 subject to the lease expiration of 86400 seconds and the current machine state is BOUND. The renewal timer is set to 43200 seconds, the rebinding timer to 75600 seconds, and the lease expiration to the period since 2002.09.20 01:05:03 to 2002.09.21 01:05:03. The selected DHCP server is at 169.254.0.1, the GW at 2.2.2.2, and the DNS server at 1.1.1.1, given the domain name is 3Com.com. In addition, the next timeout will happen 1 second, 56 minutes, and 11 hours later. The allocation process has not been started at Ethernet2/0 yet. The current machine state is HALT, which is normally as a result of the DOWN state of the interface. # Display more details of the DHCP client.
[3Com] display dhcp client verbose DHCP client statistic information: Ethernet0/0: Current machine state: BOUND Alloced IP: 169.254.0.2 255.255.0.0 Alloced lease: 300 seconds, T1: 150 seconds, T2: 262 seconds Lease from 2002.09.15 07:11:55 Server IP: 169.254.0.1 Transaction ID = 0x3d8432b1 Client ID: 3COM-00e0.fc0a.c3ef-Ethernet0/0 Next timeout will happen after 0 days 0 hours 1 minutes 36 seconds. to 2002.09.15 07:16:55
Table 5-6 Statistic information field description of DHCP client Field Ethernet0/0 Current machine state Alloced IP Description Interface where the client is allowed to dynamically obtain an IP address State of the client state machine IP address allocated to the client
Field lease T1 T2 Lease from.to. Server IP Transaction ID Client ID Default router DNS server Domain name Requested IP Offered IP Lease period
Description
Duration of the renewal timer Duration of the rebinding timer The starting time and the end time of the lease The selected DHCP server address Transaction ID User ID GW address DNS server address Domain name The requested IP address The provided IP address
5.3.3 ip address dhcp-alloc

Syntax
ip address dhcp-alloc undo ip address dhcp-alloc
View
Parameter
None
Description
Use the ip address dhcp-alloc command to enable DHCP client on the Ethernet interface to obtain local IP address. Use the undo ip address dhcp-alloc command to disable DHCP client. By default, DHCP client is disabled.
Example
# Enable DHCP client on Ethernet0/0/0.
[3Com-Ethernet0/0/0] ip address dhcp-alloc
5.4 DHCP Relay Configuration Commands

5.4.1 debugging dhcp relay
Syntax
debugging dhcp relay { all | error | event | packet [ client mac mac-address ] } undo debugging dhcp relay { all | error | event | packet }
View
User view
Parameter
all: All DHCP-relay debugging. error: Error debugging for DHCP-relay module. event: Event debugging for DHCP-relay module. packet: Packet debugging for DHCP-relay module. client mac: MAC address of the DHCP client and only displays the information of the specified DHCP client.
Description
Use the debugging dhcp relay command to enable debugging on the DHCP-relay module. Use the undo debugging dhcp relay command to disable DHCP-relay module debugging.
Example
# Enable DHCP-relay module debugging.
<3Com>debugging dhcp relay
5.4.2 dhcp relay release

Syntax
dhcp relay release { client-ip mac-address } [ server-ip ]
View
Interface view, system view
Parameter
client-ip: IP address of the DHCP client. mac-address: MAC address of the DHCP client, which is in the format of H-H-H. server-ip: IP address of the DHCP server.
Description
Use the dhcp relay release command to send an IP address releasing request to a DHCP server via the DHCP relay. In the event no IP address of DHCP server has been specified, in system view, release packets will be sent either to all the DHCP servers if this command is configured in system view or to all the relay addresses configured on an interface if this command is configured in the interface view. After you configure the DHCP relay to release an IP address, it notifies the DHCP server to release the lease of the IP address without notifying the client. The released address is then put in the lease-expired queue. Normally, it will experience some time before participating in allocation again. No debugging information is printed upon execution of this command.
Example
# Send a release packet to the DHCP server at 10.110.91.174, requesting to release the IP address 192.2.2.25, which was offered to the client whose MAC address is 0050-ba34-2000.
[3Com] dhcp relay release 192.2.2.25 0050-ba34-2000 10.110.91.174
5.4.3 display dhcp relay address

Syntax
display dhcp relay address [ interface interface-type interface-num | all ]
View
Any view
Parameter
interface-type interface-num: Specifies an interface by its type and number. all: All the interfaces.
Description
Use the display dhcp relay address command to view the DHCP relay address configuration of an interface. Related command: ip relay address and ip relay address interface.
Example
# View the DHCP relay address configurations of all the interfaces.
<3Com> display dhcp relay address all ** Ethernet11/2/0 DHCP Relay Address 3.3.3.3 **
Relay Address [0] :
5.4.4 display dhcp relay statistics

Syntax
display dhcp relay statistics
View
Any view
Parameter
None
Description
Use the display dhcp relay statistics command to view the statistics of DHCP relay in packet errors, DHCP packets received from clients, DHCP packets received from and sent to servers, and DHCP packets sent to clients (including unicast and broadcast packets).
Example
# View DHCP relay statistics.
<3Com> display dhcp relay statistics
Bad Packets received: DHCP packets received from clients: DHCP DISCOVER packets received: DHCP REQUEST packets received: DHCP INFORM packets received: DHCP DECLINE packets received: DHCP packets received from servers: DHCP OFFER packets received: DHCP ACK packets received: DHCP NAK packets received: DHCP packets sent to servers: DHCP packets sent to clients: Unicast packets sent to clients:
0 0 0 0 0 0 0 0 0 0 0 0 0
5.4.5 ip relay address

Syntax
ip relay address ip-address undo ip relay address [ ip-address ]
View
Interface view
Parameter
ip-address: IP relay address in dotted decimal format.
Description
Use the ip relay address command to specify the exact location of a DHCP server by configuring an IP relay address for it. Use the undo ip relay address command to delete one or all relay IP addresses used by an interface. By default, no relay IP address has been configured. Executing undo ip relay address without ip-address will delete all the relay IP addresses configured on the current interface.
Note: As the packets sent by DHCP client machines in some phases of DHCP are broadcast packets, the interfaces configured with relay IP addresses must support broadcast. In other words, this command can be used on the broadcast-supported network interfaces, for example Ethernet interfaces.
Related command: dhcp select interface.
Example
# Add two relay IP addresses on Ethernet 0/0/0.
[3Com-Ethernet0/0/0] ip relay address 202.38.1.2 [3Com-Ethernet0/0/0] ip relay address 202.38.1.3
5.4.6 ip relay address cycle

Syntax
ip relay address cycle undo ip relay address cycle
View
System view
Parameter
None
Description
Use the ip relay address cycle command to enable the DHCP relay to allocate servers using the load sharing approach, where the HASH algorithm applies, allowing different clients to use different DHCP servers and the same client to use the same DHCP server so long as it is possible. Use the undo ip relay address cycle command to enable the DHCP relay to relay client requests to all the DHCP servers by broadcasting. A user is assigned to a server by the DHCP relay based on its MAC address and only when this MAC address changes may this server be different. That means, a user is associated with only one DHCP server, but one DHCP server can be associated with multiple users. With this mechanism, the users of a server may be unable to obtain addresses after the
server fails because they are not assigned to other servers. Two solutions are available for addressing this problem: recover the server, or delete the configuration of the server from the DHCP Relay to allow the Relay to assign the users to other servers. By default, broadcast applies. Related command: ip relay address.
Example
# Enable the DHCP Relay to assign servers in the load sharing approach.
[3Com] ip relay address cycle
5.4.7 ip relay address interface

Syntax
ip relay address ip-address [ interface ethernet-subinterface-range | all ] undo ip relay address { ip-address | all } { interface ethernet-subinterface-range | all }
View
System view
Parameter
ip-address: IP address of the DHCP server. ethernet-subinterface-range: Includes all the subinterfaces whose interface number lies between two subinterface numbers (including these two subinterfaces) by inserting the keyword to between these two interface numbers. all: In the undo form of the command, the first all refers to all the relay addresses and the second all, the interfaces.
Description
Use the ip relay address interface command to configure a relay address for the Ethernet interfaces in a specified range for the purpose of transparent forwarding. Use the undo ip relay address interface command to delete the configured relay address. By default, no relay IP address has been configured on any Ethernet interface. Related command: ip relay address.
Example
# Add a relay IP address for the interfaces in the range of Ethernet2/0/0.1 to Ethernet2/0/0.5.
[3Com] ip relay address 202.38.1.2 interface ethernet 2/0/0.1 to ethernet 2/0/0.5
5.4.8 reset dhcp relay statistics

Syntax
reset dhcp relay statistics
View
User view
Parameter
None
Description
Use the reset dhcp relay statistics command to clear the DHCP relay statistics. Related command: display dhcp relay statistics.
Example
# Clear the DHCP relay statistics.
<3Com> reset dhcp relay statistics
Chapter 6 IP Performance Configuration Commands

6.1 IP Performance Configuration Commands
6.1.1 debugging ip
Syntax
debugging ip { icmp | packet [ acl { acl-number1 | acl-number2 } ] } undo debugging ip { icmp | packet }
View
User view
Parameter
acl-number1: ACL based on the interface, in the range of 1000 to 1999. acl-number2: ACL in the range of 2000 to 2099. The ACL in the range of 2000 to 2099 is the basic ACL and that in the range of 3000 to 3099 is the advanced ACL.
Description
Using debugging ip icmp command to enable the ICMP debugging. Use the undo debugging ip icmp command to disable the ICMP debugging. The debugging ip packet command is used to enable the IP packet debugging. The filtration to the debugging information can be accomplished by filtering the IP packets via acl. Use the undo debugging ip packet command to disable IP packet debugging.
Example
# Enable the IP debugging.
<3Com> debugging ip packet *0.129680-IP-8-debug_case: Delivering, interface = Serial0/0/0, version = 4, headlen = 20, tos = 6,pktlen = 70, pktid = 49, offset = 0, ttl = 1, protocol = 17,checksum = 50, s = 1.1.1.2, d = 224.0.0.2 prompt: IP packet is delivering up!

*0.129680-IP-8-debug_case:
Sending, interface = Serial0/0/0, version = 4, headlen = 20, tos = 6,pktlen = 70, pktid = 49, offset = 0, ttl = 1, protocol = 17,checksum = 55147, s = 1.1.1.2, d = 224.0.0.2 prompt: Sending the packet from local at Serial0/0/0 <3Com> debugging ip icmp *0.157090-IP-8-debug_icmp: ICMP Receive: echo(Type=8, Code=0), Src = 127.0.0.1, Dst = 1.1.1.2
*0.157090-IP-8-debug_icmp: ICMP Send: echo-reply(Type=0, Code=0), Src = 1.1.1.2, Dst = 127.0.0.1
*0.157090-IP-8-debug_icmp: ICMP Receive: echo-reply(Type=0, Code=0), Src = 1.1.1.2, Dst = 127.0.0.1
6.1.2 debugging tcp event

Syntax
debugging tcp event [ task_id socket_id ] undo debugging tcp event [ task_id socket_id ]
View
User view
Parameter
task_id: The ID of a task. socket_id: The ID of a socket.
Description
Use the debugging tcp event command to enable TCP events debugging. Use the undo debugging tcp event command to disable TCP events debugging. There is limitation on the number of debugging switches enabled, that is, only a fixed number of debugging switches can be enabled at one time (combination of task ID and socket ID). In addition, when TCP is enabled to receive connection request reactively, a new socket will be created to establish that connection, and some programs will create a new task to process the connection, like Telnet server. So to view information about a connection, such parameters as task_id and socket_id cannot be used for filtering.
Example
# Enable debugging of TCP events.
<3Com> debugging tcp event *0.630270-SOCKET-8-TCP EVENT: 1043494683: task = Co0(2), socketid = 0, TCPCB 0x02c6fd74 created
*0.630270-SOCKET-8-TCP EVENT: 1043494683: task = Co0(2), socketid = 1, state CLOSED changed to SYN_SENT
*0.630270-SOCKET-8-TCP EVENT: 1043494683: task = Co0(2), socketid = 1, sending SYN, seq = 74249530, LA = 127.0.0.1:1025, FA = 1.1.1.1:23
*0.630270-SOCKET-8-TCP EVENT: 1043494683: task = Co0(2), socketid = 1, advertising MSS = 512, LA = 127.0.0.1:1025, FA = 1.1.1.1:23
*0.630270-SOCKET-8-TCP EVENT: 1043494683: task = VTYD(9), socketid = 0, received MSS = 512, LA = 1.1.1.1:23, FA = 127.0.0.1:1025
*0.50959090-SOCKET-8-TCP EVENT: 733759463: sending RST to 2.2.2.1:11022
*0.1293330-SOCKET-8-TCP EVENT: 1043495346: task = Co0(2), socketid = 1, connection refused because remote sent RST! LA = 1.1.1.1:1026, FA = 1.1.1.2:21 <3Com> display debugging TCP: TCP event debugging is on for task any socket any
6.1.3 debugging tcp md5

Syntax
debugging tcp md5 undo debugging tcp md5
View
User view
Parameter
None
Description
Use the debugging tcp md5 command to enable the MD5 authentication debugging of the TCP connection. Use the undo debugging tcp md5 command to disable the MD5 authentication debugging of the TCP connection.
Example
# Enable the MD5 authentication debugging of the TCP connection.
<3Com> debugging tcp md5
6.1.4 debugging tcp packet

Syntax
debugging tcp packet [ task_id socket_id ] undo debugging tcp packet [ task_id socket_id ]
View
User view
Parameter
Description
Use the debugging tcp packet command to enable the debugging of TCP connection. The number of debugging switches users can enable is limited, that is, at the same time only a fixed number of debugging switches can be enabled (combination of task ID and socket ID). Use the undo debugging tcp packet command to disable the debugging of TCP connection.
Example
# Enable the debugging of TCP connection.
<3Com> debugging tcp packet <3Com> display debugging *0.100070-SOCKET-8-TCP PACKET: 1043204051: Input: Co0(5) socketId = 2, state = SYN_SENT,
src = 127.0.0.1:1025, dst = 2.2.2.2:23, seq = 11084380, ack = 0, optlen = 4, flag = SYN , window = 8192 1043204051: Output: Co0(5) SocketId = 2, State = SYN_SENT,
src = 127.0.0.1:1025, Dst = 2.2.2.2:23, Seq = 11084380, Ack = 0, Window = 8192 1043204051: Retrans: Co0(5) SocketId = 2, State = SYN_SENT, Datalen = 4, Flag = ACK PSH ,
Src = 127.0.0.1:1025, Dst = 2.2.2.2:23, Seq = 11084380, Ack = 0, Window = 8192 Optlen = 4, Flag = SYN ,
6.1.5 debugging udp packet

Syntax
debugging udp packet [ task_id socket_id ] undo debugging udp packet [ task_id socket_id ]
View
User view
Parameter
Description
Use the debugging udp packet command to enable the debugging of UDP connection. The number of debugging switches users can enable is limited, that is, at the same time only a fixed number of debugging switches can be enabled (combination of task ID and socket ID). Use the undo debugging udp packet command to disable the debugging of UDP connection.
Example
# Enable the debugging of UDP connection.
<3Com> debugging udp packet <3Com> display debugging *0.377770-SOCKET-8-UDP: 1043494431: Output: task = ROUT(6), socketid = 3, src = 1.1.1.1:520, dst = 255.255.255.255:520, datalen = 24,
6.1.6 display fib

Syntax
display fib
View
Any view
Parameter
None
Description
Use the display fib command to view the summary of the Forwarding Information Base. This command outputs the Forwarding Information Base in a list, in which each line represents one route. The following points are included: Destination address/mask length Next hop The current flag, which is expressed in the combination of G, H and U. G represents Gateway, H is Host (host route), and U is UP (available). Time stamp Outbound interface
Example
# Display the summary of the forwarding information base.
<3Com> display fib Destination/Mask 80.10.0.2/32 80.10.255.255/32 80.10.0.0/16 80.50.0.2/32 80.50.255.255/32 Nexthop 80.10.0.2 127.0.0.1 80.10.0.1 80.50.0.2 127.0.0.1 Flag GHU HU U GHU HU TimeStampI t[0] t[0] t[0] t[0] t[0] Interface Serial2/0/0 InLoopBack0 Serial2/0/0 Serial2/0/0 InLoopBack0
6.1.7 display fib acl

Syntax
display fib acl number
View
Any view
Parameter
number: The ACL rules expressed in number, ranging from 2000 to 2999.
Description
Use the display fib acl command to filter and display FIB information. According to ACL number, you can view the FIB table entries matching the filtering rules in a format. When an ACL number in the range 2000 to 2999 is entered, the corresponding ACL will be searched. If no ACL is found, all FIB table entries information will be displayed; and if such an ACL is found, the FIB table entries information will be output in a format. If the number of FIB table entries matching the filtering rules is 0, the following information will be output:
Route entry matched by access-list 2000: Summary count: 0
If the number of FIB table entries matching the filtering rules is not 0, the FIB table entry information will be output in the following format:
Route entry matched by access-list 2000: Summary count: 1 Destination/Mask Nexthop Flag TimeStamp Interface

127.0.0.0/8 127.0.0.1

U t[0] InLoopBack0
Example
# Display the FIB table entries matched by the ACL.
<3Com> display fib acl 2000 Route entry matched by access-list 2000: Summary counts: 1 Destination/Mask 127.0.0.0/8 Nexthop 127.0.0.1 Flag U TimeStamp t[0] Interface InLoopBack0
6.1.8 display fib begin

Syntax
display fib | [ { begin | include | exclude } text ]
View
Any view
Parameter
text: Character.
Description
Use the display fib command to output the lines related to the line containing the character string text in the buffer according to the regular expression. Use the display fib | begin text command to view the lines beginning from the line containing the character string text to the end line of the buffer. Use the display fib | include text command to just view the lines containing the character string text. Use the display fib | exclude text command to view the lines not containing the character string text.
Example
# Display the lines beginning from the line containing the character string 169.254.0.0 to the end line of the buffer:
<3Com> display fib | begin 169.254.0.0 Destination/Mask 169.254.0.0/16 2.0.0.0/16 Nexthop 2.1.1.1 2.1.1.1 Flag U U TimeStamp t[0] t[0] Interface Ethernet0/0/0 Ethernet0/0/0

127.0.0.0/8 127.0.0.1

U t[0] InLoopBack0
# Display all the lines containing the character string Ethernet0:

<3Com> display fib | include ethernet0/0/0 Destination/Mask 169.254.0.0/16 2.0.0.0/16 Nexthop Flag 2.1.1.1 U 2.1.1.1 U TimeStamp t[0] t[0] Interface Ethernet0/0/0 Ethernet0/0/0
# Display all the lines not containing the character string 169.254.0.0:
<3Com> display fib | exclude 169.254.0.0 Destination/Mask 2.0.0.0/16 127.0.0.0/8 Nexthop 2.1.1.1 127.0.0.1 Flag U U TimeStamp t[0] t[0] Interface Ethernet0/0/0 InLoopBack0
6.1.9 display fib ip-prefix

Syntax
display fib ip-prefix listname
View
Any view
Parameter
listname: The name of the prefix list.
Description
Use the display fib ip-prefix command to filter and display FIB information. According to the name of the prefix-list entered, you can view the FIB entries matching the filtering rules in the prefix list in a format. If no FIB table entry matches the prefix list, the prompt information will be displayed that the number of FIB entry matched by the prefix list is 0; if the name of ip-prefix cannot be found, all FIB table entries will be displayed; if the FIB table entries after filtering is not 0, they will be output in a format. If no FIB table entry matching the prefix list, the following information will be output:
Route entry matched by prefix-list abc1: Summary count: 0
If the number of FIB table entries after filtering is not 0, FIB table entry information will be output in the following format:
Route entry matched by prefix-list abc2:

Summary count: 1 Destination/Mask 127.0.0.0/8 Nexthop 127.0.0.1
Flag U
TimeStamp t[0]
Interface InLoopBack0
Example
# Display the FIB table entries matched by the prefix list abc0.
<3Com> display fib ip-prefix abc0 Route Entry matched by prefix-list abc0: Summary count: 4 Destination/Mask 127.0.0.0/8 127.0.0.1/32 169.0.0.0/8 169.0.0.0/15 Nexthop 127.0.0.1 127.0.0.1 2.1.1.1 2.1.1.1 Flag U U SU SU TimeStamp t[0] t[0] t[0] t[0] Interface InLoopBack0 InLoopBack0 Ethernet 0/0/0 Ethernet 0/0/0
6.1.10 display fib longer

Syntax
display fib dest-addr1 [ dest-mask2 ] [ longer ] Use this command to display the FIB table entries matching the destination address. Different parameters selected leads to different matching methods. display fibdest-addr1 dest-mask1 dest-addr2 dest-mask2 Use this command to display the FIB table entries whose destination address ranges from dest-addr1 dest-mask1 to dest-addr2 dest-mask2, including the FIB entries exactly matching dest-addr1 dest-mask1 and dest-addr2 dest-mask2.
View
Any view
Parameter
dest-addr1: The destination IP address 1, which is expressed in dotted decimal format. dest-mask1: The subnet mask 1 corresponding to the destination IP address 1, which is the mask in dotted decimal format or the mask length in integer format. dest-addr2: The destination IP address 2, which is expressed in dotted decimal format. dest-mask2: The subnet mask 2 corresponding to the destination IP address 2, which is the mask in dotted decimal format or the mask length in integer format.
Description
Different parameters selected leads to different matching methods. display fib dest-addr: According to the destination address, if FIB table entries can be found within the range of natural mask, all the subnets will be displayed. Otherwise, only the FIB table entries found by operating the longest match will be displayed. display fib dest-addr dest-mask: The FIB table entries exactly matching the destination address and mask are displayed. display fib dest-addr longer: The FIB table entries matching the destination addresses within the range of natural mask. display fib dest-addr dest-mask longer: The FIB table entries matching the destination IP addresses within the entered mask range. The display fib dest-addr1 dest-mask1 dest-addr2 dest-mask2 command is used to display FIB table entries whose destination address is within the range from dest-addr1 dest-mask1 to dest-addr2 dest-mask2.
Example
# Display the FIB table entries whose destination address matches169.253.0.0 longest with the natural mask range.
<3Com> display fib 169.253.0.0 Destination/Mask 169.0.0.0/16 Nexthop 2.1.1.1 Flag U TimeStamp t[0] Interface Ethernet0/0/0
# Display the FIB entries whose destination address is within the range from 69.254.0.0/16 to 169.254.0.6/16.
<3Com> display fib 169.254.0.0 255.255.0.0 169.254.0.6 255.255.0.0 Destination/Mask 169.254.0.1/16 Nexthop 2.1.1.1 Flag U TimeStamp t[0] Interface Ethernet0/0/0
6.1.11 display fib statistics

Syntax
display fib statistics
View
Any view
Parameter
None
Description
Use the display fib statistics command to display the total number of FIB table entries.
Example
# Display the total numbers of FIB table entries.
<3Com> display fib statistics Route Entry Count : 30
6.1.12 display icmp statistics

Syntax
display icmp statistics
View
Any view
Parameter
None
Description
Use the display icmp statistics command to view the statistics of ICMP packet traffic. Related command: display interface.
Example
# Display the statistics of ICMP packet traffic.
[Router] display icmp statistics Input: bad formats echo 0 5 bad checksum 0
destination unreachable 0 redirects parameter problem information request mask replies 0 0 0 0
source quench 0 echo reply timestamp 15 0
mask requests 0 time exceeded 1 Output:echo 15
destination unreachable 0 redirects parameter problem information reply mask replies 0 0 0 0
source quench 0 echo reply timestamp 5 0
mask requests 0

time exceeded 1
Table 6-1 Description of the output information of the display icmp statistics command Field Input: bad formats bad checksum echo destination unreachable source quench redirects echo reply parameter problem timestamp information request mask requests mask replies information reply time exceeded Description Number of input packets in bad format Number of input packets with wrong checksum Number of input/output echo request packets Number of input/output packets with unreachable destination Number of input/output source quench packets Number of input/output redirected packets Number of input/output echo reply packets Number of input/output packets with parameter problem Number of input/output timestamp packets Number of input information request packets Number of input/output mask request packets Number of input/output mask reply packets Number of output information reply packets Number of time exceeded packets
6.1.13 display ip fast-forwarding cache

Syntax
display ip fast-forwarding cache
View
Any view
Parameter
None
Description
Use the display ip fast-forwarding cache command to view the information on the fast-forwarding table.
Example
# Display the information of the fast-forwarding table.
[Router] display ip fast-forwarding cache Fast-Forwarding cache: Index SrIP SrPort DsIP DsPort Pro Input_If 6 Output_If FLAG
600:0 1.1.3.149 1463
10.10.26.30 23
Ethernet0/0/0 Ethernet1/0/0 81
The above information indicates that the latest cache contains the data flow from port 1463 at 1.1.3.149 to port 23 at 10.10.26.30, with a protocol number 6, i.e. the TCP data, ingress is Ethernet0/0/0 and the egress is Ethernet1/0/0.
6.1.14 display ip interface

Syntax
display ip interface interface-type interface-number
View
Any view
Parameter
Description
Use the display ip interface command to view IP-related information about the specified or all interfaces. By default, if no interface is specified the IP-related information about all interfaces is displayed. The information is helpful for troubleshooting. Related command: display interface, display ip interface brief.
Example
# Display IP-related information about interface Serial 1/0/0.
<3Com> display ip interface serial 1/0/0 Serial1/0/0 current state :UP Line protocol current state :DOWN Internet Address is 1.1.1.2/24 Broadcast address : 1.1.1.255
The Maximum Transmit Unit : 1500 bytes ip fast-forwarding incoming packets state is Enabled ip fast-forwarding outgoing packets state is Enabled input packets : 0, bytes : 0, multicasts : 0 output packets : 0, bytes : 0, multicasts : 0 TTL invalid packet number: ICMP packet input number: Echo reply: Unreachable: Source quench: Routing redirect: Echo request: Router advert: Router solicit: Time exceed: IP header bad: Timestamp request: Timestamp reply: Information request: Information reply: Netmask request: Netmask reply: Unknown type: DHCP packet deal mode: global 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
6.1.15 display ip interface brief

Syntax
display ip interface brief [ interface-type interface-number ]
View
Any view
Parameter
Description
Use the display ip interface brief command to view IP-related summary about the specified or all interfaces. By default, if no interface is specified the IP-related summary about all interfaces is displayed. Related command: display interface, display ip interface.
Example
# Display IP-related summary about all interfaces.
[3Com-Virtual-Template0] display ip interface brief *down: administratively down (l): loopback (s): spoofing Interface Aux0 Ethernet0/0/0 Ethernet0/0/1 IP Address unassigned Physical down Protocol Description down down down up(s) Aux0 Interface Ethernet0/0/0 Interface Ethernet0/0/1 Interface changchen
192.168.0.1 down unassigned down up
Virtual-Template0unassigned
6.1.16 display ip socket

Syntax
display ip socket [ socktype sock_type ] [ task_id socket_id ]
View
Any view
Parameter
sock_type: The type of a socket: (tcp:1, udp 2, raw ip 3) task_id: The ID of a task. socket_id: The ID of a socket.
Description
Use the display ip socket command to display the information about all sockets in the current system.
Example
# Display the information about the socket of TCP type.
<3Com> display ip socket socktype 1 SOCK_STREAM: Task = VTYD(9), socketid = 1, Proto = 6, LA = 0.0.0.0:23, FA = 0.0.0.0:0, sndbuf = 4096, rcvbuf = 4096, sb_cc = 0, rb_cc = 0, socket option = SO_ACCEPTCONN socket state = SS_PRIV SOCK_DGRAM: Task = ROUT(6), socketid = 1, Proto = 17, LA = 0.0.0.0:0, FA = 0.0.0.0:0, sndbuf = 9216, rcvbuf = 41600, sb_cc = 0, rb_cc = 0, socket option = SO_UDPCHECKSUM socket state = SS_PRIV SOCK_RAW: Task = ROUT(6), socketid = 2, Proto = 2, LA = 0.0.0.0, FA = 0.0.0.0, sndbuf = 32767, rcvbuf = 32767, sb_cc = 0, rb_cc = 0, socket option = 0, socket state = SS_PRIV SS_NBIO SS_ASYNC SS_ASYNC SS_ASYNC
Explanations of the display information: SOCK_STREAM: the socket type. Proto: the protocol number used by the socket. sndbuf: the sending buffer size of the socket. rcvbuf: the receiving buffer size of the socket. sb_cc: the current data size in the sending buffer. The value makes sense only for the socket of TCP type, because only TCP is able to cache data. rb_cc: the current data size in the receiving buffer. socket option: the option of the socket. socket state: the state of the socket. # Display the information about the socket with socket ID as 4 and task ID as 8.
<3Com> display ip socket 8 4 Task = VTYD(8), socketid = 4, Proto = 6, LA = 0.0.0.0:23, FA = 0.0.0.0:0, sndbuf = 4096, rcvbuf = 4096, sb_cc = 0, rb_cc = 0,

socket option = SO_ACCEPTCONN socket state = SS_PRIV SS_ASYNC
6.1.17 display ip statistics

Syntax
display ip statistics
View
Any view
Parameter
None
Description
Use the display ip statistics command to view IP traffic statistics information. This command is used to display statistics information such as IP packet transmit/receive, packet assembly/disassembly, which is helpful for fault diagnosis. Related command: display interface, display ip interface, and reset ip statistics.
Example
# Display the IP traffic statistic information.
<3Com> display ip statistics Input: sum bad protocol bad checksum Output: forwarding dropped 7120 0 0 0 0 local bad format bad options local no route 112 0 0 27 2
compress fails 0 Fragment:input dropped fragmented Reassembling:sum 0 0 0 0 couldn't fragment 0 timeouts 0 output 0
Table 6-2 Description of the output information of the display ip statistics command Information Input: sum Sum of input packets Description
Information local bad protocol bad format bad checksum bad options Output: forwarding local dropped no route compress fails Fragment: input output dropped fragmented couldn't fragment Reassembling: sum timeouts
Description Number of received packets whose destination is the local device Number of packets with wrong protocol number Number of packets in bad format Number of packets with wrong checksum Number of packets that has wrong options Number of forwarded packets Number of packets that are sent by the local device Number of dropped packets during transmission Number of packets that cannot be routed Number of packets that cannot be compressed Number of input fragments Number of output fragments Number of dropped fragments Number of packets that are fragmented Number of packets that cannot be fragmented Number of packets that are reassembled Number of packets that time out
Note: When fast forwarding is functioning, the sum of input packets and the number of forwarded packets only count in unicast packets. The likelihood exists that some other types of packets are counted in, for example, broadcast packets sent/received before fast forwarding is enabled and/or other types of packets sent/received after fast forwarding fails.
6.1.18 display tcp statistics

Syntax
display tcp statistics
View
Any view
Parameter
None
Description
Use the display tcp statistics command to view TCP traffic statistic information. The command is used to display the traffic statistic information of all the active TCP connections. Statistics information is classified into two parts, receiving and sending, and each part is further classified according to different types of packets. For example, for receiving packets, there are retransmission packets number, keep-alive detection packets number, etc. Also the statistics closely related to connection are displayed, such as connection number received, retransmission packets number, and keep-alive detection packets number. The unit of statistics results is packet, and sometimes byte. Related command: display tcp status.
Example
# Display the TCP traffic statistic information.
<3Com> display tcp statistics Received packets: Total: 0 packets in sequence: 0 (0 bytes) window probe packets: 0, window update packets: 0 checksum error: 0, bad offset : 0, too short : 0 duplicate packets : 0 (0 bytes), partially duplicate packets : 0(0 bytes)
out-of-order packets : 0 (0 bytes) packets with data after window : 0 (0 bytes) packets after close : 0 ack packets:0 (0 bytes), duplicate ack packets:0, ack packets with unsend data:0 Sent packets: Total: 0 urgent packets: 0 control packets: 0 ( 0 RST) window probe packets: 0, window update packets: 0 data packets : 0 (0 bytes), data packets retransmitted: 0 (0 bytes) ack only packets : 0(0 delayed) Total retransmit timeout: 0, connections dropped in retransmit timeout: 0
Keepalive timeout: 0, keepalive probe: 0, dropped connections in keepalive: 0 Initiated connections: 0, accepted connections: 0,established connections: 0
Closed connections: 0,( dropped: 0, embryonic dropped: 0) Dropped packets with MD5 authentication : 0 Permitted packets with MD5 authentication : 0
The above information means: Receiving statistics: Total number of packets received: 0 The number of packets reaching as the order (total bytes: 0): 0 Window detection packets number: 0, window upgrading packets number: 0. The number of packet verification errors: 0, the number of packet length errors: 0. The number of totally repeated packets: 0 (the total bytes: 0), the number of partial repeated packets: 0 (the total bytes: 0). The number of packets with confusing order: 0 (the total bytes: 0). The number of packets reaching outside of the receiving window: 0 (the total bytes: 0). The number of packets reaching after connection being closed: 0. The confirmed packets number: 0 (the bytes of the confirmed data: 0), the repeated confirmed packets number: 0, ACK packets number already being confirmed but not being sent yet: 0. Sending statistics: Total number of packets sent: 0. The urgent packets number: 0. The control packets number: 0. (RST packets number: 0). The window detection packets number: 0, the window upgrading packets number: 0. The data packets number: 0 (the total bytes: 0) he retransmission packets number: 0 (the total bytes: 0). ACK packets number: 0 (delay ACK packets number: 0) The time-out times of retransmission timer: 0, the connection number discarded due to retransmission times beyond limitation: 0. The time-out times of keep-alive timer: 0, the times of sending keep-alive detection packets: 0. The number of connections initiated: 0, the number of connections received: 0, the number of connections established: 0.
The number of connections closed already: 0, the number of connections discarded accidentally (after SYN is received):0, the times of connections actively failed to establish (before SYN is received): 0. The packets number discarded after MD5 verification: 0. The packets number passing MD5 verification: 0.
6.1.19 display tcp status

Syntax
display tcp status
View
Any view
Parameter
None
Description
Use the display tcp status command to monitor TCP connection any time. Related command: display local-user.
Example
# Display the TCP connection status.
<3Com> display tcp status TCPCB 0442c394 045d8074 Local Address 10.110.93.146.23 0.0.0.0.21 Foreign Address 10.110.93.175.1538 0.0.0.0.0 State ESTAB LISTEN
6.1.20 display udp statistics

Syntax
display udp statistics
View
Any view
Parameter
None
Description
Use the display udp statistics command to view TCP traffic statistic information. The command is used to display traffic statistic information of all the active TCP connections. Statistics information is classified into two parts, receiving and sending, and each part can be further classified according to different types of packets, for example, as checksum packets and error packets. Moreover there are statistics closely related to connection, such as the number of broadcast packets. The statistics information is organized in terms of packet. For related configurations please refer to the reset udp statistics command.
Example
# Display the UDP traffic statistic information.
<3Com> display udp statistics Received packet: Total: 0 checksum error: 0 shorter than header: 0, data length larger than packet: 0 no socket on port: 0 total broadcast or multicast packets : 0 no socket broadcast or multicast packets: 0 not delivered, input socket full: 0 input packets missing pcb cache: 0 Sent packet: Total: 0
Table 6-3 Description on the fields of the display udp statistics command Field Received packet: Total: 0 checksum error: 0 shorter than header: 0 data length larger than packet: 0 no socket on port: 0 Description Statistics about the received packets Total number of received UDP packets Number of the packets with checksum error Number of the packets with data length shorter than header Number of the receieved packets larger than the allowed packet length Number of the received packets with an unknown port number
Field total broadcast or multicast packets : 0 no socket packets: 0 broadcast or multicast
Description Number of the received broadcasts or multicasts Number of the received broadcasts or multicasts with an unknown port number Number of the packets that are not delivered because the input socket is full Number of the packets that mismatch the PCB cache Statistics about the transmitted packets Total number of the transmitted packets
not delivered, input socket full: 0 input packets missing pcb cache: 0 Sent packet: Total: 0
6.1.21 ip fast-forwarding
Syntax
ip fast-forwarding [ inbound | outbound ] undo ip fast-forwarding
View
Interface view
Parameter
inbound: Allows fast-forwarding only on the inbound interface. outbound: Allows fast-forwarding only on the outbound interface.
Description
Use the ip fast-forwarding command to enable fast packet forwarding on the outbound interface. Use the undo ip fast-forwarding command to disable fast-forwarding on the outbound interface. By default, fast-forwarding is allowed on both inbound and outbound interfaces. Fast-forwarding is well-suited to high-speed links (such as Ethernet and FR). Its function will be rendered useless, however, on a low-speed link due to the low transmission rate such a link can provide.
3Com Routers support fast-forwarding on the links of various high-speed interfaces such as Ethernet, synchronous PPP, FR, and HDLC, on the interfaces configured with firewall and NAT features, and on the virtual tunnel interface of GRE as well. However, it should be noted that the interface configured with the function of fast-forwarding will be unable to send ICMP redirection packets.
Example
# Disable the interface to fast forward packets.
[3Com-Ethernet/0/0] undo ip fast-forwarding
# Enable the interface to fast forward packets on ingress.

[3Com-Ethernet0/0/0] ip fast-forwarding inbound
6.1.22 reset ip fast-forwarding cache

Syntax
reset ip fast-forwarding cache
View
User view
Parameter
None
Description
Use the reset ip fast-forwarding cache command to reset the fast-forwarding cache. This command is used to clear the fast-forwarding cache. The fast-forwarding table will not contain any fast-forwarding entry after having been cleared.
Example
# Clear the fast-forwarding cache.
<3Com> reset ip fast-forwarding cache
6.1.23 reset ip statistics

Syntax
reset ip statistics
View
User view
Parameter
None
Description
Use the reset ip statistics command to clear the IP statistics information. In special cases it is necessary to clear the IP statistics information and perform new statistics. Related command: display ip interface and display ip statistics.
Example
# Clear IP statistics information.
<3Com> reset ip statistics
6.1.24 reset tcp statistics

Syntax
reset tcp statistics
View
User view
Parameter
None
Description
Use the reset tcp statistics command to clear TCP traffic statistic information. After the execution of this command, theres no prompt information on the screen, and the existing statistics are cleared. Related command: display tcp statistics.
Example
# Display the TCP traffic statistic information.
<3Com> reset tcp statistics
6.1.25 reset udp statistics

Syntax
reset udp statistics
View
User view
Parameter
None
Description
Use the reset udp statistics command to clear the UDP statistics information. After the execution of this command, theres no prompt information on the screen, and the existing statistics are cleared.
Example
# Clear UDP traffic statistics information.
<3Com> reset udp statistics
6.1.26 tcp mss

Syntax
tcp mss value undo tcp mss
View
Interface view
Parameter
Value: The threshold for the TCP packet to be fragmented, with the value ranging from 128 to 2048.
Description
Use the tcp mss command to designate a value as a threshold for TCP packets to be fragmented. The undo tcp mss command is used to prevent TCP packets from being fragmented. As the default MTU of the interface being 1500 bytes, this restricts the total
length of encryption packet head + data link expenditure + IP packet head + TCP packet to 1500 bytes. So the dear length of TCP packets to fragment may be about 1200 bytes. By default, TCP packets are not fragmented.
Example
# Configure the threshold of TCP packet fragmentation to be 300.
[3Com-Ethernet0/0/0] tcp mss 300
6.1.27 tcp timer fin-timeout

Syntax
tcp timer fin-timeout time-value undo tcp timer fin-timeout
View
System view
Parameter
time-value: TCP finwait timer value, in second, with the value range of 76 to 3600.
Description
Use the tcp timer fin-timeout command to configure the TCP finwait timer. Use the undo tcp timer fin-timeout command to restore the default value of the timer. By default, TCP finwait timer value is 675 seconds. When the TCP connection status changes from FIN_WATI_1 to FIN_WAIT_2, the finwait timer is enabled. If FIN packet is not received before the timeout of finwait timer, the TCP connection will be closed. The configuration of this parameter needs to be implemented under the guidance of the technical support engineers. Related command: tcp timer syn-timeout and tcp window.
Example
# Configure the TCP finwait timer value as 675 seconds.
[3Com] tcp timer fin-timeout 675
6.1.28 tcp timer syn-timeout

Syntax
tcp timer syn-timeout time-value undo tcp timer syn-timeout
View
System view
Parameter
time-value: TCP synwait timer value in second, with the value range of 2 to 600.
Description
Use the tcp timer syn-timeout command to configure the TCP synwait timer. Use the undo tcp timer syn-timeout command to restore the default value of the timer. By default, the TCP synwait timer value is 75 seconds. When a syn packet is sent, TCP enables the synwait timer. If the response packet is not received before synwait timeout, the TCP connection will be disabled. The configuration of this parameter needs to be implemented under the guidance of technical support engineers. Related command: tcp timer fin-timeout and tcp window.
Example
# Configure the TCP synwait timer value as 75 seconds.
[3Com] tcp timer syn-timeout 75
6.1.29 tcp window

Syntax
tcp window-size window-size undo tcp window
View
System view
Parameter
window-size: The size of the transceiving buffer of the connection-oriented Socket in kilobytes (KB), with the value ranging from 1 to 32.
Description
Use the tcp window command to configure the size of the transceiving buffer of the connection-oriented Socket. Use the undo tcp window command to restore the default size of the buffer, or 8 KB. The configuration of this parameter needs to be implemented under the guidance of technical support engineers. Related command: tcp timer fin-timeout, tcp timer syn-timeout.
Example
# Configure the size of the transceiving buffer of the connection-oriented Socket as 4 KB.
[3Com] tcp window 4
Chapter 7 NAT Configuration Commands

7.1 NAT Configuration Commands
7.1.1 debugging nat
Syntax
debugging nat { alg | event | packet [ interface { interface-type interface-number ] } undo debugging nat { alg | event | packet [ interface interface-type interface-number ] }
View
User view
Parameter
alg: Enables the application level gateway NAT debugging information. event: Enables NAT event debugging information. packet: Enables NAT data packet debugging information. interface: Enables NAT packet debugging for a special interface.
Description
Use the debugging nat command to enable the NAT debugging function. Use the undo debugging nat command to disable the NAT debugging function.
Example
None
7.1.2 display nat

Syntax
display nat { address-group | aging-time | all | outbound | server | statistics | session [ vpn-instance vpn-instance-name ] [ slot slot-number ] [source global global-addr | source inside inside-addr ] [ destination ip-addr ] }
View
Any view
Parameter
address-group: Displays the information of the address pool. aging-time: Displays the effective time for NAT connection. all: Displays all the information about NAT. outbound: Displays the information of the outbound NAT. server: Displays the information of the internal server. statistics: Displays the statistics of current NAT records. session: Displays the information of the currently activated connection. vpn-instance vpn-instance-name: Displays the NAT table items of a special VPN. The omission of this parameter means that NAT items for all VPNs will be listed out. slot slot-number: Designates the slot number of an interface. This parameter is reserved especially for distributed environment use. source global global-addr: Only displays the NAT entry with address as global-addr after NAT. source inside inside-addr: Only displays the NAT entry with internal address as inside-addr. destination ip-addr: Displays the NAT table items of a special IP destination.
Description
Use the display nat command to display the configuration of address translation. Users can verify if the configuration of address translation is correct according to the output information after execution of this command. When address translation connection information is displayed, the parameters of global-addr and inside-addr can be specified for the display nat session command simultaneously.
Example
# Display all the information about address translation.
<3Com> display nat all Protocol VPN: 0, GlobalAddr 172.18.65.55 Port --InsideAddr 1.1.1.1 Port --DestAddr --Port ---
status: NOPAT,
TTL: 00:04:00,
Left: 00:00:33
Table 7-1 Description on the fields of the display nat command Field
Protocol
Description Protocol number. VPN indicates that the entry corresponds to a MPLS VPN virtual route forwarding instance.
Translated external address (source address) and port (source port).
GlobalAddr Port
Note: Since a nat session entry is dynamically generated for packets sent from the internal network to external networks, the naming and meaning of the fields is from the perspective of the internal network. Internal address (source address) and port (source port) to be translated. Destination address of the packet. Destination port of the packet. A hexadecimal value indicating the status. When the status is NOPAT, the value is the special identification of the nat session entry in NOPAT mode. Note: The value contains 32 bits, each of which indicates a specific status attribute of the entry.
InsideAddr Port DestAddr Port
status
TTL Left
Time for which the entry exists, in the format of hh:mm:ss. Time after which the entry expires from now on, in the format of hh:mm:ss.
7.1.3 nat address-group

Syntax
nat address-group group-number start-addr end-addr undo nat address-group group-number
View
System view
Parameter
group-number: Defined Address pool ID, it is an integer ranging from 0 to 31. start-addr: Starting IP address in the address pool.
end-addr: Ending IP address in the address pool.
Description
Use the nat address-group command to configure an address pool. Use the undo nat address-group command to delete an IP address pool. Address pool indicates the cluster of some outside IP addresses. If start-addr and end-addr are the same, it means that there is only one address.
Caution: The length of an address pool (numbers of all addresses contained in an address pool) cannot exceed 256. The address pool cannot be deleted if it has been correlated to a certain access control list to perform address translation.
Example
# Configure an address pool from 202.110.10.10 to 202.110.10.15, with its NAT pool ID being 1.
[3Com] nat address-group 1 202.110.10.10 202.110.10.15
7.1.4 nat aging-time

Syntax
nat aging-time { default | { dns | ftp-ctrl | ftp-data | icmp | pptp | tcp | tcp-fin | tcp-syn | udp } seconds }
View
System view
Parameter
default: Sets the address translation lifetime values to the defaults. dns: Sets the address translation lifetime for DNS to 60 seconds (default). ftp-ctrl: Sets the address translation lifetime for FTP control links to 7200 seconds (default).
ftp-data: Sets the address translation lifetime for FTP data links to 240 seconds (default). icmp: Sets the address translation lifetime for ICMP to 60 seconds (default). pptp: Sets the address translation lifetime for PPTP to 86400 seconds (default). tcp: Sets the address translation lifetime for TCP to 86400 seconds (default). tcp-fin: Sets the address translation lifetime for TCP FIN or TCP RST connections to 60 seconds (default). tcp-syn: Sets the address translation lifetime for TCP SYN connections to 60 seconds (default). udp: Sets the address translation lifetime for UDP to 300 seconds (default). seconds: Time value in the range 10 to 86400 (24 hours).
Description
Use the nat aging-time command to set the lifetime of NAT connections. This command is used to set the lifetime of address translation connection in seconds, and different time values are set for different types of protocols.
Example
# Set the valid connection time of TCP to 240 seconds.
[3Com] nat aging-time tcp 240
7.1.5 nat outbound

Syntax
nat outbound acl-number [ address-group group-number [ no-pat ] ] undo nat outbound acl-number [ address-group group-number [ no-pat ] ]
View
Interface view
Parameter
address-group: Configures address translation by means of address pool. If the address pool is not specified, use the IP address of the interface as the translated address, i.e., the "easy ip" feature. no-pat: Uses simple address translation, which means only to translate the address of the packet and not use port information. acl-number: ACL index in the range of 2000 to 3999 (the advanced ACL can be used).
group-number: The number of a defined address pool.
Description
Use the nat outbound command to associate an ACL with an address pool, indicating that the address specified in the acl-number can be translated by using address pool group-number. Use the undo nat outbound command to remove the corresponding address translation. Translation of the source address of the packet that conforms to the ACL is accomplished by configuring the association between the ACL and the address pool. The system performs address translation by selecting one address in the address pool or by directly using the IP address of the interface. Users can configure different address translation associations at the same interface. The corresponding undo form of the command can be used to delete the related address translation association. Normally, this interface is connected to ISP, and serves as the exit interface of the inside network. The command without the address-group parameter implements the "easy-ip" feature. When performing address translation, the IP address of the interface is used as the translated address and the ACL can be used to control which addresses can be translated. Suppose that you directly take the interface address as the public network address after NAT, if you change the interface address in order to visit the external network, you must use the reset nat session command to clear the original NAT address mapping entry, otherwise, the NAT entry can neither be deleted automatically or by the command reset nat session.
Example
# Enable the hosts of the 10.110.10.0/24 network segment to perform address translation by selecting the addresses from 202.110.10.10 to 202.110.10.12 as the translated address. Suppose that the interface Serial0/0/0 connects to ISP.
[3Com] acl number 2001 [3Com-acl-basic-2001] rule permit source 10.110.10.0 0.0.0.255 [3Com-acl-basic-2001] rule deny
# Configure the address pool.

[3Com] nat address-group 1 202.110.10.10 202.110.10.12
# Allow address translation and use the addresses of address pool 1 for address translation. During translation, the information of TCP/UDP port is used.
[3Com-Serial0/0/0] nat outbound 1 address-group 1
# Delete the corresponding configuration.
[3Com-Serial0/0/0] undo outbound 1 address-group 1
# Configuration of simple address translation (Not using the TCP/UDP port information to perform the address translation)
[3Com-Serial1/0/0] nat outbound 1 address-group 1 no-pat

[3Com-Serial0/0/0] undo nat outbound 1 address-group 1 no-pat
# The configuration that can be used when performing address translation by using the IP address of interface Serial0/0/0 directly.
[3Com-Serial0/0/0] nat outbound 1

[3Com-Serial0/0/0] undo nat outbound 1
7.1.6 nat outbound static

Syntax
nat outbound static
View
Interface view
Parameter
None
Description
Use the nat outbound static command to apply on the interface one-to-one address translation configured using the nat static command.
Example
# Apply one-to-one address translation on the interface Serial0/0/0.
[3Com-serial0/0/0]nat outbound static
7.1.7 nat server

Syntax
nat server [ vpn-instance vpn-instance-name ] protocol pro-type global global-addr global-port1 global-port2 inside host-addr1 host-addr2 host-port
nat server [ vpn-instance vpn-instance-name ] protocol pro-type global global-addr [ global-port ] inside host-addr [ host-port ] undo nat server [ vpn-instance vpn-instance-name ] protocol pro-type global global-addr global-port1 global-port2 inside host-addr1 host-addr2 host-port undo nat server [ vpn-instance vpn-instance-name ] protocol pro-type global global-addr [ global-port ] inside host-addr [ host-port ]
View
Interface view
Parameter
vpn-instance-name: The virtual route forwarding instance of the VPN that the internal server belongs to. If the parameter is not configured, it represents that the internal server belongs to an ordinary private network, other than MPLS VPN. global-addr: An IP address provided for the outside to access (a legal IP address). global-port: A service port number provided for the outside to access. If ignored, its value will be the same as the host-ports value. host-addr: IP address of the server in internal LAN. host-port: Service port number provided for a server in the range of 0 to 65535, and the common used port numbers are replaced by key words. For example, www service port number is 80, which can also be represented by www. ftp service port number is 21, and ftp can also stands for it. If the inside-port is 0, it indicates that all the types of services can be provided and the key word any can be used to stand for it in this situation. If the parameter is not configured, it is considered as the case of any, which is the same as that there is a static connection between global-addr and host-addr. When the host-port is configured as any, the global-port also should be any, otherwise the configuration is illegal. global-port1, global-port2: Specifies a port range through two port numbers, forming a corresponding relation with the internal host address range. global-port2 must be larger than global-port1. host-addr1, host-addr2: Defines a group of consecutive address ranges, which respectively one-to-one matches the port ranges defined above. host-addr2 must be bigger than host-addr1. The number of the address ranges should be the same as the number of ports defined by global-port1 and global-port2. pro-type: The protocol type carried by IP, possibly being a protocol ID, or a key word as a substitution. For example: icmp (its protocol ID is 1), tcp (its protocol ID is 6), udp (its protocol ID is 7).
Description
Use the nat server command to define the mapping table of an internal server. Users can access the internal server with the address and port as host-addr and host-port respectively through the address port defined by global-addr and global-port. Use the undo nat server command to remove the mapping table. Through this command, you can configure some internal network servers for outside use. The internal server can locate in the ordinary private network or in MPLS VPN. For example, www, ftp, telnet, kpop3, dns and so on. Up to 256 internal server conversion commands can be configured on one interface, and at most 4096 internal servers can be configured on one interface. Up to 1024 internal server conversion commands can be configured in one system. If the nat servers are configured in the form of port range (i.e., specify a port range through configuring global-port1 and global-port2, forming a corresponding relation with the address range of the internal hosts), then the number of internal servers will be the same as that of the ports configured, and the max number is also 4096. The interface on which this command is configured is interconnected with ISP and serves as the gateway of the internal network.
Example
# Specify the IP address of the interior www server of the LAN as 10.110.10.10, the IP address of the interior ftp server as 10.110.10.11. It is expected that the outside can access WEB through http:// 202.110.10.10:8080 and connect FTP web site through ftp://202.110.10.10. Suppose that Serial0/0/0 is connected to ISP.
[3Com-Serial0/0/0] nat server protocol tcp global 202.110.10.10 8080 inside 10.110.10.10 www [3Com] ip vpn-instance vrf10 [3Com-vpn-instance] route-distinguisher 100:001 [3Com-Serial0/0/0] 10.110.10.11 ftp nat server protocol tcp global 202.110.10.10 inside
# Specify one interior host 10.110.10.12, expecting that the host of the exterior network can ping it with ping 202.110.10.11 command.
[3Com-Serial0/0/0] 10.110.10.12 nat server protocol icmp global 202.110.10.11 inside
# Delete the www server.

[3Com-Serial0/0/0] undo nat server protocol tcp global 202.110.10.10 8070 inside 10.110.10.10 www
# By the command below, the internal ftp server of VPN vrf10 can be removed.
[3Com-Serial0/0/0] undo nat server protocol tcp global 202.110.10.11 8070 inside 10.110.10.11 ftp
# Specify an outside address as 202.110.10.10, and map the ports ranging from 1001 to 1100 to the addresses of 10.110.10.1 to 10.110.10.100 respectively to access ftp service inside VPN vrf10. 202.110.10.10:1001 accesses 10.110.10.1 and 202.110.10:1002 accesses 10.110.10.2, etc.
[3Com-Serial0/0/0] nat server protocol tcp global 202.110.10.10 1001 1100 inside 10.110.10.1 10.110.10.100 telnet
7.1.8 nat static

Syntax
nat static ip-addr1 ip-addr2 undo nat static ip-addr1 ip-addr2
View
System view
Parameter
ip-addr1: Private IP address of an internal host. ip-addr2: Public IP address.
Description
Use the nat static command to configure a one-to-one private-to-public address binding. Use the undo nat static command to delete an existing one-to-one private-to-public address binding.
Example
# Bind an internal private IP address with a public IP address for one-to-one address translation.
[3Com] nat static 192.168.1.1 2.2.2.2
7.1.9 reset nat

Syntax
reset nat { log-entry | session slot slot-number }
View
User view
Parameter
log-entry: Clears NAT log buffer. slot slot-number: Number of the interface card, which only exists in the distributed environment. session: Clears the information of the address translation table.
Description
This command is used to clear up the mapping tables of address translation in the memory and release all the memory dynamically allocated to store the mapping tables.
Example
# In the central environment, clear NAT log buffer.
<3Com> reset nat log-entry
# In the distributed environment, clear NAT log buffer.

<3Com> reset nat log-entry slot 10
# In the central environment, clear information of the address translation table.

<3Com> reset nat session
# In the distributed environment, clear information of the address translation table.

<3Com> reset nat session slot 10
Chapter 8 IP Unicast Policy Routing Configuration Commands

8.1 IP Unicast Policy Routing Configuration Commands
8.1.1 apply default output-interface
Syntax
apply default output-interface interface-type interface-number [ interface-type
interface-number ] undo apply default output-interface [ interface-type interface-number [ interface-type interface-number ] ]
View
Route-policy view
Parameter
Description
Use the apply default output-interface command to set default forwarding interface for packets. Use the undo apply default output-interface command to cancel the configuration of the default forwarding interface of packets. This command is used to set forwarding interface for the matched IP packet, and the clause is valid for the packet whose route has not been found. Use this command to set the next hop where the matched IP packets are to be forwarded. At most, you can set two next hop interfaces. Related command: apply ip-precedence, apply ip-address next-hop, apply
output-interface, apply ip-address default next-hop.
Example
# Set the default forwarding interface of packets as serial 0/0/0.
[3Com-route-policy] apply default output-interface serial 0/0/0
8.1.2 apply ip-address default next-hop

Syntax
apply ip-address default next-hop ip-address [ ip address ] undo apply ip-address default next-hop [ ip-address [ ip address ] ]
View
Route-policy view
Parameter
ip-address: IP address of default next hop.
Description
Use the apply ip-address default next-hop command to set the default next hop of a packet. Use the undo apply ip-address default next-hop command to cancel the configured default packet next hop. This command is only valid for the packet whose route has not been found. Use this command to set the next hop where the matched IP packets are to be forwarded. At most, you can set two next hop interfaces. Related command: apply ip-precedence, apply output-interface, apply default output-interface, and apply ip-address next-hop.
Example
# Set the default next hop of a packet to 1.1.1.1.
[3Com-route-policy] apply ip-address default next-hop 1.1.1.1
8.1.3 apply ip-address next-hop

Syntax
apply ip-address next-hop ip-address [ ip-address ] undo apply ip-address next-hop [ ip-address [ ip-address ] ]
View
Route-policy view
Parameter
ip-address: IP address of next hop.
Description
Use the apply ip-address next-hop command to set the packet next hop. Use the undo apply ip-address next-hop command to cancel the configuration of the next hop. This command is used to set the next hop for the matched IP packet and, at most, two next hops can be specified. The next hop should be adjacent to this device. The acl argument does not take effect in unicast policy routing. Related command: apply ip-precedence, apply output-interface, apply default output-interface, apply ip-address default next-hop.
Example
# Set the packet next hop to 1.1.1.1.
[3Com-route-policy] apply ip-address next-hop 1.1.1.1
8.1.4 apply ip-precedence

Syntax
apply ip-precedence value undo apply ip-precedence
View
Route-policy view
Parameter
value: The preference value. There are totally 8 (in the range 0 to 7) preferences: 0 1 2 3 4 5 6 routine priority immediate flash flash-override critical internet
network
Description
Use the apply ip-precedence command to set the precedence of IP packets. Use the undo apply ip-precedence command to remove the precedence of IP packets. This command is used to configure the set clause of route-policy and the preference for the matched IP packets. Related command: apply output-interface, apply ip-address next-hop, apply default output-interface, and apply ip-address default next-hop.
Example
# Set the preference of IP packet to 5 (critical).
[3Com-route-policy] apply ip-precedence critical
8.1.5 apply output-interface

Syntax
apply output-interface interface-type interface-number [ interface-type interface-number ] undo apply output-interface [ interface-type interface-number [ interface-type interface-number ] ]
View
Route-policy view
Parameter
Description
Use the apply output-interface command to set a packet forwarding interface. Use the undo apply output-interface command to cancel the configuration on a forwarding interface. This command is used to set the packet forwarding interface for the matched IP packet. At most two forwarding interfaces can be specified. The acl argument does not take effect in unicast policy routing. Related command: apply ip-precedence, apply ip-address next-hop, apply default output-interface, apply ip-address default next-hop.
Example
# Specify forwarding interface as serial0/0/0 for the matched IP packet.
[3Com-route-policy] apply output-interface Serial 0/0/0
8.1.6 display ip policy

Syntax
display ip policy
View
Any view
Parameter
None
Description
Use the display ip policy command to view the routing policies of local and configured interface policy routings. This command is used to display the routing policies of local and configured interface policy routings.
Example
# Display the routing policies of the local and configured interface policy routings.
<3Com> display ip policy Route-policy pr02 pr02 pr01 Interface Local Virtual-Template0 Ethernet 0/0/0
The first line is prompt information. The first row shows where is used the routing policy indicated in the second row. Take the first line as an example, "local" indicates that the policy routing is used on the local router, i.e., all packets sent from the local router (not forward through it) using the policy routing "pr02". The second and third lines represent that the interfaces virtual-template0 and Ethernet0/0/0 use route policy pr02 and pr01 respectively.
8.1.7 display ip policy setup

Syntax
display ip policy setup { local | interface interface-type interface-number }
View
Any view
Parameter
local: Displays the setting information of local policy routings. interface: Displays the setting information of interface policy routings. interface-type: Interface type. interface-number: Interface number.
Description
Use the display ip policy setup command to view the setting information of policy routings.
Example
# Display the configurations of policy routing on the specified interface, regardless of whether the policy routing is enabled.
<3Com> display ip policy setup interface ethernet 0/0/0 route-policy pr01 permit 0 if-match acl 3101 apply output-interface Serial1/0/0
This command displays the configurations of the policy routing named pr01 on interface Ethernet 0/0/0. As shown above, the policy routing has one 0 node and includes an if-match clause and an apply clause. For the accurate meanings of the if-match clause and the apply clause refer to the description on the command. The output of the display ip policy setup local command is the same as that of the display ip policy setup interface command, except that it displays the policy routing enabled on this router but not the configuration of the specified route-policy.
8.1.8 display ip policy statistic

Syntax
display ip policy statistic { local | interface interface-type interface-number }
View
Any view
Parameter
local: Displays the statistics of local policy routing packets. interface: Displays the statistics of interface policy routings. interface-type: Interface type. interface-number: Interface number.
Description
Use the display ip policy statistic command to view the statistics of policy routings.
Example
# Display statistics about policy routing matches on the specified interface.
<3Com> display ip policy statistic interface ethernet0/0/0 Interface Ethernet0/0/0 policy routing information: Route-policy: aaa permit node 5 apply output-interface Serial1/0/0 Denied: 0, Forwarded: 0 Total denied: 0, forwarded: 0
The above information shows the forwarding success and failure times for all the forwarding policies (i.e., the apply clause) of policy routing on interface ethernet0/0/0.
8.1.9 if-match acl

Syntax
if-match acl acl-number undo if-match acl
View
Route-policy view
Parameter
acl-number: Address access control list number.
Description
Use the if-match acl command to set the match condition for IP address. Use the undo if-match acl command to delete the IP address match condition. An acl-number can be basic standard access-list or advanced access-list. Related command: if-match packet-length.
Example
# Set packets that accord with the access list 2010 to be matched.
[3Com] route-policy map1 permit node 2010 [3Com-route-policy] if-match acl 2010
8.1.10 if-match packet-length

Syntax
if-match packet-length min-len max-len undo if-match packet-length
View
Route-policy view
Parameter
min-len: Minimum size of network layer packets, in the range 0 to 2147483647. max-len: Maximum size of network layer packets, in the range 0 to 2147483647.
Description
Use the if-match packet-length command to set length match conditions of IP packets. Use the undo if-match packet-length command to delete the configuration of IP packet length match conditions. Related command: if-match acl.
Example
# Set the packet in the range 100 to 200 to be matched.
[3Com] route-policy map1 permit node 10 [3Com-route-policy] if-match packet-length 100 200
8.1.11 ip local policy route-policy

Syntax
ip local policy route-policy policy-name undo ip local policy route-policy policy-name
View
System view
Parameter
policy-name: Policy name.
Description
Use the ip local policy route-policy command to enable local policy routing. Use the undo ip local policy route-policy command to delete the existing setting of policy routing. By default, interface local policy routing is disabled. This command is used to enable or disable the local policy routing for the packets sent by the local device. If there is no special demand, it is recommended that users do not configure local policy routing. Related command: ip policy route-policy.
Example
# Enable a local policy routing at system view. The policy routing is specified by route-policy AAA.
[3Com] ip local policy route-policy AAA
8.1.12 ip policy route-policy

Syntax
ip policy route-policy policy-name undo ip policy route-policy policy-name
View
Interface view
Parameter
Description
Use the ip policy route-policy command to enable policy routing at an interface. Use the undo ip policy route-policy command to delete the existing policy routing at an interface. By default, interface policy routing is disabled. Related command: ip local policy route-policy.
Example
# Enable the policy routing specified by route-policy AAA at the interface Ethernet 0/0/0.
[3Com-ethernet0/0/0] ip policy route-policy AAA
Chapter 9 IP Multicast Policy Routing Configuration Commands

9.1 IP Multicast Policy Routing Configuration Commands
9.1.1 apply ip-address next-hop
Syntax
apply ip-address next-hop { acl acl-number | ip-address [ ip-address ] } undo apply ip-address next-hop [ acl acl-number | ip-address [ ip-address ] ]
View
Route-policy view
Parameter
acl-number: Standard ACL number ranging from 2000 to 2999. ip-address: Specifies the next hop address. Multiple next hop addresses can be specified.
Description
Use the apply ip-address command to configure the next hop IP address list in a route-node. Use the undo apply ip-address command to remove the configuration. By default, no apply clause is defined. This command specifies the next hop address for packets that match the if-match acl command. It specifies the next hop IP address list for multicast policy routing through the ACL. This command is in juxtaposition relation with the apply output-interface command. If both apply clauses are configured at the same time, in multicast policy routing, the packets will be replicated and forwarded to all the interfaces and next hops specified by the ACLs respectively. Only one apply clause works in unicast policy routing. For the next hop IP address, the specified ACL is the standard ACL. Related command: if-match acl, apply output-interface, and display ip
multicast-policy.
Example
None
9.1.2 apply output-interface

Syntax
apply output-interface acl acl-number undo apply output-interface [ acl acl-number ]
View
Route-policy view
Parameter
acl-number: ID of interface-based ACL, ranging from 1000 to 1999.
Description
Use the apply output-interface command to configure an outgoing interface list in a route-node. Use the undo apply output-interface command to remove the configuration. By default, no apply clause is defined. This command specifies outgoing interfaces for packets that match the if-match command. It specifies outgoing interfaces for multicast policy routing through the ACL. The action executed to packets that meet the if-match conditions defined by the match clause is as follows: If outgoing forwarding interfaces are set in the route-node through the ACL, the packets will be replicated and forwarded to all interfaces specified by the ACL. For an outgoing interface, the specified ACL is the one based on interface. This command is in juxtaposition relation with the apply ip-address next-hop command. If both apply clauses are configured at the same time, in multicast policy routing, the packets will be replicated and forwarded to all the interfaces and next hops specified by the ACLs respectively. Only one apply clause works in unicast policy routing. Related command: apply ip-address next-hop, if-match acl, and display ip multicast-policy.
Example
None
9.1.3 debugging ip multicast-policy

Syntax
debugging ip multicast-policy [ acl-number ] undo debugging ip multicast-policy
View
User view
Parameter
acl-number: ID of interface-based ACL ranging 1000 to 1999.
Description
Use the debugging ip multicast-policy command to enable the debugging of IP multicast policy routing. Use the undo debugging ip multicast-policy command to disable the debugging of multicast policy routing. The contents of the debugging information contain the route-node that the packets match and the next hop/outgoing interface to which the packets are forwarded. The debugging information output can be filtered with the interface-based ACL. It should be noted that enabling the debugging would affect the performance of the system. You should disable debugging when the system is running normally. Related command: route-policy.
Example
None
9.1.4 display ip multicast-policy

Syntax
display ip multicast-policy [ setup interface interface-type interface-num | statistic interface interface-type interface-num ]
View
Any view
Parameter
interface-type interface-num: Specifies an interface by its type and number.
Description
Use the display ip multicast-policy command to view the multicast policy routing information.
Example
# Display the information about the multicast policy routing configured on interface Ethernet2/0/0.
[3Com] display ip multicast-policy setup interface ethernet2/0/0 route-policy cc permit node 10 if-match acl 3110 apply ip-address next-hop acl 2050 route-policy cc permit node 20 if-match acl 3120 apply output-interface acl 1005
# Display the statistic information about the multicast policy routing configured on interface Ethernet2/0/0.
[3Com] display ip multicast-policy statistic interface ethernet2/0/0 interface Ethernet2/0/0 multicast-policy routing summary information: Total packets matched: 5 Total packets forward : 20
9.1.5 if-match acl

Syntax
if-match acl acl-number undo if-match acl acl-number
View
Route-policy view
Parameter
acl-number: Standard or extended ACL number ranging from 2000 to 3999.
Description
Use the if-match acl command to set conditions that multicast packets should meet in each policy node. Use the undo if-match acl command to remove the match conditions set. By default, no if-match clause is defined. If a packet meets the if-match conditions specified in a policy node, actions specified by the node will be performed. If a packet does not meet the if-match conditions specified in a policy node, the next node will be detected. If a packet does not meet the conditions of all policy nodes, the packet will return to the normal forwarding flow. The configuration and use of this command is the same as those of the same command in the unicast policy routing. Related command: if-match ip-prefix.
Example
# Set the ACL conditions that multicast packets need to meet.
[3Com] route-policy p1 permit node 10 [3Com-route-policy] if-match acl 2001
9.1.6 ip multicast-policy route-policy

Syntax
ip multicast-policy route-policy policy-name undo ip multicast-policy route-policy policy-name
View
Interface view
Parameter
policy-name: Specifies the name of a route-policy, which uniquely identifies one route-policy.
Description
Use the ip multicast-policy route-policy command to enable a multicast policy routing on an interface. Use the undo ip multicast-policy route-policy command to remove a multicast policy route applied on the interface. By default, no multicast route policy is enabled.
Using this command can enable multicast policy routing defined by the route-policy named policy-name on an interface. When multicast policy routing is configured on an interface of a router, all multicast packets entering the router on the interface will be filtered. The filter method is that all policy nodes of the route-policy specified by the policy routing are tried in the order of ascending sequence of the numbers. If a packet meets the if-match conditions specified in a policy node, actions specified by the node will be performed. If a packet does not meet the if-match conditions specified in a policy node, the next node will be detected. If a packet does not meet the conditions of any policy nodes, the packet will return to the normal forwarding flow. Related command: route-policy.
Example
# Enable multicast policy routing named map1 on interface Ethernet 2/0/0.
[3Com-Ethernet2/0/0] ip multicast-policy route-policy map1
9.1.7 route-policy
Syntax
route-policy policy-name { permit | deny } node sequence-number undo route-policy policy-name [ permit | deny ] [ node sequence-number ]
View
System view
Parameter
policy-name: Specifies the name of a route-policy, which uniquely identifies one route-policy. permit: Specifies the match mode of the route-policy node defined as permit. When a route entry meets the if-match clause of the node, the entry is permitted to pass the filter of the node and the apply clause of the node will be performed. If a route entry does not meet the if-match clause of the node, the next node of the route-policy will be tested. For multicast policy routing configuration, all the if-match clauses except the if-match acl clause are invalid. deny: Specifies the match mode of the route-policy node defined as deny. When a route entry meets the if-match clause of the node, the entry is denied to pass the filter of the
node and the next node will not be tested. For multicast policy routing configuration, all the if-match clauses except the if-match acl clause are invalid. sequence-number: Identifies a node in the route-policy. When the route-policy is used for routing information filtering, the node with a smaller sequence-number is tested first. This parameter ranges from 0 to 65535.
Description
Use the route-policy command to configure a route-policy node and enter the route-policy view. Use the undo route-policy command to remove a route-policy or a node. By default, no route-policy is defined. The policy of IP multicast policy routing is implemented by configuring route-policies. Multiple route-policies can be configured on a router. Each route-policy may contain multiple route-nodes. Different route-nodes in a route-policy are identified by different integer sequence-numbers. In each route-node, set the conditions that packets should match (i.e., the match rule) with the if-match command and configure the forwarding actions to be executed to packets that meet the match conditions with the apply command. The logical relation that filter the if-match clauses is and. This means that any if-match clause passing the filter will cause others to be ignored. Only the if-match acl clause is effective for multicast policy routing. The logical relation between route-policy nodes is or. That is, one packet forwarded in one policy node results in all the following nodes being ignored. If all permit nodes can not succeed in matching with the features of packet or any deny node is matched, the packet will then be forwarded or discarded normally, up to the route table. When multicast policy routing is configured on an interface of a router, all multicast packets entering the router on the interface will be filtered. The filter method is that all policy nodes of the route-policy are applied in the ascending sequence of their ID (a number). Related command: if-match, apply output-interface, apply ip-address next-hop, display ip multicast-policy.
Example
# Configure a route-policy named map1 with the node ID of 10 and with the match mode of permit and enter the route-policy view.
[3Com] route-policy map1 permit node 10 [3Com-route-policy]
Chapter 10 IPX Configuration Commands

10.1 IPX Configuration Commands
10.1.1 debugging ipx packet
Syntax
debugging ipx packet interface-type interface-num undo debugging ipx packet interface-type interface-num
View
User view
Parameter
interface-type: Interface type. interface-num: Interface number.
Description
Use the debugging ipx packet command to enable IPX packet debugging switch to view the contents of IPX packet received and transmitted. Use the undo debugging ipx packet command to disable the debugging switch. By default, IPX packet debugging switch is disabled.
Example
# Enable IPX packet debugging switch.
<3Com> debugging ipx packet *0.8942310-IPX-8-IPXPKT: Sending, interface = Serial3/0/0, pktlen = 40, hops = 0, pkttype = 0x1, dstnet = 0xb, dstnode = ffff-ffff-ffff, dstsocket = 0x453, srcnet = 0xb, srcnode = 00e0-fc01-5517, srcsocket = 0x453 prompt: Sending the packet. *0.8942610-IPX-8-IPXPKT: Delivering, interface = Serial3/0/0, pktlen = 480, hops = 0, pkttype = 0x4, dstnet = 0xb, dstnode = ffff-ffff-ffff, dstsocket = 0x452,
srcnet = 0xb, srcnode = 00e0-fc01-54f6, srcsocket = 0x452 prompt: IPX packet is delivering up!
Table 10-1 Description of display information of the debugging ipx packet command Field pktlen = hops = pkttype = dstnet = dstnode = dstsocket = srcnet = srcnode = srcsocket = promt: Description Length of packet in decimal format (not including MAC address header). How many routers the packet has passed through. Packet type in hexadecimal format. Destination network number of the packet. Destination node address of the packet. Destination socket of the packet. Source network number of the packet. Source node address of the packet. Source socket of the packet. Prompt of how router processes the packet and reasons of discarding packet.
10.1.2 debugging ipx ping

Syntax
debugging ipx ping undo debugging ipx ping
View
User view
Parameter
None
Description
Use the debugging ipx ping command to enable IPX Ping packet debugging switch to view the contents of Ping packet received and transmitted. Use the undo debugging ipx ping command to disable the debugging switch. By default, IPX Ping packet debugging switch is disabled.
Example
# Enable IPX Ping packet debugging switch.
<3Com> debugging ipx ping *0.15396012-IPX-8-IPXPING: Ping receiving: Request, Src = a.00e0-fc04-8859, Dst = a.00e0-fc01-54f6 *0.15396130-IPX-8-IPXPING: Ping sending: Response, Src = a.00e0-fc01-54f6, Dst = a.00e0-fc04-8859
Table 10-2 Description of display information of the debugging ipx ping command Field Src = Dst = Description Source address of Ping packet. Destination address of Ping packet.
10.1.3 debugging ipx rip

Syntax
debugging ipx rip { packet [ verbose ] | event } undo debugging ipx rip { packet [ verbose ] | event }
View
User view
Parameter
packet: Debugging information of packet received and transmitted. verbose: Displays detailed information about packet received and transmitted. event: Event debugging information, such as Up/Down of an interface and related timer events.
Description
Use the debugging ipx rip command to enable RIP debugging switch to view information on RIP packets received and transmitted, routing changes, and timer expiry. Use the undo debugging ipx rip command to disable the RIP debugging switch. By default, IPX RIP debugging switch is disabled.
Example
# Enable IPX RIP packet debugging switch.
<3Com> debugging ipx rip packet Send RIP Response to Ethernet0/0, length 96 src:a.00e0-fc01-5517(453), dst:a.ffff-ffff-ffff(453) Number of Entries in Pkt: 8
# Enable IPX RIP packet verbose debugging switch.

<3Com> debugging ipx rip packet verbose Send RIP Response to Ethernet0/0, length 96 src:a.00e0-fc01-5517(453), dst:a.ffff-ffff-ffff(453) Number of Entries in Pkt: 8 Network 0x1, hops 2, delay 2 Network 0x2, hops 2, delay 2 Network 0x3, hops 2, delay 2 Network 0x4, hops 2, delay 2 Network 0x5, hops 2, delay 2 Network 0x6, hops 2, delay 2 Network 0x8, hops 2, delay 8 Network 0xa, hops 1, delay 2
# Enable IPX RIP event debugging switch.

<3Com> debugging ipx rip event *0.274181351-IPXRIP-8-IPXRIP_Event: The number 1 equal route nexthop: 00e0-fc04-8859 *0.274181450-IPXRIP-8-IPXRIP_Event: The network 8 totally have 1 equal route
10.1.4 debugging ipx rtpro-flash

Syntax
debugging ipx rtpro-flash undo debugging ipx rtpro-flash
View
User view
Parameter
None
Description
Use the debugging ipx rtpro-flash command to turn on the debugging switch of route refreshing in the IPXRM module. Use the undo command to turn off the debugging switch of route refreshing in the IPXRM module. This kind of debugging information is generated when routes are refreshed for the sake of route change.
Example
# Switch on route refreshing debugging for IPXRM module.
<3Com>debugging ipx rtpro-flash <3Com>
# Remove an IPX static route.

[3Com]undo ipx route-static b2 Serial 1 *0.18537610 3Com RMX/8/DBG: IPXRM set a Rth on the flash list, ulRthDest = 0xb2 . [3Com] *0.18537820 3Com RMX/8/DBG: IPXRM finish a flash, reset a Rth on the flash list, ulRthDest = 0xb2 . [3Com]
10.1.5 debugging ipx rtpro-interface

Syntax
debugging ipx rtpro-interface undo debugging ipx rtpro-interface
View
User view
Parameter
None
Description
Use the debugging ipx rtpro-interface command to turn on the debugging switch of interface change in the IPXRM module.
Use the undo debugging ipx rtpro-interface command to turn off the debugging switch of interface change in the IPXRM module. Such debugging information is generated whenever IPXRM module receives interface change messages. These messages are generated when interface status changes between up and down, or an interface is added or removed.
Example
# Enable IPX RIP packet debugging switch
<3Com> debugging ipx rip packet
# Switch on interface change debugging for IPXRM module.

<3Com>debugging ipx rtpro-interface <3Com>
# Trigger interface change by using shut/undo shut command.

[3Com-Serial1] shut [3Com-Serial1] %Oct 24 14:11:27 2003 3Com PHY/2/PHY: Serial1: change status to down
%Oct 24 14:11:27 2003 3Com IFNET/5/UPDOWN:Line protocol on the interface Seri al1 turns into DOWN state
%Oct 24 14:11:27 2003 3Com IFNET/5/UPDOWN:Protocol IPX on the interface Seria l1 turns into DOWN state
*0.19023320 3Com RMX/8/DBG: IPXRM recieve interface change msg, msg type IPX_IF_DOWN . if_index is 0x286 . Interface name is Serial1 . [3Com-Serial1] [3Com-Serial1]undo shut [3Com-Serial1] %Oct 24 14:11:34 2003 3Com PHY/2/PHY: Serial1: change status to up
%Oct 24 14:11:34 2003 3Com IFNET/5/UPDOWN:Line protocol on the interface Seri al1 turns into UP state
%Oct 24 14:11:34 2003 3Com IFNET/5/UPDOWN:Protocol IPX on the interface Seria l1 turns into UP state
*0.19032220 3Com RMX/8/DBG: IPXRM recieve interface change msg, msg type IPX_IF_UP .

if_index is 0x286 . Interface name is Serial1 . [3Com-Serial1]
10.1.6 debugging ipx rtpro-routing

Syntax
debugging ipx rtpro-routing undo debugging ipx rtpro-routing
View
User view
Parameter
None
Description
Use the debugging ipx rtpro-routing command to turn on the debugging switch of route change in the IPXRM module. Use the command to turn off the debugging switch of route change in the IPXRM module. This kind of debugging information is generated when route changes as addition, deletion, or attribute adjustment occur.
Example
# Switch on route change debugging for IPXRM module.
<3Com>debugging ipx rtpro-routing <3Com>
#Add a static route

[3Com]ipx route-static d10 Serial 1 *0.19579120 3Com RMX/8/DBG: IPXRM ADD route ! Dest: d10 Nexthop: 0.0000-0000-0000
Interface: a.00e0-fcfb-3a00(Serial1) Protocol: Static Ticks: 6 *0.19579230 3Com RMX/8/DBG: IPXRM route change to ACTIVE ! Dest: d10 Nexthop: 0.0000-0000-0000 Preference: 60 Hops: 1
Interface: a.00e0-fcfb-3a00(Serial1) Protocol: Static Ticks: 6 Preference: 60 Hops: 1
10.1.7 debugging ipx sap packet

Syntax
debugging ipx sap [ packet [ verbose ] | event ] undo debugging ipx sap [ packet [ verbose ] | event ]
View
User view
Parameter
packet: Debugging information of packet received and transmitted. verbose: Displays detailed information about packet received and transmitted. event: Event debugging information, such as Up/Down of an interface and related timer events.
Description
Use the debugging ipx sap command to enable IPX SAP debugging switch to view information on SAP packet received and transmitted, routing changes, and timer expiry. Use the undo debugging ipx sap command to disable IPX SAP debugging switch. By enabling IPX SAP debugging switch, you can confirm whether a SAP packet is received. Normally, a router or server sends out a SAP update packet every minute. By default, each SAP packet includes up to seven service information items at most. If a lot of service information needs advertising on the network, the router sends out multiple packets per update. For example, if a router has 20 service information items in SIT, it sends three SAP packets per update. The first SAP includes the first seven items, the second SAP includes the next seven items, and the last update includes the last six items.
Note: The debugging ipx sap command generates a significant amount of output, use it with caution on networks that have many interfaces and a great deal of service information. Disable the debugging switch immediately after debugging to reduce the effects to normal services.
Example
# Enable SAP packet verbose debugging switch.
<3Com> debugging ipx sap packet verbose *0.20909856-IPXSAP-8-IPX SAP: MSG: Receive Response Packet From Eth0,Length 480 Src: 000a.0000-0104-8f02 (0452) Dest: 000a.ffff-ffff-ffff (0452) Number of entries in pkt: 7 Server type 2000 "PS1" 0008.000a-000a-000a (0452) hop 3 Server type 2345 "kkkkk" 000d.0005-0005-0005 (0452) hop 6 Server type 9000 "kiran-temp" 000d.0006-0006-0006 (0452) hop 16 Server type 6000 "kiran3" 000d.0003-0003-0003 (0452) hop 6 Server type 5000 "kiran2" 000d.0002-0002-0002 (0452) hop 16 Server type 4000 "kiran1" 000d.0001-0001-0001 (0452) hop 16 Server type 1000 "FS2" 000d.000a-000a-000a (0452) hop 2
# Enable SAP packet debugging switch.

<3Com> debugging ipx sap packet *0.20909856-IPXSAP-8-IPX SAP : MSG:Recieve Response Packet From Eth0,Length 480 Src: 000a.0000-0104-8f01 (0452) Dest: 000a.ffff-ffff-ffff (0452) Number of entries in pkt: 4
# Enable SAP event debugging switch.

<3Com> debugging ipx sap Event *0.20776625-IPXSAP-8-IPX SAP: MSG: IPXSAP: Route UP Event Received: N
10.1.8 display ipx interface

Syntax
display ipx interface [ interface-type interface-num ]
View
Any view
Parameter
interface-type: Interface type. interface-num: Interface number.
Description
Use the display ipx interface command to view IPX interface configuration information and interface parameters in communication devices.
Example
# Display IPX configuration and statistics of the interface Ethernet1/0/0.
<3Com> display ipx interface ethernet 1/0/0 Ethernet1/0/0 is up IPX address is 2.00E0-FC01-0000 [up] SAP is enabled Split horizon is enabled Update change only is disabled Forwarding of IPX type 20 propagation packet is enabled Delay of this IPX interface, in ticks is 1 SAP GNS response is enabled RIP packet maximum size is 432 bytes SAP packet maximum size is 480 bytes IPX encapsulation is Netware 802.3 0 received, 0 sent 0 bytes received, 0 bytes sent 0 RIP received, 0 RIP sent, 0 RIP discarded 0 RIP specific requests received, 0 RIP specific responses sent 0 RIP general requests received, 0 RIP general responses sent 0 SAP received, 0 SAP sent, 0 SAP discarded 0 SAP requests received, 0 SAP responses sent
Table 10-3 Description of display information of the display ipx interface command Field Ethernet1/0/0 is ... IPX address is ... [up] SAP is Split horizon is Description In terms of physical layer and link layer status, the current interface is UP, DOWN or administratively DOWN. IPX network ID and node value of the current interface. Refer to the commands ipx network and ipx enable for details of network ID and node value. IPX protocol status of the current interface. Whether SAP is enabled on the current interface. Whether split horizon is enabled on the current interface. The related command is ipx split-horizon.
Field Update change only is Forwarding IPX type propagation packet is ... of 20
Description Whether trigger update is enabled on the current interface. The related command is ipx update-change-only. Whether IPX type 20 propagation packet is permitted to be forwarded on the current interface. The related command is ipx netbios-propagation. Delay value of the current interface. The value is configured by the ipx tick command. Whether SAP GNS reply is enabled on the current interface. The related command is ipx sap gns-disable-reply. Maximum size of RIP updating packet on the current interface. The related command is ipx rip mtu. Maximum size of SAP updating packet on the current interface. The related command is ipx sap mtu. Total number of packets received on the current interface. Total number of packets sent on the current interface. Total number of bytes received on the current interface. Total number of bytes sent on the current interface. Total number of IPX RIP packets received on the current interface. Total number of IPX RIP packets sent on the current interface. Total number of IPX RIP packets discarded on the current interface. Total number of IPX RIP specific requests received on the current interface. Total number of IPX RIP specific responses sent on the current interface. Total number of IPX RIP general requests received on the current interface. Total number of IPX RIP general responses sent on the current interface. Total number of SAP packets received on the current interface. Total number of SAP packets sent on the current interface. Total number of SAP packets discarded on the current interface.
Delay of this IPX interface, in ticks is ... SAP GNS response is ... RIP packet maximum size is ... bytes SAP packet maximum size is ... bytes received sent bytes received bytes sent RIP received RIP sent RIP discarded RIP specific requests received RIP specific responses sent RIP general requests received RIP general responses sent SAP received SAP sent SAP discarded
Field SAP requests received SAP sent responses
Description Total number of SAP requests received on the current interface. Total number of SAP responses sent on the current interface.
10.1.9 display ipx routing-table

Syntax
display ipx routing-table [ network ] [ verbose ] display ipx routing-table protocol { default | direct | rip | static } [ inactive | verbose ]
View
Any view
Parameter
network: Destination network ID of IPX static route. It is an 8-bit hexadecimal number, ranging from 1 to 0xFFFFFFFE. Display IPX routing information to specified destination network ID. verbose: Displays detailed route information, including active and inactive routes. default: Displays all the default routing information. direct: Displays all the directly connected routing information. rip: Displays all IPX RIP routing information. static: Displays all IPX static routing information. inactive: Only displays inactive routing information.
Description
Use the display ipx routing-table command to view active IPX routing information. Use the display ipx routing-table verbose command to view detailed IPX routing information, including active and inactive routes. Use the display ipx routing-table network command to view active IPX routing information to specified destination network ID. Use the display ipx routing-table network verbose command to view detailed IPX routing information to the specified destination network ID, including active and inactive routes.
Use the display ipx routing-table protocol { rip | static | default | direct } command to view IPX routing information for the specified destination type, including active and inactive routes. Use the display ipx routing-table protocol { rip | static | default | direct } verbose command to view detailed IPX routing information for the specified destination type, including active and inactive routes.
Example
# Display active IPX routing information.
[3Com] display ipx routing-table Routing tables: Summary count: 4 Dest_Ntwk_ID 0x11 0x22 0x33 0x100 Proto Direct RIP Direct Static 60 Pre 0 100 0 6 Ticks Hops Nexthop 6 7 1 1 0 1 0 0.0000-0000-0000 11.0000-0165-6401 0.0000-0000-0000 0.0000-0000-0000 Interface Serial0/0/0 Serial0/0/0 Ethernet0/0/0 Serial0/0/0
The following table explains the contents in the above displayed information: Table 10-4 Description on the fields of the display ipx routing-table command Field Dest_Ntwk_ID Proto Pre Ticks Hops Nexthop Interface Description Destination network ID of the route Protocol type of the route Preference of the route Ticks value of the route Hops value of the route The next hop of the route Outgoing interface of the route
# Display detailed IPX routing information, including active and inactive routes.
<3Com> display ipx routing-table verbose Routing tables: Destinations: 103 Routes: 103
Destination Network ID: 0x11 Protocol: Direct Ticks: 6 Preference: 0 Hops: 0

Nexthop: 0.0000-0000-0000

Time: 0
Interface: 11.0000-0165-6400(Serial0) State: <Active> Destination Network ID: 0x22 Protocol: RIP Ticks: 7 Nexthop: 11.0000-0165-6401 Time: 15 Preference: 100 Hops: 1
Interface: 11.0000-0165-6400(Serial0) State: <Active> Destination Network ID: 0x33 Protocol: Direct Ticks: 1 Nexthop: 0.0000-0000-0000 Time: 0 Preference: 0 Hops: 0
Interface: 33.0000-0165-6400(Ethernet0) State: <Active> Destination Network ID: 0x100 Protocol: Static Ticks: 6 Nexthop: 0.0000-0000-0000 Time: 0 Preference: 60 Hops: 1
Interface: 11.0000-0165-6400(Serial0) State: <Active>
Table 10-5 Description on the fields of the display ipx routing-table verbose command Field Time Description Aging time value of the route. Without aging, the value of interface route and static route is 0. State can be <Active>, <Inactive> or <Delete>. <Active> indicates active route, <Inactive> indicates inactive route and <Delete> indicates the route is being deleted.
State
10.1.10 display ipx routing-table statistics

Syntax
display ipx routing-table statistics
View
Any view
Parameter
None
Description
Use the display ipx routing-table statistics command to view IPX routing statistics.
Example
# Display IPX routing statistics.
<3Com> display ipx routing-table statistics Routing tables: Proto/State Direct Static RIP Default Total route 2 1 1 0 4 active 2 1 1 0 4 added 2 2 1 0 5 deleted 0 1 0 0 1 freed 0 1 0 0 1
10.1.11 display ipx service-table

Syntax
display ipx service-table [ [ type service-type | name name | network network | order { network | type } ] | [ inactive ] ] [ verbose ]
View
Any view
Parameter
type: Displays information for specified service type ID. service-type: The type of service. name: Displays information for specified server name. name: Name of the server. network: Displays service information of the server on specified network segment. network: The network ID of the network segment. order: Displays service information after classified by the type.
network: Classified by the network ID. type: Classified by the service type. inactive: Displays inactive service information. verbose: Displays details about service information.
Description
Use the display ipx service-table command to view the contents of the IPX service information table. The output information of the command helps users with IPX SAP troubleshooting.
Example
# Display contents of IPX service information table.
[3Com] display ipx service-table Abbreviation: S - Static, Pref - Preference(Decimal), NetId - Network number, NodeId - Node address, hop - Hops(Decimal), Recv-If - Interface from which the service is received
Number of Static Entries:
Number of Dynamic Entries: 0 Name S 2 S ser S 2 S ser1 Type 0002 0002 0002 00ff NetId 0011 0002 0002 0002
# Display contents of service information table of type 5.

[3Com] display ipx service-table type 5 Abbreviation: S - Static, Pref - Preference(Decimal), NetId - Network number, NodeId - Node address, service is received Name Prn1 Prn2 Prn3 Prn4 Type 0005 0005 0005 0005 NetId 000d 0008 000d 000d NodeId 000a-000a-000a 000a-000a-000a 0005-0005-0005 0006-006-0006 Sock 0452 0452 0452 0452 Pref 500 500 500 500 Hops 02 03 06 06 Recv-If Eth1/0/0 Eth1/0/0 Eth1/0/0 Eth1/0/0 hop - Hops(Decimal), Recv-If - Interface from which the
10.1.12 display ipx statistics

Syntax
display ipx statistics
View
Any view
Parameter
None
Description
Use the display ipx statistics command to view statistics and type of IPX packets transmitted and received.
Example
# Display IPX statistics.
<3Com> display ipx statistics Received: 0 total, 0 packets pitched 0 packets size errors, 0 format errors 0 bad hops(>16), 0 discarded(hops=16) 0 other errors, 0 local destination 0 can not be dealed Sent: 0 forwarded, 0 generated 0 no route, 0 discarded RIP: 0 sent, 0 received 0 responses sent, 0 responses received 0 requests received, 0 requests dealed 0 requests sent, 0 periodic updates SAP: 0 general requests received 0 specific requests received 0 GNS requests received 0 general responses sent 0 specific responses sent 0 GNS responses sent 0 periodic updates, 0 errors PING: 10 requests sent, 0 requests received 0 responses sent, 0 responses received 0 responses in time, 0 responses time out
Table 10-6 Description on the fields of the display ipx statistics command Field Received 0 total 0 packets pitched 0 packets size errors 0 format errors 0 bad hops 0 discarded(hop=16) 0 other errors 0 local destination 0 can not be dealt Sent: 0 forwarded 0 generated 0 no route 0 discarded RIP: 0 sent 0 received 0 responses sent 0 responses received 0 requests received 0 requests dealt 0 requests sent 0 periodic updates SAP: 0 general received requests Description Statistics for received messages Total number of received messages Total number of messages whose headers are re-pitched Total number of discarded messages due to packet size errors Total number of discarded encapsulation format errors messages due to
Total number of messages whose hop field values exceed 16 Total number of messages whose hop field values are 16 Total number of discarded messages due to other errors Total number of messages which have local destinations Total number of messages that can not be dealt with Statistics for sent messages Number of messages which need to be forwarded Number of messages which are sent by router itself Number of messages which do not find routes Number of messages discarded during sending Statistics for RIP messages Number of RIP messages sent by router Number of RIP messages received Number of RIP response messages sent by router Number of RIP response messages received Number of RIP request messages received Number of RIP request messages dealt Number of RIP request messages sent by router Number of RIP periodic update messages sent by router Statistics for SAP messages Number of received SAP general request messages
Field 0 specific received 0 GNS received requests requests
Description Number of received SAP specific request messages Number of received SAP GNS request messages Number of sent SAP general response messages Number of sent SAP specific response messages Number of sent SAP GNS response messages Number of SAP periodic update messages sent by router Number of error SAP messages Statistics about pings The sent ICMP requests The received ICMP requests The sent ICMP responses The received ICMP responses The received ICMP responses received in time The expired ICMP responses
0 general responses sent 0 specific responses sent 0 GNS responses sent 0 periodic updates 0 errors PING 10 requests sent 0 requests received 0 responses sent 0 responses received 0 responses in time 0 responses time out
10.1.13 ipx enable

Syntax
ipx enable [ node node ] undo ipx enable
View
System view
Parameter
node: node value of the router. It is a 48-bit value represented by a triplet of four-digit hexadecimal numbers separated by -. It is neither a broadcasting address nor a multicast address. If the parameter is not configured, the router will assign the MAC address of the first Ethernet interface as its node value.
Note: If there is no Ethernet interface in the router the system will assign a random node value based on the system clock.
Description
Use the ipx enable command to activate IPX. Use the undo ipx enable command to deactivate IPX and remove all IPX configurations simultaneously. By activating IPX again after executing the undo ipx enable command, you cannot restore any IPX configuration. The node argument specifies the node value of the router. If no node value is specified, the router uses the MAC address of its first Ethernet interface. The following describes the node value assignment conventions: If no node value is assigned to the router when IPX is activated, the router uses the MAC address of its first Ethernet interface as the node value of its serial interface. If a node value is assigned to the router when IPX is activated, the router uses this value as the node value of its serial interface. For an Ethernet interface, its node value is its MAC address regardless of whether the router is assigned a node value.
Example
# Enable IPX.
[3Com] ipx enable
# Disable IPX.
[3Com] undo ipx enable
10.1.14 ipx encapsulation

Syntax
ipx encapsulation [ dot2 | dot3 | ethernet-2 | snap ] undo ipx encapsulation
View
Ethernet Interface view
Parameter
dot2: Encapsulation format is Ethernet_802.2. dot3: Encapsulation format is Ethernet_802.3. ethernet-2: Encapsulation format is Ethernet_II. snap: Encapsulation format is Ethernet_SNAP.
Description
Use the ipx encapsulation command to set IPX frame encapsulation format on Ethernet interface. Use the undo ipx encapsulation command to restore the default IPX frame encapsulation format. By default, IPX frame encapsulation format on Ethernet interface is dot3 (Ethernet_802.3). In WAN interfaces, IPX frame only supports PPP encapsulation.
Example
# Configure IPX frame encapsulation format on the interface Ethernet0/1/0 as Ethernet_II.
[3Com-Ethernet 0/1/0] ipx encapsulation ethernet-2
# Restore the default IPX frame encapsulation format on the interface Ethernet0/1/0.
[3Com-Ethernet 0/1/0] undo ipx encapsulation
10.1.15 ipx netbios-propagation

Syntax
ipx netbios-propagation undo ipx netbios-propagation
View
Interface view
Parameter
None
Description
Use the ipx netbios-propagation command to configure the router to forward type 20 broadcast packets on the current interface. Use the undo ipx netbios-propagation command to disable the forwarding of type 20 packets. By default, type 20 broadcast packets will be discarded by the router rather than forwarded. IPX type 20 packet is a packet for NetBIOS (Network Basic Input/Output System) defined by Novell NetWare.
Example
# Enable the receipt and forwarding of type 20 broadcast packets.
[3Com-Ethernet 0/1/0] ipx netbios-propagation
# Disable the receipt and forwarding of type 20 broadcast packets.

[3Com-Ethernet 0/1/0] undo ipx netbios-propagation
10.1.16 ipx network

Syntax
ipx network network undo ipx network
View
Interface view
Parameter
network: Network ID of IPX interface in hex. It ranges from 0x1 to FFFFFFFD.
Description
Use the ipx network command to configure a network ID for an interface. Use the undo ipx network command to delete the IPX network ID of an interface. By default, IPX is disabled on all interfaces after it is activated. There is no IPX network ID on the interface.
Example
# Configure the interface Ethernet0/1/0 as IPX interface and assign it with a network ID.
[3Com-Ethernet 0/1/0] ipx network 675
# Cancel the configuration of the interface Ethernet0/1/0 as IPX interface.

[3Com-Ethernet 0/1/0] undo ipx network
10.1.17 ipx rip import-route

Syntax
ipx rip import-route static undo ipx rip import-route static
View
System view
Parameter
static: Imported static route.
Description
Use the ipx rip import-route static command to import static routes into RIP. RIP adds them in their route updates. Use the undo ipx rip import-route static command to disable the importation of static routes.
Example
# Import a static route to RIP.
[3Com] ipx rip import-route static
10.1.18 ipx rip mtu

Syntax
ipx rip mtu bytes undo ipx rip mtu
View
Interface view
Parameter
bytes: Maximum RIP updating packet size in byte, ranging from 432 to 1500. By default, it is 432.
Description
Use the ipx rip mtu command to configure the RIP updating packet size. Use the undo ipx rip mtu command to restore the default configuration. By default, the maximum size of RIP updating packets is 432 bytes. In RIP updating packets, the size of each routing information item is 8 bytes and the size of IPX header and RIP header is 32 bytes. So an updating packet can carry up to 50 routing information items at most.
Example
# Configure the maximum size of RIP updating packets on the interface Ethernet1/0/0 to 500 bytes.
[3Com-Ethernet1/0/0] ipx rip mtu 500
10.1.19 ipx rip multiplier

Syntax
ipx rip multiplier multiplier undo ipx rip multiplier
View
System view
Parameter
multiplier: It is used to calculate the aging period of RIP routing information table items, ranging from 1 to 1000. By default, the value is 3. The actual aging time is the value of multiplier multiplied by the RIP updating interval.
Description
Use the ipx rip multiplier command to configure the aging period of RIP routing information table items. Use the undo ipx rip multiplier command to restore the default configuration. By default, RIP aging period is 3 times that of updating interval. Routers may contain a timer for each item in their routing information table, which keeps track of elapsed time since the route was received. Every time the updating packet containing the routing information is received, the timer is reset to zero. If RIP route is not updated within a certain period of time, the system will regard the route as no longer valid and delete it from the routing table.
Related command: ipx rip timer update.
Example
# Configure RIP aging period of routing information table items is 5 times of updating interval.
[3Com] ipx rip multiplier 5
10.1.20 ipx rip timer update

Syntax
ipx rip timer update seconds undo ipx rip timer update
View
System view
Parameter
seconds: RIP updating interval in second, ranging from 10 to 60000.
Description
Use the ipx rip timer update command to configure a RIP updating interval. Use the undo ipx rip timer update command to restore the default value of RIP updating interval. By default, the RIP updating interval is 60 seconds. On a network, routers need to constantly exchange routing information with each other to keep routing information consistent with actual network topology. In RIP, directly connected routers periodically send updating packets to each other. The changes of RIP updating interval will affect the aging period. Related command: ipx rip multiplier.
Example
# Configure RIP updating interval to 30 seconds.
[3Com] ipx rip timer update 30
10.1.21 ipx route

Syntax
ipx route-static network { network.node | interface-type interface-num } [ preference value ] [ tick ticks hop hops ] undo ipx route-static { network [ network.node | interface-type interface-num ] | all }
View
System view
Parameter
network: Destination network ID of IPX static route. It is an 8-bit hexadecimal number, ranging from 1 to 0xFFFFFFFE. The same network ID must be used at the two ends of a link. network.node: The next hop address of IPX static route. network is the network ID of the next hop. node is a triplet of four-bit hexadecimal numbers separated by -, each ranging from 1 to 0xFFFF. interface-type: Outgoing interface type, only supporting the interface with PPP encapsulation. It can be Serial or POS interface. interface-num: Outgoing interface number. preference: Route preference. The preference of directly connected routes is fixed to 0 and cannot be changed. By default, the preference of active IPX static route is 60 and can be configured. The preference of dynamic IPX routes is fixed to 100 and cannot be changed. value: Route preference value, in the range 1 to 255. The less the value, the higher the preference. ticks: It indicates the necessary time to destination network (1 tick = 1/18 second). By default, it is the tick value of outgoing interface. Interfaces of different types have different default tick values. The tick value of Ethernet interface is 1 and that of Serial interface is 6. When the tick value of an interface is modified, the tick value of the corresponding static route will also be changed. hops: Number of routers which are passed by to destination network. By default, the value is 1. all: All IPX static routes.
Description
Use the ipx route-static command to configure IPX static route.
Use the undo ipx route-static command to delete static route. The system regards the IPX static route with destination network ID being -2 (0xFFFFFFFE) as the default route.
Example
# Configure an IPX static route with destination network ID being 0x5a, the next hop being 1000.0-0c91-f61f, ticks 10 and hops 2.
[3Com] ipx enable [3Com] ipx route-static 5a 1000.0-0c91-f61f tick 10 hop 2
# Configure the default IPX route with the next hop being 3.4a-60-7, ticks 10, hops 2 and preference 20.
[3Com] ipx enable [3Com] ipx route-static FFFFFFFE 3.4a-60-7 preference 20 tick 10 hop 2
# Configure an IPX static route with destination network ID being 3a, outgoing interface being Serial1/0/0, ticks 10, hops 2 and preference 30.
[3Com] ipx enable [3Com] ipx route-static 3a serial 0/0/0 preference 30 tick 10 hop 2
10.1.22 ipx route load-balance-path

Syntax
ipx route load-balance-path paths undo ipx route load-balance-path
View
System view
Parameter
paths: The maximum equivalent route number to the same destination address, ranging from 1 to 64. By default, the value is 1.
Description
Use the ipx route load-balance-path command to configure the equivalent route number to the same destination address. Use the undo ipx route load-balance-path command to restore the default configuration. The equivalent route number to the same destination address is the maximum number of active equivalent routes in the current system. If the newly configured value is less than the
current active route number, the system will change the excessive active routes to inactive status.
Example
# Configure the equivalent route number to the same destination address to 30.
[3Com] ipx route load-balance-path 30
10.1.23 ipx route max-reserve-path

Syntax
ipx route max-reserve-path paths undo ipx route max-reserve-path
View
System view
Parameter
paths: The maximum dynamic route number to the same destination address, ranging from 1 to 255. By default, the value is 4.
Description
Use the ipx route max-reserve-path command to configure the maximum dynamic route number to the same destination address. Use the undo ipx route max-reserve-path command to restore the default configuration. When the dynamic route number to the same destination address exceeds the maximum value configured, the newly found dynamic routes will not be added into the routing table, but discarded directly. If the newly configured value is less than the original one, the excessive routes in the current routing table will not be deleted until they get aging themselves or are deleted manually.
Example
# Configure the maximum dynamic route number to the same destination address to 200.
[3Com] ipx route max-reserve-path 200
10.1.24 ipx sap disable

Syntax
ipx sap disable
undo ipx sap disable
View
Interface view
Parameter
None
Description
Use the ipx sap disable command to disable SAP on the current interface. Use the undo ipx sap disable command to enable SAP on the current interface. By default, the interface SAP is enabled as soon as IPX is enabled.
Example
# Disable SAP on the interface Ethernet0/0/0.
[3Com-Ethernet0/0/0] ipx sap disable
# Re-enable SAP on the interface Ethernet0/0/0.

[3Com-Ethernet0/0] undo ipx sap disable
10.1.25 ipx sap gns-disable-reply

Syntax
ipx sap gns-disable-reply undo ipx sap gns-disable-reply
View
Interface view
Parameter
None
Description
Use the ipx sap gns-disable-reply command to disable IPX GNS reply on the current interface. Use the undo ipx sap gns-disable-reply command to enable IPX GNS reply on the current interface. By default, GNS reply is enabled on an interface.
Example
# Disable GNS reply on the interface Ethernet0/0/0.
[3Com-Ethernet0/0/0] ipx sap gns-disable-reply
# Re-enable GNS reply on the interface Ethernet0/0/0.

[3Com-Ethernet0/0/0] undo ipx sap gns-disable-reply
10.1.26 ipx sap gns-load-balance

Syntax
ipx sap gns-load-balance undo ipx sap gns-load-balance
View
System view
Parameter
None
Description
Use the ipx sap gns-load-balance command to configure the router to respond to a GNS request in Round-robin method, i.e., all servers respond to a GNS request in turn. Use the undo ipx sap gns-load-balance command to configure the nearest server to respond to a GNS request. By default, for GNS request, a router will inform all servers it knows to respond in Round-robin method to avoid overload of one server. Related command: ipx sap gns-disable-reply.
Example
# Configure the nearest server to respond GNS request.
[3Com] undo ipx sap gns-load-balance
# Configure all servers to respond GNS request in Round-robin method.

[3Com] ipx sap gns-load-balance
10.1.27 ipx sap max-reserve-servers

Syntax
ipx sap max-reserve-servers length undo ipx sap max-reserve-servers
View
System view
Parameter
length: The length of the dynamic service information reserve queue, ranges from1 to 2048. By default, the value is 2048.
Description
Use the ipx sap max-reserve-servers command to configure the length of the service information reserve queue. Use the undo ipx sap max-reserve-servers command to restore the default configuration. If the newly configured service information queue length is less than the present one, the items in SIT will not be deleted. If the service information item number for the same service type exceeds the maximum value configured the new service information will not be added.
Example
# Set the maximum length of service information reserve queue to 1024.
[3Com] ipx sap max-reserve-servers 1024
10.1.28 ipx sap mtu

Syntax
ipx sap mtu bytes undo ipx sap mtu
View
Interface view
Parameter
bytes: The maximum SAP packet size in byte, ranging from 480 to 1500. By default, the value is 480.
Description
Use the ipx sap mtu command to configure the maximum size of SAP updating packet. Use the undo ipx sap mtu command to restore the default configuration. By default, the maximum size of SAP updating packet is 480 bytes. The size of IPX header and SAP header is 32 bytes, so a 480-byte SAP updating packet contains 7 service information items (64 bytes each).
Example
# Set the maximum size of SAP updating packet on the interface Ethernet1/0/0 to 674 bytes (carrying 10 service information items at most).
[3Com-Ethernet0/0/0] ipx sap mtu 674
10.1.29 ipx sap multiplier

Syntax
ipx sap multiplier multiplier undo ipx sap multiplier
View
System view
Parameter
multiplier: It is used to calculate the aging period of SAP service information table items, ranging from 1 to 1000. By default, the value is 3. When the updating interval is 60 seconds, the aging period is 60*3 = 180 seconds.
Description
Use the ipx sap multiplier command to configure the aging period of SAP service information table items. Use the undo ipx sap multiplier command to restore the default value of SAP aging period. By default, the aging period of SAP service information table items is 3 times that of SAP updating interval.
Related command: ipx sap timer update.
Example
# Set the aging period of SAP service information table items is 5 times of updating interval.
[3Com] ipx sap multiplier 5
10.1.30 ipx sap timer update

Syntax
ipx sap timer update seconds undo ipx sap timer update
View
System view
Parameter
seconds: SAP updating interval, ranging from 10 to 60000 seconds. By default, the value is 60 seconds.
Description
Use the ipx sap timer update command to configure SAP updating interval. Use the undo ipx sap timer update command to restore the default value of SAP updating interval. When an interface adopts trigger update method, the command configuration does not take effect. Related command: ipx sap multiplier, ipx update-change-only.
Example
# Configure SAP updating interval to 300 seconds.
[3Com] ipx sap timer update 300
10.1.31 ipx service

Syntax
ipx service service-type name network.node socket hop hopcount preference preference undo ipx service { { service-type [ name [ network.node ] ] [ preference preference ] } | all }
View
System view
Parameter
service-type: Service type is a 4-byte hexadecimal number. 0 indicates all service types. name: The server name which provides the service, in character string with the maximum length being 48 bytes. network.node: Network ID and node value of a server. Network ID is represented by an 8-bit hexadecimal number, ranging from 0x1 to 0xFFFFFFFD. The 0s in front can be omitted when inputting. Node value is used to identify a node in the network, with the length of 48 bits, represented by a triplet of 4-digit hexadecimal numbers separated by -. socket: It is represented by a 4-bit hexadecimal number, ranging from 0x1 to 0xFFFF. hop-count: The number of hops to the server in decimal, ranging from 1 to 15. Note that hop count more than or equal to 16 implies the service is unreachable. preference: The preference of service information, ranging from 1 to 255. The less the value, the higher the preference. By default, the preference of the static service information table items is 60 and the preference of the dynamic one is 500.
Description
Use the ipx service command to add a static service information item to SIT. Use the undo ipx service command to delete a static service information item from SIT. The NetWare server uses SAP to advertise service information and stores the service information to SIT which is dynamically updated by SAP. Adding a service information item to SIT, users can access the service.
Example
# Add a static service information item with service type 4, service name FileServer, server network ID 130, node value 0000-0a0b-abcd, server hops 1 and server preference 60.
[3Com] ipx service 4 FileServer 130.0000-0a0b-abcd 451 hop 1 preference 60 [3Com] ipx service 4 FileServer 130.0000-0a0b-abcd 451 hop 1 [3Com] ipx service 114 MyServer 199.0000-0a0b-abcd 451 hop 10
Service information with server type 114 will not be advertised if there is no active route to the network 199.
10.1.32 ipx split-horizon

Syntax
ipx split-horizon undo ipx split-horizon
View
Interface view
Parameter
None
Description
Use the ipx split-horizon command to enable split horizon on the current interface. Use the undo ipx split-horizon command to disable split horizon on the current interface. By default, split horizon is enabled on the interface. Split horizon is a way to avoid routing loops, i.e., routing information received from an interface is not permitted to be sent from the interface. This function does not take effect on point-to-point connection links.
Example
# Enable split horizon on the interface Ethernet1/1/0.
[3Com-Ethernet1/1/0] ipx split-horizon
# Disable split horizon on the interface Ehernet1/1/0.

[3Com-Ethernet1/1/0] undo ipx split-horizon
10.1.33 ipx tick

Syntax
ipx tick ticks undo ipx tick
View
Interface view
Parameter
ticks: Delay time in tick, ranging from 0 to 30000. One tick is 1/18 second (approximately 55 ms). By default, the delay of Ethernet interface is 1 tick, that of the asynchronous serial port is 30 ticks and that of WAN port is 6 ticks.
Description
Use the ipx tick command to configure the delay of interface sending IPX packets. Use the undo ipx tick command to restore the default value of interface delay. As the IPX RIP delay field, the delay value configured by the ipx tick command is a basis for the optimal routing selection.
Example
# Configure the delay is 5 ticks on the interface Ethernet1/0/0.
[3Com-Ethernet1/0/0] ipx tick 5
10.1.34 ipx update-change-only

Syntax
ipx update-change-only undo ipx update-change-only
View
Interface view
Parameter
None
Description
Use the ipx update-change-only command to enable trigger update on the current interface. Use the undo ipx update-change-only command to disable trigger update on the current interface. By default, trigger update is disabled on the interface. IPX RIP and SAP periodically advertise updating broadcast packets. Users can configure trigger update to avoid broadcast flood.
Example
# Enable trigger update on the interface Ethernet1/1/0.
[3Com-Ethernet 1/1/0] ipx update-change-only
# Disable trigger update on the interface Ethernet1/1/0.

[3Com-Ethernet 1/1/0] undo ipx update-change-only
10.1.35 ping ipx

Syntax
ping ipx network.node [ -c count ] [ -t timeout ] [ -s size ]
View
Any view
Parameter
network.node: Ping destination address. The parameter network can be an eight-bit hexadecimal number ranging from 0x1 to 0xFFFFFFFD. The 0s in front can be omitted when inputting. The parameter node is a 48-bit value represented by a triplet of four-digit hexadecimal numbers separated by -.
Note: The 0s in front of node value cannot be omitted.
count: Number of Ping packets that are sent. By default, the value is 5. timeout: The time waiting for Ping response. By default, the value is 2 seconds. size: Ping packet size. By default, the value is 100 bytes.
Description
Use the ping ipx command to check host reachability and network connectivity in IPX network.
Example
# Ping system whose destination address is 675.0000-a0b0-fefe with default parameters.
<3Com> ping ipx 675.0000-a0b0-fefe
10.1.36 reset ipx statistics

Syntax
reset ipx statistics
View
User view
Parameter
None
Description
Use the reset ipx statistics command to clear IPX statistics by the system.
Example
# Clear IPX statistics.
<3Com> reset ipx statistics
10.1.37 reset ipx routing-table statistics

Syntax
reset ipx routing-table statistics protocol [ all | default | direct | rip | static ]
View
User view
Parameter
all: Clears statistical information of all types IPX route. default: Clears the statistical information of the default IPX route type. direct: Clears the statistical information of the IPX route directly connected. rip: Clears the statistical information of the IPX RIP route. static: Clears the statistical information of the static IPX route.
Description
The reset ipx routing-table statistics command is used to clear the statistical information of a specified type of IPX route. Such information can be shown on the terminal using the display ipx routing-table statistics command.
Example
# Add 5 IPX static routes to the router, then delete them, and then add anther 9 IPX static routes. The IPX route statistical information would be as follows:
[3Com] dis ipx routing-table statistics Routing tables: Proto/State Direct Static RIP Default route 1 9 0 0 active 1 9 0 0 added 1 14 0 0 deleted 0 5 0 0 freed 0 5 0 0
Total [3Com]
10
10
15
# Clear the IPX static route.

<3Com> reset ipx routing-table statistics protocol static This will erase the specific routing counters information. Are you sure?[Y/N]y <3Com>
# The displayed statistical information shows that all three items (add, delete, freed) of static route have changed to 0, and the below Total item has also changed accordingly.
<3Com> dis ipx routing-table statistics Routing tables: Proto/State Direct Static RIP Default route 1 9 0 0 active 1 9 0 0 added 1 0 0 0 deleted 0 0 0 0 freed 0 0 0 0
Total <3Com>
10
10
Chapter 11 DLSw Configuration Commands

11.1 DLSw Configuration Commands
11.1.1 bridge-set (in synchronous serial interface view)
Syntax
bridge-set bridge-set-number undo bridge-set bridge-set-number
View
Parameter
bridge-set-number: The bridge group number the synchronous serial port is to be added into, ranging from 1 to 63.
Description
Use the bridge-set (in Synchronous serial interface system view) command to add the synchronous serial interface encapsulated into SDLC into the bridge group. Use the undo bridge-set (in synchronous serial interface view) command to delete the interface from the DLSw bridge group. By default, no synchronous serial port is added into the bridge group. In order for the SDLC encapsulated synchronous serial port to join the DLSw forwarding, the SDLC interface is needed to added into a bridge group by using this command. What is different is that the bridge group on the Ethernet interface joins local forwarding, while the bridge group configured on the SDLC only joins DLSw forwarding, that is, all the data on it will be forwarded onto the TCP tunnel. If it is configured in the Ethernet Interface view, the Ethernet interface of the same group number on the router can forward packets transparently. However, packets cannot be transferred transparently between serial ports. Each serial port only exchanges packets with the remote end.
Example
# Add the Serial1/0/0 into the DLSw bridge group numbered 20.
[3Com] dlsw bridge-group 20

[3Com] interface Serial1/0/0 [3Com-Serial1/0/0] bridge-set 20
11.1.2 bridge-set (in Ethernet Interface view)

Syntax
bridge-set bridge-set-number undo bridge-set bridge-set-number
View
Parameter
bridge-set-number: The bridge group number that the Ethernet interface is added into, ranging from 1 to 63.
Description
Use the bridge-set (in the Ethernet Interface view) command to add the Ethernet interface into the bridge. Use the undo bridge-set (in the Ethernet Interface view) command to delete the interface from the DLSw bridge group. By default, no Ethernet interface is added into the bridge group. After an Ethernet interface is added into the bridge group, the LLC2 packets on the Ethernet interface can be sent to the remote peer through the related TCP tunnel.
Example
# Add the Ethernet1/0/0 interface into the DLSw bridge group numbered 20.
[3Com] dlsw bridge-group 20 [3Com] interface Ethernet1/0/0 [3Com-Ethernet1/0/0] bridge-set 20
11.1.3 code nrzi

Syntax
code nrzi undo code
View
Synchronous serial interface system view
Parameter
None
Description
Use the code nrzi command to configure the NRZI encoding of the synchronous serial port. Use the undo code nrzi command to remove the NRZI encoding of the synchronous serial port. By default, the NRZ encoding is configured on the synchronous serial port. There are two coding schemes, NRZI and NRZ, available on the synchronous serial port. The NRZ coding scheme is generally used in our router. The serial port coding scheme of some SNA devices is the NRZI coding scheme. Therefore the coding scheme of the router needs to be changed according to the encoding of the connected device.
Example
# Configure the NRZI encoding on the Serial1/0/0.
[3Com-Serial1/0/0] code nrzi
11.1.4 debugging dlsw

Syntax
debugging dlsw { circuit [ correlator ] | tcp [ ip-address ] | reachable-cache } undo debugging dlsw { circuit [ correlator ] | tcp [ ip-address ] | reachable-cache }
View
User view
Parameter
circuit: Enables the DLSw circuit debugging. correlator: Distinguishes different IDs of the circuits. tcp: Enables the debugging of the DLSw peers. ip-address: IP address. reachable-cache: Enables DLSw reachability debugging.
Description
Use the debugging dlsw command to enable the DLSw debugging. Use the undo debugging dlsw command to disable the DLSw debugging.
Example
# Enable DLSw circuit debugging.
<3Com> debugging dlsw circuit
11.1.5 debugging llc2

Syntax
debugging llc2 circuit [ correlator ] undo debugging llc2 circuit [ correlator ]
View
User view
Parameter
correlator: Distinguishes different IDs of the circuits.
Description
Use the debugging llc2 command to enable the LLC2 debugging. Use the undo debugging llc2 command to disable the LLC2 debugging.
Example
# Enable LLC2 debugging.
<3Com> debugging llc2 circuit
11.1.6 debugging sdlc

Syntax
debugging sdlc [ all | event | packet ] undo debugging sdlc { all | event | packet }
View
User view
Parameter
all: Enables all SDLC debugging. event: Enables the SDLC event debugging. packet: Enables the SDLC packet debugging.
Description
Use the debugging sdlc command to enable the SDLC debugging. Use the undo debugging sdlc command to disable the SDLC debugging.
Example
# Enable SDLC event debugging.
<3Com> debugging sdlc event
11.1.7 display dlsw bridge-entry

Syntax
display dlsw bridge-entry interface-type interface-number
View
Any view
Parameter
interface-type interface-number: Specifies an interface by its type and number.
Description
Use the display dlsw bridge-entry command to view the bridge-set information.
Example
# Display the bridge group information.
<3Com> display dlsw bridge-entry Mac_entry 0000.e81c.b6bf Port Ethernet0/0/0 1 group hashIndex 79
11.1.8 display dlsw circuits

Syntax
display dlsw circuits [ circuit-id ] [ verbose ]
View
Any view
Parameter
circuit-id: Displays the virtual circuit number of the specified DLSw. verbose: Displays the detail information of the virtual circuits.
Description
Use the display dlsw circuits command to view the DLSw virtual circuits. The output information of the command helps the user understand the information regarding DLSw virtual circuits.
Example
# Display the general information of the virtual circuits.
<3Com> display dlsw circuits circuit-Id 00a2000a port 04 local-MAC 0000.1738.6dfd remote-MAC 0000.1722.3435 state lifetime 10:02:23
CONNECTED
Table 11-1 Description on the fields of the display dlsw circuits command Field circuit-Id local-MAC Description Distinguishes circuits. Local MAC address, with the lsap being the last SAP used by the local device. Remote MAC address, with the rsap being the last SAP used by the remote device. Link state Duration of the connection
remote-MAC State lifetime
11.1.9 display dlsw information

Syntax
display dlsw information [ local ] [ ip-address ]
View
Any view
Parameter
local: Displays the local exchange capability information. ip-address: Displays the exchange capability information of specified IP address.
Description
Use the display dlsw information command to view the DLSw exchange capability information. The output information of the command facilitates the user to understand the status of the DLSw virtual circuit and perform fault diagnosis.
Example
# Display the general information of exchange capability.
<3Com> display dlsw information DLSw: Capabilities for peer 14.0.0.1 Vendor ID (OUI): 00000c Version number: 01 Release number: 00 Init Pacing Window: 40 Num of TCP sessions: 01 Mac address exclusive: no NetBIOS Name exclusive: no Mac address List: none NetBIOS Name List: none Configured IP address: 14.0.0.1 Version string: Copyright (c) 2003-2004 3com Corp.
Table 11-2 Description on the fields of the display dlsw information command Field Version number Release number Init Pacing Window Num of TCP sessions Mac address exclusive NetBIOS Name exclusive Mac address List NetBIOS Name List RFC 1795 Release version of RFC 1795 Size of the initiated window Number of TCP sessions Reachable MAC address registered in the router Reachable NetBIOS address registered in the router Reachable MAC address list Reachable NetBIOS address
Description
Field Configured IP address Version string Local IP address
Description
Version of 3com router operation system
# Display the local exchange capability information.

<3Com> display dlsw information local DLSw: Capabilities for local: Vendor ID (OUI) Version number Release number Init Pacing Window Num of TCP sessions Mac address exclusive NetBIOS Name exclusive Mac address List NetBIOS Name List Configured IP address Version string : '00e0fc' : 1 : 0 : 40 : 1 : no : no : none : none : 12.0.0.1 : (3Com)
Copyright (c) 2003-2004 3com Corp.
11.1.10 display dlsw remote

Syntax
display dlsw remote [ ip-address ]
View
Any view
Parameter
ip-address: Displays the information of the remote peer with specified IP address or of all the remote peers.
Description
Use the display dlsw remote command to view the information of the remote peers. The output information helps the user to understand the connection state between the DLSw and the remote peers.
Example
# Display the information of the remote peers.
<3Com> display dlsw remote IP address * 3.1.1.1 frame-in frame-out 0 0 0 frame-dop state 00:00:00 life-time
DISCONNECT
Table 11-3 Description on the fields of the display dlsw remote command Field * IP address frame-in frame-out frame-drop State life-time Description Indicates that the peer can set up connection. If no asterisk sign is placed before TCP, the peer is an inactive standby peer. IP address of the peer. Packets received by the peer. Packets sent by the peer. Packets dropped by the peer. State of the peer. Duration of the connection.
11.1.11 display dlsw reachable-cache

Syntax
display dlsw reachable-cache
View
Any view
Parameter
None
Description
Use the display dlsw reachable-cache command to view the reachable-cache of DLSw.
Example
# Display the reachable-cache of the DLSw.
[Router] display dlsw reachable-cache LOCAL MAC addresses in cache
-------------------------------------------------------------------MAC address Status Interface Remain time
REMOTE MAC addresses in cache -------------------------------------------------------------------MAC address 0102.2103.5641 Status FOUND Peer 2.2.2.2 Remain time 15
11.1.12 display llc2

Syntax
display llc2 [ circuit correlator ]
View
Any view
Parameter
correlator: ID used to distinguish different circuits.
Description
Use the display llc2 command to view statistical information of LLC2.
Example
# Display the statistical information of LLC2
<3Com> display llc2 circuit 46465025 llc2 circuit index 46465025 Local Remote Local Remote Role MAC MAC Sap Sap 0.20.35.7b.e0.65 0. 0.84.25.1e.e9 4 4
secondary
State : NORMAL
11.1.13 dlsw bridge-set

Syntax
dlsw bridge-set bridge-set-number undo dlsw bridge-set bridge-set-number
View
System view
Parameter
bridge-set-number: ID of bridge group, ranging from 1 to 63, local valid.
Description
Use the dlsw bridge-set command to configure the bridge group to connect DLSw. Use the undo dlsw bridge-set command to delete the bridge. In order to forward packets of a specified bridge group to the remote end through the TCP connection, a local bridge group needs to be connected with the DLSw by using this command, that is, packets of the local bridge group can be sent to the remote end through the TCP tunnel. This command can be used many times to connect many bridge groups with the DLSw, and make them all capable of joining the forwarding through the TCP tunnel.
Example
# Configure the bridge group connected with the DLSw, with the ID of the bridge group being 20.
[3Com] dlsw bridge-group 20
11.1.14 dlsw diverse

Syntax
dlsw diverse mac-address
View
System view
Parameter
mac-address: MAC address that needs conversion.
Description
Use the dlsw diverse command to convert the format of the specified MAC address from MAC to token ring or conversely. Allowing the system to automatically convert MAC addresses, this command helps you avoid possible mistakes with manual conversion.
Example
# Convert the format of MAC address 0012-3578-4521.
[Router] dlsw diverse 0012-3578-4521 Diversed MAC address: 0048-ac1e-a284
# Reconvert the format of MAC address 0012-3578-4521.

[Router] dlsw diverse 0048-ac1e-a284 Diversed MAC address: 0012-3578-4521
11.1.15 dlsw enable

Syntax
dlsw enable undo dlsw enable
View
System view
Parameter
None
Description
Use the dlsw enable command to enable the DLSw performance. Use the undo dlsw enable command to suspend the DLSw performance. By default, the DLSw performance is enabled. After this command is performed the system will release all dynamic resources, but retain the original configuration.
Example
# Suspend the DLSw performance.
[3Com] undo dlsw enable
# Enable the DLSw performance.

[3Com] dlsw enable
11.1.16 dlsw local

Syntax
dlsw local ip-address [ init-window init-window-size ] [ keepalive keepalive-interval ] [ max-frame max-frame-size ] [ max-window max-window-size ] [ permit-dynamic ] [ vendor-id vendor-id ] undo dlsw local ip-address [ init-window ] [ keepalive ] [ max-frame ] [ max-window ] [ permit-dynamic ] [ vendor-id vendor-id ]
View
System view
Parameter
ip-address: IP address of the created local peer. init-window-size: Size of the initialized local response window, in the range 1 to 2000 frames. It defaults to 40 frames. keepalive-interval: Time interval for sending the keepalive, in the range 0 to 1200 seconds. It defaults to 30 seconds. max-frame-size: Maximum length of the packet, which can be 516, 1470, 1500, 2052, 4472, 8144, 11407, 11454, or 17800 bytes. It defaults to 1500 bytes. max-window-size: Size of the maximum local response window, ranging from 1 to 2000 frames. It defaults to 50 frames. permit-dynamic: Permits unpreconfigured remote router to initiate connections and dynamically create peers. The remote peer is unnecessarily configured on the local end using this parameter, and the local peer waits for the connection initiated by the remote peer. vendor-id: DLSw vendor identifier, in the range 00.00.00~ff.ff.ff. It defaults to 00.e0.fc.
Description
Use the dlsw local command to create the DLSw local peer. Use the undo dlsw local command to delete the local peer or restore the default. Creating a TCP tunnel is the first step for establishing the DLSw connection. In order to create the TCP tunnel, the DLSw local peer is to first be configured to specify the local IP address that creates the TCP connection before receiving the TCP connection request initiated by the remote router. A router can only have one local peer.
Example
# Create the DLSw local peer, with the IP address being 1.1.1.1, the size of the local response window being 50, time interval for sending the keepalive being 40 seconds, both the maximum length of the packet max-frame-size and the size of the maximum local response window being the default value.
[3Com] dlsw local 1.1.1.1 init-window 50 keepalive 40
11.1.17 dlsw reachable

Syntax
dlsw reachable { mac-address mac-address [ mask mask ] | mac-exclusivity | saps saps-values [ saps-values ] } undo dlsw reachable { mac-address mac-address | mac-exclusivity | saps saps-values [ saps-values ] }
View
System view
Parameter
mac-address mac-address: Locally reachable MAC address on the router. mask mask: MAC address mask, functioning similar to a subnet mask. mac-exclusivity: Allows the router to access the configured MAC address only. saps saps-values: Locally reachable SAP address on the router, in the range 0 to FF.
Description
Use the dlsw reachable command to configure locally reachable MAC and SAP addresses. Use the undo dlsw enable command to cancel the configuration. After you configure the dlsw reachable command, the router sends a packet to all the connected routers, notifying them of the locally reachable MAC or SAP address. Based on the information, these routers can decide whether to send packets to this router without probing. Note that you must change the configuration in time to accommodate to changes on the local network.
Example
# Allow the router to access the MAC addresses beginning with 1212.
[Router] dlsw reachable mac-address 1212-1212-1212 mask ffff-0000-0000
# Allow the router to access SAP addresses 12 and 14.

[Router] dlsw reachable saps 12 14
# Restrict the router to access only the configured MAC addresses.

[Router] dlsw reachable mac-exclusivity
11.1.18 dlsw reachable-cache

Syntax
dlsw reachable-cache mac-address remote ip-address undo dlsw reachable-cache mac-address remote ip-address
View
System view
Parameter
mac-address: MAC address of the SNA device connected to the peer router. ip-address: IP address of the peer router.
Description
Use the dlsw reachable-cache command to add the reachability information of the specified SNA device to the reachable-cache. You can specify this SNA device by specifying its MAC address and IP address of the router to which it is connected. Use the undo dlsw reachable-cache command to remove the configured reachability information. This configuration allows the router to send packets without probing. However, if the remote network is prone to changes this configuration is unreliable.
Example
# Add a reachability entry to the reachable-cache, where the remote IP address is 10.12.13.10 and the MAC address of the connected SNA device is 0102-2103-5641.
[Router] dlsw reachable-cache 0102-2103-5641 remote 10.12.13.10
11.1.19 dlsw remote

Syntax
dlsw remote ip-address [ backup backup-address ] [dmac mac-address] [dmac-list acl-number ] [ priority priority] [ keepalive keepalive-interval ] [ max-frame max-frame-size ] [ max-queue max-queue-length ] [ linger minutes ] display dlsw remote ip-address
View
System view
Parameter
ip-address: Specifies the IP address of the remote peer. backup backup-address: the backup IP address of the remote peer. dmac mac-address: Destination MAC address. dmac-list acl-number: Destination MAC address list. priority priority: Transmission cost, ranging from 1 to 5. keepalive keepalive-interval: Time interval for sending the keepalive packet, ranging from 0 to 1200 seconds. max-frame max-frame-size: Maximum length of the packet, which can be 516, 1470, 1500, 2052, 4472, 8144, 11407, 11454, or 17800 bytes. max-queue max-queue-length: Size of the TCP sending/receiving queue, ranging from 50 to 2000. linger minutes: Linger time of the backup connection after the primary peer being disconnected, ranging from 0 to 1440 minutes.
Description
Use the dlsw remote command to create the DLSw remote peer. Use the undo dlsw remote command to delete the remote peer. The default priority is 3. The default keepalive-interval is 30 seconds. The default max-frame-size is 1500 bytes. The default max-queue-length is 200. The default seconds is 90 seconds. The default minutes are 5 minutes. After the local peer is configured, the remote peer needs to be configured to create the TCP tunnel. The router will keep attempting to create the TCP connection with the remote router. A router can be configured with several remote peers so as to create the TCP tunnel with several remote routers.
The following deserves special attention when creating the remote backup-address: 1) In order to create the remote backup-address, the ip-address should be the IP address of the backup peer end, and the backup backup-address should be the IP address of the remote primary peer with the TCP connection already created. In other words, before creating the remote backup peer connection, the user should ensure that the local end has created the TCP connection with a remote primary peer. If the peer end backup peer is created the same time the remote peer being created first, the system will prompt the following information:
Primary peer ip address does not exist
This prompt indicates that the user should first create a remote primary peer before creating the backup peer. 2) If the backup link still exists after the TCP connection of the primary link is interrupted, the TCP link can be retained (use the display dlsw remote command and a TCP connection can be found still exist) until the backup link linger minutes is also timeout.
Example
# Create the DLSw remote peer, with the IP address being 2.2.2.2, the transmission cost being 2, the time interval for sending the keepalive being 40 seconds, the maximum length lf-size of the packet being the default value, and the size of the TCP sending/receiving queue being 300.
[3Com] dlsw remote 2.2.2.2 priority 2 keepalive 40 max-queue 300
11.1.20 dlsw timer

Syntax
dlsw timer { connected | explorer-wait | local-pending | remote-pending | cache | explorer } seconds undo dlsw timer { connected | explorer-wait | local-pending | remote-pending | cache | explorer }
View
System view
Parameter
connected seconds: The holding time of a connection, ranging from 1 second to 65535 seconds. The default value is 300 seconds. explorer-wait seconds: The waiting time of local explorer frames, ranging from 1 second to 65535 seconds. The default value is 30 seconds.
local-pending seconds: The local pending time, ranging from 1 second to 65535 seconds. The default value is 30 seconds. remote-pending seconds: The remote pending time, ranging from 1 second to 65535 seconds. The default value is 30 seconds. cache seconds: Address saving time in SNA cache, ranging from 1 second to 65535 seconds. The default value is 120 seconds. explorer seconds: The waiting time of remote explorer frames, ranging from 1 second to 65535 seconds. The default value is 30 seconds.
Description
Use the dlsw timer command to configure the DLSw timer parameters. Use the undo dlsw timer command to restore the default value of the DLSw timer parameters. By configuring the DLSw timer, the various kinds of timers used for the DLSw to create the virtual circuit can be revised. However the user is suggested not to revise the DLSw timer parameters randomly.
Example
# Configure the DLSw timer parameters, with the connected timeout being 200 seconds, the waiting timeout of the local explorer frame being 15 seconds, the local waiting timeout being 15 seconds, the remote peer waiting timeout being 25 seconds, the SNA cache address timeout being the default value and the waiting timeout of the remote explorer frame being the default value.
[3Com] dlsw timer connected 20 [3Com] dlsw timer explorer-wait 15 [3Com] dlsw timer local-pending 15 [3Com] dlsw timer remote-pending 25
11.1.21 idle-mark
Syntax
idle-mark undo idle-mark
View
Parameter
None
Description
Use the idle-mark command to configure the idle coding scheme of the synchronous serial port. Use the undo idle-mark command to restore the default idle coding scheme of the synchronous serial port. By default, the synchronous serial port adopts the 7E coding scheme. 3Com routers encapsulate 7E in the packets to identify the free time of the SDLC serial interface, but some SDLC devices adopt full 1 high level instead. In order to be better compatible to these kind of devices, the idle coding scheme of the router needs to be changed. Sometimes when connecting with the AS/400, this command needs to be configured to change the idle coding scheme and accelerate the AS/400 polling speed.
Example
# Configure the idle coding scheme of the synchronous serial port on the Serial1/0/0 as idle-mark.
[3Com-Serial1/0/0] idle-mark
11.1.22 link-protocol sdlc

Syntax
link-protocol sdlc
View
Parameter
None
Description
Use the link-protocol sdlc command to change the link layer encapsulation protocol of the synchronous serial interface into SDLC. By default, the encapsulated link layer protocol of the synchronous serial interface is PPP.
The SDLC is a kind of link layer protocol relative to the SNA, with working principal similar to that of the HDLC. In order for the DLSw to work normally, the link layer encapsulation protocol of the synchronous serial interface should be changed to SDLC. Note all the IP related commands on the interface should be removed before encapsulating the SDLC, as the SDLC link protocol cannot be used to carry the IP protocol, for example, to delete the IP address on the interface, etc.
Example
# Configure the encapsulation protocol on the Serial1/0/0 as SDLC.
[3Com-Serial1/0/0] link-protocol sdlc
11.1.23 llc2 max-ack

Syntax
llc2 max-ack length undo llc2 max-ack
View
Parameter
length: Length of the LLC2 advanced response window, ranging from 1 to 127.
Description
Use the llc2 max-ack command to configure the length of the advance response window before the LLC2 sending the acknowledgement frame. Use the undo llc2 max-ack command to restore the default length of the advance response window before the LLC2 sending the acknowledgement frame. By default, the length of the LLC2 advance response window is 3. The LLC2 advance response window refers to the maximum receivable information frames before sending the acknowledgement frame, that is, to send the response packet in advance on receiving the packet n.
Example
# Configure the length of the advanced response window before the LLC2 sends the acknowledgement frame as 5.
[3Com-Ethernet1/0/0] llc2 max-ack 5
11.1.24 llc2 max-send-queue

Syntax
llc2 max-send-queue length undo llc2 max-send-queue
View
Parameter
length: The queue length sending the LLC2 packet, ranging from 20 to 200.
Description
Use the llc2 max-send-queue command to configure the queue length sending the LLC2 packet. Use the undo llc2 max-send-queue command to restore the default queue length sending the LLC2 packet. By default, the queue length sending the LLC2 packet is 50.
Example
# Configure the queue length sending the LLC2 packet as 30.
[3Com-Ethernet1/0/0] llc2 max-send-queue 30
11.1.25 llc2 max-transmission

Syntax
llc2 max-transmission retries undo llc2 max-transmission
View
Parameter
retries: LLC2 retransmission times, ranging form 1 to 255.
Description
Use the llc2 max-transmission command to configure the retransmission times of the LLC2. Use the undo llc2 max-transmission command to restore the default retransmission times of the LLC2. By default, the number of the transmission retries of the LLC2 is 3. The LLC2 retransmission times refer to the times of resending information frames before the acknowledgement frame is received from the peer end.
Example
# Set the number of transmission retries of the LLC2 to 10.
[3Com-Ethernet1/0/0] llc2 max-transmission 10
11.1.26 llc2 modulo

Syntax
llc2 modulo n undo llc2 modulo
View
Parameter
n: The modulus of the LLC2, with the available values of 8 or 128.
Description
Use the llc2 modulo command to configure the modulus of the LLC2. Use the undo llc2 modulo command to restore the default modulus of the LLC2. By default, the modulus of the LLC2 is 128. LLC2, like X25, adopts modulus mode to number information packets, and the modulus of LLC2 is 8 or 128. Ethernet generally uses modulus 128.
Example
# Restore the default modulus of the LLC2.
[3Com-Ethernet1/0/0] undo llc2 modulo
11.1.27 llc2 receive-window

Syntax
llc2 receive-window length undo llc2 receive-window
View
Parameter
length: Length of the local response window, ranging from 1 to 127.
Description
Use the llc2 receive-window command to configure the maximum packets that can be sent before the LLC2 receives the acknowledgement frame. Use the undo llc2 receive-window command to restore the default value of the maximum packets that can be sent before the acknowledgement frame is received. By default, the length of the LLC2 local response window is 7. The LLC2 local response window refers to the maximum packets that can be sent continuously before the acknowledgement frame is received.
Example
# Configure the maximum packets that can be sent before the LLC2 receives the acknowledgement frame as 10.
[3Com-Ethernet1/0/0] llc2 receive-window 10
11.1.28 llc2 timer ack

Syntax
llc2 timer ack mseconds undo llc2 timer ack
View
Parameter
mseconds: LLC2 local response time, ranging from 1 to 60000ms.
Description
Use the llc2 timer ack command to configure the LLC2 local response time. Use the undo llc2 timer ack command to restore the default value of the LLC2 local response time. By default, the LLC2 local response time is 200ms. The LLC2 local response time refers to the maximum waiting time for the response from the peer end after an LLC2 data packet is sent.
Example
# Configure the LLC2 local response time as 10ms.
[3Com-Ethernet1/0/0] llc2 timer ack 10
11.1.29 llc2 timer ack-delay

Syntax
llc2 timer ack-delay mseconds undo llc2 timer ack-delay
View
Parameter
mseconds: Local acknowledgement delay time on receiving the information frames, ranging from 1 to 60000ms.
Description
Use the llc2 timer ack-delay command to configure the local acknowledgement delay time when the LLC2 receives information frames. Use the undo llc2 timer ack-delay command to restore the default value of the local acknowledgement delay time when the LLC2 receives information frame. By default, the LLC2 local acknowledgement delay time is 100ms. The LLC2 local acknowledgement delay time refers to the maximum waiting time for delayed acknowledgement on receiving an LLC2 data packet.
Example
# Configure the local acknowledgement delay time for received information frames as 200 milliseconds.
[3Com-Ethernet1/0/0] llc2 timer ack-delay 200
11.1.30 llc2 timer busy

Syntax
llc2 timer busy mseconds undo llc2 timer busy
View
Parameter
mseconds: The LLC2 BUSY time, ranging from 1 to 60000ms.
Description
Use the llc2 timer busy command to configure the LLC2 BUSY time. Use the undo llc2 timer busy command to restore the default value of the LLC2 BUSY time. By default, the LLC2 BUSY time is 300ms. The LLC2 BUSY time refers to the waiting time before repolling a busy station.
Example
# Configure the LLC2 BUSY time as 200ms.
[3Com-Ethernet1/0/0] llc2 timer busy 200
11.1.31 llc2 timer poll

Syntax
llc2 timer poll mseconds undo llc2 timer poll
View
Parameter
mseconds: LLC2 P/F waiting time, ranging from 1 to 60000ms.
Description
Use the llc2 timer poll command to configure the P/F waiting time of the LLC2. Use the undo llc2 timer poll command to restore the default value of the LLC2 P/F waiting time. By default, the LLC2 P/F waiting time is 5000ms. The LLC2 P/F waiting time refers to the time of waiting for the acknowledgement frame after the frame P is sent.
Example
# Configure the LLC2 P/F waiting time as 2000ms.
[3Com-Ethernet1/0/0] llc2 timer poll 2000
11.1.32 llc2 timer reject

Syntax
llc2 timer reject mseconds undo llc2 timer reject
View
Parameter
mseconds: The LLC2 REJ time, ranging from 1 to 60000ms.
Description
Use the llc2 timer reject command to configure the REJ time of the LLC2. Use the undo llc2 timer reject command to restore the default value of the LLC2 REJ time. By default, the LLC2 REJ time is 500ms. The LLC2 REJ time refers to the waiting time for the acknowledgement frame to come after a deny frame is sent.
Example
# Configure the LLC2 REJ time as 2000ms.
[3Com-Ethernet1/0/0] llc2 timer reject 2000
11.1.33 reset dlsw bridge-entry

Syntax
reset dlsw bridge-entry
View
User view
Parameter
None
Description
Use the reset dlsw bridge-entry command to clear the entry cache information in the DLSw bridge group.
Example
# Clear the entry cache information in the DLSw bridge group.
<3Com> reset dlsw bridge-entry
11.1.34 reset dlsw circuits

Syntax
reset dlsw circuits [ circuit-id ]
View
User view
Parameter
circuit-id: The virtual circuit ID of DLSw, in the range 0 to FFFFFFFF.
Description
Use the reset dlsw circuits command to clear the DLSw virtual circuit information.
Example
# Clear the virtual circuit information with the virtual circuit number of 100.
<3Com> reset dlsw circuits 100
11.1.35 reset dlsw reachable-cache

Syntax
reset dlsw reachable-cache
View
User view
Parameter
None
Description
Use the reset dlsw reachable-cache command to clear information from the reachable-cache of the DLSw.
Example
# Clear information from the reachable-cache of the DLSw.
<3Com> reset dlsw reachable-cache
11.1.36 sdlc controller

Syntax
sdlc controller sdlc-address undo sdlc controller sdlc-address
View
Parameter
sdlc-address: The secondary station address of the SDLC.
Description
Use the sdlc controller command to configure the secondary station address of the SDLC. Use the undo sdlc controller command to delete the secondary station address of the SDLC. By default, the secondary station address of the SDLC is not configured.
The SDLC protocol permits several virtual circuits running on a single SDLC physical link, with one end connected with the primary station and the other end connected with the secondary station. In order to distinguish each virtual circuit, their SDLC addresses need to be designated. Because the SDLC is in unbalanced mode, a primary device can connect with several secondary devices through the medium of shared machine or SDLC switch, while the secondary devices cannot be connected with each other. And there can exist one and only primary device if any. In this sense, the SDLC devices in the same group can be guaranteed to communicate with each other normally only if the addresses of the secondary devices are specified. This command specifies the SDLC address, which is unique on a physical interface, for the virtual circuit. The configured SDLC address on synchronous serial interface is virtually the address of the SDLC secondary station. The SDLC address ranges from 0x01 to 0xFE. The SDLC address of a router is only valid on one physical interface, that is, the SDLC addresses configured on different interfaces can be same.
Example
# Configure the secondary station address of the SDLC on the Serial1/0/0 as 0x05.
[3Com-Serial1/0/0] sdlc controller 05
11.1.37 sdlc mac-map local

Syntax
sdlc mac-map local mac-address undo sdlc mac-map local
View
Parameter
mac-address: The virtual MAC address of the SDLC.
Description
Use the sdlc mac-map local command to configure the virtual MAC address of the SDLC. Use the undo sdlc mac-map local command to delete the virtual MAC address of the SDLC. By default, the SDLC has no virtual MAC address.
Example
# Configure the virtual MAC address of the SDLC.
[3Com-Serial1/0/0] sdlc mac-map local 0000-e81c-b6bf
11.1.38 sdlc mac-map remote

Syntax
sdlc mac-map remote mac-addr sdlc-addr undo sdlc mac-map remote mac-addr sdlc-addr
View
Parameter
mac-addr: The MAC address of the SDLC peer. sdlc-addr: The SDLC address of the SDLC peer.
Description
Use the sdlc mac-map remote command to configure the SDLC peer. Use the undo sdlc mac-map remote command to delete the SDLC peer. By default, the synchronous serial interface has no peer. This command is used to specify the MAC address of a peer end for an SDLC virtual circuit so as to provide the destination MAC address on the transformation from the SDLC to the LLC2. When configuring the DLSw, an SDLC address should be configured a related partner (peer). The MAC address of the partner (peer) should be the MAC address of the remote SNA device (physical addresses of such devices as the Ethernet and the Token-Ring), or the MAC address of the peer end compounded by the SDLC.
Example
# Configure the SDLC peer.
[3Com-Serial1/0/0] sdlc mac-map remote 00E0-FC00-0010 0x05
11.1.39 sdlc max-pdu

Syntax
sdlc max-pdu n
undo sdlc max-pdu
View
Parameter
n: The maximum receivable frame length of the SDLC, ranging from 1 to 17600 bytes.
Description
Use the sdlc max-pdu command to configure the maximum receivable frame length of the SDLC. Use the undo sdlc max-pdu command to restore the default value of the SDLC maximum receivable frame length. By default, the maximum receivable frame length of the SDLC is of 265 bytes. The SDLC maximum frame length refers to the bytes of the largest packet that can be received and sent, excluding the parity bit and the start/stop bit. The maximum receivable frame length of some PU2.0 devices is of 265 bytes, and that of IBM AS/400 is generally of 521 bytes. Usually we need to configure it the same value as the connected SDLC device.
Example
# Configure the maximum receivable frame length of the SDLC as 512.
[3Com-Serial1/0/0] sdlc max-pdu 521
11.1.40 sdlc max-send-queue

Syntax
sdlc max-send-queue length undo sdlc max-send-queue
View
Parameter
length: The queue length sending the SDLC packet, ranging from 20 to 255.
Description
Use the sdlc max-send-queue command to configure the queue length sending the SDLC packet. Use the undo sdlc max-send-queue command to restore the default value of the queue length sending the SDLC packet. By default, the queue length sending the SDLC packet is 50.
Example
# Configure the queue length sending the SDLC packet on the Serial1/0/0 as 30.
[3Com-Serial1/0/0] sdlc max-send-queue 30
11.1.41 sdlc max-transmission

Syntax
sdlc max-transmission retries undo sdlc max-transmission
View
Parameter
retries: The SDLC timeout retransmission times, ranging from 1 to 255 times.
Description
Use the sdlc max-transmission command to configure the SDLC timeout retransmission times. Use the undo sdlc max-transmission command to restore the default value of the SDLC timeout retransmission times. By default, the SDLC timeout retransmission times are 20. The SDLC timeout retransmission times (N2) refers to the retransmission times before receiving the acknowledgement packet from the peer end.
Example
# Configure the SDLC timeout retransmission times as 30.
[3Com-Serial1/0/0] sdlc max-transmission 30
11.1.42 sdlc modulo

Syntax
sdlc modulo n undo sdlc modulo
View
Parameter
n: SDLC modulus, with available value of 8 or 128.
Description
Use the sdlc modulo command to configure the modulus of the SDLC. Use the undo sdlc modulo command to restore the default modulus of the SDLC. By default, the SDLC modulus is 8. SDLC, like X25, adopts modulus mode to number information packets, and the modulus of SDLC is 8 or 128. Generally modulus 8 is selected.
Example
# Restore the default modulus of the SDLC.
[3Com-Serial1/0/0] undo sdlc modulo
11.1.43 sdlc sap-map local

Syntax
sdlc sap-map local lsap sdlc-addr undo sdlc sap-map local lsap sdlc-addr
View
Parameter
lsap: The virtual SAP address set by the device connected with the local interface. sdlc-addr: The SDLC address.
Description
Use the sdlc sap-map local command to configure the SAP address on transforming the SDLC into the LLC2. Use the undo sdlc sap-map local command to restore the default value of the LLC2 SAP address. By default, lsap is 04. When the SDLC packet is translated into the LLC2 packet, the SAP address is needed as well as the MAC address. Generally speaking, the SAP address of the SNA protocol is 0x04 or 0x08 or 0x0C. For the related configuration please see the sdlc sap-map remote command.
Example
# Configure the SAP address on translating the SDLC into the LLC2.
[3Com-Serial1/0/0] sdlc sap-map local 08 05
11.1.44 sdlc sap-map remote

Syntax
sdlc sap-map remote dsap sdlc-addr undo sdlc sap-map remote dsap sdlc-addr
View
Parameter
dsap: The SAP address of the DLSw peer device. By default, dsap is 04. sdlc-addr: The SDLC address.
Description
Use the sdlc sap-map remote command to configure the remote DLSw device SAP address when SDLC is translated into LLC2. Use the undo sdlc sap-map remote command to restore the default value. When the SDLC packet is translated into the LLC2 packet, the SAP address is needed besides the MAC address. Generally speaking, the SAP address of the SNA protocol is 0x04 or 0x08 or 0x0C. For the related configuration please see sdlc sap-map local.
Example
# Configure the remote DLSw device SAP address when SDLC is translated into LLC2.
[3Com-Serial1/0/0] sdlc sap-map remote 0C 05
11.1.45 sdlc simultaneous

Syntax
sdlc simultaneous undo sdlc simultaneous
View
Parameter
None
Description
Use the sdlc simultaneous command to configure the SDLC data to use bidirectional transmission mode. Use the undo sdlc simultaneous command to stop the SDLC data to use bidirectional transmission mode. By default, SDLC data are transmitted in bidirectional mode. This command configures the synchronous serial interface to work in bidirectional data simultaneous transmission mode. That is, the SDLC primary station can send data to the secondary station and receive data at the same time.
Example
# Configure the SDLC data to use the bidirectional transmission mode.
[3Com-Serial1/0/0] sdlc simultaneous
11.1.46 sdlc status

Syntax
sdlc status { primary | secondary } undo sdlc status
View
Parameter
primary: The primary station of the end, controlling the whole connection process. secondary: The secondary station of the end, controlled by the primary station.
Description
Use the sdlc role command to configure the SDLC role the device acts. Use the undo sdlc role command to restore the default SDLC role. By default, the device has no role. The SDLC is a kind of link layer protocol in unbalanced mode. That is, the statuses of the devices on the two connected ends are unequal: one is primary and the other is secondary. The primary side, being the primary station, whose role is primary, plays the dominant role and controls the whole connection process. While the other side, being the secondary station, whose role is secondary, receives control passively. Therefore, the user needs to configure the role for the interface encapsulated with SDLC protocol. On the SDLC role configuration, the roles should be decided by the status of the SDLC device connected with the local router. If the SDLC device connected with the local interface is primary, the local interface is to be set secondary, and vice versa. In general, the central IBM mainframe is primary, whereas terminal devices, including UNIX hosts and ATM, are secondary.
Example
# Configure the SDLC device connected with the Serial1/0/0 as primary, and the local interface as secondary.
[3Com-Serial1/0/0] sdlc role secondary
11.1.47 sdlc timer ack

Syntax
sdlc timer ack mseconds undo sdlc timer ack
View
Parameter
mseconds: The SDLC primary station response waiting time, ranging from 1 to 60000ms.
Description
Use the sdlc timer ack command to configure the SDLC primary station response waiting time (mseconds). Use the undo sdlc timer ack command to restore the default value of the SDLC primary station response waiting time. By default, the configured SDLC primary station response waiting time is 3000ms. The primary station response waiting time (mseconds) refers to the waiting time for the response from the secondary station after the primary station sends information frames.
Example
# Configure the SDLC primary station response waiting time (mseconds) as 2000ms.
[3Com-Serial1/0/0] sdlc timer ack 2000
11.1.48 sdlc timer lifetime

Syntax
sdlc timer lifetime mseconds undo sdlc timer lifetime
View
Parameter
mseconds: The SDLC secondary station response waiting time, ranging from 1 to 60000ms.
Description
Use the sdlc timer lifetime command to configure the SDLC secondary station response waiting time (mseconds). Use the undo sdlc timer lifetime command to restore the default value of the SDLC secondary station response waiting time. By default, the SDLC secondary station response waiting time (mseconds) is 500ms. The secondary station response waiting time (mseconds) refers to the waiting time for the response from the primary station after the secondary station sends information frames.
Example
# Configure the SDLC secondary station response waiting time (mseconds) as 1000ms.
[3Com-Serial1/0/0] sdlc timer lifetime 1000
11.1.49 sdlc timer poll

Syntax
sdlc timer poll mseconds undo sdlc timer poll
View
Parameter
mseconds: SDLC poll pause timer, ranging from 1 to 10000ms.
Description
Use the sdlc timer poll command to configure the SDLC poll pause timer. Use the undo sdlc timer poll command to restore the default value of the SDLC poll pause timer. By default, the SDLC poll pause timer is 1000ms. The SDLC poll pause timer refers to the waiting interval between the two SDLC nodes polled by the SDLC primary station.
Example
# Configure the SDLC poll pause timer as 200ms.
[3Com-Serial1/0/0] sdlc timer poll 200
11.1.50 sdlc window

Syntax
sdlc window length undo sdlc window
View
Parameter
length: Length of the SDLC local response window, ranging from 1 to 7.
Description
Use the sdlc window command to configure the length of the SDLC local response window. Use the undo sdlc window command to restore the default length of the SDLC local response window. By default, the default length of the SDLC local response window is 7. The SDLC local response window refers to the maximum number of packets that can be sent continuously without waiting for the response from the peer end.
Example
# Configure the length of the SDLC local response window on the Serial1/0/0 as 5.
[3Com-Serial1/0/0] sdlc window 5
11.1.51 sdlc xid

Syntax
sdlc xid sdlc-address xid-number undo sdlc xid sdlc-address
View
Parameter
sdlc-address: The SDLC address of the XID, which should be configured beforehand. xid-number: An integer with a length of 4 bytes, ranging from 1 to 0xFFFFFFFF. The first 12 bits are network numbers, and the last 20 bytes are node numbers.
Description
Use the sdlc xid command to configure the XID of the SDLC. Use the undo sdlc xid command to delete the XID of the SDLC. By default, the synchronous serial interface has no XID of the SDLC. The XID is the ID of a device in the SNA world. Generally speaking, there are two kinds of devices: PU2.0 and PU2.1. The XID has been automatically configured on the PU2.1
devices and they can announce their IDs by exchanging the XID. The PU2.0 devices did not exchange the ID, so they can not get ID automatically. Therefore, this command needs not to be configured on PU2.1 typed devices, whereas it is needed to specify an XID for PU2.0 typed devices.
Example
# Configure the XID of the SDLC, in which the xid-number is 0x2000.
[3Com-Serial1/0/0] sdlc xid 05 2000
Chapter 12 SOT Configuration Commands

12.1 SOT Configuration Commands
12.1.1 display sot
Syntax
display sot
View
Any view
Parameter
None
Description
Use the display sot command to display the current state of SOT connections.
Example
# Display the state about SOT connections.
[Router] display sot This peer : Serial0/0/0 1.1.1.1 group 1 (simple) state 23 frame_s frame_r conn_frames disc-frames 34 2 3
sdlc-addr ip-address 1 2.2.2.2 open
Table 12-1 Description on the fields of the display sot command Field This peer Serial0/0/0 group 1 (simple) Description IP address of the local SOT entity The Serial0/0/0 interface is added to SOT protocol group 1, which is operating in simple SOT mode. SDLC address of the terminal Peer IP address SOT connection state
sdlc-addr ip-address state
Field frame_s frame_r conn_frames disc-frames
Description Number of sent SDLC frames Number of received SDLC frames Number of the SDLC frames sent for SOT connection setup Number of discarded SDLC frames
The following is the detailed information about SOT connection state: In simple/sdlc pass through mode, a SOT connection can be open or close. Table 12-2 SOT connection states in simple/SDLC pass-through mode SOT connection state is open When TCP connection has been set up or is being set up. Normally, the TCP connection is set up several seconds after the send all tcp/sot send address command is configured in non-local mode on the serial interfaces at the two ends. close No TCP connection is present
In SOT local acknowledgement mode, seven SOT states exist: NULL, Link_up, N-xid_sent, Connecting, Awaiting_connect, Connected, and Awaiting_release. Table 12-3 SOT connection states in simple/SDLC pass-through mode SOT connection state is NULL Link_up When The interface to be used is shut down or its physical state or protocol state is down The physical layer and protocol state of the interface are up, but no connection is being set up One end of the link sends an XID frame Connection is being set up Connection progress setup acknowledgement is in
N-xid_sent Connecting Awaiting_connect Connected
Connection is set up
SOT connection state is Awaiting_release
When Connection release acknowledgement is in progress
12.1.2 link-protocol sot

Syntax
link-protocol sot
View
Parameter
None
Description
Use the link-protocol sot command to encapsulate the serial interface with SOT. By default, the serial interface is encapsulated with PPP. Before you can configure SOT on a synchronous serial interface, you must encapsulate the interface with SOT.
Example
# Encapsulate the Serial0/0/0 interface with SOT.
[Router-Serial0/0/0] link-protocol sot
12.1.3 sot counter keepalive

Syntax
sot counter keepalive count undo sot counter keepalive
View
System view
Parameter
count: Maximum number of keepalive checks before disconnecting from the peer SOT entity, in the range 1 to 10.
Description
Use the sot counter keepalive command to specify the number of keepalive checks before disconnecting from the peer SOT entity. Use the undo sot counter keepalive command to disable keepalive check before disconnection. The peer SOT entity is disconnected without keepalive check. By default, SOT connection is disconnected without keepalive check. The command is used only in SOT local acknowledgement mode.
Example
# Set maximum number of keepalive checks to four before disconnecting from the peer SOT entity.
[Router] sot counter keepalive 4
12.1.4 sot gather

Syntax
sot gather group-number undo sot gather group-number
View
Parameter
group-number: An integer in the range 1 to 255.
Description
Use the sot gather command to assign the serial interface to an existing SOT protocol group. Use the undo sot gather command to remove the serial interface from its SOT protocol group. You can assign a serial interface to only one SOT protocol group. If this group is operating in simple SOT mode, the interface will operate in simple SOT mode providing only point-to-point data transmission. If this group is operating in SDLC mode, the interface
operates in pass-through mode or local acknowledgement mode providing point to multipoint data transmission.
Note: The configuration of the sot gather group-number command will replace the original one, if there is any. When the type of the SOT protocol group changes, from simple to SDLC for example, the SOT configuration on the interface is removed.
Related command: sot group-set.
Example
# Assign interface Serial 0/0/0 to SOT protocol group 2.
[Router-Serial0/0/0] sot gather 2
12.1.5 sot group-set

Syntax
sot group-set group-number { simple | sdlc } undo sot group-set group-number
View
System view
Parameter
group-number: An integer in the range 1 to 255. simple: Simple protocol group, corresponding to simple SOT mode. sdlc: SDLC protocol group, corresponding to SDLC mode: pass-through or local. Related command: sot gather.
Description
Use the sot group-set command to set up a SOT protocol group. Use the undo sot group-set command to remove a SOT protocol group. By default, no protocol group is set up.
SDLC protocol groups are well suited to point-to-point or point-to-multipoint SDLC routing; simple protocol groups are well suited to point-to-point connections.
Example
# Set up SOT protocol group 5 and specifies its mode to simple.
[Router] sot group-set 5 simple
# Set up SOT protocol group 6 and specifies its mode to SDLC.

[Router] sot group-set 6 sdlc
12.1.6 sot peer

Syntax
sot peer ip-address undo sot peer
View
System view
Parameter
ip-address: IP address of the local SOT entity.
Description
Use the sot peer command to assign an IP address to the local SOT entity. Use the undo sot peer command to remove the local SOT entity. The IP address provided in this command must belong to an interface that is always up, a loopback interface for example.
Example
# Assign the IP address 131.108.254.6 to the local SOT entity.
[Router] sot peer 131.108.254.6
12.1.7 sot sdlc broadcast

Syntax
sot sdlc broadcast undo sot sdlc broadcast
View
Parameter
None
Description
Use the sot sdlc broadcast command to configure the broadcast address FF for the connected SDLC terminals, allowing them to receive broadcast frames. Use the undo sot sdlc broadcast command to disable SDLC broadcast. By default, SDLC broadcast is disabled. Related command: sot send address.
Example
# Configure the broadcast address FF for the connected SDLC terminals.
[Router-Serial0/0/0] sot sdlc broadcast
12.1.8 sot sdlc controller

Syntax
sot sdlc controller sdlc-address undo sot sdlc controller sdlc-address
View
Parameter
sdlc-address: SDLC address of the terminal, in the range 0 to ff (exclusive).
Description
Use the sot sdlc controller command to configure the SDLC address of a connected terminal. Use the undo sot sdlc controller command to remove the SDLC address of a connected terminal. By default, no terminal is specified.
This command allows the router to implement point-to-multipoint transmission in SDLC mode, sending packets to multiple connected terminals. This command is used to have an IBM controller or front end processor to communicate with specified terminals. Before you can configure the sdlc controller command on the interface, you must assign the interface to a SOT protocol group. In addition, multiple terminals can be configured.
Example
# Configure the terminal C2.
[Router-Serial0/0/0] sot sdlc controller c2
12.1.9 sot sdlc-status primary

Syntax
sot sdlc-status primary undo sot sdlc-status
View
Parameter
None
Description
Use the sot sdlc-status primary command to set the role of the router to SDLC primary node. Use the undo sot sdlc-status command to delete the role setting. By default, no role is assigned to the router. In SOT local acknowledgement mode, you must assign a role to the router, depending on the position of the router in the sequence of primary (IBM host), secondary (router), primary (router), and secondary (terminal). If the router is connected to terminals, its role is SDLC primary node. Other SOT modes however, do not involve the role of primary node.
Example
# Specify the router to be SDLC primary node.
[Router-Serial0/0/0] sot sdlc-status primary
12.1.10 sot sdlc-status secondary

Syntax
sot sdlc-status secondary undo sot sdlc-status
View
Parameter
None
Description
Use the sot sdlc-status secondary command to set the role of the router to SDLC secondary node. Use the undo sot sdlc-status command to delete the role setting. By default, no role is assigned to the router. In SOT local acknowledgement mode, you must assign a role to the router, depending on the position of the router in the sequence of primary (IBM host), secondary (router), primary (router), and secondary (terminal). If the router is connected to an IBM host, its role is SDLC secondary node. In broadcast mode, you must set the role of the router to secondary, regardless of whether it is connected to an IBM host or to a terminal. Other SOT modes however, do not involve the role of secondary node. Related command: ip route, display ip interface, display interface.
Example
# Set the role of the router to SDLC secondary node.
[Router-Serial0/0/0] sot sdlc-status secondary
12.1.11 sot send address

Syntax
sot send address sdlc-address tcp ip-address [ local ] [ send-queue ] undo sot sendaddress sdlc-address tcp ip-address [local ] [ send-queue ]
View
Parameter
sdlc-address: SDLC address of a terminal, a hexadecimal number in the range 1 to FF. ip-address: IP address of the peer SOT entity. local: Implements the local acknowledgement function. send-queue: Sets maximum length of the TCP output queue, in the range 10 to 500. It defaults to 50.
Description
Use the sot send address command to configure the route for sending SDLC frames to the specified specific terminal. Use the undo sot send address command to remove the specified route. This command is applicable to the following two SDLC modes: In non-local mode or pass-through mode, the sdlc-address argument ranges from 1 to FF. When the sdlc-address argument is set to FF, the router sends SDLC frames to all SDLC terminals connected to it. In local acknowledgement mode (specified by the local keyword), the sdlc-address argument ranges from 1 to fe and cannot be the broadcast address FF. Related command: sot sdlc broadcast.
Example
# Send the SDLC frames destined for SDLC terminal 10 to the peer device (in non-local mode) with the IP address of 131.108.8.1.
[Router-Serial0/0/0] sot send address 10 tcp 131.108.8.1
# Send the SDLC frames destined for SDLC terminal 10 to the peer device (in local acknowledgement mode) with the IP address of 131.108.8.1.
[Router-Serial0/0/0] sot send address 10 tcp 131.108.8.1 local
12.1.12 sot send all tcp

Syntax
sot send all tcp ip-address undo sot send all tcp ip-address
View
Parameter
ip-address: IP address of the peer entity.
Description
Use the send all tcp command to forward all received SDLC frames to the specified address. Use the undo send all tcp command to disable the router to forward the SDLC frames received on the interface. By default, the received SDLC frames are not forwarded. This command is only applicable to simple SOT mode.
Example
# Forward all SDLC frames received on interface Serial 0/0/0 to the specified IP address 131.108.8.1.
[Router-Serial0/0/0] sot send all tcp 131.108.8.1
12.1.13 sot timer keepalive

Syntax
sot timer keepalive [ seconds ] undo sot timer keepalive
View
System view
Parameter
seconds: Keepalive timer in the range 1 to 300 seconds. It defaults to 30 seconds.
Description
Use the sot timer keepalive command to configure the keepalive timer. Use the undo sot timer keepalive command to restore the default. Use this command in SOT local acknowledgement mode and in conjunction with the sot counter keepalive command.
Example
# Set the keepalive timer to 60 seconds.
[Router] sot timer keepalive 60
Command Reference Guide Routing Protocol v2.30 Router Software
Table of Contents
Table of Contents
Chapter 1 Static Route Configuration Commands .................................................................... 1-1 1.1 Routing Table Displaying Commands ............................................................................... 1-1 1.1.1 display ip routing-table ............................................................................................ 1-1 1.1.2 display ip routing-table acl....................................................................................... 1-2 1.1.3 display ip routing-table ip_address.......................................................................... 1-4 1.1.4 display ip routing-table ip_address1 ip_address2................................................... 1-6 1.1.5 display ip routing-table ip-prefix .............................................................................. 1-7 1.1.6 display ip routing-table protocol .............................................................................. 1-8 1.1.7 display ip routing-table radix ................................................................................. 1-10 1.1.8 display ip routing-table statistics ........................................................................... 1-11 1.1.9 display ip routing-table verbose ............................................................................ 1-12 1.1.10 display ip routing-table vpn-instance................................................................... 1-13 1.1.11 reset ip routing-table ........................................................................................... 1-14 1.2 Static Route Configuration Commands ........................................................................... 1-15 1.2.1 delete static-routes all ........................................................................................... 1-15 1.2.2 ip route-static......................................................................................................... 1-16 1.3 Bandwidth-Based Unbalanced Load Sharing Commands .............................................. 1-18 1.3.1 display loadsharing ip address.............................................................................. 1-18 1.3.2 loadbandwidth ....................................................................................................... 1-19 Chapter 2 RIP Configuration Commands.................................................................................... 2-1 2.1 RIP Configuration Commands ........................................................................................... 2-1 2.1.1 checkzero ................................................................................................................ 2-1 2.1.2 debugging rip........................................................................................................... 2-2 2.1.3 default cost .............................................................................................................. 2-2 2.1.4 display rip ................................................................................................................ 2-3 2.1.5 display rip interface ................................................................................................. 2-4 2.1.6 display rip routing .................................................................................................... 2-5 2.1.7 display rip vpn-instance........................................................................................... 2-6 2.1.8 filter-policy export .................................................................................................... 2-7 2.1.9 filter-policy import .................................................................................................... 2-8 2.1.10 host-route .............................................................................................................. 2-9 2.1.11 import-route ........................................................................................................... 2-9 2.1.12 ipv4-family vpn-instance...................................................................................... 2-10 2.1.13 multi-path-number ............................................................................................... 2-11
3Com Corporation i
Table of Contents
2.1.14 network................................................................................................................ 2-12 2.1.15 peer ..................................................................................................................... 2-13 2.1.16 preference ........................................................................................................... 2-14 2.1.17 reset .................................................................................................................... 2-14 2.1.18 rip ........................................................................................................................ 2-15 2.1.19 rip authentication-mode....................................................................................... 2-16 2.1.20 rip input................................................................................................................ 2-17 2.1.21 rip metricin........................................................................................................... 2-18 2.1.22 rip metricout......................................................................................................... 2-18 2.1.23 rip output ............................................................................................................. 2-19 2.1.24 rip split-horizon .................................................................................................... 2-20 2.1.25 rip version............................................................................................................ 2-21 2.1.26 rip work................................................................................................................ 2-22 2.1.27 summary.............................................................................................................. 2-22 2.1.28 timers................................................................................................................... 2-23 2.1.29 traffic-share-across-interface .............................................................................. 2-24 2.1.30 validate-source-address...................................................................................... 2-25 Chapter 3 OSPF Configuration Commands................................................................................ 3-1 3.1 OSPF Configuration Commands ....................................................................................... 3-1 3.1.1 abr-summary ........................................................................................................... 3-1 3.1.2 area ......................................................................................................................... 3-2 3.1.3 asbr-summary ......................................................................................................... 3-2 3.1.4 authentication-mode................................................................................................ 3-3 3.1.5 debugging ospf........................................................................................................ 3-4 3.1.6 default cost .............................................................................................................. 3-6 3.1.7 default interval ......................................................................................................... 3-6 3.1.8 default limit .............................................................................................................. 3-7 3.1.9 default tag................................................................................................................ 3-8 3.1.10 default type............................................................................................................ 3-9 3.1.11 default-cost............................................................................................................ 3-9 3.1.12 default-route-advertise ........................................................................................ 3-10 3.1.13 display debugging ospf ....................................................................................... 3-12 3.1.14 display ospf abr-asbr........................................................................................... 3-12 3.1.15 display ospf asbr-summary ................................................................................. 3-13 3.1.16 display ospf brief ................................................................................................. 3-14 3.1.17 display ospf cumulative ....................................................................................... 3-16 3.1.18 display ospf error................................................................................................. 3-17 3.1.19 display ospf interface .......................................................................................... 3-18 3.1.20 display ospf lsdb.................................................................................................. 3-19
3Com Corporation ii
Table of Contents
3.1.21 display ospf nexthop ........................................................................................... 3-24 3.1.22 display ospf peer ................................................................................................. 3-24 3.1.23 display ospf request-queue ................................................................................. 3-26 3.1.24 display ospf retrans-queue.................................................................................. 3-26 3.1.25 display ospf routing ............................................................................................. 3-27 3.1.26 display ospf vlink ................................................................................................. 3-28 3.1.27 filter-policy export ................................................................................................ 3-28 3.1.28 filter-policy import ................................................................................................ 3-29 3.1.29 import-route ......................................................................................................... 3-31 3.1.30 network................................................................................................................ 3-32 3.1.31 nssa..................................................................................................................... 3-34 3.1.32 opaque-capability ................................................................................................ 3-35 3.1.33 ospf...................................................................................................................... 3-36 3.1.34 ospf authentication-mode.................................................................................... 3-37 3.1.35 ospf cost .............................................................................................................. 3-38 3.1.36 ospf dr-priority ..................................................................................................... 3-38 3.1.37 ospf mib-binding .................................................................................................. 3-39 3.1.38 ospf mtu-enable .................................................................................................. 3-40 3.1.39 ospf network-type................................................................................................ 3-41 3.1.40 ospf timer dead.................................................................................................... 3-42 3.1.41 ospf timer hello .................................................................................................... 3-43 3.1.42 ospf timer poll ...................................................................................................... 3-43 3.1.43 ospf timer retransmit ........................................................................................... 3-44 3.1.44 ospf trans-delay................................................................................................... 3-45 3.1.45 peer ..................................................................................................................... 3-46 3.1.46 preference ........................................................................................................... 3-46 3.1.47 reset ospf............................................................................................................. 3-47 3.1.48 router id ............................................................................................................... 3-48 3.1.49 silent-interface ..................................................................................................... 3-49 3.1.50 snmp-agent trap enable ospf .............................................................................. 3-50 3.1.51 spf-schedule-interval ........................................................................................... 3-52 3.1.52 stub...................................................................................................................... 3-52 3.1.53 vlink-peer............................................................................................................. 3-53 Chapter 4 Integrated IS-IS Configuration Commands ............................................................... 4-1 4.1 Integrated IS-IS Configuration Commands........................................................................ 4-1 4.1.1 area-authentication-mode ....................................................................................... 4-1 4.1.2 cost-style ................................................................................................................. 4-2 4.1.3 debugging isis ......................................................................................................... 4-3 4.1.4 default-route-advertise ............................................................................................ 4-4
Table of Contents
4.1.5 display isis brief ....................................................................................................... 4-5 4.1.6 display isis interface ................................................................................................ 4-6 4.1.7 display isis lsdb ....................................................................................................... 4-7 4.1.8 display isis mesh-group........................................................................................... 4-7 4.1.9 display isis peer....................................................................................................... 4-8 4.1.10 display isis routing................................................................................................. 4-9 4.1.11 display isis spf-log ............................................................................................... 4-10 4.1.12 domain-authentication-mode............................................................................... 4-11 4.1.13 filter-policy export ................................................................................................ 4-12 4.1.14 filter-policy import ................................................................................................ 4-13 4.1.15 ignore-lsp-checksum-error .................................................................................. 4-14 4.1.16 import-route ......................................................................................................... 4-14 4.1.17 import-route isis................................................................................................... 4-16 4.1.18 isis ....................................................................................................................... 4-16 4.1.19 isis authentication-mode ..................................................................................... 4-17 4.1.20 isis circuit-level .................................................................................................... 4-18 4.1.21 isis cost................................................................................................................ 4-19 4.1.22 isis dis-priority...................................................................................................... 4-20 4.1.23 isis enable ........................................................................................................... 4-21 4.1.24 isis mesh-group ................................................................................................... 4-22 4.1.25 isis small-hello ..................................................................................................... 4-23 4.1.26 isis timer csnp...................................................................................................... 4-24 4.1.27 isis timer hello...................................................................................................... 4-24 4.1.28 isis timer holding-multiplier.................................................................................. 4-25 4.1.29 isis timer lsp......................................................................................................... 4-26 4.1.30 isis timer retransmit ............................................................................................. 4-27 4.1.31 is-level ................................................................................................................. 4-28 4.1.32 log-peer-change .................................................................................................. 4-29 4.1.33 md5-compatible................................................................................................... 4-30 4.1.34 network-entity ...................................................................................................... 4-31 4.1.35 preference ........................................................................................................... 4-32 4.1.36 reset isis all.......................................................................................................... 4-32 4.1.37 reset isis peer ...................................................................................................... 4-33 4.1.38 set-overload......................................................................................................... 4-33 4.1.39 silent-interface ..................................................................................................... 4-34 4.1.40 spf-delay-interval................................................................................................. 4-35 4.1.41 spf-slice-size........................................................................................................ 4-36 4.1.42 summary.............................................................................................................. 4-37 4.1.43 timer lsp-max-age ............................................................................................... 4-37
3Com Corporation iv
Table of Contents
4.1.44 timer lsp-refresh .................................................................................................. 4-38 4.1.45 timer spf............................................................................................................... 4-39 Chapter 5 BGP Configuration Commands.................................................................................. 5-1 5.1 BGP Configuration Commands ......................................................................................... 5-1 5.1.1 aggregate ................................................................................................................ 5-1 5.1.2 balance.................................................................................................................... 5-2 5.1.3 bgp .......................................................................................................................... 5-3 5.1.4 compare-different-as-med....................................................................................... 5-4 5.1.5 confederation id....................................................................................................... 5-5 5.1.6 confederation nonstandard ..................................................................................... 5-6 5.1.7 confederation peer-as ............................................................................................. 5-6 5.1.8 dampening............................................................................................................... 5-7 5.1.9 debugging bgp......................................................................................................... 5-8 5.1.10 default-route imported ........................................................................................... 5-9 5.1.11 default local-preference....................................................................................... 5-10 5.1.12 default med.......................................................................................................... 5-11 5.1.13 display bgp group................................................................................................ 5-11 5.1.14 display bgp network ............................................................................................ 5-12 5.1.15 display bgp paths ................................................................................................ 5-13 5.1.16 display bgp peer .................................................................................................. 5-14 5.1.17 display bgp routing-table ..................................................................................... 5-16 5.1.18 display bgp routing-table as-path-acl .................................................................. 5-19 5.1.19 display bgp routing-table cidr .............................................................................. 5-20 5.1.20 display bgp routing-table community .................................................................. 5-21 5.1.21 display bgp routing-table community-list............................................................. 5-22 5.1.22 display bgp routing-table dampened................................................................... 5-23 5.1.23 display bgp routing-table different-origin-as........................................................ 5-23 5.1.24 display bgp routing-table flap-info ....................................................................... 5-24 5.1.25 display bgp routing-table peer { advertised | received } ...................................... 5-25 5.1.26 display bgp routing-table peer dampened........................................................... 5-26 5.1.27 display bgp routing-table peer regular-expression.............................................. 5-27 5.1.28 display bgp routing-table regular-expression ...................................................... 5-28 5.1.29 filter-policy export ................................................................................................ 5-28 5.1.30 filter-policy import ................................................................................................ 5-29 5.1.31 group ................................................................................................................... 5-30 5.1.32 import-route ......................................................................................................... 5-31 5.1.33 ip as-path-acl....................................................................................................... 5-32 5.1.34 ip community-list.................................................................................................. 5-33 5.1.35 network................................................................................................................ 5-34
3Com Corporation v
Table of Contents
5.1.36 peer advertise-community................................................................................... 5-35 5.1.37 peer allow-as-loop............................................................................................... 5-36 5.1.38 peer as-number ................................................................................................... 5-36 5.1.39 peer as-path-acl .................................................................................................. 5-37 5.1.40 peer connect-interface ........................................................................................ 5-38 5.1.41 peer default-route-advertise ................................................................................ 5-39 5.1.42 peer description................................................................................................... 5-39 5.1.43 peer ebgp-max-hop............................................................................................. 5-40 5.1.44 peer enable ......................................................................................................... 5-41 5.1.45 peer filter-policy................................................................................................... 5-42 5.1.46 peer group ........................................................................................................... 5-43 5.1.47 peer ip-prefix ....................................................................................................... 5-44 5.1.48 peer next-hop-local ............................................................................................. 5-45 5.1.49 peer password..................................................................................................... 5-45 5.1.50 peer public-as-only.............................................................................................. 5-46 5.1.51 peer reflect-client................................................................................................. 5-47 5.1.52 peer route-policy ................................................................................................. 5-48 5.1.53 peer route-update-interval................................................................................... 5-49 5.1.54 peer shutdown..................................................................................................... 5-49 5.1.55 peer timer ............................................................................................................ 5-50 5.1.56 preference ........................................................................................................... 5-51 5.1.57 reflect between-clients ........................................................................................ 5-52 5.1.58 reflector cluster-id................................................................................................ 5-52 5.1.59 refresh bgp .......................................................................................................... 5-53 5.1.60 reset bgp ............................................................................................................. 5-54 5.1.61 reset bgp flap-info ............................................................................................... 5-55 5.1.62 reset bgp group ................................................................................................... 5-55 5.1.63 reset dampening ................................................................................................. 5-56 5.1.64 summary.............................................................................................................. 5-57 5.1.65 timer keep-alive hold ........................................................................................... 5-57 5.1.66 undo synchronization .......................................................................................... 5-58 5.2 MBGP Configuration Commands .................................................................................... 5-58 5.2.1 ipv4-family ............................................................................................................. 5-59 5.2.2 ipv4-family vpnv4................................................................................................... 5-60 5.2.3 peer enable ........................................................................................................... 5-60 Chapter 6 IP Routing Policy Configuration Commands............................................................ 6-1 6.1 IP Routing Policy Configuration Commands ..................................................................... 6-1 6.1.1 apply as-path........................................................................................................... 6-1 6.1.2 apply community ..................................................................................................... 6-2
3Com Corporation vi
Table of Contents
6.1.3 apply cost ................................................................................................................ 6-3 6.1.4 apply cost-type ........................................................................................................ 6-3 6.1.5 apply ip-address ...................................................................................................... 6-4 6.1.6 apply isis.................................................................................................................. 6-5 6.1.7 apply local-preference............................................................................................. 6-5 6.1.8 apply origin .............................................................................................................. 6-6 6.1.9 apply tag.................................................................................................................. 6-7 6.1.10 display ip ip-prefix ................................................................................................. 6-8 6.1.11 display route-policy ............................................................................................... 6-8 6.1.12 filter-policy export .................................................................................................. 6-9 6.1.13 filter-policy import ................................................................................................ 6-10 6.1.14 if-match acl .......................................................................................................... 6-11 6.1.15 if-match as-path .................................................................................................. 6-12 6.1.16 if-match community ............................................................................................. 6-12 6.1.17 if-match cost ........................................................................................................ 6-13 6.1.18 if-match interface................................................................................................. 6-14 6.1.19 if-match ip next-hop............................................................................................. 6-15 6.1.20 if-match ip-prefix.................................................................................................. 6-16 6.1.21 if-match tag.......................................................................................................... 6-17 6.1.22 ip ip-prefix............................................................................................................ 6-18 6.1.23 route-policy.......................................................................................................... 6-19 Chapter 7 Route Capacity Configuration Commands ............................................................... 7-1 7.1 Route Capacity Configuration Commands ........................................................................ 7-1 7.1.1 display memory ....................................................................................................... 7-1 7.1.2 memory auto-establish disable ............................................................................... 7-2 7.1.3 memory auto-establish enable ................................................................................ 7-3 7.1.4 memory ................................................................................................................... 7-4
Chapter 1 Static Route Configuration Commands
Note: For the specific examples and parameter explanation of VPN instance refer to the MPLS module of this manual.
1.1 Routing Table Displaying Commands

1.1.1 display ip routing-table
Syntax
display ip routing-table
View
Any view
Parameter
None
Description
Use the display ip routing-table command to view the routing table summary. This command views routing table information in summary form. Each line represents one route. The contents include destination address/mask length, protocol, preference, cost, next hop and output interface. Only current used route, i.e., best route, is displayed via the display ip routing-table command.
Example
# View the summary of current routing table.
<3Com> display ip routing-table Routing Table: public net Destination/Mask Proto Pre Cost Nexthop Interface

1.1.1.0/24 1.1.1.1/32 2.2.2.0/24 2.2.2.1/32 3.3.3.0/24 3.3.3.1/32 4.4.4.0/24 4.4.4.1/32 127.0.0.0/8 127.0.0.1/32 DIRECT DIRECT DIRECT DIRECT DIRECT DIRECT DIRECT DIRECT DIRECT DIRECT 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0

1.1.1.1 127.0.0.1 2.2.2.1 127.0.0.1 3.3.3.1 127.0.0.1 4.4.4.1 127.0.0.1 127.0.0. 127.0.0.1 1 Interface serial1/0/0 InLoopBack0 Interface serial2/0/0 InLoopBack0 Interface ethernet1/0/0 InLoopBack0 Interface ethernet2/0/0 InLoopBack0 InLoopBack0 InLoopBack0
1.1.2 display ip routing-table acl

Syntax
display ip routing-table acl acl-number [ verbose ]
View
Any view
Parameter
acl_number: References a basic ACL by its number, which is in the range 2000 to 2099. verbose: With the parameter, this command displays the verbose information of both the active and inactive routes that passed filtering rules. Without the parameter, this command only displays the summary of the active routes that passed filtering rules.
Description
Use the display ip routing-table acl command to view the route filtered through specified basic access control list (ACL). The command is used in tracking route policy to display the route that passed the filtering rule according to the input basic ACL number. This command is only applicable to view the route that passed basic ACL filtering rules.
Example
# View the summary of active routes that are filtered through basic ACL 2001.
<3Com> display ip routing-table acl 2001 Routes matched by access-list 2001: Summary count: 4 Destination/Mask Proto Pre Cost Nexthop Interface

127.0.0.0/8 127.0.0.1/32 169.0.0.0/8 169.0.0.0/15 Direct Direct Static Static 0 0 60 60

0 0 0 0 127.0.0.1 127.0.0.1 2.1.1.1 2.1.1.1 InLoopBack0 InLoopBack0 LoopBack1 LoopBack1
# Display the verbose information of the active and inactive routes that are filtered through basic ACL2001.
<3Com> display ip routing-table acl 2001 Routes matched by access-list 2001: Generate Default: no + = Active Route, - = Last Active, # = Both * = Next hop in use Summary count:5 **Destination: 127.0.0.0 Protocol: #Direct *NextHop: 127.0.0.1 Vlinkindex: 0 State: <NoAdvise Int ActiveU Retain Multicast Unicast> Metric: 0/0 Mask: 255. 255. 255. 255 Preference: 0 Interface: 127.0.0.1(InLoopBack0) Mask: 255.0.0.0 Preference: 0 Interface: 127.0.0.1(InLoopBack0) verbose
Age: 3:47
**Destination: 127.0.0.1 Protocol: #Direct *NextHop: 127.0.0.1 Vlinkindex: 0
State: <NotInstall NoAdvise Int ActiveU Retain Gateway Multicast Unicast> Age: 3:47 Metric: 0/0 Mask: 255.0.0.0 Preference: 60
**Destination: 179.0.0.0 Protocol: #Static *NextHop: 4.1.1.1 Vlinkindex: 0
State: <Int Hidden Static Unicast> Age: 3:47 Metric: 0/0 Mask: 255.0.0.0 Preference: 60 Interface: 2.1.1.1(LoopBack1)
State: <Int ActiveU Static Unicast> Age: 3:47 Metric: 0/0 Mask: 255.254.0.0 Preference: 60 Interface: 2.1.1.1(LoopBack1)
State: <Int ActiveU Static Unicast> Age: 3:47 Metric: 0/0
1.1.3 display ip routing-table ip_address

Syntax
display ip routing-table ip_address [ mask ] [ longer-match ] [ verbose ]
View
Any view
Parameter
ip_address: Destination IP address in dotted decimal format. mask: IP address mask, which can be in dotted decimal notation or represented by an integer in the range of 0 to 32. longer-match: Indicates all route destination addresses are matched in the natural mask range. verbose: With the verbose parameter, this command displays the verbose information of both the active and inactive routes. Without the parameter, this command only displays the summary of active routes.
Description
Use the display ip routing-table ip_address command to view the routing information of the specified destination address. With different optional parameters, the output of the command is different. The following is the output description for different forms of this command: display ip routing-table ip_address If destination address, ip_address, has corresponding routes in natural mask range, this command will display all subnet routes. Or, only the route best matching the destination address, ip_address, is displayed; and only the active matching route is displayed. display ip routing-table ip_address mask, This command only displays the route fully matching with specified destination address and mask. display ip routing-table ip_address longer-match This command displays all route destination addresses matching the destination addresses in natural mask range.
Example
# There is corresponding route in natural mask range. View the summary.
<3Com> display ip routing-table 169.0.0.0 Routing Tables: Summary count:1 Destination/Mask 169.0.0.0/16 Proto Static Pre Cost 60 0 Nexthop 2.1.1.1 Interface LoopBack1
# There is no corresponding route (only the longest matching route is displayed) in natural mask range and summary is viewed.
<3Com> display ip routing-table 169.253.0.0 Routing Tables: Summary count:1 Destination/Mask 169.0.0.0/8 Proto Static Pre 60 Cost 0 Nexthop 2.1.1.1 Interface LoopBack1
# There are corresponding routes in the natural mask range. View the detailed information.
<3Com> display ip routing-table 169.0.0.0 verbose Routing Tables: Generate Default: no + = Active Route, - = Last Active, # = Both * = Next hop in use Summary count:2 **Destination: 169.0.0.0 Protocol: #Static *NextHop: 2.1.1.1 Vlinkindex: 0 State: <Int ActiveU Static Unicast> Age: 3:47 Metric: 0/0 Mask: 255.254.0.0 Preference: 60 Interface: 2.1.1.1(LoopBack1) Mask: 255.0.0.0 Preference: 60 Interface: 2.1.1.1(LoopBack1)
# There are no corresponding routes in the natural mask range (only display the longest matching route). View the detailed information.
<3Com> display ip routing-table 169.253.0.0 verbose Routing Tables: Generate Default: no
+ = Active Route, - = Last Active, # = Both * = Next hop in use Summary count:1 **Destination: 169.0.0.0 Protocol: #Static *NextHop: 2.1.1.1 Vlinkindex: 0 State: <Int ActiveU Static Unicast> Age: 3:47 Metric: 0/0 Mask: 255.0.0.0 Preference: -60
1.1.4 display ip routing-table ip_address1 ip_address2

Syntax
display ip routing-table ip_address1 mask1 ip_address2 mask2 [ verbose ]
View
Any view
Parameter
ip_address1, ip_address2: Destination IP address in dotted decimal notation. ip_address1 and ip_address2 determine one address range together to display the route in this address range. mask1, mask2: IP address mask, length in dotted decimal notation or integer form. verbose: With the verbose parameter, this command displays the verbose information of both the active and inactive routes. Without the parameter, this command only displays the summary of active routes.
Description
Use the display ip routing-table ip_address1 ip_address2 command to view the routing information in the specified destination address range.
Example
# View the routing information of destination addresses ranging from 1.1.1.0 to 2.2.2.0.
<3Com> display ip routing-table 1.1.1.0 24 2.2.2.0 24 Routing tables: Summary count: 3 Destination/Mask 1.1.1.0/24 1.1.1.1/32 Proto DIRECT DIRECT Pre Cost 0 0 0 0 Nexthop 1.1.1.1 127.0.0.1 Interface Interface serial1/0/0 InLoopBack0

2.2.2.0/24 DIRECT 0 0

2.2.2.1 Interface serial2/0/0
1.1.5 display ip routing-table ip-prefix

Syntax
display ip routing-table ip-prefix ip-prefix-name [ verbose ]
View
Any view
Parameter
ip-prefix-name: Prefix list name. verbose: With the parameter, this command displays the verbose information of both the active and inactive routes that passed filtering rules. Without the parameter, this command displays the summary of the active routes that passed filtering rules.
Description
Use the display ip routing-table ip-prefix command to view the route that passed the filtering rule according to the specified ip prefix list. If there is no specified prefix list, this command will display the verbose information of all active and inactive routes with the parameter verbose and it will display the summary of all active routes without the parameter verbose.
Example
# Display the summary of the active route that is filtered through ip prefix list abc2.
<3Com> display ip routing-table ip-prefix abc2 Routes matched by ip-prefix abc2: Summary count: 4 Destination/Mask 127.0.0.0/8 127.0.0.1/32 169.0.0.0/8 169.0.0.0/15 Proto Direct Direct Static Static Pre Cost 0 0 60 60 0 0 0 0 Nexthop 127.0.0.1 127.0.0.1 2.1.1.1 2.1.1.1 Interface InLoopBack0 InLoopBack0 LoopBack1 LoopBack1
# Display the verbose information of the active and inactive routes that are filtered through ip prefix list abc2.
<3Com> display ip routing-table ip-prefix abc2 verbose Routes matched by ip-prefix abc2: Generate Default: no

* = Next hop in use
+ = Active Route, - = Last Active, # = Both Summary count:4 **Destination: 127.0.0.0 Protocol: #Direct *NextHop: 127.0.0.1 Vlinkindex: 0 State: Mask: 255.0.0.0 Preference: 0
Interface: 127.0.0.1(InLoopBack0)
<NoAdvise Int ActiveU Retain Multicast Unicast> Metric: 0/0 Mask: 255. 255. 255. 255 Preference: 0 Interface: 127.0.0.1(InLoopBack0)
Age: 3:47
**Destination: 127.0.0.1 Protocol: #Direct *NextHop: 127.0.0.1 Vlinkindex: 0
State: <NotInstall NoAdvise Int ActiveU Retain Gateway Multicast Unicast> Age: 3:47 Metric: 0/0 Mask: 255.0.0.0 Preference:-60
State: <Int Hidden Static Unicast> Age: 3:47 Metric: 0/0 Mask: 255.0.0.0
Preference: 60 Interface: 2.1.1.1(LoopBack1)
State: <Int ActiveU Static Unicast> Age: 3:47 Metric: 0/0 Mask: 255.254.0.0
Preference: 60 Interface: 2.1.1.1(LoopBack1)
1.1.6 display ip routing-table protocol

Syntax
display ip routing-table protocol protocol [ inactive | verbose | vpn-instance vpn-instance-name]
View
Any view
Parameter
protocol: Has multiple selectable values: direct: Displays direct connection route information static: Displays static route information. bgp: Displays BGP route information. isis: Displays IS-IS route information. ospf: Displays OSPF route information. ospf-ase: Displays OSPF ASE route information. ospf-nssa: Displays OSPF NSSA route information. rip: Displays RIP route information. inactive: With the parameter, this command displays the inactive route information. Without the parameter, this command displays the active and inactive route information. verbose: With the verbose parameter, this command displays the verbose routing information. Without the parameter, this command displays the route summary. vpn-instance vpn-instance-name: Specifies the name of the VPN instance.
Description
Use the display ip routing-table protocol command to view the routing information of the specified protocol. If vpn-instance is not specified, the routing information of the public network will be displayed; if vpn-instance is specified, the routing information of the private network will be displayed.
Example
# Display all direct connection routes summary.
<3Com> display ip routing-table protocol direct DIRECT Routing tables: Summary count: 4 DIRECT Routing tables status:<active>: Summary count: 3 Destination/Mask 20.1.1.1/32 127.0.0.0/8 127.0.0.1/32 Proto DIRECT DIRECT DIRECT Pre Cost 0 0 0 0 0 0 Nexthop 127.0.0.1 127.0.0.1 127.0.0.1 Interface: InLoopBack0 InLoopBack0 InLoopBack0
DIRECT Routing tables status:<inactive>:

Summary count: 1 Destination/Mask 210.0.0.1/32 Proto DIRECT
Pre Cost Nexthop 0 0
Interface InLoopBack0
127.0.0.1
# Display the static routing table.

<3Com> display ip routing-table protocol static STATIC Routing tables: Summary count: 1 STATIC Routing tables status:<active>: Summary count: 0 STATIC Routing tables status:<inactive>: Summary count: 1 Destination/Mask 1.2.3.0/24 Proto STATIC Pre Cost 60 0 Nexthop 1.2.4.5 Interface Ethernet 2/0/0
1.1.7 display ip routing-table radix

Syntax
display ip routing-table radix
View
Any view
Parameter
None
Description
Use the display ip routing-table radix command to view the routing table information in a tree structure.
Example
# View the routing table information in a tree structure.
<3Com> display ip routing-table radix Radix tree for INET (2) inodes 7 routes 5: +-32+--{210.0.0.1 +--0+ | | +--8+--{127.0.0.0 | | | +-32+--{127.0.0.1 | +--1+

| | +--8+--{20.0.0.0 +-32+--{20.1.1.1
1.1.8 display ip routing-table statistics

Syntax
display ip routing-table [ vpn-instance vpn-instance-name ] statistics
View
Any view
Parameter
vpn-instance vpn-instance-name: Specifies the name of the VPN-instance.
Description
Use the display ip routing-table statistics command to view the integrated routing information. If you do not specify the vpn-instance in the display ip routing-table statistics command, the system displays the routing information of public networks. If you specify vpn-instance, the system displays the routing information of private networks. The integrated routing information includes total route amount, the route amount added or deleted by protocol, amount of the routes that are labeled deleted but not deleted, and the active route amount and inactive route amount.
Example
# Display the integrated routing information.
<3Com> display ip routing-table statistics Routing tables: Proto route BGP DIRECT RIP STATIC IS-IS 0 OSPF O_ASE 0 O_NSSA Total 0 5 0 0 0 4 0 5 0 0 0 0 0 0 5 active 0 4 0 0 0 0 0 0 0 added 0 5 0 0 0 0 0 0 0 deleted freed 0 0 0 0 0 0 0 0 0 0
1.1.9 display ip routing-table verbose

Syntax
display ip routing-table verbose
View
Any view
Parameter
None
Description
Use the display ip routing-table verbose command to view the verbose routing table information. With the verbose parameter, this command displays the verbose routing table information. The descriptor describing the route state will be displayed first, then the statistics of the entire routing table will be output and finally the verbose description of each route will be output. All current routes, including inactive routes and invalid routes, can be displayed using the display ip routing-table verbose command.
Example
# Display the verbose routing table information.
<3Com> display ip routing-table verbose Routing Tables: Generate Default: no + = Active Route, - = Last Active, # = Both * = Next hop in use Destinations: 4 Holddown: 0 Routes: 4 Hidden: 0 Mask: 255.0.0.0 Preference: 0 Interface: 127.0.0.1(LO0)
Delete: 9
**Destination: 127.0.0.0 Protocol: #Static *NextHop: 127.0.0.1
State: <NoAdv Int Active Retain Rej> Age: 19:31:06 Metric: 0/0 Mask: 255.255.255.255 Preference: 0 Interface: 127.0.0.1(LO0)
**Destination: 127.0.0.1 Protocol: #Direct *NextHop: 127.0.0.1
State: <NoAdv Int Active Retain>

Age: 114:03:05 Metric: 0/0
The statistics of the entire routing table is displayed first, then the verbose description of each route is output. The meanings of route state parameters are explained in the following table: Table 1-1 Description of the output information of the display ip routing-table verbose command Field Description Number of currently hold down routes Holddown refers to a route advertising policy used by some distance vector (D-V) routing protocols (such as RIP) in order to avoid expansion of error routes and improve fast and correct transmission of unreachable routing information. It usually advertises a route fixedly at an interval no matter what changes have happened to the routes to the same destination, which have been learned actually. For details, refer to the specific routing protocol. Number of routes that have been deleted currently. Number of currently hidden routes -- Some routes are not available at present for some reason (e.g., the interface is Down) but are not expected to be deleted. They can be hidden for future restoration.
Holddown
Delete Hidden
1.1.10 display ip routing-table vpn-instance

Syntax
display ip routing-table vpn-instance vpn-instance-name [ ip-address ] [ verbose ]
View
Any view
Parameter
vpn-instance-name: VPN instance name. ip-address: Destination IP address in dotted decimal format. verbose: With the parameter, the command displays the verbose routing information. Without the parameter, the command displays the route summary.
Description
Use the display ip routing-table vpn-instance command to view RIP information associated with vpn instance address family.
Given that both ip-address and verbose are configured in the command to view all routes to the specified IP address in the VPN-instance, including the local routes as well as the routes learned from the remote.
Example
# Display details of the routes to 10.1.1.1 in the VPN-instance vpn1.
<3Com> display ip routing-table vpn-instance vpn1 10.1.1.1 verbose Routing tables: Generate Default: no + = Active Route, - = Last Active, # = Both Summary count: 2 **Destination: 10.1.1.1 Protocol: #DIRECT *NextHop: 127.0.0.1 Vlinkindex: 0 State: <NoAdvise Int ActiveU Retain Gateway Unicast> Age: 54 **Destination: 10.1.1.0 Protocol: #DIRECT *NextHop: 10.1.1.1 Vlinkindex: 0 State: <Int ActiveU Retain Unicast> Age: 54 Cost: 0/0 Cost: 0/0 Mask: 255.255.255.0 Preference: 0 Interface: 10.1.1.1(LoopBack0) Mask: 255.255.255.255 Preference: 0 Interface: 127.0.0.1(InLoopBack0) * = Next hop in use
# Display the summary of the routes to 10.1.1.1 in the VPN-instance vpn1.

<3Com> display ip routing-table vpn-instance vpn1 10.1.1.1 Routing tables: vpn1 Destination/Mask 10.1.1.1/32 10.1.1.0/24 Protocol DIRECT DIRECT Pre 0 0 Cost 0 0 Route-Distinguisher: 100:1 Nexthop 127.0.0.1 10.1.1.1 Interface InLoopBack0 LoopBack0
1.1.11 reset ip routing-table

Syntax
reset ip routing-table [ vpn-instance vpn-instance-name ] statistics protocol protocol-type
View
User view
Parameter
vpn-instance vpn-instance name: Specifies the name of the VPN-instance. protocol protocol-type: Specifies the protocol type, including all, BGP, direct connection route, ISIS, OSPF, OSPF ASE, OSPF NSSA, RIP, and static route.
Description
Use the reset ip routing-table command to clear the routing table. When you specify the vpn-instance, the numbers of added and deleted routes of the specified protocol are set to zero.
Example
# Remove the routing information of the private network whose VPN-instance name is 3Com 1.
[Router] reset ip routing-table vpn-instance 3Com1 Routing tables: Proto DIRECT STATIC BGP RIP IS-IS OSPF O_ASE O_NSSA AGGRE Total route 2 1 0 0 0 0 0 0 0 3 active 2 1 0 0 0 0 0 0 0 3 added 0 0 0 0 0 0 0 0 0 0 deleted 0 0 0 0 0 0 0 0 0 0
1.2 Static Route Configuration Commands

1.2.1 delete static-routes all
Syntax
delete static-routes all
View
System view
Parameter
None
Description
Use the delete static-routes all command to cancel all the static routes. When this command is used to cancel static routes, the user should confirm the settings before all the configured static routes are canceled. Related command: display ip routing-table and ip route-static.
Example
# Delete all the static routes configured on router.
[3Com] delete static-routes all This will erase all unicast static routes and their configurations, you must reconfigure all static routes Are you sure to delete all the static routes?[Y/N]y
1.2.2 ip route-static
Syntax
ip route-static ip-address { mask | mask-length } [ interface-type interface-number ] [nexthop-address ] [ preference preference-value ] [ reject | blackhole ] undo ip route-static ip-address { mask | mask-length } [ interface-type interface-number | nexthop-address ] [ preference preference-value ] ip route-static vpn-instance vpn-instance-name1 vpn-instance-name2 ip-address { mask | mask-length } [ interface-type interface-number [ nexthop-address ] | vpn-instance vpn-nexthop-name nexthop-address | nexthop-address [ public ] ] [ preference preference-value ] [ reject | blackhole ] undo ip route-static vpn-instance vpn-instance-name1 vpn-instance-name2 ip-address { mask | mask-length } [ interface-type interface-number | vpn-instance vpn-nexthop-name nexthop-address preference-value ] | nexthop-address [ public ]] [ preference
View
System view
Parameter
ip-address: Destination IP address, in dotted decimal notation.
mask: Mask. mask-length: Mask length. Since "1" s in the 32-bit mask are required to be consecutive, the mask in dotted decimal notation can be replaced by mask-length, which is the number of the consecutive "1" s in the mask. interface-type interface-number: Specifies the outbound interface type and number of the static route. The interfaces of the public network or under other vpn-instances can be taken as the outbound interface of the static route. vpn-instance-name: Indicates a name of VPN instance. It can take a maximum of 6 values. vpn-nexthop-name: Specifies the vpn-instance of the static route next hop. nexthop-address: Specifies the next hop IP address (in dotted decimal notation) of the static route. preference-value: Preference level of the static route in the range from 1 to 255. public: Public network. reject: Indicates an unreachable route. blackhole: Indicates a blackhole route.
Description
Use the ip route-static command to configure a static route. Use the undo ip route-static command to cancel the configured static route. Two static routes to the same destination through the same next hop but with different preferences are totally different. The system will prefer the route with the smaller preference value, that is, higher preference level as the current route. Use the undo ip route-static command to delete all the static routes to the same destination through the same next hop. Use the undo ip route-static preference command to delete the static routes with the specified preference. Use the ip route-static vpn-instance command to configure a static route. In the application of multi-role host, you can configure a static route on a private network to specify the interface of another private network or public network as its outbound interface. Use the undo ip route-static vpn-instance command to remove the static route configuration. By default, the system can obtain the sub-net route directly connected with the router. When configuring a static route, the default preference is 60 if it is not specified. If it is not specified as reject or blackhole, the route will be reachable by default. Precautions when configuring static route:
When the destination IP address and the mask are both 0.0.0.0, it is the default route. If it is failed to detect the routing table, a packet will be forwarded along the default route. For different configuration of preference level, flexible routing management policy can be adopted. For example, configure multiple routes to the same destination. Load sharing can be fulfilled by specifying the same preference for the routes. Route backup can be realized by specifying different preferences. To configure static route, either transmission interface or next hop address can be specified, which one is adopted in practice depends on actual condition. For the interfaces supporting the resolution from network address to link layer address or point-to-point interface, transmission interface or next hop address can be specified. But for NBMA interfaces, such as the interface or dialing interface encapsulated with X.25 or frame-relay, they support point-to-multi-point. Except IP route is configured, secondary route, i.e. the map from IP address to link layer address should be established on link layer. In such condition, transmission interface cannot be specified and the next hop IP address should be configured when configuring static route. VT interface cannot be configured as outbound interface. In some conditions (for example, the link layer is encapsulated with PPP), transmission interface can be specified when opposite address cannot be learned in router configuration. After specifying transmission interface, the configuration of this router is unnecessary to be modified as opposite address changes. Related command: display ip routing-table.
Example
# Configure the next hop of the default route as 129.102.0.2.
[3Com] ip route-static 0.0.0.0 0.0.0.0 129.102.0.2
# Configure the static route, whose destination address is 100.1.1.1 and whose next-hop address is 1.1.1.2.
[3Com] ip route-static vpn-instance vpn1 100.1.1.1 16 vpn-instance vpn1 1.1.1.2
1.3 Bandwidth-Based Unbalanced Load Sharing Commands

1.3.1 display loadsharing ip address
Syntax
display loadsharing ip address ip-address mask
View
Any view
Parameter
ip-address: IP address of the interface, in dotted decimal format. mask: A decimal number that represents the length of a subnet mask.
Description
Use the display loadsharing ip address command to view the statistics about the unbalanced load sharing based on interface bandwidth, including the number and ratio of the packets sent from the interfaces related to the equal-cost routes of a network address. You can view these equal-cost routes using the display fib command. Related command: display fib.
Example
# Display information about load sharing on all the interfaces corresponding to the equal-cost routes to the network 10.2.1.0/24.
[3Com] display loadsharing ip address 10.2.1.0 24 There are/is totally 3 route entry(s) to the same destination network. Nexthop 10.1.1.2 10.1.2.2 10.1.3.2 Packet(s) Bandwidth[KB] 100000 155000 2048 0 0 0 Flow(s) Interface Ethernet0/0/0 Atm1/0/0 Serial2/0/0
763851 1193501 15914
BandWidth:48:75:1 Packets:47:74:1 Flows:0:0:0
1.3.2 loadbandwidth
Syntax
loadbandwidth bandwidth undo loadbandwidth
View
Interface view (not including logical interfaces)
Parameter
bandwidth: Load bandwidth on the current interface in KB, in the range 0 to 1,000,000.
Description
Use the loadbandwidth command to allocate load bandwidth to the interface. Use the undo loadbandwidth to restore the default load bandwidth of the interface, that is, the physical bandwidth. Different from physical bandwidth, the configuration of load bandwidth does not affect interface properties but load distribution. When you set the bandwidth argument to 0, the current interface is shut down and does not participate in load sharing.
Example
# Configure the bandwidth for load sharing on interface Ethernet 0/0/0.
[3Com-Ethernet0/0/0] loadbandwidth 1000 [3Com-Ethernet0/0/0] undo loadbandwidth
Chapter 2 RIP Configuration Commands
Note: For the specific examples and parameter explanation of VPN instance refer to MPLS module of this manual.
2.1 RIP Configuration Commands

2.1.1 checkzero
Syntax
checkzero undo checkzero
View
RIP view
Parameter
None
Description
Use the checkzero command to check the zero field of RIP-1 packet. Use the undo checkzero command to cancel the check of the zero fields. By default, RIP-1 performs the zero field check. According to the protocol (RFC1058) specifications, some fields in RIP-1 packets must be zero, called zero fields. With the checkzero command, the zero check operation for RIP-1 packet can be enabled or disabled. During the zero check operation, if the RIP-1 packet in which the zero fields are not zeros is received, it will be rejected. This command is ineffective to RIP-2 since RIP-2 packets have no zero fields.
Example
# Configure not to perform zero check for RIP-1 packet.

[3Com-rip] undo checkzero
2.1.2 debugging rip

Syntax
debugging rip { packet [ interface type number ] | receive | send }
View
User view
Parameter
packet: Enables the RIP packets debugging. interface type number: Enables RIP packet debugging on the specified interface. receive: Enables the RIP receiving packets debugging. send: Enables the RIP sending packets debugging.
Description
Use the debugging rip command to enable RIP debugging. Use the undo debugging rip command to disable RIP debugging. Users can learn the current information of receiving and sending RIP packets on each interface by using this command.
Example
# Enable RIP packet debugging.
<3Com> debugging rip packet
2.1.3 default cost

Syntax
default cost value undo default cost
View
RIP view
Parameter
value: Default routing cost to be set, ranging from 1 to 16.The default value is 1.
Description
Use the default cost command to configure the default routing cost of a redistributed route. Use the undo default cost command to restore the default value. If no specific routing cost is specified when redistributing routes from other protocols with the import-route command, the redistributing will be performed with the default routing cost specified by the default cost command. Related command: import-route.
Example
# Set the default routing cost of redistributing other routing protocol routes as 3.
[3Com-rip] default cost 3
2.1.4 display rip

Syntax
display rip
View
Any view
Parameter
None
Description
Use the display rip command to view the current RIP running state and its configuration information.
Example
# Display the current running state and configuration information of the RIP protocol.
<3Com> display rip RIP is turned on public net VPN-Instance Checkzero is on Summary is on Default cost : 1 Preference : 100
Period update timer : 30 Timeout timer : 180

Garbage-collection timer : 120 No peer router
Table 2-1 Description of the output information of the display rip command Field RIP is turned on public net VPN-Instance Checkzero is on Default cost : 1 Summary is on Preference : 100 Period update timer : 30 Timeout timer : 180 Garbage-collection timer : 120 No peer router RIP has no peer router. Setting on the three timers of RIP RIP is enabled. Public networks in the VPN-instance Enables checkzero of RIP. The default cost of the redistributed route is 1. Enables route summary of RIP. The preference of RIP is 100. Description
2.1.5 display rip interface

Syntax
display rip interface [ vpn-instance vpn-instance-name ]
View
Any view
Parameter
vpn-instance vpn-instance-name: Specifies a VPN by its name.
Description
Use the display rip interface command to display information about the specified RIP interface or all RIP interfaces.
Example
# Display information about all RIP interfaces.
<3Com> display rip interface RIP Interface: public net
Address 1.0.0.1
Interface Vlan-interface100 2
Ver MetrIn/Out Input Output 0/1 on on on
Split-horizon
Table 2-2 Description on the fields of the display rip interface command Field Address Description IP address of the RIP interface. You must enable the RIP interface using the network in RIP view Name of the RIP interface. Its IP address is displayed in the Address field RIP version running on the interface The routing metric value added when receiving or sending routes On indicates that the interface can receive RIP packets and off indicates the contrary. On indicates that the interface can send RIP packets and off indicates the contrary. On indictes that slit horizon is enabled and off indicates that slit horizion is disabled
Interface Ver MetrIn/Out Input Output Split-horizon
2.1.6 display rip routing

Syntax
display rip routing [vpn-instance vpn-instance-name]
View
Any view
Parameter
vpn-instance vpn-instance-name: Specifies the name of the VPN.
Description
Use the display rip routing command to display the RIP routing table, including normal routes and routes in garbage-collection status. With vpn-instance not specified, RIP routes of the public network will be displayed; with vpn-instance specified, RIP routes of the specified vpn-instance will be displayed.
Example
# Display RIP routes.
[Router] display rip routing RIP routing table: public net
Destination/Mask 10.3.4.0/32 11.0.0.0/8
Cost 1 1
NextHop 1.1.1.1 1.1.1.1
Age 10s 10s
SourceGateway 1.1.1.1 1.1.1.1
Table 2-3 Description on the fields of the display rip routing command Field Destination/Mask Cost NextHop Age SourceGateway Description Destination address/mask length Routing metric Address of the next hop The lifetime of the route entry in the routing table (aging time) Address of the source gateway from which the route is learnt
2.1.7 display rip vpn-instance

Syntax
display rip vpn-instance vpn-instance-name
View
Any view
Parameter
vpn-instance vpn-instance-name: VPN instance name.
Description
Use the display rip vpn-instance command to view the related configuration of VPN instance of RIP.
Example
None
2.1.8 filter-policy export

Syntax
filter-policy { acl-number | ip-prefix ip-prefix-name | route-policy route-policy-name} export [ routing-protocol ] undo filter-policy { acl-number | ip-prefix ip-prefix-name | route-policy
route-policy-name} export [ routing-protocol ]
View
RIP view
Parameter
acl-number: Access control list number used for filtering the destination addresses of the routing information. ip-prefix-name: Name of address prefix list used for filtering the destination addresses of the routing information. route-policy-name: Name of the routing policy used for filtering routing information. It allows RIP to decide which routes should be sent or received based on the fields acl, cost, interface, ip, ip-prefix, and tag. routing-protocol: Routing protocol whose routing information is to be filtered, including direct, isis, bgp, ospf, ospf-ase, ospf-nssa, and static at present.
Description
Use the filter-policy export command to configure to filter the advertised routing information by RIP. Use the undo filter-policy export command to configure not to filter the advertised routing information. By default, RIP does not filter the advertised routing information. Related command: acl, filter-policy import, and ip ip-prefix.
Example
# Filter the advertised route information according to acl 2003.
[3Com-rip] filter-policy 2003 export
2.1.9 filter-policy import

Syntax
filter-policy gateway ip-prefix-name import undo filter-policy gateway ip-prefix-name import filter-policy { acl-number | ip-prefix ip-prefix-name [ gateway ip-prefix-name ] | route-policy route-policy-name} import undo filter-policy { acl-number | ip-prefix ip-prefix-name [ gateway ip-prefix-name ] | route-policy route-policy-name } import
View
RIP view
Parameter
ip-prefix-name: Name of address prefix list used for filtering the destination addresses of the routing information. acl-number: Access control list number used for filtering the destination addresses of the routing information. gateway ip-prefix-name: Name of address prefix list used for filtering the addresses of the neighboring routers advertising the routing information. route-policy-name: Name of the routing policy used for filtering routing information. It allows RIP to decide which routes should be sent or received based on the fields: acl, cost, interface, ip, ip-prefix, and tag.
Description
Use the filter-policy gateway command to configure to filter the received routing information distributed from the specified address. Use the undo filter-policy gateway command to configure not to filter the received routing information distributed from the specified address. Use the filter-policy import command to configure the filtering to the received global routing information. Use the undo filter-policy import command to disable filtering to the received global routing information By default, RIP does not filter the received routing information. The range of the routes received by RIP can be controlled by specifying the access control list and the address prefix list.
Related command: acl, filter-policy export, and ip ip-prefix.
Example
# Configure the filtering of the global routing information according to acl 2003.
[3Com-rip] filter-policy 2003 import
2.1.10 host-route
Syntax
host-route undo host-route
View
RIP view
Parameter
None
Description
Use the host-route command to control the RIP to accept the host route. Use the undo host-route command to reject the host route. By default, router accepts the host route. In some special cases, RIP receives a great number of host routes in the same network segment. These routes cannot help the path searching much but occupy a lot of resources. In this case, the undo host-route command can be used to reject host routes.
Example
# Configure RIP to reject a host route.
[3Com-rip] undo host-route
2.1.11 import-route
Syntax
import-route protocol [ allow-ibgp ] [ cost value ] [ route-policy route-policy-name ] undo import-route protocol
View
RIP view
Parameter
protocol: Specifies the source routing protocol to be redistributed by RIP. At present, RIP can redistribute the following routes: direct, ospf, ospf-ase, ospf-nssa, static, and bgp and isis. allow-ibgp: Optional when the protocol argument is set to BGP. Whereas the import-route bgp command redistributes only EBGP routes, the import-route bgp allow-ibgp command redistributes IBGP routes in addition and as such, must be used with cautions. value: Cost value of the route to be redistributed, ranging from 1 to 16.. route-policy route-policy-name: Configured to redistribute the route matching the condition of the specified Route-policy only.
Description
Use the import-route command to redistribute the routes of other protocols into RIP. Use the undo import-route command to cancel the routes redistributed from other protocols. By default, RIP does not redistribute any other routes. The import-route command is used to redistribute the route of another protocol by using a certain value. RIP regards the redistributed route as its own route and transmits it with the specified value. This command can greatly enhance the RIP capability of obtaining routes, thus increasing the RIP performance. If the cost value is not specified, routes will be redistributed according to the default cost. It is in the range of 1 to 16. If it is larger than or equal to 16, it indicates an unreachable route and the transmission will be stopped in 120 seconds. Related command: default cost.
Example
# redistribute a static route with cost being 4.
[3Com-rip] import-route static cost 4
# Set the default cost and redistribute an OSPF route with the default cost.
[3Com-rip] default cost 3 [3Com-rip] import-route ospf
2.1.12 ipv4-family vpn-instance

Syntax
ipv4-family [ unicast ] vpn-instance vpn-instance-name undo ipv4-family [ unicast ] vpn-instance vpn-instance-name
View
RIP view
Parameter
unicast: Unicast address. vpn-instance-name: Associates the specified VPN instance with the IPv4 address family. Enter the MBGP address family view of RIP with this parameter.
Description
Use the ipv4-family command to enter MBGP address family view of RIP. Use the undo ipv4-family command to cancel all configurations in extended address family view. ipv4-family command is used to enter the MBGP address family view. In this view, parameters related to address family can be configured for RIP. undo ipv4-family command is only used in RIP view. The ipv4-family vpn-instance command is used for BGP/MPLS VPN. For a related description refer to MPLS VPNsection in module MPLS chapter of this manual. Related command: display rip vpn-instance.
Example
# Enter the RIP MBGP address family view.
[3Com] ip vpn-instance xhy [3Com-vpn-xhy] route-distinguisher 100:1 [3Com-rip] ipv4-family vpn xhy [3Com-rip-af-vpn-instance]
2.1.13 multi-path-number
Syntax multi-path-number number
undo multi-path-number
View
OSPF view
Parameter
number: Number of equal-cost routes, in the range 1 to 3. It defaults to 3.
Description
Use the multi-path-number command to configure the maximum number of OSPF equal-cost routes. Use the undo multi-path-number command to restore the default.
Example
# Set the number of OSPF equal-cost routes to 2.
[3Com-ospf-1] multi-path-number 2
2.1.14 network
Syntax
network network-address undo network network-address
View
RIP view
Parameter
network-address: Address of the network enabled/disabled. It can be the IP network address of any interface.
Description
Use the network command to enable Routing Information Protocol (RIP) on the interface. Use the undo network command to cancel the RIP on the interface. By default, RIP is disabled on any interface. By default, after enabling a RIP routing process, it is disabled on any interface. RIP at a certain interface must be enabled with the network command. The undo network command is similar to the interface undo rip work command in terms of function, but they are not identical. Their similarity is that the interface using either command will not receive/transmit RIP routes. The difference between them is that, in the
case of undo rip work, other interfaces will still forward the routes of the interface using the undo rip work command. In the case of undo network, it is like to perform undo rip work command on the interface, and the routes of corresponding interfaces cannot be transmitted by RIP. Therefore, the packets transmitted to this interface cannot be forwarded. When the network command is used on an address, the effect is that the interface on the network segment at this address is enabled. For example, the results of viewing the network 129.102.1.1 with both the display current-configuration command and the display rip command are shown as the network 129.102.0.0. Related command: rip work.
Example
# Enable the RIP on the interface with the network address as 129.102.0.0.
[3Com-rip] network 129.102.0.0
2.1.15 peer
Syntax
peer ip-address undo peer ip-address
View
RIP view
Parameter
ip-address: IP address of the peer router with which information will be exchanged in unicast mode, represented in the format of dotted decimal.
Description
Use the peer command to configure the destination address of the peer to which information is sent in unicast mode. Use the undo peer command to cancel the set destination address. By default, do not send a RIP packet to any destination. This command specifies the sending destination address to fit some non-broadcast networks. Usually, it is not recommended that you use this command.
Example
# Specify the sending destination address 202.38.165.1.
[3Com-rip] peer 202.38.165.1
2.1.16 preference
Syntax
preference value undo preference
View
RIP view
Parameter
value: Preference level, ranging from 1 to 255. By default, the value is 100.
Description
Use the preference command to configure the route preference of RIP. Use the undo preference command to restore the default preference. Every routing protocol has its own preference. Its default value is determined by the specific routing policy. The preference will finally determine the routing algorithm to obtain the optimal route in the IP routing table. This command can be used to modify the RIP preference manually.
Example
# Specify the RIP preference as 20.
[3Com-rip] preference 20
2.1.17 reset
Syntax
reset
View
RIP view
Parameter
None
Description
Use the reset command to reset the system parameters of RIP. When you need to re-configure parameters of RIP, this command can be used to restore the default setting.
Example
# Reset the RIP system.
[3Com-rip] reset
2.1.18 rip
Syntax
rip undo rip
View
system view
Parameter
None
Description
Use the rip command to enable the RIP and enter RIP view. Use the undo rip command to cancel RIP. By default, the system does not run RIP. To enter RIP view to configure various RIP global parameters, RIP should be enabled first. Whereas the configuration of parameters related to the interfaces is not restricted by enabling/disabling RIP.
Caution: You can execute the undo rip command in both system view and interface view, which will lead to the deletion of all RIP-related commands.
Example
# Enable the RIP and enter the RIP view.
[3Com] rip [3Com-rip]
2.1.19 rip authentication-mode

Syntax
rip authentication-mode { { simple password } | { md5 { nonstandard key-string | usual key-string key-id } } } undo rip authentication-mode
View
Interface view
Parameter
simple: Simple text authentication mode. password: Simple text authentication key, in character string format with 1 to 16 characters in simple text mode or 24 characters in cipher text mode. md5: MD5 cipher text authentication mode. nonstandard: Specifies the MD5 cipher text authentication packet to use a nonstandard packet format described in RFC2082. usual: Specifies the MD5 cipher text authentication packet to use the general packet format (RFC1723 standard format). key-string: MD5 cipher text authentication key, in character string format with 1 to 16 characters in simple text mode or 24 characters in cipher text mode, _(TT8F]Y\5SQ=^Q`MAF4<1!!, for example. key-id: MD5 cipher text authentication identifier, ranging from 1 to 255.
Description
Use the rip authentication-mode command to configure RIP-2 authentication mode and corresponding parameters. Use the undo rip authentication-mode command to cancel the RIP-2 authentication. RIP-1 does not support authentication. There are two RIP authentication modes: simple text authentication and MD5 cipher text authentication. When MD5 cipher text
authentication mode is used, there are two types of packet formats. One of them is described in RFC 1723, which was brought forward earlier. The other format is the one described specially in RFC 2082. The router supports both of the packet formats and the user can select either of them on demand. Whether you configure plain text password or cipher text password, the password must be entered in plain text for authentication. Related command: rip version.
Example
# Specify Interface serial1/0/0 to use the simple text authentication with the key as aaa.
[3Com] interface serial1/0/0 [3Com-Serial1/0/0] rip version 2 [3Com-Serial1/0/0] rip authentication-mode simple aaa
2.1.20 rip input

Syntax
rip input undo rip input
View
Interface view
Parameter
None
Description
Use the rip input command to allow an interface to receive RIP packets. Use the undo rip input command to cancel an interface to receive RIP packets. By default, RIP packets at all interfaces (except loopback interface) can be received. This command is used in cooperation with the other two commands: rip output and rip work. Functionally, rip work is equivalent to rip input & rip output. The latter two control the receipt and the transmission of RIP packets respectively on an interface. The former command equals the functional combination of the latter two commands. Related command: rip output and rip work.
Example
# Specify the interface serial1/0/0 not to receive RIP packets.
[3Com-serial1/0/0] undo rip input
2.1.21 rip metricin

Syntax
rip metricin value undo rip metricin
View
Interface view
Parameter
value: Additional route metric added when receiving a packet, ranging from 0 to 16. By default, the value is 1.
Description
Use the rip metricin command to configure the additional route metric added to the route when an interface receives RIP packets. Use the undo rip metricin command to restore the default value of this additional route metric. This command is valid for the routes distributed by the local network and other routes redistributed by other routes. This command is invalid for the routes redistributed by the local router. Related command: rip metricout.
Example
# Specify the additional route metric to 2 when the interface serial1/0/0 receives RIP packets.
[3Com] interface serial1/0/0 [3Com-serial1/0/0] rip metricin 2
2.1.22 rip metricout

Syntax
rip metricout value
undo rip metricout
View
Interface view
Parameter
value: Additional route metric added when transmitting a packet, ranging from 1 to 16. By default, the value is 1.
Description
Use the rip metricout command to configure the additional route metric to the route when an interface transmits RIP packets. Use the undo rip metricout command to restore the default value of this additional route metric. This command is valid for the routes distributed by the local network and other routes redistributed by other routes. This command is invalid for the routes redistributed by the local router. Related command: rip metricin.
Example
# Set the additional route metric to 2 when the interface serial1/0/0 transmits RIP packets.
[3Com] interface serial1/0/0 [3Com-serial1/0/0] rip metricout 2
2.1.23 rip output

Syntax
rip output undo rip output
View
Interface view
Parameter
None
Description
Use the rip output command to configure an interface to transmit RIP packets to the external. Use the undo rip output command to disable an interface from transmiting RIP packets to the external. By default, RIP packets at all interfaces (except loopback interface) can be transmitted. This command is used in cooperation with the other two commands: rip input and rip work. Functionally, rip work is equivalent to rip input & rip output. The latter two control the receipt and the transmission of RIP packets respectively on an interface. The former command equals the functional combination of the latter two commands. Related command: rip input and rip work.
Example
# Disable the interface serial1/0/0 to transmit RIP packets.
[3Com] interface serial1/0/0 [3Com-serial1/0/0] undo rip output
2.1.24 rip split-horizon

Syntax
rip split-horizon undo rip split-horizon
View
Interface view
Parameter
None
Description
Use the rip split-horizon command to configure an interface to use split horizon when transmitting RIP packets. Use the undo rip split-horizon command to configure an interface not to use split horizon when transmitting RIP packets. By default, an interface is enabled to use split horizon when transmitting RIP packets.
Normally, split horizon is necessary for reducing routing loops. Only in special cases should split horizon be disabled to ensure the correct execution of protocols.
Example
# Specify the interface serial1/0/0 not to use split horizon when processing RIP packets.
[3Com] interface serial1/0/0 [3Com-serial1/0/0] undo rip split-horizon
2.1.25 rip version

Syntax
rip version { 1| { 2 [ broadcast | multicast ] } } undo rip version
View
Interface view
Parameter
1: Interface version is RIP-1. 2: Interface version is RIP-2. By default, multicast is used. broadcast: Transmission mode of RIP-2 packet is broadcast. multicast: Transmission mode of RIP-2 packet is multicast.
Description
Use the rip version command to configure the version of RIP packets on an interface. Use the undo rip version command to restore the default value of RIP packet version on the interface. By default, the interface RIP version is RIP-1. RIP-2 has 2 transmission modes: broadcast and multicast. Multicast is the default mode. The multicast address in RIP-2 is 224.0.0.9. One of the advantages of multicast mode is that the hosts that do not run RIP in this network will not receive the broadcast packets. Additionally, hosts running RIP-1 will be prevented from receiving and processing the RIP-2 routes with subnet masks. When the interface specifies the use of RIP-1, only RIP-1 and RIP-2 broadcast packets will be received. In this case, RIP-2 multicast packets will be rejected. When the interface is specified to use RIP-2 multicast, only RIP-2 multicast packets and RIP-2 broadcast packets will be received. In this case, RIP-1 packets will be rejected.
Example
# Configure the interface serial1/0/0 as RIP-2 broadcast mode.
[3Com] interface serial1/0/0 [3Com-serial1/0/0] rip version 2 broadcast
2.1.26 rip work

Syntax
rip work undo rip work
View
Interface view
Parameter
None
Description
Use the rip work command to enable the running of RIP on an interface. Use the undo rip work command to disable the running of RIP on an interface. By default, RIP is run on an interface. This command is used in cooperation with rip input, rip output and network commands. Related command: network, rip input, and rip output.
Example
# Disable the interface serial1/0/0 to run the RIP.
[3Com] interface serial1/0/0 [3Com-serial1/0/0] undo rip work
2.1.27 summary
Syntax
summary undo summary
View
RIP view
Parameter
None
Description
Use the summary command to enable RIP-2 automatic route summarization. Use the undo summary command to disable RIP-2 automatic route summarization. By default, RIP-2 route summarization is enabled. Route aggregation can be performed to reduce the routing traffic on the network as well as to reduce the size of the routing table. If RIP-2 is used, route summarization function can be disabled with the undo summary command, when it is necessary to broadcast the subnet route. RIP-1 does not support subnet mask. Forwarding subnet route may cause ambiguity. Therefore, RIP-1 uses route summarization all the time. The undo summary command is invalid for RIP-1. Related command: rip version.
Example
# Set RIP version on the interface serial1/0/0 as RIP-2 and disable the route summarization function.
[3Com] interface serial1/0/0 [3Com-serial1/0/0] rip version 2 [3Com-serial1/0/0] quit [3Com] rip [3Com-rip] undo summary
2.1.28 timers
Syntax
timers { update update-timer-length | timeout timeout-timer-length } * undo timers { update | timeout } *
View
RIP view
Parameter
update-timer-length: Period update value, measured in seconds ranging from 1 to 3600. The default value is 30 seconds. timeout-timer-length: Timeout value, measured in seconds ranging from 1 to 3600. The default value is 180 seconds.
Description
Use the timers command to modify value for the three timers, Period update, Timeout and Garbage-collection, of RIP. Use the undo timers command to restore the default setting. The default values of timer Period update, Timeout and Garbage-collection are respectively 30s, 180s and 120s. Usually, the timing length of timer Garbage-collection is fixedly 3 times longer than that of timer Period update. However, in practice, an unreachable route will not be completely deleted until the fourth update packet sent from the same neighbor is received. So the actual timing length of timer Garbage-collection is as 3 to 4 times that of timer Period update. Additionally, the modification on timer Period update will affect timer Garbage-collection. The modified value of RIP timers will take effect immediately. Related command: display rip.
Example
# Set timer Period update to 10 seconds and timer Timeout to 30 seconds.
[3Com] rip [3Com-rip] timers update 10 timeout 30
2.1.29 traffic-share-across-interface
Syntax
traffic-share-across-interface undo traffic-share-across-interface
View
RIP protocol view, RIP MBGP address family view
Parameter
None
Description
Use the traffic-share-across-interface command to enable RIP to distribute traffic equally on multiple interfaces using equivalent routes. Use the undo traffic-share-across-interface command to disable traffic sharing across interfaces. By default, traffic sharing across RIP interfaces is disabled.
Example
# Enable RIP traffic sharing across interfaces.
[Router-rip] traffic-share-across-interface
# Enable RIP traffic sharing across interfaces in RIP MBGP address family view.
[3Com] ip vpn-instance 3Com [3Com-vpn-xhy] route-distinguisher 100:1 [3Com-rip] ipv4-family vpn 3Com [3Com-rip-af-vpn-instance] traffic-share-across-interface
2.1.30 validate-source-address
Syntax
validate-source-address undo validate-source-address
View
RIP protocol view, RIP MBGP address family view
Parameter
None
Description
Use the validate-source-address command to enable checking of the source address of a RIP packet upon reception. Use the undo validate-source-address command to cancel checking of the source address of a RIP packet. With the source address of a RIP packet not checked, indirectly connected RIP routes can be exchanged. This command applies to the RIP protocol both running in public networks and private networks in a MPLS VPN. By default, the source address of a RIP packet is checked.
Example
# Configure not to check the source address of a RIP packet received.
[Router-rip] undo validate-source-address
# Configure not to check the source address of a RIP packet received.

[Router-rip] ipv4-family vpn-instance 3COM [Router-rip-af-vpn-instance] undo validate-source-address
Chapter 3 OSPF Configuration Commands

3.1 OSPF Configuration Commands
3.1.1 abr-summary
Syntax
abr-summary ip-address mask [ advertise | not-advertise ] undo abr-summary ip-address mask
View
OSPF area view
Parameter
ip-address: Network segment address. mask: Network mask. Advertise: Advertises only the summarized route. Notadvertise: Suppresses the advertisement of the routes in the matched range.
Description
Use the abr-summary command to configure the route aggregation on the area border router (ABR). Use the undo abr-summary command to cancel the function of route aggregation on the area border router. By default, the area border router doesnt aggregate routes. This command is applicable only to the ABR and is used for route aggregation in an area. The ABR only transmits an aggregated route to other areas. Route aggregation refers to the routing information being processed in the ABR and for each network segment configured with route aggregation there is only one route transmitted to other areas. An area can configure multiple aggregation network segments. Thus OSPF can aggregate various network segments together.
Example
# Aggregate the routes in the two network segments, 36.42.10.0 and 36.42.110.0, of OSPF area 1 into one route 36.42.0.0 and transmit it to other areas.

[3Com-ospf-1] area 1
[3Com-ospf-1-area-0.0.0.1] network 36.42.10.0 0.0.0.255 [3Com-ospf-1-area-0.0.0.1] network 36.42.110.0 0.0.0.255 [3Com-ospf-1-area-0.0.0.1] abr-summary 36.42.0.0 255.255.0.0
3.1.2 area
Syntax
area area-id undo area area-id
View
OSPF view, OSPF area view
Parameter
area-id: ID of the OSPF area, which can be a decimal integer (ranging from 0 to 4294967295) or in IP address format.
Description
Use the area command to enter OSPF area view. Use the undo area command to cancel the designated area.
Example
# Enter area 0 view.
[3Com-ospf-1] area 0 [3Com-ospf-1-area-0.0.0.0]
3.1.3 asbr-summary
Syntax
asbr-summary ip-address mask [ not-advertise | tag tag-value ] undo asbr-summary ip-address mask
View
OSPF view
Parameter
ip-address: Matched IP address in dotted decimal notation.
mask: IP address mask in dotted decimal notation. not-advertise: Not advertises routes matching the specified IP address and mask. Aggregated route will be advertised without this parameter. tag-value: Control advertisement of routes via Route-policy. It is in the range from 0 to 4294967295. If it is not specified, it is 1 by default.
Description
Use the asbr-summary command to configure summarization of redistributed routes by OSPF. Use the undo asbr-summary command to cancel the summarization. By default, summarization of redistributed routes is disabled. After the summarization of redistributed routes is configured, if the local router is an autonomous system border router (ASBR), this command summarizes the redistributed Type-5 LSAs in the summary address range. When NSSA is configured, this command will also summarize the redistributed Type-7 LSAs in the summary address range. If the local router acts as both an ABR and a switch router in the NSSA, this command summarizes Type-5 LSAs transformed from Type-7 LSAs. If the router is not the router in the NSSA, the summarization is disabled. Related command: display ospf asbr-summary.
Example
# Set summarization of 3Com redistributed routes.
[3Com-ospf-1] asbr-summary 10.2.0.0 255.255.0.0 not-advertise
3.1.4 authentication-mode
Syntax
authentication-mode { simple | md5 } undo authentication-mode
View
OSPF area view
Parameter
simple: Simple text authentication mode. md5: MD5 cipher text authentication mode.
Description
Use the authentication-mode command to configure one area of OSPF to support the authentication attribute. Use the undo authentication-mode command to cancel the authentication attribute of this area. By default, an area does not support the authentication attribute. All the routers in one area must use the same authentication mode (no authentication, supporting simple text authentication or MD5 cipher text authentication). If the mode of supporting authentication is configured, all routers on the same segment must use the same authentication key. To configure a simple text authentication key, use the ospf authentication-mode simple command. And, use the ospf authentication-mode md5 command to configure the MD5 cipher text authentication key if the area is configured to support MD5 cipher text authentication mode. Related command: ospf authentication-mode.
Example
# Enter area 0 view.
# Specify the OSPF area 0 to support MD5 cipher text authentication.

[3Com-ospf-1-area-0.0.0.0] authentication-mode md5
3.1.5 debugging ospf

Syntax
debugging ospf [ process-id ] { event | { packet [ ack | dd | hello | interface type num | request | update ] } | lsa-generate | spf | te } undo debugging ospf [ process-id ] { event | { packet [ ack | dd | hello | interface type num | request | update ] } | lsa-generate | spf | te }
View
User view
Parameter
interface type num: Type and number of the interface. process-id: OSPF process number. If no process number is specified, all the process debugging is enabled or disabled.
event: Enables OSPF event information debugging. packet: Enables OSPF packet information debugging. There are five sorts of packets in OSPF as follows: ack: LSAck packet. dd: Database Description packet. hello: Hello message. request: Link State Request packet. update: Link State Update packet. Lsa-generate: Enables OSPF LSA packet information debugging. spf: Enables the debugging of the calculation of the OSPF shortest-path tree. te: Enables the debugging of OSPF TE.
Description
Use the debugging ospf command to enable OSPF debugging. Use the undo debugging ospf command to disable the function. In OSPF multi-process, using debugging command, you can enable the debugging of all the process simultaneously or one of the processes only. If no process number is specified in the debugging command, the command is valid to all the processes; and it keeps the state during the router running period no matter whether an OSPF process exits or not. In this way, the execution of this command will enable/disable each enabled OSPF debugging. At the same time, the debugging specified by this command will be enabled automatically when a new OSPF is enabled. If there is a specified process number in the debugging command, only the specified process is debugged. The configuration command is invalid if OSPF is not enabled. And the debugging state will not be kept after exiting the process, either. If you do not define the interface parameter in the debugging command, the system displays the debugging information of all the interfaces. If you define the parameter, the system only displays the debugging information of the specified interface. Related command: display debugging ospf.
Example
# Enable the information debugging of OSPF packets.
<3Com> debugging ospf packet
3.1.6 default cost

Syntax
default cost value undo default cost
View
OSPF view
Parameter
value: Default routing cost of external route redistributed by OSPF, ranging from 0 to 16777214. By default, its value is 1.
Description
Use the default cost command to configure the default cost for OSPF to redistribute external routes. Use the undo default cost command to restore the default value of the default routing cost configured for OSPF to redistribute external routes. Since OSPF can redistribute external routing information and propagate it to the entire autonomous system, it is necessary to specify the default routing cost for the protocol to redistribute external routes. If multiple OSPFs are enabled the command is valid to this process only.
Example
# Specify the default routing cost for OSPF to redistribute external routes as 10.
[3Com-ospf-1] default cost 10
3.1.7 default interval

Syntax
default interval seconds undo default interval
View
OSPF view
Parameter
seconds: Default interval for redistributing external routes. Its unit is second and the value ranges from 1 to 2147483647. By default, the interval for OSPF to redistribute external routes is 1 second.
Description
Use the default interval command to configure the default interval for OSPF to redistribute external routes. Use the undo default interval command to restore the default value of the default interval of redistributing external routes. Because OSPF can redistribute the external routing information and broadcast it to the entire autonomous system, it is necessary to specify the default interval for the protocol to redistribute external routes.
Example
# Specify the default interval for OSPF to redistribute external routes as 10 seconds.
[3Com-ospf-1] default interval 10
3.1.8 default limit

Syntax
default limit routes undo default limit
View
OSPF view
Parameter
routes: Default value to the redistributed external routes in a unit time, ranging from 200 to 2147483647. By default, the value is 1000.
Description
Use the default limit command to configure default value of maximum number of redistributed routes. Use the undo default limit command to restore the default value.
OSPF can redistribute external route information and broadcast them to the whole autonomous system, so it is necessary to regulate the default value of external route information redistributed in one process. Related command: default interval.
Example
# Specify the default value of OSPF redistributing external routes as 200.
[3Com-ospf-1] default limit 200
3.1.9 default tag

Syntax
default tag tag undo default tag
View
OSPF view
Parameter
tag: Default tag, ranging from 0 to 4294967295.
Description
Use the default tag command to configure the default tag of OSPF when it redistributes an external route. Use the undo default tag command to restore the default tag of OSPF when it redistributes the external route. When OSPF redistributes a route found by other routing protocols in the router and uses it as the external routing information of its own autonomous system, some additional parameters are required, including the default cost and the default tag of the route. Related command: default type.
Example
# Set the default tag of OSPF redistributed external route of the autonomous system as 10.
[3Com-ospf-1] default tag 10
3.1.10 default type

Syntax
default type { 1 | 2 } undo default type
View
OSPF view
Parameter
type 1: External routes of type 1. type 2: External routes of type 2.
Description
Use the default type command to configure the default type when OSPF redistributes external routes. Use the undo default type command to restore the default type when OSPF redistributes external routes. By default, the external routes of type 2 are redistributed. OSPF specifies the two types of external routing information. The command described in this section can be used to specify the default type when external routes are redistributed. Related command: default tag.
Example
# Specify the default type as type 1 when OSPF redistributes an external route.
[3Com-ospf-1] default type 1
3.1.11 default-cost
Syntax
default-cost value undo default-cost
View
OSPF area view
Parameter
value: Specifies the cost value of the default route transmitted by OSPF to the STUB or NSSA area, ranging from 0 to 16777214. The default value is 1.
Description
Use the default-cost command to configure the cost of the default route transmitted by OSPF to the STUB or NSSA area. Use the undo default-cost command to restore the cost of the default route transmitted by OSPF to the STUB or NSSA area to the default value. This command is applicable for the border routers connected to STUB or NSSA area. The stub and default-cost commands are necessary in configuring a STUB area. All the routers connected to a STUB area must use the stub command to configure the stub attribute to this area. Use the default-cost command to specify the cost of the default route transmitted by ABR to STUB or NSSA area. This command is only valid for this process if multiple OSPF processes are enabled. Related command: stub and nssa.
Example
# Set the area 1 as the STUB area and the cost of the default route transmitted to this STUB area to 60.
[3Com-ospf-1] area 1 [3Com-ospf-1-area-0.0.0.1] network 20.0.0.0 0.255.255.255 [3Com-ospf-1-area-0.0.0.1] stub [3Com-ospf-1-area-0.0.0.1] default-cost 60
3.1.12 default-route-advertise
Syntax
default-route-advertise [ always ] [ cost cost-value ] [ type type-value ] [ route-policy route-policy-name ] undo default-route-advertise [ always ] [ cost ] [ type ] [ route-policy ]
View
OSPF view
Parameter
always: Only available for the ASBR. If the parameter is selected, a default route which is advertised via LSAs will be generated no matter whether there is a default route in the routing table. For the ASBR in an general area, the default route is advertised via Type-5 LSA, while in NSSA, the default route is advertised via Type-7 LSA. cost-value: Cost value of this LSA. The cost-value ranges from 0 to 16777214. The default value is 1. type-value: Cost type of this LSA. It ranges from 1 to 2. The default value is 2. route-policy-name: If the default route matches the route-policy specified by route-policy-name, route-policy will affect the value in LSA. The length of route-policy-name parameter ranges from 1 to 19 character.
Description
Use the default-route-advertise command to make the system generate a default route to OSPF area. Use the undo default-route-advertise command to cancel the generating of default route. By default, OSPF does not generate a default route. Use the default-route-advertise command at ABR to generate a default route which is advertised via the Type-5 LSA or Type-7 LSA whether there is a default route in the routing table or not. An OSPF router after the default-route-advertise command is executed will become an ASBR, as is similar to executing the import-route command on an OSPF router. However, you cannot redistribute the default route into the OSPF area with the import-route command. In addition, the default-route-advertise command is not available for the Stub area. For the ABR or ASBR in NSSA, the default-route-advertise command is equivalent to the nssa default-route-advertise command in terms of effect. This command is valid for the current process only if multiple OSPF processes are enabled. Related command: import-route and nssa.
Example
# If local route has default route, the LSA of default route will be generated, otherwise it wont be generated.
[3Com-ospf-1] default-route-advertise
# The LSA of default route will be generated and advertised to OSPF route area even the local router has no default route.
[3Com-ospf-1] default-route-advertise always
3.1.13 display debugging ospf

Syntax
display debugging ospf
View
Any view
Description
Use the display debugging ospf command to view the global OSPF debugging state and each process debugging state. Related command: debugging ospf.
Example
# View the global OSPF debugging state and each process debugging state.
<3Com> display debugging ospf OSPF global debugging state: OSPF SPF debugging is on OSPF LSA debugging is on
OSPF process 100 debugging state: OSPF SPF debugging is on OSPF process 200 debugging state: OSPF SPF debugging is on OSPF LSA debugging is on
3.1.14 display ospf abr-asbr

Syntax
display ospf abr-asbr
View
Any view
Parameter
None
Description
Use the display ospf abr-asbr command to view the routing information to the Area Border Router (ABR) and Autonomous System Border Router (ASBR) of OSPF.
Example
# Display the information of the OSPF ABR and ASBR.
<3Com> display ospf abr-asbr Routing Table to ABR and ASBR Destination Intra 1.2.3.9 Area 0.0.0.0 Cost 1 Type ASBR Nexthop 1.2.3.9 Interface Ethernet2/0/0
3.1.15 display ospf asbr-summary

Syntax
display ospf asbr-summary [ ip-address mask ]
View
Any view
Parameter
ip-address: Matched IP address, in dotted decimal notation. mask: IP address mask in dotted decimal notation.
Description
Use the display ospf asbr-summary command to view the summary information of OSPF redistributed routes. If the parameters are not configured the summary information of all redistributed routes will be viewed. Related command: asbr-summary.
Example
# Display the summary information of all OSPF redistributed routes.
<3Com> display ospf asbr-summary Total summary address count: 2
Summary Address net : 168.10.0.0

mask tag status : 255.254.0.0 : 1 : Advertise
The Count of Route is 0
Summary Address net mask tag status : 1.1.0.0 : 255.255.0.0 : 100 : DoNotAdvertise
The Count of Route is 0
3.1.16 display ospf brief

Syntax
display ospf [ process-id ] brief
View
Any view
Parameter
process-id: Process number of OSPF. If no process number is specified, this command displays the main information of all OSPF processes in configuration sequence.
Description
Use the display ospf brief command to view the summary of OSPF.
Example
# Display the OSPF summary.
<3Com> display ospf brief OSPF Process 1 with Router ID 2.2.2.2 OSPF Protocol Information
RouterID: 2.2.2.2
Border Router: Area
Spf-schedule-interval: 5 Routing preference: Inter/Intra: 10 External: 150 Default ASE parameters: Metric: 1 Tag: 1 Type: 2 SPF computation count: 12 Area Count: 2 Nssa Area Count: 0
Area 0.0.0.0: Authtype: none Flags: <>
SPF scheduled: <> Interface: 10.0.0.2 (Ethernet0/0/1) Cost: 1 State: BackupDR Priority: 1 Designated Router: 10.1.1.1 Backup Designated Router: 10.0.0.2 Timers: Hello 10, Dead 40, Poll 40, Retransmit 5, Transmit Delay 1 Type: Broadcast
Interface: 80.0.0.1 (Dialer1) Cost: 1562 State: DR Priority: 1 Designated Router: 80.0.0.1 Timers: Hello 30, Dead 120, Poll 120, Retransmit 5, Transmit Delay 1 Type: NBMA
Area 0.0.0.1: Authtype: none Flags: <>
SPF scheduled: <> Interface: 60.0.0.1 (Dialer0) Cost: 1562 State: DR Priority: 1 Designated Router: 60.0.0.1 Timers: Hello 30, Dead 120, Poll 120, Retransmit 5, Transmit Delay 1 Type: NBMA
Interface: 90.0.0.1 (Dialer3) Cost: 1562 State: DR Priority: 1 Designated Router: 90.0.0.1 Timers: Hello 30, Dead 120, Poll 120, Retransmit 5, Transmit Delay 1 Type: NBMA
# Display the routing information of OSPF 100.

<3Com> display ospf 100 OSPF Process 100 with Router ID 1.2.3.4 OSPF Protocol Information RouterID: 1.2.3.4 Spf-schedule-interval: 5 Routing preference: Inter/Intra: 10 External: 150 Default ASE parameters: Metric: 1 Tag: 0.0.0.1 Type: 2

SPF computation count: 0 Area Count: 0 Nssa Area Count: 0
3.1.17 display ospf cumulative

Syntax
display ospf cumulative
View
Any view
Parameter
None
Description
Use the display ospf cumulative command to view the OSPF cumulative information.
Example
# Display the OSPF cumulative information.
<3Com> display ospf cumulative OSPF Process 1 with Router ID 2.2.2.2 Cumulations
IO Statistics Type Hello DB Description Link-State Req Link-State Update Link-State Ack ASE: 0 Checksum Sum: 0 Opq-11: 0 Checksum Sum:0 Input 268 4 1 5 11 Output 270 2 1 11 4
LSAs originated by this router Router: 17 SumNet: 15 Opq-9: 0 Opq-10: 0 Opq-11: 0
LSAs Originated: 32
LSAs Received: 6
Area 0.0.0.0: Neighbors: 1 Spf: 8 Interfaces: 2
Checksum Sum 25950
rtr: 2 net: 1 sumasb: 0 sumnet: 2 opq-9: 0 opq-10: 0
Area 0.0.0.1: Neighbors: 0 Spf: 2 Interfaces: 2
Checksum Sum 27CA2
rtr: 1 net: 0 sumasb: 0 sumnet: 4 opq-9: 0 opq-10: 0
Routing Table: Intra Area: 6 Inter Area: 0 ASE: 0
3.1.18 display ospf error

Syntax
display ospf error
View
Any view
Parameter
None
Description
Use the display ospf error command to view the statistics of error information which OSPF received.
Example
# Display the statistics of error information which OSPF received .
<3Com> display ospf error OSPF Process 1 with Router ID 3.3.3.3
OSPF packet error statistics: 0: IP: received my own packet 0: OSPF: wrong version 0: OSPF: wrong area id 0: OSPF: wrong virtual link 0: OSPF: wrong authentication key 0: OSPF: packet size > ip length 0: OSPF: interface down 0: HELLO: netmask mismatch 0: OSPF: wrong packet type 0: OSPF: wrong checksum 0: OSPF: area mismatch 0: OSPF: wrong authentication type 0: OSPF: too small packet 0: OSPF: transmit error 0: OSPF: unknown neighbor 0: HELLO: hello timer mismatch

0: HELLO: dead timer mismatch 0: HELLO: router id confusion 0: HELLO: NBMA neighbor unknown 0: DD: router id confusion 0: DD: unknown LSA type 0: LS ACK: wrong ack 0: LS ACK: unknown LSA type 0: LS REQ: empty request 0: LS UPD: neighbor state low 0: LS UPD: LSA checksum wrong 0: LS UPD: unknown LSA type 0: DD: MTU option mismatch 0: OPQ-9 : out of flooding scope

0: HELLO: extern option mismatch 0: HELLO: virtual neighbor unknown 0: DD: neighbor state low 0: DD: extern option mismatch 0: LS ACK: neighbor state low 0: LS ACK: duplicate ack 0: LS REQ: neighbor state low 0: LS REQ: wrong request 0: LS UPD: newer self-generate LSA 0: LS UPD: received less recent LSA 0: OSPF routing: next hop not exist 0: ROUTETYPE: wrong type value 0: OPQ-10 : out of flooding scope 0: TE LSA : unrecognized contents
0: OPQ-11 : out of flooding scope 0: TE LSA : absence of (sub)TLV
3.1.19 display ospf interface

Syntax
display ospf interface [ interface-type port-number ]
View
Any view
Parameter
interface-type: Interface type port-number: Interface number.
Description
Use the display ospf interface command to view the OSPF interface information.
Example
# Display the OSPF ethernet2/0/0 interface information.
<3Com> display ospf interface ethernet2/0/0 OSPF Process 1 with Router ID 2.2.2.2 Interfaces
Area: 0.0.0.0 IP Address Type State Cost Pri DR BDR

10.0.0.2 80.0.0.1 Area: 0.0.0.1 IP Address 60.0.0.1 90.0.0.1 Type NBMA NBMA State DR DR Bcast BackupDR 1 NBMA DR

1 10.1.1.1 80.0.0.1 10.0.0.2 None
1562 1
Cost Pri DR 1562 1 1562 1 60.0.0.1 90.0.0.1
BDR None None
3.1.20 display ospf lsdb

Syntax
display ospf lsdb [ brief | asbr | ase | network | nssa | opaque { area-local | as | link-local } | router | summary ] [ ip-address ] [ originate-router ip-address ] [ self-originate ]
View
Any view
Parameter
brief: Brief database information. asbr: Database information of Type-4 LSA (summary-Asbr-LSA). ase: Database information of Type-5 LSA (AS-external-LSA). network: Database information of Type-2 LSA (Network-LSA). nssa: Database information of Type-7 LSA (NSSA-external-LSA) opaque: Database information of Opaque LSA. area-local: Database information of Type-10 Opaque-LSA. as: Database information of Type-11 Opaque-LSA. link-local: Database information of Type-9 Opaque-LSA. router: Database information of Type-1 LSA (Router-LSA) summary: Database information of Type-3 LSA (Summary-Net-LSA) ip-address: Link state ID in IP address format. originate-router ip-address: IP address of the router advertising LSA packet. self-originate: Database information of self-originated LSA generated by local router..
Description
Use the display ospf lsdb command to view the database information about the OSPF connecting state.
Example
# Display the database information about OSPF connecting state.
<3Com> display ospf lsdb OSPF Process 1 with Router ID 123.1.1.1 Link State Database Area: 0.0.0.0 Type LinkState ID Rtr Net 1.1.1.1 1.1.1.2 AdvRouter 1.1.1.1 123.1.1.1 Age Len 563 36 595 32 Sequence 80000008 80000001 Metric Where 0 SpfTree 0 SpfTree
AS External Database: Type LinkState ID ASE ASE 1.1.0.0 123.1.1.1 AdvRouter 1.1.1.1 1.1.1.1 Age Len 561 36 561 36 Sequence 80000001 80000001 Metric Where 1 Uninitialized 1 Uninitialized
# Display the brief database information about OSPF connecting state.

<3Com> display ospf lsdb brief OSPF Process 1 with Router ID 1.1.1.1 LS Database Statistics: Area ID 0.0.0.0 0.0.0.1 AS External Total 0 4 2 2 0 4 Stub 0 0 Router 2 2 Network S-Net 1 1 1 1 S-ASBR 0 0 Type-7 0 4 Subtotal?? 4 8 4 16
# Display the database information of Type-7 LSA.

<3Com> display ospf lsdb nssa OSPF Process 1 with Router ID 1.1.1.1 Link State Database
Area: 0.0.0.1
type ls id adv rtr ls age len seq# chksum options
: NSSA : 1.1.0.0 : 1.1.1.1 : 93 : 36 : 80000002 : 0x3c66 : (No Type 7/5 translation, DC)

Net mask : 255.255.0.0
Tos 0 metric: 1 E type : 2
Forwarding Address :2.2.2.1 Tag: 1
# Display database information of summary route.

<3Com> display ospf lsdb summary OSPF Process 1 with Router ID 1.1.1.1 Link State Database Area: 0.0.0.0 Type Ls id Adv rtr Ls age Len seq# chksum Options Net mask : SumNet : 2.2.0.0 : 1.1.1.1 : 304 : 28 : 80000001 : 0x61d4 : (DC) : 255.255.0.0
Tos 0 metric: 1
# Display database information of Type-1 LSA.

<3Com> display ospf lsdb router Link State Data Base Area: 0.0.0.0 Type Ls id Adv rtr Ls age Len seq# chksum Options : Router : 20.0.0.1 : 20.0.0.1 : 988 : 36 : 80000006 : 0x428c : (DC) ASBR
Link count: 1 Link ID: 20.0.0.1 Data Type : 20.0.0.1 : TransNet
Metric : 10


<3Com> display ospf lsdb network
OSPF Process 1 with Router ID 1.1.1.1 Link State Database Area: 0.0.0.0 Type Ls id Adv rtr Ls age Len seq# chksum Options Net mask : Net : 1.1.1.2 : 123.1.1.1 : 515 : 32 : 80000002 : 0xc470 : (DC) : 255.255.0.0 123.1.1.1 1.1.1.1
Attached Router Attached Router

<3Com> display ospf lsdb asbr OSPF Process 1 with Router ID 2.2.2.2 Link State Database Area: 0.0.0.1 Type Ls id Adv rtr Ls age Len seq# chksum Options : SumASB : 123.1.1.1 : 1.1.1.1 : 20 : 28 : 80000001 : 0x1f9b : (DC)
Tos 0 metric: 1

<3Com> display ospf lsdb ase OSPF Process 1 with Router ID 1.1.1.1 Link State Database type ls id adv rtr ls age len : ASE : 1.1.0.0 : 1.1.1.1 : 15 : 36

seq# chksum options Net mask : 80000001 : 0x4a8 : (DC) : 255.255.0.0
Tos 0 metric: 1 E type : 2
Forwarding Address :0.0.0.0 Tag: 1
# Display the LSA packets advertised from the router at 3.3.3.3.

<3Com> display ospf lsdb originate-router 3.3.3.3
Link State Database Area: 0.0.0.0 Type LinkState ID Stub 30.0.0.0 SNet 40.0.0.0 AdvRouter 3.3.3.3 3.3.3.3 Age Len -1 24 1524 28 Sequence 0 80000006 Metric Where 0 SpfTree 1562 Inter List
Area: 0.0.0.1 Type LinkState ID Stub 40.0.0.0 ASB 20.0.0.1 AdvRouter 3.3.3.3 3.3.3.3 Age Len -1 24 1524 28 Sequence 0 80000003 Metric Where 0 SpfTree 1 SumAsb List
# Display database information of the LSA packets generated by local router.

<3Com> display ospf lsdb self-originate OSPF Process 1 with Router ID 1.1.1.1 Link State Database
Area: 0.0.0.0 Type LinkState ID Rtr 1.1.1.1 AdvRouter 1.1.1.1 1.1.1.1 Age Len 539 36 445 28 Sequence 80000016 80000008 Metric Where 0 SpfTree 1 Inter List
SNet 2.2.0.0
Area: 0.0.0.1 Type LinkState ID Rtr 1.1.1.1 AdvRouter 1.1.1.1 1.1.1.1 1.1.1.1 Age Len 539 36 445 28 445 28 Sequence 8000000e 8000000a 80000007 Metric Where 0 SpfTree 1 Inter List 1 SumAsb List
SNet 1.1.0.0 ASB 123.1.1.1
AS External Database:

Type LinkState ID ASE ASE 100.0.0.0 1.1.0.0 AdvRouter 1.1.1.1 1.1.1.1

Age Len 849 36 737 36 Sequence 8000000a 8000000e Metric Where 2 Ase List 1 Ase List
3.1.21 display ospf nexthop

Syntax
display ospf nexthop
View
Any view
Parameter
None
Description
Use the display ospf nexthop command to view information of the next-hop
Example
# Display the OSPF next-hop information.
<3Com> display ospf nexthop OSPF Process 1 with Router ID 2.2.2.2
Next hops: Address Type Refcount Intf Addr Intf Name
---------------------------------------------------------------------10.0.0.2 10.1.1.1 60.0.0.1 80.0.0.1 90.0.0.1 Direct Neighbor Direct Direct Direct 3 6 3 3 3 10.0.0.2 10.0.0.2 60.0.0.1 80.0.0.1 90.0.0.1 Ethernet0/0/1 Ethernet0/0/1 Dialer0 Dialer1 Dialer3
3.1.22 display ospf peer

Syntax
display ospf peer [ brief ]
View
Any view
Parameter
brief: Brief information of neighbors in areas.
Description
Use the display ospf peer command to view information of the neighbors in OSPF areas. Use the display ospf peer brief command to view the brief information of neighbors in OSPF, mainly the neighbor number at all states in every area. The display format of OSPF neighbor valid time is different according to the length of time. Description is as follows: XXYXXMXXD: More than a year, namely year: month: day XXXdXXhXXm: More than a day but less than a year, that is, day: hour: minute XX: XX: XX: Less than a day, namely hour: minute: second
Example
# View the information of OSPF peer.
<3Com> display ospf peer OSPF Process 1 with Router ID 2.2.2.2 Neighbors
Area 0.0.0.0 interface 10.0.0.2(Ethernet0/0/1)'s neighbor(s) RouterID: 1.1.1.1 State: Full DR: 10.1.1.1 Address: 10.1.1.1 Mode: Nbr is Slave BDR: 10.0.0.2 Priority: 1
Dead timer expires in 37s Neighbor has been up for 00:33:33
# View the brief information of neighbors in areas.

<3Com> display ospf peer brief OSPF Process 1 with Router ID 1.1.1.1 Neighbor Statistics Area ID 0.0.0.0 0.0.0.1 Total Down Attempt Init 2-Way ExStart Exchange Loading Full Total 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 1 2 1 1 2
3.1.23 display ospf request-queue

Syntax
display ospf request-queue
View
Any view
Parameter
None
Description
Use the display ospf request-queue command to view information about the OSPF request-queue.
Example
# View the information about the OSPF request-queue.
<3Com> display ospf request-queue The Router's Neighbors is RouterID: 103.160.1.1 Address: 103.169.2.5 Area: 0.0.0.1 Sequence:80000001 Sequence:80000001 Sequence:80000001 Age:201 Age:201 Age:201
Interface: 103.169.2.2 LSID:129.11.25.0 LSID:129.11.25.0 LSID:129.11.25.0
AdvRouter:103.160.1.1 AdvRouter:103.160.1.1 AdvRouter:103.160.1.1
3.1.24 display ospf retrans-queue

Syntax
display ospf retrans-queue
View
Any view
Parameter
None
Description
Use the display ospf retrans-queue command to view the information about the OSPF retransmission queue.
Example
# View the information about the OSPF retransmission queue.
<3Com> display ospf retrans-queue OSPF Process 200 with Router ID 103.160.1.1 Retransmit List
The Router's Neighbors is RouterID: 162.162.162.162 Address: 103.169.2.2 Interface: 103.169.2.5 Retrans list: Type: ASE Type: ASE LSID:129.11.77.0 LSID:129.11.108.0 AdvRouter:103.160.1.1 AdvRouter:103.160.1.1 Area: 0.0.0.1
3.1.25 display ospf routing

Syntax
display ospf routing
View
Any view
Parameter
None
Description
Use the display ospf routing command to view the information about the OSPF routing table.
Example
# View the routing table information related to OSPF.
<3Com> display ospf routing OSPF Process 1 with Router ID 2.2.2.2 Routing Tables

Routing for Network Destination 10.0.0.0/8 20.0.0.0/8 30.0.0.0/8 80.0.0.0/8 60.0.0.0/8 90.0.0.0/8
Cost Type NextHop 1 Net 10.0.0.2
AdvRouter 1.1.1.1 1.1.1.1 1.1.1.1 2.2.2.2 2.2.2.2 2.2.2.2
Area 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.1 0.0.0.1
1563 Stub 10.1.1.1 1563 Stub 10.1.1.1 1562 Stub 80.0.0.1 1562 Stub 60.0.0.1 1562 Stub 90.0.0.1
Total Nets: 6 Intra Area: 6 Inter Area: 0 ASE: 0 NSSA: 0
3.1.26 display ospf vlink

Syntax
display ospf vlink
View
Any view
Parameter
None
Description
Use the display ospf vlink command to view the information of OSPF virtual links.
Example
# View OSPF virtual links information.
<3Com> display ospf vlink Virtual-link Neighbor-id Cost: 0 State: Down Transit Area: 0.0.0.1 Timers: Hello 10, Dead 40, Poll 0, Retransmit 5, Transmit Delay 1 -> 1.1.1.1, State: Down Type: Virtual

Syntax
filter-policy { acl-number | ip-prefix ip-prefix-name } export [ routing-protocol ] undo filter-policy {acl-number | ip-prefix ip-prefix-name} export [ routing-protocol ]
View
OSPF view
Parameter
acl-number: Access control list number. ip-prefix-name Name of the address prefix list. routing-protocol: Protocol advertising the routing information, including direct, isis, bgp, rip and static at present.
Description
Use the filter-policy export command to configure the rule for OSPF filtering the advertised routing information. Use the undo filter-policy export command to cancel the filtering rules that have been set. By default, no filtering of the distributed routing information is performed. In some cases, it may be required that only the routing information meeting some conditions can be advertised. Then, the filter-policy command can be used to configure the filtering conditions for the routing information to be advertised. Only the routing information passing the filtration can be advertised. Related command: acl and ip ip-prefix
Example
# Configure OSPF that only advertises the routing information permitted by acl 2001.
[3Com] acl number 2001 [3Com-acl-basic-1] rule permit source 11.0.0.0 [3Com-acl-basic-1] rule deny source any [3Com-ospf] filter-policy 2001 export 0.255.255.255

Syntax
filter-policy { acl-number | ip-prefix ip-prefix-name | gateway prefix-list-name } import undo filter-policy { acl-number | ip-prefix ip-prefix-name | gateway ip-prefix-name } import
View
OSPF view
Parameter
acl-number: Access control list number used for filtering the destination addresses of the routing information. ip-prefix-name: Name of address prefix list used for filtering the destination addresses of the routing information. gateway ip-prefix-name: Name of address prefix list used for filtering the addresses of the neighboring routers advertising the routing information.
Description
Use the filter-policy import command to configure the OSPF rules for filtering the routing information received. Use the undo filter-policy import command to cancel the filtering of the routing information received. By default, no filtering of the received routing information is performed. In some cases, it may be required that only the routing information meeting some conditions can be received. Then, the filter-policy command can be used to set the filtering conditions for the routing information to be advertised. Only the routing information that passed the filtration can be received. Use the filter-policy import command to filter the routes calculated by OSPF. Only the filtered routes can be added to the routing table. The filtering can be performed according to the next hop and destination of the route. Since OSPF is a dynamic routing protocol based on link state, its routing information hides in the link state, this command cannot filter the advertised/received routing information in link state. There is more limitation when using this command in OSPF than using it in distance vector routing protocol. This command is valid for this process only if multiple OSPF processes are enabled.
Example
# Filter the received routing information according to the rule defined by the ACL 2002.
[3Com] acl number 2002 [3Com-acl-basic-2002] rule permit source 20.0.0.0 0.255.255.255 [3Com-acl-basic-2002] rule deny source any [3Com-ospf-1] filter-policy 2002 import
3.1.29 import-route
Syntax
import-route protocol [ allow-ibgp ] [ cost value ] [ type value ] [ tag value ] [ route-policy route-policy-name ] undo import-route protocol
View
OSPF view
Parameter
protocol: Specifies the source routing protocol that can be redistributed. At present, it includes direct, rip, bgp, isis, static, ospf, ospf-ase, and ospf-nssa. ospf process-id: Redistributes only the internal routes found by OSPF process-id as external routing information. If no process number is specified, the OSPF default process number 1 is used. ospf-ase process-id: Redistributes only the ASE external routes found by OSPF process-id as external routing information. If no process number is specified, the OSPF default process number 1 is used. ospf-nssa process-id: Redistributes only the NSSA external routes found by OSPF process-id as external routing information. If no process number is specified, the OSPF default process number 1 is used. allow-ibgp: Optional when the protocol argument is set to BGP. Whereas the import-route bgp command redistributes only EBGP routes, the import-route bgp allow-ibgp command redistributes IBGP routes in addition and as such, must be used with cautions. cost value: Cost of the redistributed routes. type value: Type of the routes to be redistributed by OSPF. value takes 1 or 2; type 1 represents class 1 external routes, and type 2 (default) represents class 2 external routes. tag value: Tags the redistributed routes. route-policy route-policy-name: Redistributes only the routes matching the specified Route-policy.
Description
Use the import-route command to redistribute the information of another routing protocol. Use the undo import-route command to cancel the redistributed external routing information.
For a redistributed class 1 route, its metric equals the metric for this router to reach the router where the route is advertised plus the cost assigned to the route. For a redistributed class 2 route, its metric equals the cost assigned to it. Set the arguments cost, type, and tag at a time instead of setting them using the command for several times, because the latest configuration will overwrite the previous one. By default, the routing information of other protocols is not redistributed.
Example
# Specify an redistributed RIP route as the route of type 2, with the route tag as 33 and the route cost as 50.
[3Com-ospf-1] import-route rip type 2 tag 33 cost 50
# Specify OSPF process 100 to redistribute the route found by OSPF 160.
[3Com-ospf-100] import-route ospf 160
3.1.30 network
Syntax
network ip-address wildcard undo network ip-address wildcard
View
OSPF area view
Parameter
ip-address: Address of the network segment where the interface locates. wildcard: IP address wildcard mask, which is similar to the reversed form of the mask of IP address. But when configure this parameter to type it as mask of IP address, it could be translated as wildcard mask by the 3Com Router Software system.
Description
Use the network command to configure the interface running OSPF. Use the undo network command to cancel the interface running OSPF. By default, the interface does not belong to any area. To run the OSPF protocol on one interface, the master IP address of this interface must be in the range of the network segment specified by this command. If only the slave IP address of the interface is in the range of the network segment specified by this command, this interface will not run OSPF protocol.
After OSPF multi-instance is configured, different OSPF processes are bound with different VPN instances. The network addresses between different processes can be the same or included. However, for the same VPN instance the network addresses between different OSPF processes cannot be the same or included. Otherwise, the later configured command cannot be valid and the following will be displayed: Network already set in OSPF process xx, that is, if network 10.1.0.0 0.0.255.255 is enabled in process 100, network 10.1.0.0 0.0.255.255, network 10.1.1.0 0.0.0.255 or network 10.0.0.0 0.255.255.255 will fail to be enabled in other OSPF processes.
Caution: OSPF configuration can only enable the interfaces that belong to the same VPN instance. After OSPF is configured multi-instance, if different VPN instances are bound in the OSPF process, the network addresses between different processes can be the same or included. However, for the same VPN instance, the network addresses between different OSPF processes cannot be the same or included.
Related command: ospf.
Example
# Specify the interfaces whose master IP addresses are in the segment range of 10.110.36.0 to run the OSPF protocol and specify the number of the OSPF area (where these interfaces are located) as 6.
[3Com-ospf] area 6 [3Com-ospf-1-area-0.0.0.6] network 10.110.36.0.0 0.0.0.255
# Enable OSPF process 100 on the router and specify the number of the area where the interface is located as 2.
[3Com] router id 10.110.1.9 [3Com] ospf 100 [3Com-ospf-100] area 2 [3Com-ospf-100-area-0.0.0.2] network 131.108.20.0 0.0.0.255
[3Com] ospf 200 vpn-instance vpn1 [3Com-ospf-200] area 1
[3Com-ospf-200-area-0.0.0.1] network 131.108.20.0 0.0.0.255
[3Com] ospf 300 vpn-instance vpn1 [3Com-ospf-300] area 2 [3Com-ospf-300-area-0.0.0.2] network 131.108.20.0 0.0.0.255 Network already set in OSPF process 200
3.1.31 nssa
Syntax
nssa [ default-route-advertise ] [ no-import-route ] [ no-summary ] undo nssa
View
OSPF area view
Parameter
default-route-advertise: Only available for the NSSA ABR or ASBR. When using the parameter at NSSA ABR to generate Type-7 LSAs for the default route no matter whether there exists the default route 0.0.0.0 in the routing table. When using the parameter at NSSA ASBR to generate Type-7 LSAs for the default route only if there exists the default route 0.0.0.0 in the routing table. no-import-route: Forbids AS external routes to be redistributed in to the NSSA as Type-7 LSAs. This parameters is available for the NSSA ABR and for the ASBR in OSPF AS, to ensure all external route information is redistributed into the OSPF areas. no-summary: Only available for the NSSA ABR. When the parameter is selected, the NSSA ABR advertises a default route via the Summary-LSAs (Type-3) in the area, but no other Summary-LSAs to other areas.
Description
Use the nssa command to configure an area as the NSSA area. Use the undo nssa command to cancel the function. By default, a NSSA area is not configured. For all the routers in the NSSA area, the command nssa must be used to configure the area as NSSA .
Example
# Configure area 1 as NSSA.
[3Com-ospf-1] area 1 [3Com-ospf-1-area-0.0.0.1] network 10.110.0.0 0.255.255.255 [3Com-ospf-1-area-0.0.0.1] nssa
3.1.32 opaque-capability
Syntax
opaque-capability enable undo opaque-capability
View
OSPF view
Parameter
None
Description
Use the opaque-capability enable command to enable the Opaque capability of OSPF. Use the undo opaque-capability command to disable the Opaque capability of OSPF.
Caution: By default, Opaque capability of OSPF is enabled. If the application based on Opaque LSA is enabled, for example, the area TE capability is enabled, the Opaque capability cannot be disabled.
Example
# Enable Opaque capability.
[3Com-ospf-100] opaque-capability enable
3.1.33 ospf
Syntax
ospf [ process-id [ [ router-id router-id ] vpn-instance vpn-instance-name ] ] undo ospf [ process-id ]
View
System view
Parameter
process-id: Number of OSPF. If no process number is specified, the default number 1 is used. router-id: Router ID employed by the OSPF process, in dotted decimal notation. vpn-instance-name: Name of the VPN instance bound with the OSPF process.
Description
Use the ospf command to enable the OSPF protocol. Use the undo ospf command to disable the OSPF protocol. By default, the system does not run the OSPF protocol. By specifying different process IDs, you can run multiple OSPF processes on the same router. In this case, you are recommended to use router-id to specify different Router IDs for those processes. After enabling OSPF protocol, the user can make the corresponding configuration in OSPF view. If you use OSPF as the VPN interior routing protocol of the MPLS VPN solution, the OSPF process must be bound with the VPN instance. For more details refer to the VPN section in this manual. Related command: network.
Example
# Enable the OSPF protocol.
[3Com] router id 10.110.1.8 [3Com] ospf [3Com-ospf-1]
# Enable OSPF process 120.

[3Com] router id 10.110.1.8

[3Com] ospf 120 [3Com-ospf-120]
3.1.34 ospf authentication-mode

Syntax
ospf authentication-mode { simple password | md5 key-id key } undo ospf authentication-mode { simple | md5 }
View
Interface view
Parameter
simple password: Character string not exceeding 8 characters using simple text authentication. key-id: ID of the authentication key in MD5 cipher text authentication mode in the range from 1 to 255. key: MD5 authentication key. If it is input in a simple form, MD5 key is a character string of 1 to 16 characters. And it will be displayed in a cipher text form in a length of 24 characters when display current-configuration command is executed. Inputting the 24-character MD5 key in a cipher text form is also supported.
Description
Use the ospf authentication-mode command to configure the authentication mode and key between adjacent routers. Use the undo ospf authentication-mode command to cancel the authentication key that has been set. By default, the interface does not authenticate the OSPF packets. The passwords for authentication keys of the routers on the same network segment must be identical. In addition, use the authentication-mode command to set the authentication type of the area authentication key so as to validate the configuration. Related command: authentication-mode.
Example
# Set the area 1 where the network segment 131.119.0.0 of Interface serial1/0/0 is located to support MD5 cipher text authentication. The authentication key identifier is set to 15 and the authentication key is 3Com.

[3Com-ospf-1-area-0.0.0.1] network 131.119.0.0 0.0.255.255 [3Com-ospf-1-area-0.0.0.1] authentication-mode md5 [3Com-ospf-1-area-0.0.0.1] interface serial 1/0/0 [3Com-Serial1/0/0] ospf authentication-mode md5 15 3Com
3.1.35 ospf cost

Syntax
ospf cost value undo ospf cost
View
Interface view
Parameter
value: Cost for running OSPF protocol, ranging from 1 to 65535.
Description
Use the ospf cost command to configure different packet sending costs so as to send packets from different interfaces. Use the undo ospf cost command to restore the default costs. By default, the interface automatically calculates the costs required for running OSPF protocol according to the current Baud rate.
Example
# Specify the cost spent when an interface runs OSPF as 33.
[3Com] interface serial1/0/0 [3Com-Serial1/0/0] ospf cost 33
3.1.36 ospf dr-priority

Syntax
ospf dr-priority value undo ospf dr-priority
View
Interface view
Parameter
value: Interface priority for electing the "designated router", ranging from 0 to 255. By default, the value is 1.
Description
Use the ospf dr-priority command to configure the priority for electing the "designated router" on an interface. Use the undo ospf dr-priority command to restore the default value. Interface priority determines the interface qualification when electing the designated router. The interface with high priority is considered first when there is collision in election.
Example
# Set the priority of the interface Ethernet1/0/0 to 8, when electing the DR.
[3Com] interface Ethernet1/0/0 [3Com-Ethernet1/0/0] ospf dr-priority 8
3.1.37 ospf mib-binding

Syntax
ospf mib-binding process-id undo ospf mib-binding
View
System view
Parameter
process-id: Number of OSPF process.
Description
Use the ospf mib-binding command, MIB operation can be bound on the specified OSPF process. Use the undo ospf mib-binding command to restore the default configuration. MIB operation is always bound on the first process enabled by OSPF protocol. Using this command, MIB operation can be bound on other OSPF processes. Use the undo ospf mib-binding command to cancel the binding configuration. MIB operation is rebound automatically by OSPF protocol on the first enabled process. By default, MIB operation is bound on the first enabled OSPF process.
Example
# Bind MIB operation on OSPF process 100.
[3Com] ospf mib-binding 100
# Cancel MIB operation binding

[3Com] undo ospf mib-binding
3.1.38 ospf mtu-enable

Syntax
ospf mtu-enable undo ospf mtu-enable
View
Interface view
Parameter
None
Description
Use the ospf mtu-enable command to enable the interface to write an MTU value when sending DD packets. Use the undo ospf mtu-enable command to restore the default settings. By default, the MTU value is 0 when sending DD packets, i.e. the actual MTU value of the interface is not written. Database Description Packets (DD packets) are used to describe its own LSDB when the router running OSPF protocol is synchronizing the database. The default MTU value of DD packet is 0. With this command, the specified interface can be set manually to write the MTU value area in DD packets when sending DD packets, i.e. the actual MTU value of the interface is written in.
Example
# Set interface Ethernet1/0/0 to write MTU value area when sending DD packets.
[3Com] interface Ethernet1/0/0 [3Com-Ethernet1/0/0] ospf mtu-enable
3.1.39 ospf network-type

Syntax
ospf network-type { broadcast | nbma | p2mp | p2p } undo ospf network-type
View
Interface view
Parameter
broadcast: Changes the interface network type to broadcast. nbma: Changes the interface network type to Non-Broadcast Multicast Access. p2mp: Changes the interface network type to point-to-multipoint. p2p: Changes the interface network type to point-to-point.
Description
Use the ospf network-type command to configure the network type of the OSPF interface. Use the undo ospf network-type command to restore the default network type of the OSPF interface. OSPF divides networks into four types by link layer protocol: Broadcast: If Ethernet is adopted, OSFP defaults the network type to broadcast. Non-Broadcast Multi-access (nbma): If Frame Relay, ATM, HDLC or X.25 is adopted, OSPF defaults the network type to NBMA. Point-to-Multipoint (p2mp): OSPF will not default the network type of any link layer protocol to p2mp. The general undertaking is to change a partially connected NBMA network to p2mp network if the NBMA network is not fully-meshed. Point-to-point (p2p): If PPP or LAPB is adopted, OSPF defaults the network type to p2p. If there is a router not supporting multicast address on the broadcast network, the interface network type can be changed to NBMA. The interface network type can also be changed from NBMA to broadcast. A network that can be called a NBMA network or can be changed to a broadcast network should satisfy the following condition: there is a virtual circuit directly connecting any two routers on the network. In other words, the network is full-meshed. If the network cannot satisfy this condition, the interface network type must be changed to point-to-multipoint. In this way, these two routers can exchange routing information via a router directly connected with the two routers.
If there are only two routers running OSPF protocol on the same network segment, the interface network type can be changed to point-to-point. Note that when the network type of an interface is NBMA or it is changed to NBMA manually, the peer command must be used to configure the neighboring point. Related command: ospf dr-priority.
Example
# Set the interface serial1/0/0 to NBMA type.
[3Com] interface serial1/0/0 [3Com-serial1/0/0] ospf network-type nbma
3.1.40 ospf timer dead

Syntax
ospf timer dead seconds undo ospf timer dead
View
Interface view
Parameter
seconds: Dead interval of the OSPF neighbor. It is in second and ranges from 1 to 65535.
Description
Use the ospf timer dead command to configure the dead interval of the OSPF neighbor. Use the undo ospf timer dead command to restore the default value of the dead interval of the neighbor. By default, the dead interval for the OSPF neighbors of p2p and broadcast interfaces is 40 seconds, and for those of p2mp and nbma interfaces is 120 seconds. The dead interval of OSPF neighbors means that within this interval, if no Hello message is received from the neighbor, the neighbor will be considered to be invalid. The value of dead seconds should be at least 4 times of that of the Hello seconds. The dead seconds for the routers on the same network segment must be identical. Related command: ospf timer hello.
Example
# Set the neighbor dead interval on the interface serial1/0/0 to 80 seconds.

[3Com] interface serial1/0/0 [3Com-serial1/0/0] ospf timer dead 80
3.1.41 ospf timer hello

Syntax
ospf timer hello seconds undo ospf timer hello
View
Interface view
Parameter
seconds: Interval in seconds for an interface to transmit hello message. It ranges from 1 to 255.
Description
Use the ospf timer hello command to configure the interval for transmitting Hello messages on an interface. Use the undo ospf timer hello command to restore the default value. By default, the interval is 10 seconds for an interface of p2p or broadcast type to transmit Hello messages, and 30 seconds for an interface of nbma or p2mp type. Related command: ospf timer dead.
Example
# Configure the interval of transmitting Hello packets on the interface serial1/0/0 to 20 seconds.
[3Com] interface serial1/0/0 [3Com-serial1/0/0] ospf timer hello 20
3.1.42 ospf timer poll

Syntax
ospf timer poll seconds undo ospf timer poll
View
Interface view
Parameter
seconds: Specifies the poll Hello messages interval, ranging from 1 to 65535 and measured in seconds. By default, the value is 120 seconds.
Description
Use the ospf timer poll command to configure the poll Hello message interval on nbma and p2mp network. Use the undo ospf timer poll command to restore the default value. On the nbma and p2mp network, if a neighbor is invalid, the Hello message will be transmitted regularly according to the poll seconds. You can configure the poll seconds to specify how often the interface transmits Hello messages before it establishes adjacency with the adjacent router. The value of poll seconds should be no less than 3 times of that of Hello seconds.
Example
# Configure to transmit poll Hello message from interface serial2/0/0 every 130 seconds.
[3Com-serial2/0/0] ospf timer poll 130
3.1.43 ospf timer retransmit

Syntax
ospf timer retransmit interval undo ospf timer retransmit
View
Interface view
Parameter
interval: Interval in seconds for re-transmitting LSA on an interface. It ranges from 1 to 65535.The default value is 5 seconds.
Description
Use the ospf timer retransmit command to configure the interval for LSA re-transmitting on an interface.
Use the undo ospf timer retransmit command to restore the default interval value for LSA re-transmitting on the interface. If a router running OSPF transmits a "link state advertisement"(LSA) to the peer, it needs to wait for the acknowledgement packet from the peer. If no acknowledgement is received from the peer within the LSA retransmission, this LSA will be re-transmitted. According to RFC2328, the LSA retransmission between adjacent routers should not be set too short. Otherwise, it will cause unexpected retransmission.
Example
# Specify the retransmission for LSA transmitting between the interface serial1/0/0 and the adjacent routers to 12 seconds.
[3Com] interface serial1/0/0 [3Com-serial1/0/0] ospf timer retransmit 12
3.1.44 ospf trans-delay

Syntax
ospf trans-delay seconds undo ospf trans-delay
View
Interface view
Parameter
seconds: Transmitting delay of LSA on an interface. It is in seconds and ranges from 1 to 3600. By default, the value is 1 second.
Description
Use the ospf trans-delay command to configure the LSA transmitting delay on an interface. Use the undo ospf trans-delay command to restore the default value of the LSA transmitting delay on an interface. LSA will age in the "link state database" (LSDB) of the router as time goes by (add 1 for every second), but it will not age during network transmission. Therefore, it is necessary to add a period of time set by this command to the aging time of LSA before transmitting it.
Example
# Specify the trans-delay of transmitting LSA on the interface serial1/0/0 as 3 seconds.

[3Com] interface serial1/0/0 [3Com-serial1/0/0] ospf trans-delay 3
3.1.45 peer
Syntax
peer ip-address [ dr-priority dr-priority-number ] undo peer ip-address
View
OSPF view
Parameter
ip-address: IP address of the neighboring point. dr-priority-number: Represents the corresponding value of the network neighbor priority, being an integer ranging from 0 to 255. The default value is 1.
Description
Use the peer command to configure the IP address of adjacent routers and specify a DR priority on an NBMA network. Use the undo peer command to cancel the configuration. On the frame relay network, a full-meshed network (i.e. there is a VC directly connecting any two routers on the network) can be implemented by configuring map. Thus OSPF can perform the same way in the frame relay network as in the broadcast network (such as electing DR and BDR). However, the IP address of adjacent routers and their election rights must be configured manually for the interface because adjacent routers cannot be found dynamically by advertising Hello messages.
Example
# Configure the IP address of peer router as 10.1.1.1.
[3Com-ospf-1] peer 10.1.1.1
3.1.46 preference
Syntax
preference [ ase ] value undo preference [ ase ]
View
OSPF view
Parameter
value: OSPF protocol route preference, ranging from 1 to 255. ase: Preference of an redistributed external route of the AS.
Description
Use the preference command to configure the preference of an OSPF protocol route. Use the undo preference command to restore the default value of the OSPF protocol route. By default, the preference of an OSPF protocol internal route is 10 and the preference of an external route is 150. Because multiple dynamic routing protocols could be running on a router, there is the problem of routing information sharing among routing protocols and selection. Therefore, a default preference is specified for each routing protocol. When multiple routes to the same destination are found by different routing protocols, the route found by high preference routing protocol will be selected to forward IP packets.
Example
# Specify the preference of an external redistributed route of the AS as 160.
[3Com-ospf-1] preference ase 160
3.1.47 reset ospf

Syntax
reset ospf [ statistics ] { all | process-id }
View
User view
Parameter
statistics: Resets statistics of the OSPF process. process-id: OSPF process number. If no OSPF process number is specified, all the OSPF processes should be reset. all: Resets all the OSPF processes.
Description
Use the reset ospf all command to reset all the OSPF processes. Use the parameter of statistics to reset statistics about OSPF. The reset ospf process-id command can be used to reset the specified process and clear statistics data. Use the parameter of statistics to reset statistics about OSPF. Use the reset ospf command to reset the OSPF process, the following results are expected: Clear invalid LSA immediately without waiting for LSA timeout. If the Router ID changes, a new Router ID will take effect by executing the command. Re-elect DR and BDR conveniently. OSPF configuration will not be lost if the system is restarted. Delete the original OSPF routes. After OSPF process is restarted, new routes and LSA will be generated correspondingly and LSA will be advertised. The system will require the user to confirm whether to re-enable the OSPF protocol after execution of the command.
Example
# Reset all the OSPF processes
<3Com> reset ospf all
# Reset the OSPF process 200

<3Com> reset ospf 200
3.1.48 router id
Syntax
router id router-id undo router id
View
System view
Parameter
router-id: Router ID that is a 32-bit unsigned integer.
Description
Use the router id command to configure the ID of a router running the OSPF protocol.
Use the undo router id command to cancel the router ID that has been configured. By default, no router ID is configured. Router ID is a 32-bit unsigned integer that uniquely identifies a router in an OSPF autonomous system. If the router ID is not specified, the router will automatically choose a largest one from the IP addresses of a configured interface as its own ID. If none of the interfaces is configured with an IP address, then you must configure the router ID in system view, otherwise, the OSPF cannot be operated. When the router ID is configured manually, the IDs of any two routers cannot be identical in the autonomous system. It is recommended that you choose the IP address of the loopback interface as the router ID, because the interface is always up unless you shut it down manually.
Note: The modified router ID will not be valid unless OSPF is re-enabled. The router ID configured using the router id command takes effect only on the OSPF on public networks.
Related command: ospf.
Example
# Set the router ID to 10.1.1.3.
[3Com] router id 10.1.1.3
3.1.49 silent-interface
Syntax
silent-interface interface-type interface-number undo silent-interface interface-type interface-number
View
OSPF view
Parameter
interface-type: Specifies the interface type interface-number: Specifies the interface number.
Description
Use the silent-interface command to disable an interface to transmit an OSPF packet. Use the undo silent-interface command to restore the default setting. By default, the interface is enabled to transmit OSPF packets. You can use this command to disable an interface from transmiting OSPF packets, so as to prevent the router on another network from receiving the OSPF routing information. Different processes can disable the same interface from transmiting OSPF packets. The silent-interface command only takes effect on the interface enabled with OSPF by this process, and is invalid for the interface enabled by other processes.
Example
# Disable interface serial2/0/0 to transmit OSPF packet.
[3Com-ospf-1] silent-interface serial2/0/0
# Disable interface Ethernet2/0/0 to transmit OSPF packet in both OSPF process 100 and OSPF process 200.
[3Com] router id 10.110.1.9 [3Com] ospf 100 [3Com-ospf-100] silent-interface ethernet 2/0/0 [3Com-ospf-100] quit [3Com] router id 20.18.0.7 [3Com] ospf 200 [3Com-ospf-200] silent-interface ethernet 2/0/0
3.1.50 snmp-agent trap enable ospf

Syntax
snmp-agent trap enable ospf [ process-id ] [ trap-type ] undo snmp-agent trap enable ospf [ process-id ] [ trap-type ]
View
System view
Parameter
process-id: OSPF process number. If no OSPF process number is specified, this command is valid for all the current OSPF processes.
trap-type: Type of SNMP TRAP packet transmitted by OSPF. It can be the keyword in the following table. Table 3-1 SNMP TRAP type keywords Keywords ifauthfail ifcfgerror ifrxbadpkt ifstatechange iftxretransmit lsdbapproachoverf low lsdboverflow maxagelsa nbrstatechange originatelsa virifauthfail virifcfgerror virifrxbadpkt virifstatechange viriftxretransmit virnbrstatechange Description Enables the InterfaceAuthenticationFailure trap packets Enables the InterfaceConfigError trap packets Enables the InterfaceRecieveBadPacket trap packets Enables the InterfaceStateChange trap packets Enables the InterfaceTxRetransmitPacket trap packets Enables the LsdbApproachOverflow trap packets Enables the LsdbOverflow trap packets Enables the MaxAgeLsa trap packets Enables the NeighborStateChange trap packets Enables the OriginateLsa trap packets Enables packets the VirtualInterfaceAuthenticationFailure trap
Enables the VirtualInterfaceConfigError trap packets Enables the VirtualInterfaceRecieveBadPacket trap packets Enables the VirtualInterfaceStateChange trap packets Enables the VirtualInterfaceTxRetransmitPacket trap packets Enables the VirtualNeighborStateChange trap packets
Description
Use the snmp-agent trap enable ospf command to enable the TRAP function of OSPF. Use the undo snmp-agent trap enable ospf command to disable the TRAP function. This command does not take effect on the OSPF process enabled after its execution. By default, no OSPF process is enabled to transmit TRAP packets. For the detailed configuration of SNMP TRAP refer to the system management section in this manual.
Example
# Enable TRAP function of OSPF process 100.
<3Com> snmp-agent trap enable ospf 100
3.1.51 spf-schedule-interval
Syntax
spf-schedule-interval interval undo spf-schedule-interval
View
OSPF view
Parameter
Interval: SPF calculation interval of OSPF, which is in seconds in the range of 1 to 10. The default value is 5 seconds.
Description
Use the spf-schedule-interval command to configure the route calculation interval of OSPF. Use the undo spf-schedule-interval command to restore the default setting. According to the Link State Database (LSDB), the router running OSPF can calculate the shortest path tree, taking itself as the root, and determine the next hop to the destination network according to the shortest path tree. By adjusting SPF calculation interval, frequent network changes can be restrained, which may lead to too many bandwidth resources and router resources being used.
Example
# Set the OSPF route calculation interval of 3Com to 6 seconds.
[3Com-ospf-1] spf-schedule-interval 6
3.1.52 stub
Syntax
stub [ no-summary ] undo stub
View
OSPF area view
Parameter
no-summary: Only available for the ABR in Stub area. When this parameter is selected, the ABR only advertises the Summary-LSA for the default route, but no other Summary-LSAs. The area is also called totally stub area.
Description
Use the stub command to configure the type of an OSPF area as the STUB area. Use the undo stub command to cancel the settings. By default, no area is set to be the STUB area. All the routers in a Stub area must be configured with the corresponding attribute. Related command: default-cost.
Example
# Set the type of OSPF area 1 to the STUB area.
[3Com-ospf] area 1 [3Com-ospf-area-0.0.0.1] stub
3.1.53 vlink-peer
Syntax
vlink-peer router-id [ hello seconds] [ retransmit seconds ] [ trans-delay seconds ] [ dead seconds ] [ simple password | md5 keyid key ] undo vlink-peer router-id
View
OSPF area view
Parameter
router-id: Router ID of virtual link neighbor. hello seconds: Interval that router transmits hello message. It ranges from 1 to 8192 seconds. This value must equal the hello seconds value of the router virtually linked to the interface. By default, the value is 10 seconds, retransmit seconds: Specifes the interval for re-transmitting the LSA packets on an interface. It ranges from 1 to 8192 seconds. By default, the value is 5 seconds.
trans-delay seconds: Specifes the interval for delaying transmitting LSA packets on an interface. It ranges from 1 to 8192 seconds. By default, the value is 1 second. dead seconds: Specifies the interval of death timer. It ranges from 1 to 8192 seconds. This value must equal the dead seconds of the router virtually linked to it and must be at least 4 times of the hello seconds. By default, the value is 40 seconds. simple password: Specifies the simple text authentication key, not exceeding 8 characters, of the interface. This value must equal the authentication key of the virtually linked neighbor. keyid: Specifies the MD5 authentication key ID. Its value ranges from 1 to 255. It must be equal to the authentication key ID of the virtually linked neighbor. key: Specifies the authentication key on an interface. It is a character string not exceeding 16 characters. This value must equal the authentication key of the virtually linked neighbor. The key will be displayed in a cipher text form in a length of 24 characters when display current-configuration command is executed. Inputting the key in a cipher text form with 24 characters long is also supported.
Description
Use the vlink-peer command to create and configure a virtual link. Use the undo vlink-peer command to cancel an existing virtual link. According to RFC2328, the OSPF area should be connected with the backbone network. You can use vlink-peer command to keep the connectivity. Virtual link can somewhat be regarded as a common ospf enabled interface so that you can understand how to configure the parameters such as hello, retransmit, and trans-delay on it. One thing should be mentioned. When configuring virtual link authentication, the authentication-mode command is used to set the authentication mode as MD5 cipher text or simple text on the backbone network. Related command: authentication-mode, and display ospf.
Example
# Create a virtual link to 10.110.0.3 and use the MD5 cipher text authentication mode.
[3Com-ospf] area 1 [3Com-ospf-area-1] vlink-peer 10.110.0.3 md5 3 345
Chapter 4 Integrated IS-IS Configuration Commands

4.1 Integrated IS-IS Configuration Commands
4.1.1 area-authentication-mode
Syntax
area-authentication-mode { simple | md5 } password [ ip | osi ] undo area-authentication-mode { simple | md5 } [ ip | osi ]
View
IS-IS view
Parameter
simple: Transmits the password in simple text. md5: Transmits the password encrypted with MD5. password: Specifies the password to be configured, in the range of 1~24 bits. ip: Specifies the IP authentication password. osi: Specifies the OSI authentication password. The configuration of ip or osi authentication password is independent of the real network environment.
Description
Use the area-authentication-mode command to configure IS-IS to authenticate the received Level-1 routing information packets (LSP, CSNP and PSNP), according to the pre-defined mode and password. Use the undo area-authentication-mode command to configure IS-IS not to authenticate the said packets. In default configuration, the system will not authenticate the received Level-1 routing information packets, and there is no password. By using this command, you can clear all the Level-1 routing packets whose area authentication passwords are not consistent with the one set via this command. At the same time, this command will let IS-IS insert the area authentication password into all the Level-1 routing packets sent by this node, in a certain mode.
Related
command:
reset
isis
all,
domain-authentication-mode,
and
isis
authentication-mode.
Example
# Set the area authentication password as "hello" and the authentication type as simple.
[3Com] isis [3Com-isis] area-authentication-mode simple hello
4.1.2 cost-style
Syntax
cost-style { narrow | wide | compatible [ relax-spf-limit ] | narrow-compatible [ relax-spf-limit ] | wide-compatible }
View
IS-IS view
Parameter
narrow: Only receives/sends packets whose cost type is narrow. wide: Only receives/sends packets whose cost type is wide. compatible: Receives/sends packets whose cost type is narrow or wide. narrow-compatible: Receives packets whose cost type is narrow or wide, but only send packets whose cost type is narrow. wide-compatible: Receives packets whose cost type is narrow or wide, but only send packets whose cost type is wide. relax-spf-metric: Permits to receive routes whose cost value is larger than 1024. If this item is not set, the route whose metrics value is larger than 1024 will be discarded.
Description
Use the cost-style command to set the cost type of an IS-IS packet received/sent by the router. Use the undo cost-style command to restore the default setting. By default, IS-IS only receives/sends packets whose cost type is narrow. Related command: isis cost.
Example
# Set IS-IS to receive packets whose cost type is narrow or wide, but only send packets whose cost type is narrow.
[3Com] isis [3Com-isis] cost-style narrow-compatible
4.1.3 debugging isis

Syntax
debugging isis { adjacency | all | authentication-error | checksum-error | circuit-information | configuration-error | | datalink-receiving-packet | sending-packet-content | | datalink-sending-packet | general-error | interface-information | memory-allocating | receiving-packet-content self-originate-update snp-packet | spf-event | spf-summary | spf-timer | task-error | timer | update-packet } undo debugging isis { adjacency | all | authentication-error | checksum-error | circuit-information | configuration-error | | datalink-receiving-packet | sending-packet-content | | datalink-sending-packet | general-error | interface-information | memory-allocating | receiving-packet-content self-originate-update snp-packet | spf-event | spf-summary | spf-timer | task-error | timer | update-packet }
View
User view
Parameter
adjacency: IS-IS adjacency related packets. all: All IS-IS related debugging information. authentication-error: IS-IS authentication errors. checksum-error: IS-IS checksum errors. circuit-information: Information about IS-IS enabled interface. configuration-error: IS-IS configuration errors. datalink-receiving-packet: Data link layer's packets-receiving status. datalink-sending-packet: Data link layer's packets-sending status. general-error: IS-IS error information. interface-information: Information about IS-IS enabled data link layer. memory-allocating: IS-IS memory allocating status.
receiving-packet-content: Packets received through IS-IS protocol. self-originate-update: Packets locally updated through IS-IS protocol. sending-packet-content: Packets sent through IS-IS protocol. snp-packet: CSNP/PSNP packet of IS-IS. spf-event: IS-IS SPF events. spf-summary: Statistics about IS-IS performing SPF calculation. spf-timer: IS-IS SPF trigger events. task-error: IS-IS events status. timer: IS-IS timer. update-packet: Updated packets through IS-IS protocol.
Description
Use the debugging isis command to enable IS-IS debugging. Use the undo debugging isis command to disable the function.
Example
# Enable all the information debugging of IS-IS.
<3Com> debugging isis all
4.1.4 default-route-advertise
Syntax
default-route-advertise [ route-policy [ route-policy-name ] ] undo default-route-advertise [ route-policy [ route-policy-name ] ]
View
IS-IS view
Parameter
route-policy-name: Name of the specified route-policy.
Description
Use the default-route-advertise command to configure the default route of Level-1 and Level-2 routers. Use the undo default-route-advertise command to cancel this configuration.
By default, Level-2 router generates the default route. This command can be set on a Level-1 router or Level-2 router. The default route is generated on L2 LSP. If apply isis level-1 is set in route-policy view, the default route will be generated on L1 LSP. If apply isis level-2 command is used in route-policy view, the default route will be generated on L2 LSP. If apply isis level-1-2 is set in route-policy view, the default route will be generated on both L1 LSP and L2 LSP.
Example
# Set the current router to generate the default route on the LSP of corresponding level.
[3Com-isis] default-route-advertise
4.1.5 display isis brief

Syntax
display isis brief
View
Any view
Parameter
None
Description
Use the display isis brief command to view the brief information of IS-IS.
Example
# View the brief information of IS-IS.
<Router>display isis brief ISIS zq Protocol Brief Information :
network-entity:
01.bbbb.bbbb.bbbb.00
is-level :Level-12 cost-style: preference : Timers: spf-delay-interval : spf-slice-size: lsp-max-age: 0 5000 wide 15
1200

lsp-refresh: 900
Interval between SPFs:
level-1 10 level-2 10
4.1.6 display isis interface

Syntax
display isis interface [ verbose ]
View
Any view
Parameter
verbose: If this parameter is used, the details of the interface will be displayed.
Description
Use the display isis interface command to view the information of the IS-IS enabled interface. This command views the information of the IS-IS enabled interface, including interface name, IP address, link state of the interface and so on. Besides displaying all the information shown by the display isis interface command, the display isis interface verbose command displays information about the IS-IS parameters of the interface such as CSNP packet broadcast interval, Hello message broadcast interval and number of invalid Hello messages.
Example
# Display the information about the IS-IS enabled interface.
<3Com> display isis interface Interface Ethernet1/0/0 IP Address 2.1.1.12 Id 001 Link.Sta Up IP.Sta Up MTU 1497 Type L12 DIS No/No
# Display the details of the IS-IS enabled interface.

<3Com> display isis interface verbose Interface Ethernet1/0/0 IP Address 2.1.1.12 Id 001 Link.Sta Up IP.Sta Up MTU 1497 Type L12 DIS No/No
Secondary IP Address(es) : Csnp-Interval Hello-Interval Hold Time : : : L1 L1 L1 10 10 30 L2 L2 L2 10 10 30

Lsp Interval Cost Priority Retransmit Interval : : :

: L1 L1 5 10 64 1 L2 L2 10 64
4.1.7 display isis lsdb

Syntax
display isis lsdb [ l1 ] [ l2 ] [ level-1 ] [ level-2 ] [ local ] [ verbose ] [ LSPID ]
View
Any view
Parameter
l1 and Level-1: Both refer to the link state database of Level-1. l2 and level-2: Both refer to the link state database of Level-2. local: Displays the Contents of the Local LSP Database verbose: Displays the verbose information of the link state database. LSPID: Specifies the LSPID of the network-entity-title.
Description
Use the display isis lsdb command to view the link state database of the IS-IS.
Example
# Display the output information of display isis lsdb command.
<3Com> display isis lsdb Lsp ID 1111.1111.1011.00-00 Sequence Holdtime 0x00000002 658 0_0_0 A_P_O Checksum 0x0b5e
4.1.8 display isis mesh-group

Syntax
display isis mesh-group
View
Any view
Parameter
None
Description
Use the display isis mesh-group command to view the IS-IS mesh group. This command is used for displaying the configurations of the mesh-group of the current router interface.
Example
# Add Interface serial1/0/0 and Interface serial2/0/0 running IS-IS into mesh group 100.
[3Com-Serial1/0/0] isis mesh-group 100 [3Com-Serial1/0/0] interface Interface serial2/0/0 [3Com-Serial2/0/0] isis mesh-group 100
# Display the information of IS-IS mesh-group.

[3Com-serial2/0/0] display isis mesh-group Serial1/0/0 Serial2/0/0 100 100
4.1.9 display isis peer

Syntax
display isis peer [ verbose ]
View
Any view
Parameter
verbose: When this parameter is configured, the area address carried in the Hello message from the peer will be displayed. Otherwise, only the summary information will be displayed.
Description
Use the display isis peer command to view IS-IS peer information. The display isis peer verbose command yields not only all the outputs of the display isis peer command, but also the area address, Up time and IP address of the directly connected interface of the peer.
Example
# Display the output information of the display isis peer command.
<3Com> display isis peer System ID Interface Circuit ID State HoldTime 8s 7s Type L2 L2 Pri 64 6
1111.1111.1031 Ethernet3/0/0 1111.1111.1011 Ethernet3/0/1
1111.1111.1031.01 Up 1111.1111.1011.01 Up
4.1.10 display isis routing

Syntax
display isis routing
View
Any view
Parameter
None
Description
Use the display isis routing command to view IS-IS routing information.
Example
# View the output information of display isis routing command.
<3Com> display isis routing ISIS Level - 1 Forwarding Table :
Type - D -Direct, C -Connected, I -ISIS, S -Static, O -OSPF B -BGP, R -RIP
Flags: R-Added to RM, L-Advertised in LSPs, U-Up/Down Bit Set
Destination/Mask
In.Met
Ex.Met NextHop
Interface
Flags
---------------------------------------------------------------------------D 4.0.0.0/8 I 55.55.0.0/16 10 20 NULL NULL Direct 4.0.0.2 3.0.0.2 I 0.0.0.0/0 10 NULL 4.0.0.2 3.0.0.2 Ethernet2/0/0 Ethernet2/0/0 Ethernet1/0/0 Ethernet2/0/0 Ethernet1/0/0 R/-/R/L/R/L/-
ISIS Level - 2 Forwarding Table : Type - D -Direct, C -Connected, I -ISIS, S -Static, O -OSPF B -BGP, R -RIP
Flags: R-Added to RM, L-Advertised in LSPs, U-Up/Down Bit Set
Destination/Mask
In.Met
Ex.Met NextHop
Interface
Flags
---------------------------------------------------------------------------D 4.0.0.0/8 D 99.99.0.0/16 10 10 NULL NULL Direct Direct Ethernet2/0/0 LoopBack3 R/L/R/L/-
4.1.11 display isis spf-log

Syntax
display isis spf-log
View
Any view
Parameter
None
Description
Use the display isis spf-log command to view the SPF calculation log of the IS-IS.
Example
# View the output information of display isis spf-log command.
<3Com> display isis spf-log Details of Level 1 SPF Run: ------------------------------Trig.Event IS_SPFTRIG_ADJDOWN IS_SPFTRIG_NEWADJ IS_SPFTRIG_LSPCHANGE IS_SPFTRIG_PERIODIC IS_SPFTRIG_PERIODIC IS_SPFTRIG_CIRC_UP IS_SPFTRIG_CIRC_UP No.Of Nodes 2 3 3 2 2 3 3 Duration(ms) StartTime 0 0 0 0 0 0 0 23:10:54 23:10:54 23:10:54 23:10:37 23:10:52 23:10:53 23:10:53

IS_SPFTRIG_LSPCHANGE 3

0 23:10:53
Details of Level 2 SPF Run: ------------------------------Trig.Event IS_SPFTRIG_NEWADJ IS_SPFTRIG_LSPCHANGE IS_SPFTRIG_PERIODIC IS_SPFTRIG_PERIODIC IS_SPFTRIG_PERIODIC IS_SPFTRIG_CIRC_UP IS_SPFTRIG_LSPCHANGE IS_SPFTRIG_CIRC_UP IS_SPFTRIG_LSPCHANGE IS_SPFTRIG_LSPCHANGE IS_SPFTRIG_ADJDOWN IS_SPFTRIG_ADJDOWN No.Of Nodes 4 4 4 4 4 5 5 7 7 7 4 4 Duration(ms) StartTime 0 0 0 0 0 0 0 0 0 0 0 0 23:10:54 23:10:54 23:10:37 23:10:52 23:10:52 23:10:53 23:10:53 23:10:53 23:10:53 23:10:53 23:10:54 23:10:54
4.1.12 domain-authentication-mode
Syntax
domain-authentication-mode { simple | md5 } password [ ip | osi ] undo domain-authentication-mode { simple | md5 } [ ip | osi ]
View
IS-IS view
Parameter
simple: Transmits the password in simple text. md5: Transmits the password in MD5 encryption. password: Specifies the password to be configured. ip: Specifies the IP authentication password. osi: Specifies the OSI authentication password. The configuration of ip or osi authentication password is independent of the real network environment.
Description
Use the domain-authentication-mode command to configure IS-IS route area to authenticate the received Level-2 routing packets (LSP, CSNP, PSNP), according to the pre-defined mode and password. Use the undo domain-authentication-mode command to configure IS-IS not to authenticate the said packets. In default configuration, the system will not authenticate the received Level-2 routing packets, and there is no password. By using this command, you can discard all the Layer 2 routing packets whose area authentication passwords do not consist with the one set via this command. At the same time, this command will let IS-IS insert the area authentication password into all the Layer 2 routing packets sent by this node, in a certain mode. Related command: area-authentication-mode and isis authentication-mode.
Example
# When you need to authenticate the layer 2 routing packets, you can select the simple mode, and the password is "3Com".
[3Com] isis [3Com-isis] domain-authentication-mode simple 3Com

Syntax
filter-policy acl-number export [ protocol ] undo filter-policy acl-number export [ protocol ]
View
IS-IS view
Parameter
acl-number: Specifies the number of the access control list, ranging from 2000 to 3999. protocol: Specifies the protocols that distribute routing information, including direct, static, rip, bgp, ospf, ospf-nssa and ospf-ase at present. Without this parameter all the distributed routes will be filtered.
Description
Use the filter-policy export command to configure to filter the routes distributed by IS-IS. Use the undo filter-policy export command to cancel filtering for the exporting routes.
By default, IS-IS does not filter any distributed routing information. In some cases, it may be required that only the routing information meeting some conditions can be advertised. Then, the filter-policy command can be used to set the filtering conditions for the routing information to be advertised. Only the routing information passing the filtering can be advertised. Related command: filter-policy import.
Example
# Use acl 2006 to filter the routes distributed by IS-IS.
[3Com-isis] filter-policy 2006 export

Syntax
filter-policy acl-number import undo filter-policy acl-number import
View
IS-IS view
Parameter
acl-number: Specifies the number of the access control list, ranging from 2000 to 2999.
Description
Use the filter-policy import command to configure to filter the routes received by IS-IS. Use the undo filter-policy import command to configure not to filter the received routes. By default, IS-IS does not filter the received routing information. In some cases, only the routing information meeting the specified conditions will be accepted. You can configure the filter-policy to specify the filter conditions so as to accept the desired routing information only. Related command: filter-policy export.
Example
# Filter the received routes by using acl 2003.
[3Com-isis] filter-policy 2003 import
4.1.15 ignore-lsp-checksum-error
Syntax
ignore-lsp-checksum-error undo ignore-lsp-checksum-error
View
IS-IS view
Parameter
None
Description
Use the ignore-lsp-checksum-error command to configure IS-IS to ignore the checksum error of LSP. Use the undo ignore-lsp-checksum-error command to configure IS-IS not to ignore the checksum error of LSP. By default, the checksum error of LSP is not ignored. After receiving a LSP packet, the local IS-IS will calculate its checksum and compare the result with the checksum in the LSP packet. This process is the checksum authentication over the received LSP. By default, if the checksum in the packet is found not in consistency with the calculated result, the LSP will be discarded without being processed. Moreover, if ignoring checksum error is set with the ignore-lsp-checksum-error command, the packet will be processed as a normal one even if a checksum error is found.
Example
# Configure to ignore the checksum error of LSP.
[3Com-isis] ignore-lsp-checksum-error
4.1.16 import-route
Syntax
import-route protocol [ allow-ibgp ] [ cost value ] [ type { external | internal } ] [ level-1 ] [ level-1-2 ] [ level-2 ] [ route-policy route-policy-name ] undo import-route protocol [ cost value ] [ type { external | internal } ] [ level-1 ] [ level-1-2 ] [ level-2 ] [ route-policy route-policy-name ]
View
IS-IS view
Parameter
protocol: Specifies source routing protocols which can be redistributed, including direct, bgp, ospf, ospf-nssa , ospf-ase, rip and static at present. allow-ibgp: Optional when the protocol argument is set to BGP. Whereas the import-route bgp command redistributes only EBGP routes, the import-route bgp allow-ibgp command redistributes IBGP routes in addition and as such, must be used with cautions. cost value: Specifies the route cost of the redistributed route, ranging from 0 to 63. level-1: Redistributes the route into Level-1 routing table. level-2: Redistributes the route into Level-2 routing table. level-1-2: Redistributes the route into Level-1-2 routing table. If the level for redistributing the route is not specified in the command, it defaults to redistribute the routes into Level-1 and Level-2, i.e. Level-1-2 routing table. route-policy route-policy-name: Redistributes only the routes matching the specified route-policy.
Description
Use the import-route command to configure IS-IS to filter the redistributed routes. Use the undo import-route command to configure IS-IS not to redistribute the routing information of other protocols. By default, IS-IS does not redistribute routing information from any other protocols. For IS-IS, the routes discovered by other routing protocols are processed as the routes outside the routing domain. When redistributing the routes of other protocols, you can specify the default cost for them. If OSPF routes are redistributed, you can also specify the cost type for them. When IS-IS redistributes routes, you can specify to redistribute the routes to Level-1, Level-2 or Level-1-2. By default, if you do not specify the level, the system will redistribute the routes to Level-2 routing table. IS-IS regards all the routes redistributed into the routing domain as the external routes, which describe how to select the routes to the destination outside the routing domain.
Example
# Redistribute a static route with cost 15.
[3Com-isis] import-route static cost 15
4.1.17 import-route isis

Syntax
import-route isis level-2 into level-1 [acl number ] undo import-route isis level-2 into level-1 [ acl number ]
View
IS-IS view
Parameter
number: ACL number. When configuring routing leak from Level-2 to Level-1, only the routes that are permitted by ACL can be redistributed to Level-1 area if an ACL has been specified.
Description
Use the import-route isis level-2 into level-1 command to enable routing information in a Level-2 area to be redistributed to a Level-1 area. Use the undo import-route isis level-2 into level-1 command to remove this function. By default, routing information in a Level-2 area is not redistributed to a Level-1 area.
Example
# Redistribute routing information of a router from a Level-2 area to a Level-1 area.
[3Com] acl number 3100 permit any [3Com] isis [3Com-isis] import-route isis level2 into level1 acl 3100
4.1.18 isis
Syntax
isis [ tag ] undo isis [ tag ]
View
System view
Parameter
tag: Name given to the IS-IS process. The name length should be no longer than 128 characters. It can be 0, which means null.
Description
Use the isis command to enable the corresponding IS-IS routing process and enter IS-IS view. Use the undo isis command to cancel the specified IS-IS routing process. By default, IS-IS routing process is not started. For the normal operation of the IS-IS protocol, the isis command must be used to enable the IS-IS process. Then the network-entity command is used to set a Network Entity Title (NET) for the router, and, at last, the isis enable command is used to enable each interface on which the IS-IS process runs. The IS-IS protocol is actually enabled upon the completion of these configurations.
Note: Only one IS-IS routing process can be started on one router.
Related command: isis enable and network-entity.
Example
# Start an IS-IS routing process, in which the system ID is 0000.0000.0002 and the area ID is 01.0001.
[3Com] isis [3Com-isis] network-entity 01.0001.0000.0000.0002.00
4.1.19 isis authentication-mode

Syntax
isis authentication-mode { simple | md5 } password [ { level-1 | level-2 } [ ip | osi ] ] undo isis authentication-mode { simple | md5 } password [ { level-1 | level-2 } [ ip | osi ] ]
View
Interface view
Parameter
simple: Transmit the authentication password in simple text. md5: Transmit the authentication password in MD5 encryption. password: Specifies the authentication password. level-1: Configures authentication password for Level-1. level-2: Configures authentication password for Level-2. ip: Specifies the IP authentication password. osi: Specifies the OSI authentication password. The configuration of ip or osi authentication password is independent of the real network environment.
Description
Use the isis authentication-mode command to configure the IS-IS to authenticate the hello messages of the corresponding level, in the specified mode, and with the specified password on the IS-IS interface. Use the undo isis authentication-mode command to cancel the authentication and delete the password at the same time. By default, the password is not set and no authentication is executed. If the password is set, but no parameter is specified, the default settings are Level-1, simple and osi. Related command: area-authentication-mode and domain-authentication-mode.
Example
# Set the authentication password "tangshi" in simple text for the Level-1 neighboring relationship on Interface serial1/0/0.
[3Com] interface serial1/0/0 [3Com-Serial1/0/0] isis authentication-mode simple tangshi level-1
4.1.20 isis circuit-level

Syntax
isis circuit-level [ level-1 | level-1-2 | level-2 ] undo isis circuit-level
View
Interface view
Parameter
level-1: Configures only Level-1 adjacency instead of Level-2 one on the current interface. level-1-2: Configures both Level-1 and Level-2 adjacency on the current interface. level-2: Configures only Level-2 adjacency on the current interface.
Description
Use the isis circuit-level command to configure the link adjacency relationship. Use the undo isis circuit-level command to restore the default setting. By default, you can configure both Level-1 and Level-2 adjacency on the interface. If the local router is a Level-1-2 router and it is required to establish a correlation with the peer router on a certain level (Level-1 or Level-2), this command can specify the interface to send and receive hello messages of this level. Certainly, only one type of hello message is sent and received on the point-to-point link. In this way, excessive processing is avoided and the bandwidth is saved. Only when system type of IS-IS is Level-1-2, can the circuit level take effect. Otherwise, take the level defined via is-level command as the standard. Related command: is-level.
Example
# When interface serial1/0/0 is connected with a non-backbone router in the same area, you can set this interface as Level-1, prohibiting the sending and receiving of Level-2 hello messages.
[3Com] interface serial1/0/0 [3Com-Serial1/0/0] isis enable [3Com-Serial1/0/0] isis circuit-level level-1
4.1.21 isis cost

Syntax
isis cost value [ level-1 | level-2 ] undo isis cost [ level-1 | level-2 ]
View
Interface view
Parameter
value: Specifies the link cost used in the SPF calculation of corresponding level. By default, the value is 10. When the cost type is narrow, its range is 1 through 63; when the cost type is wide, its range is 1 to 16777215. level-1: Indicates that the link cost corresponds to Level-1 level-2: Indicates that the link cost corresponds to Level-2
Description
Use the isis cost command to configure the link cost of this interface when performing SPF calculation. Use the undo isis cost command to restore the default link cost. If neither Level-1 nor Level-2 is specified in the configuration, Level-1 will be the default value. The link cost for interfaces will effect the calculation of IS-IS routes. Related command: cost-style.
Example
# Set the link cost of the Level-2 link on Interface serial1/0/0 to 5.
[3Com] interface serial1/0/0 [3Com-Serial1/0/0] isis cost 5 level-2
4.1.22 isis dis-priority

Syntax
isis dis-priority value [ level-1 | level-2 ] undo isis dis-priority [ level-1 | level-2 ]
View
Interface view
Parameter
value: Specifies the priority when selecting DIS, ranging from 0 to 127. By default, the value is 64. level-1: Specifies the priority when selecting Level-1 DIS. level-2: Specifies the priority when selecting Level-2 DIS.
Description
Use the isis dis-priority command to configure the priority of an interface for the corresponding level DIS election. Use the undo isis dis-priority command to restore the default priority. If the level is not specified, it defaults to set the Level-2 priority. The IS-IS does not concern the concept of backup DIS. The router with the priority 0 can also run for the DIS, which is different from the DR election of OSPF. Related command: area-authentication-mode and domain-authentication-mode.
Example
# Set the priority of Interface serial1/0/0 to 127.
[3Com] interface serial1/0/0 [3Com-Serial1/0/0] isis dis-priority127 level-2
4.1.23 isis enable

Syntax
isis enable [ tag ] undo isis enable [ tag ]
View
Interface view
Parameter
tag: Name given to an IS-IS routing process, when executing isis command in the system view. If not specified, it is null.
Description
Use the isis enable command to configure this interface to activate the corresponding IS-IS routing process. Use the undo isis enable command to cancel this designation. By default, IS-IS routing process is not enabled on an interface. For the normal operation of the IS-IS protocol, the isis command must be used to enable the IS-IS process. Then the network-entity command is used to set a Network Entity Title (NET) for the router. And, at last, the isis enable command is used to enable each
interface on which the IS-IS process runs. The IS-IS protocol will be enabled upon the completion of these configurations. Related command: isis and network-entity.
Note: So far, a router can enable the IS-IS process on 255 interfaces at most, including logic interfaces such as subinterfaces.
Example
# Create an IS-IS routing process named "3Com", and activate this routing process on interface serial1/0/0.
[3Com] isis 3Com [3Com-isis] network-entity 10.0001.1010.1020.1030.00 [3Com-isis] quit [3Com] interface serial1/0/0 [3Com-serial1/0/0] isis enable 3Com
4.1.24 isis mesh-group

Syntax
isis mesh-group [ mesh-group-number | mesh-blocked ] undo isis mesh-group
View
Interface view
Parameter
mesh-group-number: Specifies the mesh group number, ranging from 1 to 4294967295. mesh-blocked: Blocks a specified interface, so that it will not flood the received LSP to other interfaces.
Description
Use the isis mesh-group command to add an interface to a specified mesh group. Use the undo isis mesh-group command to cancel this interface from the mesh group.
By default, the interface does not belong to any mesh group and floods LSP normally. The interface beyond the mesh group floods the received LSP to other interfaces, following the normal procedure. This processing method applied to an NBMA network with higher connectivity and several point-to-point links will cause repeated LSP flooding and will waste bandwidth. The interface joining a mesh group only floods the received LSP to the interfaces beyond the local mesh group. Be sure to provide some redundancy when adding or blocking an interface to a mesh group for avoiding the effect on the normal flooding of the LSP due to link failure.
Example
# Add interface serial1/0/0 to mesh group 3.
[3Com-Serial1/0/0] isis mesh-group 3
4.1.25 isis small-hello

Syntax
isis small-hello undo isis small-hello
View
Interface view
Parameter
None
Description
Use the isis small-hello command to disable IS-IS to stuff Hello packets to the size of interface MTU if their data sizes are smaller. Use the undo isis small-hello command to restore the default to have IS-IS stuff Hello packets to the size of interface MTU if their data sizes are smaller. You are recommended to configure the isis small-hello command on the interfaces with a MTU greater than 1500 bytes, such as tunnel and GE interfaces.
Example
# Disable ISIS to stuff Hello packets to the size of interface MTU when their data sizes are smaller.
[Router-tunnel0/0/0] isis small-hello
4.1.26 isis timer csnp

Syntax
isis timer csnp seconds [ level-1 | level-2 ] undo isis timer csnp [ level-1 | level-2 ]
View
Interface view
Parameter
seconds: Specifies the CSNP packet interval on the broadcast network, ranging from 1 to 65535 and measured in seconds. By default, the value is 10 seconds. level-1: Specifies the Level-1 CSNP packet interval. level-2: Specifies the Level-2 CSNP packet interval. If neither Level-1 nor Level-2 is specified, it defaults to set Level-1-2 Hello message interval, that is, both Level-1 and Level-2 take effect.
Description
Use the isis timer csnp command to configure the interval of sending CSNP packets on the broadcast network. Use the undo isis timer csnp command to restore the default value, that is, 10 seconds. Only DIS can periodically send CSNP packets, therefore, this command is valid only for the router that is selected as the DIS. Furthermore, DIS is divided into Level-1 and Level-2, and their intervals of sending CSNP packets must be set respectively.
Example
# Set the Level-2 CSNP packet to be transmitted every 15 seconds on the interface Serial1/0/0.
[3Com] interface serial1/0/0 [3Com-Serial1/0/0] isis timer csnp 15 level-2
4.1.27 isis timer hello

Syntax
isis timer hello seconds [ level-1 | level-2 ]
undo isis timer hello [ level-1 | level-2 ]
View
Interface view
Parameter
seconds: Specifies the Hello message interval, ranging from 3 to 255 and measured in seconds. The default value is 10 seconds. level-1: Specifies the Level-1 Hello interval. level-2: Specifies the Level-2 Hello interval. If neither Level-1 nor Level-2 is specified, it is defaulted to Level-1-2 Hello message interval, that is, both Level-1 and Level-2 take effect.
Description
Use the isis timer hello command to configure the interval of sending hello message of corresponding level. Use the undo isis timer hello command to restore the default value, that is, 10 seconds. On a broadcast link, Level-1 and Level-2 hello messages will be sent respectively and their intervals should also be set respectively. Such settings are unnecessary on point-to-point links. The shorter the sending interval is, the more system resources are occupied to send hello messages. Therefore, the interval should be set according to actual conditions. Related command: isis timer dead.
Example
# Set the Hello message of Level-1 to be transmitted every 20 seconds on Interface serial1/0/0.
[3Com] interface serial1/0/0 [3Com-Serial1/0/0] isis timer hello 20 level-1
4.1.28 isis timer holding-multiplier

Syntax
isis timer holding-multiplier number [ level-1 | level-2 ] undo isis timer holding-multiplier [ level-1 | level-2 ]
View
Interface view
Parameter
number: In the range of 0 to 3.
Description
Use the isis timer holding-multiplier command to configure the number of invalid Hello messages for the interface. Use the undo isis timer holding-multiplier command to restore the default settings. The default number of invalid Hello messages is 3. ISIS protocol maintains the adjacency between the adjacent routers by sending and receiving Hello messages. If the local router does not receive a Hello message from the peer within an interval, it regards the neighbor as unavailable. The interval is the ISIS holddown time. In ISIS, the holddown time can be regulated by configuring the number of invalid Hello messages. That is, the local router regards its neighbor unavailable if it has not received the specific number of Hello messages consecutively. If you do not specify Level-1 or Level-2 in the command, the system applies the number of invalid Hello messages to Level-1 and Level-2. Related command: isis timer hello.
Example
# Set the number of invalid Hello messages to 10.
[Router] isis timer holding-multiplier 10
4.1.29 isis timer lsp

Syntax
isis timer lsp time undo isis timer lsp
View
Interface view
Parameter
time: Specifies the LSP interval, ranging from 1 to 1000 and measured in milliseconds. The default value is 33 milliseconds.
Description
Use the isis timer lsp command to configure a minimum IS-IS LSP interval on the interface. Use the undo isis timer lsp command to restore the default setting. Related command: isis timer retransmit.
Example
# Set the LSP interval on Interface serial1/0/0 to 500 milliseconds.
[3Com] interface Interface serial1/0/0 [3Com-Serial1/0/0] isis timer lsp 500
4.1.30 isis timer retransmit

Syntax
isis timer retransmit seconds undo isis timer retransmit
View
Interface view
Parameter
seconds: Specifies the retransmission interval of LSP packets, with the range from 0 to 300 and the default value is 5 seconds.
Description
Use the isis timer retransmit command to configure the LSP retransmission interval over the point-to-point link. Use the undo isis timer retransmit command to restore the default setting. Use this parameter cautiously when setting this parameter to avoid unnecessary retransmission. The response is required when sending LSP packets on the p2p link, not the broadcast link, and therefore this command is unnecessary for the broadcast link. Related command: isis timer lsp.
Example
# Set the LSP retransmission interval to 10 seconds on Interface serial1/0/0.

[3Com] interface serial1/0/0
[3Com-Serial1/0/0] isis timer retransmit 10
4.1.31 is-level
Syntax
is-level { level-1 | level-1-2 | level-2 } undo is-level
View
IS-IS view
Parameter
level-1: Configures the router to operate at Level-1, only calculate the intra-area routes and maintain the LSDB of L1. level-1-2: Configures the router to operate at Level-1-2, calculate both the L1 and L2 routes and maintain the LSDB of Level-1 and Level-2. level-2: Configures the router to operate at Level-2, only switch Level-2 LSP and calculate the Level-2 routes and maintain the LSDB of Level-2.
Description
Use the is-level command to configure the IS-IS level. Use the undo is-level command to restore the default setting. By default, the value is level-1-2. You are recommended to set the system level when configuring IS-IS. If there is only one area, you are recommended to set the level of all the routers as Level-1 or Level-2, because it is not necessary for all the routers to maintain two identical databases. You are recommended to set all the routers to Level-2 for convenient future extension when applying them to IP network.
Note: As described in ISIS protocol, there is only one type of PDU Hello message on a point-to-point link, while there are two types of PDU Hello messages on a LAN interface, namely, Level-1 and Level-2. If you have configured different Level-1 and Level-2 authentication passwords on a point-to-point link, the system will have to choose one type of password, since only one type of Hello message exists on a point-to-point link. Hence the system will choose one password from Level-1 and Level-2 and put it into the Hello message. As for sender: If the sender is of Level-1 or Level-1-2 interface, it encapsulates the Level-1authenticator into Hello message. If the sender is of Level-2 interface, it encapsulates the Level-2 authenticator into Hello message. As for receiver: Supposing that the receiver is of Level-1 interface, it uses the Level-1 authenticator. Supposing that the receiver is of Level-2 interface, it uses the Level-1 authenticator if its neighbors are of Level-1-2; otherwise, it uses the Level-2 authenticator. Supposing that the receiver is of Level-1-2 interface, it uses the Level-1 authenticator if its neighbors are of Level-1-2 or Level-1; otherwise, it uses the Level-2 authenticator.
Related command: isis circuit-level.
Example
# Set the current router to operate on Level-1.
[3Com] isis [3Com-isis] is-level level-1
4.1.32 log-peer-change
Syntax
log-peer-change undo log-peer-change
View
IS-IS view
Parameter
None
Description
Use the log-peer-change command to configure to log the IS-IS adjacency changes. Use the undo log-peer-change command to configure not to log the IS-IS adjacency changes. By default, IS-IS adjacency changes log is disabled. After IS-IS adjacency changes log is enabled, the IS-IS adjacency changes will be output on the configuration terminal until the log is disabled.
Example
# Configure to log the IS-IS adjacency changes on the current router.
[3Com-isis] log-peer-change
4.1.33 md5-compatible
Syntax
md5-compatible undo md5-compatible
View
ISIS view
Parameter
None
Description
Use the md5-compatible command to configure ISIS to use the 3Com-compatible MD5 algorithm. You need to use this command when MD5 authentication on ISIS is required between your router and a 3Com device. Use the undo md5-compatible command to restore the default MD5 algorithm.
Example
# Configure ISIS to use the 3Com-compatible MD5 algorithm.
[3Com-isis] md5-compatible
4.1.34 network-entity
Syntax
network-entity net undo network-entity net
View
IS-IS view
Parameter
net: Specifies the NET (Network Entity Title ) in the XX.XXXX....XXXX.00 format, in which the first "XX" is the area address, the twelve Xs in the middle is the System ID of the router, and the 00 in the end is SEL.
Description
Use the network-entity command to configure the name of Network Entity Title (NET) of the IS-IS routing process. Use the undo network-entity command to cancel a NET. By default, the value is No NET. NET means the Network Service Access Point (NSAP). The NET field of IS-IS is 8 to 20 bytes. It consists of three parts. Part one is area ID, which is variable (1 to 13 bytes), and the area IDs of the routers in the same area are identical. Part two is system ID (6 bytes) of this router, which must be unique in the whole area and backbone area. Part three, the last byte "SEL", whose value must be "00". Usually, one router can be configured with one NET. When the area is redesigned by combination or separation, after reconfiguration, the correctness and continuity of the routes must be ensured. Related command: isis and isis enable.
Example
# Specify NET as 10.0001.1010.1020.1030.00, in which the system ID is 1010.1020.1030, area ID is 10.0001.
[3Com] isis [3Com-isis] network-entity 10.0001.1010.1020.1030.00
4.1.35 preference
Syntax
View
IS-IS view
Parameter
value: Specifies the preference, ranging from1 to 255. By default, the value is 15.
Description
Use the preference command to configure the preference of IS-IS protocol. Use the undo preference command to restore the default value. Several dynamic routing protocols can run simultaneously on a router. In this case, there is an issue of sharing and selecting the routing information among all the routing protocols. The system sets a preference for each routing protocol. When various routing protocols find the route to the same destination, the protocol with the higher preference will take effect.
Example
# Configure the preference of IS-IS as 25.
[3Com-isis] preference 25
4.1.36 reset isis all

Syntax
reset isis all
View
User view
Parameter
None
Description
Use the reset isis all command to reset all the IS-IS data.
This command is used when LSPs need refreshing immediately. For example, after area-authentication-mode and domain-authentication-mode commands are executed, the old LSP still remains on the router. Related command: area-authentication-mode and domain-authentication-mode.
Example
# Clear all the IS-IS data.
<3Com> reset isis all
4.1.37 reset isis peer

Syntax
reset isis peer system-id
View
User view
Parameter
system-id: Specifiesy the system ID of IS-IS neighbor.
Description
Use the reset isis peer command to reset the IS-IS data of specified IS-IS neighbor. This command is used when you want to reconfigure a certain neighbor.
Example
# Clear the IS-IS data of neighbor whose system ID is 0000.0c11.1111.
<3Com> reset isis peer 0000.0c11.1111
4.1.38 set-overload
Syntax
set-overload undo set-overload
View
IS-IS view
Parameter
None
Description
Use the set-overload command to configure overload flag bit for the current router. Use the undo set-overload command to reset the overload flag bit. By default, no overload bit is set. If a router is configured with the overload bit, it will be ignored by other routers in SPF calculation. (However the directly connected routes will not be ignored.) When the overload threshold is set, other routers should not send this router the packets which should be forwarded by it.
Example
# Set overload flag bit on the current router.
[3Com-isis] set-overload
4.1.39 silent-interface
Syntax
silent-interface interface-type interface-number undo silent-interface interface-type interface-number
View
IS-IS view
Parameter
interface-type: Specifies the interface type. interface-number: Specifies the interface number.
Description
Use the silent-interface command to disable a specified interface to transmit IS-IS packets. Use the undo silent-interface command to enable the interface to transmit IS-IS packets. By default, all the interfaces are allowed to transmit/receive IS-IS packets. The silent-interface command is only used to restrain the IS-IS packets not to be sent on the interface, but the interface routes still can be sent from other interfaces.
Example
# Prohibit the IS-IS packets to be transmitted via Interface Ethernet1/0/0.
[3Com-isis] silent-interface Ethernet1/0/0
4.1.40 spf-delay-interval
Syntax
spf-delay-interval number undo spf-delay-interval
View
IS-IS view
Parameter
number: Interval for actively releasing CPU in route calculation. It is in pieces, ranging from 1000 to 50000. By default, the value is 5000.
Description
Use the spf-delay-interval command to configure the interval for actively releasing CPU in the SPF calculation. Use the undo spf-delay-interval command to restore the default setting. When there are a large number of routes in the routing table, this command can be used to make CPU resources be released automatically after a certain number of routes are processed. The unprocessed routes will be processed in one second. The value of the parameter number can be adjusted according to the capacity of the routing table. If the spf-slice-size command is also configured, the SPF calculation will be paused when any setting item is met. By default, CPU is released once when every 5000 pieces of routes are processed. Related command: spf-slice-size.
Example
# Set IS-IS to release CPU once after processing every 3000 pieces of routes.
[3Com-isis] spf-delay-interval 3000
4.1.41 spf-slice-size
Syntax
spf-slice-size seconds undo spf-slice-size
View
IS-IS view
Parameter
seconds: Duration time in seconds for SPF calculation each time in the range from 0 to 120. When the calculation duration time reaches or exceeds the set value, the calculation of this time ends. If seconds is set to 0, it indicates that SPF calculation is not divided into slices and it will operate until the end. By default, the value is 0.
Description
Use the spf-slice-size command to configure whether to set slice and the duration time each time IS-IS performs SPF route calculation. Use the undo spf-slice-size command to restore the default setting. When there are a large number of routes in the routing table, this command can be used to enable the SPF calculation in slices to prevent it from occupying the system resources for a long time. Each time the router processes some route information, it will free CPU to process other things, and process route information after 1 second. The user is recommended to use this command when the number of routes reaches 150,000 or 200,000 and the value of seconds is recommended to be 1. In other cases, the default setting should be used, that is, SPF runs to the end with no slice. If the spf-delay-interval command is also configured, when SPF calculation is run the SPF calculation will be paused if any setting item is met. Related command: spf-delay-interval.
Example
# Set the SPF duration time to 1 second.
[3Com-isis] spf-slice-size 1
4.1.42 summary
Syntax
summary ip-address mask [ level-1 | level-1-2 | level-2 ] undo summary ip-address mask [ level-1 | level-1-2 | level-2 ]
View
IS-IS view
Parameter
ip-address: Address segment of the routes to be aggregated. mask: Aggregated route mask. level-1: Aggregates the routes redistributed into Level-1. level-1-2: Aggregates the routes redistributed to both areas and backbone network. level-2: Aggregates the routes redistributed to backbone network only.
Description
Use the summary command to configure IS-IS route summary. Use the undo summary command to cancel the summary. By default, no routes will be summarized. Similarly, the routes with the same next hops can be aggregated into one route. In this way, the sizes of the routing table, LSP packets and LSDB are reduced. Among them, the aggregated route can be either a route found by IS-IS protocol, or a redistributed route. Furthermore, the cost value of the aggregated route adopts the smallest cost of the routes aggregated.
Example
# Set a route summary of 202.0.0.0/8.
[3Com-isis] summary 202.0.0.0 255.0.0.0
4.1.43 timer lsp-max-age

Syntax
timer lsp-max-age seconds undo timer lsp-max-age
View
IS-IS view
Parameter
seconds: Specifies the maximum lifetime of LSP, measured in seconds. The range is 1 to 65535. The default value is 1200 seconds.
Description
Use the timer lsp-max-age command to configure the maximum lifetime of a LSP generated by the current router. Use the undo timer lsp-max-age command to restore the default value. When a router generates the LSP of the system, it will fill in the maximum lifetime of this LSP. When other routers receive this LSP, its lifetime will be reduced continuously as time goes by. If updated LSP has not been received before the old one times out, this LSP will be deleted from the LSDB. Related command: timer lsp-refresh.
Example
# Set the lifetime of an LSP generated by the current system to 25 minutes, i.e., 1500 seconds.
[3Com-isis] timer lsp-max-age 1500
4.1.44 timer lsp-refresh

Syntax
timer lsp-refresh seconds undo timer lsp-refresh
View
IS-IS view
Parameter
seconds: Specifies the LSP refresh interval, measured in seconds. The range is 1 to 65535. The default value is 900 seconds.
Description
Use the timer lsp-refresh command to configure the refresh interval of LSP.
Use the undo timer lsp-refresh command to restore the default value. By this mechanism, synchronization of the LSPs within the entire area can be maintained. Related command: timer lsp-max-age.
Example
# Set the LSP refresh interval of the current system to 1500 seconds.
[3Com-isis] timer lsp-refresh 1500
4.1.45 timer spf

Syntax
timer spf seconds [ level-1 | level-2 ] undo timer spf [ level-1 | level-2 ]
View
IS-IS view
Parameter
seconds: Specifies the SPF calculation interval, ranging from 1 to 120 and measured in seconds. The default value is 5 seconds. level-1: Sets Level-1 SPF calculation interval only. level-2: Sets Level-2 SPF calculation interval only. If the level is not specified, it defaults to SPF interval of Level-1.
Description
Use the timer spf command to configure the interval for the SPF calculation. Use the undo timer spf command to restore the default setting. In IS-IS protocol, when the LSDB of the corresponding level is changed, SPF calculation is required. However, if the SPF calculation is performed too frequently, the system efficiency will be lowered and a great number of resources on the network will be occupied. SPF calculation interval can improve its calculation efficiency to some degree. This setting can be made according to actual conditions.
Example
# Set the SPF calculation interval of the router to 3 seconds.
[3Com-isis] timer spf 3
Chapter 5 BGP Configuration Commands

5.1 BGP Configuration Commands
Note: For the commands defining routing policies in BGP refer to the next chapter IP Routing Policy Configuration Commands. For the configuration examples and parameter explanation of VPNv4 and VPN instance in BGP refer to the "Multicast" module and "MPLS" module in this manual.
5.1.1 aggregate
Syntax
aggregate address mask [ as-set ] [ detail-suppressed ] [ suppress-policy route-policy-name route-policy-name ] undo aggregate address mask [ as-set ] [ detail-suppressed ] [ suppress-policy route-policy-name route-policy-name ] ] [ origin-policy route-policy-name ] [ attribute-policy ] [ origin-policy route-policy-name ] [ attribute-policy
View
BGP view
Parameter
address: Address of the aggregated route, in dotted decimal notation. mask: Network mask of the aggregated route, in dotted decimal notation. as-set: Creates a route with AS segment. detail-suppressed: Only advertises the aggregated route. suppress-policy route-policy-name: Suppresses the individual routes selected, some of which are not advertised. origin-policy route-policy-name: Selects the originating routes used for aggregation.
attribute-policy route-policy-name: Sets the attributes of the aggregated route.
Description
Use the aggregate command to establish an aggregated record in the BGP routing table. Use the undo aggregate command to cancel the function. By default, there is no route aggregation. The keywords are explained as follows: Table 5-1 Functions of the keywords Keywords Function Used to create an aggregated route, whose AS path information includes individual routes. Use this keyword carefully when many AS paths need to be aggregated, for the frequent change of individual routes may lead to route vibration. This keyword does not suppress any aggregated route, but it suppresses the advertisement of all the individual routes. If only some individual routes are to be suppressed, use the peer filter-policy command. Used to create an aggregated route and suppress the advertisement of the specified route. If you want to suppress some specific routes selectively and leave other routes still being advertised, use the if-match clause of the route-policy command. Selects only the individual routes that are in accordance with route-policy to create an aggregated route. Sets aggregated route attributes. The same work can be done by using the peer route-policy command, etc.
as-set
detail-suppress ed
suppress-policy
origin-policy attribute-policy
Example
# Establish an aggregated record in the BGP routing table.
[3Com-bgp] aggregate 192.213.0.0 255.255.0.0
5.1.2 balance
Syntax
balance num undo balance
View
BGP view
Parameter
num: Number of the BGP routes participating in load balancing. It is in the range 1 to 3. When it is set to 1, load balancing is disabled.
Description
Use the balance command to configure the number of routes participating in BGP load balancing. Use the undo balance command to restore the default, that is, 1. In this case, load balancing is disabled. Different from IGP, BGP is just a single-purpose routing protocol and therefore has no explicit metric for making load balancing decisions. Instead, it implements load balancing by changing its routing rule. Related command: display ip routing-table.
Example
# Set the number of routes participating in BGP load balancing to 2.
[3Com] bgp 100 [3Com-bgp] balance 2
5.1.3 bgp
Syntax
bgp as-number undo bgp [ as-number ]
View
System view
Parameter
as-number: Specifies the local AS number, ranging from 1 to 65535.
Description
Use the bgp command to enable BGP and enter the BGP view. Use the undo bgp command to disable BGP.
By default, BGP is not enabled. This command is used to enable and disable BGP as well as to specify the local AS number of BGP.
Example
# Enable BGP.
[3Com] bgp 100 [3Com-bgp]
5.1.4 compare-different-as-med
Syntax
compare-different-as-med undo compare-different-as-med
View
BGP unicast view, BGP multicast view, VPNv4 view
Parameter
None
Description
Use the compare-different-as-med command to enable comparison of MED values of routes from neighbors residing in different ASs when determining the best route. Use the undo compare-different-as-med command to disable the comparison. By default, it is disabled to compare the MED attribute values from the routing paths of different AS peers. If there are several routes available to one destination address, the route with a smaller MED value can be selected as the final route item for use. You are not recommended to use this command unless you can make sure that the ASs adopt the same IGP and routing method.
Example
# Enable the comparison of the MED attribute values of routes from neighbors in different AS.
[3Com-bgp] compare-different-as-med
5.1.5 confederation id
Syntax
confederation id as-number undo confederation id
View
BGP view
Parameter
as-number: Number of the AS which contains multiple sub-ASs. The range is from 1 to 65535.
Description
Use the confederation id command to configure a confederation identifier. Use the undo confederation id command to cancel the BGP confederation specified by parameter as-number. By default, the confederation ID is not configured. Confederation can be adopted to solve the problem of too many IBGP full connections in a large AS domain. The solution is, first dividing the AS domain into several smaller sub-ASs, and each sub-ASs remains full-connected. These sub-ASs form a confederation. Key IGP attributes of the route, such as next hop, MED, local preference, are not discarded across each sub-ASs. The sub-ASs still look like a whole from the point of view of a confederation although these sub-ASs have EBGP relations. This can assure the integrality of the former AS domain, and ease the problem of too many connections in the domain. Related command: confederation nonstandard and confederation peer-as.
Example
# Confederation 9 consists of four sub-ASs, namely, 38, 39, 40 and 41. Here, the peer 10.1.1.1 is an internal member of the AS confederation while the peer 200.1.1.1 is an external member of the AS confederation. For external members, Confederation 9 is a unified AS domain.
[3Com] bgp 41 [3Com-bgp] confederation id 9 [3Com-bgp] confederation peer-as 38 39 40 [3Com-bgp] peer 10.1.1.1 as-number 38 [3Com-bgp] peer 200.1.1.1 as-number 98
5.1.6 confederation nonstandard

Syntax
confederation nonstandard undo confederation nonstandard
View
BGP view
Parameter
None
Description
By using the confederation nonstandard command, the router can be compatible with the AS confederation not adopting RFC1965. Use the undo confederation nonstandard command to cancel this function. By default, the configured confederation is consistent with RFC1965. All the 3Com routers in the confederation should be configured with this command for interworking with nonstandard devices. Related command: confederation id and confederation peer-as.
Example
# AS100 contains routers not following RFC1965, which is composed of two sub-ASs, 64000 and 65000.
[3Com] bgp 64000 [3Com-bgp] confederation id 100 [3Com-bgp] confederation peer-as 65000 [3Com-bgp] confederation nonstandard
5.1.7 confederation peer-as

Syntax
confederation peer-as as-number-1 [ ......as-number-n ] undo confederation peer-as [ as-number-1 ] [......as-number-n ]
View
BGP view
Parameter
as-number-1...as-number-n: Sub-AS numbers, ranging from 1 to 65535. Up to 32 sub-ASs can be configured for a confederation.
Description
Use the confederation peer-as command to specify the sub-ASs constituting a confederation. Use the undo confederation peer-as command to expel the specified sub-ASs from the confederation. By default, no sub-AS is configured to be a member of the confederation. The sub-ASs specified in this command must be inside a confederation and each sub-AS must be a fully meshed network. The confederation id command must be used to specify the confederation to which each sub-AS belongs; otherwise, this configuration is invalid Related command: confederation nonstandard and confederation id.
Example
# Configure the confederation to contain AS 2000 and 2001.
[3Com-bgp] confederation peer-as 2000 2001
5.1.8 dampening
Syntax
dampening [ half-life-reachable half-life-unreachable reuse suppress ceiling ]
[ route-policy policy-name ] undo dampening
View
BGP view
Parameter
half-life-reachable: Specifies the half-life when the route is reachable. The range is 1 to 45 minutes. By default, the value is 15 minutes. half-life-unreachable: Specifies the half-life when the route is unreachable. The range is 1 to 45 minutes. By default, the value is 15 minutes. reuse: Penalty value of a route when it starts to be reused. The range is 1 to 20000. By default, its value is 750.
suppress: Penalty threshold of a route when it starts to be suppressed. The range is 1 to 20000. By default, its value is 2000. ceiling: Upper threshold of the penalty. The range is 1001 to 20000. By default, its value is 16000. policy-name: Route policy name.
Description
Use the dampening command to make BGP route dampening valid or modify various BGP route dampening parameters. Use the undo dampening command to make the characteristics invalid. By default, no route dampening is configured. If the parameters are not set, the default values are used. half-life-reachable, half-life-unreachable, reuse, suppress and ceiling are mutually dependent. Once any one is configured, all others should also be specified accordingly. The dampening command dampens only the routes that are learned from EBGP peers; it dampens no IBGP routes. Related command: reset dampening, reset bgp flap-info, display bgp routing-table dampened, and display bgp routing-table flap-info.
Example
# Modify BGP route dampening parameters.
[3Com-bgp] dampening 15 15 1000 2000 10000
5.1.9 debugging bgp

Syntax
debugging bgp { all | event | normal } debugging bgp { keepalive | mp-update | open | packet | route-refresh | update } [ receive | send ] [ verbose ] undo debugging bgp { all | event | normal | keepalive | mp-update | open | packet | route-refresh | update }
View
User view
Parameter
all: All BGP debugging items.
event: BGP event debugging. Normal: BGP normal operation debugging. keepalive: BGP keepalive packet debugging. mp-update: MBGP Update packet debugging. open: BGP Open packet debugging. packet: BGP packet debugging. route-refresh: BGP route-refresh packet debugging. update: BGP Update packet debugging. receive: Received packet debugging. send: Sent packet debugging. verbose: Displays detailed debugging information.
Description
Use the debugging bgp command to enable the debugging of specified BGP packets and events. Use the undo debugging bgp command to disable debugging of specified BGP packets or events. By default, debugging is disabled for any item. System performance is influenced when debugging is enabled. Therefore, this command should be used cautiously. Disable debugging of any item after gone through.
Example
# Enable BGP packet debugging.
<3Com> debugging bgp packet
5.1.10 default-route imported

Syntax
default-route imported undo default-route imported
View
BGP view
Parameter
None
Description
Use the default-route imported command to redistribute local default routes into BGP. Use the undo default-route imported command to disable the redistribution. By default, local default routes are not redistributed into BGP.
Example
# Redistribute local default routes into BGP.
[Router-bgp] default-route imported
5.1.11 default local-preference

Syntax
default local-preference value undo default local-preference
View
Parameter
value: Local preference value to be configured. The range is 0 to 4294967295, the larger the value is, the higher the preference is. By default, its value is 100.
Description
Use the default local-preference command to configure the local preference. Use the undo default local-preference command to restore the default value. Configuring different local preferences will affect BGP routing selection.
Example
# Two routers RTA and RTB reside in the same autonomous area and use the X.25 and Frame Relay protocols separately to connect with external autonomous areas. The command can be used to configure the local preference of RTB as 180 so that the route via RTB is preferred to forward packets.
[3Com-bgp] default local-preference 180
5.1.12 default med

Syntax
default med med-value undo default med
View
BGP unicast view, BGP multicast view, VPNv4 view, VPN instance view
Parameter
med-value: MED value to be specified. The range is 0 to 4294967295. By default, the med-value is 0.
Description
Use the default med command to configure the system MED value. Use the undo default med command to restore the default value of the metric. Multi-exit discriminator (MED) is the external metric of a route. Different from local preference, MED is exchanged between ASs and will stay in the AS once it enters the AS. The smaller an MED is the better a route is. So the route with a lower MED is preferred. When a router running BGP obtains several routes with identical destination addresses and different next-hops from various external peers, it will select the best route depending on the MED value. In the case that all other conditions are the same, the system first selects the route with the smaller MED value as the external route of the autonomous system.
Example
# Routers RTA and RTB belong to AS100, and router RTC belongs to AS200. RTC is the peer of RTA and RTB. The network between RTA and RTC is X.25 network and the network between RTB and RTC is Ethernet. So the MED of RTA can be configured as 25 to allow RTC to select the route transmitted by RTB first.
[3Com-bgp] default med 25
5.1.13 display bgp group

Syntax
display bgp [ multicast | [ vpnv4 { all | route-distinguisher route-distinguisher | vpn-instance vpn-instance-name } ] ] group [ group-name ]
View
Any view
Parameter
group-name: A specified peer group. vpn-instance vpn-instance-name: Name of VPN instance.
Description
Use the display bgp group command to view the information of peer groups.
Example
# View the information of the peer group "aaa".
<3Com> display bgp group aaa group : aaa no as-number still members in this group : Description : aaa route-policy specified in export policy : aaa filter-policy specified in export policy : list no.30304410 acl specified in export policy : list no.30304410 ip-prefix specified in export policy : aaa route-policy specified in import policy : aaa filter-policy specified in import policy : list no.30304410 acl specified in import policy : list no.30304410 ip-prefix specified in import policy : aaa with Route-policy aaa
5.1.14 display bgp network

Syntax
display bgp [ multicast | [ vpnv4 { all | route-distinguisher route-distinguisher | vpn-instance vpn-instance-name } ] ] network
View
Any view
Parameter
vpn-instance vpn-instance-name: Name of VPN instance. route-distinguisher route-distinguisher: Name of route-distinguisher.
Description
Use the display bgp network command to view the routing information that has been configured.
Example
# View the routing information that has been configured.
<3Com> display bgp network Network Mask None None Route-policy
133.1.1.0 255.255.255.0 112.1.0.0 255.255.0.0
5.1.15 display bgp paths

Syntax
display bgp paths as-regular-expression
View
Any view
Parameter
as-regular-expression: Matched AS path regular expression.
Description
Use the display bgp paths command to view the information about AS paths
Example
# Display the information about the AS paths.
<3Com> display bgp paths ^600$ Flags: # - valid, ^ - best, D - damped, I - internal, Id Hash-Index References H - history, S aggregate suppressed Aggregator Origin As-Path
-------------------------------------------------------------------6 90 15 <null> IGP 600
5.1.16 display bgp peer

Syntax
display bgp [ multicast ] peer [ [ peer-address ] verbose ] display bgp vpnv4 { all | route-distinguisher route-distinguisher | vpn-instance vpn-instance-name } peer [ [ peer-address ] verbose ]
View
Any view
Parameter
peer-address: Specifies the IP address of the peer to be displayed, in dotted decimal notation. vpn-instance vpn-instance-name: Name of VPN instance. route-distinguisher route-distinguisher: Name of route-distinguisher. verbose: Displays the detailed information of the peer.
Description
Use the display bgp peer command to view the information of peer. Use the display bgp multicast peer command to view the information of MBGP peer. Use the display bgp vpnv4 peer command to view the information of VPN peer.
Example
# Display the information of all BGP peers.
<3Com> display bgp peer Peer AS-num Ver Queued-Tx Msg-Rx Msg-Tx Up/Down State
------------------------------------------------------------------1.1.1.10 2.2.2.11 300 100 4 4 0 0 3 0 5 0 00:00:10 Never Established Idle
Table 5-2 Description on the fields of the display bgp peer command Field Peer AS-num Ver Queued-Tx Description IP address of the peer AS number of the peer BGP version of the peer Number of the packets in the transmit queue
Field Msg-Rx Msg-Tx Up/Down State
Description Number of messages received from this peer Number of messages sent to this peer Up/down time of the peer Current state of the peer
# View the details of peer 1.1.1.10.

<3Com> display bgp peer 1.1.1.10 verbose Peer: 1.1.1.10+1024 Type: Internal State: Established Expiring Time: 00:02:49 Last State: OpenConfirm Last Event: RecvKeepAlive Last Error: None Options: <> Peer Version: 4 Peer ID: 1.1.1.10 Active Holdtime: 180s, Keepalive: 60s Group Bit: 0 Send state: in sync Sent 17 Checked 17 Octets 439 Octets 264 Local ID: 8.8.8.8 Flags: <> Local: 1.1.1.20+179
Last traffic (seconds): Received 11 Input messages: Total 3 Updates 2 Output messages: Total 5
Updates 3
Peer capabilities: Route refresh: advertised and received Ipv4-family Unicast: advertised and received Ipv4-family Multicast: advertised and received Ipv4-family VPNv4: advertised and received
Configuration within the peer : route-policy specified in export policy : 2
Table 5-3 Description on the fields of the display bgp peer verbose command Field Peer: 1.1.1.10+1024 Local: 1.1.1.20+179 Description IP address of the peer and the port number for TCP connection
Field Type: Internal State: Established Expiring Time: 00:02:49
Description BGP version of the peer Current state of the peer Displays the remaining lifetime of the peer. This field is displayed only when the state of the peer is Established The last state of the peer before transitting to the current state The last event that triggers state transition The negotiated peer cababilities Route refreshing cabability. Advertised means route advertisement is allowed and Received means route updates can be received. IPv4 unicast address familiy capacity IPv4 multicast address familiy capacity IPv4 VPN address familiy capacity
Last State: OpenConfirm Last Event: RecvKeepAlive Peer capabilities: Route refresh: Ipv4-family Unicast: Ipv4-family Multicast: Ipv4-family VPNv4:
5.1.17 display bgp routing-table

Syntax
display bgp [ multicast | vpnv4 { all | route-distinguisher route-distinguisher |
vpn-instance vpn-instance-name } ] routing-table [ ip-address mask | statistic ]
View
Any view
Parameter
multicast: Displays the MBGP routing information in BGP routing table. all: Displays all VPNv4 routing information. route-distinguisher route-distinguisher: Displays network layer reachable information (NLRI) matching the specified routing distinguisher (RD). vpn-instance vpn-instance-name: Displays NLRI associated with the specified VPN instance. ip-address: Destination network address, in dotted decimal notation. mask: Network mask, in dotted decimal notation.
statistic: Displays statistics of routes.
Description
Use the display bgp routing-table command to view the BGP routing information in the BGP routing table. Use the display bgp multicast routing-table command to view the MBGP routing information in the BGP routing table. Use the display bgp vpnv4 routing-table command to view the VPN routing information in the BGP routing table.
Example
# View all the BGP routing information.
<3Com> display bgp routing-table Flags: # - valid D - damped ^ - active H - history I - internal S - aggregate suppressed
Dest/Mask
Next-hop
Med
Local-pref Origin As-path
------------------------------------------------------------------#^ #^ #^ #^ #^ #^ #^ # I #^I 55.1.0.0/16 #^ #^ 55.1.0.0/24 192.168.1.1/32 2.2.2.0/26 6.0.0.0 6.6.0.0/16 6.7.0.0/16 6.8.0.0/16 10.110.101.125/32 55.0.0.0 0.0.0.0 127.0.0.1 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 1.1.1.10 1.1.1.10 0.0.0.0 0.0.0.0 100 100 IGP INC INC INC INC INC INC INC INC INC INC
# View statistics of BGP routes.

<3Com> dislay bgp routing-table statistic Routes total: 11
# View all VPN routing information in the BGP routing table.

<3Com> display bgp vpnv4 all routing-table Flags: # - valid D - damped ^ - active H - history I - internal S - aggregate suppressed

In/out As path
Dest/mask
Next-hop
Med
Local-pref
label
--------------------------------------------------------------------
Route Distinguisher:100:110 (VPN instance:1) #^ #^ #^ #^ #^ #^ #^ #^ #^ #^ #^ #^ 2.2.2.0/26 33.0.0.0 66.0.0.0 99.1.0.0/16 99.2.0.0/16 99.3.0.0/16 99.4.0.0/16 99.5.0.0/16 99.6.0.0/16 99.7.0.0/16 99.8.0.0/16 99.9.0.0/16 0.0.0.0 0.0.0.0 0.0.0.0 2.2.2.11 2.2.2.11 2.2.2.11 2.2.2.11 2.2.2.11 2.2.2.11 2.2.2.11 2.2.2.11 2.2.2.11 88 88 33 33 33 33 33 33 33 33 33 333 333 1024/0 1025/0 1025/0 1026/0 1026/0 1026/0 1026/0 1026/0 1026/0 1026/0 1026/0 1026/0 100 100 100 100 100 100 100 100 100
Route Distinguisher:100:120 (VPN instance:2) #^ #^ 33.0.0.0 66.0.0.0 0.0.0.0 0.0.0.0 1028/0 1028/0
# View statistics of VPN routes in the BGP routing table.

<3Com> display bgp vpnv4 all routing-table statistic Routes total: 14
# View MBGP routing information for the specified destination address.

<3Com> display bgp multicast routing-table 55.1.0.0 BGP routing table entry information of 55.1.0.0/24 Age From State Nexthop Origin As-path : 00:01:45 : local : valid, sourced, best, : 0.0.0.0 : IGP : (null)
Table 5-4 Description on the fields of the display bgp multicast routing-table command Field Age : Description Time elapses since last update
Field
Description Source of the route: Local: The route is local
From
peer_IP_address (Router_ID): The route is received from a peer, for example, 2.2.2.11(10.110.101.122) State of the entry: Valid: indicates the route information is valid
State
Sourced: indicates the route is local External: indicates the route is external Best: indicates the route is selected
Nexthop Origin :
Next hop Origin of BGP, which can be IGP, EGP, or incomplete
5.1.18 display bgp routing-table as-path-acl

Syntax
display bgp [ multicast | [ vpnv4 { all | route-distinguisher route-distinguisher | vpn-instance vpn-instance-name } ] ] routing-table as-path-acl aspath-acl-number
View
Any view
Parameter
acl-number: Number of the specified AS path to be matched, ranging from 1 to 199.
Description
Use the display bgp routing-table as-path-acl command to view routes that match an as-path ACL.
Example
# Display routes that match filtering list.
<3Com> display bgp routing-table as-path-acl 1 Flags: # - valid, D - damped, ^ - best, H - history,

I - internal,

S aggregate suppressed
Dest/Mask
Pref
Next-Hop
Med
Local-pref
Origin
As-path
-------------------------------------------------------------------#^ 1.1.1.0/24 #^ 1.1.2.0/24 #^ 1.1.3.0/24 #^ 2.2.3.0/24 #^ 4.4.4.0/24 #^ 9.9.9.0/24 #^ 10.10.10.0/24 #^ # 22.1.0.0/16 88.1.0.0/16 170 170 170 256 256 256 256 256 60 10.10.10.1 10.10.10.1 10.10.10.1 10.10.10.1 10.10.10.1 10.10.10.1 10.10.10.1 200.1.7.2 0.0.0.0 0 0 0 0 0 0 0 100 IGP IGP IGP INC INC INC IGP INC IGP 200 200 200 200 200 200 200 200
5.1.19 display bgp routing-table cidr

Syntax
display bgp [ multicast | [ vpnv4 { all | route-distinguisher route-distinguisher | vpn-instance vpn-instance-name } ] ] routing-table cidr
View
Any view
Parameter
None
Description
Use the display bgp routing-table cidr command to view the routing information about the non-natural mask (namely the classless inter-domain routing, CIDR).
Example
<3Com> display bgp routing cidr Flags: # - valid, D - damped, I - internal, ^ - best, H - history, S aggregate suppressed
Dest/Mask
Pref
Next-Hop
Med
Local-pref
Origin
As-path
-------------------------------------------------------------------#^ 22.1.0.0/16 256 200.1.7.2 100 INC 200

# 88.1.0.0/16 60 0.0.0.0

IGP
5.1.20 display bgp routing-table community

Syntax
display bgp [ multicast | [ vpnv4 { all | route-distinguisher route-distinguisher | vpn-instance vpn-instance-name } ] ] routing-table community [ aa:nn | no-export-subconfed | no-advertise | no-export ] [ whole-match ]
View
Any view
Parameter
aa:nn: Specifies a community number. no-export-subconfed: Indicates not to advertise matched routes outside the AS. no-advertise: Indicates not to advertise matched routes to any peer. no-export: Indicates not to advertise routes outside the AS but to other sub ASs. whole-match: Displays the exactly matched routes.
Description
Use the display bgp routing-table community command to view the routing information related to the specified BGP community number in the routing table.
Example
# Display the routing information matching the specified BGP community number.
<3Com> display bgp routing-table community 11:22 Flags: # - valid, D - damped, I - internal, Dest/Mask Pref ^ - best, H - history, S aggregate suppressed Next-Hop Med Local-pref Origin As-path
-------------------------------------------------------------------#^ #^ 1.0.0.0/8 2.0.0.0/8 170 256 172.10.0.2 172.10.0.2 100 100 IGP IGP
5.1.21 display bgp routing-table community-list

Syntax
display bgp [ multicast | [ vpnv4 { all | route-distinguisher route-distinguisher | vpn-instance vpn-instance-name } ] ] routing-table community-list community-list-number [ whole-match ]
View
Any view
Parameter
community-list-number: Specifies a community-list number. whole-match: Displays the exactly matched routes.
Description
Use the display bgp routing-table community-list command to view the routing information matching the specified BGP community list.
Example
# View the routing information matching BGP community list 1.
[3Com] display bgp routing-table community-list 1 Flags: # - valid, D - damped, I - internal, ^ - best, H - history, S aggregate suppressed
Destination/Mask
Pref
Next-hop
Med
Local-Pref
Origin
As-Path
-------------------------------------------------------------------1.1.1.0/24 1.1.2.0/24 1.1.3.0/24 2.2.3.0/24 4.4.4.0/24 9.9.9.0/24 10.10.10.0/24 10.10.10.0/24 170 256 170 256 170 256 0 256 10.10.10.1 10.10.10.1 10.10.10.1 10.10.10.1 10.10.10.1 10.10.10.1 10.10.10.2 10.10.10.1 0 0 0 0 0 0 0 0 IGP IGP IGP INC INC INC IGP IGP 200 200 200 200 200 200 200
5.1.22 display bgp routing-table dampened

Syntax
display bgp routing-table dampened
View
Any view
Parameter
None
Description
Use the display bgp routing-table dampened command to view BGP dampened routes.
Example
# View BGP dampened routes.
<3Com> display bgp routing-table dampened Flags: # - valid, ^ - best,
D - damped, H - history, I - internal, Dest/Mask S aggregate suppressed Source Damping-limit Origin As-path
----------------------------------------------------------------#D 11.1.0.0 133.1.1.2 1:20:00 IGP 200
Damping-limit tells you the remaining time for the dampened route to recover from the suppression state.
5.1.23 display bgp routing-table different-origin-as

Syntax
display bgp [ multicast ] routing-table different-origin-as
View
Any view
Parameter
None
Description
Use the display bgp routing-table different-origin-as command to view routes that have different source autonomous systems.
Example
# View the routes that have different source ASs.
<3Com> display bgp routing-table different-origin-as Flags: # - valid, D - damped, I - internal, ^ - best, H - history, S aggregate suppressed
Destination/Mask
Pref
Next-hop
Med
Local-Pref
Origin
As-Path
-----------------------------------------------------------------10.10.10.0/24 10.10.10.0/24 0 256 10.10.10.2 10.10.10.1 0 0 IGP IGP 200
5.1.24 display bgp routing-table flap-info

Syntax
display bgp routing-table flap-info [ { regular-expression as-regular-expression } | { as-path-acl aspath-acl-number } | { network-address [ mask [ longer-match ] ] } ]
View
Any view
Parameter
as-regular-expression: Displays the route flap-info matching AS path regular expression. acl-number: Number of the specified AS path to be matched, ranging from 1 to 199. network-address: Network IP address related to the flap statistics to be displayed. mask: Network mask. longer-match: Displays the route flap statistics that is more specific than
<network-address, mask>.
Description
Use the display bgp routing-table flap-info command to view BGP flap statistics. When <network-address mask> is <0.0.0.0 0.0.0.0>, this command will view the flap statistics of all BGP routes.
Example
# Display BGP flap statistics.
<3Com> display bgp routing-table flap-info Flags: # - valid, D - damped, I - internal, Dest/Mask ^ - best, H - history, S aggregate suppressed
Source Keepup-time Damping-limit Flap-times Origin As-path
-------------------------------------------------------------------#D 11.1.0.0/16 133.1.1.2 48 1:20:30 4 IGP 200
5.1.25 display bgp routing-table peer { advertised | received }

Syntax
display bgp routing-table peer peer-address { advertised | received }
View
Any view
Parameter
peer-address: Specifies the peer to be displayed. advertised: Routing information advertised by the specified peer. received: Routing information the specified peer received.
Description
Use the display bgp routing-table peer command to view the routing information the specified BGP peer advertised or received. Related command: display bgp peer.
Example
# View the routing information advertised by BGP peer 10.10.10.1.
<3Com> display bgp routing-table peer 10.10.10.1 advertised Flags: # - valid, D - damped, I - internal, Dest/mask ^ - best, H - history, S aggregate suppressed Med Local-pref Origin As-path
Next -Hop
----------------------------------------------------------------*>10.10.10.0/24 0.0.0.0 INC
5.1.26 display bgp routing-table peer dampened

Syntax
display bgp routing-table peer peer-address dampened [ statistic | ip-address ]
View
Any view
Parameter
peer-address: IP address of the BGP peer. statistic: Statistics about dampened routes. ip-address: Details about the specified dampened route.
Description
Use the display bgp routing-table peer dampened command to view the information about the dampened routes received from the specified peer.
Example
# Display the information about the dampened routes receved from the specified peer.
<3Com>display bgp routing-table peer 133.1.1.1 dampened
Flags:
# - valid D - damped B - balance
^ - active H - history
I - internal S - aggregate suppressed
Dest/Mask
Source
Damping-limit Origin Path
---------------------------------------------------------------------------#D 10.0.0.0/8 133.1.1.1 28:30 INC 200
# Display statistics about the dampened routes received from the specified peer.
<3Com>display bgp routing-table peer 133.1.1.1 dampened statistic Received damping routes total: 1
# Display the details about the dampened routes to the 10.0.0.0 segment received from the specified peer.
<3Com> display bgp routing-table peer 133.1.1.1 dampened 10.0.0.0
Flags:
# - valid D - damped
^ - active H - history
I - internal S - aggregate suppressed

B - balance
Dest/Mask
Source
Damping-limit Origin Path
----------------------------------------------------------------------------
5.1.27 display bgp routing-table peer regular-expression

Syntax
display bgp routing-table peer peer-address regular-expression text
View
Any view
Parameter
peer-address: IP address of the BGP peer. statistic: Statistics about dampened routes. text: AS regular expression.
Description
Use the display bgp routing-table peer regular-expression command to view the route information received from the specified peer and matching the specified regular expression.
Example
# Display the route information received from the specified peer and matching the regular expression 200.
<3Com> display bgp routing-table peer 133.1.1.1 regular-expression 200 Flags: # - valid D - damped B - balance ^ - active H - history I - internal S - aggregate suppressed
Dest/Mask
Next-Hop
Med
Local-pref Origin Path
----------------------------------------------------------------------
Received Routes: #D 10.0.0.0 133.1.1.1 0 INC 200
5.1.28 display bgp routing-table regular-expression

Syntax
display bgp [ multicast | [ vpnv4 { all | route-distinguisher route-distinguisher | vpn-instance vpn-instance-name } ] ] routing-table regular-expression as-regular-expression
View
Any view
Parameter
as-regular-expression: Matched AS regular expression.
Description
Use the display bgp routing-table regular-expression command to view the routing information matching the specified AS regular expression.
Example
# Display the routing information matching with AS regular expression ^600$.
<3Com> display bgp routing-table regular-expression ^600$ Flags: # - valid, D - damped, I - internal, ^ - best, H - history, S aggregate suppressed
Destination/Mask
Pref
Next-hop
Med
Local-Pref
Origin
As-Path
-------------------------------------------------------------------1.1.1.0/24 1.1.2.0/24 1.1.3.0/24 2.2.3.0/24 4.4.4.0/24 9.9.9.0/24 256 256 256 256 256 256 256 10.10.10.1 10.10.10.1 10.10.10.1 10.10.10.1 10.10.10.1 10.10.10.1 10.10.10.1 0 0 0 0 0 0 0 IGP IGP IGP INC IGP INC IGP 200 200 200 200 200 200 200
10.10.10.0/24

Syntax
filter-policy { acl-number | ip-prefix ip-prefix-name } export [ protocol ]
undo filter-policy { acl-number | ip-prefix ip-prefix-name } export [ protocol ]
View
Parameter
acl-number: Specifies the number of ACL matching the destination address field of routing information, ranging from 2000 to 2999. ip-prefix-name: Specifies the name of the address prefix list matching the destination address field of routing information, ranging from 1 to 19. protocol: Specifies routing information of which kind of routing protocol to be filtered. It can be direct, ospf, ospf-ase, ospf-nssa, isis, rip, and static at present.
Description
Use the filter-policy export command to filter the advertised routes, and only the routes passing the filter can be advertised by BGP. Use the undo filter-policy export command to cancel the filtering to the advertised routes. By default, advertised routing information is not filtered. If the argument protocol is specified, only routes redistributed from the specified protocol are filtered, and routes redistributed from other protocols are not affected. If the parameter protocol is not specified, routes redistributed from any protocol will be filtered.
Example
# Use acl 2003 to filter all routes advertised by BGP.
[3Com-bgp] filter-policy 2003 export

Syntax
filter-policy gateway ip-prefix-name import undo filter-policy gateway ip-prefix-name import filter-policy { acl-number | ip-prefix ip-prefix-name } import undo filter-policy { acl-number | ip-prefix ip-prefix-name } import
View
Parameter
acl-number: Specifies the number of ACL matching the destination address field of routing information, ranging from 2000 to 2999. ip-prefix ip-prefix-name: Address prefix list name. The matched object is the destination address field of the routing information, ranging from 1 to 19. gateway ip-prefix-name: Address prefix list name of the neighboring router. The matched object is the routing information distributed by the specified neighboring router, ranging from 1 to 19.
Description
Use the filter-policy gateway import command to filter the learned routing information advertised by the specified address. Use the undo filter-policy gateway import command to remove the filtering to the routing information advertised by the specified address. Use the filter-policy import command to filter the received global routing information. Use the undo filter-policy import command to remove the filtering to the received global routing information. By default, the received routing information is not filtered. This command can be used to filter the routes received by BGP and determines whether to add the routes to the BGP routing table.
Example
# Use acl 2003 to filter the routing information received by BGP.
[3Com-bgp] filter-policy 2003 import
5.1.31 group
Syntax
group group-name { [ internal ] | external } undo group group-name
View
BGP view
Parameter
group-name: Specifies the name of the peer group. It can be an alphanumeric string with the length ranging from 1 to 47.
internal: Creates an internal peer group. external: Creates an external peer group including other sub ASs in the confederation.
Description
Use the group command to create a peer group. Use the undo group command to delete the configured peer group. The use of BGP peer group is for ease of configuration. When you are starting several peers with the same configuration, you can establish and configure a peer group at first, and then add all the peers to the peer group so that they have the same configuration as the peer group. By default, an IBGP peer is added to the default peer group and needs no configuration, and the route update policy configured for any IBGP peer is valid for the other IBGP peers in the group. To be specific, if the router is not a route reflector, all the IBGP peers are in the same group. If the router is a route reflector, all the route reflection clients are in a group, while non-clients are in another group. The external peer group members must be in the same network segment. Otherwise, some EBGP peers may discard the transmitted route update. The peer group members cannot be configured with a route update policy different from that of the peer group, but can be configured with different ingress policies.
Example
# Establish a peer group "test".
[3Com-bgp] group test
5.1.32 import-route
Syntax
import-route protocol [ med med-value ] [ route-policy route-policy-name ] undo import-route protocol
View
BGP view
Parameter
protocol: Specifies the routing protocol from which to redistribute routes, it can be direct, ospf, ospf-nssa , ospf-ase, rip, bgp, and static at present.
med med-value: Specifies the MED value to be applied to redistributed routes, ranging from 0 to 4294967295. route-policy route-policy-name: Specifies the route-policy for filtering redistributed routes. It can be an alphanumeric string with the length ranging from 1 to 19.
Description
Use the import-route command to redistribute routes from other protocols. Use the undo import-route command to disable the configuration. By default, BGP does not redistribute routes from other protocols.
Example
# Redistribute routes from RIP.
[3Com-bgp] import-route rip
5.1.33 ip as-path-acl
Syntax
ip as-path-acl aspath-acl-number { permit | deny } as-regular-expression undo ip as-path-acl aspath-acl-number
View
System view
Parameter
aspath-acl-number: Number of AS path list ranging from 1 to 199. as-regular-expression: AS path regular expression. The routing information packet of the BGP protocol includes an AS path field. During BGP routing information exchange, all the ASs along the route are recorded in this field. Identifying an AS path list is to compare it with a regular expression. A regular expression is a combination of characters. For example, ^200 100$ means all the AS path fields that begin with AS200 and end with AS100. The following table shows the special characters used in AS regular expressions and their meanings. Table 5-5 Special characters in regular expressions Character . Meaning Matches any single character, including blank space.
Character * + ^ $ _ [ range ] Matches 0 or more patterns. Matches 1 or more patterns.
Meaning
Matches the beginning of an input string. Matches the end of an input string. Matches a comma, left brace, right brace, left parenthesis, right parenthesis, the beginning of an input string, the end of an input string, or a space. Means the range of single-character patterns. Separates the ending points of a range.
You can specify a regular expression to match AS path information when defining aspath-acl. The system can filter out unmatched routing information by matching aspath-acl. You can define multiple aspath-acl commands for one list number, that is, one list number can represent a group of AS access lists. Each AS path list is identified by a number.
Description
Use the ip as-path-acl command to configure an AS path regular expression. Use the undo ip as-path-acl command to disable the defined regular expression. The configured AS path list can be used in BGP policy. Related command: peer as-path-acl, and display bgp routing-table as-path-acl.
Example
# Configure an AS path list.
[3Com] ip as-path-acl 10 permit 200,300
5.1.34 ip community-list
Syntax
ip community-list stand-comm-list-number { permit | deny } { aa:nn | internet | no-export-subconfed | no-advertise | no-export } ip community-list ext-comm-list-number { permit | deny } as-regular-expression undo ip community-list { stand-comm-list-number | ext-comm-list-number }
View
System view
Parameter
stand-comm-list-number: Number of the standard community list ranging from 1 to 99. ext-comm-list-number: Number of the extended community list ranging from 100 to 199. permit: Permits those that match the conditions to access. deny: Denies those that match the conditions to access. aa:nn: Community number, where aa is the AS number and nn is the community number. internet: Advertises all routes. no-export-subconfed: Indicates not to advertise matched routes outside the AS. no-advertise: Indicates not to advertise matched routes to any peer. no-export: Indicates not to advertise routes outside the AS but to other sub ASs. as-regular-expression: Community attribute in the regular expression form.
Description
Use the ip community-list command to configure a BGP community list. Use the undo ip community-list command to delete the configured BGP community list. The configured community list can be used in BGP policy. Related command: apply community, and display bgp routing-table community-list.
Example
# Define a community attribute list and indicate not to advertise routes with the community attribute beyond the AS.
[3Com] ip community-list 6 permit no-export-subconfed
5.1.35 network
Syntax
network ip-address [ address-mask ] [ route-policy route-policy-name ] undo network ip-address [ address-mask ] [ route-policy route-policy-name ]
View
BGP view
Parameter
ip-address: Network address for BGP to advertise. address-mask: Mask of the network address. route-policy-name: Route-policy applied to the advertised route.
Description
Use the network command to configure the network routes advertised by the local BGP system. Use the undo network command to cancel the existing configuration. By default, no route is advertised by the local BGP system.
Example
# Advertise the route through network segment 10.0.0.0/16.
[3Com-bgp] network 10.0.0.1 255.255.0.0
5.1.36 peer advertise-community

Syntax
peer group-name advertise-community undo peer group-name advertise-community
View
BGP view, VPNv4 view, VPN instance view
Parameter
group-name: Specifies the name of the peer group.
Description
Use the peer advertise-community command to enable the transmission of community attributes to a peer group. Use the undo peer advertise-community command to cancel the existing configuration. By default, community attributes are not transmitted to any peer group. Related command: if-match community-list, apply community.
Example
# Enable the transmission of community attributes to peer group test.

[3Com-bgp] peer test advertise-community
5.1.37 peer allow-as-loop

Syntax
peer { group-name | peer-address } allow-as-loop [ number ] undo peer { group-name | peer-address } allow-as-loop
View
Parameter
group-name: Specifies the name of the peer group. peer-address: Specifies the IP address of the peer. number: Specifies the repeating times of the local AS number. The range is 1 to 10.
Description
Use the peer allow-as-loop command to configure the repeating times of the local AS number. Use the undo peer allow-as-loop command to cancel the configuration. Related command: display current-configuration, display bgp routing-table peer, and display bgp routing-table group.
Example
# Configure the repeating times of the local AS number to 2.
[3Com-bgp] peer 1.1.1.1 allow-as-loop 2
5.1.38 peer as-number

Syntax
peer group-name as-number as-number undo peer group-name as-number as-number
View
BGP view
Parameter
group-name: Specifies the name of the peer group. as-number: Peer AS number of the peer/peer group. The range is 1 to 65535.
Description
Use the peer as-number command to specify an AS number for a peer group. Use the undo peer as-number command to delete the AS number of a peer group. By default, no AS number is configured.
Example
# Specify the AS number of the peer group test as 100.
[3Com-bgp] peer test as-number 100
5.1.39 peer as-path-acl

Syntax
peer { group-name | peer-address } as-path-acl number import undo peer { group-name | peer-address } as-path-acl number import peer group-name as-path-acl number export undo peer group-name as-path-acl number export
View
Parameter
group-name: Specifies the name of the peer group. peer-address: Specifies the IP address of the peer. aspath-acl-number: Specifies the filtering list number of an AS regular expression. The range is 1 to 199. import: Distribution list for received routes. export: Distribution list for advertised routes.
Description
Use the peer as-path-acl command to specify BGP route filtering policy based on AS path list for a peer/peer group.
Use the undo peer as-path-acl command to cancel the existing configuration. By default, a peer/peer group has no AS path list associated.
Example
# Set the AS path ACL for peer group test.
[3Com-bgp] peer test as-number 100 [3Com-bgp] peer test as-path-acl 3 export
5.1.40 peer connect-interface

Syntax
peer { group-name | peer-address } connect-interface interface-type interface-number undo peer { group-name | peer-address } connect-interface interface-type
interface-number
View
BGP view
Parameter
group-name: Specifies the name of the peer group. peer-address: Specifies the IP address of the peer. interface-type interface-number: Specifies the type and name of the interface.
Description
Use the peer connect-interface command to specify the source interface for route updates. Use the undo peer connect-interface command to restore the best source interface. By default, BGP uses the best source interface. Usually, BGP uses the optimal source interface to forward route updates. However, for updates to be forwarded in case the interface experiences a failure, you can configure to use the Loopback interface for forwarding route updates.
Example
# Specify to use loopback0 as the source interface for route updates.
[3Com-bgp] peer test connect-interface loopback 0
5.1.41 peer default-route-advertise

Syntax
peer group-name default-route-advertise undo peer group-name default-route-advertise
View
BGP view
Parameter
Description
Use the peer default-route-advertise command to redistribute a default route to a peer group. Use the undo peer default-route-advertise command to cancel the existing configuration. By default, no default route is redistributed to a peer group. For this command, no default route is required in the routing table. A default route is sent unconditionally to a peer with the next hop being itself.
Example
# Redistribute a default route to peer group "test".
[3Com-bgp] peer test as-number 100 [3Com-bgp] peer test default-route-advertise
5.1.42 peer description

Syntax
peer { group-name | peer-address } description description-line undo peer { group-name | peer-address } description
View
BGP view
Parameter
peer-address: Specifies the IP address of the peer. description-line: Description information to be configured, an alphanumeric string up to 79 characters.
Description
Use the peer description command to configure the description information of the peer/peer group. Use the undo peer description command to remove the description information of the peer/peer group. By default, no description information is configured for a peer (group). Related command: display current-configuration, display bgp peer, and display bgp routing-table group.
Example
# Configure the description information of the peer named group1 as marlborough1.
[3Com-bgp] peer group1 description marlborough1
5.1.43 peer ebgp-max-hop

Syntax
peer group-name ebgp-max-hop [ ttl ] undo peer group-name ebgp-max-hop
View
BGP view
Parameter
group-name: Specifies the name of the peer group. ttl: Specifies the maximum hop count. The range is 1 to 255. By default, the value is 64.
Description
Use the peer ebgp-max-hop command to allow establishing EBGP connection with a neighbor on an indirectly connected network. Use the undo peer ebgp-max-hop command to cancel the existing configuration. By default, this feature is disabled.
Example
# Allow to establish EBGP connection with peer group "test" on an indirectly connected network.
[3Com-bgp] peer test ebgp-max-hop
5.1.44 peer enable

Syntax
peer { group-name | peer-address } enable undo peer { group-name | peer-address } enable
View
BGP unicast address family view, IPv4 multicast sub-address family view, VPNv4 address family view, L2VPN address family view
Parameter
group-name: Specifies the name of the peer group. peer-address: Specifies the IP address of the peer.
Description
Use the peer enable command to enable the specified peer (group). Use the undo peer enable command to disable the specified peer (group). Note that the peer peer-address enable command can be configured in unicast address family only. Use this command to disable the unicast function of the peer. You can delete the peer from the group in the corresponding address to disable its multicast function or VPNv4 function. By default, BGP peer (group) is enabled in unicast address family, but disabled in VPN and MBP address families. If the specified peer/peer group is disabled, the router will not exchange routing information with the specified peer (group).
Example
# Deactivate the specified peer.
[3Com] bgp 180 [3Com-bgp] peer 18.10.0.9 as-number 180 [3Com-bgp] undo peer 18.10.0.9 enable
5.1.45 peer filter-policy

Syntax
peer { group-name | peer-address } filter-policy acl-number import undo peer { group-name | peer-address } filter-policy acl-number import peer group-name filter-policy acl-number export undo peer group-name filter-policy acl-number export
View
BGP view, IPv4 multicast sub-address family view
Parameter
group-name: Specifies the name of the peer group. peer-address: Specifies the IP address of the peer. list-number: Specifies the IP ACL number. import: Applies the filter-policy to received routes. export: Applies the filter-policy to advertised routes.
Description
Use the peer filter-policy import command to configure BGP to filter routes received from the peer (group) based on the ACL. Use the undo peer filter-policy import command to cancel filtering of the received routes based on the ACL. Use the peer filter-policy export command to configure BGP to filter routes advertised to the peer (group) based on the ACL. Use the undo peer filter-policy export command to cancel filtering of the advertised routes based on the ACL. By default, no filtering is applied to routes advertised or received. Related command: ip as-path acl and peer as-path-acl.
Example
# Set the filter-policy list of peer group test.
[3Com] acl number 2003 [3Com-acl-basic-2003]rule 0 deny source 98.12.0.0 0.0.0.255 [3Com-acl-basic-2003]quit [3Com] bgp 100

[3Com-bgp] peer test as-number 100
[3Com-bgp] peer test filter-policy 2003 import
5.1.46 peer group

Syntax
For multicast address family or VPNv4 address family: peer peer-address group group-name undo peer peer-address group For unicast address family or VPN-INSTANCE address family: peer peer-address group group-name [ as-number as-number ] undo peer peer-address group
View
BGP view
Parameter
group-name: Specifies the name of the peer group. It can be an alphanumeric string with the length ranging from 1 to 47. peer-address: Specifies the IP address of the peer. as-number: Specifies the AS number for the peer.
Description
Use the peer group command to add a peer to a peer group. Use the undo peer group command to delete the specified peer from a peer group. In the unicast/VPN-INSTANCE address family view, when adding a peer to an external peer group without a specified AS number, specify an AS number for the peer at the same time. It is unnecessary when adding the peer to an internal peer group or an external peer group with a specified AS number. In the multicast/VPNv4 address family view, it is required that the peer to be added exist and have been added to a peer group in the unicast address family (the peer can be disabled). In different address family views, a peer can be added to different peer groups and a peer group can have different members.
Example
# Add the peer with IP address being 10.1.1.1 to the peer group TEST.
[3Com-bgp] group TEST [3Com-bgp] peer 10.1.1.1 group TEST
5.1.47 peer ip-prefix

Syntax
peer { group-name | peer-address } ip-prefix prefixname import undo peer { group-name | peer-address } ip-prefix prefixname import peer group-name ip-prefix prefixname export undo peer group-name ip-prefix prefixname export
View
Parameter
group-name: Specifies the name of the peer group. peer-address: Specifies the IP address of the peer. prefixname: Specifies the name of the ip-prefix. import: Applies the filtering policy to routes received by the specified peer/peer group. export: Applies the filtering policy to routes advertised to the specified peer/peer group.
Description
Use the peer ip-prefix import command to configure BGP to filter routes received from the peer/peer group based on the ip-prefix list. Use the undo peer ip-prefix import command to cancel filtering of the received routes based on the ip-prefix list. Use the peer ip-prefix export command to configure BGP to filter routes advertised to the peer/peer group based on the ip-prefix list. Use the undo peer ip-prefix export command to cancel filtering of the advertised routes based on the ip-prefix list. By default, no filtering is applied to routes advertised or received. Related command: ip ip-prefix.
Example
# Configure the route filtering policy based on the ip-prefix list.
[3Com-bgp] peer group1 ip-prefix list1 import
5.1.48 peer next-hop-local

Syntax
peer group-name next-hop-local undo peer group-name next-hop-local
View
BGP view
Parameter
Description
Use the peer next-hop-local command to configure the next hop in the route to be advertised to the peer group as the address of the local router. Use the undo peer next-hop-local command to cancel the configuration.
Example
# Make BGP take its own address as the next hop when distributing a route to peer group test.
[3Com-bgp] peer test next-hop-local
5.1.49 peer password

Syntax
peer { group-name | peer-address } password { cipher | simple } password undo peer { group-name | peer-address } password
View
BGP view, MBGP VPN-instance address family view
Parameter
peer-address: Specifies the IP address of the peer, in dotted decimal format. cipher: Displays the configured password in cipher text. simple: Displays the configured password in simple text. password: Password, a string with 1 to 16 characters when argument simple is configured in the command or in the event of inputting the password in simple text but argument cipher is configured in the command; with 24 characters in the event of inputting the password in cipher text when argument cipher is configured in the command.
Description
Use the peer password command to configure BGP to perform MD5 authentication before setting up a TCP connection. Use the undo peer password command to cancel the configuration. By default, BGP does not perform MD5 authentication before setting up a TCP connection. Once MD5 authentication is enabled, both parties involved in the authentication must be configured with the exact authentication mode and password. Otherwise, the TCP connection will not be set up because of the failed authentication. This command is used to configure MD5 authentication for a specific peer only when the peer group to which the peer belongs is not configured with MD5 authentication. Otherwise, the peer group configuration takes precedence.
Example
# Perform MD5 authentication on the TCP connection set up between the local router at 10.1.100.1 and the peer router at 10.1.100.2.
[3Com-bgp] peer 10.1.100.2 password simple 3Com
# Perform the similar configuration on the peer.

[3Com-bgp] peer 10.1.100.1 password simple 3Com
5.1.50 peer public-as-only

Syntax
peer group-name public-as-only undo peer group-name public-as-only
View
BGP view
Parameter
Description
Use the peer public-as-only command to configure not to carry the private AS number when transmitting BGP updates. Use the undo peer public-as-only command to configure to carry the private AS number when transmitting BGP updates. By default, the private AS number is carried when BGP updates are transmitted. Generally, BGP transmits BGP updates with the AS number (either the public AS number or the private AS number). To enable some outbound routers to ignore the private AS number when transmitting updates, configure not to carry the private AS number when transmitting BGP updates.
Example
# Configure not to carry the private AS number when transmitting BGP updates to the peer named test.
[3Com-bgp] peer test public-as-only
5.1.51 peer reflect-client

Syntax
peer group-name reflect-client undo peer group-name reflect-client
View
BGP view, VPNv4 view
Parameter
Description
Use the peer reflect-client command to configure a peer group as the route reflector client. Use the undo peer reflect-client command to cancel the existing configuration. By default, no route reflector is in AS.
Generally speaking, it is not necessary to configure this command for the peer group because IBGP peers are in the default group. A single peer peer-address reflect-client command should be used to configure the route reflector clients. Related command: reflect between-clients and reflect cluster-id.
Example
# Configure the peer group "test" as the route reflector client.
[3Com-bgp] peer test reflect-client
5.1.52 peer route-policy

Syntax
peer { group-name | peer-address } route-policy policy-name import undo peer { group-name | peer-address } route-policy policy-name import peer group-name route-policy policy-name export undo peer group-name route-policy policy-name export
View
Parameter
group-name: Specifies the name of the peer group. peer-address: Specifies the IP address of the peer. route-policy-name: Specifies the route-policy. import: Applies the route-policy to routes received from the peer (group). export: Applies the route-policy to routes advertised to the peer (group).
Description
Use the peer route-policy import command to configure MBGP to filter routes received from the peer (group) based on the route-policy. Use the undo peer route-policy import command to disable the specified route-policy. Use the peer route-policy export command to configure MBGP to filter routes advertised to the peer (group) based on the route-policy. Use the undo peer route-policy export command to disable the specified route-policy. By default, the peer (group) has no route-policy associated.
Example
# Apply routing policy test-policy to routes from peer group test.
[3Com-bgp] peer test route-policy test-policy import
5.1.53 peer route-update-interval

Syntax
peer group-name route-update-interval seconds undo peer group-name route-update-interval
View
Parameter
group-name: Specifies the name of the peer group. seconds: Specifies the minimum interval of sending UPDATE message. The range is 0 to 600 seconds. By default, the interval is 5 seconds for internal peer groups, and 30 seconds for external peer groups.
Description
Use the peer route-update-interval command to configure the interval for a peer group to advertise route updates. Use the undo peer route-update-interval command to restore the default value.
Example
# Configure BGP peer group test to advertise route updates at intervals of 10 seconds.
[3Com-bgp] peer test as-number 100 [3Com-bgp] peer test route-update-interval 10
5.1.54 peer shutdown

Syntax
peer { group-name | peer-address } shutdown undo peer {group-name | peer-address } shutdown
View
BGP view, VPN instance view
Parameter
group-name: Specifies the name of the peer group. peer-address: Specifies the IP address of the peer.
Description
Use the peer shutdown command to disable the specified BGP peer or peer group to initiate or a receive BGP connection or to disconnect a BGP connection that has existed. Use the undo peer shutdown command to restore the default, allowing the peer/peer group to intiate or receive BGP connection.
Example
# Disable the BGP peer 1.1.1.1 to initiate or receive BGP connection.
[Router-bgp] peer 1.1.1.1 shutdown
5.1.55 peer timer

Syntax
peer { group-name | peer-address } timer keep-alive keepalive-interval hold holdtime-interval undo peer { group-name | peer-address } timer
View
BGP view
Parameter
group-name: Specifies the name of the peer group. peer-address: Specifies the IP address of the peer. keepalive-interval: Specifies the Keepalive interval. The range is 1 to 4294967295 seconds. By default, its value is 60 seconds. holdtime-interval: Specifies the Holdtime interval. The range is 3 to 4294967295 seconds. By default, its value is 180 seconds.
Description
Use the peer timer command to configure Keepalive and Holdtime intervals for a peer (group). Use the undo peer timer command to restore the default values.
The timer configured by using this command has a higher priority than the one configured by using the timer command.
Example
# Configure the Keepalive and Holdtime intervals of the peer group "test".
[3Com-bgp] peer test timer keep-alive 60 hold 180
5.1.56 preference
Syntax
View
BGP protocol view, BGP multicast address family view
Parameter
value: Specifies the preference, ranging from 1 to 256. By default, the value is 170.
Description
Use the preference command to configure the preference of a BGP protocol. Use the undo preference command to restore the default preference. Each kind of routing protocol has its own preference, by which the routing policy will select the optimal from the routes of different protocols. The greater the preference value is, the lower the preference is. BGP defines two kinds of routes: routes learned from external peers and routes learned from internal peers. The preferences of the two kinds of routes can be different, and can be set manually. Different BGP preferences for different sub-address families are supported, so are unicast address family and multicast address family at present.
Example
# Configure the preference of the BGP protocol to 150.
[3Com-bgp] preference 150
5.1.57 reflect between-clients

Syntax
reflect between-clients undo reflect between-clients
View
Parameter
None
Description
Use the reflect between-clients command to enable route reflection between clients. Use the undo reflect between-clients command to disable this function. By default, the route reflection between clients is disabled. After a route reflector is configured, it reflects the routes of a client to other clients. Related command: reflector cluster-id and peer reflect-client.
Example
# Disable the route reflection between clients.
[3Com-bgp] undo reflect between-clients
5.1.58 reflector cluster-id

Syntax
reflector cluster-id { cluster-id | address } undo reflector cluster-id
View
Parameter
cluster-id: Specifies the cluster ID of the route reflector, in integer or IP address format, with the range from 1 to 4294967295. address: Specifies the interface address of the route reflectors cluster ID.
Description
Use the reflector cluster-id command to configure the cluster ID of the route reflector. Use the undo reflector cluster-id command to remove the configured cluster ID. By default, each route reflector uses its router ID as the cluster ID. Usually, there is only one route reflector in a cluster. It is the router ID of the reflector that identifies the cluster. You can configure multiple route reflectors to improve the stability of the network. If a cluster is configured with multiple route reflectors, use this command to configure the identical cluster ID for all the reflectors. Related command: reflect between-clients and peer reflect-client.
Example
# Set cluster ID for local router to identify the cluster.
[3Com-bgp] reflector cluster-id 80 [3Com-bgp] peer 11.128.160.10 reflect-client
5.1.59 refresh bgp

Syntax
refresh bgp { all | peer-address | { group group-name } } [ multicast | vpnv4 | vpn-instance vpn-instance-name ] { import | export }
View
User view
Parameter
all: Refreshes all the peers. peer-address: Refreshes the peer with the specified address. group-name: Refreshes all the members in the specified peer group. vpnv4: Refreshes routes of VPNv4 address family for the peer. multicast: Refreshes routes of multicast address family for the peer. vpn-instance vpn-instance-name: Refreshes VPN routes for the peer in the specified VPN-INSTANCE. import: Sends ROUTE-REFRESH packet to the peer to require retransmission of all the routes. export: Retransmits all the routes to the peer.
Description
Use the refresh bgp command to request the peer to retransmit routes or retransmit routes to the peer. After a BGP connection is created, only incremental routes are transmitted. However, in some cases, for example, when the routing policy is changed, retransmission of routes is required on both ends and the routes will be filtered according to the new policy.
Example
# Request all the peers to retransmit multicast routes.
<3Com> refresh bgp all multicast import
# Retransmit all the routes to the CE peer 10.1.1.1 in VPN-INSTANCE vpn1.

<3Com> refresh bgp 10.1.1.1 vpn-instance vpn1 export
5.1.60 reset bgp

Syntax
reset bgp { all | peer-address } [ vpn-instance vpn-instance-name ]
View
User view
Parameter
all: Resets all the BGP connections. peer-address: Resets only the connection with the specified BGP peer. vpn-instance vpn-instance-name: Name of specified VPN-INSTANCE. The range is 1 to 19.
Description
Use the reset bgp peer-address command to reset the connection of BGP with a specified peer. Use the reset bgp all command to reset all the BGP connections. After changing the BGP policy or protocol configuration, resetting BGP connections can make the newly configured policy effective immediately.
Example
# Reset all the BGP connections to enable the new configuration (after configuring new Keepalive and Holdtime intervals using the timer command).

<3Com> reset bgp all
5.1.61 reset bgp flap-info

Syntax
reset bgp flap-info [ regular-expression as-regular-expression | as-path-acl
aspath-acl-number | network-address [ mask ] } ] reset bgp network-address [ flap-info ]
View
User view
Parameter
regular-expression as-regular-expression: Clears the flap statistics of routes matching the AS path regular expression. as-path-acl aspath-acl-number: Clears the flap statistics of routes in consistency with the specified filtering list. The range of the argument is 1 to 199. network-address: Clears the flap statistics recorded at this IP address. If this argument is put before flap-info, the router clears the flap statistics of all the routes from this address. mask: Network mask.
Description
Use the reset bgp flap-info command to reset the flap statistics of routes. Related command: dampening.
Example
# Clear the flap statistics of all routes matching filtering list 10.
<3Com> reset bgp flap-info as-path-acl 10
5.1.62 reset bgp group

Syntax
reset bgp group group-name [ vpn-instance vpn-instance-name ]
View
User view
Parameter
group-name: Specifies the name of the peer group, in a string with 1 to 47 characters. vpn-instance vpn-instance-name: Specifies the name of the VPN-INSTANCE. The range is 1 to 19.
Description
Use the reset bgp group command to reset the BGP connections of all the members in the specified peer group. Related command: peer group.
Example
# Reset the BGP connections of all members from peer group group1.
<3Com> reset bgp group group1
5.1.63 reset dampening

Syntax
reset dampening [ network-address [ mask ] ]
View
User view
Parameter
network-address: Network IP address related to clearing dampening information. mask: Network mask.
Description
Use the reset dampening command to clear the dampening information and flap statistics of a route and release the suppression of a suppressed route. Related command: dampening and display bgp routing-table dampened.
Example
# Clear the dampening information of the route to network 20.1.0.0, and release the suppression of the suppressed route.
<3Com> reset dampening 20.1.0.0 255.255.0.0
5.1.64 summary
Syntax
summary undo summary
View
BGP unicast view, BGP multicast view, VPN instance view
Parameter
None
Description
Use the summary command to configure automatic aggregation of sub-network routes. Use the undo summary command to disable automatic aggregation. By default, no automatic aggregation of sub-network routes is executed. After the summary is configured, BGP cannot receive sub-network routes redistributed from IGP, so the amount of the routing information can be reduced.
Example
# Configure automatic aggregation of the sub-network routes.
[3Com-bgp] summary
5.1.65 timer keep-alive hold

Syntax
timer keep-alive keepalive-interval hold holdtime-interval undo timer
View
Parameter
keepalive-interval: Interval for sending Keepalive message, ranging from 1 to 4294967295. By default, its value is 60 seconds. holdtime-interval: Keepalive time of BGP, ranging from 3 to 4294967295. By default, its value is 180 seconds.
Description
Use the timer keep-alive hold command to configure the Keepalive and Holdtime timer of BGP. Use the undo timer keep-alive hold command to restore the default values of the Keepalive and Holdtime timers.
Example
# Configure the Keep-alive and Hold-time timers as 30 seconds and 60 seconds, respectively.
[3Com-bgp] timer keep-alive 30 hold 60
5.1.66 undo synchronization

Syntax
undo synchronization
View
Parameter
None
Description
Use the undo synchronization command to remove the synchronization between BGP and IBGP.
Example
[3Com-bgp] undo synchronization
5.2 MBGP Configuration Commands
Note: In the following command description, BGP unicast view indicates the common BGP view. For the specific configuration of MBGP multicast extension, refer to the "Multicast" module in this manual. For the specific configuration of VPN instance and VPNv4, refer to "MPLS" module in this manual.
5.2.1 ipv4-family
Syntax
ipv4-family { multicast | vpn-instance vpn-instance-name } undo ipv4-family { multicast | vpn-instance vpn-instance-name }
View
Parameter
multicast: Enters the BGP multicast extended address family view with the argument. vpn-instance vpn-instance-name: Associates the specified VPN instance with the IPv4 address family. Enter the MBGP address family view of BGP with this argument.
Description
Use the ipv4-family command to enter IPv4 extended address family view of BGP. Use the undo ipv4-family command to remove all configurations in extended address family view and return to IPv4 unicast address family view of BGP. Use the command to enter the IPv4 extended address family view. In this view, parameters related to the address family can be configured for BGP. Use the undo ipv4-family multicast command to exit the multicast extended address family view, remove all configurations in address family view and return to BGP unicast view. Use the undo ipv4-family vpn-instance vpn-instance-name command to remove the association between the specified VPN instance and IPv4 address family and delete all configurations in the address family and return to BGP unicast view. Use the ipv4-family multicast command to multicast. For relevant contents, refer to "MBGP Multicast Extended" chapter in module "Multicast" of this manual. Use the ipv4-family vpn-instance command for BGP/MPLS VPN. For a related description refer to "MPLS VPN" chapter in module "MPLS" module of this manual. Related command: ipv4-family vpnv4 and peer enable.
Example
None
5.2.2 ipv4-family vpnv4

Syntax
ipv4-family vpnv4 [ unicast ] undo ipv4-family vpnv4 [ unicast ]
View
BGP view
Parameter
unicast: Enters VPN-IPv4 unicast address family view with this argument.
Description
Use the ipv4-family vpnv4 command to enter VPNv4 address family view of BGP. Use the undo ipv4-family vpnv4 command to delete all configurations in VPNv4 address family view and return to IPv4 unicast address family view of BGP. The ipv4-family vpnv4 command is used for BGP/MPLS VPN. For a related description refer to the "MPLS VPN" chapter in module "MPLS" of this manual. The present 3Com Router Software platform only supports IPv4 unicast address of VPN. Performing the ipv4-family vpnv4 command will enter VPN-IPv4 unicast address family view even if the unicast argument is not specified. Related command: ipv4-family and peer enable.
Example
None
5.2.3 peer enable

Syntax
View
Parameter
group-name: Specifies the name of the peer group, which specifies the entire peer group.
peer-address: Specifies the IP address of the peer, which specifies a certain peer.
Description
Use the peer enable command to enable the specified peer/peer group. Use the undo peer enable command to disable it. By default, the unicast peer/peer group of IPv4 address family is enabled and the other peers/peer groups are disabled. Use this command to enable/disable the routing information exchange between the peers (peer groups). By default, the peer (group) of IPv4 unicast is enabled. The undo command is used to disable the peer (group). When a connection is used in both unicast and multicast, you can configure to disable unicast peer to delete the unicast connection and keep the multicast connection. By default, the peer (group) in other address families is disabled, which must be enabled to exchange routing information.
Example
# Configure and enable the specified peer of VPNv4 unicast address family.
[3Com] bgp 100 [3Com-bgp] peer 10.15.0.15 as-number 100 [3Com-bgp] ipv4-family vpnv4 unicast [3Com-bgp-af-vpn] peer 10.15.0.15 enable
# Configure and enable the specified peer of IPv4 multicast address family.
[3Com] bgp 200 [3Com-bgp] peer 20.10.0.1 as-number 200 [3Com-bgp] ipv4-family multicast [3Com-bgp-af-mul] peer 20.10.0.1 enable
Chapter 6 IP Routing Policy Configuration Commands

6.1 IP Routing Policy Configuration Commands
6.1.1 apply as-path
Syntax
apply as-path as-number-1 [ as-number-2 [ as-number-3 ... ] ] undo apply as-path
View
Routing policy view
Parameter
as-number-1... as-number-n: AS numbers to be added.
Description
Use the apply as-path command to specify the AS numbers to be added in front of the original AS path in route-policy. Use the undo apply as-path command to cancel the AS sequence numbers added in front of the original AS path. By default, no AS number is set. If the match condition of route-policy is satisfied, the AS attribute of the transmitting route will be changed. Up to 10 AS numbers can be added. The as-path number is primarily used to prevent routing loops. By setting as-path, you can change the BGP route selection behavior.
Example
# Add AS 200 in front of the original AS path in route-policy.
[3Com-route-policy] apply as-path 200
6.1.2 apply community

Syntax
apply community { { {aa:nn | no-export-sunconfed | no-export | no-advertise} [ additive ] } | additive | none } undo apply community
View
Routing policy view
Parameter
aa:nn: Community number. no-export-subconfed: Indicates not to advertise matched routes outside the AS. no-advertise: Indicates not to advertise matched routes to any peer. no-export: Indicates not to advertise routes outside the AS but to other sub ASs. additive: Community attributes of additional routes. none: Community attributes of the deleted routes.
Description
Use the apply community command to set BGP community attributes in route-policy. Use the undo apply community command to cancel the configured BGP community attributes. By default, no BGP community attributes are set. Configure BGP community attributes after matching the route-policy conditions. Related command: ip community-list, if-match community-list, route-policy, display bgp routing-table community.
Example
# Display how to configure one route-policy named setcommunity, whose node serial number is 16 and match mode is permit, and enter route policy view to set match conditions and attribute modification actions to be executed.
[3Com] route-policy setcommunity permit node 16 [3Com-route-policy] if-match as-path 8 [3Com-route-policy] apply community no-export
6.1.3 apply cost

Syntax
apply cost value undo apply cost
View
Routing policy view
Parameter
value: Specifies the route cost value of route information.
Description
Use the apply cost command to set the route cost value of route information. Use the undo apply cost command to cancel the apply clause. Related command: if-match interface, if-match acl, if-match ip-prefix, if-match ip next-hop, if-match cost, if-match tag, route-policy, apply ip-address, apply local-preference, apply origin, and apply tag.
Example
# Display how to define one apply clause. When it is used for setting route information attribute, it sets the route cost value of route information as 120.
[3Com-route-policy] apply cost 120
6.1.4 apply cost-type

Syntax
apply cost-type [ internal | external ] undo apply cost-type
View
Routing policy view
Parameter
internal: Uses the cost type of IGP as MED value of BGP to advertise route to EBGP peer. external: External cost type value of IS-IS.
Description
Use the apply cost-type command to set the route cost type of route information. Use the undo apply cost-type command to cancel the apply clause. By default, route cost type is not set.
Example
# Set the cost type of IGP as MED value of BGP
[3Com-route-policy] apply cost-type internal
6.1.5 apply ip-address

Syntax
apply ip-address [ default ] { next-hop ip-address [ ip-address ] | acl acl-number } undo apply ip-address [ default ] { next-hop ip-address [ ip-address ] | acl acl-number }
View
Routing policy view
Parameter
default: Specifies the default next-hop address. It voids the acl argument. ip-address: Next-hop address. Two next-hop addresses can be specified at most. acl-number: Specifies the number of the access control list used for filtering, ranging from 2000 to 2999
Description
Use the apply ip-address command to set the next hop address of route information. Use the undo apply ip-address command to cancel the apply clause. By default, no apply clause is defined. One of the apply clauses of the route-policy: When this command is used for setting a routing information attribute, it sets the next hop address of the packets passed filtering. If multiple next hop addresses are set through the apply ip-address command, other next hop addresses will be tried by turn when the first next hop address is invalid. Related command: if-match interface, if-match acl, if-match ip-prefix, if-match ip next-hop, if-match cost, if-match tag, route-policy, apply local-preference, apply cost, apply origin, and apply tag.
Example
# Define an apply clause to set the next hop address of routing information as 193.1.1.8 when it is used for setting routing information attribute.
[3Com-route-policy] apply ip-address 193.1.1.8
6.1.6 apply isis

apply isis [ level-1 | level-2 | level-1-2 ] undo apply isis
View
Routing policy view
Parameter
level-1: Redistributes the matched route to Level-1 area. level-2: Redistributes the matched route to Level-2 area. level-1-2: Redistributes the matched route to both Level-1 and Level-2 area.
Description
Use the apply isis command to apply the level of a matched route to be redistributed to Level-1, Level-2 or Level-1-2. Use the undo apply isis command to remove the setting clause. By default, no apply clause is defined. Related command: if-match interface, if-match acl, if-match ip-prefix, if-match ip next-hop, if-match cost, if-match tag, route-policy, apply ip-address, apply cost, apply origin, and apply tag.
Example
# Define an apply clause to set the redistributed route to Level-2.
[3Com-route-policy] apply isis level-2
6.1.7 apply local-preference

Syntax
apply local-preference local-preference undo apply local-preference
View
Routing policy view
Parameter
local-preference: Newly set local preference.
Description
Use the apply local-preference command to apply the local preference of route information. Use the undo apply local-preference command to cancel the apply clause. Related command: if-match interface, if-match acl, if-match ip-prefix, if-match ip next-hop, if-match cost, if-match tag, route-policy, apply ip-address, apply local-preference, apply origin, and apply tag.
Example
# Apply the local preference level of route information as 130 when this apply clause is used for setting route information attribute.
[3Com-route-policy] apply local-preference 130
6.1.8 apply origin

Syntax
apply origin { igp | egp as-number | incomplete } undo apply origin
View
Routing policy view
Parameter
igp: Sets the BGP route information source as internal route egp: Sets the BGP route information source as external route as-number: Specifies AS number of external route. incomplete: Sets the BGP route information source as unknown source.
Description
Use the apply origin command to set the routing source of BGP routing information.
Use the undo apply origin command to cancel the apply clause. Related command: if-match interface, if-match acl, if-match ip-prefix, if-match ip next-hop, if-match cost, if-match tag, route-policy, apply ip-address, apply local-preference, apply cost, and apply tag.
Example
# Display how to define one apply clause. When it is used for setting routing information attribute, it sets the routing source of the routing information as igp.
[3Com-route-policy] apply origin igp
6.1.9 apply tag

Syntax
apply tag value undo apply tag
View
Routing policy view
Parameter
value: Specifies the tag value of route information.
Description
Use the apply tag command to set the tag area of OSPF route information. Use the undo apply tag command to cancel the apply clause. When a route is redistributed from protocol A to protocol B, and is redistributed back to protocol A on some other routers, protocol A allows the tag field of the routing protocol update packet to be transferred to the peer, that is, the information in the tag field can traverse from protocol A to protocol B and then back to protocol A, without being lost. OSPF, RIP2, ISIS, and BGP support the tag field, but RIP1 does not. For example, when a BGP route is redistributed into OSPF and then redistributed back to BGP on another router, the as-path attribute of the BGP route is lost. You can use the aplly tag command to set the OSPF tag field as as-path to guarantee the integrity of the as-path attribute. Related command: if-match interface, if-match acl, if-match ip-prefix, if-match ip next-hop, if-match cost, if-match tag, route-policy, apply ip-address, apply local-preference, apply cost, and apply origin.
Example
# Display how to define one apply clause. When it is used for setting route information attribute, it sets the tag area of route information as 100.
[3Com-route-policy] apply tag 100
6.1.10 display ip ip-prefix

Syntax
display ip ip-prefix [ ip-prefix-name ]
View
Any view
Parameter
ip-prefix-name: Specifies displayed address prefix list name.
Description
Use the display ip ip-prefix command to view the address prefix list. Display all the configured address prefix lists when no ip-prefix-name is specified. Related command: ip ip-prefix.
Example
# Display the information of the address prefix list named p1.
<3Com> display ip ip-prefix p1 ip-prefix p1 index 10: permit 192.168.10.10/16 greater-equal 17 less-equel 18
6.1.11 display route-policy

Syntax
display route-policy [ route-policy-name ]
View
Any view
Parameter
route-policy-name: Specifies displayed route-policy name.
Description
Use the display route-policy command to view the configured route-policy All the configured route-policies will be displayed when no route-policy-name is specified. Related command: route-policy.
Example
# Display the information of route-policy named policy1.
<3Com> display route-policy policy1 Route-policy : policy1 Permit 10 : if-match (prefixlist) p1 apply cost 100 matched : 0 denied : 0

Syntax
filter-policy { acl-number | ip-prefix ip-prefix-name } export [ protocol ] undo filter-policy { acl-number | ip-prefix ip-prefix-name } export [ protocol ]
View
Routing protocol view
Parameter
acl-number: Number of the access control list used for matching the destination address field of the routing information. ip-prefix-name: Address prefix list used for matching the routing information destination address field. protocol: Routing information of which kind of route protocol to be filtered.
Description
Use the filter-policy export command to configure the filtering conditions of the routing information advertised by a certain type of routing protocols. Use the undo filter-policy export command to cancel the filtering conditions set. By default, the advertised routing information is not filtered. In some cases, it may be required that only the routing information meeting certain conditions can be advertised. Then, the filter-policy command can be used to set the
filtering conditions for the routing information to be advertised. Only the routing information passing filtering can be advertised. Related command: filter-policy import.
Example
# Define the filtering rules for advertising the routing information of RIP. Only the routing information passing the filtering of address prefix list p1 will be advertised by RIP.
[3Com-rip] filter-policy ip-prefix p1 export

Syntax
filter-policy gateway ip-prefix-name import undo filter-policy gateway ip-prefix-name import filter-policy { acl-number | ip-prefix ip-prefix-name } import undo filter-policy { acl-number | ip-prefix ip-prefix-name } import
View
Routing protocol view
Parameter
acl-number: Access control list number used for matching the destination address field of the routing information. ip-prefix ip-prefix-name: Prefix address list name. Its matching object is the destination address field of the routing information. gateway ip-prefix-name: Prefix address list name of the neighbor router address. Its matching object is the routing information advertised by the specified neighbor router.
Description
Use the filter-policy gateway import command to filter the routing information advertised by a specified router. Use the undo filter-policy gateway import command to cancel the setting of the filtering condition. Use the filter-policy import command to configure the condition for filtering the routing information. Use the undo filter-policy import command to cancel the setting of filter condition.
By default, the received routing information is not filtered. In some cases, it may be required that only the routing information meeting some conditions can be received. Then, the filter-policy command can be used to set the filtering conditions. acl-number is the access control list number used for filtering the destination addresses of the routing information, and ip-prefix parameter is used to filter the routing information specified destination address. Related command: filter-policy export.
Example
# Define the filtering rule for receiving routing information of RIP. Only the routing information filtered through the address prefix list p1 can be received by RIP.
[3Com-rip] filter-policy ip-prefix p1 import
6.1.14 if-match acl

Syntax
if-match acl acl-number undo if-match [ acl acl-number ]
View
Routing policy view
Parameter
acl-number: Specifies the number of the access control list used for filtering. ip-prefix-name: Specifies the name of the prefix address list used for filtering.
Description
Use the if-match acl command to configure the IP address range to match the route-policy. Use the undo if-match acl command to cancel the setting of the match rule. Filtering is performed by quoting an ACL. Related command: if-match ip-prefix, if-match interface, if-match ip next-hop, if-match cost, if-match tag, route-policy, apply ip-address, apply cost, apply local-preference, apply origin, and apply tag.
Example
# Display how to define one if-match clause. When the clause is used for filtering route information, the route information filtered by route destination address through address ACL 2010 is enabled to pass the if-match clause.
[3Com-route-policy] if-match acl 2010
6.1.15 if-match as-path

Syntax
if-match as-path aspath-acl-number undo if-match as-path
View
Routing policy view
Parameter
aspath-acl-number: Number of the AS path list, in the range of 1 to 199. aspath-acl-number is defined by the ip as-path-acl command.
Description
Use the if-match as-path command to filter BGP routing information. Use the undo if-match as-path command to disable the configuration. By default, Route-policy does not require matching with the AS path list. This if-match clause of route-policy is used to filter BGP routing information. The match condition is specified according to the AS path attributes of the routing information. Related command: ip as-path-acl.
Example
# Define an as-path numbered as 2002 and allow the autonomous system number to contain the routing information of 200 and 300. Then, define a route-policy named test. The node No.10 of this route-policy defines an if-match clause, which quotes the definition of as-path.
[3Com] ip as-path acl 2 permit 200:300 [3Com] route-policy test permit node 10 [3Com-route-policy] if-match as-path 2
6.1.16 if-match community

Syntax
if-match community { standard-community-list-number [ whole-match ] |
extended-community-list-number } undo if-match community
View
Routing policy view
Parameter
standard-community-list-number: Standard community list number, ranging from 1 to 99. extended-community-list-number: Extended community list number, ranging from 100 to 199. whole-match: Fully matching, i.e., all the communities must appear.
Description
Use the if-match community command to configure the community list number to be matched in route-policy. Use the undo if-match community command to cancel the configuration of the matched community list number. By default, community list is not matched. The if-match clause of route-policy is used to filter BGP routing information. The match condition is specified according to the community attributes of the routing information. Related command: route-policy and ip community-list.
Example
# Define a community-list numbered as 1, and allow the autonomous system number to contain the routing information of 100 and 200. Then, the route-policy named test is defined. The node No.10 of the route-policy defines a if-match clause, which quotes the definition of the community-list.
[3Com] ip community-list 1 permit 100:200 [3Com] route-policy test permit node 10 [3Com-route-policy] if-match community 1
6.1.17 if-match cost

Syntax
if-match cost value
undo if-match cost
View
Routing policy view
Parameter
value: Specifies the required route cost value, ranging from 0 to 4294967295.
Description
Use the if-match cost command to configure one of the matching rules of route-policy to match the cost of the routing information. Use the undo if-match cost command to cancel the configuration of the matching rule. By default, no if-match clause is defined. This if-match clause of route-policy is used to specify the route cost value of the matched routing information. Related command: if-match interface, if-match acl, if-match ip-prefix, if-match ip next-hop, if-match tag, route-policy, apply ip-address, apply local-preference, apply cost, apply origin, and apply tag.
Example
# Define an if-match clause, which allows the routing information with routing cost 8 to pass this if-match clause.
[3Com-route-policy] if-match cost 8
6.1.18 if-match interface

Syntax
if-match interface interface-type interface-number undo if-match interface
View
Routing policy view
Parameter
interface-type: Specifies the type of the interface. interface-number: Specifies the number of the interface.
Description
Use the if-match interface command to match the route whose next hop is designated interface. Use the undo if-match interface command to cancel the setting of match condition. By default, no if-match clause is defined. This if-match clause of the route-policy is used to match the corresponding interface of the route next hop when it filters the route. Related command: if-match acl, if-match ip-prefix, if-match ip next-hop, if-match cost, if-match tag, route-policy, apply ip-address, apply cost, apply local-preference, apply origin, and apply tag.
Example
# Display how to define one if-match clause to match the route whose next hop interface is ethernet 1/0/2.
[3Com-route-policy] if-match interface Ethernet1/0/2
6.1.19 if-match ip next-hop

Syntax
if-match ip next-hop { acl acl-number | ip-prefix ip-prefix-name } undo if-match ip next-hop [ ip-prefix ]
View
Routing policy view
Parameter
acl-number: Specifies the number of the access control list used for filtering. The range is 2000 to 2999. ip-prefix-name: Specifies the name of the prefix address list used for filtering. The range is 1 to 19.
Description
Use the if-match ip next-hop command to configure one of the match rules of route-policy on the next hop address of the routing information. Use the undo if-match ip next-hop command to cancel the setting of match condition. By default, no if-match clause is defined.
This if-match clause of the route-policy is used to specify the next hop address field matching the routing information when it filters the routing information and implement its filtering function by referring to an ACL or address prefix list. Related command: if-match interface, if-match acl, if-match ip-prefix, if-match cost, if-match tag, route-policy, apply ip-address, apply cost, apply local-preference, apply origin, and apply tag.
Example
# Define an if-match clause. It permits the routing information, whose route next hop address passes the filtering of the prefix address list p1, to pass this if-match clause.
[3Com-route-policy] if-match ip next-hop ip-prefix p1
6.1.20 if-match ip-prefix

Syntax
if-match ip-prefix ip-prefix-name undo if-match [ ip-prefix ip-prefix-name ]
View
Routing policy view
Parameter
ip-prefix-name: Specifies the name of the prefix address list used for filtering.
Description
Use the if-match ip-prefix command to configure one of the match rules of route-policy on the IP address range of the routing information. Use the undo if-match ip next-hop command to cancel the setting of match condition. The filtering is achieved through redistributing an IP address prefix name. Related command: if-match acl, if-match interface, if-match ip next-hop, if-match cost, if-match tag, route-policy, apply ip-address, apply cost, apply local-preference, apply origin, and apply tag.
Example
# Define an if-match sub-statement in which the IP address prefix list p1 is used in routing information filtering.
[3Com-route-policy] if-match ip-prefix p1
6.1.21 if-match tag

Syntax
if-match tag value undo if-match tag
View
Routing policy view
Parameter
value: Specifies the required tag value.
Description
Use the if-match tag command to match the tag field of OSPF route information. Use the undo if-match tag command to cancel the existing matching rules. When a route is redistributed from protocol A to protocol B, and is redistributed back to protocol A on some other routers, protocol A allows the tag field of the routing protocol update packet to be transferred to the peer, that is, the information in the tag field can traverse from protocol A to protocol B and then back to protocol A, without being lost. OSPF, RIP2, ISIS, and BGP support the tag field, but RIP1 does not. For example, when a BGP route is redistributed into OSPF and then redistributed back to BGP on another router, the as-path attribute of the BGP route is lost. You can use the aplly tag command to set the OSPF tag field as as-path to guarantee the integrity of the as-path attribute. Related command: if-match interface, if-match acl, if-match ip-prefix, if-match ip next-hop, if-match cost, route-policy, apply ip-address, apply cost, apply local-preference, apply origin, and apply tag.
Example
# Display how to define one if-match clause and enable the OSPF route information whose tag field is 8 to pass the if-match clause.
[3Com-route-policy] if-match tag 8
6.1.22 ip ip-prefix
Syntax
ip ip-prefix ip-prefix-name [ index index-number ] { permit | deny } network len [ greater-equal greater-equal | less-equal less-equal ] undo ip ip-prefix ip-prefix-name [ index index-number | permit | deny ]
View
System view
Parameter
ip-prefix-name: Specifies an address prefix list name. It identifies one address prefix list uniquely. index-number: Identifies an item in the prefix address list. The item with smaller index-number will be tested first. permit: Specifies the match mode of the defined address prefix list items as permit mode. In the permit mode, if the IP address to be filtered is in the defined range, it will not be tested by the next node. Otherwise, it has to go on with the test. deny: Specifies the match mode of the defined address prefix list items as deny mode. In the deny mode, the IP address in the defined range cannot pass the filtering and is refused to go on with the next test. Otherwise, it will have the next test. network: IP address prefix range (IP address). If it is 0.0.0.0 0, all the IP addresses are matched. len: IP address prefix range (mask length). If it is 0.0.0.0 0, all the IP addresses are matched. greater-equal, less-equal: Specifies the address prefix range [greater-equal, less-equal] to be matched after the address prefix network len has been matched. The meaning of greater-equal is "greater than or equal to" , and the meaning of less-equal is "less than or equal to". The range is len <= greater-equal <= less-equal <= 32. When only greater-equal is used, it indicates the prefix range [greater-equal, 32]. When only less-equal is used, it indicates the prefix range [len, less-equal].
Description
Use the ip ip-prefix command to configure an address prefix list or one of its items. Use the undo ip ip-prefix command to delete an address prefix list or one of its items. The address prefix list is used for IP address filtering. An address prefix list may contain several items, and each item specifies one address prefix range. The inter-item filtering
relation is "OR", i.e. passing an item means passing the filtering of this address prefix list. Not passing the filtering of all items means not passing the filtering of this prefix address list. The address prefix range may contain two parts, which are determined by len and [greater-equal, less-equal] respectively. If the prefix ranges of these two parts are both specified, the IP to be filtered must match the prefix ranges of these two parts. If you specify network len as 0.0.0.0 0, it only matches the default route. Specify network len as 0.0.0.0 0 less-equal 32 to match all the routes.
Example
# Configure an address prefix list named p1. It permits the routes with the mask of 17 or 18 bits long and in network segment 10.0.192.0.8 to pass.
[3Com] ip ip-prefix p1 permit 10.0.192.0 8 greater-equal 17 less-equal 18
6.1.23 route-policy
Syntax
route-policy route-policy-name { permit | deny } node { node-number } undo route-policy route-policy-name [ permit | deny | node node-number ]
View
System view
Parameter
route-policy-name: Specifies the route-policy name to identify one route-policy uniquely. permit: Specifies the match mode of the defined route-policy node as permit mode. If a route matches all the if-match clauses, it is permitted to pass the filtering and execute the apply clauses of this node. If not, it will take the test of next node of this route-policy. deny: Specifies the match mode of the defined route-policy node as deny mode. When a route matches all the if-match clauses of this node, it will be refused to pass the filtering and will not take the next test. node: Node of the route policy. node-number: Index of the node in the route-policy. When this route-policy is used for routing information filtering, the node with smaller node-number will be tested first.
Description
Use the route-policy command to create and enter route-policy view.
Use the undo route-policy command to cancel the established route-policy. By default, no route-policy is defined. Route-policy is used for route information filtering or route policy. One route-policy comprises of some nodes and each node comprises of some if-match and apply clauses. The if-match clause defines the match rules of this node and the apply clause defines the actions after passing the filtering of this node. The filtering relationship between the if-match clauses of the node is "and", i.e., all if-match clauses that meet the node. The filtering relation between route-policy nodes is "OR", i.e. passing the filtering of one node means passing the filtering of this route-policy. If the information does not pass the filtering of any nodes, it cannot pass the filtering of this route-policy. Related command: if-match interface, if-match acl, if-match ip-prefix, if-match ip next-hop, if-match cost, if-match tag, apply ip-address, apply local-preference, apply cost, apply origin, and apply tag.
Example
# Display how to configure one route-policy policy1, whose node number is 10 and the match mode is permit, and enter route policy view.
[3Com] route-policy policy1 permit node 10 [3Com-route-policy]
Chapter 7 Route Capacity Configuration Commands

7.1 Route Capacity Configuration Commands
7.1.1 display memory
Syntax
display memory [ limit ]
View
Any view
Parameter
limit: Displays the lower limit and safety value of the router idle memory.
Description
Use the display memory command to view the memory setting and state information related to the routing capacity. It includes available memory and state information about connections such as times for disconnecting connections, times for reestablishing connections and whether the current system is in the emergent state or not.
Example
# Display the current memory setting and state information.
<3Com> display memory limit Current memory limit configuration information: memory safety: 30 memory limit: 20 memory auto-establish enabled
Free Memory: 73855332 (Byte)
The state information about connection: The times of disconnect: 0 The times of reconnect: 0 The current state: Normal
The information displayed by this command includes the router memory limit, the size of the idle memory, the times of connection disconnecting, the times of connection reestablishment and the current state. The displayed information is described specifically in the following table: Table 7-1 Description of the information displayed by the display memory limit command Field memory safety: 30 memory limit: 20 memory enabled auto-establish Description The safety value of the router memory is 30Mbytes. The lower limit of the router memory is 20Mbytes. The system allows recovering the connection automatically. (If the automatic recover is disabled, the "auto-establish disabled" will be displayed.) The size of the current idle memory is 73855332 bytes, that is, 73.855M. The times of the connection disconnecting of the router is 0. The times of the connection re-establishment of the router is 0. The current state is normal. (If entering the emergent state, the system will display "Exigency" .)
Free Memory: (Byte)
73855332
The times of disconnect: 0 The times of reconnect: 0 The current state: Normal
7.1.2 memory auto-establish disable

Syntax
memory auto-establish disable
View
System view
Parameter
None
Description
Use the memory auto-establish disable command to disable the function of restoring the connections of all the routing protocols (even if the idle memory reduces to a safety value).
By default, when the idle memory of the router recovers to a safety value, connections of all the routing protocols will always recover (when the idle memory of the router reduces to a lower limit, the connection will be disconnected forcibly). Use the memory auto-establish disable command to disable the above function. Thus, connections of all the routing protocols will not recover when the idle memory of the router recovers to a safety value. In this case, you need to restart the routing protocol to recover the connections. Use this command with caution. Related command: memory auto-establish enable, memory { safety | limit }, and display memory limit.
Example
# Disable to recover the connections of all the protocols automatically when the current router memory resumes.
[3Com] memory auto-establish disable [3Com] %3/13/2003 15:47:2-RM-5-S1-RTLOG:You have changed the model of connection
7.1.3 memory auto-establish enable

Syntax
memory auto-establish enable
View
System view
Parameter
None
Description
Use the memory auto-establish enable command to resume connections of all the routing protocols when the idle memory of the router recovers to a safety value. By default, when the idle memory of the router recovers to a safety value, connections of all the routing protocols will always recover (when the idle memory of the router reduces to a lower limit, the connection will be disconnected forcibly). Use the memory auto-establish disable command to disable the above function. Use the memory auto-establish enable command to enable the above function again. By default, the function is always enabled.
Related command: memory auto-establish disable, memory { safety | limit }, and display memory limit.
Example
# Enable memory resume of the current router and recover connections of all the protocols automatically.
[3Com] memory auto-establish enable [3Com] %3/13/2003 15:48:2-RM-5-S1-RTLOG:You have changed the model of connection
7.1.4 memory
Syntax
memory { safety safety-value | limit limit-value }* undo memory { safety safety-value | limit limit-value }*
View
System view
Parameter
safety-value: Safety value of the router idle memory in Mbytes. Its valid range depends on the current idle memory of the router. The default value depends on the memory of the router. For a router with 128 Mbytes memory, safety-value defaults to 5 Mbytes; for a router with 256 Mbytes memory, it defaults to 50 Mbytes. limit-value: Lower limit of the router idle memory in Mbytes. Its valid range depends on the current idle memory of the router. The default value depends on the memory of the router. For a router with 128 Mbytes memory, limit-value defaults to 3 Mbytes; for a router with 256 Mbytes memory, it defaults to 40 Mbytes.
Description
Use the memory command to configure the safety value and lower limit of the router idle memory. When the idle memory of the router is less than the lower limit, all the routing protocol connections will be disconnected forcibly. If you configure the memory auto-establish enable command (configured by default), when the idle memory reaches safety-value, all forcibly disconnected routing protocol connections will be reestablished automatically. Use the undo memory command to restore the default safety value and lower limit of the router idle memory.
Note that limit-value must be less than safety-value; otherwise, the configuration will fail. Related command: memory auto-establish disable, memory auto-establish enable, memory safety, and display memory limit.
Example
# Set the lower limit of the router idle memory to 25 Mbytes.
[3Com] memory limit 25 [3Com] %Dec 15 16:51:29:987 2004 3Com RM/5/RTLOG:You have changed the memory limit/safety value
# Set the lower limit of the router idle memory to 25 Mbytes and the safety value to 30 Mbytes.
[3Com] memory safety 30 limit 25 [3Com] %Dec 15 15:51:29:987 2004 3Com RM/5/RTLOG:Changed the system memory limit(20->25)/ safety(30->35) successfully
Command Reference Guide Multicast Protocol v2.30 Router Software
Table of Contents
Table of Contents
Chapter 1 Multicast Common Configuration Commands ......................................................... 1-1 1.1 Multicast Common Configuration Commands ................................................................... 1-1 1.1.1 debugging multicast forwarding .............................................................................. 1-1 1.1.2 debugging multicast kernel-routing ......................................................................... 1-1 1.1.3 debugging multicast status-forwarding ................................................................... 1-2 1.1.4 display multicast forwarding-table ........................................................................... 1-3 1.1.5 display multicast routing-table................................................................................. 1-4 1.1.6 display multicast routing-table static ....................................................................... 1-5 1.1.7 display multicast rpf-info.......................................................................................... 1-6 1.1.8 mtracert ................................................................................................................... 1-7 1.1.9 multicast minimum-ttl .............................................................................................. 1-9 1.1.10 multicast packet-boundary .................................................................................... 1-9 1.1.11 multicast route-limit ............................................................................................. 1-10 1.1.12 multicast routing-enable ...................................................................................... 1-11 1.1.13 reset multicast forwarding-table .......................................................................... 1-11 1.1.14 reset multicast routing-table ................................................................................ 1-13 Chapter 2 IGMP Configuration Commands ................................................................................ 2-1 2.1 IGMP Configuration Commands........................................................................................ 2-1 2.1.1 debugging igmp....................................................................................................... 2-1 2.1.2 display igmp group .................................................................................................. 2-1 2.1.3 display igmp interface ............................................................................................. 2-3 2.1.4 display igmp local .................................................................................................... 2-4 2.1.5 igmp enable............................................................................................................. 2-4 2.1.6 igmp group-limit....................................................................................................... 2-5 2.1.7 igmp group-policy.................................................................................................... 2-6 2.1.8 igmp host-join .......................................................................................................... 2-7 2.1.9 igmp lastmember-queryinterval............................................................................... 2-8 2.1.10 igmp max-response-time....................................................................................... 2-9 2.1.11 igmp proxy............................................................................................................. 2-9 2.1.12 igmp robust-count ............................................................................................... 2-10 2.1.13 igmp timer other-querier-present......................................................................... 2-11 2.1.14 igmp timer query.................................................................................................. 2-12 2.1.15 igmp version ........................................................................................................ 2-13 2.1.16 reset igmp group ................................................................................................. 2-14
3Com Corporation i
Table of Contents
Chapter 3 PIM Configuration Commands ................................................................................... 3-1 3.1 PIM Configuration Commands........................................................................................... 3-1 3.1.1 bsr-policy ................................................................................................................. 3-1 3.1.2 c-bsr ........................................................................................................................ 3-2 3.1.3 c-rp .......................................................................................................................... 3-3 3.1.4 crp-policy ................................................................................................................. 3-4 3.1.5 debugging pim common.......................................................................................... 3-5 3.1.6 debugging pim dm................................................................................................... 3-6 3.1.7 debugging pim sm................................................................................................... 3-7 3.1.8 display pim bsr-info ................................................................................................. 3-8 3.1.9 display pim interface ............................................................................................... 3-8 3.1.10 display pim neighbor ............................................................................................. 3-9 3.1.11 display pim routing-table ..................................................................................... 3-10 3.1.12 display pim rp-info ............................................................................................... 3-11 3.1.13 pim....................................................................................................................... 3-12 3.1.14 pim bsr-boundary ................................................................................................ 3-13 3.1.15 pim dm................................................................................................................. 3-13 3.1.16 pim neighbor-limit ................................................................................................ 3-14 3.1.17 pim neighbor-policy ............................................................................................. 3-15 3.1.18 pim sm................................................................................................................. 3-15 3.1.19 pim timer hello ..................................................................................................... 3-16 3.1.20 register-policy ...................................................................................................... 3-17 3.1.21 reset pim neighbor .............................................................................................. 3-18 3.1.22 reset pim routing-table ........................................................................................ 3-18 3.1.23 source-policy ....................................................................................................... 3-19 3.1.24 spt-switch-threshold ............................................................................................ 3-20 3.1.25 static-rp................................................................................................................ 3-22 Chapter 4 MSDP Configuration Commands ............................................................................... 4-1 4.1 MSDP Configuration Commands....................................................................................... 4-1 4.1.1 cache-sa-enable...................................................................................................... 4-1 4.1.2 debugging msdp...................................................................................................... 4-1 4.1.3 display msdp brief ................................................................................................... 4-2 4.1.4 display msdp peer-status ........................................................................................ 4-3 4.1.5 display msdp sa-cache............................................................................................ 4-4 4.1.6 display msdp sa-count ............................................................................................ 4-5 4.1.7 import-source .......................................................................................................... 4-5 4.1.8 msdp........................................................................................................................ 4-6 4.1.9 msdp-tracert ............................................................................................................ 4-7 4.1.10 originating-rp ......................................................................................................... 4-9
3Com Corporation ii
Table of Contents
4.1.11 peer ..................................................................................................................... 4-10 4.1.12 peer description................................................................................................... 4-11 4.1.13 peer mesh-group ................................................................................................. 4-12 4.1.14 peer minimum-ttl.................................................................................................. 4-12 4.1.15 peer request-sa-enable ....................................................................................... 4-13 4.1.16 peer sa-cache-maximum..................................................................................... 4-14 4.1.17 peer sa-policy ...................................................................................................... 4-15 4.1.18 peer sa-request-policy......................................................................................... 4-16 4.1.19 reset msdp peer .................................................................................................. 4-17 4.1.20 reset msdp sa-cache........................................................................................... 4-17 4.1.21 reset msdp statistics............................................................................................ 4-18 4.1.22 shutdown ............................................................................................................. 4-18 4.1.23 static-rpf-peer ...................................................................................................... 4-19 4.1.24 timer retry ............................................................................................................ 4-20 Chapter 5 MBGP Multicast Extension Configuration Commands............................................ 5-1 5.1 MBGP Multicast Extension Configuration Commands ...................................................... 5-1 5.1.1 aggregate ................................................................................................................ 5-1 5.1.2 debugging bgp mp-update ...................................................................................... 5-2 5.1.3 display bgp multicast group..................................................................................... 5-2 5.1.4 display bgp multicast peer....................................................................................... 5-3 5.1.5 display bgp multicast network ................................................................................. 5-3 5.1.6 display bgp multicast routing-table.......................................................................... 5-4 5.1.7 display bgp multicast routing-table as-path-acl....................................................... 5-4 5.1.8 display bgp multicast routing-table cidr................................................................... 5-5 5.1.9 display bgp multicast routing-table community ....................................................... 5-5 5.1.10 display bgp multicast routing-table community-list................................................ 5-6 5.1.11 display bgp multicast routing-table different-origin-as .......................................... 5-7 5.1.12 display bgp multicast routing-table peer ............................................................... 5-7 5.1.13 display bgp multicast routing-table regular-expression......................................... 5-8 5.1.14 display bgp multicast routing-table statistic........................................................... 5-8 5.1.15 import-route ........................................................................................................... 5-9 5.1.16 ipv4-family multicast.............................................................................................. 5-9 5.1.17 network................................................................................................................ 5-10 5.1.18 peer advertise-community................................................................................... 5-11 5.1.19 peer allow-as-loop............................................................................................... 5-11 5.1.20 peer as-path-acl .................................................................................................. 5-12 5.1.21 peer enbale ......................................................................................................... 5-13 5.1.22 peer filter-policy................................................................................................... 5-14 5.1.23 peer ip-prefix ....................................................................................................... 5-15
Table of Contents
5.1.24 peer next-hop-local ............................................................................................. 5-16 5.1.25 peer public-as-only.............................................................................................. 5-16 5.1.26 peer reflect-client................................................................................................. 5-17 5.1.27 peer route-policy ................................................................................................. 5-18 Chapter 6 Multicast Static Route Configuration Commands.................................................... 6-1 6.1 Multicast Static Route Configuration Commands .............................................................. 6-1 6.1.1 delete rpf-route-static all.......................................................................................... 6-1 6.1.2 display multicast routing-table static ....................................................................... 6-1 6.1.3 display multicast routing-table static config............................................................. 6-2 6.1.4 ip rpf-longest-match ................................................................................................ 6-3 6.1.5 ip rpf-route-static ..................................................................................................... 6-3
3Com Corporation iv
Chapter 1 Multicast Common Configuration Commands

1.1 Multicast Common Configuration Commands
1.1.1 debugging multicast forwarding
Syntax
debugging multicast forwarding undo debugging multicast forwarding
View
User view
Parameter
None
Description
Use the debugging multicast forwarding command to enable multicast packet forwarding debugging functions. Use the undo debugging multicast forwarding command to disable the debugging functions. By default, the debugging function is disabled.
Example
# Enable multicast packet forwarding debugging functions.
<3com> debugging multicast forwarding
1.1.2 debugging multicast kernel-routing

Syntax
debugging multicast kernel-routing undo debugging multicast kernel-routing
View
User view
Parameter
None
Description
Use the debugging multicast kernel-routing command to enable multicast kernel routing debugging functions. Use the undo debugging multicast kernel-routing command to disable the debugging functions. By default, the multicast kernel routing debugging function is disabled.
Example
# Enable multicast kernel routing debugging functions.
<3com> debugging multicast kernel-routing
1.1.3 debugging multicast status-forwarding

Syntax
debugging multicast status-forwarding undo debugging multicast status-forwarding
View
User view
Parameter
None
Description
Use the debugging multicast status-forwarding command to enable multicast forwarding status debugging functions. Use the undo debugging multicast status-forwarding command to disable the debugging functions. By default, the multicast status debugging function is disabled.
Example
# Enable multicast forwarding status debugging functions.
<3com> debugging multicast status-forwarding
1.1.4 display multicast forwarding-table

Syntax
display multicast forwarding-table [ group-address [ mask { mask | mask-length } ] | source-address [ mask { mask | mask-length } ] | incoming-interface { interface-type interface-number | register } ] *
View
Any view
Parameter
group-address: Multicast group address, used to specify a multicast group, ranging from 224.0.0.0 to 239.255.255.255. mask: Mask. mask-length: Length of mask. Because 1s in 32-bit mask are required to be continuous, the mask in dotted decimal notation format can be replaced by mask-length (mask-length is the number of continuous 1s in the mask). source-address: Unicast IP address of the multicast source. incoming-interface: Incoming interface of the multicast forwarding entry. register: Register interface of PIM-SM.
Description
Use the display multicast forwarding-table command to view the information of the multicast forwarding table. source-address and group-address of multicast forwarding table are displayed in hexadecimal notation format, and its incoming and outgoing port numbers are displayed by virtual port number. This information can be viewed using the display pim interface command. Related command: display multicast routing-table.
Example
# Display the multicast forwarding table information.
<3com> display multicast forwarding-table
1.1.5 display multicast routing-table

Syntax
display multicast routing-table [ group-address [ mask { mask | mask-length } ] | source-address [ mask { mask | mask-length } ] | incoming-interface { interface-type interface-number | register } ]*
View
Any view
Parameter
group-address: Multicast group address, used to specify a multicast group and display the corresponding routing table information of the group. The value ranges from 224.0.0.0 to 239.255.255.255. source-address: Unicast IP address of the multicast source. mask: Mask. mask-length: Length of mask. Because 1 in 32-bit mask is required to be continuous, the mask in dotted decimal notation format can be replaced by mask-length (mask-length is the number of continuous 1s in the mask). incoming-interface: Incoming interface of the multicast route entry. register: Register interface of PIM-SM.
Description
Use the display multicast routing-table command to view the information of the IP multicast routing table. This command displays the multicast routing table information, while the display multicast forwarding-table command displays the multicast forwarding table information. The entry (S, G) in the multicast routing table, i.e., (multicast source, multicast group) acts as the independent entry in the table. Each entry has a unique Upstream, indicating the interface through which RPF goes to the multicast source. Each entry also has a Downstream List, indicating which interfaces need multicast forwarding. The related information about (S, G) includes: proto: the multicast protocol number which possesses the (S, G) (in hexadecimal notation format).
Flags: all kinds of flags, such as RPT 0x1, WC 0x2, SPT 0x4, NEG CACHE 0x8 and JOIN SUPP 0x10. All the flags are marked by binary bit. In which, RPT indicates the (S, G) is in the shared tree status. WC is the abbreviation of wildcard. SPT indicates the shortest path tree. NEG CACHE indicates the cache record that the downstream interface list is null. JOIN SUPP indicates the prune suppression status.
Example
# Display the corresponding route entry information of multicast group in the multicast routing table.
<3com> display multicast routing-table Multicast Routing Table Total 1 entry
(10.10.1.2, 225.1.1.1) UpTime: 00:01:28, Timeout in 278 sec Upstream interface: Ethernet0/0/0(10.10.1.20) Downstream interface list: LoopBack0(20.20.20.30), Protocol 0x1: IGMP
1.1.6 display multicast routing-table static

Syntax
display multicast routing-table static [ config ] [ source-address [ mask | mask-length ] ]
View
Any view
Parameter
config: When this parameter is chosen, all the routing information configured will be displayed. If this parameter is not chosen, only effective routing information is displayed. source-address: IP address of the multicast source. mask: Mask. mask-length: Length of mask. Because 1s in 32-bit mask are required to be continuous, the mask in dotted decimal notation format can be replaced by mask-length (mask-length is the number of continuous 1s in the mask).
Description
Use the display multicast routing-table static command to view the configuration information of static multicast route.
Example
# Display the configuration information of static multicast route.
<3com>display multicast routing-table static 100.10.0.0/16 RPF interface = 10.10.1.20(Ethernet0/0/0), RPF neighbor = 10.10.1.20
Matched routing protocol = <none>, route-policy = <none>, preference = 1 Running config = ip rpf-route-static 100.10.0.0 16 Ethernet0/0/0 preference 1
1.1.7 display multicast rpf-info

Syntax
display multicast rpf-info source-address
View
Any view
Parameter
source-address: IP address of the multicast source.
Description
Use the display multicast rpf-info command to view the Reverse Path Forwarding (RPF) routing information for a specified multicast source.
Example
# Display all the RPF routing information.
<3com> display multicast rpf-info 192.193.194.192 Multicast source's RPF route information about 192.193.194.192 RPF interface: InLoopBack0, RPF neighbor: 127.0.0.1 Referenced route/mask: 192.193.194.192/32 Referenced route type: unicast (DIRECT) RPF-route selecting rule: preference-preferred
1.1.8 mtracert
Syntax
mtracert source-address [ last-hop-address ] [ group-address ]
View
Any view
Parameter
source-address: Address of the multicast source. last-hop-address: Unicast address, which is the starting address of path tracing. This address must be an interface address of a hop router. By default, it is a physical interface address of the local router. group-address: Address of multicast group. By default, the value is 0.0.0.0.
Description
Use the mtracert command to trace the network path from the multicast source to the destination receiver along Multicast Distribution Tree, according to either the multicast kernel routing table or RPF rule to the source. This command can help to locate faults, such as information loss and configuration error. The trace mode to the group address of 0.0.0.0 is called weak trace mode.
Example
# Trace the path reversely from the local hop router 18.110.0.1 to the multicast source 10.10.1.2 in weak trace mode.
<3com> mtracert 10.10.1.2 Type Ctrl+C to abort Mtrace from 10.10.1.2 to 18.110.0.1 via RPF Querying full reverse path... -1 18.110.0.1 Incoming Interface Address: 18.110.0.1 Previous-Hop Router Address: 18.110.0.2 Input packet count on incoming interface: 0 Output packet count on outgoing interface: 0 Total number of packets for this source-group pair: 0 Protocol: PIM Forwarding TTL: 0 Forwarding Code: No error

-2 18.110.0.2
Incoming Interface Address: 11.110.0.2 Previous-Hop Router Address: 11.110.0.4 Input packet count on incoming interface: 0 Output packet count on outgoing interface: 0 Total number of packets for this source-group pair: 0 Protocol: PIM Forwarding TTL: 0 Forwarding Code: No error -3 11.110.0.4 Incoming Interface Address: 10.10.1.3 Previous-Hop Router Address: 0.0.0.0 Input packet count on incoming interface: 0 Output packet count on outgoing interface: 0 Total number of packets for this source-group pair: 0 Protocol: PIM Forwarding TTL: 0 Forwarding Code: No error
# Trace reversely the path information of multicast group 225.1.1.1 from the multicast source 10.10.1.3 to the destination address 12.110.0.2.
<3com>mtracert 10.10.1.3 12.110.0.2 225.1.1.1 Type Ctrl+C to abort Mtrace from 10.10.1.3 to 12.110.0.2 via group 225.1.1.1 Querying full reverse path... -1 12.110.0.2 Incoming Interface Address: 11.110.0.2 Previous-Hop Router Address: 11.110.0.4 Input packet count on incoming interface: 316 Output packet count on outgoing interface: 135 Total number of packets for this source-group pair: 4 Protocol: PIM Forwarding TTL: 0 Forwarding Code: No error -2 11.110.0.4 Incoming Interface Address: 127.0.0.5 Previous-Hop Router Address: 0.0.0.0 Input packet count on incoming interface: 0 Output packet count on outgoing interface: 0 Total number of packets for this source-group pair: 4

Protocol: Unknown Forwarding TTL: 0 Forwarding Code: No error
1.1.9 multicast minimum-ttl

Syntax
multicast minimum-ttl ttl-value undo multicast minimum-ttl
View
Interface view
Parameter
ttl-value: The minimum TTL value, ranging from 0 to 255.
Description
Use the multicast minimum-ttl command to configure the minimum TTL value for multicast forwarding. Use the undo multicast minimum-ttl command to remove the minimum TTL value configured. By default, no minimum TTL value for multicast forwarding is configured.
Example
# Configure the minimum TTL value for multicast forwarding to 8.
[3com-Ethernet1/0/1] multicast minimum-ttl 8
1.1.10 multicast packet-boundary

Syntax
multicast packet-boundary acl-number undo multicast packet-boundary
View
Interface view
Parameter
acl-number: Number of basic or advanced ACL, ranging from 2000 to 3999.
Description
Use the multicast packet-boundary command to configure a multicast forwarding boundary. Use the undo multicast packet-boundary command to remove the multicast forwarding boundary configured. By default, no multicast forwarding boundary is configured. You can set boundary conditions for multicast packets on an interface via basic or advanced Access Control List (ACL). Packets denied by the ACL will be discarded. The source address of a multicast packet can be filtered through the basic ACL. Both the source address and the destination address (source group address) of a multicast packet can be filtered through advanced ACL.
Example
# Set boundary conditions for multicast packets through the basic ACL 2001.
[3com-Ethernet1/0/1] multicast packet-boundary 2001
1.1.11 multicast route-limit

Syntax
multicast route-limit limit
View
System view
Parameter
limit: Limit of multicast routing table capacity, ranging from 0 to MAX_MROUTE_LIMIT. In which, MAX_MROUTE_LIMIT differs with the different router types.
Description
Use the multicast route-limit command to limit the multicast routing table capacity. If the capacity exceeds the limit the router will discard protocols and data packets of the newly-added (S, G). By default, the limit of multicast routing table capacity is MAX_MROUTE_LIMIT. If the number of route entries in the routing table has exceeded the configured number when configuring the command, the previous route entry in the routing table will not be deleted. The system will prompt The number of current route entries is more than that configured.
If this command is executed repeatedly, the new configuration will overwrite the previous one.
Example
# Limit the multicast routing table capacity to 1000.
[3com] multicast route-limit 1000
1.1.12 multicast routing-enable

Syntax
multicast routing-enable undo multicast routing-enable
View
System view
Parameter
None
Description
Use the multicast routing-enable command to enable IP multicast routing. Use the undo multicast routing-enable command to disable IP multicast routing. By default, IP multicast routing is disabled. The system will not forward any multicast packet when IP multicast routing is disabled. Related command: pim dm and pim sm.
Example
# Enable IP multicast routing.
<3com> system-view [3com] multicast routing-enable
1.1.13 reset multicast forwarding-table

Syntax
reset multicast forwarding-table [ statistics ] { all | { group-address [ mask { group-mask | group-mask-length } ] | source-address [ mask { source-mask | source-mask-length } ] | { incoming-interface interface-type interface-number } | { slot slot-number } } * }
View
User view
Parameter
statistics: If this parameter is used the statistics of MFC forwarding entries will be cleared. Otherwise, the MFC forwarding entries will be cleared. all: All the MFC forwarding entries. group-address: Address of the specified group. group-mask: Address mask of the specified group. group-mask-length: Address mask length of the specified group. source-address: Address of the specified source. source-mask: Address mask of the specified source. source-mask-length: Address mask length of the specified source. incoming-interface: Incoming interface of the specified forwarding entry. interface-type interface-number: Interface type and interface number. slot-number: Number of the slot where the interface board resides. This parameter is only present in the distributed router.
Description
Use the reset multicast forwarding-table command to clear MFC forwarding entries or the statistics of MFC forwarding entries. The sequence of group-address and source-address can be reversed, but the input group-address and source-address must be valid. Otherwise, the system will prompt an input error. Related command: reset pim routing-table, reset multicast routing-table, display multicast forwarding-table.
Example
# Clear the forwarding entry whose group address is 225.5.4.3 from the MFC forwarding table.
<3com> reset multicast forwarding-table 225.5.4.3
# Clear the statistics of the forwarding entry whose group address is 225.5.4.3 from MFC forwarding table.
<3com> reset multicast forwarding-table statistics 225.5.4.3
1.1.14 reset multicast routing-table

Syntax
reset multicast routing-table { all | { group-address [ mask { group-mask | group-mask-length } ] | source-address [ mask { source-mask | source-mask-length } ] | { incoming-interface interface-type interface-number } } * }
View
User view
Parameter
all: All the route entries in multicast kernel routing table. group-address: Address of the specified group. group-mask: Address mask of the specified group. group-mask-length: Address mask length of the specified group. source-address: Address of the specified source. source-mask: Address mask of the specified source. source-mask-length: Address mask length of multicast source. incoming-interface: Incoming interface of the specified route entry. interface-type interface-number: Interface type and interface number.
Description
Use the reset multicast routing-table command to clear the route entry in the multicast kernel routing table and remove the corresponding forwarding entry in MFC. The sequence of group-address and source-address can be reversed, but the input group-address and source-address must be valid. Otherwise, the system will prompt an input error. Related command: reset pim routing-table, reset multicast forwarding-table, display multicast forwarding-table.
Example
# Clear the route entry whose group address is 225.5.4.3 from the multicast kernel routing table.
<3com> reset multicast routing-table 225.5.4.3
Chapter 2 IGMP Configuration Commands

2.1 IGMP Configuration Commands
2.1.1 debugging igmp
Syntax
debugging igmp { all | event | host | packet | timer } undo debugging igmp { all | event | host | packet | timer }
View
User view
Parameter
all: All the debugging information of IGMP. event: Debugging information of IGMP event. host: Debugging information of IGMP host. packet: Debugging information of IGMP packets. timer: Debugging information of IGMP timers.
Description
Use the debugging igmp command to enable IGMP debugging functions. Use the undo debugging igmp command to disable the debugging functions. By default, IGMP debugging functions are disabled.
Example
# Enable all IGMP debugging functions
<3com> debugging igmp all
2.1.2 display igmp group

Syntax
display igmp group [ group-address | interface interface-type interface-number | local ]
View
Any view
Parameter
group-address: Multicast group address. interface-type interface-number: Interface type and interface number of the router, used to specify the interface. local: Information of the local interface which receives and sends multicast data.
Description
Use the display igmp group command to view the member information of the IGMP multicast group. You can specify to view the information of a group or the member information of the multicast group on an interface. The information displayed includes the multicast groups joined through IGMP and those joined statically through command lines by the downstream host. Related command: igmp host-join.
Example
# Display the member information of the directly connected sub-network.
<3com> display igmp group
LoopBack0 (20.20.20.20): Total 3 IGMP Groups reported:

Group Address 225.1.1.1 225.1.1.3 225.1.1.2 Last Reporter 20.20.20.20 20.20.20.20 20.20.20.20 Uptime 00:02:04 00:02:04 00:02:04 Expires 00:01:15 00:01:15 00:01:17
Table 2-1 Description on the fields of display ip igrmp group command Item Group address Last Reporter Uptime Expires Multicast group address Report the last host which becomes the multicast group member The time since the multicast group is found (hour, minute, second) The predicted time when the record will be removed from the IGMP group table (hour, minute, second) Description
2.1.3 display igmp interface

Syntax
display igmp interface [ interface-type interface-number ]
View
Any view
Parameter
interface-type interface-number: Interface type and interface number of the router, used to specify the interface. If the parameters are not specified, information about all the interfaces running IGMP will be displayed.
Description
Use the display igmp interface command to view the IGMP configuration and running information on an interface. The information displayed through display igmp interface will be different according to the configuration of the IGMP proxy on an interface. If the interface is neither a proxy nor a client, the configuration of IGMP Proxy will not be displayed. If the interface is a proxy, all clients will be displayed. If the interface is a client, the proxy will be displayed.
Example
# Display the IGMP configuration and running information on an interface.
<3com> display igmp interface Ethernet0/0/0 (10.10.1.20): IGMP is enabled Current IGMP version is 2 Value of query interval for IGMP(in seconds): 60 Value of other querier time out for IGMP(in seconds): 120 Value of maximum query response time for IGMP(in seconds): 10 Policy to accept IGMP reports: none Querier for IGMP: 10.10.1.10 Total 2 IGMP groups reported
LoopBack0 (20.20.20.30): IGMP is enabled

Current IGMP version is 2
Value of query interval for IGMP(in seconds): 60 Value of other querier time out for IGMP(in seconds): 120 Value of maximum query response time for IGMP(in seconds): 10 Policy to accept IGMP reports: none Querier for IGMP: 20.20.20.30 (this router) No IGMP group reported
2.1.4 display igmp local

Syntax
display igmp local
View
Any view
Parameter
local: Information of the local interface which receives and sends multicast data.
Description
Use the display igmp local command to view the IGMP configuration and running information of the local interface which receives and sends multicast data.
Example
# Display the IGMP configuration and running information of the local interface which receives and sends multicast data.
<3com> display igmp local Mcast_Out_IF (127.0.0.6): IGMP is enabled on interface Current IGMP version is 2 No IGMP group reported
Mcast_In_IF (127.0.0.5): IGMP is disabled on interface
2.1.5 igmp enable

Syntax
igmp enable
undo igmp enable
View
Interface view
Parameter
None
Description
Use the igmp enable command to enable IGMP on an interface. Use the undo igmp enable command to disable IGMP on an interface. By default, IGMP is disabled on an interface. Only after multicast is enabled can this command take effect. After this command is configured, the configuration of other attributes of IGMP can be performed. Related command: multicast routing-enable.
Example
# Enable IGMP on interface Ethernet0/0/0.
[3com-Ethernet0/0/0] igmp enable
2.1.6 igmp group-limit

Syntax
igmp group-limit limit undo igmp group-limit
View
Interface view
Parameter
limit: Number of IGMP groups, ranging from 0 to MAX_IF_IGMP_GROUP_LIMIT. The value of MAX_IF_IGMP_GROUP_LIMIT on routers is MAX_MROUTE_LIMIT, which differs with the different router types.
Description
Use the igmp group-limit command to limit the number of IGMP groups joined on the interface. If the number exceeds the limit, the router will not process the joined IGMP packet any more. Use the undo igmp group-limit command to restore the default configuration. By default, the maximum number of IGMP groups joined on the interface is 1024. If the number of IGMP groups joined on the interface has exceeded the configuration value during configuration, the previously joined IGMP groups will not be deleted. If this command is executed repeatedly, the new configuration will overwrite the previous one.
Example
# Limit the maximum number of IGMP groups joined on the interface Ethernet1/0/0 to 100.
[3com-Ethernet1/0/0] igmp group-limit 100
2.1.7 igmp group-policy

Syntax
igmp group-policy acl-number [ 1 | 2 ] undo igmp group-policy
View
Interface view
Parameter
acl-number: Number of basic IP ACL, defining the range of a multicast group. The value ranges from 2000 to 2999. 1: IGMP Version 1. 2: IGMP Version 2. If IGMP version is not specified, IGMP Version 2 is used by default.
Description
Use the igmp group-policy command to set the filter of multicast groups on an interface to control the accessing to the IP multicast groups. Use the undo igmp group-policy command to remove the filter configured. By default, no filter is configured, that is, a host can join any multicast group.
If you do not want the hosts on the network that the interface is on to join some multicast groups and receive the packets from the multicast groups, you can use this command to limit the range of the multicast groups served by the interface. Related command: igmp host-join.
Example
# Permit the hosts on the interface Ethernet1/0/0 to join multicast group 225.1.1.1 only.
[3com] acl number 2005 [3com-acl-basci-2005] rule permit source 225.1.1.1 0 [3com-acl-basci-2005] quit [3com] interface ethernet 1/0/0 [3com-Ethernet1/0/0] igmp group-policy 2005
2.1.8 igmp host-join

Syntax
igmp host-join group-address undo igmp host-join group-address
View
Interface view
Parameter
group-address: Multicast address of the multicast group that an interface will join.
Description
Use the igmp host-join command to enable an interface of a router to join a multicast group. Use the undo igmp host-join command to disable the configuration. By default, an interface does not join any multicast group. On one router, up to 1024 interfaces can be configured with igmp host-join command at best. Related command: igmp group-policy.
Example
# Configure Ethernet1/0/0 to join the multicast group 255.0.0.1.
[3com-Ethernet1/0/0] igmp host-join 225.0.0.1
2.1.9 igmp lastmember-queryinterval

Syntax
igmp lastmember-queryinterval seconds undo igmp lastmember-queryinterval
View
Interface view
Parameter
seconds: Interval at which IGMP querier sends the IGMP specified group query packet when it receives IGMP Leave packet from the host, in seconds. The value ranges from 1 to 5 seconds. By default, the value is 1 second.
Description
Use the igmp lastmember-queryinterval command to set the interval at which IGMP querier sends the IGMP specified group query packet when it receives an IGMP Leave packet from the host. Use the undo igmp lastmember-queryinterval command to restore the default value. On a shared network, that is, when there are multiple hosts and multicast routers on a network segment, the query router (querier for short) takes charge of maintaining IGMP group membership on an interface. When the host in IGMP Version 2 leaves a group, the host should send an IGMP Leave packet. If IGMP querier receives the packet, it must send the IGMP specified group query packet for robust-value times according to the interval seconds configured via igmp lastmember-queryinterval command (if the command is not configured, seconds is 1), and the robust coefficient robust-value configured via igmp robust-count (if the command is not configured, robust-value is 2). If another host receives the IGMP specified group query packet from IGMP querier and is interested in the group, it will send IGMP Membership Report packet within the maximum response time regulated by the packet. If IGMP querier receives IGMP Membership Report packet from another host within the time robust-value x seconds, it will go on maintaining the group membership. If not, it will regard the group to be timeout and stop maintaining the group membership. This command is only valid when IGMP query router is running in IGMP Version 2. If the host runs in IGMP Version 1, it may not send IGMP Leave packet when it leaves a group. At that time, the command is invalid to the host. Related command: igmp robust-count and display igmp interface.
Example
# Configure the query interval of the querier for the last group member on the interface Ethernet1/0/0 to 3 seconds.
[3com-Ethernet1/0/0] igmp lastmember-queryinterval 3
2.1.10 igmp max-response-time

Syntax
igmp max-response-time seconds undo igmp max-response-time
View
Interface view
Parameter
seconds: The maximum response time in the IGMP query packet in seconds, ranging from 1 to 25. By default, the value is 10 seconds.
Description
Use the igmp max-response-time command to configure the maximum response time contained in the IGMP query packet. Use the undo igmp max-response-time command to restore the default value. The maximum query response time determines the period for a router to detect quickly that there are no longer directly connected group members in a LAN. Related command: display igmp group.
Example
# Configure the maximum response time to 8 seconds.
[3com-Ethernet1/0/0] igmp max-response-time 8
2.1.11 igmp proxy

Syntax
igmp proxy interface-type interface-number undo igmp proxy
View
Interface view
Parameter
interface-type: Proxy interface type. interface-number: Proxy interface number.
Description
Use the igmp proxy command to specify an interface of a leaf network router as the IGMP proxy of another interface. Use the undo igmp proxy command to remove the configuration. By default, IGMP proxy function is disabled. You must enable PIM on the interface before you configure the igmp proxy command. An interface cannot act as the IGMP proxy of two or more interfaces at the same time. If an interface is configured with IGMP proxy multiple times, the last one overrides all the previous configurations. Related command: pim neighbor-policy.
Example
# Configure the IGMP proxy of router Ethernet0/0/0 to Ethernet1/0/0.
[3com-Ethernet0/0/0] igmp proxy ethernet 1/0/0
2.1.12 igmp robust-count

Syntax
igmp robust-count robust-value undo igmp robust-count
View
Interface view
Parameter
robust-value: IGMP robust coefficient, indicating the times IGMP querier sends the IGMP specified group query packet when it receives an IGMP Leave packet from the host. The value ranges from 2 to 5, and by default the value is 2.
Description
Use the igmp robust-count command to set the times IGMP querier sends the IGMP specified group query packet when it receives an IGMP Leave packet from the host. Use the undo igmp robust-count command to restore the default value. On a shared network, that is, when there are multiple hosts and multicast routers on a network segment, the query router (querier for short) takes charge of maintaining IGMP group membership on an interface. When the host in IGMP Version 2 leaves a group, the host should send an IGMP Leave packet. If IGMP querier receives the packet, it must send the IGMP specified group query packet for robust-value times according to the interval seconds configured via the igmp lastmember-queryinterval command (if the command is not configured, seconds is 1), and the robust coefficient robust-value configured via igmp robust-count (if the command is not configured, robust-value is 2). If another host receives the IGMP specified group query packet from IGMP querier and is interested in the group, it will send an IGMP Membership Report packet within the maximum response time regulated by the packet. If IGMP querier receives the IGMP Membership Report packet from another host within the time robust-value x seconds, it will go on maintaining the group membership. If not, it will regard the group overtime and stop maintaining the group membership. This command is only valid when IGMP query router is running in IGMP Version 2. If the host runs in IGMP Version 1, it may not send an IGMP Leave packet when it leaves a group. At that time, the command is invalid to the host. Related command: igmp lastmember-queryinterval and display igmp interface.
Example
# Configure the robust-value of querier on the interface Ethernet1/0/0 to 3.
[3com-Ethernet1/0/0] igmp robust-count 3
2.1.13 igmp timer other-querier-present

Syntax
igmp timer other-querier-present seconds undo igmp timer other-querier-present
View
Interface view
Parameter
seconds: IGMP querier present time, in seconds. The value ranges from 1 to 131070 seconds. By default, the value is twice that of IGMP query messages interval. It is 120 seconds in general.
Description
Use the igmp timer other-querier-present command to configure the overtime value of the presence of an IGMP querier. Use the undo igmp timer other-querier-present command to restore the default value. On a shared network, i.e., there are multiple multicast routers on the same network segment, the query router (querier for short) takes charge of sending query messages periodically on the interface. If other non-queriers do not receive query messages within the valid period, the router will consider the previous query to be invalid and the router itself becomes a querier. In IGMP Version 1, the selection of a querier is determined by the multicast routing protocol. In IGMP Version 2, the router with the lowest IP address on the shared network segment acts as the querier. Related command: igmp timer query, display igmp interface.
Caution: If the querier present time configured is less than the twice that of query interval, it may lead to repeated changes of queriers in the network.
Example
# Configure the querier present time on the interface Ethernet1/0/0 to 200 seconds.
[3com-Ethernet1/0/0] igmp timer other-querier-present 200
2.1.14 igmp timer query

Syntax
igmp timer query seconds undo igmp timer query
View
Interface view
Parameter
seconds: Interval at which the router sends the IGMP query messages, in seconds. It ranges from 1 to 65535, and by default the value is 60 seconds.
Description
Use the igmp timer query command to configure the interval at which a router interface sends IGMP query messages. Use the undo igmp timer query command to restore the default value. A multicast router sends IGMP query messages at intervals to find out whether there are multicast group members on the network. The query interval can be modified according to the practical conditions of the network. Related command: igmp timer other-querier-present.
Example
# Configure the interval at which multicast router Ethernet1/0/0 sends IGMP query packet to 125 seconds.
[3com-Ethernet1/0/0] igmp timer query 125
2.1.15 igmp version

Syntax
igmp version { 1 | 2 } undo igmp version
View
Interface view
Parameter
1: IGMP Version 1. 2: IGMP Version 2. By default, IGMP Version 2 is used.
Description
Use the igmp version command to specify the version of IGMP that a router uses. Use the undo igmp version command to restore the default value.
All systems running in the same sub-network must support the same version of IGMP. When a router finds the system of Version 1, it cannot switch to Version 1 by itself.
Example
# Specify Ethernet1/0/0 to use IGMP Version 1.
[3com-Ethernet1/0/0] igmp version 1
2.1.16 reset igmp group

Syntax
reset igmp group { all | interface interface-type interface-number { all | group-address [ group-mask ] } }
View
User view
Parameter
all: All IGMP groups. interface interface-type interface-number: Interface type and interface number. group-address: IGMP group address. group-mask: Network segment mask of group address.
Description
Use the reset igmp group command to delete the IGMP group joined on the interface. The deletion of the group does not affect joining again.
Example
# Delete all the IGMP groups on all interfaces.
<3com> reset igmp group all
# Delete all the IGMP groups on the interface Ethernet0/0/0.

<3com> reset igmp group interface ethernet0/0/0 all
# Delete the group 225.0.0.1 on the interface Ethernet0/0/0.

<3com> reset igmp group interface ethernet0/0/0 225.0.0.1
# Delete the IGMP groups ranging between the network segment 225.1.1.0 and 225.1.1.255 on the interface Ethernet0/0/0.
<3com> reset igmp group interface ethernet0/0/0 225.1.1.0 255.255.255.0
Chapter 3 PIM Configuration Commands

3.1 PIM Configuration Commands
3.1.1 bsr-policy
Syntax
bsr-policy acl-number undo bsr-policy
View
PIM view
Parameter
acl-number: ACL number used by BSR filter policy , ranging from 2000 to 2999.
Description
Use the bsr-policy command to restrict the range for valid BSR to prevent BSR spoofing. Use the undo bsr-policy command to restore the normal state without any range restriction, and to regard all the messages received valid. In PIM SM network which uses BSR mechanism, any router can set itself as a C-BSR and will take charge of the authority of advertising BP information in the network if it succeeds in competition. To prevent the valid BSR in the network from being maliciously replaced, the following two measures should be taken: Change RP mapping relationship to prevent the host from spoofing the router by counterfeiting a valid BSR packet. BSR packet is multicast packet with TTL of 1, so this kind of attack usually takes place on the edge router. BSR is in the internal network and the host is in the external network, therefore, performing neighbor check and RPF check to BSR packets can prevent this kind of attack. If a router in the network is controlled by an attacker or an illegal router accesses the network, the attacker can set the router to C-BSR and make it succeed in competition and control the authority of advertising RP information in the network. The router, after being configured as C-BSR, will automatically advertise BSR information to the whole network. A BSR packet is the multicast packet which is forwarded hop by hop with TTL of 1. The whole network will not be affected if the neighbor router does not receive the BSR information. The solution is to configure bsr-policy on each router in the whole
network to restrict the range for a legal BSR. For example, if only 1.1.1.1/32 and 1.1.1.2/32 are permitted as BSR, the router will not receive and forward other BSR information and legal BSR will not compete with it. The above two points can partially protect the security of BSR in the network. However, if a legal BSR router is controlled by an attacker, it will also lead to the above problem. The source parameter in the related rule command is translated as BSR address in bsr-policy command. Related command: acl, rule.
Example
# Configure BSR filter policy on a router. Only permit 1.1.1.1/32 to act as BSR and regard others are invalid.
[3com-pim] bsr-policy 2001 [3com-pim] quit [3com] acl number 2001 [3com-acl-basic-2001] rule 0 permit source 1.1.1.1 0
3.1.2 c-bsr
Syntax
c-bsr interface-type interface-number hash-mask-len [ priority ] undo c-bsr
View
PIM view
Parameter
interface-type interface-number: Interface type and interface number of a router. before the configuration can take effect. hash-mask-len: Mask length. The mask performs And operation with multicast address at first, and then performs the operation of searching for RP. The value ranges from 0 to 32. priority: Priority of the candidate BSR. The larger the value is, the higher the priority of the candidate BSR is. The value ranges from 0 to 255, and by default the priority is 0. A
candidate BSR is configured on this interface. PIM-SM must be enabled on this interface
Description
Use the c-bsr command to configure a candidate BSR.
Use the undo c-bsr command to remove the candidate BSR configuration. By default, no candidate BSR is set. Since BSR and other devices in PIM domain need to exchange a great deal of information during candidate BSR configuration, a relatively large bandwidth must be guaranteed. Related command: pim sm.
Example
# Configure the IP address of the router on Ethernet1/0/0 as a candidate BSR with the priority 2.
<3com> system-view [3com] multicast routing-enable [3com] pim [3com-pim] c-bsr ethernet1/0/0 30 2
3.1.3 c-rp
Syntax
c-rp interface-type interface-number [ group-policy acl-number ] [ priority priority-value ] undo c-rp { interface-type interface-number | all }
View
PIM view
Parameter
interface-type interface-number: Specified interface with the IP address advertised as a candidate RP address. acl-number: Number of basic ACL that defines a group range, which is the service range of the advertised RP. The value ranges from 2000 to 2099. priority-value: Priority of a candidate RP. The larger the value is, the lower the priority is. The value ranges from 0 to 255, and by default the value is 0. all: Removes the configuration of all candidate RPs.
Description
Use the c-rp command to configure the router to advertise itself as a candidate RP to the BSR. Use the undo c-rp command to remove the configuration. By default, no candidate RP is configured.
When configuring a candidate RP, a relatively large bandwidth should be reserved for the router and other devices in PIM domain. Related command: c-bsr.
Example
# Configure the interface Ethernet1/0/0 as the candidate RP for all groups.
<3com> system-view [3com] multicast routing-enable [3com] pim [3com-pim] c-rp ethernet 1/0/0
3.1.4 crp-policy
Syntax
crp-policy acl-number undo crp-policy
View
PIM view
Parameter
acl-number: ACL number used by C-RP filter policy, ranging from 3000 to 3999.
Description
Use the crp-policy command to restrict the range for valid C-RP and the group range served by each C-RP to prevent C-RP cheating. Use the undo crp-policy command to restore the normal state without any range restriction, and to regard all the messages received valid. In PIM SM network which uses BSR mechanism, any router can set itself as a C-RP serving the specific group range. If it is elected in RP election, it will become an RP serving in the group range. In BSR mechanism C-RP router unicasts C-RP information to BSR router which is responsible for advertising all C-RP information to the whole network by using BRP information. To prevent C-RP cheating, crp-policy needs to be configured on BSR router to restrict the range for valid C-RP and the group address range it serves. Each C-BSR may become a BSR, so the same filter policy should be configured on each C-BSR.
This command uses the ACL numbered from 3000 to 3999. The parameter source in the related rule command indicates C-RP address, and destination indicates the group range the C-RP serves. Upon matching the received C-RP message, only when the C-RP address in the packet matches source address, and the group address range in the packet is the subset of that in ACL, can this configuration be regarded successful. Related command: acl and rule.
Example
# Configure C-RP policy on C-BSR router. Only permit 1.1.1.1/32 to act as C-RP which only serves the group range 225.1.0.0/16.
[3com-pim] crp-policy 3100 [3com-pim] quit [3com] acl number 3100 [3com-acl-adv-3100] rule 0 permit ip source 1.1.1.1 0 destination 225.1.0.0 0.0.255.255
3.1.5 debugging pim common

Syntax
debugging pim common { all | event | packet | timer } undo debugging pim common { all | event | packet | timer }
View
User view
Parameter
all: All the common debugging information of PIM. event: Debugging information of common PIM event. packet: Debugging information of PIM Hello message. timer: Debugging information of common PIM timer.
Description
Use the debugging pim common command to enable common PIM debugging functions. Use the undo debugging pim common command to disable debugging functions. By default, common PIM debugging functions are disabled.
Example
# Enable all common PIM debugging functions.
<3com> debugging pim common all
3.1.6 debugging pim dm

Syntax
debugging pim dm { alert | all | mrt | timer | warning | { recv | send } { all | assert | graft | graft-ack | join | prune } } undo debugging pim dm { alert | all | mrt | timer | warning | { recv | send } { all | assert | graft | graft-ack | join | prune } }
View
User view
Parameter
all: All the debugging information of PIM-DM. alert: Debugging information of PIM-DM interoperation event. mrt: Debugging information of PIM-DM multicast routing table. timer: Debugging information of PIM-DM timer. warning: Debugging information of PIM-DM warning message. recv: Debugging information of PIM-DM receiving packets. send: Debugging information of PIM-DM sending packets. all: All packet types. assert: Packet type, assert packet. graft: Packet type, graft packet. graft-ack: Packet type, graft acknowledgment packet. join: Packet type, join packet. prune: Packet type, prune packet.
Description
Use the debugging pim dm command to enable PIM-DM debugging functions. Use the undo debugging pim dm command to disable the debugging functions. By default, PIM-DM debugging functions are disabled.
Example
# Enable all PIM-DM debugging functions
<3com> debugging pim dm all
3.1.7 debugging pim sm

Syntax
debugging pim sm { all | mbr | mrt | msdp | timer | verbose | warning | { recv | send } { assert | bootstrap | crpadv | jp | reg | regstop } } undo debugging pim sm { all | mbr | mrt | msdp | timer | verbose | warning | { recv | send } { assert | bootstrap | crpadv | jp | reg | regstop } }
View
User view
Parameter
mbr: Debugging information of PIM-SM multicast boundary router event. mrt: Debugging information of PIM-SM multicast routing table. msdp: Functions between PIM-SM and MSDP. timer: Debugging information of PIM-SM timer. warning: Debugging information of PIM-SM warning message. recv: Debugging information of PIM-SM receiving packets. send: Debugging information of PIM-SM sending packets. assert | bootstrap | crpadv | jp | reg | regstop: Packet type.
Description
Use the debugging pim sm command to enable PIM-SM debugging functions. Use the undo debugging pim sm command to disable the debugging functions. By default, PIM-SM debugging functions are disabled. The command debugging pim sm register-proxy is only suitable for the distributed router. This command can enable the debugging when an interface board acts as a proxy of the main control board to send register packets.
Example
# Enable all PIM-SM debugging functions

<3com> debugging pim sm all
3.1.8 display pim bsr-info

Syntax
display pim bsr-info
View
Any view
Parameter
None
Description
Use the display pim bsr-info command to view Bootstrap Router (BSR) information. Related command: c-bsr and c-rp.
Example
# Execute this command on a router running PIM-SM and display the current BSR information.
<3com> display pim bsr-info Current BSR Address: 20.20.20.30 Priority: 0 Mask Length: 30 Expires: 00:01:55 Local host is BSR
3.1.9 display pim interface

Syntax
display pim interface [ interface-type interface-number ]
View
Any view
Parameter
interface-type interface-number: Interface type and interface number.
Description
Use the display pim interface command to view the PIM interface information.
Example
# Display the PIM information about the interface Ethernet1/0/0.
<3com> display pim interface ethernet 1/0/0 PIM information of interface Ethernet1/0/0: IP address of the interface is 10.10.1.20 PIM is enabled on interface PIM version is 2 PIM mode is Sparse PIM query interval is 30 seconds Total 1 PIM neighbor on interface PIM DR(designated router) is 10.10.1.20
Table 3-1 Description of output information of display pim interface command Item PIM is enabled on interface PIM query interval is 30 seconds PIM DR (designated 10.10.1.20 router) is Description PIM SM is enabled on the interface Ethernet1/0/0. The sending interval of Hello message is 30 seconds. IP address of DR is 10.10.1.20.
3.1.10 display pim neighbor

Syntax
display pim neighbor [ interface interface-type interface-number ]
View
Any view
Parameter
interface-type interface-number: Interface type and interface number.
Description
Use the display pim neighbor command to view the PIM neighbor information.
Example
# Display the PIM neighbor information of the interface Ethernet1/0/0 on the router.
<3com> display pim neighbor ethernet 1/0/0 Neighbor's Address 10.10.1.10 Interface Name Ethernet1/0/0 Uptime 00:41:59 Expires 00:01:16
3.1.11 display pim routing-table

Syntax
display pim routing-table [ *g [ group-address [ mask { mask-length | mask } ] ] [ incoming-interface { interface-type interface-number | null } ] [ dense-mode | sparse-mode ] display pim routing-table [ **rp [ rp-address [ mask { mask-length | mask } ] ] [ incoming-interface { interface-type interface-number | null } ] [ dense-mode | sparse-mode] display pim routing-table [ source-address [ mask { mask-length | mask } ] [ group-address [ mask { mask-length | mask } ] ] [ incoming-interface { interface-type interface-number | null } ] [ dense-mode | sparse-mode ]
View
Any view
Parameter
**rp: (*, *, RP) route entry. *g: (*, G) route entry. group-address: Address of the multicast group. source-address: IP address of the multicast source. incoming-address: Route entry of the specified incoming interface. interface-type interface-number: Specifies an interface by its type and number.
Description
Use the display pim routing-table command to view the contents of the PIM multicast routing table. Related command: display multicast routing-table.
Example
# Display the contents of the PIM multicast routing table on the router.
<3com> display pim routing-table PIM-SM Routing Table Total 0 (S,G) entry, 2 (*,G) entries, 0 (*,*,RP) entry
(*, 224.0.1.40), RP 20.20.20.30 Protocol 0x20: PIMSM, Flag 0x2003: RPT WC NULL_IIF UpTime: 00:17:25, never timeout Upstream interface: Null, RPF neighbor: 0.0.0.0 Downstream interface list: Ethernet0/0/0, Protocol 0x1: IGMP, never timeout
(*, 225.1.1.1), RP 20.20.20.30 Protocol 0x20: PIMSM, Flag 0x2003: RPT WC NULL_IIF UpTime: 00:08:45, never timeout Upstream interface: Null, RPF neighbor: 0.0.0.0 Downstream interface list: Ethernet0/0/0, Protocol 0x1: IGMP, never timeout
Matched 0 (S,G) entry, 2 (*,G) entries, 0 (*,*,RP) entry
3.1.12 display pim rp-info

Syntax
display pim rp-info [ group-address ]
View
Any view
Parameter
group-address: Group address.
Description
Use the display pim rp-info command to view the corresponding RP information of multicast group, BSR and static RP information. If no group address is specified in this command, the corresponding RP information of all groups will be displayed.
Example
# Display the currently corresponding RP of 224.0.0.0.
<3com> display pim rp-info 224.0.0.0 PIM-SM RP-SET information: BSR is: 20.20.20.20
Group/MaskLen: 224.0.0.0/4 RP 20.20.20.20 Version: 2 Priority: 0 Uptime: 00:00:05 Expires: 00:02:25
3.1.13 pim
Syntax
pim undo pim
View
System view
Parameter
None
Description
Use the pim command to enter PIM view. Use the undo pim command to clear the configuration in PIM view. The global parameter which is related with the PIM must be configured in PIM view.
Example
<3com> system-view [3com] multicast routing-enable [3com] pim [3com-pim]
3.1.14 pim bsr-boundary

Syntax
pim bsr-boundary undo pim bsr-boundary
View
Interface view
Parameter
None
Description
Use the pim bsr-boundary command to configure an interface to become the PIM domain boundary. Use the undo pim bsr-boundary command to remove the boundary. By default, no domain boundary is set. After this command is configured on an interface, Bootstrap messages cannot pass the boundary, whereas other PIM packets can. This command can effectively divide the network to domains which use different BSRs. Related command: c-bsr.
Example
# Configure a domain boundary on the interface Pos1/0/0.
[3com-Pos1/0/0] pim bsr-boundary
3.1.15 pim dm
Syntax
pim dm undo pim dm
View
Interface view
Parameter
None
Description
Use the pim dm command to enable PIM-DM. Use the undo pim dm command to disable PIM-DM. By default, PIM-DM is disabled. Once PIM-DM is enabled on an interface, PIM-SM cannot be enabled on the same interface and vice versa.
Example
# Enable PIM-DM on the interface Ethernet1/0/0.
[3com] multicast routing-enable [3com] interface ethernet1/0/0 [3com-Ethernet1/0/0] pim dm
3.1.16 pim neighbor-limit

Syntax
pim neighbor-limit limit undo pim neighbor-limit
View
Interface view
Parameter
limit: Upper limit of PIM neighbor number on an interface, ranging from 0 to 128.
Description
Use the pim neighbor-limit command to limit PIM neighbor number on a router interface. If the number exceeds the limit configured, no new neighbor can be added to the router. Use the undo pim neighbor-limit command to restore the default configuration. By default, the upper limit of PIM neighbor number on an interface is 128. If the PIM neighbor number on an interface has exceeded the value configured during configuration, the previous PIM neighbor will not be deleted.
Example
# Limit the upper limit of PIM neighbor number on the interface Ethernet1/0/0/ to 50.
[3com-Ethernet1/0/0] pim neighbor-limit 50
3.1.17 pim neighbor-policy

Syntax
pim neighbor-policy acl-number undo pim neighbor-policy
View
Interface view
Parameter
acl-number: Number of basic ACL. The value ranges from 2000 to 2099.
Description
Use the pim neighbor-policy command to configure a router to filter the PIM neighbor of the current interface. Use the undo pim neighbor-policy command to cancel the filtering. Only the router which is permitted by ACL can act as PIM neighbor of the current interface, and other routers cannot. If this command is configured repeatedly, the new configuration will overwrite the previous one.
Example
# Configure 10.10.1.2 rather than 10.10.1.1 as the PIM neighbor of Ethernet1/0/0.
[3com-Ethernet1/0/0] pim neighbor-policy 2001 [3com-Ethernet1/0/0] quit [3com] acl number 2001 [3com-acl-basic-2001] rule permit source 10.10.1.2 0 [3com-acl-basic-2001] rule deny source 10.10.1.1 0
3.1.18 pim sm
Syntax
pim sm undo pim sm
View
Interface view
Parameter
None
Description
Use the pim sm command to enable PIM-SM protocol on an interface. Use the undo pim sm command to disable PIM-SM protocol. By default, PIM-SM is disabled. Once PIM-SM is enabled on an interface, PIM-DM cannot be enabled on the same interface and vice versa.
Example
# Enable PIM-SM on the interface Ethernet1/0/0.
<3com> system-view [3com] multicast routing-enable [3com] interface ethernet 1/0/0 [3com-Ethernet1/0/0] pim sm
3.1.19 pim timer hello

Syntax
pim timer hello seconds undo pim timer hello
View
Interface view
Parameter
seconds: Interval of sending Hello message in seconds, ranging from 1 to 18000. By default, the value is 30 seconds.
Description
Use the pim timer hello command to configure the interval of sending PIM router Hello message. Use the undo pim timer hello command to restore the default value.
Example
# Configure the interval of sending Hello message on the interface Ethernet1/0/0 on the PIM router to 40 seconds.
[3com-Ethernet1/0/0] pim sm [3com-Ethernet1/0/0] pim timer hello 40
3.1.20 register-policy
Syntax
register-policy acl-number undo register-policy
View
PIM view
Parameter
acl-number: Number of advanced IP ACL, defining the rule of filtering the source and group addresses. The value ranges from 3000 to 3999.
Description
Use the register-policy command to configure a RP to filter the register packet sent by the DR in the PIM-SM network and to accept the specific packet only. Use the undo register-policy command to remove the configured packet filtering.
Example
# If the local device is the RP in the network, using the following command can only accept the multicast data register packets sent by the source on the network segment 10.10.0.0/16 to the multicast address in the range of 225.1.0.0/16.
<3com> system-view [3com] acl number 3110 [3com-acl-adv-3110] rule permit ip source 10.10.0.0 0.0.255.255 destination 225.1.0.0 0.0.255.255 [3com-acl-adv-3110] quit [3com] multicast routing-enable [3com] pim [3com-pim] register-policy 3110
3.1.21 reset pim neighbor

Syntax
reset pim neighbor { all | { neighbor-address | interface interface-type interface-number } *}
View
User view
Parameter
all: All PIM neighbors. neighbor-address: Specifies neighbor address. interface: Specifies the interface. interface-type interface-number: Interface type and interface number.
Description
Use the reset pim neighbor command to clear PIM neighbor. Related command: display pim neighbor.
Example
# Clear the PIM neighbor of the interface addressed with 25.5.4.3.
<3com> reset pim neighbor 25.5.4.3
3.1.22 reset pim routing-table

Syntax
reset pim routing-table all reset pim routing-table { group-address [ mask group-mask | group-mask-length ] [ source-address [ mask source-mask | source-mask-length ] [ incoming-interface { interface-type interface-number | null } ] } *
View
User view
Parameter
all: All PIM route entries. group-address: Multicast group address.
mask group-mask: Address mask of multicast group. group-mask-length: Address mask length of multicast group. source-address: Multicast source address. mask source-mask: Address mask of multicast source. source-mask-length: Address mask length of multicast source. null: Route entry with null incoming interface. incoming-interface: Incoming interface of the route entry in PIM routing table. interface-type interface-number: Interface type and interface number.
Description
Use the reset pim routing-table command to clear PIM route entry. The sequence of group-address and source-address can be reversed, but the input group-address and source-address must be valid. Otherwise, the system will prompt an input error. If group-address is configured to 244.0.0.0/24 and source-address to RP address (in which, group address may have mask but the calculation result of the two must be 224.0.0.0, while source address has no mask), it indicates only (*, *, RP) entry is deleted. If group-address is configured to a group address and source-address to 0 (in which, group address may have mask while source address has no mask), it indicates only (*, G) entry is deleted. After this command is executed, not only the multicast route entry is deleted from PIM, but also the corresponding route entry or forwarding entry in the multicast kernel routing table, and MFC is deleted. Related command: reset multicast routing-table, reset multicast forwarding-table, display pim routing-table.
Example
# Clear the route entry with group address of 225.5.4.3 in PIM routing table.
<3com> reset pim routing-table 225.5.4.3
3.1.23 source-policy
Syntax
source-policy acl-number undo source-policy
View
PIM view
Parameter
acl-number: Number of basic or advanced ACL. The value ranges from 2000 to 3999.
Description
Use the source-policy command to configure a router to filter the multicast data packets received according to source (group) address. Use the undo source-policy command to remove the configuration. If source address filtering and basic ACL are configured, all the multicast data packets received will be matched with source addresses. A packet which does not pass matching will be discarded. If source address filtering and advanced ACL are configured, all the multicast data packets received will be matched with source and group addresses. A packet which does not pass matching will be discarded. This command filters not only multicast data, but also the multicast data encapsulated in register packet. If this command is executed repeatedly, the new configuration will overwrite the previous one.
Example
# Configure to accept the multicast data packets with source address of 10.10.1.2 and discard the multicast data packets with source address of 10.10.1.1.
[3com] multicast routing-enable [3com] pim [3com-pim] source-policy 2001 [3com-pim] quit [3com] acl number 2001 [3com-acl-basic-2001] rule permit source 10.10.1.2 0 [3com-acl-basic-2001] rule deny source 10.10.1.1 0
3.1.24 spt-switch-threshold
Syntax
spt-switch-threshold { traffic-rate | infinity } [ group-policy acl-number [ order order-value] ]
undo spt-switch-threshold { traffic-rate | infinity } [ group-policy acl-number ]
View
PIM view
Parameter
traffic-rate: Switch rate threshold from the RPT to the SPT in Kbps, ranging from 0 to 65535. By default, the switch threshold value is 0, i.e., switching starts when the RPT receives the first data packet. infinity: Indicates never to switch to SPT. acl-number: Number of basic IP ACL, defining the range of a multicast group. The value ranges from 2000 to 2999. order-value: Order of the newly-added or refreshed group-policy in the group-policy table, ranging from 1 to 99.
Description
Use the spt-switch-threshold command to set the packet rate threshold when the PIM leaf router switches from RPT to SPT. Use the undo spt-switch-threshold command to restore the default setting. Use the order command to regulate the order of the group-policy. In addition, the system chooses SPT switch threshold according to the order of group-policy, which is more flexible and increases efficiency.
Example
# Set the threshold value to 4 kbps. If the transmission rate from the source to the multicast group is higher than the value, the router will switch to the SPT toward the source.
<3com> system-view [3com] multicast routing-enable [3com] pim [3com-pim] spt-switch-threshold 4
# Add a new group-policy, with ACL number of 2010, threshold value of 100, and order number of 1.
[3com] spt-switch-threshold 100 group-policy 2010 order 1
3.1.25 static-rp
Syntax
static-rp rp-address [ acl-number ] undo static-rp
View
PIM view
Parameter
rp-address: Static RP address. This address must be a valid unicast IP address and cannot be configured as the address in 127 network segment. acl-number: Number of basic ACL, used in controlling the multicast group range that static RP serves. The value ranges from 2000 to 2099.
Description
Use the static-rp command to configure static RP. Use the undo static-rp command to remove the configuration. RP is the kernel router in multicast routing. If the dynamic RP elected through the BSR mechanism is invalid for some reason, static RP can be configured as backup of the dynamic RP to improve robusticity of the network and operation management capability of the multicast network. All routers in the PIM domain should be configured with this command and be specified with the same RP address. If the configured static RP address is the address of an UP interface on the local device, the local device will act as static RP. PIM is not necessarily enabled on the interface which acts as static RP. If this command is configured but ACL is not specified, the static RP configured will serve all the multicast groups. If ACL is specified, the static RP configured will only serve the multicast group permitted by the ACL. In the case that the RP elected through BSR mechanism is valid, static RP does not take effect. If this command is executed repeatedly, the new configuration will overwrite the previous one. Related command: display pim rp-info.
Example
# Configure 10.110.0.6 as a static RP.

[3com] multicast routing-enable [3com] pim [3com-pim] static-rp 10.110.0.6
Chapter 4 MSDP Configuration Commands

4.1 MSDP Configuration Commands
4.1.1 cache-sa-enable
Syntax
cache-sa-enable undo cache-sa-enable
View
MSDP view
Parameter
None
Description
Use the cache-sa-enable command to enable the router to cache SA state. Use the undo cache-sa-enable command to remove the cache from the router. By default, the router caches the SA state, i.e., (S, G) entry after it receives SA messages. If the router is in cache state, it will not send SA request messages to the specified MSDP peer when it receives a new group join message.
Example
# Configure the router to cache all the SA states.
<3com> system-view [3com] msdp [3com-msdp] cache-sa-enable
4.1.2 debugging msdp

Syntax
debugging msdp { all | connect | event | packet | source-active } undo debugging msdp { all | connect | event | packet | source-active }
View
User view
Parameter
all: All the debugging information of MSDP. connect: Debugging information of MSDP peer connection reset. event: Debugging information of MSDP event. packet: Debugging information of MSDP packet. source-active: Debugging information of active MSDP source.
Description
Use the debugging msdp command to enable MSDP debugging functions. Use the undo debugging msdp command to disable MSDP debugging functions. By default, MSDP debugging functions are disabled.
Example
# Enable all common MSDP debugging functions.
<3com> debugging msdp all
4.1.3 display msdp brief

Syntax
display msdp brief
View
Any view
Parameter
None
Description
Use the display msdp brief command to view the state of MSDP peer.
Example
# Display the state of MSDP peer.
<3com> display msdp brief MSDP Peer Brief Information

Peer's Address 20.20.20.20 State Up

Up/Down time 00:00:13 AS 100 SA Count 0 Reset Count 0
4.1.4 display msdp peer-status

Syntax
display msdp peer-status [ peer-address ]
View
Any view
Parameter
peer-address: Address of MSDP peer.
Description
Use the display msdp peer-status command to view the detailed information of MSDP peer. Related command: peer.
Example
# Display the detailed information of the MSDP peer 10.110.11.11.
<3com> display msdp peer-status 10.110.11.11 MSDP Peer 20.20.20.20, AS 100 Description: Information about connection status: State: Up Up/down time: 14:41:08 Resets: 0 Connection interface: LoopBack0 (20.20.20.30) Number of sent/received messages: 867/947 Number of discarded output messages: 0 Elapsed time since last connection or counters clear: 14:42:40 Information about (Source, Group)-based SA filtering policy: Import policy: none Export policy: none Information about SA-Requests: Policy to accept SA-Request messages: none Sending SA-Requests status: disable Minimum TTL to forward SA with encapsulated data: 0
SAs learned from this peer: 0, SA-cache maximum for the peer: none Input queue size: 0, Output queue size: 0 Counters for MSDP message: Count of RPF check failure: 0 Incoming/outgoing SA messages: 0/0 Incoming/outgoing SA requests: 0/0 Incoming/outgoing SA responses: 0/0 Incoming/outgoing data packets: 0/0
4.1.5 display msdp sa-cache

Syntax
display msdp sa-cache [ group-address ] [ source-address ]
[ autonomous-system-number ]
View
Any view
Parameter
group-address: Group address of (S, G) entry. source-address: Source address of (S, G) entry. With no source address specified, all the source information of the specified group will be displayed. If neither group address nor source address is determined, all SA caches will be displayed. autonomous-system-number: Displays (S, G) entries from specified autonomous system.
Description
Use the display msdp sa-cache command to view (S, G) state learnt from the MSDP peer. Only when cache-sa-enable command is configured can the cache state be displayed.
Example
<3com> display msdp sa-cache MSDP Total Source-Active Cache - 5 entries
(Source, Group) (10.10.1.2, 225.1.1.1) (10.10.1.3, 225.1.1.1) (10.10.1.2, 225.1.1.2) (10.10.2.1, 225.1.1.2)
Origin RP 10.10.10.10 10.10.10.10 10.10.10.10 10.10.10.10
Pro BGP BGP BGP BGP
AS 100 100 100 100
Uptime
Expires
00:00:10 00:05:50 00:00:11 00:05:49 00:00:11 00:05:49 00:00:11 00:05:49

(10.10.1.2, 225.1.2.2)

10.10.10.10 BGP 100 00:00:11 00:05:49
MSDP matched 5 entries
4.1.6 display msdp sa-count

Syntax
display msdp sa-count [ autonomous-system-number ]
View
Any view
Parameter
autonomous-system-number: Number of sources and groups from the specified autonomous system.
Description
Use the display msdp sa-count command to view the number of sources and groups in MSDP cache. The cache-sa-enable command must be configured before the configuration of this command.
Example
<3com> display msdp sa-count Number of cached Source-Active entries, counted by Peer Peer's Address 10.10.10.10 Number of SA 5
Number of source and group, counted by AS AS ? Number of source 3 Number of group 3
Total Source-Active entries: 5
4.1.7 import-source
Syntax
import-source [ acl acl-number ] undo import-source
View
MSDP view
Parameter
acl-number: Number of basic or advanced IP ACL, ranging from 2000 to 3999, controlling which sources SA messages will advertise and to which groups it will be sent in the domain. Basic ACL performs filtering to source, and advanced ACL performs filtering to source/group. If no ACL is specified, no multicast source will be advertised.
Description
Use the import-source command to configure which (S, G) entries in the domain need to be advertised when a MSDP originates an SA message. Use the undo import-source command to remove the configuration. By default, all the (S, G) entries in the domain are advertised by the SA message. Besides controlling SA message creation, you can filter the forwarded SA messages by using the commands peer sa-policy import and peer sa-policy export.
Example
# Configure which (S, G) entries from the multicast routing table will be advertised in SA messages originated by the MSDP peer.
<3com> system-view [3com] acl number 3101 [3com-acl-adv-3101] rule permit ip source 10.10.0.0 0.0.255.255 destination 225.1.0.0 0.0.255.255 [3com-acl-adv-3101] quit [3com] msdp [3com-msdp] import-source acl 3101
4.1.8 msdp
Syntax
msdp undo msdp
View
System view
Parameter
None
Description
Use the msdp command to enable MSDP and enter the MSDP view. Use the undo msdp command to clear all configurations of MSDP, release all resources that MSDP occupies, and restore the initial state. Related command: peer.
Example
# Clear all configurations of MSDP.
<3com> system-view [3com] undo msdp
4.1.9 msdp-tracert
Syntax
msdp-tracert source-address group-address rp-address [ max-hops max-hops ] [ next-hop-info ] [ sa-info ] [ peer-info ] [ skip-hops skip-hops ]
View
Any view
Parameter
source-address: Multicast address address. group-address: Multicast group address. rp-address: IP address of RP. max-hops: The maximum number of hops that are traced, ranging from 1 to 255. By default, the value is 16. next-hop-info: Flag bit for collecting the next hop information. sa-info: Flag bit for collecting SA entity information. peer-info: Flag bit for collecting MSDP peer information. skip-hops: Number of hops that are skipped before collecting detailed information, ranging from 0 to 255. By default, the value is 0.
Description
Use the msdp-tracert command to trace the transmission path of SA messages in the network, which helps to locate the faults such as information loss and configuration error. After the transmission path of SA messages is determined, correct configuration can avoid the overflow of SA messages.
Example
# Trace (10.10.1.1, 225.2.2.2, 20.20.20.20) path information.
<3com> msdp-tracert 10.10.1.1 225.2.2.2 20.20.20.20
# Specify the maximum number of hops that are traced and collect detailed information of SA and MSDP peer.
<3com> msdp-tracert 10.10.1.1 225.2.2.2 20.20.20.20 max-hops 10 sa-info peer-info MSDP tracert: press CTRL_C to break D-bit: set if have this (S,G) in cache but with a different RP
RP-bit: set if this router is an RP NC-bit: set if this router is not caching SA's C-bit: set if this (S,G,RP) tuple is in the cache
MSDP Traceroute path information: Router Address: 20.20.1.1
Fixed-length response info: Peer Uptime: 10 minutes, D-bit: 0, RP-bit: 1, Cache Entry Uptime: 30 minutes C-bit: 1
NC-bit: 0,
Return Code: Reached-max-hops Next Hop info: Next-Hop Router Address: 0.0.0.0 SA info: Count of SA messages received for this (S,G,RP): 0 Count of encapsulated data packets received for this (S,G,RP):0 SA cache entry uptime: 00:30:00 , Peering info: Peering Uptime: 10 minutes, Count of Peering Resets: 3 SA cache entry expiry time: 00:03:32
Table 4-1 Description of msdp-tracert command domain Item Router Address Description Address where the local router creates Peering session with Peer-RPF neighbor.
Item Peer Uptime
Description Time for which the local router performs Peering session with Peer-RPF neighbor in minute, with the maximum value of 255. Present time of (S, G, RP) entry in SA cache of the local router, in minute, with the maximum value of 255. (S, G, RP) entry existing in SA cache of the local router.
Cache Entry Uptime
D-bit: 1
But the RP is different from the RP specified in the request message. The local router is an RP, but it is not necessarily the source RP in (S, G, RP) entry. The local router enables SA cache. (S, G, RP) entry exists in SA cache of the local router. Return reason is the reached maximum hops and other possible value includes: Hit-src-RP: The local hop router is the source RP in (S, G, RP) entry. If the parameter next-hop-info is used, Peer-RPF neighbor address will be displayed. Number of SA messages received for tracing this (S, G, RP) entry. Number of encapsulated data packets received for tracing this (S, G, RP) entry. Present time of SA cache entry. Expiry time of SA cache entry. Time for which the local router performs Peering session with Peer-RPF neighbor. Number of Peering session resets.
RP-bit: 1 NC-bit: 0 C-bit: 1 Return Code: Reached-max-hops Next-Hop Router Address: 0.0.0.0 Count of SA messages received for this (S,G,RP) Count of encapsulated data packets received for this (S,G,RP) SA cache entry uptime SA cache entry expiry time Peering minutes Uptime: 10
Count of Peering Resets
4.1.10 originating-rp
Syntax
originating-rp interface-type interface-number undo originating-rp
View
MSDP view
Parameter
Description
Use the originating-rp command to allow a MSDP to use the IP address of a specified interface as the RP address in the SA message originated. Use the undo originating-rp command to remove the configuration. By default, the RP address in the SA message is the RP address configured by PIM. Configure logical RP by using this command.
Example
# Configure IP address of the interface Ethernet1/0/0 as the RP address in the SA message originated.
<3com> system-view [3com] msdp [3com-msdp] originating-rp ethernet 1/0/0
4.1.11 peer
Syntax
peer peer-address connect-interface interface-type interface-number undo peer peer-address
View
MSDP view
Parameter
peer-address: Address of MSDP peer. connect-interface interface-type interface-number: Interface type and number whose primary address is used by the local router as the source IP address to establish TCP connection with remote MSDP peers.
Description
Use the peer command to configure an MSDP peer. Use the undo peer command to remove the MSDP peer configured. If the local router is also in BGP peer relation with a MSDP peer, the MSDP peer and the BGP peer should use the same IP address. Related command: static-rpf-peer.
Example
# Configure the router using IP address 125.10.7.6 as an MSDP peer of the local router.
<3com> system-view [3com] msdp [3com-msdp] peer 125.10.7.6 connect-interface ethernet 0/1/0
4.1.12 peer description

Syntax
peer peer-address description text undo peer peer-address description
View
MSDP view
Parameter
peer-address: Address of MSDP peer. text: Descriptive text, being case sensitive. The maximum length is 80 characters.
Description
Use the peer description command to configure descriptive text to MSDP peer. Use the undo peer description command to remove the descriptive text configured. By default, a MSDP peer has no descriptive text. The Administrator can conveniently differentiate MSDP peers by configuring descriptive text. Related command: display msdp peer-status.
Example
# Add descriptive text CstmrA to router 125.10.7.6 to specify that the router is Client A.

<3com> system-view [3com] msdp
[3com-msdp] peer 125.10.7.6 description router CstmrA
4.1.13 peer mesh-group

Syntax
peer peer-address mesh-group name undo peer peer-address mesh-group name
View
MSDP view
Parameter
name: Name of an Mesh Group, being case sensitive. The maximum length is 32 characters. peer-address: Address of an MSDP peer to be a member of the Mesh Group.
Description
Use the peer mesh-group command to configure an MSDP peer to join a Mesh Group. Use the undo peer mesh-group command to remove the configuration. By default, a MSDP peer is not a member of any Mesh Group.
Example
# Configure the MSDP peer with address 125.10.7.6 to be a member of the Mesh Group Grp1.
<3com> system-view [3com] msdp [3com-msdp] peer 125.10.7.6 mesh-group Grp1
4.1.14 peer minimum-ttl

Syntax
peer peer-address minimum-ttl ttl undo peer peer-address minimum-ttl
View
MSDP view
Parameter
peer-address: Address of the MSDP peer to which the TTL limitation applies. ttl: TTL threshold, ranging from 0 to 255.
Description
Use the peer minimum-ttl command to configure the minimum TTL (Time-to-Live) value of the multicast data packets encapsulated in SA messages to be sent to a specified MSDP peer. Use the undo peer minimum-ttl command to restore the default TTL threshold. By default, the value of TTL threshold is 0. Related command: peer.
Example
# Configure the TTL threshold value to 10, i.e., only those multicast data packets with a TTL value greater than or equal to 10 can be forwarded to the MSDP peer 110.10.10.1.
<3com> system-view [3com] msdp [3com-msdp] peer 110.10.10.1 minimum-ttl 10
4.1.15 peer request-sa-enable

Syntax
peer peer-address request-sa-enable undo peer peer-address request-sa-enable
View
MSDP view
Parameter
Description
Use the peer request-sa-enable command to enable the router to send a SA request message to the specified MSDP peer when receiving a new group join message.
Use the undo peer request-sa-enable command to remove the configuration. By default, when receiving a new group join message, the router does not send SA request messages to MSDP peers but waits to receive the next SA message. Related command: cache-sa-enable.
Example
# Configure to send SA request message to the MSDP peer 125.10.7.6.
<3com> system-view [3com] msdp [3com-msdp] peer 125.10.7.6 request-sa-enable
4.1.16 peer sa-cache-maximum

Syntax
peer peer-address sa-cache-maximum sa-limit undo peer peer-address sa-cache-maximum
View
MSDP view
Parameter
peer-address: Address of MSDP peer. sa-limit: Maximum value that the SA cache allows, ranging from 1 to 2048.
Description
Use the peer sa-cache-maximum command to limit the number of caches originated when the router receives SA messages from an MSDP peer. Use the undo peer sa-cache-maximum command to restore the default configuration. By default, the maximum number of SA caches is 2048. This configuration is recommended for all MSDP peers in the networks possibly attacked by DoS. Related command: display msdp, sa-count, display msdp peer-status, display msdp brief.
Example
# Limit the number of caches originated to 100 when the router receives SA messages from the MSDP peer 125.10.7.6.

<3com> system-view [3com] msdp
[3com-msdp] peer 125.10.7.6 sa-cache-maximum 100
4.1.17 peer sa-policy

Syntax
peer peer-address sa-policy { import | export } [ acl acl-number ] undo peer peer-address sa-policy { import | export }
View
MSDP view
Parameter
import: Receives SA messages from the specified MSDP peer. export: Forwards SA messages from the specified MSDP peer. peer-address: Address of the MSDP peer whose SA messages need to be filtered. acl acl-number: Number of advanced IP ACL, ranging from 3000 to 3999. If no ACL is specified, all (S, G) entries are filtered.
Description
Use the peer sa-policy command to configure a filter list for SA messages received or forwarded from the specified MSDP peer. Use the undo peer sa-policy command to remove the configuration. By default, messages received or forwarded will not be filtered. All SA messages are received or forwarded from a MSDP peer. Related command: peer.
Example
# Forward only those SA messages that passed the advanced IP ACL.
<3com> system-view [3com] acl number 3100 [3com-acl-adv-3100] rule permit ip source 170.15.0.0 0.0.255.255 destination 225.1.0.0 0.0.255.255 [3com-acl-adv-3100] quit [3com] msdp [3com-msdp] peer 125.10.7.6 connect-interface ethernet 0/0/0
[3com-msdp] peer 125.10.7.6 sa-policy export acl 3100
4.1.18 peer sa-request-policy

Syntax
peer peer-address sa-request-policy [ acl acl-number ] undo peer peer-address sa-request-policy
View
MSDP view
Parameter
peer-address: Address from which the local router receives SA request messages sent by the specified MSDP peer. acl acl-number: Number of basic IP ACL, describing multicast group address, ranging from 2000 to 2999. If no ACL is specified, all SA request messages will be ignored.
Description
Use the peer sa-request-policy command to limit the SA request messages that the router receives from MSDP peers. Use the undo peer sa-request-policy command to remove the limitation. By default, the router receives all SA request messages from the MSDP peer. If no ACL is specified, all SA requests will be ignored. If ACL is specified, only those SA request messages from the groups permitted by the ACL will be processed and all others will be ignored. Related command: peer.
Example
# Configure the ACL for filtering SA request messages from the MSDP peer 175.58.6.5. The SA request messages from group address range 225.1.1.0/8 will be received and all the others will be ignored.
<3com> system-view [3com] acl number 2001 [3com-acl-basic-2001] rule permit source 225.1.1.0 0.0.0.255 [3com-acl-basic-2001] quit [3com] msdp [3com-msdp] peer 175.58.6.5 sa-request-policy acl 2001
4.1.19 reset msdp peer

Syntax
reset msdp peer peer-address
View
User view
Parameter
Description
Use the reset msdp peer command to reset the TCP connection with the specified MSDP peer, and clear all the statistics of the specified MSDP peer. Related command: peer.
Example
# Clear TCP connection and statistics of the MSDP peer 125.10.7.6.
<3com> reset msdp peer 125.10.7.6
4.1.20 reset msdp sa-cache

Syntax
reset msdp sa-cache [ group-address ]
View
User view
Parameter
group-address: Address of the group, (S, G) entries matching which are cleared from the SA cache. If no multicast group address is specified all SA cache entries will be cleared.
Description
Use the reset msdp sa-cache command to clear SMDP SA cache entries. Related command: cache-sa-enable and display msdp sa-cache.
Example
# Clear the cache entries with group address 225.5.4.3 from the SA cache.

<3com> reset msdp sa-cache 225.5.4.3
4.1.21 reset msdp statistics

Syntax
reset msdp statistics [ peer-address ]
View
User view
Parameter
peer-address: Address of the MSDP peer whose statistics, resetting information and input/output information will be cleared. If no MSDP peer address is specified, all MSDP peers statistics will be cleared.
Description
Use the reset msdp statistics command to clear statistics of one or more MSDP peers without resetting the MSDP peer.
Example
# Clear the statistics of the MSDP peer 25.10.7.6.
<3com> reset msdp statistics 125.10.7.6
4.1.22 shutdown
Syntax
shutdown peer-address undo shutdown peer-address
View
MSDP view
Parameter
peer-address: IP address of MSDP peer.
Description
Use the shutdown command to disable the MSDP peer specified. Use the undo shutdown command to remove the configuration.
By default, no MSDP peer is disabled. Related command: peer.
Example
# Disable the MSDP peer 125.10.7.6.
<3com> system-view [3com] msdp [3com-msdp] shutdown 125.10.7.6
4.1.23 static-rpf-peer
Syntax
static-rpf-peer peer-address [ rp-policy list ] undo static-rpf-peer peer-address
View
MSDP view
Parameter
peer-address: Address of the static RPF peer to receive SA messages. rp-policy list: Filter policy based on RP address, which filters the RP in SA messages. If the parameter is not specified, all SA messages from the static RPF peer will be accepted. If the parameter rp-policy list is specified and filter policy is configured, the router will only accept SA messages from the RP which passes filtering. If no filter policy is configured, the router will accept all SA messages from the static RPF peer.
Description
Use the static-rpf-peer command to configure static RPF peer. Use the undo static-rpf-peer command to remove the static RPF peer. By default, no static RPF peer is configured. You must configure the peer command before using the static-rpf-peer command. If you do not want to perform RPF check to SA messages from the same MSDP peer. If only an MSDP peer is configured on a router, this MSDP peer will be regarded as static RPF peer. Related command: peer and ip prefix-list.
Example
# configure two static RPF peers.
<3com> system-view [3com] ip ip-prefix list1 permit 130.10.0.0 16 [3com] ip ip-prefix list2 permit 130.10.0.0 16 [3com] msdp [3com-msdp] peer 130.10.7.6 connect-interface ethernet 1/0/0 [3com-msdp] peer 130.10.7.5 connect-interface ethernet 1/0/0 [3com-msdp] static-rpf-peer 130.10.7.6 rp-policy list1 [3com-msdp] static-rpf-peer 130.10.7.5 rp-policy list2
4.1.24 timer retry

Syntax
timer retry seconds undo timer retry
View
MSDP view
Parameter
seconds: Value of connection request re-try period in seconds, ranging from 1 to 60.
Description
Use the timer retry command to configure the value of the connection request re-try period. Use the undo timer retry command to restore the default value. By default, the value of connection request re-try period is 30 seconds. Related command: peer.
Example
# Configure the connection request re-try period to 60 seconds.
<Qudiway> system-view [3com] msdp [3com-msdp] timer retry 60
Chapter 5 MBGP Multicast Extension Configuratio n Commands
Chapter 5 MBGP Multicast Extension Configuration Commands

5.1 MBGP Multicast Extension Configuration Commands
5.1.1 aggregate
Syntax
aggregate [ address mask ] [ [ as-set ] [ attribute-policy ] route-policy-name [ ]
detail-suppressed
origin-policy route-policy-name
suppress-policy
route-policy-name ] undo aggregate address mask [ detail-suppressed ] [ route-policy-name ] [ as-set ] [ attribute-policy route-policy-name ] ] [ suppress-policy
origin-policy route-policy-name
View
IPv4 multicast subaddress family view
Parameter
address: Address of the aggregated route. mask: Network mask of the aggregated route. as-set: Generates a route with AS_SET segment. This parameter is not recommended to use when many AS paths are aggregated. attribute-policy: Attributes of the aggregated route. detail-suppressed: No detailed route but the aggregated route is advertised. origin-policy: Filters the detailed route involved in aggregation. suppress-policy: Detailed route determined is not advertised.
Description
Use the aggregate command to create a multicast aggregated record in the BGP routing table. Use the undo aggregate command to remove the aggregation. By default, no route is aggregated.
Use the aggregate command without parameters to create one local aggregated route and set atomic aggregation attributes.
Example
# Create a multicast aggregated record in the BGP routing table and set the address of aggregated route is 192.213.0.0.
[3com-bgp-af-mul] aggregate 192.213.0.0 255.255.0.0
5.1.2 debugging bgp mp-update

Syntax
debugging bgp mp-update [ receive | send | verbose ] undo debugging bgp mp-update
View
User view
Parameter
receive: Enables incoming packet debugging of MBGP. send: Enables outgoing packet debugging of MBGP. verbose: Enables packet detail debugging of MBGP.
Description
Use the debugging bgp mp-update command to enable MBGP Update packet debugging. Use the undo debugging bgp mp-update command to disable the functions.
Example
# Enable MBGP Update packet debugging.
<3com> debugging bgp mp-update
5.1.3 display bgp multicast group

Syntax
display bgp multicast group [ group-name ]
View
Any view
Parameter
group-name: Name of peer group. If no peer group is specified, the information about all peer groups will be displayed.
Description
Use the display bgp multicast group command to view the information about peer groups.
Example
# Display the information about the peer group named my_peer.
<3com> display bgp multicast group my_peer
5.1.4 display bgp multicast peer

Syntax
display bgp multicast peer [ ip-address | verbose ]
View
Any view
Parameter
ip-address: Displays information about the specified peer. verbose: Display complete information about peers.
Description
Use the display bgp multicast peer command to view information about MBGP peers.
Example
# Display information about MBGP peers.
[Router] display bgp multicast peer verbose
5.1.5 display bgp multicast network

Syntax
display bgp multicast network
View
Any view
Parameter
None
Description
Use the display bgp multicast network command to view the routing information that MBGP advertises.
Example
# Display the network segment routing information that MBGP advertises.
<3com> display bgp multicast network
5.1.6 display bgp multicast routing-table

Syntax
display bgp multicast routing-table ip-address [ mask ]
View
Any view
Parameter
ip-address: MBGP routing information whose IP address is specified in the BGP routing table.
Description
Use the display bgp multicast routing-table command to view the MBGP routing information whose IP address is specified in the BGP routing table.
Example
# Display the MBGP routing information with destination network segment 14.1.0.0.
<3com> display bgp multicast routing-table 14.1.0.0
5.1.7 display bgp multicast routing-table as-path-acl

Syntax
display bgp multicast routing-table as-path-acl as-path-acl
View
Any view
Parameter
as-path-acl: AS path list in the range 1 to 99.
Description
Use the display bgp multicast routing-table as-path-acl command to view in the BGP routing table the MBGP routes that match the specified AS path list.
Example
# Display in the BGP routing table the MBGP routes that match the specified AS path list.
[Router] display bgp multicast routing-table as-path-acl 1
5.1.8 display bgp multicast routing-table cidr

Syntax
display bgp multicast routing-table cidr
View
Any view
Parameter
None
Description
Use the display bgp multicast routing-table cidr command to view the routing information with non-natural network mask (i.e., classless inter-domain routing, CIDR).
Example
# Display CIDR routing information.
<3com> display bgp multicast routing-table cidr
5.1.9 display bgp multicast routing-table community

Syntax
display bgp multicast routing-table community [ community-number |
no-export-subconfed | no-advertise | no-export | whole-match ]

View
Any view
Parameter
community-number: Specifies community number. no-export-subconfed: Not advertises matched routes outside the local autonomous system. no-advertise: Not advertises matched routes to any peer. no-export: Does not advertise routes outside the local autonomous system, but advertises routes to other sub-autonomous systems. whole-match: Exact match.
Description
Use the display bgp multicast routing-table community command to view the routing information that belongs to the specified MBGP community.
Example
# Display the routing information that belongs to the specified MBGP community.
<3com> display bgp multicast routing-table community 600:1 <3com> display bgp multicast routing-table community no-export
5.1.10 display bgp multicast routing-table community-list

Syntax
display bgp multicast routing-table community-list list-number [ whole-match ]
View
Any view
Parameter
list-number: Number of community list. whole-match: Exact match.
Description
Use the display bgp multicast routing-table community-list command to view the routing information that is permitted by the MBGP community list.
Example
# Display the routing information that is permitted by the MBGP community list.
<3com> display bgp multicast routing-table community-list
5.1.11 display bgp multicast routing-table different-origin-as

Syntax
display bgp multicast routing-table different-origin-as
View
Any view
Parameter
None
Description
Use the display bgp multicast routing-table different-origin-as command to view AS routes with different origins.
Example
# Display AS routes with different origins.
<3com> display bgp multicast routing-table different-origin-as
5.1.12 display bgp multicast routing-table peer

Syntax
display bgp multicast routing-table peer peer-address { received | advertised }
View
Any view
Parameter
peer-address: Address of multicast neighbor, in dotted decimal notation format. received: Routing information received from the specified neighbor. advertised: Routing information sent to the specified neighbor.
Description
Use the display multicast routing-table peer command to view the route received from or sent to the specified multicast neighbor.
Example
# Display the routing information sent to the multicast neighbor 10.10.1.11.
<3com> display multicast routing-table peer 10.10.1.11 advertised
5.1.13 display bgp multicast routing-table regular-expression

Syntax
display bgp multicast routing-table [ regular-expression as-regular-expression ]
View
Any view
Parameter
as-regular-expression: AS regular expression matched.
Description
Use the display bgp multicast routing-table regular-expression command to view the routing information matching the specified AS regular expression.
Example
# Display the MBGP routing information matching the regular expression ^600$.
<3com> display bgp multicast routing-table regular-expression ^600$
5.1.14 display bgp multicast routing-table statistic

Syntax
display bgp multicast routing-table statistic
View
Any view
Parameter
None
Description
Use the display bgp multicast routing-table statistic command to view statistics of MBGP route information.
Example
# Display statistics of MBGP route information.
<Router> display bgp multicast routing-table statistic
5.1.15 import-route
Syntax
import-route protocol [ route-policy policy-name ] [ med metric ] undo import-route protocol
View
Parameter
protocol: Source routing protocols that can be imported, which can be direct, ospf, ospf-ase, ospf-nssa, rip, isis and static at present. metric: Metric value loaded by an imported route. policy-name: Routing policy used by an imported route.
Description
Use the import-route command to import routing information from other protocols to BGP. Use the undo import-route command to cancel the importing of routing information from other protocols. By default, BGP will not import routing information from other protocols.
Example
# Configure to import a static route.
[3com-bgp-af-mul] import-route static
5.1.16 ipv4-family multicast

Syntax
ipv4-family multicast
undo ipv4-family multicast
View
BGP view
Parameter
None
Description
Use the ipv4-family multicast command to enter the IPv4 multicast subaddress family view. Use the undo ipv4-family multicast command to remove all the configurations in the IPv4 multicast subaddress family view.
Example
# Enter the IPv4 multicast subaddress family view.
<3com> system-view [3com] bgp 100 [3com-bgp] ipv4-family multicast [3com-bgp-af-mul]
5.1.17 network
Syntax
network ip-address [ address-mask ] [ route-policy policy-name ] undo network ip-address [ address-mask ] [ route-policy policy-name ]
View
Parameter
ip-address: Network address that BGP advertises. address-mask: Mask of the network address. route-policy policy-name: Routing policy applied to the routes advertised.
Description
Use the network command to configure the network addresses to be sent by the local BGP.
Use the undo network command to remove the existing configuration. By default, the local BGP does not advertise any route.
Example
# Advertise routes to the network segment 10.0.0.0/16.
[3com-bgp-af-mul] network 10.0.0.1 255.255.0.0
5.1.18 peer advertise-community

Syntax
peer group-name advertise-community undo peer group-name advertise-community
View
Parameter
group-name: Name of the peer group.
Description
Use the peer advertise-community command to configure to advertise community attributes to a peer (group). Use the undo peer advertise-community command to remove the existing configuration. By default, no community attribute is advertised to any peer (group).
Example
# Advertise community attributes to the peer group named test.
[3com-bgp-af-mul] peer test advertise-community
5.1.19 peer allow-as-loop

Syntax
peer { group-name | peer-address } allow-as-loop [number] undo peer { group-name | peer-address } allow-as-loop
View
Parameter
group-name: Peer group name. peer-address: Peer IP address. number: Specifies the times that the local AS number is allowed to be present in the received route update messages. By default it is 3.
Description
Use the peer allow-as-loop command to allow the AS_PATH attribute in the received routes to include the local AS number. Use the undo peer allow-as-loop command to disallow the AS_PATH attribute in the received routes to include the local AS number. By default, the local AS number is unacceptable in the received route updates.
Example
# Specify to contain the local AS number in the AS_PATH attributes received.
[3com-bgp] ipv4-family multicast [3com-bgp-af-vpn] peer 1.1.1.1 allow-as-loop 1
5.1.20 peer as-path-acl

Syntax
peer { group-name | peer-address } as-path-acl number import undo peer { group-name | peer-address } as-path-acl number import peer group-name as-path-acl number export undo peer group-name as-path-acl number export
View
Parameter
group-name: Name of the peer group. peer-address: IP address of the peer. as-path-acl number: Number of AS path list matched, ranging from 1 to 199. import: Filter list applied to incoming routes. export: Filter list applied to outgoing routes.
Description
Use the peer as-path-acl import command to have MBGP filter the routes received from the specified peer or peer group based on the specified AS path list. Use the undo peer as-path-acl import command to disable MBGP to filter the received routes. Use the peer as-path-acl export command to have MBGP filter the routes advertised to the specified peer or peer group. Use the undo peer as-path-acl export command to disable MBGP filter the routes advertise to the specified peer or peer group. By default, MBGP does not filter the received or advertised routes.
Example
# Enable MBGP to filter routes advertised to the specified BGP peer or peer group based on the specified AS path list.
[3com-bgp] peer test as-number 100 [3com-bgp] ipv4-family multicast [3com-bgp-af-mul] peer test enable [3com-bgp-af-mul] peer test as-path-acl 3 export
5.1.21 peer enbale

Syntax
peer group-name enable undo peer group-name enable
View
Parameter
group-name: Name of the multicast peer group.
Description
Use the peer enable command to enable the multicast peer or peer group. Use the undo peer enable command to disable the multicast peer or peer group. By default, the multicast peer (or peer group) is disabled.
Only after the peer (peer group) is enabled, can it establish connection with the multicast peer.
Example
# Enable the multicast peer test.
[3com-bgp-af-mul] peer test enable [3com-bgp] peer test enable
5.1.22 peer filter-policy

Syntax
peer { group-name | peer-address } filter-policy acl-number import undo peer { group-name | peer-address } filter-policy acl-number import peer group-name filter-policy acl-number export undo peer group-name filter-policy acl-number export
View
Parameter
group-name: Name of the peer group. peer-address: IP address of the peer. acl-number: IP ACL number, ranging from 2000 to 3999. import: Specifies the redistribution policy. export: Specifies the advertising policy.
Description
Use the peer filter-policy import command to have MBGP filter the routes received from the specified peer or peer group based on the specified ACL. Use the undo peer filter-policy import command to disable MBGP to filter the received routes. Use the peer filter-policy export command to have MBGP filter the routes advertised to the specified peer or peer group based on the specified ACL. Use the undo peer filter-policy export command to disable MBGP to filter the advertised routes. By default, MBGP does no filter the received or advertised routes.
Related command: peer as-path-acl.
Example
# Set the filter policy list for a peer.
[3com-bgp] peer test as-number 100 [3com-bgp] ipv4-family multicast [3com-bgp-af-mul] peer test enable [3com-bgp-af-mul] peer test filter-policy 2003 import
5.1.23 peer ip-prefix

Syntax
peer { group-name | peer-address } ip-prefix prefixname import undo peer { group-name | peer-address } ip-prefix prefixname import peer group-name ip-prefix prefixname export undo peer group-name ip-prefix prefixname export
View
Parameter
group-name: Name of the peer group. peer-address: IP address of the peer. ip-prefix prefixname: Specifies ip-prefix name, in the range 1 to 19 characters. import: Applies the filter policy to the routes received by the specified peer or peer group. export: Applies the filter policy to the routes advertised by the specified peer or peer group.
Description
Use the peer ip-prefix import command to have MBGP filter the routes received from the specified peer or peer group based on the specified address prefix list. Use the undo peer ip-prefix import command to disable MBGP to filter the received routes. Use the peer ip-prefix export command to have MBGP filter the routes advertised to the specified peer or peer group based on the specified address prefix list. Use the undo peer ip-prefix export command to disable MBGP to filter the advertised routes.
By default, MBGP does no filter the received or advertised routes.
Example
# Enable MBGP to filter the routes received from the specified peer group based on the specified address prefix list.
[3com-bgp-af-mul] peer group1 ip-prefix list1 import
5.1.24 peer next-hop-local

Syntax
peer group-name next-hop-local undo peer group-name next-hop-local
View
Parameter
Description
Use the peer next-hop-local command to remove the processing of the next hop in routes which BGP will advertise to the peer (group) and set the local address as the next hop. Use the undo peer next-hop-local command to remove the existing setting.
Example
# Set the local address as the next hop when advertising routes to peer group named test.
[3com-bgp-af-mul] peer test next-hop-local
5.1.25 peer public-as-only

Syntax
peer group-name public-as-only undo peer group-name public-as-only
View
Parameter
Description
Use the peer public-as-only command to configure to only carry public AS number rather than private AS number when BGP sends update packets. Use the undo peer public-as-only command to configure to carry private AS number when BGP sends update packets. By default, the private AS number is carried when BGP sends update packets. Generally, BGP sends update packets with the AS number (which can be either the public AS number or private AS number). To enable some external routers to ignore the private AS number when sending update packets configure not to carry the private AS number when BGP sends update packets.
Example
# Configure not to carry private AS number when BGP sends update packets to peer group named test.
[3com-bgp-af-mul] peer test public-as-only
5.1.26 peer reflect-client

Syntax
peer group-name reflect-client undo peer group-name reflect-client
View
Parameter
Description
Use the peer reflect-client command to configure a peer (group) as a client of the route reflector. Use the undo peer reflect-client command to remove the existing configuration. By default, there is no route reflector in the autonomous system.
Example
# Configure peer group named test to be client of the route reflector.
[3com-bgp-af-mul] peer test reflect-client
5.1.27 peer route-policy

Syntax
peer { group-name | peer-address } route-policy policy-name import undo peer { group-name | peer-address } route-policy policy-name import peer group-name route-policy policy-name export undo peer group-name route-policy policy-name export
View
Parameter
group-name: Name of the peer group. peer-address: IP address of the peer. route-policy policy-name: Routing policy specified. import: Applies routing policy to the routes received from the peer (group). export: Applies routing policy to the routes advertised to the peer (group).
Description
Use the peer route-policy import command to have MBGP apply the specified routing policy to the routes received from the specified peer or peer group. Use the undo peer route-policy import command to remove the applied routing policy. Use the peer route-policy export command to have MBGP apply the specified routing policy to the routes advertised to the specified peer or peer group. Use the undo peer ip-prefix export command to disable MBGP to remove the applied routing policy. By default, no routing policy is applied to the received or advertised routes.
Example
# Apply policy 1 to the routes received from the peer group named test.
3com[bgp-af-mul] peer test route-policy policy1 import
Chapter 6 Multicast Static Route Configuration Commands

6.1 Multicast Static Route Configuration Commands
6.1.1 delete rpf-route-static all
Syntax
delete rpf-route-static all
View
System view
Parameter
None
Description
Use the delete rpf-route-static all command to delete all the static multicast routes. When using this command, the system will prompt you to acknowledge. All static multicast routes will be deleted after your acknowledgement. Related command: ip rpf-route-static and display multicast routing-table static.
Example
# Delete all the static multicast routes.
[3com] delete rpf-route-static all
6.1.2 display multicast routing-table static

Syntax
display multicast routing-table static [ source mask ]
View
Any view
Parameter
source: IP address of multicast source (unicast address). mask: IP address mask of multicast source.
Description
Use the display multicast routing-table static command to view the active multicast static routes. If no multicast source address is specified all active multicast static routes will be displayed. Related command: display multicast routing-table static config.
Example
# Display all active multicast static routes.
<3com> display multicast routing-table static 22.22.0.0/16 [inactive] RPF interface = serial0/0/0, RPF neighbor = 66.55.99.88 Matched routing protocol = = <none>, route-policy = <none>, preference = 1 Running config = ip mroute 22.22.0.0 16 66.55.99.88 preference 1
# Display the multicast static routes that exactly match the address 10.10.0.0/16.
<3com> display multicast routing-table static 10.10.0.0 255.255.0.0
6.1.3 display multicast routing-table static config

Syntax
display multicast routing-table static config [ source mask ]
View
Any view
Parameter
source: IP address of multicast source (unicast address). mask: IP address mask of multicast source.
Description
Use the display multicast routing-table static config command to view multicast static routes configured. If no multicast source address is specified all configured multicast static routes will be displayed.
Related command: display multicast routing-table static.
Example
# Display all the configured multicast static routes.
<3com> display multicast routing-table static config
# Display the multicast static routes that exactly match the address 1.0.0.0/8.
<3com> display multicast routing-table static config 1.0.0.0 255.0.0.0
6.1.4 ip rpf-longest-match
Syntax
ip rpf-longest-match undo ip rpf-longest-match
View
System view
Parameter
None
Description
Use the ip rpf-longest-match command to configure the longest-match rule to be the multicast RPF route selecting policy. Use the undo ip rpf-longest-match command to restore the default configuration. By default, routes are selected according to the preference-preferred rule.
Example
# Set the longest-match rule to be the multicast RPF route selecting policy.
[3com] ip rpf-longest-match
6.1.5 ip rpf-route-static
Syntax
ip rpf-route-static source { mask | mask-length } [ protocol ] [ route-policy policyname ] { rpf-nbr | interface-type interface-number } [ preference preference ] undo ip rpf-route-static source { mask | mask-length } [ protocol ] [ route-policy policyname ]
View
System view
Parameter
source: IP address of multicast source (unicast address). mask: IP address mask of multicast source. mask-length: IP address mask length of multicast source. protocol: Indicates that matched routes must appear in the specified unicast routing protocol. Protocol can be such unicast routing protocols as bgp, isis, ospf, rip and static. route-policy: Match rule for static multicast routes. rpf-nbr: IP address of RPF neighbor router. interface-type interface-number: Specifies the interface connected to the neighbor running RPF. preference: Route preference, ranging from 1 to 255. By default, the value is 1.
Description
Use the ip rpf-route-static command to configure multicast static routes. Use the undo ip rpf-route-static command to remove the multicast static routes from the multicast static routing table. Related command: display multicast routing-table static config, display multicast routing-table static.
Example
# Configure a multicast static route.
<3com> system-view [3com] ip rpf-route-static 1.0.0.0 255.0.0.0 rip route-policy map1 11.0.0.1
# Display the multicast static route configured.

[3com] display multicast routing-table static config
# Continue to configure the multicast static route.

[3com] ip rpf-route-static 1.0.0.0 255.0.0.0 rip route-policy map1 13.1.1.2

# Continue to configure the multicast static route.

[3com] ip rpf-route-static 1.0.0.0 255.0.0.0 null0

Command Reference Guide MPLS v2.30 Router Software
Table of Contents
Table of Contents
Chapter 1 MPLS Basic Configuration Commands..................................................................... 1-1 1.1 MPLS Basic Configuration Commands ............................................................................. 1-1 1.1.1 debugging mpls lspm .............................................................................................. 1-1 1.1.2 display mpls interface.............................................................................................. 1-2 1.1.3 display mpls lsp ....................................................................................................... 1-2 1.1.4 display mpls static-lsp ............................................................................................. 1-3 1.1.5 display mpls statistics.............................................................................................. 1-3 1.1.6 lsp-trigger ................................................................................................................ 1-5 1.1.7 mpls......................................................................................................................... 1-6 1.1.8 mpls lsr-id ................................................................................................................ 1-7 1.1.9 reset mpls statistics................................................................................................. 1-8 1.1.10 snmp-agent trap enable ldp .................................................................................. 1-9 1.1.11 snmp-agent trap enable lsp................................................................................... 1-9 1.1.12 static-lsp egress .................................................................................................. 1-10 1.1.13 static-lsp ingress.................................................................................................. 1-11 1.1.14 static-lsp transit ................................................................................................... 1-12 1.1.15 ttl expiration ......................................................................................................... 1-12 1.1.16 ttl propagate ........................................................................................................ 1-13 1.2 LDP Configuration Commands ........................................................................................ 1-14 1.2.1 debugging mpls ldp ............................................................................................... 1-14 1.2.2 display mpls ldp..................................................................................................... 1-15 1.2.3 display mpls ldp buffer-info ................................................................................... 1-16 1.2.4 display mpls ldp interface...................................................................................... 1-17 1.2.5 display mpls ldp lsp ............................................................................................... 1-17 1.2.6 display mpls ldp peer ............................................................................................ 1-18 1.2.7 display mpls ldp remote ........................................................................................ 1-18 1.2.8 display mpls ldp session ....................................................................................... 1-19 1.2.9 mpls ldp ................................................................................................................. 1-20 1.2.10 mpls ldp enable ................................................................................................... 1-20 1.2.11 mpls ldp hops-count ............................................................................................ 1-21 1.2.12 mpls ldp loop-detect ............................................................................................ 1-22 1.2.13 mpls ldp password .............................................................................................. 1-22 1.2.14 mpls ldp path-vectors .......................................................................................... 1-23 1.2.15 mpls ldp remote-peer .......................................................................................... 1-24 1.2.16 mpls ldp reset-session ........................................................................................ 1-24
3Com Corporation i
Table of Contents
1.2.17 mpls ldp timer ...................................................................................................... 1-25 1.2.18 mpls ldp transport-ip............................................................................................ 1-26 1.2.19 remote-ip ............................................................................................................. 1-27 Chapter 2 BGP/MPLS VPN Configuration Commands .............................................................. 2-1 2.1.1 apply access-vpn vpn-instance ............................................................................... 2-1 2.1.2 apply mpls-label ...................................................................................................... 2-1 2.1.3 description ............................................................................................................... 2-2 2.1.4 display bgp routing-table label ................................................................................ 2-3 2.1.5 display bgp vpnv4 ................................................................................................... 2-4 2.1.6 display ip routing-table vpn-instance....................................................................... 2-5 2.1.7 display ip vpn-instance............................................................................................ 2-6 2.1.8 display mpls l3vpn-lsp ............................................................................................. 2-7 2.1.9 display ospf sham-link............................................................................................. 2-7 2.1.10 domain-id............................................................................................................... 2-8 2.1.11 if-match mpls-label ................................................................................................ 2-9 2.1.12 import-route ospf ................................................................................................. 2-10 2.1.13 ip binding vpn-instance ....................................................................................... 2-11 2.1.14 ip route-static vpn-instance ................................................................................. 2-12 2.1.15 ip vpn-instance .................................................................................................... 2-13 2.1.16 ipv4-family ........................................................................................................... 2-13 2.1.17 ospf vpn-instance ................................................................................................ 2-15 2.1.18 peer default-route-advertise ................................................................................ 2-17 2.1.19 peer label-route-capability................................................................................... 2-18 2.1.20 peer next-hop-invariable ..................................................................................... 2-18 2.1.21 peer upe .............................................................................................................. 2-19 2.1.22 policy vpn-target.................................................................................................. 2-20 2.1.23 route-distinguisher............................................................................................... 2-20 2.1.24 route-tag .............................................................................................................. 2-21 2.1.25 routing-table limit ................................................................................................. 2-22 2.1.26 sham-link ............................................................................................................. 2-24 2.1.27 vpn-instance-capability simple ............................................................................ 2-25 2.1.28 vpn-target ............................................................................................................ 2-27 Chapter 3 MPLS L2VPN Configuration Commands................................................................... 3-1 3.1 CCC Configuration Commands ......................................................................................... 3-1 3.1.1 ccc interface transmit-lsp receive-lsp ...................................................................... 3-1 3.1.2 ccc interface out-interface ....................................................................................... 3-2 3.1.3 debugging mpls l2vpn ............................................................................................. 3-3 3.1.4 display ccc............................................................................................................... 3-3 3.1.5 static-lsp egress l2vpn............................................................................................. 3-4
3Com Corporation ii
Table of Contents
3.1.6 static-lsp ingress l2vpn............................................................................................ 3-5 3.1.7 static-lsp transit l2vpn.............................................................................................. 3-6 3.2 SVC MPLS L2VPN Configuration Commands .................................................................. 3-7 3.2.1 display mpls static-l2vc ........................................................................................... 3-7 3.2.2 mpls static-l2vc........................................................................................................ 3-7 3.3 Martini MPLS L2VPN Configuration Commands............................................................... 3-8 3.3.1 display mpls l2vc ..................................................................................................... 3-8 3.3.2 mpls l2vc ................................................................................................................. 3-9 3.4 Kompella MPLS L2VPN Configuration Commands........................................................... 3-9 3.4.1 ce............................................................................................................................. 3-9 3.4.2 connection ............................................................................................................. 3-10 3.4.3 display bgp l2vpn .................................................................................................. 3-11 3.4.4 display mpls l2vpn forwarding-info ........................................................................ 3-12 3.4.5 l2vpn-family ........................................................................................................... 3-12 3.4.6 mpls l2vpn ............................................................................................................. 3-13 3.4.7 mpls l2vpn encapsulation...................................................................................... 3-14 3.4.8 mtu ........................................................................................................................ 3-15 3.4.9 peer enable ........................................................................................................... 3-15
Chapter 1 MPLS Basic Configuration Commands

1.1 MPLS Basic Configuration Commands
1.1.1 debugging mpls lspm
Syntax
debugging mpls lspm { agent | all | event | ftn | interface | packet | policy | process | vpn } undo debugging mpls lspm { agent | all | event | ftn | interface | packet | policy | process | vpn }
View
User view
Parameter
agent: Enables all MPLS Agent debugging. all: Enables all MPLS-related debugging. event: Enables debugging of various MPLS events. ftn: Enables MPLS ftn debugging. interface: Enables the MPLS debugging on the message sending/receiving interface. packet: Enables MPLS packet debugging. policy: Enables MPLS policy debugging. process: Enables debugging of MPLS internal process. vpn: Enables all MPLS VPN debugging.
Description
Use the debugging mpls lspm command to enable various LSP debugging. Use the undo debugging mpls lspm command to disable the corresponding debugging. By default, all debugging is disabled. This command is used to debug MPLS LSPM. As debugging will affect the performance of the router you are recommended to use the command with caution.
Example
# Enable all MPLS LSP VPN debugging.
<3Com> debugging mpls lspm vpn
1.1.2 display mpls interface

Syntax
display mpls interface
View
Any view
Parameter
None
Description
Use the display mpls interface command to view all MPLS-enabled interfaces. Related command: display mpls lsp, display mpls statistics, display static-lsp.
Example
# Display all MPLS-enabled interfaces.
[3Com] display mpls interface
1.1.3 display mpls lsp

Syntax
display mpls lsp [ verbose ] [ include text ]
View
Any view
Parameter
verbose: Displays detailed information. include text: Displays the information with the specified string included.
Description
Use the display mpls lsp command to view LSP information.
By default, the display mpls lsp command displays all LSP information. Related command: display mpls interface, display mpls statistics, display static-lsp.
Example
# Display all LSPs whose incoming interfaces are Serial 3/0/0.
[3Com] display mpls lsp include incoming-interface serial3/0/0
1.1.4 display mpls static-lsp

Syntax
display mpls static-lsp [ verbose ] [ include text ]
View
Any view
Parameter
verbose: Displays detailed information. include text: Displays the information with the specified string included.
Description
Use the display mpls static-lsp command to view the information of all or one static LSP(s). Related command: display mpls interface, display mpls lsp, and display mpls statistics.
Example
# Display information of the static LSP named citiya-cityb.
[3Com] display mpls static-lsp include citya-cityb
1.1.5 display mpls statistics

Syntax
display mpls statistics { interface { all | interface-type interface-number } } | { lsp [ lsp-Index | all | name lsp-name ] } }
View
Any view
Parameter
interface-type: Type of network interface. Interface-number: Number of network interface. lsp-Index: LSP index all: All LSPs name lsp-name: Name of LSP
Description
Use the display mpls statistics command to view statistics of all or one LSP(s) and LSP statistics on all or one interface(s). Specifically, the displayed information includes the numbers of octets, packets, errors and discarded packets processed on each LSP ingress and egress, as well as the numbers of octets, packets, errors and discarded packets received and transmitted on each MPLS-enabled interface. Related command: display mpls interface, display mpls lsp.
Example
# Display MPLS statistics.
[3Com] display mpls statistics lsp all Building the information... LSP Index/LSP Name : 1/lsp1
InSegment Octets of LSP is: 0 InSegment Packets of LSP is: 0 InSegment Errors of LSP is: 0 InSegment Discard Packets of LSP is: 0 LSP Index/LSP Name : 1/lsp1
OutSegment Octets of LSP is: 0 OutSegment Packets of LSP is: 0 OutSegment Errors of LSP is: 0 OutSegment Discard Packets of LSP is: 0 LSP Index/LSP Name : 17416/dynamic-lsp
InSegment Octets of LSP is: 0 InSegment Packets of LSP is: 0 InSegment Errors of LSP is: 0 InSegment Discard Packets of LSP is: 0 LSP Index/LSP Name : 17416/dynamic-lsp
OutSegment Octets of LSP is: 0

OutSegment Packets of LSP is: 0 OutSegment Errors of LSP is: 0
OutSegment Discard Packets of LSP is: 0
# Display MPLS statistics on all interfaces.

[3Com] display mpls statistics interface all Showing statistics about all MPLS interface: The statistics of interface : Serial6/0/0 The statistics of interface in : In Octets of Mpls interface is: 0 In Packets of Mpls interface is: 0 In Errors of Mpls interface is: 0 In Discard Packets of Mpls interface is: 0 The statistics of interface out : Out Octets of Mpls interface is: 0 Out Packets of Mpls interface is: 0 Out Errors of Mpls interface is: 0 Out Discard Packets of Mpls interface is: 0 The statistics of interface : Serial6/0/1 The statistics of interface in : In Octets of Mpls interface is: 0 In Packets of Mpls interface is: 0 In Errors of Mpls interface is: 0 In Discard Packets of Mpls interface is: 0 The statistics of interface out : Out Octets of Mpls interface is: 0 Out Packets of Mpls interface is: 0 Out Errors of Mpls interface is: 0 Out Discard Packets of Mpls interface is: 0
1.1.6 lsp-trigger
Syntax
lsp-trigger { all | ip-prefix ip-prefix } undo lsp-trigger { all | ip-prefix [ ip-prefix ] }
View
MPLS view
Parameter
all: Triggers LSPs at any route. ip-prefix: Triggers LSPs only at the routes matching the specified IP prefix list. ip-prefix: IP prefix list, ranging from 1 to 19.
Description
Use the lsp-trigger command to configure topology-triggered LSP creation policy. Use the undo lsp-trigger command to remove the filtering conditions specified by parameters and disable LSP trigger creation at any route. By default, all kinds of routing protocols are filtered out.
Note: If no topology-triggered policy is configured, LSPs can be triggered at all host routes with 32-bit masks. If you import an IP-prefix rule without contents, LSPs can be triggered at all routes according to the IP-prefix usage convention in 3Com Router Software.
Related command: ip ip-prefix.
Example
# Triggers LSPs at all routes.
[3Com-mpls] lsp-trigger all
1.1.7 mpls
Syntax
mpls undo mpls
View
System view, routing protocol view, interface view, virtual interface view
Parameter
None
Description
Use the mpls command in system view to enable MPLS globally and enter MPLS view. Use the undo mpls command in system view to disable MPLS globally. Use the mpls command in interface view to enable MPLS on the interface. Use the undo mpls command in interface view to disable MPLS on the interface. By default, MPLS is not enabled. Before you can enter MPLS view, you must configure the mpls lsr-id command first. In addition, you can configure other MPLS commands only after you enter MPLS view. Related command: mpls enable | disable.
Example
# Enter MPLS view in system view.
[3Com] mpls [3Com-mpls]
# Execute the mpls command in interface view.

[3Com-Ethernet6/0/0] mpls % Info: MPLS in the interface is starting, please wait...OK
1.1.8 mpls lsr-id

Syntax
mpls lsr-id ip-address undo mpls lsr-id
View
System view
Parameter
ip-address: LSR ID, with the format like IP address, used to identify an LSR.
Description
Use the mpls lsr-id command to configure an LSR ID. Use the undo mpls lsr-id command to delete an LSR ID. By default, no LSR has an ID.
LSR-ID address must be the interface address of the router, and the address must be reachable in the entire network. In general, it is recommended to use the address of the loopback interface. As a premise for configuring other MPLS commands, using this command you can configure an LSR ID. Related command: display mpls interface.
Example
# Set the ID of the LSR to 202.17.41.246.
[3Com] mpls lsr-id 202.17.41.246 % Mpls lsr-id changed.
1.1.9 reset mpls statistics

Syntax
reset mpls statistics { interface { all | interface-type interface-num } | lsp { lsp-index | all | name lsp-name } }
View
User view
Parameter
all: All interfaces or all LSPs interface-type: Type of a network interface. Interface-num: Number of a network interface. lsp-Index: LSP index name lsp-name: Name of LSP.
Description
Use the reset mpls statistics command to clear MPLS statistics. You can use this command to clear the statistics on all or one interface(s); or the statistics on all or one LSP(s). Related command: display mpls statistics.
Example
# Clear statistics on the LSP named citya-cityb.
<3Com> reset mpls statistics lsp name citya-cityb
1.1.10 snmp-agent trap enable ldp

Syntax
snmp-agent trap enable ldp undo snmp-agent trap enable ldp
View
System view
Parameter
None
Description
Use the snmp-agent trap enable ldp command to enable Trap function in MPLS LDP creation. Use the undo snmp-agent trap enable ldp command to disable Trap function in MPLS LDP creation. By default, TRAP function is not enabled during MPLS LDP creation.
Example
# Enable TRAP function during MPLS LDP creation.
[3Com] snmp-agent trap enable ldp
1.1.11 snmp-agent trap enable lsp

Syntax
snmp-agent trap enable lsp undo snmp-agent trap enable lsp
View
System view
Parameter
None
Description
Use the snmp-agent trap enable lsp command to enable Trap function in MPLS LSP creation. Use the undo snmp-agent trap enable lsp command to disable Trap function in MPLS LSP creation. By default, TRAP function is disabled during MPLS LSP creation.
Example
# Enable TRAP function during MPLS LSP creation.
[3Com] snmp-agent trap enable lsp
1.1.12 static-lsp egress

Syntax
static-lsp egress lsp-name incoming-interface interface-type interface-num in-label in-label-value undo static-lsp egress lsp-name
View
MPLS view
Parameter
lsp-name: Name of LSP. interface-type: Type of network interface. Interface-num: Number of network interface. in-label-value: Value of inbound label, ranging from 16 to 1023.
Description
Use the static-lsp egress command to configure a static LSP for an egress LSR. Use the undo static-lsp egress command to delete an LSP for an egress LSR. Related command: static-lsp ingress, debugging mpls.
Example
# Configure a static LSP named citya-cityb on the egress LSR.
[3Com-mpls] in-label 233 static-lsp egress citya-cityb incoming-interface serial8/0/0
1.1.13 static-lsp ingress

Syntax
static-lsp ingress lsp-name destination dest-addr { addr-mask | mask-length } { nexthop next-hop-addr out-label-value undo static-lsp ingress lsp-name | outgoing-interface interface-type interface-num } out-label
View
MPLS view
Parameter
lsp-name: Name of LSP. dest-addr: Destination IP address. addr-mask: Destination IP address mask. mask-length: Mask length of destination IP address next-hop-addr: Next-hop address. interface-type: Type of network interface. Interface-num: Number of network interface. out-label-value: Value of outbound label, ranging from 16 to 1023.
Description
Use the static-lsp ingress command to configure a static LSP for the ingress LSR. Use the undo static-lsp ingress command to delete an LSP for the ingress LSR. In addition to configuring a static LSP for the ingress LSR, you can set precedence value and metric value for the LSP using this command. Related command: static-lsp egress, static-lsp transit, debugging mpls.
Example
# Configure a static LSP for the ingress LSR heading for the destination address 202.25.38.1.
[3Com-mpls] static-lsp ingress citya-cityb destination 202.25.38.1 24 nexthop 202.55.25.33 out-label 237
1.1.14 static-lsp transit

Syntax
static-lsp transit lsp-name incoming-interface interface-type interface-num in-label in-label-value { nexthop next-hop-addr | outgoing-interface interface-type interface-num } out-label out-label-value undo static-lsp transit lsp-name
View
MPLS view
Parameter
lsp-name: Name of LSP. interface-type: Type of an incoming or outgoing interface. Interface-num: Number of an incoming or outgoing interface. next-hop-addr: Next-hop address. in-label-value: Value of inbound label, ranging from 16 to 1023. out-label-value: Value of outbound label, ranging from 16 to 1023.
Description
Use the static-lsp transit command to configure a static LSP for a transit LSR. Use the undo static-lsp transit command to delete an LSP for a transit LSR. Related command: static-lsp egress, static-lsp ingress.
Example
# Configure a static LSP for the serial interface Serial3/0/0 on a transit LSR, with an inbound label of 123 and an outbound label of 253.
[3Com-mpls] static-lsp transit citya-cityb incoming-interface serial3/0/0
in-label 123 nexthop 202.34.114.7 out-label 253
1.1.15 ttl expiration

Syntax
ttl expiration pop undo ttl expiration pop
View
MPLS view
Parameter
None
Description
Use the ttl expiration command to configure the router to forward ICMP responses by local IP routing when the MPLS TTL expires. Use the undo ttl expiration command to disable the function. By default, for a one-tier MPLS packet with TTL expired, its ICMP response is forwarded by local IP routing. You are recommended to configure the undo ttl expiration command on the ASBRs or the SPEs on a HoVPN network. This ensures that you can get the correct forwarding path of the public-network routers when tracerting to another device on the VPN. Use the undo mpls command to clear all the configurations related to the ttl expiration command. Related command: ttl propagate.
Example
# Send back an ICMP packet along the LSP if the TTL of an MPLS packet expires.
[3Com-mpls] undo ttl expiration pop
1.1.16 ttl propagate

Syntax
ttl propagate { public | vpn } undo ttl propagate { public | vpn }
View
MPLS view
Parameter
public: Configures to apply TTL duplication to the packets on the public network. vpn: Configures to apply TTL duplication to the VPN packets.
Description
Use the ttl propagate command to enable IP TTL duplication of MPLS. Use the undo ttl propagate command to disable IP TTL duplication of MPLS.
Note: The ttl propagate command is only available with the NE16E, NE08E, and NE05.
Caution: The configuration of TTL duplication must be the same on all the PEs. Otherwise, the results of traceroutes will not reflect real network conditions.
Related command: tracert and ttl expiration.
Example
# Apply IP TTL duplication of MPLS to VPN packets.
[3Com-mpls] ttl propagate vpn
1.2 LDP Configuration Commands

1.2.1 debugging mpls ldp
Syntax
debugging mpls ldp { { all | main | advertisement | session | pdu | notification } [ interface interface-type interface-number ] | remote } undo debugging mpls ldp { all | main | advertisement | session | pdu | notification } [ interface interface-type interface-number ] | remote }
View
User view
Parameter
all: Displays all debugging information related to LDP. main: Displays the debugging information of LDP main tasks.
advertisement: Displays the debugging information during processing of LDP advertisement. session: Displays debugging information during processing of LDP session. pdu: Displays the debugging information during processing of PDU. notification: Displays the debugging information during processing of notification. interface interface-type interface-number: Displays all the debugging information of a specified interface. remote: Displays debugging information of all remote peers.
Description
Use the debugging ldp command to enable debugging of LDP messages. Use the undo debugging ldp command to disable debugging of LDP messages. You can use this command to view LDP debugging information, but take caution when doing so.
Example
# Enable LDP debugging.
<3Com> debugging mpls ldp all
1.2.2 display mpls ldp

Syntax
display mpls ldp
View
Any view
Parameter
None
Description
Use the display mpls ldp command to view LDP and LSR information. Related command: mpls ldp, mpls ldp hops-count, mpls ldp loop-detection, mpls ldp path-vectors.
Example
# Display LDP and LSR information.

[3Com] display mpls ldp
1.2.3 display mpls ldp buffer-info

Syntax
display mpls ldp buffer-info
View
Any view
Parameter
None
Description
Use the display mpls ldp buffer-info command to view the buffer information of LDP.
Example
# Display LDP buffer information.
[3Com] display mpls ldp buffer-info ----------------------------------------------------------------Buffer-Name Buffer-ID Buffer-Size Total-Count Free-Count
----------------------------------------------------------------ENTITY LOCAL-IF PEER-IF PDU ADJACENCY PEER-INF SESSION US-BLK DS-BLK FEC US-LIST TRIG-BLK LABEL-RANGE CR-TUNNEL ER-HOP IF-MSG 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 292 36 40 204 56 116 176 264 240 40 16 56 20 124 40 24 199 200 201 249 201 201 201 1052 1052 1042 1052 2076 198 128 4096 9999 195 196 195 249 198 198 198 1028 1042 1032 1028 2071 198 128 4096 9999
-----------------------------------------------------------------

Buffer no error.
1.2.4 display mpls ldp interface

Syntax
display mpls ldp interface
View
Any view
Parameter
None
Description
Use the display mpls ldp interface command to view the information of an LDP-enabled interface. Related command: mpls ldp enable, display mpls ldp session.
Example
# Display the information of an LDP-enabled interface.
[3Com-Ethernet3/0/0] display mpls ldp interface
1.2.5 display mpls ldp lsp

Syntax
display mpls ldp lsp
View
Any view
Parameter
None
Description
Use the display mpls ldp lsp command to view relevant LSP information created via LDP. Related command: display mpls lsp.
Example
# Display LSP.
[3Com-Ethernet3/0/0] display mpls ldp lsp
1.2.6 display mpls ldp peer

Syntax
display mpls ldp peer
View
Any view
Parameter
None
Description
Use the display mpls ldp peer command to view peer information.
Example
# Display peer information.
[3Com] display mpls ldp peer
1.2.7 display mpls ldp remote

Syntax
display mpls ldp remote
View
Any view
Parameter
None
Description
Use the display mpls ldp remote command to view the configured remote peer information. Related command: mpls ldp remote and remote-peer.
Example
# Display the configured remote-peer information.
[3Com] display mpls ldp remote
1.2.8 display mpls ldp session

Syntax
display mpls ldp session
View
Any view
Parameter
None
Description
Use the display mpls ldp session command to display the session between peer entities. Related command: mpls ldp enable.
Example
# Display the session between peer entities.
[3Com] display mpls ldp session Local LDP ID: 1.1.1.9:5; Peer LDP ID: 4.4.4.9:0
TCP Connection: 1.1.1.9 <- 4.4.4.9 Session State: Operational Session Role: Passive Session existed time: Basic Hello Packets Sent/Received: 85/67 KeepAlive Packets Sent/Received: 1/1 Negotiated Keepalive hold time: 60 Peer PV Limit: 0
LDP Basic Discovery Source((A) means active): Ethernet1/0/1.3(A) Ethernet1/0/1.1 Ethernet1/0/1.2
(A) in Ethernet1/0/1.3(A) displayed above indicates that the interface is the main interface.
1.2.9 mpls ldp

Syntax
mpls ldp undo mpls ldp
View
System view
Parameter
None
Description
Use the mpls ldp command to enable LDP. Use the undo mpls ldp command to disable LDP. By default, LDP is disabled. Before enabling LDP you must enable MPLS and configure LSR ID first. Related command: mpls lsr-id.
Example
# Enable LDP.
[3Com] mpls ldp
1.2.10 mpls ldp enable

Syntax
mpls ldp enable mpls ldp disable
View
Interface view
Parameter
None
Description
Use the mpls ldp enable command to enable LDP on the interface.
Use the undo mpls ldp enable command to disable LDP on an interface. By default, LDP is disabled on the interface. To enable an interface, you must enable LDP first. After LDP is enabled on an interface, peer discovery and session creation starts.
Example
# Enable LDP on the interface.
[3Com-Ethernet3/0/0] mpls ldp enable
1.2.11 mpls ldp hops-count

Syntax
mpls ldp hops-count hop-number undo mpls ldp hops-count
View
System view
Parameter
hop-number: Maximum hops of loop detection, ranging from 1 to 32.
Description
Use the mpls ldp hops-count command to set the maximum hops of loop detection. Use the undo mpls ldp hops-count command to restore the default value. By default, the maximum hops of loop detection are 32. This command should be configured before LDP is enabled on any interface. Its value, which depends on the actual networking situation, decides the loop detection speed during LSP creation Related command: mpls ldp loop-detection and mpls ldp path-vector.
Example
# Set the maximum hops of loop detection to 22.
[3Com] mpls ldp hops-count 22
# Set the maximum hops of loop detection to its default value, that is, 32.
[3Com] undo mpls ldp hops-count
1.2.12 mpls ldp loop-detect

Syntax
mpls ldp loop-detect undo mpls ldp loop-detect
View
System view
Parameter
None
Description
Use the mpls ldp loop-detect command to enable loop detection. Use the undo mpls ldp loop-detect command to disable loop detection. By default, loop detection is disabled in the system. This command should be configured before LDP is enabled on any interface. Related command: mpls ldp hops-count and mpls ldp path-vectors.
Example
# Enable loop detection.
[3Com] mpls ldp loop-detect
# Disable loop detection.

[3Com] undo mpls ldp loop-detect
1.2.13 mpls ldp password

Syntax
mpls ldp password { cipher | simple } password undo mpls ldp password
View
Interface view, remote-peer view
Parameter
simple: Transmits password in plain text.
cipher: Transmits password in encrypted text (MD5). password: User password.
Description
Use the mpls ldp password command to configure LDP authentication mode. Use the undo mpls ldp password command to delete the configuration.
Example
# Configure the LDP authentication mode to be in plain text, with a password of 123.
[3Com-Ethernet0/0/0.1] mpls ldp password simple 123
1.2.14 mpls ldp path-vectors

Syntax
mpls ldp path-vectors pv-number undo mpls ldp path-vectors
View
System view
Parameter
pv-number: Maximum value of path vector, ranging from 1 to 32.
Description
Use the mpls ldp path-vectors command to set the maximum value of path vector. Use the undo mpls ldp path-vectors command to restore the default maximum value of path vector. By default, pv-number is 32. This command should be configured before LDP is enabled on any interface. Its value, which depends on the actual networking situation, decides the loop detection speed in LSP creation. Related command: mpls ldp loop-detection and mps ldp hops-count.
Example
# Set the maximum value of path vector to 23
[3Com] mpls ldp path-vectors 23
# Restore the default maximum value of path vector.

[3Com] undo mpls ldp path-vectors
1.2.15 mpls ldp remote-peer

Syntax
mpls ldp remote-peer Index undo mpls ldp remote-peer Index
View
System view or remote-peer view
Parameter
Index: Index of remote peer entity, used to identify an entity. It ranges from 0 to 99.
Description
Use the mpls ldp remote-peer command to create a remote-peer entity and enter remote-peer view. Use the undo mpls ldp remote-peer command to delete a remote-peer entity. You can use this command to create a remote-peer and accordingly create a remote session. Related command: remote-peer.
Example
# Create a remote-peer.
[3Com] mpls ldp remote-peer 22 [3Com-mpls-remote22]
# Delete a remote-peer.
[3Com-mpls-remote22] undo mpls ldp remote-peer 22 [3Com]
1.2.16 mpls ldp reset-session

Syntax
mpls ldp reset-session peer-address
View
Interface view
Parameter
peer-address: Corresponding LDP Peer address (in IP address format).
Description
Use the mpls ldp reset-session command to reset a specified session on an interface. After LDP is configured on an interface and LDP session is created, this command can be used to reset a specific session on the interface. You only need to specify the address of the peer corresponding to the session to be reset. Related command: mpls ldp and mpls ldp enable.
Example
# Reset the session at the interface Ethernet0/0/0.
[3Com-Ethernet0/0/0] mpls ldp reset-session 10.1.1.1
1.2.17 mpls ldp timer

Syntax
mpls ldp timer { session-hold session-holdtime | hello hello-holdtime } undo mpls ldp timer { session-hold | hello }
View
Interface view, remote-peer view
Parameter
hello hello-holdtime: Specifies timeout time of hello hold timer, in the range of 6 to 65535 seconds. It defaults to 15 seconds. session-hold session-holdtime: Specifies timeout time of session hold timer, in the range of 1 to 65535 seconds. It defaults to 60 seconds.
Description
Use the mpls ldp timer command to set the duration of a Hello hold timer or session hold timer. Use the undo mpls ldp timer command to restore the default value.
Timeout of Hello hold timer means that the adjacency relation with the peer is down, while timeout of session hold timer means that the session relation with the peer is down. In general, the transmission interval of hello/keepalive packets is one-third of the timeout time of hello/session hold timer. Normally, the default value can be directly adopted. In special cases, you need to make modification according to requirements. Please note that the modification of hello parameter may cause reestablishment of the original session as well as deletion and reestablishment of the LSP established based on this session Related command: mpls ldp, mpls ldp enable.
Example
# Modify the duration of a Hello hold timer.
[3Com-Ethernet3/0/0] mpls ldp timer hello 30
1.2.18 mpls ldp transport-ip

Syntax
mpls ldp transport-ip { interface | ip-address } undo mpls ldp transport-ip
View
Interface view
Parameter
interface: Sets the IP address of the current interface as the transport address. ip-address: Sets the IP address as the transport address.
Description
Use the mpls ldp transport-ip command to configure a LDP session transport address. Use the undo mpls ldp transport-ip command to restore the default LDP transport address. By default, the transport address is the LSR ID. Normally, LSR ID is an address of a certain loopback interface, and only when its peer has a route to this loopback interface address can the session be established successfully. For a remote-peer, the configuration of transport address is not supported and its transport address is fixed on the LSR ID.
In the case of local peer, the address of the local interface or the Router ID of LSR can be adopted as its transport address. When MPLS LDP is enabled on multiple directly connected links, these links must be configured with the same transport address. It is recommended that you take the default LSR-ID as the transport address; otherwise, the LDP session may not be well established.
Example
# Set the address of the current interface as the transport address.
[3Com-Ethernet3/0/0] mpls ldp transport-ip interface
# Set the address of another interface as the transport address.

[3Com-Ethernet3/0/0] mpls ldp transport-ip 10.1.11.2
1.2.19 remote-ip
Syntax
remote-ip ip-address
View
Remote-peer view
Parameter
ip-address: IP address of a remote peer.
Description
Use the remote-ip command to configure a remote IP address. The address should be the LSR ID of the remote LSR. As remote peers adopt LSR ID as their transport addresses, the last two remote peers use their LSR ID as their transport addresses for creating TCP connection. The remote-peer command is mainly used for extension discovery mode to establish session with peers that are not directly connected with the links. Related command: mpls ldp remote-peer.
Example
# Configure the address of remote-peer.
[3Com] mpls ldp remote-peer 12 [3Com-remote-peer12] remote-ip 192.168.1.
Chapter 2 BGP/MPLS VPN Configuration Commands

2.1.1 apply access-vpn vpn-instance
Syntax
apply access-vpn vpn-instance [ vpn-name1 vpn-name2 ] undo apply access-vpn vpn-instance [ vpn-name1 vpn-name2 ]
View
Route-policy view
Parameter
vpn-name: Name of the configured VPN instance. At most, 6 VPN names can be configured.
Description
Use the apply access-vpn vpn-instance command to specify to search private network forwarding routes in vpn-name1, vpn-name2, vpn-name3, vpn-name4, vpn-name5, vpn-name6 (if they all exist) and forward packets after policy routing is enabled to satisfy route-policy. Use the undo apply access-vpn vpn-instance command to remove this function.
Example
# Specify the configured VPN instance.
[3Com-route-policy] apply access-vpn vpn-instance vpn1
2.1.2 apply mpls-label

Syntax
apply mpls-label undo apply mpls-label
View
Route-policy view
Parameter
None
Description
Use the apply mpls-label command to assign MPLS labels for public network routes that match route-policy filter conditions. Use the undo apply mpls-label command to remove the configuration. By default, no label is assigned for public network routes. Related command: if-match mpls-label.
Example
# Define an apply clause to assign labels for public network routes that match route-policy filter conditions.
[3Com-route-policy] apply mpls-label
2.1.3 description
Syntax
description vpn-instance-description undo description
View
Vpn-instance view
Parameter
vpn-instance-description: Specifies the description information of VPN instance.
Description
Use the description command to configure description information for a specified VPN instance. Use the undo description command to remove the description of a VPN instance.
Example
# Configure description information of VPN.
[3Com-vpn-vpna] description 3Com
2.1.4 display bgp routing-table label

Syntax
display bgp routing-table label
View
All views
Parameter
None
Description
Use the display bgp routing-table label command to view routing information and label information in the BGP routing table. For common IPv4 routes without labels, Null is displayed. When you view the BGP routing information by using the display bgp routing-table address [ mask ] command, you can see the label information if the routes have labels.
Example
# Display BGP routing information.
<3Com> display bgp routing-table label Flags: # - valid D - damped ^ - active H - history I - internal S - aggregate suppressed In/out Dest/Mask Next-Hop Label
-------------------------------------------------------------#^ 9.0.0.1/32 0.0.0.0 1024/-
# Display specific BGP routing information.

<3Com> display bgp routing-table 9.0.0.1 BGP routing table entry information of 9.0.0.1/32 Age From State Nexthop Origin As-path Med : 00:00:32 : local : valid, sourced, active, : 0.0.0.0 : INC : (null) : 1563 1024/-
In/Out label :
2.1.5 display bgp vpnv4

Syntax
display bgp vpnv4 { all | route-distinguisher rd-value | vpn-instance
vpn-instance-name } { group [ group-name ] | network | peer [ ip-address1 | verbose ] | routing-table [ ip-address2 | statistic ] [ label ] [ as-path-acl as-path-acl | cidr | community [ community-number | no-advertise | no-export | no-export-subconfed | whole-match ] | community-list community-list [ whole-match ] | different-origin-as | peer ip-address1 [ advertised | received] | regular-expression text ] }
View
Any view
Parameter
all: Displays all VPNv4 information, including group, network, peer, and routing-table. route-distinguisher rd-value: Displays the network layer reachable information (NLRI) that matches the route distinguisher (RD). vpn-instance vpn-instance-name: Displays NLRI associated with the specified vpn-instance. group: Displays the information about peer groups. group-name: Peer group name of the peer. network: Displays the networks advertised by BGP. peer: Displays information about the peer. ip-address1: IP address of the peer. verbose: Complete information on the peer. routing-table: Displays BGP routes. ip-address2: Displays the route to the specified destination address. statistic: Displays route statistics. label: Displays the route information of the specified label. as-path-acl as-path-acl: Displays the routing information of the specified AS path. cidr: Displays the route information of the classless domains. community: Displays the route information of the specified community. community-number: Specifies a community by its number. no-advertise: Displays routes that are not advertised to any peer.
no-export: Displays routes advertised to the sub-ASs but not outside the AS. no-export-subconfed: Displays routes that are not advertised outside the local AS. whole-match: Displays routes that are exact matches of the specified community. different-origin-as: Displays routes that are not originated from the local AS. advertised: Displays all the routes advertised to the peer. received: Displays all the routes received from the peer. regular-expression text: Displays the routes that match the regular expression.
Description
Use the display bgp vpnv4 command to view VPNv4 information in BGP database.
Example
Display the information about all BGP VPNv4 routing-table.
[3Com] display bgp vpnv4 all routing-table Flags: # - valid D - damped In/out As Next-hop Med Local-pref label path ^ - active H - history I - internal S - aggregate suppressed
Dest/mask
Route Distinguisher:1.1.1.1:1 (VPN instance:v1) #^ 1.0.0.0 0.0.0.0 1024/-
Routes total: 49194533
2.1.6 display ip routing-table vpn-instance

Syntax
display ip routing-table vpn-instance vpn-instance-name [ statistics | [ ip-address ] [ verbose ] ]
View
Any view
Parameter
vpn-instance-name: Name assigned to vpn-instance. ip-address: Displays information of the specified address. verbose: Displays detailed information. statistics: Displays the digests of all the routes.
Description
Use the display ip routing-table vpn-instance command to view the specified information in the IP routing table of vpn-instance.
Example
# Display the IP routing table associated with the vpn-instance.
[3Com] display ip routing-table vpn-instance vpn-instance1 Routing Table: vpn-instance1 RD: 1233:11 Nexthop Interface
Destination/Mask Proto Pre Metric 192.1.1.0/24 192.1.1.1/32 Direct Direct 0 0 0 0 0 0
192.1.1.1 GigabitEthernet1/0/0 127.0.0.1 127.0.0.1 InLoopBack0 InLoopBack0
192.1.1.255/32
Direct
2.1.7 display ip vpn-instance

Syntax
display ip vpn-instance [ vpn-instance-name | verbose ]
View
Any view
Parameter
vpn-instance-name: Name assigned to vpn-instance. verbose: Displays detailed information.
Description
Use the display ip vpn-instance command to view the information related to vpn-instance, such as RD, description, and interfaces of the VPN instance.
Example
# Display the information about vpn-instance vpn1.
[3Com] display ip vpn-instance vpn1 VPN-Instance : vpn1 No description Route-Distinguisher : Interfaces : Ethernet0/0/0.101 100:6
2.1.8 display mpls l3vpn-lsp

Syntax
display mpls l3vpn-lsp [ vpn-instance vpn-instance-name ] [ transit | egress | ingress ] [include text | verbose ]
View
Any view
Parameter
transit: LSP of ASBR VPN. egress: LSP of egress VPN. ingress: LSP of ingress VPN. vpn-instance: Name of VPN routing/forwarding instance include text: String includes the specified FEC. verbose: Displays verbose information.
Description
Use the display mpls l3vpn-lsp command to view the information of a vpn-instance of MPLS L3VPN LSPs.
Example
# Display the information of vpn-instance of MPLS L3VPN LSPs.
<3Com> display mpls l3vpn-lsp transit --------------------------------------------------------------------LSP Information: L3vpn Transit Lsp --------------------------------------------------------------------
TOTAL:
0 Record(s) Found.
# Display the information of MPLS L3VPN LSPs.

[3Com] display mpls l3vpn-lsp include 3Com
2.1.9 display ospf sham-link

Syntax
display ospf sham-link
View
Any view
Parameter
None
Description
Use the display ospf sham-link command to view the information of sham links. Related command: sham-link.
Example
# Display the information of sham links.
<3Com> display ospf sham-link OSPF Process 1 with Router ID 1.1.1.1 Sham Links Sham-link 3.3.3.3 Area: 0.0.0.1 Cost: 1 State: Down Type: Sham -> 5.5.5.5, State: Down
Timers: Hello 10, Dead 40, Poll 0, Retransmit 5, Transmit Delay 1
2.1.10 domain-id
Syntax
domain-id { id-number | id-addr } undo domain-id
View
OSPF protocol view
Parameter
id-number: Domain ID for a VPN instance, an integer in the range of 0 to 4294967295. By default, it is 0. id-addr: IP address format of the domain ID of a VPN instance. By default, it is 0.0.0.0.
Description
Use the domain-id command to specify domain ID for a VPN instance. Use the undo domain-id command to restore the default domain ID.
For standard BGP/OSPF interoperability, when BGP routes are imported to OSPF at PE, their original OSPF attributes cannot be restored. As these BGP VPN IP routes are issued to CE as ASE LSA (type-5 LSA), OSPF cannot distinguish the routes imported from other route domains. In order to distinguish external routes from OSPF internal routes, it is required to restore the attributes of BGP routes when they are imported to OSPF at the remote end. To achieve this goal, we can configure a domain ID for each OSPF domain. A domain ID is attached to a BGP/VPN route when an OSPF route is imported into BGP/VPN for transmission over BGP/VPN routes. Then when BGP routes are imported to the peer PE, LAS values are filled in according to the extended community attributes. If the received BGP VPN IP routes have the same domain ID, they are from the same VPN instance. By default, domain ID is 0.
Note: The specified domain ID will not take effect until the reset ospf command is executed.
Example
# Set domain ID 100 to OSPF process 100.
[3Com-ospf-100] domain-id 100 [3Com-ospf-100] domain-id 0.0.0.100
2.1.11 if-match mpls-label

Syntax
if-match mpls-label undo if-match mpls-label
View
Route-policy view
Parameter
None
Description
Use the if-match mpls-label command to match public network routes with MPLS labels only.
Use the undo if-match mpls-label command to remove the match rules. Related command: apply mpls-label.
Example
# Define an if-match clause to permit the filtering of routes with labels.
[3Com-route-policy] if-match mpls-label
2.1.12 import-route ospf

Syntax
import-route { ospf | ospf-ase | ospf-nssa } [ process-id ] [ med value | route-policy route-policyname ] undo import-route { ospf | ospf-ase | ospf-nssa } [ process-id ]
View
BGP unicast/multicast view, MBGP VPN-instance address family view
Parameter
process-id: OSPF process ID. By default, it is 1. ospf: Imports only the ASE internal route discovered by OSPF process with process-id as the external route information. ospf-ase: Imports only the OSPF-ASE route discovered by OSPF process with process-id as the external route information. ospf-nssa: Imports only the OSPF-NSSA route discovered by OSPF process with process-id as the external route information. med value: Route cost value route-policyname: Route policy name
Description
Use the import-route ospf command to enable importing OSPF route. Use the undo import-route ospf command to disable importing OSPF route.
Caution: By default, the process ID is 1.
Example
# Enable to import an OSPF route with process ID 100.
[3Com] ip vpn-instance sphinx [3Com-vpn-sphinx] route-distinuisher 168.168.55.1:85 [3Com-vpn-sphinx] quit [3Com] bgp 352 [3Com-bgp] ip vpn-instance sphinx [3Com-bgp-af-vpn-instance] import-route ospf 100
2.1.13 ip binding vpn-instance

Syntax
ip binding vpn-instance vpn-instance-name undo ip binding vpn-instance vpn-instance-name
View
Interface (including subinterface) view
Parameter
vpn-instance-name: Name assigned to vpn-instance.
Description
Use the ip binding vpn-instance command to bind an interface or subinterface to a vpn-instance. Use the undo ip binding vpn-instance command to delete the binding. By default, global routing table is used. The IP address of the interface will be removed after you execute this command on it, so you need to reconfigure the IP address for the interface.
Example
# Bind VPN instance vpn1 to the interface atm0/0/0.
[3Com] interface atm1/0/0 [3Com-Atm1/0/0] ip binding vpn-instance vpn1
2.1.14 ip route-static vpn-instance

Syntax
ip [ route-static nexthop-address vpn-instance ] | vpn-instance-name1 vpn-nexthop-name vpn-instance-name2 vpn-nexthop-address |
destination-address { mask | mask-length } { interface-type interface-number | vpn-instance nexthop-address [ public ] } [ preference preference-value ] [ reject | blackhole ] undo ip route-static vpn-instance vpn-instance-name1 vpn-instance-name2 destination-address { mask | mask-length } { interface-type interface-number | vpn-instance vpn-nexthop-name vpn-nexthop-address | nexthop-address [ public ] } [ preference preference-value ]
View
System view
Parameter
vpn-name: Name of VPN instance. 6 names can be configured at most. destination-address: Destination address of the static route. mask: Address mask. mask-length: Length of the mask. As it requires consecutive 1s in a 32-bit mask, the mask in dotted decimal notation format can be substituted by mask-length. (mask-length is represented by the number of consecutive 1s in the mask.) interface-type interface-number: Specifies the outgoing interface of the static route by its type and number. You can specify the interface of public network or other vpn-instance as the outgoing-interface of the static route. vpn-nexthop-name: Specifies vpn-instance of the next hop for the static route. vpn-nexthop-address: Specifies IP address of the next hop for the static route. public: Indicates that the next hop of this route is a public IP address. preference-value: Specifies preference value. reject: Configures a route as unreachable. blackhole: Configures a route as a blackhole.
Description
Use the ip route-static vpn-instance command to configure a static route, by specifying a private network interface as the outgoing-interface of this static route. When using a
multi-role host, you can configure a static route in a private network with an interface of another private network or public network as its outgoing-interface. Use the undo ip route-static vpn-instance command to delete the configuration of this static route.
Example
# Configure a static route with destination address 100.1.1.1 and next hop address 1.1.1.2.
[3Com] ip route-static vpn-instance vpn1 100.1.1.1 16 vpn-instance vpn1 1.1.1.2
2.1.15 ip vpn-instance
Syntax
ip vpn-instance vpn-instance-name undo ip vpn-instance vpn-instance-name
View
System view, routing protocol (BGP and RIP) view
Parameter
vpn-instance-name: Name assigned to vpn-instance.
Description
Use the ip vpn-instance command to create and configure a vpn-instance. Use the undo ip vpn-instance command to delete the specified vpn-instance. By default, vpn-instance is not defined. Neither input nor output list is associated with vpn-instance. No route-map is associated with vpn-instance. Use the ip vpn-instance command to create a vpn-instance named vpn-name.
Example
# Create VPN instance vpn1.
[3Com] ip vpn-instance vpn1 [3Com-vpn-vpn1]
2.1.16 ipv4-family
Syntax
ipv4-family { multicast | vpn-instance vpn-instance-name | vpnv4 [ unicast ] }
undo ipv4-family {multicast | vpn-instance vpn-instance-name | vpnv4 [ unicast ] }
View
BGP view
Parameter
multicast: It is used to enter MBGP multicast address family view. vpn-instance vpn-instance-name: Associates the specified vpn-instance with the MBGP address family. This parameter is used to enter MBGP vpn-instance address family view. vpnv4: It is used to enter MBGP vpnv4 address family view. unicast: Uses VPNv4 unicast address.
Description
Use the ipv4-family multicast command to enter MBGP multicast address family view. Use the undo ipv4-family multicast command to delete the configuration of the specified multicast address family view. Use the ipv4-family vpn-instance command to enter MBGP vpn-instance address family view. Use the undo ipv4-family vpn-instance command to delete the association of vpn-instance with MBGP address family, and return to BGP unicast view. Use the ipv4-family vpnv4 command to enter MBGP VPNv4 address family view. Use the undo ipv4-family vpnv4 command to delete the configuration of MBGP VPNv4 address family view. By default, unicast address is used when VPNv4 address family is configured. By default, unicast address is used when MBGP address family is configured. Use this command to enter address family view and configure parameters related to BGP address family in this view. Related command: peer enable.
Example
# Associate the specified vpn-instance with MBGP address family to enter MBGP vpn-instance address family view. You must first configure vpn-instance before you perform that configuration.
[3Com] bgp 100 [3Combgp] ipv4 family vpn-instance abc [3Com-bgp-af-vpn-instance]
# Enter VPNv4 address family view.

[3Com] bgp 100 [3Com-bgp] ipv4 family vpnv4 unicast [3Com-bgp-af-vpn]
2.1.17 ospf vpn-instance

Syntax
ospf process-id [ router-id router-id-number ] vpn-instance vpn-instance-name undo ospf process-id
View
System view
Parameter
process-id: OSPF process ID. By default, it is set to 1. router-id-number: Router ID for an OSPF process. It is optional. vpn-instance-name: VPN instance bound to an OSPF process.
Description
Use the ospf command to enable an OSPF process. Use the undo ospf command to disable an OSPF process. After enabling an OSPF process you can perform the configuration related to OSPF in the OSPF protocol view. By default, OSPF protocol is not used in the system. 3Com Router Software supports multiple OSPF processes, so you can specify different process IDs to enable multiple OSPF processes on a router. You are recommended to specify route-id in a process using router-id when enabling the OSPF process. If you want to enable multiple processes on a router, you are recommended to specify different router IDs for different processes. To enable an OSPF process belonging to a public network without router ID, the following conditions should be satisfied: RM is configured with router ID. There is an interface configured with an IP address.
If you enable an OSPF process without specifying a router ID, and the process is to be bound to a VPN instance, the VPN instance should have an interface that is configured with an IP address. If you want to bind a process to a VPN instance you must specify the VPN instance name. One VPN instance may include several processes. For example, for VPN instance 1 to configure the commands ospf 1 vpn-instance vpn1, ospf 2 vpn-instance vpn1, and ospf 3 vpn-instance vpn1. Accordingly, VPN instance 1 will include processes 1, 2, and 3. One process belongs to only one instance however. If you have configured ospf 1 vpn-instance vpn1, you cannot configure ospf 1 vpn-instance vpn2. Otherwise, the system prompts: Wrong configuration. Process 1 has been bound to vpn-instance vpn-instance 1. If you configure ospf 1 first and then ospf 1 vpn-instance vpn1, the system prompts: Wrong configuration. Process 1 has been running in public domain. If you configure ospf 1 vpn-instance vpn1 first and then ospf 1, the system enters ospf 1 vpn-instance vpn1 mode. That is, the commands ospf 1 and ospf 1 vpn-instance vpn1 are equivalent. When an OSPF process is bound to a VPN instance, the default OSPF router is PE router. After executing the display ospf process-id brief command you will view the information: PE router, connected to VPN backbone.
Caution: A router can run no more than 1024 OSPF processes, with up to 10 processes enabled in each VPN instance. If you bind an OSPF process to a nonexistent VPN instance, the configuration for the command fails. The system prompts: Specified vpn instance not configured. When a VPN instance is deleted, all the related OSPF processes will be deleted. For example, VPN instance vpn1 includes OSPF processes 1, 2 and 3. If VPN instance vpn1 is deleted, the OSPF processes 1, 2 and 3 will all be deleted at the same time.
Related command: network.
Example
# Enable OSPF protocol with default process ID.
[3Com] router id 10.110.1.8 [3Com] ospf
# Enable OSPF protocol with process ID 120.

[3Com] router id 10.110.1.8 [3Com] ospf 120 [3Com-ospf-120]
# Enable OSPF process with process ID 100, specify its route ID to 2.2.2.2, and bind it to VPN instance vpn1.
[3Com] ospf 100 router-id 2.2.2.2 vpn-instance vpn1 [3Com-ospf-100]
2.1.18 peer default-route-advertise

Syntax
peer group-name default-route-advertise undo peer group-name default-route-advertise
View
BGP view, MBGP IPv4-family view
Parameter
group-name: Peer group name.
Description
Use the peer default-route-advertise command to enable a peer (group) to import a default route. Use the undo peer default-route-advertise command to remove the existing configuration. By default, a peer (group) does not import default route. This command does not require any default route in the routing table but transmits a default route with the next hop being itself to the peer unconditionally.
Example
# Enable the peer (group) test to import a default route.
[3Combgp] peer test default-route-advertise
2.1.19 peer label-route-capability

Syntax
peer group-name label-route-capability undo peer group-name label-route-capability
View
BGP view
Parameter
group-name: Indicates name of peer group.
Description
Use the peer label-route-capability command to enable the capability of a peer to process IPv4 routes with labels. Use the undo peer label-route-capability command to disable the capability. By default, BGP peer cannot process IPv4 routes with labels.
Example
# Enable the capabilities of IBGP and EBGP peer groups to process IPv4 routes with labels.
[3Com-bgp] group ibgp internal [3Com-bgp] peer ibgp label-route-capability [3Com-bgp] group ebgp external [3Com-bgp] peer ebgp label-route-capability
2.1.20 peer next-hop-invariable

Syntax
peer group-name next-hop-invariable undo peer group-name next-hop-invariable
View
BGP view, BGP-VPNv4 subaddress family view, BGP VPN-Instance view, BGP-IPv4 multicast subaddress family view
Parameter
group-name: Indicates name of peer group.
Description
Use the peer next-hop-invariable command to configure the invariable next hop when sending routes to EBGP peers. Use the undo peer next-hop-invariable command to restore the default configuration. By default, BGP Speaker varies the next hop to itself when sending routes to EBGP peers. The peer next-hop-invariable command is applicable to the networking application that adopts Multihop MP-BGP multi-AS VPN mode and uses Route Reflector (RR) to advertise VPNv4 routes. The invariable next hop is configured when VPNv4 routes are advertised between multi-AS RRs.
Example
# Configure the invariable next hop when sending VPNv4 routes to EBGP peers.
[3Com-bgp] group ebgp external [3Com-bgp] ipv4-family vpnv4 [3Com-bgp-af-vpn] peer ebgp enable [3Com-bgp-af-vpn] peer ebgp next-hop-invariable
2.1.21 peer upe

Syntax
peer peer-address upe undo peer peer-address} upe
View
BGP view
Parameter
peer-address: IP address of a peer.
Description
Use the peer upe command to configure BGP peer as the UPE of hierarchical BGP/MPLS VPN. Use the undo peer upe command to delete this configuration.
Example
# Configure BGP peer as the UPE of hierarchical BGP/MPLS VPN.
[3Com-bgp] ipv4-family vpnv4
[3Com-bgp-af-vpn] peer 1.1.1.1 upe
2.1.22 policy vpn-target

Syntax
policy vpn-target undo policy vpn-target
View
BGP-VPNv4 subaddress family view
Parameter
None
Description
Use the policy vpn-target command to filter the received routing information according to the VPN-target extended community attributes. Use the undo policy vpn-target command to remove the filtering. By default, the received routing information is filtered according to the VPN-target extended community attributes.
Example
# Filter the received routing information according to the VPN-target extended community attributes.
[3Com-bgp-af-vpn] policy vpn-target
2.1.23 route-distinguisher
Syntax
route-distinguisher route-distinguisher
View
MBGP VPN-instance view
Parameter
route-distinguisher: Configures a VPN IPv4 prefix by adding an 8-byte value to an IPv4 prefix.
Description
Use the route-distinguisher command to configure RD for a MPLS VPN instance. A vpn-instance cannot run until it is configured with a RD. A route distinguisher (RD) creates a route and forwarding list for a VPN and specifies the default route identifier. Add a RD to the beginning of a specific IPv4 prefix to make it a globally unique VPN IPv4 prefix. If a RD is associated with an autonomous system number (ASN), it is composed of the ASN and an arbitrary number; if the RD is associated with an IP address it is a combination of the IP address and an arbitrary number. RD has the following formats: 16-bit ASN (can be 0 here): a 32-bit number defined by user, for example, 101:3. 32-bit IP address (can be 0.0.0.0 here): a 16-bit number defined by user, for example, 192.168.122.15:1.
Example
# Configure RD for an MPLS VPN instance.
[3Com] ip vpn-instance vpn_blue [3Com-vpn-vpn_blue] route-distinguisher 100:3 [3Com] ip vpn-instance vpn_red [3Com-vpn-vpn_red] route-distinguisher 173.13.0.12:200
2.1.24 route-tag
Syntax
route-tag tag-number undo route-tag
View
OSPF protocol view
Parameter
tag-number: Tag value to identify VPN import route, in range of 0 to 4294967295. By default, its first two fields are fixed to 0xD000, while the last two fields are the ASN of local BGP. For example, if local BGP ASN is 100, then the default tag value in decimal is 3489661028.
Description
Use the route-tag command to specify a tag value to identify VPN import route.
Use the undo route-tag command to restore the default value. If a VPN site is linked to multiple PEs, when a route learned from MPLS/BGP is advertised by a PE router via its type-5 or type-7 LSA to the VPN site, the route may be received by another PE router. This will result in routing loop. To avoid routing loop, you should configure route-tag, and you are recommended to configure the same route-tag for the PEs in the same VPN domain. The route-tag is included in the type-5/-7 LSA. It is not transmitted in the extended community attributes of BGP, and thus it is limited in the local area. Therefore, it can only be configured and function on the PE router, which receives BGP routes and generates OSPF LSA. Configure route-tag in OSPF protocol view. Different processes can be configured with the same route-tag. You can configure the same route-tag using different commands, but they are different in priority levels. 1) 2) 3) Those configured with the import-route command are of the highest priority level. Those configured with the route-tag command are in the second place in terms of priority level. Those configure with the default tag command are of the lowest priority level.
If the route-tag included in the type-5/-7 LSA is identical with its existing tag, the LSA received will be neglected in route calculation.
Caution: To validate the configured route-tag you must execute the reset ospf command.
Related command: import-route and default.
Example
# Configure route-tag 100 to OSPF process 100.
[3Com-ospf-100] route-tag 100 OSPF: Process 100's route tag has been changed OSPF: Reload or use 'reset ospf' command for this to take effect
2.1.25 routing-table limit

Syntax
routing-table limit threshold-value { warn threshold | syslog-alert }
undo routing-table limit
View
Parameter
threshold-value: Threshold of the maximum route count. When the number of routes reaches this threshold, no route can be added. It is in the range of 1 to 1000. warn-threshold: Warn threshold percentage. When the number of routes exceeds the threshold of the maximum route count times the warn threshold alarm is generated. The warn threshold is in the range of 1 to 100. syslog-alert: Allows a route to be added when the number of routes reaches the threshold of the maximum route count. In this case, a SYSLOG error message is sent.
Description
Use the routing-table limit command to limit the route maximum in a vpn-instance to avoid too many routes in the ingress interface of the PE router. Use the undo routing-table limit command to remove the limitation. It is necessary to enter vpn-instance sub-view before using the routing-table limit command. Create a vpn-instance routing table in this view and allocate a route distinguisher (RD) in either of the following formats: 16-bit ASN: a 32-bit user-defined number, e.g. 100:1. 32-bit IP address: a 16-bit user-defined number, e.g. 172.1.1.1:1. Create a vpn-target extended community for a vpn-instance and specify ingress or egress interface or both of them for the vpn-target command. These parameters can be used to configure ingress/egress routing information of the VPN-target extended community for a router.
Example
# Set the threshold of maximum route count to 1000 in VPN-instance vpn1.
[3Com] ip vpn-instance vpn1 [3Com-vpn- vpn1] route-distinguisher 100:1 [3Com-vpn- vpn1] vpn-target 100:1 import-extcommunity [3Com-vpn- vpn1] routing-table limit 1000 simply-alert
2.1.26 sham-link
Syntax
sham-link source-addr destination-addr [ cost cost-value ] [ dead seconds ] [ hello seconds ] [ md5 keyid key seconds ] [ retransmit seconds ] [ simple password ] [ trans-delay seconds ] undo sham-link source-addr destination-addr
View
OSPF area view
Parameter
source-addr: Source address of a sham-link, a loopback interface address with 32-bit mask destination-addr: Destination address of a sham-link, a loopback interface address with 32-bit mask cost-value: Cost at sham link, in the range of 1 to 65535. By default, it is 1. password: Specifies authentication string in plain text at the interface, 8 characters at most. It must be consistent with the authentication string of sham link peer. keyid: Specifies MD5 authentication string at the interface, in range of 1 to 255 characters. It must be consistent with the authentication string of sham link peer. key: Specifies authentication string at the interface, 16 characters at most. It must be consistent with the authentication string of sham link peer. When the display current-configuration command is executed, the system displays the 24-character MD5 authentication string in cipher text. You can also input 24-character authentication string in cipher text. dead seconds: Specifies interval for the dead timer, in range of 1 to 8192 seconds. By default, it is 40 seconds. It must be consistent with the value of dead seconds for sham link peer. hello seconds: Specifies interval between Hello message transmissions at the interface, in range of 1 to 8192 seconds. By default, it is 10 seconds. It must be consistent with the value of hello seconds for sham link peer. retransmit seconds: Specifies internal for LSA message retransmission at the interface, in range of 1 to 8192 seconds. By default, it is 5 seconds. trans-delay seconds: Specifies delay period for LSA message transmission at the interface, in range of 1 to 8192 seconds. By default, it is 1 second.
Description
Use the sham-link command to configure a sham link. Use the undo sham-link command to delete a sham link. In the OSPF PE-CE connection, suppose that in an OSPF area there are two sites belonging to the same VPN. They are connected to different PE routers and there is an intra-domain OSPF link (backdoor) between them. Though there may be other routes connecting the two sites via PE routers, these routes are inter-area routes, and OSPF will first select those routes through the backdoor link. Sometimes, users desire to select the routes first through VPN backbone. Hence it is required to establish sham links between PE routers. In this case, the routes through VPN backbone are of the highest priority within the OSPF area. The sham link between VPN PE routers is taken as a link within the OSPF area. Its source and destination addresses are both loopback interface addresses with a 32-bit mask, which must be bound to a VPN instance and imported into BGP through a direct-connect route. The optional parameters can be appended in the sham link command and only those appended in the sham link command can be selected in the undo command.
Caution: The source and destination addresses of a sham link are both loopback interface addresses with a 32-bit mask, which must be bound to a VPN instance and imported into BGP through a direct-connect route. The source and destination addresses of a sham link cannot be the same. The same sham link cannot be configured for different OSPF processes. 50 sham links can be configured for an OSPF process at most.
Example
# Configure a sham link, with source address 1.1.1.1 and destination address 2.2.2.2.
[3Com-ospf-100-area-0.0.0.1] sham-link 1.1.1.1 2.2.2.2 cost 100
2.1.27 vpn-instance-capability simple

Syntax
vpn-instance-capability simple
undo vpn-instance-capability
View
OSPF protocol view
Parameter
None
Description
Use the routing-table limit command to configure a router as Multi-VPN-Instance CE. Use the undo routing-table limit command to remove the configuration. OSPF multi-VPN-instance is often run at a PE router. Therefore, the CE router, on which OSPF multi-VPN-instance runs, is called Multi-VPN-Instance CE. Though they both support multi-VPN-instance, Multi-VPN-Instance CE does not necessarily support BGP/OSPF interoperability. When OSPF processes are bound to VPN instances, OSPF will use the PE router as the default router. This command will remove the default setting and change a router into Multi-VPN-Instance CE. Then OSPF processes will set up all peers again. DN bits and route-tag will not be check in routing calculation. To prevent route loss, loop test function is disabled on PE routes. MGP/OSPF interoperability is also disabled to save system resources. After the display ospf brief command is executed successfully the system prompts the information: Multi-VPN-Instance enable on CE router.
Caution: OSPF processes will set up all peers again after this command is executed.
Example
# Configure OSPF procedure 100 as Multi-VPN-Instance CE.
[3Com-ospf-100] vpn-instance-capability simple
# Restore the OSPF procedure 100 as PE.

[3Com-ospf-100] undo vpn-instance-capability
2.1.28 vpn-target
Syntax
vpn-target vpn-target-ext-community [ import-extcommunity | export-extcommunity | both ] undo vpn-target vpn-target-ext-community [ import-extcommunity |
export-extcommunity | both ]
View
Parameter
import-extcommunity: Ingress route information from the extended community of target VPN. export-extcommunity: Egress route information to the extended community of target VPN. both: Imports both ingress and egress route information to the extended community of target VPN. vpn-target-ext-community: Adds vpn-target extended community attribute to the ingress and egress of vpn-instance or the vpn-target extended community list of ingress and egress.
Description
Use the vpn-target command to create a vpn-target extended community for vpn-instance. Use the undo vpn-target command to remove the vpn-target extended community attributes. The default value is both. With the vpn-target command you can create ingress and egress route target extended community list for a specified vpn-instance. Execute this command once for each target community. Import the received route bearing the specific vpn-target extended community to all vpn-instances, for which an extended community is configured as ingress vpn-target. Vpn-target specifies a target VPN extended community. Same as RD, an extended community is either composed of an ASN and an arbitrary number, or composed of an IP address and an arbitrary number. Extended community has the following formats: 16-bit ASN: a 32-bit number defined by user, for example, 100:1.
32-bit IP address: a 16-bit number defined by user, for example, 172.1.1.1:1.
Example
# Create vpn-target extended community for the vpn-instance.
[3Com] ip vpn-instance vpn_red [3Com-vpn-vpn_red] vpn-target 1000:1 both [3Com-vpn-vpn_red] vpn-target 1000:2 export-extcommunity [3Com-vpn-vpn_red] vpn-target 173.27.0.130:2 import-extcommunity
Chapter 3 MPLS L2VPN Configuration Commands

3.1 CCC Configuration Commands
3.1.1 ccc interface transmit-lsp receive-lsp
Syntax
ccc ccc-connection-name interface interface-type interface-number transmit-lsp
transmit-lsp-name receive-lsp receive-lsp-name undo ccc ccc-connection-name
View
System view
Parameter
interface-type interface-number: Interface for the remote connection. ccc-connection-name: CCC connection name of 1 to 20 characters in length, which uniquely identifies a CCC inside a PE. transmit-lsp-name: Name of the transmit-LSP. receive-lsp-name: Name of the receive-LSP.
Description
Use the ccc interface transmit-lsp receive-lsp command to create a remote CCC connection. Use the undo ccc command to delete a remote CCC connection. You can delete a CCC connection in interface view or system view. Related command: ccc interface out-interface.
Example
# Create a remote CCC connection, with the name of clink, transmit-LSP of tlsp, and receive-LSP of rlsp.
[3Com-Ethernet3/0/0] receive-lsp rlsp ccc clink interface serial0/0/0 transmit-lsp tlsp
3.1.2 ccc interface out-interface

Syntax
ccc ccc-connection-name interface interface-type interface-number out-interface outinterface-type outinterface-num undo ccc ccc-connection-name
View
System view
Parameter
ccc-connection-name: CCC connection name of 1 to 20 characters, which is used for uniquely identifying the CCC inside the PE. interface-type interface-number: Interface connected to the first CE outinterface-type outinterface-num: Interface connected to the second CE.
Description
Use the ccc interface out-interface command to create a local CCC connection. Use the undo ccc command to delete the local CCC connection. The supported interfaces include serial, asynchronous serial, ATM, Ethernet, VE, and GE interfaces, as well as ATM, Ethernet, and GE sub-interfaces. Interfaces serial, asynchronous serial, Ethernet, GE, or VE interface, CCC encapsulation default to link layer encapsulation and the command does not have any parameter in this case. This also applies to the CCC encapsulation on an Ethernet sub-interface or GE sub-interface. For an ATM sub-interface, CCC encapsulation defaults to ATM AAL5. In this case, the command can bring with it a parameter indicating whether the encapsulation is ATM AAL5 or ATM CELL.
Example
# Create a local CCC connection, with the name of clink, two CEs connected respectively to Ethernet0/0/0 and Ethernet2/0/0.
[3Com] ccc clink interface serial0/0/0 out-interface Ethernet 2/0/0
3.1.3 debugging mpls l2vpn

Syntax
debugging mpls l2vpn { all | advertisement | error | event | connections [ interface interface-type interface-num ] } undo debugging mpls l2vpn { all | advertisement | error | event | connections [ interface interface-type interface-num ] }
View
User view
Parameter
all: Enables/Disables all L2VPN debugging. advertisement: Enables/Disables BGP/LDP advertisement debugging of L2VPN. error: Enables/Disables L2VPN error debugging. event: Enables/Disables L2VPN event debugging. connections: Enables/Disables connection debugging. interface-type interface-num: Specifies a CE interface for connection debugging.
Description
Use the debugging mpls l2vpn command to view L2VPN link information. Use the undo debugging mpls l2vpn command to disable debugging.
Example
<3Com> debugging mpls l2vpn all
3.1.4 display ccc

Syntax
display ccc [ ccc-name | type [ local | remote ] ]
View
Any view
Parameter
ccc-name: Name of the connection to be displayed. local: Displays local CCC connection only.
remote: Displays remote CCC connection only.
Description
Use the display ccc command to view CCC connection information.
Example
# Display CCC connection information.
[3Com] display ccc c-link
3.1.5 static-lsp egress l2vpn

Syntax
static-lsp egress lsp-name l2vpn incoming-interface interface-type interface-num in-label in-label undo static-lsp egress lsp-name l2vpn
View
MPLS view
Parameter
lsp-name: LSP name interface-type Interface-num: Interface type and interface number in-label-value: Inbound label value, in range of 16 to 1024
Description
Use the static-lsp egress l2vpn command to configure a static LSP used in L2VPN for egress LSR. Use the undo static-lsp egress l2vpn command to delete an LSP used in L2VPN of egress LSR. Two LSPs (one in each direction) should be created in advance before creating a remote CCC connection. Related command: static-lsp ingress l2vpn, debugging mpls.
Example
# Add a static LSP citya-city at egress LSR.
[3Com-mpls] static-lsp egress citya-cityb l2vpn incoming-interface serial8/0/0 in-label 233
3.1.6 static-lsp ingress l2vpn

Syntax
static-lsp ingress lsp-name { l2vpn | destination ip_addr } { nexthop next-hop-addr | outgoing-interface interface-type interface-num } out-label out-label undo static-lsp ingress lsp-name l2vpn
View
MPLS view
Parameter
lsp-name: LSP name next-hop-addr: Next hop address interface-type Interface-num: Interface type and interface number out-label-value: Outbound label value, in range of 16 to 1024
Description
Use the static-lsp egress l2vpn command to configure a static LSP used in L2VPN for ingress LSR. Use the undo static-lsp egress l2vpn command to delete an LSP used in L2VPN of ingress LSR. With this command you can configure a static LSP for ingress LSR, and set preference and measurement value for it. Two LSPs (one in each direction) should be created in advance before creating a remote CCC connection. Related command: static-lsp egress lvpn, static-lsp transit, debugging mpls.
Example
# Add a static LSP with destination address 202.25.38.1 at ingress LSR.
[3Com-mpls] static-lsp ingress citya-cityb destination 202.25.38.1 24 nexthop 202.55.25.33 out-label 237
3.1.7 static-lsp transit l2vpn

Syntax
static-lsp transit lsp-name l2vpn incoming-interface interface-type interface-num in-label in-label { nexthop next-hop-addr | outgoing-interface interface-type interface-num } out-label out-label undo static-lsp transit lsp-name l2vpn
View
MPLS view
Parameter
lsp-name: LSP name interface-type Interface-num: Interface type and interface number next-hop-addr: Next hop address in-label-value: Inbound label value, in range of 16 to 1024 out-label-value: Outbound label value, in range of 16 to 1024
Description
Use the static-lsp transit command to configure a static LSP used in L2VPN for transit LSR. Use the undo static-lsp transit command to delete an LSP used in L2VPN of transit LSR. Two LSPs (one in each direction) should be created in advance and configured to the transit LSR before creating a remote CCC connection. Related command: static-lsp egress l2vpn and static-lsp ingress l2vpn.
Example
# Add a static LSP used in 12vpn for the Serial0/0/0 of transit LSR, with inbound label 123 and outbound label 253.
[3Com-mpls] static-lsp transit citya-cityb l2vpn incoming-interface serial0/0/0 in-label 123 nexthop 202.34.114.7 out-label 253
3.2 SVC MPLS L2VPN Configuration Commands

3.2.1 display mpls static-l2vc
Syntax
display mpls static-l2vc [ interface interface-type interface-num ]
View
Any view
Parameter
interface-type interface -num: Interface type and interface number
Description
Use the display mpls static-l2vc command to view the connection information of static MPLS L2VPN.
Example
# Display basic information of static connections.
[3Com-Ethernet1/0/1] display mpls static-l2vc total connections: ce-intf 1, 0 up, 1 down tr-label 222 rcv-label tnl-type tnl-index 111 -0
state destination 192.1.1.1
Ethernet1/0/1 down
[3Com] display mpls static-l2vc interface ethernet1/0/1 CE-interface: Ethernet1/0/1 is up, transmit-vpn-label: 222, tunnel type: --, VC State: down, Destination: 192.1.1.1,
receive-vpn-label: 111,
tunnel index: 0
3.2.2 mpls static-l2vc

Syntax
mpls static-l2vc destination destination-ip-address transmit-vpn-label
transmit-label-value receive-vpn-label receive-label-value
View
Interface view
Parameter
destination-ip-address: IP address of the destination router. transmit-label-value: Label value of the transmitting VPN. receive-label-value: Label value of the receiving VPN.
Description
Use the mpls static-l2vc command to create an SVC MPLS L2VPN connection. Use the undo mpls static-l2vc command to delete the connection.
Example
# Create an SVC MPLS L2VPN connection.
[3Com-s1/1/0] mpls static-l2vc destination 192.1.1.1 transmit-vpn-label 333 receive-vpn-label 111
3.3 Martini MPLS L2VPN Configuration Commands

3.3.1 display mpls l2vc
Syntax
display mpls l2vc [ interface interface-type interface-num | verbose ]
View
Any view
Parameter
verbose: Displays the detailed information. interface-type interface-num: Name of the interface connected to CE.
Description
Use the display mpls l2vc command to view the VC information in LDP.
Example
None
3.3.2 mpls l2vc

Syntax
mpls l2vc ip-address vc-id undo mpls l2vc
View
Interface view
Parameter
ip-address: lsr-id address of peer PE. vc-id: ID of the VC, ranging from 1 to 4294967295.
Description
Use the mpls l2vc command to create an LDP connection. Use the undo mpls l2vc command to delete the connection. Supported interface types: Serial, Asy Serial, POS, ATM, ATM subinterface, Ethernet, Ethernet subinterface, VE, GE, GE subinterface. Enable MPLS L2VPN and encapsulate CCC on the interface before using this command. Related command: mpls l2vpn and ccc.
Example
# Create an LDP connection.
[3Com-Ethernet3/0/0] mpls l2vc 10.0.0.11
3.4 Kompella MPLS L2VPN Configuration Commands

3.4.1 ce
Syntax
ce name [ id id range range ] [ default-offset offset ] ] undo ce name
View
MPLS L2VPN view
Parameter
name: CE name, unique in the current PE VPN. id: CE ID, unique in VPN, represents a CE, ranging from 1 to 65535. offset: Specifies default offset value of the original CE. range: CE range, that is, the maximum number of CEs that the current CE can connect to, ranging from 1 to 100. The default value is 10.
Description
Use the ce command to create a CE or modify the CE range. Use the undo ce command to delete a CE. After a CE is created, the system will create a CE mode and all the CE connections are configured in this mode. To facilitate VPN expansion the CE range can be configured larger than the present demand. It is a waste of identifier, however, because the identifier block distributed by the system is as large as the CE range. If the CE range is smaller than demand during VPN expansion, for example, the CE range is 10 while the needed CE number is 20, you can modify the CE range to 20. Related command: mpls l2vpn encapsulation and connection.
Example
Create a CE for vpna, named citya-mod, with CE ID 1 and default CE range.
[3Com] mpls l2vpn [3Com] mpls l2vpn vpna encapsulation ppp [3Com-mpls-l2vpn-vpna] ce citya-mod id 1 [3Com-mpls-l2vpn-ce-vpna-citya-mod]
3.4.2 connection
Syntax
connection [ ce-offset offset ] { interface interface-type interface-num } undo connection [ ce-offset offset ] { interface interface-type interface-num }
View
MPLS L2VPN CE view
Parameter
offset: Specifies a remote CE ID of L2VPN connection for establishing local CE connection
interface-type interface-num: Specifies a CE interface for establishing remote CE connection.
Description
Use the connection command to create a CE connection. Use the undo connection command to delete a CE connection. Configure RD for MPLS L2VPN, first, before establishing a CE connection. Related command: mpls l2vpn encapsulation and ccc.
Example
# Establish a CE connection.
[3Com] mpls l2vpn vpna [3Com-l2vpn-vpna] ce ce-a id 1 range 4 [3Com-l2vpn-vpna-ce-ce-a] connection s0/0/0 ce-offset 2
3.4.3 display bgp l2vpn

Syntax
display bgp l2vpn { all | peer | route-distinguisher }
View
Any view
Parameter
all: All L2VPN information in the current address family. peer: Information of the specified BGP peer. route-distinguisher: Information of the specified VPN RD.
Description
Use the display bgp l2vpn all command to view system operating information and all L2VPN information.
Example
# Display all L2VPN information.
[3Com] display bgp l2vpn all
BGP local router ID is 172.16.1.5 ,
Origin codes: i - IGP, e - EGP, ? - incomplete

bgp.l2vpn: 3 destinations CE ID Label Offset
Label Base
nexthop
pref
as-path
Route Distinguisher: 100:1 2 I 200 600 3 I 200 600 Route Distinguisher: 100:2 1 I 200 600 1 700000 1.1.1.1 100 1 500000 1.1.1.1 100 1 800000 1.1.1.1 100
3.4.4 display mpls l2vpn forwarding-info

Syntax
display mpls l2vpn forwarding-info [ vc-label ] interface interface-type interface-num
View
Any view
Parameter
vclabel: VC label interface-type interface-num: Interface type and interface number
Description
Use the display mpls l2vpn forwarding-info command to view the L2VPN information of a specific interface.
Example
# Display the L2VPN information of a specific interface.
[3Com] display mpls l2vpn forwarding-info interface serial1/0/0 VCLABEL TUNNELTYPE 102402 LSP ENTRYTYPE SEND OUTINTERFACE Serial1 OUTSLOT 0 TOKEN CTRLWORD 0 FALSE
Record(s) Found.
3.4.5 l2vpn-family
Syntax
l2vpn-family
undo l2vpn-family
View
BGP view
Parameter
None
Description
Use the l2vpn-family command to create or enter an L2VPN address family view. Use the undo l2vpn-family command to delete an L2VPN address family view. By default, it is in BGP unicast view. Execute the undo l2vpn-family command to exit multicast extended address family view. Delete the entire configuration in this address family and return to BGP unicast view.
Example
# Create an L2VPN address family view.
[3Com] bgp 100 [3Com-bgp] l2vpn-family [3Com-bgp-af-l2vpn]
3.4.6 mpls l2vpn

Syntax
mpls l2vpn undo mpls l2vpn
View
System view
Parameter
None
Description
Use the mpls l2vpn command to enable L2VPN. Use the undo mpls l2vpn command to disable L2VPN. Enable MPLS before using this command.
Related command: mpls and mpls lsr-id.
Example
# Enter MPLS view, configure LSR ID, and enable MPLS.
[3Com] undo mpls [3Com-mpls] mpls lsr-id 10.0.0.1 [3Com] mpls
# Enable L2VPN.
[3Com] mpls l2vpn
3.4.7 mpls l2vpn encapsulation

Syntax
mpls l2vpn vpn-name encapsulation { atm-aal5 | ethernet | fr | hdlc | ppp | vlan } undo mpls l2vpn vpn-name
View
System view
Parameter
vpn-name: Unique VPN name in PE with 1 to 20 bytes. atm-aal5 | ethernet | fr | hdlc | ppp | vlan: VPN encapsulation types. The CCC encapsulation type on a CE interface must be consistent with that of the VPN when creating BGP L2VPN connection. Otherwise, the connection cannot work normally.
Description
Use the mpls l2vpn encapsulation command to create Kompella MPLS L2VPN, specify encapsulation type, and enter MPLS L2VPN view. Use the undo mpls l2vpn encapsulation command to remove the encapsulation. Create Kompella MPLS L2VPN after MPLS L2VPN is enabled. All the parameters of L2VPN are configured in L2VPN view. Related command: ce, mtu.
Example
# Create a Kompella MPLS L2VPN, named 3Com, with encapsulation type vlan:
[3Com] mpls l2vpn 3Com encapsulation vlan
3.4.8 mtu
Syntax
mtu mtu
View
MPLS L2VPN view
Parameter
mtu: Layer2 MTU value of VPN. MTU defaults to 1500.
Description
Use the mtu command to configure MTU of Kompella MPLS L2VPN. When configuring VPN layer2 mtu, make sure that the mtu values of different PEs in the same VPN are the same in the whole SP network. Otherwise, VPN will not work normally. Related command: mpls l2vpn encapsulation.
Example
Configure the mtu of VPN 3Com as 1000.
[3Com-l2vpn-3Com] mtu 1000
3.4.9 peer enable

Syntax
View
L2VPN address family view
Parameter
group-name: Peer group name, refers to the whole peer group. peer-address: IP address of the peer, refers to the specific peer.
Description
Use the peer enable command to activate the specified peer (group) in L2VPN address family view.
Use the undo peer enable command to deactivate the specified peer (group) in L2VPN address family view. By default, unicast peer (group) of IPv4 address family is activated, while other peer (groups) is deactivated.
Example
# Activate the peer (group) 192 in the L2VPN address family view.
[3Com-bgp] peer 1.1.1.1 as-number 100 [3Com-bgp] l2vpn-family [3Com-bgp-af-l2vpn] peer 1.1.1.1 enable
Command Reference Guide Security v2.30 Router Software
Table of Contents
Table of Contents
Chapter 1 AAA and RADIUS/HWTACACS Protocol Configuration Commands...................... 1-1 1.1 AAA Configuration Commands.......................................................................................... 1-1 1.1.1 access-limit.............................................................................................................. 1-1 1.1.2 accounting optional ................................................................................................. 1-2 1.1.3 display connection................................................................................................... 1-2 1.1.4 display domain ........................................................................................................ 1-3 1.1.5 display local-user..................................................................................................... 1-5 1.1.6 domain..................................................................................................................... 1-6 1.1.7 ip pool...................................................................................................................... 1-7 1.1.8 level ......................................................................................................................... 1-8 1.1.9 local-user................................................................................................................. 1-9 1.1.10 local-user password-display-mode...................................................................... 1-10 1.1.11 password ............................................................................................................. 1-11 1.1.12 scheme................................................................................................................ 1-11 1.1.13 service-type ......................................................................................................... 1-13 1.1.14 service-type ftp .................................................................................................... 1-13 1.1.15 service-type ppp .................................................................................................. 1-14 1.1.16 state..................................................................................................................... 1-15 1.2 RADIUS Protocol Configuration Commands ................................................................... 1-16 1.2.1 data-flow-format .................................................................................................... 1-16 1.2.2 debugging radius................................................................................................... 1-17 1.2.3 display radius ........................................................................................................ 1-17 1.2.4 display radius statistics ......................................................................................... 1-20 1.2.5 display stop-accounting-buffer .............................................................................. 1-21 1.2.6 key......................................................................................................................... 1-23 1.2.7 nas-ip..................................................................................................................... 1-24 1.2.8 primary accounting................................................................................................ 1-24 1.2.9 primary authentication........................................................................................... 1-25 1.2.10 radius scheme ..................................................................................................... 1-26 1.2.11 radius nas-ip........................................................................................................ 1-27 1.2.12 reset radius statistics........................................................................................... 1-28 1.2.13 reset stop-accounting-buffer ............................................................................... 1-28 1.2.14 retry ..................................................................................................................... 1-30 1.2.15 retry realtime-accounting..................................................................................... 1-31 1.2.16 retry stop-accounting........................................................................................... 1-32
3Com Corporation i
Table of Contents
1.2.17 secondary accounting ......................................................................................... 1-32 1.2.18 secondary authentication .................................................................................... 1-33 1.2.19 server-type .......................................................................................................... 1-34 1.2.20 state..................................................................................................................... 1-35 1.2.21 stop-accounting-buffer enable............................................................................. 1-36 1.2.22 timer quiet............................................................................................................ 1-37 1.2.23 timer realtime-accounting.................................................................................... 1-37 1.2.24 timer response-timeout ....................................................................................... 1-38 1.2.25 user-name-format................................................................................................ 1-39 1.3 HWTACACS Configuration Commands .......................................................................... 1-40 1.3.1 data-flow-format .................................................................................................... 1-40 1.3.2 debugging hwtacacs ............................................................................................. 1-41 1.3.3 display hwtacacs ................................................................................................... 1-42 1.3.4 display stop-accounting-buffer .............................................................................. 1-43 1.3.5 hwtacacs nas-ip..................................................................................................... 1-43 1.3.6 hwtacacs scheme.................................................................................................. 1-44 1.3.7 key......................................................................................................................... 1-45 1.3.8 nas-ip..................................................................................................................... 1-46 1.3.9 primary accounting................................................................................................ 1-46 1.3.10 primary authentication......................................................................................... 1-47 1.3.11 primary authorization........................................................................................... 1-48 1.3.12 reset hwtacacs statistics ..................................................................................... 1-49 1.3.13 reset stop-accounting-buffer ............................................................................... 1-50 1.3.14 retry stop-accounting........................................................................................... 1-50 1.3.15 secondary accounting ......................................................................................... 1-51 1.3.16 secondary authentication .................................................................................... 1-52 1.3.17 secondary authorization ...................................................................................... 1-53 1.3.18 timer quiet............................................................................................................ 1-54 1.3.19 timer realtime-accounting.................................................................................... 1-54 1.3.20 timer response-timeout ....................................................................................... 1-55 1.3.21 user-name-format................................................................................................ 1-56 Chapter 2 Access Control List Configuration Commands........................................................ 2-1 2.1 ACL Configuration Commands .......................................................................................... 2-1 2.1.1 acl............................................................................................................................ 2-1 2.1.2 display acl................................................................................................................ 2-2 2.1.3 reset acl counter...................................................................................................... 2-2 2.1.4 rule .......................................................................................................................... 2-3 2.2 Time-range Configuration Commands .............................................................................. 2-8 2.2.1 display time-range ................................................................................................... 2-8
3Com Corporation ii
Table of Contents
2.2.2 time-range ............................................................................................................... 2-8 Chapter 3 Firewall Configuration Commands ............................................................................ 3-1 3.1 Packet Filtering Firewall Configuration Commands........................................................... 3-1 3.1.1 debugging firewall ................................................................................................... 3-1 3.1.2 display firewall-statistics.......................................................................................... 3-2 3.1.3 firewall default ......................................................................................................... 3-2 3.1.4 firewall enable ......................................................................................................... 3-3 3.1.5 firewall fragments-inspect ....................................................................................... 3-4 3.1.6 firewall fragments-inspect { high | low }................................................................... 3-4 3.1.7 firewall packet-filter ................................................................................................. 3-5 3.1.8 reset firewall-statistics ............................................................................................. 3-7 3.2 ASPF Configuration Commands........................................................................................ 3-7 3.2.1 aging-time................................................................................................................ 3-7 3.2.2 aspf-policy ............................................................................................................... 3-8 3.2.3 debugging aspf........................................................................................................ 3-9 3.2.4 detect..................................................................................................................... 3-10 3.2.5 display aspf all....................................................................................................... 3-11 3.2.6 display aspf interface ............................................................................................ 3-12 3.2.7 display aspf policy ................................................................................................. 3-13 3.2.8 display aspf session .............................................................................................. 3-14 3.2.9 display port-mapping............................................................................................. 3-15 3.2.10 firewall aspf ......................................................................................................... 3-16 3.2.11 log enable............................................................................................................ 3-16 3.2.12 port-mapping ....................................................................................................... 3-17 Chapter 4 IPSec Configuration Commands................................................................................ 4-1 4.1 IPSec Configuration Commands ....................................................................................... 4-1 4.1.1 ah authentication-algorithm..................................................................................... 4-1 4.1.2 debugging ipsec ...................................................................................................... 4-2 4.1.3 display ipsec policy ................................................................................................. 4-3 4.1.4 display ipsec policy-template .................................................................................. 4-5 4.1.5 display ipsec proposal............................................................................................. 4-7 4.1.6 display ipsec sa ....................................................................................................... 4-8 4.1.7 display ipsec statistics........................................................................................... 4-11 4.1.8 encapsulation-mode.............................................................................................. 4-12 4.1.9 esp authentication-algorithm ................................................................................. 4-13 4.1.10 esp encryption-algorithm..................................................................................... 4-14 4.1.11 ipsec policy(in Interface View)............................................................................. 4-15 4.1.12 ipsec policy (in System View).............................................................................. 4-16 4.1.13 ipsec policy-template........................................................................................... 4-18
Table of Contents
4.1.14 ipsec proposal ..................................................................................................... 4-19 4.1.15 ipsec sa global-duration ...................................................................................... 4-20 4.1.16 pfs........................................................................................................................ 4-21 4.1.17 proposal............................................................................................................... 4-22 4.1.18 reset ipsec sa ...................................................................................................... 4-23 4.1.19 reset ipsec statistics ............................................................................................ 4-25 4.1.20 sa authentication-hex .......................................................................................... 4-25 4.1.21 sa duration........................................................................................................... 4-27 4.1.22 sa encryption-hex................................................................................................ 4-28 4.1.23 sa spi ................................................................................................................... 4-30 4.1.24 sa string-key ........................................................................................................ 4-31 4.1.25 security acl .......................................................................................................... 4-33 4.1.26 transform ............................................................................................................. 4-34 4.1.27 tunnel local .......................................................................................................... 4-35 4.1.28 tunnel remote ...................................................................................................... 4-36 4.2 Encryption Card Configuration Commands ..................................................................... 4-37 4.2.1 debugging encrypt-card ........................................................................................ 4-37 4.2.2 display encrypt-card fast-switch ............................................................................ 4-39 4.2.3 display encrypt-card sa ......................................................................................... 4-40 4.2.4 display encrypt-card statistics ............................................................................... 4-41 4.2.5 display encrypt-card syslog................................................................................... 4-43 4.2.6 display interface encrypt ....................................................................................... 4-43 4.2.7 encrypt-card backuped.......................................................................................... 4-44 4.2.8 encrypt-card fast-switch ........................................................................................ 4-45 4.2.9 interface encrypt.................................................................................................... 4-46 4.2.10 ipsec card-proposal............................................................................................. 4-47 4.2.11 reset counters encrypt......................................................................................... 4-48 4.2.12 reset encrypt-card sa .......................................................................................... 4-48 4.2.13 reset encrypt-card statistics ................................................................................ 4-49 4.2.14 reset encrypt-card syslog .................................................................................... 4-50 4.2.15 snmp-agent trap enable encrypt-card ................................................................. 4-50 4.2.16 use encrypt-card ................................................................................................. 4-51 Chapter 5 IKE Configuration Commands.................................................................................... 5-1 5.1 IKE Configuration Commands ........................................................................................... 5-1 5.1.1 authentication-algorithm.......................................................................................... 5-1 5.1.2 authentication-method............................................................................................. 5-1 5.1.3 debugging ike .......................................................................................................... 5-2 5.1.4 dh ............................................................................................................................ 5-3 5.1.5 display ike peer ....................................................................................................... 5-4
3Com Corporation iv
Table of Contents
5.1.6 display ike proposal................................................................................................. 5-5 5.1.7 display ike sa........................................................................................................... 5-6 5.1.8 encryption-algorithm................................................................................................ 5-7 5.1.9 exchange-mode....................................................................................................... 5-8 5.1.10 id-type.................................................................................................................... 5-9 5.1.11 ike next-payload check disabled ......................................................................... 5-10 5.1.12 ike local-name ..................................................................................................... 5-10 5.1.13 ike peer (in System View) ................................................................................... 5-11 5.1.14 ike peer (In IPSec policy view or IPSec policy template view)............................ 5-12 5.1.15 ike proposal ......................................................................................................... 5-12 5.1.16 ike sa keepalive-timer interval............................................................................. 5-14 5.1.17 ike sa keepalive-timer timeout............................................................................. 5-15 5.1.18 local ..................................................................................................................... 5-16 5.1.19 local-address ....................................................................................................... 5-16 5.1.20 max-connections ................................................................................................. 5-17 5.1.21 nat traversal......................................................................................................... 5-18 5.1.22 pre-shared-key .................................................................................................... 5-18 5.1.23 peer ..................................................................................................................... 5-19 5.1.24 remote-address ................................................................................................... 5-20 5.1.25 remote-name ....................................................................................................... 5-20 5.1.26 reset ike sa .......................................................................................................... 5-21 5.1.27 sa duration........................................................................................................... 5-22 Chapter 6 PKI Configuration Commands.................................................................................... 6-1 6.1 PKI Domain Configuration Commands.............................................................................. 6-1 6.1.1 ca identifier .............................................................................................................. 6-1 6.1.2 certificate request from............................................................................................ 6-1 6.1.3 certificate request mode.......................................................................................... 6-2 6.1.4 certificate request polling ........................................................................................ 6-3 6.1.5 certificate request url............................................................................................... 6-4 6.1.6 crl update period...................................................................................................... 6-5 6.1.7 crl url........................................................................................................................ 6-5 6.1.8 ldap server............................................................................................................... 6-6 6.1.9 pki domain ............................................................................................................... 6-6 6.2 PKI Entity Configuration Commands ................................................................................. 6-7 6.2.1 fqdn ......................................................................................................................... 6-7 6.2.2 common-name ........................................................................................................ 6-8 6.2.3 country..................................................................................................................... 6-8 6.2.4 ip.............................................................................................................................. 6-9 6.2.5 locality ................................................................................................................... 6-10
3Com Corporation v
Table of Contents
6.2.6 organization........................................................................................................... 6-10 6.2.7 organizational-unit ................................................................................................. 6-11 6.2.8 state....................................................................................................................... 6-11 6.2.9 pki entity ................................................................................................................ 6-12 6.3 PKI Certificate Operation Commands.............................................................................. 6-13 6.3.1 pki delete certificate .............................................................................................. 6-13 6.3.2 pki request certificate ............................................................................................ 6-13 6.3.3 pki retrieval certificate ........................................................................................... 6-14 6.3.4 pki retrieval crl ....................................................................................................... 6-15 6.3.5 pki validation certificate ......................................................................................... 6-15 6.4 PKI Displaying and Debugging Commands .................................................................... 6-16 6.4.1 debugging pki certificate ....................................................................................... 6-16 6.4.2 display pki certificate ............................................................................................. 6-20 6.4.3 display pki crl......................................................................................................... 6-22
3Com Corporation vi
Chapter 1 AAA and RADIUS/HWTACACS Protocol Configuration Commands

1.1 AAA Configuration Commands
1.1.1 access-limit
Syntax
access-limit { disable | enable max-user-number } undo access-limit
View
ISP domain view
Parameter
disable: No limit to the supplicant number in the current ISP domain. enable max-user-number: Specifies the maximum supplicant number in the current ISP domain, ranging from 1 to 1048.
Description
Use the access-limit command to configure a limit to the amount of supplicants in the current ISP domain. Use the undo access-limit command to restore the limit to the default setting. By default, there is no limit to the amount of supplicants in the current ISP domain. This command limits the amount of supplicants contained in the current ISP domain. The supplicants may compete for network resources. So setting a suitable limit to the amount will guarantee reliable performance to the existing supplicants.
Example
# Set a limit of 500 supplicants for the ISP domain 3Com163.net.
[3Com-isp-3Com163.net] access-limit enable 500
1.1.2 accounting optional

Syntax
accounting optional undo accounting optional
View
ISP domain view
Parameter
None
Description
Use the accounting optional command to enable optional accounting. Use the undo accounting optional command to disable it. By default, optional accounting is disabled. With the accounting optional command, a user that will be disconnected otherwise can use the network resources even when there is no available accounting server or the communication with the current accounting server fails. This command is normally used for the authentication without accounting.
Example
# Enable optional accounting for users in the domain 3Com163.net.
[3Com] domain 3Com163.net [3Com-isp-3Com163.net] accounting optional
1.1.3 display connection

Syntax
display connection [ domain isp-name ip ip-address | mac mac-address | radius-scheme radius-scheme-name | ucibindex ucib-index | user-name user-name ]
View
Any view
Parameter
domain isp-name: Displays all the user connections belonging to the ISP domain specified by isp-name, a character string not exceeding 24 characters. The specified ISP domain must be an existing one. ip ip-address: Displays all the user connections related to the specified IP address. mac mac-address: Displays a user connection by specifying its hexadecimal MAC address in the format of x-x-x. radius-scheme radius-scheme-name: Displays all the user connections connected to the RADIUS server specified by radius-scheme-name, a character string not exceeding 32 characters. ucibindex ucib-index: Displays information on a user connection by specifying its connection index number, that is, ucib-index ranging from 0 to 1047. user-name user-name: Displays information on a user connection by specifying its user ID, or the user name excluding the domain name. This user name comprises up to 55 characters, excluding forward slashes (/), colons (:), asterisks (*), question marks (?), less-than signs (<), and greater-than signs (>).
Description
Use the display connection command to view the relevant information on the specified user connection or all the connections. The output can help you troubleshoot user connections. By default, information about all user connections is displayed. Related command: cut connection.
Example
# Display information on the connections of the user system.
<3Com> display connection domain system Index=0 ,Username=hfx@system
IP=188.188.188.3
Total 1 connections matched, 1 listed.
1.1.4 display domain

Syntax
display domain [ isp-name ]
View
Any view
Parameter
isp-name: Specifies the ISP domain name, with a character string not exceeding 24 characters. The specified ISP domain must be an existing one.
Description
Use the display domain command to view the configuration of a specified ISP domain or display the summary information of all ISP domains. By default, the summary of all ISP domains is displayed. This command is used to output the configuration of a specified ISP domain or display the summary information of all ISP domains. If an ISP domain is specified, the configuration information will be displayed exactly the same, concerning the content and format, as the displayed information of the display domain command. The output information can help with ISP domain diagnosis and troubleshooting. Related command: access-limit, domain, scheme, state, display domain.
Example
# Display the summaries of all ISP domains in the system.
<3Com> display domain 0 Domain = default_system State = Active Scheme = LOCAL Access-limit = Disable Domain User Template:
Domain = system State = Active Scheme = LOCAL Access-limit = Disable Domain User Template:
Default Domain Name: system Total 2 domain(s).2 listed.
1.1.5 display local-user

Syntax
display local-user [ domain isp-name | service-type { telnet | ssh | terminal | pad | ftp | ppp } | state { active | block } | user-name user-name ]
View
Any view
Parameter
domain isp-name: Displays all the local users in the ISP domain specified by isp-name, a character string not exceeding 24 characters. The specified ISP domain must be an existing one. service-type: Displays local users by specifying service type, which can be telnet, ssh, terminal (terminal users logging on from Console, AUX, or Asyn port), ftp, ppp, or PAD (X.25 PAD). state { active | block }: Displays local users by specifying user state, where active means users allowed to request for network services and block means the opposite. user-name user-name: Displays a user by specifying its user-name, a character string not exceeding 80 characters. It must exclude forward slashes (/), colons (:), asterisks (*), question marks (?), less-than signs (<), and greater-than signs (>). The @ sign can be present once in a user name. The user name without domain name (the part before @, namely the user ID) cannot exceed 55 characters.
Description
Use the display local-user command to view the relevant information on the specified local user or all the local users. The output can help you troubleshoot faults related to local user. By default, information on all local users is displayed. Related command: local-user.
Example
# Display the relevant information of all the local users.
<3Com> display local-user The contents of local user user1: State: Idle-Cut: Active Disable ServiceType Mask: None

Access-Limit: Bind location: Vlan ID: IP address: MAC address: FTP Directory: Disable Disable Disable Disable Disable flash:

Current AccessNum: 0
Total 1 local user(s) Matched,1 listed..
1.1.6 domain
Syntax
domain [ isp-name | default { disable | enable isp-name } ] undo domain isp-name
View
System view
Parameter
isp-name: Specifies an ISP domain name. It comprises up to 24 characters, excluding forward slashes (/), colons (:), asterisks (*), question marks (?), less-than signs (<), and greater-than signs (>). default: Configures the default ISP domain. The system-default default ISP domain is default_system. The display current-configuration command displays the default ISP domain configured by you but not the system-default. disable: Disables the configured default ISP domain. It results in refusal of the usernames that are sent excluding domain names. enable: Enables the configured default ISP domain. It is to be appended to the usernames that are received without domain name before they are sent to the intended AAA servers.
Description
Use the domain command to configure an ISP domain or enter the view of an existing ISP domain. Use the undo domain command to cancel a specified ISP domain. By default, the system uses the domain named default_system. You are not allowed to modify the configurations of this domain, but you can view its settings by executing the display domain command.
ISP domain is a group of users belonging to the same ISP. Generally, for a username in the userid@isp-name format, gw20010608@3Com163.net for example, the isp-name (3Com163.net in the example) following the @ is the ISP domain name. When an AAA server controls user access, for an ISP user whose username is in userid@isp-name format, the system takes the part "userid" as username for identification and takes the part "isp-name" as domain name. The purpose of introducing ISP domain settings is to support the application environment with several ISP domains. In this case, an access device may have supplicants from different ISP domains. Because the attributes of ISP users, such as username and password structures, and service types may be different, it is necessary to separate them by setting ISP domains. In ISP domain view, you can configure a complete set of ISP domain attributes for each ISP domain, including an AAA scheme (the RADIUS scheme applied). For a router, each supplicant belongs to an ISP domain. The system supports the configuration of up to 16 ISP domains. When this command is used, if the specified ISP domain does not exist, the system will create a new ISP domain. All the ISP domains are in active state when they are created. Related command: access-limit, scheme, state, and display domain.
Example
# Create a new ISP domain, 3Com163.net, and enters its view.
[3Com] domain 3Com163.net New Domain added. [3Com-isp-3Com163.net]
1.1.7 ip pool
Syntax
ip pool pool-number low-ip-address [ high-ip-address ] undo ip pool pool-number
View
System view, ISP domain view
Parameter
pool-number: Address pool number, ranging from 0 to 99.
low-ip-address and high-ip-address: The start and end IP addresses of the address pool. The number of in-between addresses cannot exceed 1024. If end IP address is not specified, there will be only one IP address in the pool, namely the start IP address.
Description
Use the ip pool command to configure a local address pool for assigning addresses to PPP users. Use the undo ip pool command to delete the specified local address pool. By default, no local IP address pool is configured. You can configure an IP address pool in system view, and use the remote address command in interface view to assign IP addresses from the pool to PPP users. You can also configure an IP address pool in ISP domain view for assigning IP addresses to PPP users in the current ISP domain. This applies to the case where an interface serves a great amount of PPP users but with inadequate address resources for allocation. For example, an Ethernet interface running PPPoE can accommodate 4095 users at most. However, only one address pool with up to 1024 addresses can be configured on its Virtual Template (VT). This is obviously far from what is required. To address the issue, you can configure address pools for ISP domains and assign addresses from them to their PPP users. Related command: remote address.
Example
# Configure the local IP address pool 0 with the address range of 129.102.0.1 to 129.102.0.10.
[3Com] domain 3Com163.net [3Com-isp-3Com163.net] ip pool 0 129.102.0.1 129.102.0.10
1.1.8 level
Syntax
level level undo level
View
Local user view
Parameter
level: Specifies user priority level, an integer ranging from 0 to 3.
Description
Use the level command to configure user priority level. Use the undo level command to restore the default user priority level. By default, user priority level is 0. Related command: local user.
Note: If the configured authentication mode is none authentication or password authentication, the command level that a user can access after login depends on the priority of user interface. In the case of authentication requiring both username and password, however, the accessible command level depends on user priority level.
Example
# Set the priority level of the user to 3.
[3Com-luser-3Com1] level 3
1.1.9 local-user
Syntax
local-user user-name undo local-user { user-name | all }
View
System view
Parameter
user-name: Specifies a local username with a character string not exceeding 80 characters, excluding forward slashes (/), colons (:), asterisks (*), question marks (?), less-than signs (<), and greater-than signs (>). The @ sign can be used only once in one username. The username without domain name (the part before @, namely the user ID) cannot exceed 55 characters. user-name is case-insensitive, so UserA and usera are the same.
all: All the users.
Description
Use the local-user command to add a local user and enter the local user view. Use the undo local-user command to remove the specified local user. By default, no local user is configured. Related command: display local-user.
Example
# Add a local user named 3Com1.
[3Com] local-user 3Com1 [3Com-luser-3Com1]
1.1.10 local-user password-display-mode

Syntax
local-user password-display-mode { cipher-force | auto } undo local-user password-display-mode
View
System view
Parameter
cipher-force: Forced cipher mode specifies that the passwords of all the accessed users must be displayed in cipher text. auto: The auto mode specifies that a user is allowed to use the password command to set a password display mode.
Description
Use the local-user password-display-mode command to configure the password display mode of all the local users. Use the undo local-user password-display-mode command to restore the default password display mode of all the local users. If cipher-force applies, the effort of specifying in the password command to display passwords in simple text is rendered useless. By default, auto applies when displaying passwords of local users. Related command: display local-user and password.
Example
# Force all the local users to have passwords displayed in cipher text.
[3Com] local-user password-display-mode cipher-force
1.1.11 password
Syntax
password { simple | cipher } password undo password
View
Local user view
Parameter
simple: Specifies to display passwords in simple text. cipher: Specifies to display passwords in cipher text. password: Defines a password, which is a character string of up to 16 characters if it is in simple text, or of up to 24 characters if it is in cipher text.
Description
Use the password command to configure a password for a local user. Use the undo password command to cancel the password of the local user. If local-user password-display-mode cipher-force applies, the effort of specifying in the password command to display passwords in simple text is rendered useless. Related command: display local-user.
Example
# Display the password of the user 3Com1 in simple text, with the password being 20030422.
[3Com-luser-3Com1] password simple 20030422
1.1.12 scheme
Syntax
scheme { radius-scheme radius-scheme-name hwtacacs-scheme-name [ local ] | local | none } [ local ] | hwtacacs-scheme
undo scheme { radius-scheme | hwtacacs-scheme | none }
View
ISP domain view
Parameter
radius-scheme-name: RADIUS scheme, a character string not exceeding 32 characters hwtacacs-scheme-name: HWTACACS scheme, a character string not exceeding 32 characters local: Local authentication none: No authentication
Description
Use the scheme command to configure the AAA scheme to be referenced by the current ISP domain. Use the undo scheme command to restore the default AAA scheme. The default AAA scheme in the system is local. With this command the current ISP domain can reference a RADIUS/HWTACACS scheme that has been configured. When the radius-scheme radius-scheme-name local command or the hwtacacs-scheme hwtacacs-scheme-name local command is configured, the local scheme applies as a backup scheme if the RADIUS or TACACS server is not available. If the RADIUS or TACACS server is available, local authentication is not used. If the local or none scheme applies as the first scheme, no RADIUS or HWTACACS scheme can be adopted. Related command: radius scheme and hwtacacs scheme.
Example
# Specify the current ISP domain, 3Com163.net, to use the RADIUS scheme 3Com.
[3Com-isp-3Com163.net] scheme radius 3Com
# Set the authentication scheme referenced by the ISP domain 3Com to radius-scheme rd and use the local scheme as the backup.
[3Com-isp-3Com] scheme radius-scheme rd local
# Set the authentication scheme referenced by the ISP domain 3Com to hwtacacs-scheme hwtac and use the local scheme as the backup.
[3Com-isp-3Com] scheme hwtacacs-scheme hwtac local
1.1.13 service-type
Syntax
service-type { telnet | ssh | terminal | pad } undo service-type { telnet | ssh | terminal | pad }
View
Local user view
Parameter
telnet: Authorizes the user to use the Telnet service. ssh:Authorizes the user to use the SSH service. terminal: Authorizes the user to use the terminal service (login from the Console, AUX or Asyn port). pad: Authorizes the user to use the PAD service.
Description
Use the service-type command to configure a service type for a particular user. Use the undo service-type command to delete one or all service types configured for the user. By default, no service is available for the user. Related command: service-type ppp and service-type ftp.
Example
# Authorize the user to use the Telnet service.
[3Com-luser-3Com1] service-type telnet
1.1.14 service-type ftp

Syntax
service-type ftp [ ftp-directory directory] undo service-type ftp [ ftp-directory ]
View
Local user view
Parameter
ftp-directory directory: Specifies a directory accessible for the FTP user.
Description
Use the service-type ftp command to specify a directory accessible for the FTP user. Use the undo service-type ftp command to restore the default directory accessible for the FTP user. By default, no services of any type are authorized to any user and access of anonymous FTP users is not allowed, but a user that is granted the FTP service is authorized to access the root directory "flash:/". Related command: service-type and service-type ppp.
Example
# Authorize the user to use the FTP service.
[3Com-luser-3Com1] service-type ftp
1.1.15 service-type ppp

Syntax
service-type ppp [ callback-nocheck | callback-number callback-number | call-number call-number [ : subcall-number ] ] undo service-type ppp [ callback-nocheck | callback-number | call-number ]
View
Local user view
Parameter
callback-nocheck: Specifies PPP user callback without authentication. callback-number callback-number: Specifies a callback number. call-number call-number: Specifies a caller number in ISDN user authentication, with a length up to 64 bytes. [ : subcall-number ]: Specifies the sub-caller number. If included, the total length of it plus the caller number cannot exceed 62 bytes.
Description
Use the service-type command to configure the callback attribute and caller number of the PPP user.
Use the undo service-type command to restore their default settings. By default, no services of any type are authorized to any users; if the PPP service is authorized, call back without authentication applies and no callback number is specified; and the system does not authenticate the caller number of ISDN users. Related command: service-type and service-type ftp.
Example
# Set PPP user to call back without authentication.
[3Com-luser-3Com1] service-type ppp callback-nocheck
1.1.16 state
Syntax
state { active | block }
View
ISP domain view, local user view
Parameter
active: Configured to allow users in the current ISP domain or the current local user to request for network services. block: Configured to block users in the current ISP domain or the current local user to request for network services.
Description
Use the state command to configure the state of the current ISP domain or local user. By default, both ISP domain (in ISP domain view) and local user (in local user view) are in active state upon their creation (in ISP domain view). Every ISP domain can be active or blocked. If an ISP domain is configured to be active, the supplicants in it can request for network services; whereas in the block state, its users are disallowed to request for any network service, which does not affect the users currently online. This also applies to local users. Related command: domain.
Example
# Set the state of the current ISP domain "3Com163.net" to block. The supplicants in this domain cannot request for network services.
[3Com-isp-3Com163.net] state block
# Set the state of the user "3Com1" to block.

[3Com-luser-3Com1] state block
1.2 RADIUS Protocol Configuration Commands

1.2.1 data-flow-format
Syntax
data-flow-format data { byte | giga-byte | kilo-byte | mega-byte } packet { giga-packet | kilo- packet | mega-packet | one-packet } undo data-flow-format
View
RADIUS view
Parameter
data: Sets data unit. byte: Data flows are sent in bytes. giga-byte: Data flows are sent in gigabytes. kilo-byte: Data flows are sent in kilobytes. mega-byte: Data flows are sent in megabytes. packet: Sets data packet unit. giga-packet: Data packets are sent in giga-packets. kilo-packet: Data packets are sent in kilo-packets. mega-packet: Data packets are sent in mega-packets. one-packet: Data packets are sent in the units of one-packet.
Description
Use the data-flow-format command to configure the unit in which data flows are sent to a RADIUS Server. Use the undo data-flow-format command to restore the unit to the default setting. By default, data flows are sent in bytes and data packets in units of one-packet. Related command: display radius.
Example
# Send data flows and packets destined for the RADIUS server "3Com" in kilobytes and kilo-packets.
[3Com-radius-3Com] data-flow-format data kilo-byte packet kilo-packet
1.2.2 debugging radius

Syntax
debugging radius packet undo debugging radius packet
View
User view
Parameter
packet: Enables packet debugging.
Description
Use the debugging radius command to enable RADIUS debugging. Use the undo debugging radius command to disable RADIUS debugging. By default, RADIUS debugging is disabled.
Example
# Enable RADIUS debugging.
<3Com> debugging radius packet
1.2.3 display radius

Syntax
display radius [ radius-scheme-name | statistics ]
View
Any view
Parameter
radius-scheme-name: Specifies a RADIUS scheme with a string not exceeding 32 characters and excluding forward slashes (/), colons (:), asterisks (*), question marks (?),
less-than signs (<), and greater-than signs (>). If no scheme is specified, all RADIUS schemes are displayed. statistics: Displays statistics.
Description
Use the display radius command to view the configuration information about the specified or all RADIUS schemes or to view statistics about RADIUS. By default, the configuration information about all RADIUS schemes is displayed. Related command: radius scheme.
Example
# Display the configurations of all RADIUS schemes.
<3Com> display radius -----------------------------------------------------------------SchemeName =default_system =127.0.0.1 =127.0.0.1 =0.0.0.0 =0.0.0.0 Port=1645 Port=1646 Port=1812 Port=1813 Index=0 Type=3Com
Primary Auth IP Primary Acct IP Second Second Auth IP Acct IP
State=block State=block State=block State=block
Auth Server Encryption Key= 3Com Acct Server Encryption Key= 3Com Accounting method = required TimeOutValue(in second)=3 RetryTimes=3 RealtimeACCT(in minute)=12 Permitted send realtime PKT failed counts =5
Retry sending times of noresponse acct-stop-PKT =500 Quiet-interval(min) Username format Data flow unit Packet unit =5 =without-domain =Byte =1
-----------------------------------------------------------------SchemeName =system =127.0.0.1 =127.0.0.1 =0.0.0.0 =0.0.0.0 Port=1645 Port=1646 Port=1812 Port=1813 Index=1 Type=3Com
Primary Auth IP Primary Acct IP Second Second Auth IP Acct IP
State=active State=active State=block State=block
Auth Server Encryption Key= 3Com Acct Server Encryption Key= 3Com

Accounting method = required
TimeOutValue(in second)=3 RetryTimes=3 RealtimeACCT(in minute)=12 Permitted send realtime PKT failed counts =5
Retry sending times of noresponse acct-stop-PKT =500 Quiet-interval(min) Username format Data flow unit Packet unit =5 =without-domain =Byte =1
-----------------------------------------------------------------Total 2 RADIUS scheme(s). 2 listed
Table 1-1 Information about RADIUS server configuration Field SchemeName Index Type Primary Auth IP/ Port/ State Primary Acct IP/ Port/ State Second Auth IP/ Port/ State Second Acct IP/ Port/ State Auth Server Encryption Key Acct Server Encryption Key TimeOutValue (seconds) Permitted send realtime PKT failed counts Retry sending times of noresponse acct-stop-PKT Quiet-interval(min) Username format Data flow unit Description RADIUS scheme name Index number of the RADIUS scheme Type of the RADIUS scheme IP address/access port number/current state of the primary authentication server IP address/access port number/current state of the primary accounting server IP address/access port number/current state of the secondary authentication server IP address/access port number/current state of the secondary accounting server Shared key of the authentication server Shared key of the accounting server Duration of the RADIUS server timeout timer The maximum number of realtime-accounting packet transmission attempts The maximum number of retries allowed when sending a buffered stop-accounting packet The interval for the primary server to resume the active state. Format of username Unit of data flows
Field Packet unit Unit of packets
Description
1.2.4 display radius statistics

Syntax
display radius statistics
View
Any view
Parameter
None
Description
Use the display radius statistics command to view the statistics information on RADIUS packets. The displayed packet information can help you troubleshoot RADIUS faults. Related command: radius scheme.
Example
# Display the statistics information on RADIUS packets.
<3Com> display radius statistics state statistic(total=1048): DEAD=1047 AcctStart=0 AcctStop=0 StateErr=0 AuthProc=0 RLTSend=0 OnLine=1 AuthSucc=0 RLTWait=1 Stop=0
Received and Sent packets statistic: Sent PKT total Resend Times 1 2 Total :38 Received PKT total:2
Resend total 12 12 24
RADIUS received packets statistic: Code= 2,Num=1 Code= 3,Num=0 ,Err=0 ,Err=0

Code= 5,Num=1 Code=11,Num=0 ,Err=0 ,Err=0
Running statistic: RADIUS received messages statistic: Normal auth request EAP auth request Account request Account off request PKT auth timeout PKT acct_timeout Realtime Account timer PKT response EAP reauth_request PORTAL access Update ack PORTAL access ack Session ctrl pkt RADIUS sent messages statistic: Auth accept Auth reject EAP auth replying Account success Account failure Cut req RecError_MSG_sum:0 Timer_Err State Mismatch :0 :0 , Num=0 , Num=0 , Num=0 , Num=0 , Num=0 , Num=0 SndMSG_Fail_sum :0 Alloc_Mem_Err Other_Error :0 :0 , Num=13 , Num=0 , Num=1 , Num=0 , Num=36 , Num=0 , Num=0 , Num=2 , Num=0 , Num=0 , Num=0 , Num=0 , Num=0 , Err=0 , Err=0 , Err=0 , Err=0 , Err=12 , Err=0 , Err=0 , Err=0 , Err=0 , Err=0 , Err=0 , Err=0 , Err=0 , Succ=13 , Succ=0 , Succ=1 , Succ=0 , Succ=24 , Succ=0 , Succ=0 , Succ=2 , Succ=0 , Succ=0 , Succ=0 , Succ=0 , Succ=0
No-response-acct-stop packet =0 Discarded No-response-acct-stop packet for buffer overflow =0
1.2.5 display stop-accounting-buffer

Syntax
display stop-accounting-buffer { radius-scheme radius-scheme-name | session-id session-id | time-range start-time stop-time | user-name user-name }
View
Any view
Parameter
radius-scheme radius-scheme-name: Displays information on buffered stop-accounting requests related to the RADIUS scheme specified by radius-scheme-name. It is a string not exceeding 32 characters and excluding forward slashes (/), colons (:), asterisks (*), question marks (?), less-than signs (<), and greater-than signs (>). session-id session-id: Displays information on the buffered stop-accounting requests related to the session ID specified by session-id, a character string not exceeding 50 characters. time-range start-time stop-time: Displays the buffered stop-accounting requests by the time range of requests. It is specified by start-time and stop-time in the format of hh:mm:ss-mm/dd/yyyy or hh:mm:ss-yyyy/mm/dd, that is, hours:minutes:seconds-months/days/years or hours:minutes:seconds-years/months/days. user-name user-name : Displays information on the buffered stop-accounting requests by user ID, or user name excluding the domain name. This user name comprises of up to 55 characters, excluding forward slashes (/), colons (:), asterisks (*), question marks (?), less-than signs (<), and greater-than signs (>).
Description
Use the display stop-accounting-buffer command to view information on the stop-accounting requests buffered in the router by RADIUS scheme, session ID, or time range. The displayed packet information can help you troubleshoot RADIUS faults. If no response is received after sending a stop-accounting request to a RADIUS server, the router buffers the request packet and retransmits it. The number of allowed transmission attempts can be set using the retry stop-accounting command. Related command: reset stop-accounting-buffer, stop-accounting-buffer enable, and retry stop-accounting.
Example
# Display information on the buffered stop-accounting requests between 0:0:0 and 23:59:59 on August 31, 2002.
<3Com> display stop-accounting-buffer time-range 0:0:0-08/31/2002
23:59:59-08/31/2002 Total find 0 record
1.2.6 key
Syntax
key { accounting | authentication } string undo key { accounting | authentication }
View
RADIUS view
Parameter
accounting: Configures a shared key for encrypting RADIUS accounting packets. authentication: Configures a shared key for encrypting RADIUS authentication/authorization packets. string: Shared key, a character string not exceeding 16 characters and excluding /, : , *, ? , < and >. By default, the key is 3Com.
Description
Use the key command to configure a shared key for encrypting RADIUS authentication/authorization or accounting packets. Use the undo key command to restore the default shared key. The RADIUS client (router system) and RADIUS server use MD5 algorithm to encrypt the exchanged packets. The two ends verify packets using a shared key. Only when the same key is used can both ends accept the packets from each other and give responses. Therefore, it is necessary to ensure that the same key is set on the router and the RADIUS server. If the authentication/authorization and accounting are performed on two server devices with different shared keys you must set one shared key for each. Related command: primary accounting, primary authentication, and radius scheme.
Example
# In the RADIUS scheme 3Com, set the shared key used for encrypting authentication/authorization packets to hello.
[3Com-radius-3Com] key authentication hello
# In the RADIUS scheme 3Com, set the shared key for encrypting accounting packets to ok.
[3Com-radius-3Com] key accounting ok
1.2.7 nas-ip
Syntax
nas-ip ip-address undo nas-ip
View
RADIUS view
Parameter
ip-address: IP address in dotted decimal format.
Description
Use the nas-ip command to set the source IP address of the network access server (NAS, the router in this manual), so that all packets destined for the RADIUS server carry the same source IP address. Use the undo nas-ip command to cancel the configuration. Specifying a source address for the RADIUS packets to be transmitted can avoid the situation where the packets sent back by the RADIUS server cannot be received as the result of a physical interface failure. The address of a loopback interface is usually used as the source address. By default, the source IP address of packets is the IP address of the output port. Related command: display radius.
Example
# Set the source IP address that is carried in the RADIUS packets sent by the NAS (the router) to 10.1.1.1.
[3Com] radius scheme test1 [3Com-radius-test1] nas-ip 10.1.1.1
1.2.8 primary accounting

Syntax
primary accounting ip-address [ port-number ] undo primary accounting
View
RADIUS view
Parameter
ip-address: IP address in dotted decimal format. By default, IP address of the primary accounting server is 0.0.0.0. port-number: UDP port number of the primary accounting server, which is ranging from 1 to 65535 and defaults to 1813.
Description
Use the primary accounting command to configure IP address and port number of the primary RADIUS accounting server. Use the undo primary accounting command to restore the default IP address and port number of the primary RADIUS accounting server. After creating a RADIUS scheme, you are supposed to configure an IP address and UDP port of each RADIUS server (primary/secondary authentication/authorization or accounting server). The configuration of RADIUS servers is at your discretion except that there must be at least one authentication/authorization server and one accounting server. Besides, ensure that the RADIUS service port settings on the router are consistent with the port settings on the RADIUS servers. Related command: key, radius scheme, and state.
Example
# Set the IP address of the primary accounting server in the RADIUS scheme 3Com to 10.110.1.2 and use the UDP port 1813 to provide the RADIUS accounting service.
[3Com-radius-3Com] primary accounting 10.110.1.2 1813
1.2.9 primary authentication

Syntax
primary authentication ip-address [ port-number ] undo primary authentication
View
RADIUS view
Parameter
ip-address: IP address in dotted decimal format. By default, the IP address of the primary authentication/authorization server is 0.0.0.0. port-number: UDP port number of the primary authentication/authorization server, which is ranging from 1 to 65535 and defaults to 1812.
Description
Use the primary authentication command to configure an IP address and port number of the primary RADIUS authentication/authorization server. Use the undo primary authentication command to restore the default IP address and port number of the primary RADIUS authentication/authorization server. After creating a RADIUS scheme, you are supposed to configure an IP address and UDP port of each RADIUS server (primary/secondary authentication/authorization or accounting server). The configuration of RADIUS servers is at your discretion except that there must be at least one authentication/authorization server and one accounting server. Ensure that the RADIUS service port settings on the router are consistent with the port settings on the RADIUS servers. Related command: key, radius scheme, and state.
Example
# Set IP address of the primary authentication/authorization server in the RADIUS scheme 3Com to 10.110.1.1 and use the UDP port 1812 to provide the RADIUS authentication/authorization service.
[3Com-radius-3Com] primary authentication 10.110.1.1 1812
1.2.10 radius scheme

Syntax
radius scheme radius-scheme-name undo radius scheme radius-scheme-name
View
System view
Parameter
radius-scheme-name: RADIUS scheme name, a character string not exceeding 32 characters and excluding /, :, *, ?, < and >.
Description
Use the radius scheme command to configure a RADIUS scheme and enter its view. Use the undo radius scheme command to delete the specified RADIUS scheme. By default, the RADIUS scheme named default_system exists in the system, with all attributes being defaults that are not configurable. RADIUS protocol is configured scheme by scheme. Every RADIUS scheme must at least specify an IP address and UDP port number of RADIUS authentication/authorization/accounting server, and the parameters necessary for the RADIUS client (a router) to interact with the servers. You must first create a RADIUS scheme and enter its view before you can perform RADIUS protocol configurations. A RADIUS scheme can be referenced by several ISP domains at the same time. The undo radius scheme command can be used to delete any RADIUS scheme except for the default. Note that a RADIUS scheme currently being used by any online users cannot be removed. Related command: key, retry realtime-accounting, scheme, timer realtime-accounting, stop-accounting-buffer enable, retry stop-accounting, server-type, state, user-name-format, retry, display radius and display radius statistics.
Example
# Create a RADIUS scheme named 3Com and enter its view.
[3Com] radius scheme 3Com [3Com-radius-3Com]
1.2.11 radius nas-ip

Syntax
radius nas-ip ip-address undo radius nas-ip
View
System view
Parameter
ip-address: Specifies a source IP address, which must be the address of this device. It cannot be the address of all zeros, or a host/network address of class A, B, or C, or an address starting with 127.
Description
Use the radius nas-ip command to specify the source address of the RADIUS packet sent from NAS. Use the undo radius nas-ip command to restore the default setting. By specifying the source address of the RADIUS packet, you can avoid unreachable packets as returned from the server upon interface failure. The source address is normally recommended to be a loopback interface address. By default, the source address is not specified, that is, the address of the interface sending the packet serves as the source address. This command specifies only one source address; therefore, the newly configured source address may overwrite the original one.
Example
# Configure the router to send RADIUS packets from 129.10.10.1.
[3Com] radius nas-ip 129.10.10.1
1.2.12 reset radius statistics

Syntax
reset radius statistics
View
User view
Parameter
None
Description
Use the reset radius statistics command to clear the statistic information related to the RADIUS protocol. Related command: display radius.
Example
# Clear the RADIUS protocol statistics.
<3Com> reset radius statistics
1.2.13 reset stop-accounting-buffer

Syntax
reset stop-accounting-buffer { radius-scheme radius-scheme-name | session-id session-id | time-range start-time stop-time | user-name user-name }
View
System view
Parameter
radius-scheme radius-scheme-name: Clears the buffered stop-accounting requests related to the RADIUS scheme specified by radius-scheme-name, a character string not exceeding 32 characters and excluding /, :, *, ?, < and >. session-id session-id: Clears the buffered stop-accounting requests related to the session ID specified by session-id, a character string not exceeding 50 characters. time-range start-time stop-time: Clears the buffered stop-accounting requests by the time range of requests. The time range is specified by start-time and stop-time in the format of hh:mm:ss-mm/dd/yyyy or hh:mm:ss-yyyy/mm/dd, that is, hours:minutes:seconds-months/days/years or hours:minutes:seconds-years/months/days. user-name user-name : Clears the buffered stop-accounting requests by user ID, or user name excluding the domain name. This user name comprises of up to 55 characters, excluding forward slashes (/), colons (:), asterisks (*), question marks (?), less-than signs (<), and greater-than signs (>).
Description
Use the reset stop-accounting-buffer command to clear the buffered stop-accounting requests that have no responses. If receiving no response after sending a stop-accounting request to a RADIUS server, the router buffers the request packet and retransmits it. The number of allowed transmission attempts can be set using the retry stop-accounting command. You can clear the buffered stop-accounting requests by RADIUS scheme, session ID, username, or time range. Related commands: stop-accounting-buffer enable, retry stop-accounting, and display stop-accounting-buffer.
Example
# Clear the buffered stop-accounting requests related to the user
user0001@3Com163.net.
<3Com> reset stop-accounting-buffer user-name user0001@3Com163.net
# Clear the buffered stop-accounting requests in the time range 0:0:0 to 23:59:59 on August 31, 2002.
<3Com> reset stop-accounting-buffer time-range 0:0:0-08/31/2002
23:59:59-08/31/2002
1.2.14 retry
Syntax
retry retry-times undo retry
View
RADIUS view
Parameter
retry-times: The maximum number of request attempts, which is ranging from 1 to 20 and defaults to 3.
Description
Use the retry command to configure the number of RADIUS request attempts. Use the undo retry command to restore the default. In the RADIUS protocol, UDP applies to provide unreliable transmission. If the NAS receives no response from the current RADIUS server when the response timeout timer expires, it has to retransmit the RADIUS request. If the number of request attempts exceeds the specified retry-times, the NAS considers that the current RADIUS server is disconnected and turns to another RADIUS server. Appropriately set the retry-times parameter to maintain an acceptable system response speed. Related command: radius scheme.
Example
# With the RADIUS scheme "3Com", a RADIUS request can be sent up to five times.
[3Com-radius-3Com] retry 5
1.2.15 retry realtime-accounting

Syntax
retry realtime-accounting retry-times undo retry realtime-accounting
View
RADIUS view
Parameter
retry-times: The maximum number of real-time accounting request attempts that have no responses. It is in the range 1 to 255 and defaults to 5.
Description
Use the retry realtime-accounting command to configure the maximum number of real-time accounting request attempts allowed to have no responses. Use the undo retry realtime-accounting command to restore the default. RADIUS server usually checks whether a user is online using a timeout timer. If the RADIUS server has not received the real-time accounting packet from NAS, it will consider that there is line or device failure and stop accounting. Accordingly, it is necessary to disconnect the user at the NAS end and on RADIUS server synchronously when some unexpected failure occurs. 3Com Routers support to set maximum times of real-time accounting request failing to be responded. NAS will disconnect the user if it has not received real-time accounting response from the RADIUS server for the specified times. Suppose the response timeout timer of the RADIUS server is T and the real-time accounting interval of NAS is t. Set T to 3, t to 12, and the maximum number of real-time request retries to 5. With these values being configured, the NAS generates an accounting request every 12 minutes, and retries if no response is received within 3 minutes. If no response is received after five attempts, the NAS assumes that this accounting fails. Normally, the result of retry-times multiple by T is smaller than t. Related command: radius scheme and timer realtime-accounting.
Example
# Configure the RADIUS scheme "3Com" to allow up to ten real-time accounting request attempts.
[3Com-radius-3Com] retry realtime-accounting 10
1.2.16 retry stop-accounting

Syntax
retry stop-accounting retry-times undo retry stop-accounting
View
RADIUS view
Parameter
retry-times: Specifies the maximal retransmission times after stop-accounting request,. ranging from 10 to 65535. By default, the value is 500.
Description
Use the retry stop-accounting command to configure the maximal retransmission times after stop-accounting request. Use the undo retry stop-accounting command to restore the retransmission times to the default value. Since the stop-accounting request concerns account balance and will affect the amount of charge, which is very important for both the user and ISP, NAS shall make its best effort to send the message to the RADIUS accounting server. Accordingly, if the message from the router to RADIUS accounting server has not received a response, the router will save it in the local buffer and retransmit it until the server responds, or discard the messages after transmitting for specified times. Related command: reset stop-accounting-buffer, radius scheme, display
stop-accounting-buffer.
Example
# Indicate that, when stop-accounting request for the server in the RADIUS scheme 3Com, the router system will retransmit the packets for up to 1000 times.
[3Com-radius-3Com] retry stop-accounting 1000
1.2.17 secondary accounting

Syntax
secondary accounting ip-address [ port-number ] undo secondary accounting
View
RADIUS view
Parameter
ip-address: IP address, in dotted decimal format. By default, the IP address of secondary accounting server is at 0.0.0.0. port-number: Specifies the UDP port number, ranging from 1 to 65535. By default, the accounting service is provided through UDP 1813.
Description
Use the secondary accounting command to configure the IP address and port number for the secondary RADIUS accounting server. Use the undo secondary accounting command to restore the IP address and port number to the defaults. For detailed information refer to the description of the primary accounting command. Related command: key, radius scheme, and state.
Example
# Set the IP address of the secondary accounting server of RADIUS scheme, 3Com, to 10.110.1.1 and the UDP port 1813 to provide RADIUS accounting service.
[3Com-radius-3Com] secondary accounting 10.110.1.1 1813
1.2.18 secondary authentication

Syntax
secondary authentication ip-address [ port-number ] undo secondary authentication
View
RADIUS view
Parameter
ip-address: IP address in dotted decimal format. By default, the IP address of the secondary authentication/authorization server is 0.0.0.0. port-number: UDP port number, ranging from 1 to 65535. By default, the authentication/authorization service is provided through UDP 1812
Description
Use the secondary authentication command to configure the IP address and port number of the secondary RADIUS authentication/authorization server. Use the undo secondary authentication command to restore the IP address and port number to the defaults. For detailed information refer to the description of the primary authentication command. Related command: key, radius scheme, and state.
Example
# Set IP address of the secondary authentication/authorization server in the RADIUS scheme 3Com to 10.110.1.2 and use the UDP port 1812 to provide the RADIUS authentication/authorization service.
[3Com-radius-3Com] secondary authentication 10.110.1.2 1812
1.2.19 server-type
Syntax
server-type { 3Com | standard }
View
RADIUS view
Parameter
3Com: Specifies the RADIUS server of 3Com type (generally CAMS), which requires the RADIUS client (router system) and RADIUS server to interact according to the procedures and packet format provisioned by the private RADIUS protocol of 3Com Corporation. standard: Specifies the RADIUS server of Standard type, which requires the RADIUS client end (router system) and RADIUS server to interact according to the regulation and packet format of standard RADIUS protocol (RFC 2138/2139 or newer).
Description
Use the server-type command to configure the RADIUS server type supported by the router. By default, the value is standard. Related command: radius scheme.
Example
# Set RADIUS server type of RADIUS scheme 3Com to 3Com.
[3Com-radius-3Com] server-type 3Com
1.2.20 state
Syntax
state { primary | secondary } { accounting | authentication } { block | active }
View
RADIUS view
Parameter
primary: Sets the state of the primary RADIUS server. secondary: Sets the state of the secondary RADIUS server. accounting: Sets the state of RADIUS accounting server. authentication: Sets the state of RADIUS authentication/authorization server. block: Sets state of the RADIUS server to block. active: Sets state of the RADIUS server to active, namely the normal operation state.
Description
Use the state command to configure the state of a RADIUS server. By default, all the RADIUS servers in every RADIUS scheme are in active state. When the primary server (accounting or authentication) in a RADIUS scheme becomes unavailable, the NAS automatically turns to the secondary server. After the primary one recovers however, the NAS does not resume the communication with it at once; instead, the NAS continues the communication with the secondary one and turns to the primary one only after the secondary one fails. To have the NAS communicate with the primary server right after its recovery, you can manually set the state of the primary server to active. When both the primary and secondary servers are active or blocked, the NAS only sends packets to the primary server. Related command: radius scheme, primary authentication, secondary authentication, primary accounting, secondary accounting.
Example
# Set the state of the secondary authentication server in the RADIUS scheme 3Com to active.
[3Com-radius-3Com] state secondary authentication active
1.2.21 stop-accounting-buffer enable

Syntax
stop-accounting-buffer enable undo stop-accounting-buffer enable
View
RADIUS view
Parameter
None
Description
Use the stop-accounting-buffer enable command to enable the router to buffer the stop-accounting requests that have no responses. Use the undo stop-accounting-buffer enable command to disable the router from buffering the stop-accounting requests that have no responses. By default, the router is enabled to buffer the stop-accounting requests that have no responses. Since the stop-accounting packet affects the charge to a user, it important to both users and ISPs. Therefore, the NAS makes its best effort to send every stop-accounting request to RADIUS accounting servers. If receiving no response after a specified period of time, the NAS buffers and resends the packet until receiving a response or discards the packet when the number of transmission retries reaches the configured limit. Related command: reset stop-accounting-buffer, radius scheme, display
stop-accounting-buffer.
Example
# In the RADIUS scheme 3Com, enable the router to buffer the stop-accounting requests that have no responses.
[3Com-radius-3Com] stop-accounting-buffer enable
1.2.22 timer quiet

Syntax
timer quiet minutes undo timer quiet
View
RADIUS view
Parameter
minutes: Ranges from 1 to 255. By default, the primary server must wait five minutes before it can resume the active state.
Description
Use the timer quiet command to set the duration that the primary server must wait before it can resume the active state. Use the undo timer quiet command to restore the default (five minutes). Related command: display radius.
Example
# Set the quiet timer for the primary server to ten minutes.
[3Com] radius scheme test1 [3Com-hwtacacs-test1] timer quiet 10
1.2.23 timer realtime-accounting

Syntax
timer realtime-accounting minutes undo timer realtime-accounting
View
RADIUS view
Parameter
minutes: Real-time accounting interval, which is a multiple of 3 in the range 3 to 60 minutes and defaults to 12.
Description
Use the timer realtime-accounting command to configure a real-time accounting interval. Use the undo timer realtime-accounting command to restore the default interval. The setting of real-time accounting interval is indispensable to real-time accounting. After an interval value is set, the NAS transmits the accounting information of online users to the RADIUS accounting server at intervals of this value. The setting of real-time accounting interval somewhat depends on the performance of the NAS and the RADIUS server. A shorter interval requires higher device performance. You are therefore recommended to adopt a longer interval when there are a large number of users (more than 1000, inclusive). The following table recommends the ratio of minutes to the number of users. Table 1-2 Recommended ratio of minutes to the number of users Number of users 1 99 100 499 500 999 1000 3 6 12 15 Real-time accounting interval (minute)
Related command: retry realtime-accounting and radius scheme.
Example
# Set the real-time accounting interval in the RADIUS scheme 3Com to 51 minutes.
[3Com-radius-3Com] timer realtime-accounting 51
1.2.24 timer response-timeout

Syntax
timer response-timeout seconds undo timer response-timeout
View
RADIUS view
Parameter
seconds: RADIUS server response timeout timer, ranging from 1 to 10 seconds. By default, the value is 3.
Description
Use the timer response-timeout command to configure the RADIUS server response timer. Use the undo timer command to restore the default. If the NAS receives no response from the RADIUS server after sending a RADIUS request (authentication/authorization or accounting request) for a period, the NAS resends the request, thus ensuring the user can obtain the RADIUS service. You can specify this period by setting the RADIUS server response timeout timer, taking into consideration the network condition and the desired system performance. Related command: radius scheme and retry.
Example
# Set the response timeout timer in the RADIUS scheme 3Com to 5 seconds.
[3Com-radius-3Com] timer response-timeout 5
1.2.25 user-name-format
Syntax
user-name-format { with-domain | without-domain }
View
RADIUS view
Parameter
with-domain: Includes the ISP domain name in the username sent to the RADIUS server. without-domain: Excludes the ISP domain name from the username sent to the RADIUS server.
Description
Use the user-name-format command to configure the format of the username to be sent to a RADIUS server. By default, ISP domain name is included in the username.
The supplicants are generally named in the userid@isp-name format, of which isp-name is used by the router to decide the ISP domain to which a supplicant belongs. Some earlier RADIUS servers, however, cannot recognize usernames including ISP domain name. Before sending a username including a domain name to such a RADIUS server, the router must remove the domain name. This command is provided for you to decide whether to include a domain name in a username to be sent to a RADIUS server.
Note: If a RADIUS scheme defines that the username is sent without the ISP domain name, do not apply the RADIUS scheme to more than one ISP domain in order to avoid the confused situation where the RADIUS server regards two users in different ISP domains but with the same userid as one.
Related command: radius scheme.
Example
# Send the username without the domain name to the RADIUS servers in the RADIUS scheme "3Com".
[3Com-radius-3Com] user-name-format without-domain
1.3 HWTACACS Configuration Commands

1.3.1 data-flow-format
Syntax
data-flow-format data [ byte | giga-byte | kilo-byte | mega-byte ] data-flow-format packet [ giga-packet | kilo-packet | mega-packet | one-packet ] undo data-flow-format [ data | packet ]
View
HWTACACS view
Parameter
data: Sets data unit. byte: Sets 'byte' as the unit of data flow. giga-byte: Sets 'giga-byte' as the unit of data flow.
kilo-byte: Sets 'kilo-byte' as the unit of data flow. mega-byte: Sets 'mega-byte' as the unit of data flow. packet: Sets data packet unit. giga-packet: Sets 'giga-packet' as the unit of packet flow. kilo-packet: Sets 'kilo-packet' as the unit of packet flow. mega-packet: Sets 'mega-packet' as the unit of packet flow. one-packet: Sets 'one-packet' as the unit of packet flow.
Description
Use the data-flow-format command to configure the unit of data flows sent to the TACACS server. Use the undo data-flow-format command to restore the default. By default, the data unit is byte and the data packet unit is one-packet. Related command: display hwtacacs.
Example
# Set the unit of data flow destined for the HWTACACS server "3Com" to be kilo-byte and the data packet unit be kilo-packet.
[3Com- hwtacacs-3Com] data-flow-format data kilo-byte packet kilo-packet
1.3.2 debugging hwtacacs

Syntax
debugging hwtacacs { all | error | event | message | receive-packet | send-packet } undo debugging hwtacacs { all | error | event | message | receive-packet | send-packet }
View
User view
Parameter
all: Specifies all HWTACACS debugging. error: Specifies error debugging. event: Specifies event debugging. message: Specifies message debugging.
receive-packet: Specifies incoming packet debugging. send-packet: Specifies outgoing packet debugging.
Description
Use the debugging hwtacacs command to enable HWTACACS debugging. Use the undo debugging hwtacacs command to disable HWTACACS debugging. By default, HWTACACS debugging is disabled.
Example
# Enable the event debugging of HWTACACS.
<3Com> debugging hwtacacs event
1.3.3 display hwtacacs

Syntax
display hwtacacs [ hwtacacs-scheme-name [ statistics ] ]
View
Any view
Parameter
hwtacacs-scheme-name: HWTACACS scheme name, a string of 1 to 32 case-insensitive characters, excluding forward slashes (/), colons (:), asterisks (*), question marks (?), less-than signs (<), and greater-than signs (>). If no HWTACACS scheme is specified, the system displays the configuration of all HWTACACS schemes. statistics: Displays complete statistics about the HWTACACS server.
Description
Use the display hwtacacs command to view configuration information of one or all HWTACACS schemes. By default, configuration information of all HWTACACS schemes is displayed. Related command: hwtacacs scheme.
Example
# View configuration information of all HWTACACS schemes.
<3Com> display hwtacacs
1.3.4 display stop-accounting-buffer

Syntax
display stop-accounting-buffer hwtacacs-scheme hwtacacs-scheme-name
View
Any view
Parameter
hwtacacs-scheme stop-accounting hwtacacs-scheme-name: related to the Displays information scheme on buffered by
requests
HWTACACS
specified
hwtacacs-scheme-name, a character string not exceeding 32 characters and excluding /, :, *, ?, < and >.
Description
Use the display stop-accounting-buffer command to view information on the stop-accounting requests buffered in the router. Related command: reset stop-accounting-buffer, stop-accounting-buffer enable, and retry stop-accounting.
Example
# Display information on the buffered stop-accounting requests related to the HWTACACS scheme 3Com".
<3Com> display stop-accounting-buffer hwtacacs-scheme 3Com
1.3.5 hwtacacs nas-ip

Syntax
hwtacacs nas-ip ip-address undo hwtacacs nas-ip
View
System view
Parameter
ip-address: Specifies a source IP address, which must be the address of this device. It cannot be the address of all zeros, or a host/network address of class A, B, or C, or an address starting with 127.
Description
Use the hwtacacs nas-ip command to specify the source address of the hwtacacs packet sent from NAS. Use the undo hwtacacs nas-ip command to restore the default setting. By specifying the source address of the hwtacacs packet, you can avoid unreachable packets as returned from the server upon interface failure. The source address is normally recommended to be a loopback interface address. By default, the source address is not specified, that is, the address of the interface sending the packet serves as the source address. This command specifies only one source address; therefore, the newly configured source address may overwrite the original one.
Example
# Configure the router to send hwtacacs packets from 129.10.10.1.
[3Com] hwtacacs nas-ip 129.10.10.1
1.3.6 hwtacacs scheme

Syntax
hwtacacs scheme hwtacacs-scheme-name undo hwtacacs scheme hwtacacs-scheme-name
View
System view
Parameter
hwtacacs-scheme-name: Specifies an HWTACACS server scheme, with a character string of 1 to 32 characters.
Description
Use the hwtacacs scheme command to enter HWTACACS Server view. If the specified HWTACACS server scheme does not exist you can create a new HWTACACS scheme. Use the .undo hwtacacs scheme command to delete an HWTACACS scheme.
Example
# Create an HWTACACS scheme named "test1" and enter the relevant HWTACACS Server view.

[3Com] hwtacacs scheme test1 [3Com-hwtacacs-test1]
1.3.7 key
Syntax
key { accounting | authentication | authorization } string undo key { accounting | authentication | authorization } string
View
HWTACACS view
Parameter
accounting: Shared key of the accounting server. authentication: Shared key of the authentication server. authorization: Shared key of the authorization server. string: The shared key, a string up to 16 characters excluding forward slashes (/), colons (:), asterisks (*), question marks (?), less-than signs (<), and greater-than signs (>).
Description
Use the key command to configure a shared key for HWTACACS authentication, authorization or accounting. Use the undo key command to delete the configuration. By default, no key is set for any TACACS server. The TACACS client (the router system) and TACACS server use the MD5 algorithm to encrypt the exchanged packets. The two ends verify packets using a shared key. Only when the same key is used can both ends accept the packets from each other and give responses. Therefore, it is necessary to ensure that the same key is set on the router and the TACACS server. If the authentication/authorization and accounting are performed on two server devices with different shared keys you must set one shared key for each. Related command: display hwtacacs.
Example
# Use hello as the shared key for HWTACACS accounting.
[3Com] hwtacacs scheme test1 [3Com-hwtacacs-test1] key accounting hello
1.3.8 nas-ip
Syntax
nas-ip ip-address undo nas-ip
View
HWTACACS view
Parameter
ip-address: IP address in dotted decimal format.
Description
Use the nas-ip command to have all the HWTACACS packets sent by the NAS (the router) carry the same source address. Use the undo nas-ip command to delete the setting. Specifying a source address for the HWTACACS packets to be transmitted can avoid the situation where the packets sent back by the TACACS server cannot be received as a result of a physical interface failure. The address of a loopback interface is usually used as the source address. By default, the source IP address of a HWTACACS packet sent by the NAS is the IP address of the output port. Related command: display hwtacacs.
Example
# Set the source IP address carried in the HWTACACS packets that are sent by the NAS to 10.1.1.1.
[3Com] hwtacacs scheme test1 [3Com-hwtacacs-test1] nas-ip 10.1.1.1
1.3.9 primary accounting

Syntax
primary accounting ip-address [ port ] undo primary accounting
View
HWTACACS view
Parameter
ip-address: IP address of the server, a valid unicast address in dotted decimal format. port: Port number of the server, which is in the range 1 to 65535 and defaults to 49.
Description
Use the primary accounting command to configure a primary TACACS accounting server. Use the undo primary accounting command to delete the configured primary TACACS accounting server. By default, IP address of TACACS accounting server is all zeros. You are not allowed to assign the same IP address to both primary and secondary accounting servers. You can configure only one primary accounting server in a HWTACACS scheme. If you repeatedly use this command the latest configuration will replace the previous one. You can remove an accounting server only when it is not being used by any active TCP connection, and the removal impacts only packets forwarded afterwards.
Example
# Configure a primary accounting server.
[3Com] hwtacacs scheme test1 [3Com-hwtacacs-test1] primary accouting 10.163.155.12 49
1.3.10 primary authentication

Syntax
primary authentication ip-address [ port ] undo primary authentication
View
HWTACACS view
Parameter
Description
Use the primary authentication command to configure a primary TACACS authentication server. Use the undo primary authentication command to delete the configured authentication server. By default, IP address of TACACS authentication server is all zeros. You are not allowed to assign the same IP address to both primary and secondary authentication servers. You can configure only one primary authentication server in a HWTACACS scheme. If you use this command repeatedly, the latest configuration will replace the previous one. You can remove an authentication server only when it is not being used by any active TCP connections, and the removal impacts only packets forwarded afterwards. Related command: display hwtacacs.
Example
# Configure a primary authentication server.
[3Com] hwtacacs scheme test1 [3Com-hwtacacs-test1] primary authentication 10.163.155.13 49
1.3.11 primary authorization

Syntax
primary authorization ip-address [ port ] undo primary authorization
View
HWTACACS view
Parameter
Description
Use the primary authorization command to configure a primary TACACS authorization server.
Use the undo primary authorization command to delete the configured primary authorization server. By default, the IP address of TACACS authorization server is all zeros. If TACACS authentication is configured for a user without TACACS authorization server, the user cannot login regardless of its user type. You are not allowed to assign the same IP address to both primary and secondary authorization servers. You can configure only one primary authorization server in a HWTACACS scheme. If you use this command repeatedly, the latest configuration will replace the previous one. You can remove an authorization server only when it is not being used by any active TCP connections, and the removal impacts only packets forwarded afterwards. Related command: display hwtacacs.
Example
# Configure a primary authorization server.
[3Com] hwtacacs scheme test1 [3Com-hwtacacs-test1] primary authorization 10.163.155.13 49
1.3.12 reset hwtacacs statistics

Syntax
reset hwtacacs statistics { accounting | authentication | authorization | all }
View
User view
Parameter
accounting: Clears all the HWTACACS accounting statistics. authentication: Clears all the HWTACACS authentication statistics. authorization: Clears all the HWTACACS authorization statistics. all: Clears all statistics.
Description
Use the reset hwtacacs statistics command to clear HWTACACS protocol statistics. Related command: display hwtacacs.
Example
# Clear all HWTACACS protocol statistics.
<3Com> reset hwtacacs statistics
1.3.13 reset stop-accounting-buffer

Syntax
reset stop-accounting-buffer hwtacacs-scheme hwtacacs-scheme-name
View
User view
Parameter
hwtacacs-scheme hwtacacs-scheme-name: Configures the deletion of the
stop-accounting requests from the buffer according to the specified HWTACACS scheme name. The hwtacacs-scheme-name specifies the HWTACACS scheme name with a character string not exceeding 32 characters, excluding /, :, *, ?, < and >.
Description
Use the reset stop-accounting-buffer command to clear the stop-accounting requests that have no response and are buffered on the router. Related command: stop-accounting-buffer enable, retry stop-accounting, display stop-accounting-buffer.
Example
# Delete the buffered stop-accounting requests that are related to the HWTACACS scheme 3Com.
<3Com> reset stop-accounting-buffer hwtacacs-scheme 3Com
1.3.14 retry stop-accounting

Syntax
retry stop-accounting retry-times undo retry stop-accounting
View
HWTACACS view
Parameter
retry-times: The maximum number of real-time accounting request attempts. It is in the range 1 to 300 and defaults to 100.
Description
Use the retry stop-accounting command to enable stop-accounting packet
retransmission and configure the maximum number of stop-accounting request attempts. Use the undo retry stop-accounting command to restore the default setting. By default, stop-accounting packet retransmission is enabled and up to 100 packets are allowed to be transmitted for each request. Related command: reset stop-accounting-buffer, hwtacacs scheme, and display stop-accounting-buffer.
Example
# Enable stop-accounting packet retransmission and allow up to 50 packets to be transmitted for each request.
[3Com] retry stop-accounting 50
1.3.15 secondary accounting

Syntax
secondary accounting ip-address [ port ] undo secondary accounting
View
HWTACACS view
Parameter
Description
Use the secondary accounting command to configure a secondary TACACS accounting server. Use the undo secondary accounting command to delete the configured secondary TACACS accounting server. By default, the IP address of TACACS accounting server is all zeros.
You are not allowed to assign the same IP address to both primary and secondary accounting servers. You can configure only one secondary accounting server in a HWTACACS scheme. If you use this command repeatedly, the latest configuration will replace the previous one. You can remove an accounting server only when it is not being used by any active TCP connections, and the removal impacts only packets forwarded afterwards.
Example
# Configure a secondary accounting server.
[3Com] hwtacacs scheme test1 [3Com-hwtacacs-test1] secondary accounting 10.163.155.12 49
1.3.16 secondary authentication

Syntax
secondary authentication ip-address [ port ] undo secondary authentication
View
HWTACACS view
Parameter
Description
Use the secondary authentication command to configure a secondary TACACS authentication server. Use the undo secondary authentication command to delete the configured secondary authentication server. By default, the IP address of TACACS authentication server is all zeros. You are not allowed to assign the same IP address to both primary and secondary authentication servers. You can configure only one primary authentication server in a HWTACACS scheme. If you use this command repeatedly, the latest configuration will replace the previous one. You can remove an authentication server only when it is not being used by any active TCP connections, and the removal impacts only packets forwarded afterwards.
Related command: display hwtacacs.
Example
# Configure a secondary authentication server.
[3Com] hwtacacs scheme test1 [3Com-hwtacacs-test1] secondary authentication 10.163.155.13 49
1.3.17 secondary authorization

Syntax
secondary authorization ip-address [ port ] undo secondary authorization
View
HWTACACS view
Parameter
ip-address: IP address of the server, a legal unicast address in dotted decimal format. port: Port number of the server, ranging from 1 to 65535. By default, it is 49.
Description
Use the secondary authorization command to configure a secondary TACACS authorization server. Use the .undo secondary authorization command to delete the configured secondary authorization server. By default, the IP address of TACACS authorization server is all zeros. You are not allowed to assign the same IP address to both primary and secondary authorization servers. You can configure only one primary authorization server in a HWTACACS scheme. If you use this command repeatedly, the latest configuration will replace the previous one. You can remove an authorization server only when it is not being used by any active TCP connections, and the removal impacts only packets forwarded afterwards. Related command: display hwtacacs.
Example
# Configure the secondary authorization server.
[3Com] hwtacacs scheme test1
[3Com-hwtacacs-test1] secondary authorization 10.163.155.13 49
1.3.18 timer quiet

Syntax
timer quiet minutes undo timer quiet
View
HWTACACS view
Parameter
minutes: Ranges from 1 to 255 minutes. By default, the primary server must wait five minutes before it resumes the active state.
Description
Use the timer quiet command to set the duration that a primary server must wait before it can resume active state. Use the undo timer quiet command to restore the default (five minutes). Related command: display hwtacac.
Example
# Set the quiet timer for the primary server to ten minutes.
[3Com] hwtacacs scheme test1 [3Com-hwtacacs-test1] timer quiet 10
1.3.19 timer realtime-accounting

Syntax
timer realtime-accounting minutes undo timer realtime-accounting
View
HWTACACS view
Parameter
minutes: Real-time accounting interval, which is a multiple of 3 in the range 3 to 60 minutes and defaults to 12.
Description
Use the timer realtime-accounting command to configure a real-time accounting interval. Use the undo timer realtime-accounting command to restore the default interval. A Real-time accounting interval is necessary for real-time accounting. After an interval value is set, the NAS transmits the accounting information of online users to the TACACS accounting server at intervals of this value. The setting of real-time accounting interval depends somewhat on the performance of the NAS and the TACACS server: a shorter interval requires higher device performance. You are therefore recommended to adopt a longer interval when there are a large number of users (more than 1000, inclusive). The following table recommends the ratio of minutes to the number of users. Table 1-3 Recommended ratio of minutes to the number of users Number of users 1 99 100 499 500 999 1000 3 6 12 15 Real-time accounting interval (minute)
Related command: retry realtime-accounting and radius scheme.
Example
# Set the real-time accounting interval in the HWTACACS scheme 3Com to 51 minutes.
[3Com-hwtacacs-3Com] timer realtime-accounting 51
1.3.20 timer response-timeout

Syntax
timer response-timeout seconds undo timer response-timeout
View
HWTACACS view
Parameter
seconds: Ranges from 1 to 300 seconds and defaults to five seconds.
Description
Use the timer response-timeout command to set the response timeout timer of the TACACS server. Use the .undo timer response-timeout command to restore the default (five seconds).
Note: As the HWTACACS is based on TCP, either the server response timeout and/or the TCP timeout may cause disconnection to the TACACS server.
Related command: display hwtacacs.
Example
# Set the response timeout time of the TACACS server to 30 seconds.
[3Com] hwtacacs scheme test1 [3Com-hwtacacs-test1] timer response-timeout 30
1.3.21 user-name-format
Syntax
user-name-format { with-domain | without-domain }
View
HWTACACS view
Parameter
with-domain: Specifies to send the username with domain name to the TACACS server.. without-domain: Specifies to send the username without domain name to the TACACS server.
Description
Use the user-name-format command to configure the username format sent to the TACACS server. By default, HWTACACS scheme acknowledges that the username sent to it includes ISP domain name.
The supplicants are generally named in userid@isp-name format. The part following the @ sign is the ISP domain name, according to which the router assigns a user to the corresponding ISP domain. However, some earlier TACACS servers reject the user name including ISP domain name. In this case, the user name is sent to the TACACS server after its domain name is removed. Accordingly, the router provides this command to decide whether the username is sent to the TACACS server carrying ISP domain name or not.
Note: If a HWTACACS scheme is configured to reject usernames including ISP domain names, the TACACS scheme will not be simultaneously used in more than one ISP domain. Otherwise, if two users have the same username, the TACACS server will regard then to be in different ISP domains as the same user by mistake (excluding their respective domain names).
Related command: hwtacacs scheme.
Example
# Specify to send the username without domain name to the HWTACACS scheme "3Com".
[3Com-hwtacacs-3Com ] user-name-format without-domain
Chapter 2 Access Control List Configuration Commands

2.1 ACL Configuration Commands
2.1.1 acl
Syntax
acl number acl-number [ match-order { config | auto } ] undo acl { number acl-number | all }
View
System View
Parameter
number: Defines a numbered access control list (ACL). acl-number: ACL number, with the range 1000 to 1999 for interface-based ACLs, 2000 to 2099 for basic ACLs, 3000 to 3099 for advanced ACLs, and 4000 to 4999 for MAC-based ACLs. match-order: Indicates the order in which rules are configured. config: Indicates to match the rule according to configuration order that the user configured them. auto: Indicates to match the rule in automatic order (in accordance with "Depth first" principle.) all: Deletes all ACLs.
Description
Use the acl command to create an access control list and enter ACL view. Use the undo acl command to delete an access control list. An access control list consists of a list of rules that are described by a series of permit or deny sub-sentences. Several rule lists form an ACL. Before configuring the rules for an access control list, you should first create the access control list.
Example
# Create an ACL numbered 2000.
[3Com] acl number 2000 [3Com-acl-basic-2000]
2.1.2 display acl

Syntax
display acl { all | acl-number }
View
Any view
Parameter
all: All ACL rules. acl-number: ACL expressed by number.
Description
Use the display acl command to view the rules of an access control list. The rule match order defaults to config or the configuration order. If it applies, the display command does not show information on the match order. If the match order auto applies, the display command will show it.
Example
# Display the contents of ACL 2000 rule.
[3Com] display acl 2000 Total ACL Number: 1 Basic ACL 2000, 2 rules,
Acl's step is 1 rule 1 permit (0 times matched) rule 2 permit source 1.1.1.1 0 (0 times matched)
2.1.3 reset acl counter

Syntax
reset acl counter { all | acl-number }
View
User View
Parameter
acl-number: ACL expressed by number. all: All ACL rules.
Description
Use the reset acl counter command to clear the statistics of access control list.
Example
# Reset the statistics of access control list 1000.
<3Com> reset acl counter 1000
2.1.4 rule
Syntax
1) Create or delete a rule of a basic access control list.
rule [ rule-id ] { permit | deny } [ source sour-addr sour-wildcard | any ] [ time-range time-name ] [ logging ] [ fragment ] [ vpn-instance vpn-instance-name ] undo rule rule-id [ source ] [ time-range ] [ logging ] [ fragment ] [ vpn-instance vpn-instance-name ] 2) Create or delete a rule of an advanced access control list.
rule [ rule-id ] { permit | deny } protocol [ source source-addr source-wildcard | any ] [ destination dest-addr dest-wildcard | any ] [ source-port operator port1 [ port2 ] ] [ destination-port operator port1 [ port2 ] ] [ icmp-type { icmp-message | icmp-type icmp-code } ] [ dscp dscp ] [ precedence precedence ] [ tos tos ] [ time-range time-name ] [ logging ] [ fragment ] [ vpn-instance vpn-instance-name ] undo rule rule-id [ source ] [ destination ] [ source-port ] [ destination-port ] [ icmp-type ] [ dscp ] [ precedence ] [ tos ] [ time-range ] [ logging ] [ fragment ] [ vpn-instance vpn-instance-name ] 3) Create or delete a rule of an interface-based ACL rule.
rule [ rule-id ] { permit | deny } interface { interface-type interface-number | any } [ time-range time-name ] [ logging ] undo rule rule-id [ time-range | logging ] * 4) Add/delete a MAC-based ACL rule
rule [ rule-id ] { deny | permit } [ type type-code type-mask | lsap lsap-code lsap-mask ] [ source-mac sour-addr sour-mask ] [ dest-mac dest-addr dest-mask ] undo rule rule-id
View
ACL view
Parameter
In the rule command: rule-id: ID of an ACL rule, optional, ranging from 0 to 65534. If you specify a rule-id, and the ACL rule related to the ID already exists, the newly defined rule will overwrite the existing rule, just as editing the existing ACL rule. If the rule-id you specify does not exist, a new rule number with the specified rule-id will be created. If you do not specify the rule-id, a new rule will be created and the system will assign a rule-id to the ACL rule automatically. deny: Discards matched packets. permit: Permits matched packets. protocol: Protocol type over IP expressed by name or number. The number range is from 0 to 255, and the name range covers gre, icmp, igmp, ip, ipinip, ospf, tcp and udp. source: Optional, specify source address information of ACL rule. If it is not configured, it indicates that any source address of the packets matches. sour-addr: Source IP address of packets in dotted decimal format. Or use "any" to represent the source address 0.0.0.0 with the wildcard 255.255.255.255. sour-wildcard: Source address wildcard in dotted decimal format. Inputting 0 indicates that the wildcard is 0.0.0.0. It represents a host with the address specified by parameter sour-addr. destination: Optional, specify destination address information of ACL rule. If it is not configured, it indicates that any destination address of the packets matches. dest-addr: Destination IP address of packets in dotted decimal format. Or use "any" to represent the destination address 0.0.0.0 with the wildcard 255.255.255.255. dest-wildcard: Destination address wildcard in dotted decimal format. Inputting 0 indicates that the wildcard is 0.0.0.0. It represents a host with the address specified by parameter dest-addr. icmp-type: Optional, specify ICMP packet type and ICMP message code, only valid when packet protocol is ICMP. If it is not configured, it indicates any ICMP packet matches. icmp-type: ICMP packet can be filtered according to ICMP message type. It is a number ranging from 0 to 255.
icmp-code: ICMP packets that can be filtered according to ICMP message type can also be filtered according to message code. It is a number ranging from 0 to 255. icmp-message: ICMP packets can be filtered according to ICMP message type or ICMP message code. source-port: Optional, specify source port information of UDP or TCP packets, valid only when the protocol specified by the rule is TCP or UDP. If it is not specified, it indicates that any source port information of TCP/UDP packets matches. destination-port: Optional, specify destination port information of UDP or TCP packets, valid only when the protocol specified by the rule is TCP or UDP. If it is not specified, it indicates that any destination port information of TCP/UDP packets matches. operator: Optional, comparison between port number of source or destination address. Their names and meanings are as follows: lt (lower than), gt (greater than), eq (equal to), neq (not equal to) and range (between). If the operator is range, two port numbers should follow it. Others only need one port number. port1, port2: Optional, port number of TCP or UDP, expressed by name or number. The number range is from 0 to 65535. dscp dscp: Specifies a DSCP field, the DS byte in IP packets. precedence: Optional, a number ranging from 0 to 7, or a name. Packets can be filtered according to precedence field. tos tos: Optional, a number ranging from 0 to 15 or a name. Packets can be filtered according to type of service. logging: Optional, indicating whether to log qualified packets. The log contents include sequence number of ACL rule, packets passed or discarded, upper layer protocol type over IP, source/destination address, source/destination port number, and number of packets. time-range time-name: Specifies that the ACL is valid in this time range. fragment: Specifies that this rule is only valid for the fragment packets that are not the first fragment. When this parameter is contained, it indicates that the rule is only valid for the fragment packets that are not the first fragment. interface interface-type interface-number: Specifies the interface information of the packets. If no interface is specified, all interfaces can be matched. any represents all interfaces. vpn-instance: Optional parameter specifying the vpn-instance to which the packets belongs. If it is not specified, the ACL rule will be valid for the packets in all the vpn-instances. If it is specified, the ACL rule will be valid only for the specified vpn-instance. vpn-instance-name: Specifies the name of a vpn-instance that existed.
In the undo rule command: rule-id: ID of an ACL rule, it should be an existing ACL rule number. If the command is not followed by other parameters, this ACL rule will be deleted completely; otherwise, only part of information related to this ACL rule will be deleted. source: Optional. Only the information settings related to the source address part of the ACL rule number will be deleted. destination: Optional. Only the information setting related to the destination address part of the ACL rule number will be deleted. source-port: Optional. Only the information setting related to the source port part of the ACL rule number will be deleted, valid only when the protocol is TCP or UDP. destination-port: Optional. Only the information setting related to the destination port part of the ACL rule number will be deleted, valid only when the protocol is TCP or UDP. icmp-type: Optional. Only the information setting related to ICMP type and message code part of the ACL rule number will be deleted, valid only when the protocol is ICMP. precedence: Optional. Only the setting of precedence configuration of the ACL rule will be deleted. tos tos: Optional. Only related tos setting corresponding to the ACL rule will be deleted. time-range time-name: Optional, specifies that the ACL is valid in this time range. logging: Optional. Only the setting corresponding to the logging part of the ACL rule will be deleted. fragment: Optional. Only the setting corresponding to the validity of non-first packets fragmentation of the ACL rule will be deleted. vpn-instance: Optional parameter. If it has been specified, the deletion operation will delete only the settings involved the vpn-instance in the specified ACL rule. type-code: Type of the Data frame, a 16-bit hexadecimal number corresponds to the type-code field in Ethernet_II and Ethernet_SNAP frames. type-mask: A 16-bit hexadecimal number used for specifying the mask bits. lsap-code: Encapsulation format of data frames, a 16-bit hexadecimal number. lsap-mask: LSAP mask, a 16-bit hexadecimal number used to specify mask bits. sour-addr: Source MAC address in the format of xxxx-xxxx-xxxx, used to match the source address of a packet. sour-mask: Source MAC address mask. dest-addr: Destination MAC address in the format of xxxx-xxxx-xxxx, Used to match the destination address of a packet.
dest-mask: Destination MAC address mask.
Description
Use the rule command to add a rule in current ACL view. Use the undo rule command to delete a rule. The rule ID is needed when you try to delete a rule. If you do not know the ID use the display acl command to find it.
Example
# Create ACL 3001 and add a rule to deny RIP packets.
[3Com] acl number 3001 [3Com-acl-adv-3001] rule deny udp destination-port eq rip
# Add a rule to permit hosts in the network segment 129.9.0.0 to send WWW packet to hosts in the network segment 202.38.160.0.
[3Com-acl-adv-3001] rule permit tcp source 129.9.0.0 0.0.255.255 destination 202.38.160.0 0.0.0.255 destination-port eq www
# Add a rule to deny the WWW access (80) from the host in network segment 129.9.0.0 to the host in network segment 202.38.160.0, and log events that violate the rule.
[3Com-acl-adv-3001] rule deny tcp source 129.9.0.0 0.0.255.255 destination 202.38.160. 0 0.0.0.255 eq www logging
# Add a rule to permit the WWW access (80) from the host in network segment 129.9.8.0 to the host in network segment 202.38.160.0.
[3Com-acl-adv-3001] rule permit tcp source 129.9.8.0 0.0.0.255 destination 202.38.160.0 0.0.0.255 destination-port eq www
# Add a rule to prohibit all hosts from establishing Telnet (23) connection to the host with the IP address 202.38.160.1.
[3Com-acl-adv-3001] rule deny tcp destination 202.38.160.1 0 destination-port eq telnet
# Add a rule to prohibit create UDP connections with port number greater than 128 from the hosts in network segment 129.9.8.0 to the hosts in network segment 202.38.160.0
[3Com-acl-adv-3001] rule deny udp source 129.9.8.0 0.0.0.255 destination
202.38.160.0 0.0.0.255 destination-port gt 128
# Add a rule, denying the packets carrying the source address 1.1.1.1 from VPN vrf1.
[3Com-acl-adv-3001] rule deny ip source 1.1.1.1 vpn-instance vrf1
2.2 Time-range Configuration Commands

2.2.1 display time-range
Syntax
display time-range { all | time-name }
View
Any view
Parameter
time-name: Name of the time range. all: Displays all the configured time ranges.
Description
Use the display time-range command to view the configuration and the status of time range. For the active time range at present, it displays "active" and for the inactive time range, it displays "inactive". Since there is a time deviation when the system updates acl status, which is about 1 minute, display time-range will display the information of time range at the current time exactly. Thus, the following case may happen: use the command display time-range to find that a time range is activated but the acl that should be active in the time range is inactive. This is normal.
Example
# Display all time ranges.
[3Com] display time-range all
# Display the time range named trname.

[3Com] display time-range trname Current time is 02:49:36 2/15/2003 Saturday Time-range : trname ( Inactive ) 14:00 to 16:00 off-day from 00:00 12/1/2002 to 00:00 12/1/2003
2.2.2 time-range
Syntax
time-range time-name [ start-time to end-time ] [ days ] [ from time1 date1 ] [ to time2 date2 ]
undo time-range time-name [ start-time to end-time ] [ days ] [ from time1 date1 ] [ to time2 date2 ]
View
System view
Parameter
time-name: Name of time range. start-time: Start time of a time range, in the format of HH:MM. end-time: End time of a time range, in the format of HH:MM. days: Indicates on which day of a week the time range is valid or from which day in a week the time range is valid. It is represented by numbers 0 through 6, respectively for Sunday, Monday, Tuesday, Wednesday, Thursday, Friday, Saturday, and Sunday. Working-day includes Monday through Friday; Off-day includes Saturday and Sunday; Daily includes the seven days of a week. from time1 date1: Optional, which is used to indicate the start time and date. The input format of time is hh:mm, which is shown in 24-hour notation. The range of hh is from 0 to 23 and the range of mm is from 0 to 59. The input format of date is MM/DD/YYYY. DD can be in the value range from 1 to 31. MM is one number in the range form 1 to 12 and YYYY is a 4-digit number. If no start time is set, it means that there is no restriction on start time and only the end time should be considered. to time2 date2: Optional. It is used to indicate the end time and date. In addition, the input format of time and date is the same with that of the start time. The end time must be greater than the start time. If the end time is not set, it will be the maximum time that the system can set.
Description
Use the time-range command to specify a time range. Use the undo time-range command to delete a time range. A time range can be one of the following types: Absolute time range created using the time-range time-name [ from time1 date1 ] [ to time2 date2 ] command. For example, you can use the time-range test from 20:00 04/01/2003 to 20:00 12/10/2003 command in system view to create an absolute time range spanning from April 1, 2003 20:00 to December 10, 2003 20:00.
Periodic time range created using the time-range time-name [ start-time to end-time ] [ days ] command. For example, you can create a periodic time range spanning from 12:00 to 17:00 on a daily basis. Periodic time range effective within an absolute time range, created by the time-range time-name [ start-time to end-time ] [ days ] [ from time1 date1 ] [ to time2 date2 ] command. For example, you can use the time-range test 14:00 to 16:00 off-day from 20:00 04/01/2003 to 20:00 12/10/2003 command in system view to create a time range spanning from 14:00 to 16:00 and effective on off-days between April 1, 2003 20:00 and December 10, 2003 20:00. Combined time range formed by multiple time range segments. If no periodic time range segment is included, the combined time range is the union of all the absolute time range segments. If periodic time range segments are included, the combined time range is the intersection of the absolute time range segment union and the periodic time range segment union. To display the configured time range, use the display time-range command.
Example
# Configure the time range valid at 0:0 on Jan. 1, 2003, always valid.
[3Com] time-range test from 0:0 1/1/2003
# Configure the time range valid between 14:00 and 16:00 in every weekend from 20:00 on Apr.01, 2003 to 20:00 on Dec.10, 2003.
[3Com] time test 14:00 to 16:00 off-day from 20:00 04/01/2003 to 20:00 12/10/2003
# Configure the time range valid between 8:00 and 18:00 in each working day.
[3Com] time-range test 8:00 to 18:00 working-day
# Configure the time range valid between 14:00 and 18:00 in each weekend day.
[3Com] time-range test 14:00 to 18:00 off-day
Chapter 3 Firewall Configuration Commands

3.1 Packet Filtering Firewall Configuration Commands
3.1.1 debugging firewall
Syntax
debugging firewall { all | eff | icmp | packet { permitted | denied } | tcp | udp | fragments-inspect | others } [ interface type number ] undo debugging firewall { all | eff | icmp | packet { permitted | denied } | tcp | udp | fragments-inspect | others } [ interface type number ]
View
User view
Parameter
all: Debugging information of all the packets. eff: Ethernet frame filtering debugging. icmp: ICMP packet filtering debugging. packet: Packet filtering debugging. You can specify the permitted or denied keyword to display the debugging information about the permitted or denied packets. tcp: TCP packet filtering debugging. udp: UDP packet filtering debugging. fragments-inspect: Fragment debugging. others: Debugging of all the packets except ICMP, TCP and UDP. interface type number: Debugging information of the corresponding packets passing the interface. The debugging information of all the interfaces will be displayed if this parameter is not configured.
Description
Use the debugging firewall command to enable the information debugging of the firewall packet filtering. Use the undo debugging firewall command to disable the information debugging of the firewall packet filtering.
By default, all the information debugging of the firewall is disabled. Related command: display debugging.
Example
# Enable the debugging information about UDP packet filtering.
<3Com> debugging firewall udp
3.1.2 display firewall-statistics

Syntax
display firewall-statistics { all | interface type number | fragments-inspect }
View
Any view
Parameter
all: Displays the filtering packet statistics of all the interfaces. interface type number: Specifies an interface by its type and number. fragments-inspect: Displays the fragment inspection information.
Description
Use the display firewall-statistics command to view the firewall statistics. Related command: firewall fragments-inspect.
Example
# Display the information of fragment inspection.
<3Com> display firewall-statistics fragments-inspect Fragments inspection is enabled. The high-watermark for clamping is 10000. The low-watermark for clamping is 1000. Current records for fragments inspection is 0.
3.1.3 firewall default

Syntax
firewall default { permit | deny }
View
System view
Parameter
permit: Default filter rule is permitting packets to pass. deny: Default filter rule is denying packets to pass.
Description
Use the firewall default command to configure the default filtering rule of the firewall to either permit or deny. By default, the system permits packets.
Example
# Set the default filtering rule of the firewall to deny.
[3Com] firewall default deny
3.1.4 firewall enable

Syntax
firewall enable undo firewall enable
View
System view
Parameter
None
Description
Use the firewall enable command to enable the firewall. Use the undo firewall enable command to disable the firewall. By default, the firewall is disabled.
Example
# Enables the firewall
[3Com] firewall enable
3.1.5 firewall fragments-inspect

Syntax
firewall fragments-inspect undo firewall fragments-inspect
View
System view
Parameter
none
Description
Use the firewall fragments-inspect command to enable fragment inspection switch. Use the undo firewall fragments-inspect command to disable fragment inspection switch. By default, fragment inspection switch is disabled. This command is the premise of realizing exact match. Only after fragment inspection switch is enabled can fragment exact match be implemented. Packet filtering firewall will record the status of a fragment and perform the exact matching to advanced ACL rules according to the information beyond the layer 3 (IP layer). Packet filtering firewall will consume some system resources for recording the fragment status. If the exact match mode is not used, you are recommended to disable this function to improve the running efficiency of system and reduce system cost. Only when the fragment packet inspection is enabled can the exact match really take effect. Related command: display firewall fragments-inspect and firewall packet-filter.
Example
# Enable the fragment inspection switches
[3Com] firewall fragments-inspect
3.1.6 firewall fragments-inspect { high | low }

Syntax
firewall fragments-inspect { high | low } { default | number } undo firewall fragments-inspect { high | low }
View
System view
Parameter
high number: Specifies the high threshold of the fragment status records. It is in the range from 100 to 10000. low number: Specifies the low threshold of the fragment status records. It is in the range from 100 to 10000. default: Default number of fragment status records. The default high threshold of the fragment status records is 2000 and the default low threshold of the fragment status records is 1500.
Description
Use the firewall fragments-inspect { high | low } command to configure the high and low thresholds of records for fragment inspection. Use the undo firewall fragments-inspect { high | low } command to restore the default high and low thresholds. If fragment inspection switch is enabled and exact match filtering is applied, the executing efficiency of the packet filtering will be slightly reduced. As the number of matching entries increases, efficiency is reduced. Therefore, the (high and low) thresholds should be set. When the number of fragment status records reaches the high threshold, those status entries first reserved will be deleted until the number of records is below the low threshold. The low threshold must be no greater than the high threshold. Related command: display firewall-statistics fragments-inspect and firewall
packet-filter.
Example
# Configure the high threshold for fragment packet inspection to 3000 and configure the low threshold to the default value.
[3Com] firewall fragments-inspect high 3000 [3Com] firewall fragments-inspect low default
3.1.7 firewall packet-filter

Syntax
firewall packet-filter acl-number { inbound | outbound } [ match-fragments { normally | exactly } ]
undo firewall packet-filter acl-number { inbound | outbound }
View
Interface view
Parameter
acl-number: Serial number of access control list rule. inbound: Filters the packet received from the interface. outbound: Filters the packet forwarded from the interface. match-fragments: Specify the matching mode of fragments. This parameter can only be applied to advanced ACLs. normally: Normal matching mode, the default mode. exactly: Exact matching mode.
Description
Use the firewall packet-filter command to apply the access control list to the corresponding interface. Use the undo firewall packet-filter command to delete the corresponding setting. Interface-based ACL (namely ACL rule with sequence number from 1000 to 1999) can only use the parameter outbound. Packet-filtering on the 3Com Router Software platform can filter fragment packets, which matches and filters all fragment packets on the third layer (IP layer) by source IP address, destination IP address etc. It also provides standard matching and exact matching for advanced ACL rules that contain extended information such as TCP/UDP port number and type of ICMP. The standard matching matches information of the third layer, and information that is not of the third layer will be ignored. The exact matching matches packets according to all advanced ACL rules. To do this, the firewall must be able to store the state of the first fragment packet to get the whole matching information of the followed fragments. Standard matching is the default. Related command: acl, display acl and firewall fragments-inspect.
Example
# Apply ACL 1001 to the Serial1/0/0 interface to filter the packets forwarded by the interface.
[3Com-Serial1/0/0] firewall packet-filter 1001 outbound
3.1.8 reset firewall-statistics

Syntax
reset firewall-statistics { all | interface type number }
View
User view
Parameter
all: Clears the filtering packet statistics of all the interfaces. interface: Clears the filtering packet statistics of a certain interface. type number: Specifies an interface by its type and number.
Description
Use the reset firewall-statistics command to clear the firewall statistics.
Example
# Clear filtering packet statistics of the interface E3/1/0.
<3Com> reset firewall-statistics interface e3/1/0
3.2 ASPF Configuration Commands

3.2.1 aging-time
Syntax
aging-time { syn | fin | tcp | udp } seconds undo aging-time { syn | fin | tcp | udp }
View
ASPF policy view
Parameter
The default timeout time of SYN, FIN, TCP and UDP is 30s, 5s, 3600s and 30s respectively.
Description
Use the aging-time command to configure SYN status waiting timeout value and FIN status waiting timeout value of TCP, session entry idle timeout value of TCP and UDP. Use the undo aging-time command to restore the default value.
Before the aging-time expires, the system will retain the connections and the sessions that have been set up. Related command: display aspf all, display aspf policy, display aspf session and display aspf interface.
Example
# Configure SYN status waiting timeout value of TCP as 20 seconds.
[3Com-aspf-policy-1] aging-time syn 20
# Configure FIN status waiting timeout value of FIN as 10 seconds.

[3Com-aspf-policy-1] aging-time fin 10
# Configure TCP idle timeout value as 3000 seconds.

[3Com-aspf-policy-1] aging-time tcp 3000
# Configure UDP idle timeout value as 110 seconds.

[3Com-aspf-policy-1] aging-time udp 110
3.2.2 aspf-policy
Syntax
aspf-policy aspf-policy-number undo aspf-policy aspf-policy-number
View
System view
Parameter
aspf-policy-number: ASPF policy number, ranging from 1 to 99.
Description
Use the aspf-policy command to define an ASPF policy. For a defined policy, the policy can be invoked through its policy number.
Example
# Define an ASPF policy and enter ASPF view.
[3Com] aspf-policy 1 [3Com-aspf-policy-1]
3.2.3 debugging aspf

Syntax
debugging aspf { all | verbose | events | ftp | h323 | http | rtsp | session | smtp | tcp | timers | udp } undo debugging aspf { all | verbose | events | ftp | h323 | http | rtsp | session | smtp | tcp | timers | udp }
View
User view
Parameter
all: All ASPF debugging switch. verbose: Detailed debugging switch. events: Event debugging switch. ftp: Debugging switch for FTP detect information . h323: Debugging switch for H.323 information detection. http: Debugging switch for HTTP information detection. rtsp: Debugging switch for RTSP information detection. session: Debugging switch for Session information . smtp: Debugging switch for SMTP information detection. tcp : Debugging switch for TCP information detection. timers: Debugging switch for Timer information . udp: Debugging switch for UDP information detection.
Description
Use the debugging aspf command to enable ASPF debugging function. Use the undo debugging aspf command to disable ASPF debugging function. By default, ASPF debugging function is disabled. Related command: display aspf all, display aspf policy, display aspf session and display aspf interface.
Example
# Open all the switches of debugging aspf
<3Com> debugging aspf all
3.2.4 detect
Syntax
detect protocol [ java-blocking acl-number ] [ aging-time seconds ] undo detect protocol
View
ASPF policy view
Parameter
protocol: Name of the protocol supported by ASPF. It can be an application layer protocol of ftp, http, h323, smtp, or rtsp, or a transport layer protocol of tcp or udp. seconds: Configures the idle timeout time of the protocol, ranging from 5 to 43200 seconds. The default TCP-based timeout time is 3600 seconds, and the default UDP-based timeout time is 30 seconds. java-blocking: Configures to block the Java Applets to specified network segment packets, valid only when the protocol is HTTP. acl-number: Basic ACL number, ranging from 2000 to 2099.
Description
Use the detect command to specify ASPF policy for application layer protocols. Use the undo detect command to cancel the configuration. When the protocol is HTTP, Java blocking is permitted. If both application layer protocol specific detection and generic TCP/UDP-based detection are configured, the former has priority. ASPF uses the timeout mechanism to manage session state information of protocols so that it can decide when to stop managing the state information of a session or delete a session that cannot be set up normally. The timeout time setting is a global setting applicable to all sessions; it can protect system resources against malicious occupation. Related command: display aspf all, display aspf policy, display aspf session and display aspf interface.
Example
# Configure to specify an ASPF policy for HTTP protocol with policy number 2000. At the same time, permit Java blocking and set ACL1 to make ASPF able to filter Java Applets from destination server 10.1.1.1.

[3Com] acl number 2000
[3Com-acl-basic-2000] rule deny source 10.1.1.1 0 [3Com-acl-basic-2000] rule permit any [3Com-acl-basic-2000] quit [3Com] aspf-policy 1 [3Com-aspf-policy-1] detect http java-blocking 2000
3.2.5 display aspf all

Syntax
display aspf all
View
Any view
Parameter
None
Description
Use the display aspf all command to view the information of all ASPF policies and sessions.
Example
# View the information of ASPF policy and session.
[3Com] display aspf all [ASPF Policy 1] Session audit trail: tcp synwait-time: tcp finwait-time: tcp idle-time: udp idle-time: h323 timeout: tcp timeout: 30 5 3600 30 3600 33 disabled sec sec sec sec
[Interface Configuration] Interface: Inbound ASPF policy: Outbound ASPF policy: Ethernet0/0/0 none 1
Table 3-1 ASPF configuration information Item Session audit trail: disabled tcp syn wait-time tcp finnwait-time tcp idle-time udp idle-time http java-blocking 1 timeout Description The session logging function is disabled. TCP connected SYN status timeout value is 30 seconds. TCP connection FIN status timeout value is 5 seconds. Timeout for the idle-time of TCP session is 3600 seconds. Timeout for the idle-time of UDP session is 30 seconds. Detect the HTTP traffic and filter the Java Applets from some particular sites by using ACL 1. The HTTP timeout time is set to 3000 seconds. h323 timeout indicates the timeout time of the h323 session entry. The policy inspects h323 traffic. The timeout time of h323 is 3600 seconds. The policy inspects tcp traffic. The timeout time of tcp is 33 seconds. ASPF ASPF No ASPF policy is configured in inbound direction of the interface Ethernet0/0/0. ASPF policy 1 is configured in outbound direction of the interface Ethernet0/0/0.
h323 timeout tcp timeout Inbound policy outbound policy
3.2.6 display aspf interface

Syntax
display aspf interface
View
Any view
Parameter
None
Description
Use the display aspf interface command to view the interface configuration of the inspection policy.
Example
# View the interface configuration of the inspection policy.
<3Com> display aspf interface [Interface Configuration] Interface: Inbound ASPF policy: Outbound ASPF policy: Ethernet0/0/0 none 1
Table 3-2 ASPF interface configuration information Item Inbound policy outbound policy ASPF ASPF Description No ASPF policy is configured in inbound direction of the interface Ethernet0/0/0. ASPF policy 1 is configured in outbound direction of the interface Ethernet0/0/0.
3.2.7 display aspf policy

Syntax
display aspf policy aspf-policy-number
View
Any view
Parameter
aspf-policy-number: ASPF policy number, ranging from 1 to 99.
Description
Use the the display aspf policy command to view the configuration of a specific inspection policy.
Example
# Display the configuration information of the inspection policy with policy number of 1.
[3Com] display aspf policy 1 [ASPF Policy 1] Session audit trail: tcp synwait-time: tcp finwait-time: 30 5 disabled sec sec

tcp idle-time: udp idle-time: h323 timeout: tcp timeout:

3600 30 3600 33 sec sec
3.2.8 display aspf session

Syntax
display aspf session [ verbose ]
View
Any view
Parameter
verbose: Displays the detail information of the sessions.
Description
Use the display aspf session command to view the information of the ASPF sessions.
Example
# Display information on current ASPF sessions.
[3Com] display aspf session [Established Sessions] Session Initiator 212BA84 169.254.1.121:1427 2B738C4 169.254.1.121:1426 Responder 169.254.1.52:0 Application ftp-data ftp Status TCP_DOWN FTP_CONXN_UP
169.254.1.52:21
# Display detailed information of current ASPF sessions.

[3Com] display aspf session verbose [ Established Sessions ] [ Session 0xC7E2B4 ] (192.168.0.1:2125)=>(13.1.0.5:2093) h245-media-control H245_OPEN SessNum: 229, TransProt: 6, AppProt: 21 Prev: 0x0, Next: 0x0, Child: 0xCA9EA4, Parent: 0x0 SynNode: 0x0, FinNode: 0x0 Interface: Ethernet1/0/0,

Direction: outbound
Bytes/Packets sent (initiator:responder) [1339/15 : 1309/12] Tcp SeqNum/AckNum [352115193/62885460 : 62885456/352115193] Timeout 00:02:00(120),
Table 3-3 Information of current ASPF sessions Item TransProt: 6 AppProt: 21 Interface: Ethernet1/0/0 Direction: outbound Bytes/Packets sent Timeout 00:02:00(120) Description Transport layer protocol is numbered 6, which means that TCP is used. Application layer protocol uses port 21, which means that the sessions are FTP sessions ASPF policy is applied in outbound direction of the interface Ethernet1/0/0 Bytes/Packets transmitted between the originating and responding sides of the connection Timeout time set for the protocol is 120 seconds
3.2.9 display port-mapping

Syntax
display port-mapping [ application-name | port port-number ]
View
Any view
Parameter
application-name: Specifies the name of application for PAM. Optional applications include ftp, http, h323, smtp and rtsp. port-number: Port number in the range from 0 to 65535.
Description
Use the display port-mapping command to view PAM information. Related command: port-mapping.
Example
# Display all PAM information.

[3Com] display port-mapping
3.2.10 firewall aspf

Syntax
firewall aspf aspf-policy-number { inbound | outbound } undo firewall aspf aspf-policy-number { inbound | outbound }
View
Interface view
Parameter
aspf-policy-number: ASPF policy number used on the interface. inbound: Applies ASPF policy in inbound direction of the interface. outbound: Applies ASPF policy in outbound direction of the interface.
Description
Use the firewall aspf command to apply ASPF policy in a specified direction to an interface. Use the undo firewall aspf command to delete the applied ASPF policy on the interface. There are two concepts of ASPF, inbound interface and outbound interface. If the router connects with both intranet and internet, and uses ASPF to protect the servers of intranet, the router interface connected with intranet is regarded as inbound interface and that connected with internet is regarded as outbound interface. When ASPF is applied on outbound interface, ASPF will refuse the access of intranet from internet users, but the returning packets of intranet users accessing internet can pass the detection of ASPF.
Example
# Configure ASPF firewall function in outbound direction of the interface ethernet1/0/0.
[3Com-Ethernet1/0/0] firewall aspf 1 outbound
3.2.11 log enable

Syntax
log enable undo log enable
View
ASPF policy view
Description
Use the log enable command to enable ASPF session logging function. Use the undo log enable command to disable logging function. By default, session logging function is disabled. ASPF provides enhanced session logging function, which can log all connections, including connection time, source address, destination address, port in use and transmitted bytes number. Related command: display aspf all, display aspf policy, display aspf session, display aspf interface.
Example
# Enable ASPF session logging function.
[3Com-aspf-policy-1] log enable
3.2.12 port-mapping
Syntax
port-mapping application-name port port-number [ acl acl-number ] undo port-mapping [ application-name port port-number [ acl acl-number ] ]
View
System view
Parameter
application-name: Specifies the name of the application for PAM. Optional applications include ftp, http, h323, smtp and rtsp. port-number: Port number, ranging from 0 to 65535. acl-number: Number of basic ACL, which is in the range from 2000 to 2099.
Description
Use the port-mapping command to establish a mapping from the port to application layer protocol. Use the undo port-mapping command to delete the PAM ingress defined by the user.
PAM supports two mapping mechanisms, general port mapping and host port mapping based on basic ACL. The former is to establish the mapping relation between a user-defined port number and an application protocol. For example, mapping the port 8080 to the HTTP will make all the TCP packets destined to 8080 be regarded as HTTP packets. The latter is to map the self-defined port number to the application protocol for the packets from some specific hosts. For example, you can map the TCP packets using the port 8080, which destine to the hosts residing on the segment 1.1.0.0 to be the HTTP packets. The range of hosts will be specified by the basic ACL. For the same port, general port mapping and host port mapping based on basic ACL cannot be configured at the same time. Related command: display port-mapping.
Example
# Map port 3456 to FTP service, with this configuration, all the data flows destined to port 3456 will be regarded as FTP data flows.
[3Com] port-mapping ftp port 3456
Chapter 4 IPSec Configuration Commands

4.1 IPSec Configuration Commands
4.1.1 ah authentication-algorithm
Syntax
ah authentication-algorithm { md5 | sha1 } undo ah authentication-algorithm
View
IPSec proposal view
Parameter
md5: MD5 algorithm is adopted. sha1: SHA1 algorithm is adopted.
Description
Use the ah authentication-algorithm command to set the authentication algorithm adopted by Authentication Header protocol in IPSec proposal. Use the undo ah authentication-algorithm command to restore the default setting. By default, the md5 authentication algorithm is adopted by Authentication Header protocol in IPSec proposal. AH proposal cannot be used to encrypt, only to authenticate. MD5 algorithm uses the 128-bit key, and SHA1 uses the 160-bit key. By comparison, MD5 is faster than SHA1, while SHA1 is securer than MD5. The IPSec proposal adopted by the security policy at both ends of the security tunnel must be set as using the same authentication algorithm. The AH authentication algorithm be configured only if AH or AH-ESP security protocol was selected by executing the transform command. Related command: ipsec proposal, proposal, sa sip and transform.
Example
# Set IPSec proposal using AH and SHA1.

[3Com] ipsec proposal prop1
[3Com-ipsec-proposal- prop1] transform ah [3Com-ipsec-proposal- prop1] ah authentication-algorithm sha1
4.1.2 debugging ipsec

Syntax
debugging ipsec { all | sa | misc | packet [ policy policy-name [ seq-number ] | parameters ip-address protocol spi-number ] } undo debugging ipsec { all | sa | misc | packet [ policy policy-name [ seq-number ] | parameters ip-address protocol spi-number ] }
View
User view
Parameter
all: Displays all debugging information. sa: Displays debugging information of SA. packet: Displays debugging information of IPSec packets. policy policy-name: Displays debugging information of IPSec policy whose name is policy-name. seq-number: Displays debugging information of IPSec policy whose sequence number is seq-number. parameters: Displays debugging information of a SA whose remote address is ip-address, Security protocol is protocol, and SPI is spi-number. misc: Displays other debugging information of IPSec.
Description
Use the debugging ipsec command to turn IPSec debugging on. Use the undo debugging ipsec command to turn IPSec debugging off. By default, IPSec debugging is off.
Example
# Enable IPSec SA debugging function.
<3Com> debugging ipsec sa
4.1.3 display ipsec policy

Syntax
display ipsec policy [ brief | name policy-name [ seq-number ] ]
View
Any view
Parameter
brief: Displays brief information about all the ipsec policies. name: Displays information of the ipsec policy with the name policy-name and sequence number seq-number. policy-name: Name of an ipsec policy. seq-number: Sequence number of an ipsec policy. If no argument has been specified, the details of all the IPSec policies will be displayed. If name policy-name has been specified but seq-number has not, the information of the specified IPSec policy group will be listed out.
Description
Use the display ipsec policy command to view information about the ipsec policy. The brief keyword is used for displaying brief information about all the ipsec policies, whose display format is the brief format (see the following example). The brief command can be used for quick display of all the ipsec policies. Brief information includes: name and sequence number, negotiation mode, access control list, proposal, local address, and remote address. Other command words are used to display detailed information about the ipsec policy, whose display format is the detailed format (refer to the following example). Related command: ipsec policy(system view).
Example
# View brief information about all the ipsec policies.
<3Com> display ipsec policy brief Ipsec-policy-Name policy1-100 test-300 Mode manual isakmp acl 2000 2200 Local Address 150.1.1.2 Remote Address 150.1.1.1 202.38.160.66
Table 4-1 Brief information of IPSec policy Item Ipsec-policy-Name Mode acl Local Address Remote Address Description name and sequence number of an ipsec policy negotiation method used by an ipsec policy access control list used by an ipsec policy local IP address remote IP address
# View information about all the ipsec policies

[3Com] display ipsec policy =========================================== IPsec Policy Group: "policy_isakmp" Using interface: {Ethernet1/0/0} =========================================== -------------------------------------------IPsec policy name: "policy_isakmp" sequence number: 10 mode: isakmp -------------------------------------------security data flow : 100 tunnel remote address: 162.105.10.2 PFS (Y/N): N proposal name: prop1 ipsec sa local duration(time based): 3600 seconds ipsec sa local duration(traffic based): 1843200 kilobytes =========================================== IPsec Policy Group: "policy_man" Using interface: {Ethernet1/0/1} =========================================== ----------------------------------------IPsec policy name: "policy_man" sequence number: 10 mode: manual ----------------------------------------security data flow : 100 tunnel local address: 162.105.10.1
tunnel remote address: 162.105.10.2

proposal name: prop1 inbound ah setting: ah spi: 12345 (0x3039) ah string-key:
ah authentication hex key : 1234567890123456789012345678901234567890 inbound esp setting: esp spi: 23456 (0x5ba0) esp string-key: esp encryption hex key: 1234567890abcdef1234567890abcdef1234567812345678 esp authentication hex key: 1234567890abcdef1234567890abcdef outbound ah setting: ah spi: 54321 (0xd431) ah string-key: ah authentication hex key: 1122334455667788990011223344556677889900 outbound esp setting: esp spi: 65432 (0xff98) esp string-key: esp encryption hex key: 11223344556677889900aabbccddeeff1234567812345678 esp authentication hex key: 11223344556677889900aabbccddeeff
Table 4-2 Detailed information of IPSec ipsec policy Item ipsec policy security data flow proposal name inbound/outbound ah/esp setting tunnel Local Address tunnel Remote Address PFS (Y/N) Description name, sequence number and negotiation method of an ipsec policy access control list used by an ipsec policy name of the proposal used by an ipsec policy settings of inbound/outbound ends using AH/ESP, including SPI and key local IP address remote IP address Whether using PFS(Perfect Forward Security) or not
4.1.4 display ipsec policy-template

Syntax
display ipsec policy-template [ brief | name template-name [ seq-number ] ]
View
Any view
Parameter
brief: Displays brief information about all the ipsec policy templates. name: Displays information of the ipsec policy template with the name template-name and sequence number seq-number. template-name: Name of an ipsec policy template. seq-number: Sequence number of an ipsec policy template. If seq-number is not specified, then information about all the ipsec policy templates named template-name are shown. If no parameter is specified, then detailed information of all the ipsec policy templates will be displayed. If name template-name has been specified but seq-number has not, the information of the specified IPSec policy template group will be listed out.
Description
Use the display ipsec policy-template command to view information about the ipsec policy template. Parameter brief is for showing brief information about all the ipsec policy templates, whose display format is the brief format (see the following example). It can display information on all the ipsec policy templates quickly. Brief information includes: template name and sequence number, access control list, and remote address. Any of the sub-commands can be used to display detailed information of the IPSec policy template. Related command: ipsec policy-template.
Example
# View brief information about all the ipsec policy templates.
[3Com] display ipsec policy-template brief Policy-template-Name acl Remote-Address
-----------------------------------------------------test-tplt300 2200
Table 4-3 Brief information of IPSec policy template Item Policy-template-Name acl Description name, sequence number of an ipsec policy template access control list used by an ipsec policy template
Remote Address
remote IP address
4.1.5 display ipsec proposal

Syntax
display ipsec proposal [ proposal-name ]
View
Any view
Parameter
proposal-name: Name of the proposal.
Description
Use the display ipsec proposal command to view information about the proposal. If the name of the proposal is not specified, then information about all the proposals will be shown. Related command: ipsec proposal, display ipsec sa and display ipsec policy.
Example
# View all the proposals.
[3Com] display ipsec proposal Ipsec proposal name: prop2 encapsulation mode: tunnel transform: ah-new ah protocol: authentication-algorithm sha1-hmac-96 Ipsec proposal name: prop1 encapsulation mode: transport transform: esp-new esp protocol: authentication-algorithm md5-hmac96, encryption des
Table 4-4 IPSec proposal information Item Ipsec name proposal name of the proposal modes used by proposal, including two types: transport mode and tunnel mode
Description
encapsulation mode
transform ah protocol esp protocol
security protocols used by proposal, including two types: AH and ESP the authentication-algorithm used by AH: md5 | sha1 the authentication-algorithm and encryption method used by ESP respectively: MD5 and DES
4.1.6 display ipsec sa

Syntax
display ipsec sa [ brief | remote ip-address | policy policy-name [ seq-number ] | duration ]
View
Any view
Parameter
brief: Displays brief information about all the SAs. remote: Displays information about the SA with remote address as ip-address. ip-address: Specifies the remote address in dotted decimal format. policy: Displays information about the SA created by the ipsec policy whose name is policy-name. policy-name: Specifies the name of the ipsec policy. seq-number: Specifies the sequence number of the ipsec policy. duration: Global sa duration to be shown.
Description
Use the display ipsec sa command to view the relevant information about the SA. The command with brief parameter shows brief information about all the SAs, whose display format is the brief format (refer to the following example). Brief information includes source address, destination address, SPI, protocol, and algorithm. A display beginning with "E" in the algorithm stands for the encryption algorithm, and a display beginning with "A" stands for the authentication algorithm. The brief command can be used to display all the SAs already set up quickly.
The commands with remote and policy parameters both display detailed information about the SA. The display mode: part of the information about the ipsec policy is shown first and then the detailed information of the SA in this ipsec policy. The command with duration parameter shows the global sa duration, including "time-based" and "traffic-based" sa duration. Refer to the following examples. Information of all the SAs will be shown when no parameter is specified. Related command: reset ipsec sa, ipsec sa duration, display ipsec sa and display ipsec policy.
Example
# View brief information about all the SAs.
<3Com> display ipsec sa brief Src Address 10.1.1.1 10.1.1.2 Dst Address 10.1.1.2 10.1.1.1 SPI 300 400 Protocol ESP ESP Algorithm E:DES; A:HMAC-MD5-96 E:DES; A:HMAC-MD5-96
Table 4-5 Brief information of IPSec SA Item Src Address Dst Address SPI Protocol Local IP address Remote Ip address security parameter index security protocol used by IPSec The authentication algorithm and encryption algorithm used by the security protocol. A display beginning with "E" in the algorithm stands for the encryption algorithm, and a display beginning with "A" stands for the authentication algorithm. Description
Algorithm
# View the global duration of SA.

[3Com] display ipsec sa duration ipsec sa global duration (traffic based): 1843200 kilobytes ipsec sa global duration (time based): 3600 seconds
# View information of all the SAs.

[3Com] display ipsec sa =============================== Interface: Ethernet1/0/0 path MTU: 1500

=============================== ---------------------------------IPsec policy name: "policy_isakmp" sequence number: 10 mode: isakmp ---------------------------------connection id: 4 in use settings = {tunnel} tunnel local : 162.105.10.1 tunnel remote : 162.105.10.2 [inbound ah SAs] spi: 3752719292 (0xdfadf3bc) transform: AH-SHA1HMAC96
sa remaining key duration (bytes/sec): (1887436384/3594) max received sequence-number: 4 [inbound esp SAs] spi: 74180629 (0x46be815) transform: ESP-ENCRYPT-3DES ESP-AUTH-MD5 sa remaining key duration (bytes/sec): (1887436528/3594) max received sequence-number: 4 [outbound esp SAs] spi: 1394075637 (0x5317e7f5) transform: ESP-ENCRYPT-3DES ESP-AUTH-MD5 sa remaining key duration (bytes/sec): (1887436464/3594) max sent sequence-number: 5 [outbound ah SAs] spi: 2132905296 (0x7f218d50) transform: AH-SHA1HMAC96 sa remaining key duration (bytes/sec): (1887436336/3594) max sent sequence-number: 5
Table 4-6 Detailed information of IPSec SA Item Interface path MTU ipsec policy connection id Description Interface using ipsec policy Maximum IP packet length sent from the interface ipsec policy used, including name, sequence number and negotiation method security channel identifier
in use settings tunnel local tunnel remote inbound transform sa remaining key duration max received sequence-number outbound max sent sequence-number
IPSec mode, including two types: transport mode and tunnel mode local IP address remote IP address SA information of the inbound end proposal used by the ipsec policy rest sa duration of SA maximum sequence number of the received packets (the anti-replay function provided by the security protocol) SA information of the outbound end maximum sequence number of the sent packets (the anti-replay function provided by the security protocol)
4.1.7 display ipsec statistics

Syntax
display ipsec statistics
View
Any view
Parameter
none
Description
Use the display ipsec statistics command to view the IPSec packet statistics information, including the input and output security packet statistics, bytes, number of packets discarded, and detailed description of discarded packets. Related command: reset ipsec statistics.
Example
# View IPSec packet statistics.
<3Com> display ipsec statistics the security packet statistics: input/output security packets: 5124/8231
input/output security bytes: 52348/64356 input/output dropped security packets: 0/0 dropped security packet detail: no enough memory: 0 can't find SA: 0 queue is full: 0 authen failed: 0 invalid length: 0 replay packet: 0 too long packet: 0 invalid SA: 0
Table 4-7 IPSec packet statistics Item input/output security packets input/output security bytes input/output security packets discarded Description input/output packets under the security protection input/output bytes under the security protection input/output packets under the security protection discarded by the router
4.1.8 encapsulation-mode
Syntax
encapsulation-mode { transport | tunnel } undo encapsulation-mode
View
IPSec proposal view
Parameter
transport: Sets that the encapsulation mode of IP packets is transport mode. tunnel: Sets that the encapsulation mode of IP packets is tunnel mode.
Description
Use the encapsulation-mode command to set the encapsulation mode that the security protocol applies to IP packets, which can be transport or tunnel. Use the undo encapsulation-mode command to restore it to the default.
By default, tunnel mode is used. There are two encapsulation modes where IPSec is used to encrypt and authenticate IP packets, transport mode and tunnel mode. In transport mode, IPSec does not encapsulate a new header into the IP packet. Both ends of security tunnel are the source and destination of original packets. In tunnel mode, IPSec protects the whole IP packet, and adds a new IP header in the front part of the IP packet. The source and destination addresses of the new IP header are the IP addresses of both ends of the tunnel. Generally, tunnel mode is used between two security gateways (routers). A packet encrypted in a security gateway can only be decrypted in another security gateway. So an IP packet needs to be encrypted in tunnel mode, that is, a new IP header is added; the IP packet encapsulated in tunnel mode is sent to another security gateway before it is decrypted. Transport mode is suitable for communication between two hosts, or for communication between a host and a security gateway (like the network management communication between the gateway workstation and a router). In transport mode, two devices responsible for encrypting and decrypting packets must be the original sender and receiver of the packet. Most of the data traffic between two security gateways is not of the security gateways own. So transport mode is not often used between security gateways. The proposal used by the ipsec policies set at both ends of the security tunnel must be set with the same packet encapsulation mode. Related command: ah authentication-algorithm, ipsec proposal, esp
encryption-algorithm, esp authentication-algorithm, proposal, transform.
Example
# Set the proposal whose name is prop2 as using the transport mode to encapsulate IP packets.
[3Com] ipsec proposal prop2 [3Com-ipsec-proposal- prop2] encapsulation-mode transport
4.1.9 esp authentication-algorithm

Syntax
esp authentication-algorithm { md5 | sha1 } undo esp authentication-algorithm
View
IPSec proposal configuration view
Parameter
md5: Use MD5 algorithm with the length of the key 128 bits. sha1: Use SHA1 algorithm with the length of the key 160 bits.
Description
Use the esp authentication-algorithm command to set the authentication algorithm used by ESP. Use the undo esp authentication-algorithm command to set ESP not to authenticate packets. By default, MD5 algorithm is used. MD5 is faster than SHA1, while SHA1 is securer than MD5. ESP permits a packet to be encrypted or authenticated or both. The encryption and authentication algorithm used by ESP cannot be set to vacant at the same time. The undo esp authentication-algorithm command is not used to restore the authentication algorithm to the default; instead it is used to set the authentication algorithm to vacant, i.e. not authentication. When the encryption algorithm is not vacant, the undo esp authentication-algorithm command is valid. The proposal used by the ipsec policies set at both ends of the security tunnel must be set as having the same authentication algorithm. Related command: ipsec proposal, esp encryption-algorithm, proposal, sa encryption-hex, transform.
Example
# Set a proposal that adopts ESP, and uses SHA1.
[3Com] ipsec proposal prop1 [3Com-ipsec-proposal- prop1] transform esp [3Com-ipsec-proposal- prop1] esp authentication-algorithm sha1
4.1.10 esp encryption-algorithm

Syntax
esp encryption-algorithm { 3des | des | aes } undo esp encryption-algorithm
View
IPSec proposal view
Parameter
des: Data Encryption Standard (DES), a universal encryption algorithm with the length of the key being 56 bits. 3des: 3DES (Triple DES), another universal encryption algorithm with the length of the key being 168 bits. aes: AES (Advanced Encryption Standard), an encryption algorithm conforming to the IETF standards. 128-bit key can be implemented on the 3Com Router Software...
Description
Use the esp encryption-algorithm command to set the encryption algorithm adopted by ESP. Use the undo esp encryption-algorithm command to set the ESP not to encrypt packets. By default, DES algorithm is used. 3DES can meet the requirement of high confidentiality and security, but it is comparatively slow. And DES can satisfy the normal security requirements. ESP permits a packet to be encrypted or authenticated or both. The encryption and authentication methods used by ESP cannot be set to a vacant value at the same time. The undo esp encryption-algorithm command can take effect only if the authentication algorithm is not null. Related command: ipsec proposal, esp authentication-algorithm, proposal, sa encryption-hex and transform.
Example
# Set ESP to use 3DES.
[3Com] ipsec proposal prop1 [3Com-ipsec-proposal-prop1] transform esp [3Com-ipsec-proposal-prop1] esp encryption-algorithm 3des
4.1.11 ipsec policy(in Interface View)

Syntax
ipsec policy policy-name undo ipsec policy
View
Interface view
Parameter
policy-name: Specifies the name of an ipsec policy group applied at the interface. The ipsec policy group with name policy-name should be configured in system view.
Description
Use the ipsec policy(interface view) command to apply an ipsec policy group with the name policy-name at the interface,. Use the undo ipsec policy (interface view) command to cancel the ipsec policy group so as to disable the IPSec function of the interface. At an interface, only one ipsec policy group can be applied. An ipsec policy group can be applied at multiple interfaces. When a packet is sent from an interface, it searches for each ipsec policy in the ipsec policy group by number in an ascending order. If the packet matches an access control list used by an ipsec policy, then this ipsec policy is used to process the packet; otherwise it continues to search for the next ipsec policy. If the packet does not match any of the access control lists used by all the ipsec policies, it will be directly transmitted (that is, IPSec will not protect the packet). To prevent transmitting any unencrypted packet from the interface, it is necessary to use the firewall together with IPSec; the firewall is for dropping all the packets that do not need to be encrypted. Related command: ipsec policy(system view).
Example
# Apply an ipsec policy whose name is policy1 to interface Serial 4/1/2.
[3Com] interface serial 4/1/2 [3Com-Serial4/1/2] ipsec policy policy1
4.1.12 ipsec policy (in System View)

Syntax
ipsec policy policy-name seq-number [ manual | isakmp [ template template-name ] ] undo ipsec policy policy-name [ seq-number ]
View
System view
Parameter
policy-name: Name of the ipsec policy. The naming rule is: the length of the name is 1 to 15 characters, the name is case insensitive, the characters can be English characters or numbers, and cannot include -. seq-number: Sequence number of the ipsec policy, ranging 1 to 10000, with lower value indicating higher sequence priority. manual: Sets up SA manually. isakmp: Sets up SA through IKE negotiation. template: Dynamically sets up SA by using policy template. The policy-name discussed here will reference template-name which is a created policy template thus named. template-name: Name of the template.
Description
Use the ipsec policy command to establish or modify an ipsec policy, and enter IPSec policy view. Use the undo ipsec policy policy-name command to delete an IPSec policy group whose name is policy-name. Use the undo ipsec policy policy-name seq-number command to delete an IPSec policy whose name is policy-name and sequence number is seq-number. By default, no ipsec policy exists. To establish an ipsec policy, it is necessary to specify the negotiation mode (manual or isakmp). To modify the ipsec policy, it is not necessary to specify a negotiation mode. Once the ipsec policy is established, its negotiation mode cannot be modified. For example: if an ipsec policy is established in manual mode, it cannot be changed to isakmp mode--this ipsec policy must be deleted and then recreated, if appropriate, with the negotiation mode being isakmp. Ipsec policies with the same name constitute an ipsec policy group. The name and sequence number are used together to define a unique ipsec policy. In an ipsec policy group, at most 100 ipsec policies can be set. In an ipsec policy, the smaller the sequence number of an ipsec policy is, the higher its preference. Apply an ipsec policy group at an interface means applying all ipsec policies in the group simultaneously, so that different data streams can be protected by adopting different SAs.
Use the ipsec policy policy-name seq-number isakmp template template-name command to establish an ipsec policy according the template through IKE negotiation. Before using this command, the template should have been created. During the negotiation and policy matching, the parameters defined in the template should be compliant; the other parameters are decided by the initiator. The proposal must be defined in policy template, and other parameters are optional. Note that IKE will not use a policy with a template argument to initiate a negotiation. Rather, it uses such a policy to respond to the negotiation initiated by its peer. Related command: ipsec policy (interface view), security acl, tunnel local, tunnel remote, sa duration, proposal, display ipsec policy, ipsec policy-template, ike-peer.
Example
# Set an ipsec policy whose name is newpolicy1, sequence number is 100, and negotiation mode is isakmp.
[3Com] ipsec policy newpolicy1 100 isakmp [3Com-ipsec-policy-isakmp-newpolicy1-100]
4.1.13 ipsec policy-template

Syntax
ipsec policy-template template-name seq-number undo ipsec policy-template template-name [ seq-number ]
View
System view
Parameter
template-name: Name of the IPSec policy template, an alphanumeric string of 1 to 15 characters, case insensitive, excluding minus signs (-). seq-number: Number of the IPSec policy template, in the range 1 to 10000. In one IPSec policy template group, the smaller the serial number of an IPSec policy template, the higher its preference.
Description
Use the ipsec policy-template command to establish or modify an IPSec policy template and enter IPSec policy template view. Use the undo ipsec policy-template template-name command to delete the IPSec policy template group named template-name.
Use the undo ipsec policy-template template-name seq-number command to delete the IPSec policy template with the name of template-name and the serial number of seq-number. By default, no IPSec policy template exists. A policy template that has been created with the name of template-name can be referenced by the ipsec policy policy-name seq-number isakmp template template-name command to create an IPSec policy. The IPSec policy template and the security policy of IPSec IPSAMP negotiation share the same kinds of arguments, including the referenced IPSec proposal, the protected traffic, PFS feature, lifetime, and the address of the remote tunnel end. However, you should note that the proposal argument is compulsory to be configured whereas other arguments are optional. If an IPSec policy template is used for the policy match operation undertaken in an IKE negotiation, the configured arguments must be matched, and the settings of the initiator will be used if the corresponding arguments have not been configured. Related command: ipsec policy, security acl, tunnel local, tunnel remote, proposal, display ipsec policy, ike-peer.
Example
# Establish an IPSec policy template with the name of template1 and the serial number of 100.
[3Com] ipsec policy-template template1 100
[3Com-ipsec-policy-template- template1-100]
4.1.14 ipsec proposal

Syntax
ipsec proposal proposal-name undo ipsec proposal proposal-name
View
System view
Parameter
proposal-name: Name of the specified proposal. The naming rule is: the length of the name is 1 to 15 characters, case insensitive.
Description
Use the ipsec proposal proposal-name command to establish or modify a proposal named proposal-name, and enter IPSec proposal view. Use the undo ipsec proposal proposal-name command to delete the proposal named proposal-name. By default, no proposal exists. This proposal is a combination of the security protocol, encryption and authentication algorithm and packet encapsulation format for implementing IPSec protection. An ipsec policy determines the protocol, algorithm and encapsulation mode to be adopted by the use of the proposal. Before the ipsec policy uses a proposal, this proposal must have already been set up. By default, after a new IPSec proposal is established by using the ipsec proposal command, the ESP protocol, DES encryption algorithm and MD5 authentication algorithm are adopted. Related command: ah authentication-algorithm, esp encryption-algorithm, esp authentication-algorithm, encapsulation-mode, proposal, display ipsec proposal and transform.
Example
# Establish a proposal named newprop1.
[3Com] ipsec proposal newprop1
4.1.15 ipsec sa global-duration

Syntax
ipsec sa global-duration { time-based seconds | traffic-based kilobytes } undo ipsec sa global-duration { time-based | traffic-based }
View
System view
Parameter
time-based seconds: Time-based global SA duration in seconds, ranging from 30 to 604800 seconds. By default, it is 3600 seconds (1 hour).
traffic-based kilobytes: Traffic-based global SA duration in kilobytes, ranging from 256 to 4194303 kilobytes. By default, it is 1843200 kilobytes, and when the traffic reaches this value, the duration expires.
Description
Use the ipsec sa global-duration command to set a global SA duration. Use the undo ipsec sa global-duration command to restore the default setting of the global SA duration. When IKE negotiates to establish a SA, if the adopted IPSec policy is not configured with its own duration, the system will use the global SA duration specified by this command to negotiate with the peer. If the IPSec policy is configured with its own duration, the system will use the duration of the IPSec policy to negotiate with the peer. When IKE negotiates to set up a SA for IPSec, the smaller one of the lifetime set locally and that proposed by the remote are selected. There are two types of SA duration, time-based (in seconds) and traffic-based (in kilobytes) lifetimes. The traffic-based SA duration, that is, the valid time of the SA is accounted according to the total traffic that can be processed by this SA, and the SA is invalid when the set value is exceeded. No matter which one of the two types expires first, the SA will get invalid. Before the SA is about to become invalid, IKE will set up a new SA for IPSec negotiation. So, a new SA is ready before the existing one becomes invalid. Modifying the global SA duration will not affect a map that has individually set up its own SA duration, or an SA already set up. But the modified global SA duration will be used to set up a new SA in the future IKE negotiation. The SA duration does not function for an SA manually set up, that is, a SA manually set up will never be invalidated. Related command: sa duration and display ipsec sa duration.
Example
# Set the global SA duration to 2 hours.
[3Com] ipsec sa global-duration time-based 7200
# Set the global SA duration to 10M bytes transmitted.

[3Com] ipsec sa global-duration traffic-based 10000
4.1.16 pfs
Syntax
pfs { dh-group1 | dh-group2 }
undo pfs
View
IPSec policy view, IPSec policy template view
Parameter
dh-group1: Specifies that the 768-bit Diffie-Hellman group is used. dh-group2: Specifies that the 1024-bit Diffie-Hellman group is used.
Description
Use the pfs command to set the Perfect Forward Secrecy (PFS) feature for the IPSec policy to initiate the negotiation. Use the undo pfs command to set not to use the PFS feature during the negotiation. By default, no PFS feature is used. The command is used to add a PFS exchange process when IPSec uses the ipsec policy to initiate a negotiation. This additional key exchange is performed during phase 2 negotiation in order to enhance the communication safety. The DH group specified by the local and remote ends must be consistent, otherwise negotiation will fail. This command can be used only when the security alliance is established through IKE style. Related command: ipsec policy-template, ipsec policy(system view), ipsec policy(interface view), tunnel local, tunnel remote, sa duration and proposal.
Example
# Set that PFS must be used when negotiating through ipsec policy boston 200.
[3Com] ipsec policy boston 200 isakmp [3Com-ipsec-policy-isakmp-boston-200] pfs group1
4.1.17 proposal
Syntax
proposal proposal-name1 [ proposal-name2...proposal-name6 ] undo proposal [ proposal-name ]
View
Parameter
proposal-name1,, proposal-name6: Name of the proposals adopted.
Description
Use the proposal command to set the proposal used by the IPSec policy. Use the undo proposal command to cancel the proposal used by the IPSec policy. By default, no proposal is used. Before using this command the corresponding IPSec proposal must be configured. If set up in manual mode an SA can only use one proposal. If a proposal is already set, it needs to be deleted by using the undo proposal command before a new one can be set. If set up in isakmp mode, an SA can use six proposals at most. IKE negotiation will search for the completely matching proposal at both ends of the security tunnel. If it is the IPSec template, each template can use six proposals at most, and the IKE negotiation will search for the proposal that matches completly. Related command: ipsec proposal, ipsec policy(system view), ipsec policy(interface view), security acl, tunnel local and tunnel remote.
Example
# Set a proposal with name prop1, adopting ESP and the default algorithm, and sets an IPSec policy as using a proposal name prop1.
[3Com] ipsec proposal prop1 [3Com-ipsec-proposal-prop1] transform esp [3Com-ipsec-proposal-prop1] quit [3Com] ipsec policy policy1 100 manual [3Com-ipsec-policy-manual-policy1-100] proposal prop1
4.1.18 reset ipsec sa

Syntax
reset ipsec sa [ remote ip-address | policy policy-name [ seq-number ] | parameters dest-addr protocol spi ]
View
User view
Parameter
remote ip-address: Specifies remote address, in dotted decimal format.
policy: Specifies the IPSec policy. policy-name: Specifies the name of the IPSec policy. The naming rule is as follows: length is 1 to 15 characters, case sensitive, and the character can be English character or number. seq-number: Optional parameter specifying the serial number of the ipsec policy. If no seq-number is specified, the IPSec policy refers to all the policies in the IPSec policy group named policy-name. parameters: Defines a Security Association (SA) by the destination address, security protocol and SPI. dest-address: Specifies the destination address in the dotted decimal IP address format. protocol: Specifies the security protocol by inputting the key word ah or esp, case insensitive. ah indicates the Authentication Header protocol and esp indicates Encapsulating Security Payload. spi: Specifies the security parameter index (SPI), ranging 256 to 4294967295.
Description
Use the reset ipsec sa command to delete an SA already set up (manually or through IKE negotiation). If no parameter (remote, policy, parameters) is specified, all the SAs will be deleted. A SA is uniquely identified by a triplet of IP address, security protocol and SPI. A SA can be set up either manually or through Internet Key Exchange (IKE) negotiation. If a SA set up manually is deleted, the system will automatically set up a new SA according to the parameter manually set up. If a packet re-triggers IKE negotiation after a SA set up through IKE negotiation is deleted, IKE will reestablish a SA through negotiation. The keyword parameters will take effect only after the spi of the outbound SA is defined. Because SAs appear in pairs, the inbound SA will also be deleted after the outbound SA is deleted. Related command: display ipsec sa.
Example
# Delete all the SAs.
<3Com> reset ipsec sa
# Delete an SA whose remote IP address is 10.1.1.2.

<3Com> reset ipsec sa remote 10.1.1.2
# Delete all the SAs in policy1.

<3Com> reset ipsec sa policy policy1
# Delete the SA of the ipsec policy with the name policy1 and the serial number 10.
<3Com> reset ipsec sa policy policy1 10
# Delete an SA whose remote IP address is 10.1.1.2, security protocol is AH, and SPI is 10000
<3Com> reset ipsec sa parameters 10.1.1.2 ah 10000
4.1.19 reset ipsec statistics

Syntax
reset ipsec statistics
View
User view
Parameter
None
Description
Use the reset ipsec statistics command to clear IPSec message statistics, and set all the statistics to zero. Related command: display ipsec statistics.
Example
# Clear IPSec message statistics.
<3Com> reset ipsec statistics
4.1.20 sa authentication-hex
Syntax
sa authentication-hex { inbound | outbound } { ah | esp } hex-key undo sa authentication-hex { inbound | outbound } { ah | esp }
View
Manually-established IPSec policy view
Parameter
inbound: Configures the authentication-hex parameter for the inbound SA. IPSec uses the inbound SA for processing the packet in the inbound direction (received). outbound: Configures the authentication-hex parameter for the outbound SA. IPSec uses the outbound SA for processing the packet in the outbound direction (sent). ah: Sets the authentication-hex parameter for the SA using AH. If the IPSec proposal used by the ipsec policy adopts AH, the ah key word is used here to set the AH relevant parameter of the SA. esp: Sets the authentication-hex parameter for the SA using ESP. If the IPSec proposal used by the ipsec policy adopts ESP, the esp key word is used here to set the ESP relevant parameter of the SA. hex-key: Specifies a key for the SA input in the hex format. If MD5 is used, then input a 16-byte key; if SHA1 is used, input a 20-byte key.
Description
Use the sa authentication-hex command to set the SA authentication key manually for the ipsec policy of manual mode. Use the undo sa authentication-hex command to delete the SA authentication key already set. This command is only used for the ipsec policy in manual mode. For the ipsec policy in isakmp mode, it is unnecessary to set the SA parameter manually. IKE will automatically negotiate the SA parameter and establish a SA. When configuring the SA of manual mode, the SA parameters of inbound and outbound directions must be set separately. The SA parameters set at both ends of the security tunnel must fully match. The SPI and key for the SA input at the local end must be the same as those output at the remote. The SA SPI and key output at the local end must be the same as those input at the remote. There are two methods for inputting the key, hex and character string. For the character string key and hex string key the last set one will be adopted. At both ends of a security tunnel, the key should be input by the same method. If the key is input in character string at one end and it is input in hex at the other end, then a security tunnel cannot be set up correctly. Related command: ipsec policy (system view), ipsec policy (interface view), security acl , tunnel local, tunnel remote, sa duration and proposal.
Example
# Set SPI of the inbound SA to 10000, key to 0x112233445566778899aabbccddeeff00; sets the SPI of the outbound SA to 20000, and its key to 0xaabbccddeeff001100aabbccddeeff00 in the ipsec policy using AH and MD5.
[3Com] ipsec proposal prop_ah [3Com-ipsec-proposal-prop_ah] transform ah [3Com-ipsec-proposal-prop_ah] ah authentication-algorithm md5 [3Com-ipsec-proposal-prop_ah] quit [3Com] ipsec policy tianjin 100 manual [3Com-ipsec-policy-manual-tianjin-100] proposal prop_ah [3Com-ipsec-policy-manual-tianjin-100] sa spi inbound ah 10000 [3Com-ipsec-policy-manual-tianjin-100] 112233445566778899aabbccddeeff00 [3Com-ipsec-policy-manual-tianjin-100] sa spi outbound ah 20000 [3Com-ipsec-policy-manual-tianjin-100] aabbccddeeff001100aabbccddeeff00 sa authentication-hex outbound ah sa authentication-hex inbound ah
4.1.21 sa duration
Syntax
sa duration { traffic-based kilobytes | time-based seconds } undo sa duration { traffic-based | time-based }
View
Parameter
time-based seconds: Time-based SA duration in second, ranging 30 to 604800 seconds. It is 3600 seconds (1 hour) by default. traffic-based kilobytes: Traffic-based SA duration in kilobyte, ranging 256 to 4194303 kilobytes. It is 1843200 kilobytes by default.
Description
Use the sa duration command to set a SA duration of the ipsec policy. Use the undo sa duration command to cancel the SA duration, i.e., restore the use of the global SA duration.
When IKE negotiates to establish a SA, if the adopted IPSec policy is not configured with its own duration, the system will use the global SA duration to negotiate with the peer. If the IPSec policy is configured with its own duration, the system will use the duration of the IPSec policy to negotiate with the peer. When IKE negotiates to set up a SA for IPSec, the shorter one in the lifetime set locally and that proposed by the remote are selected. There are two types of SA duration, time-based (in seconds) and traffic-based (in kilobytes) lifetimes. The traffic-based SA duration, that is, the valid time of the SA is accounted according to the total traffic that can be processed by this SA, and the SA is invalid when the set value is exceeded. No matter which one of the two types expires first, the SA will become invalid. Before the SA is about to become invalid, IKE will set up a new SA for IPSec negotiation. So, a new SA is ready before the existing one becomes invalid. The SA duration does not function for an SA manually set up, that is, the SA manually set up will never be invalidated. Related command: ipsec sa global-duration, ipsec policy(system view), ipsec policy(interface view), security acl, tunnel local, tunnel remote and proposal.
Example
# Set the Sa duration for the ipsec policy springfield 100 to 2 hours, that is, 7200 seconds.
[3Com] ipsec policy springfield 100 isakmp [3Com-ipsec-policy-isakmp-springfield-100] sa duration time-based 7200
# Set the Sa duration for the ipsec policy springfield 100 to 20M bytes, that is, the SA is overtime when the traffic exceeds 20000 kilobytes.
[3Com] ipsec policy springfield 100 isakmp [3Com-ipsec-policy-isakmp-springfield-100] sa duration traffic-based 20000
4.1.22 sa encryption-hex
Syntax
sa encryption-hex { inbound | outbound } esp hex-key undo sa encryption-hex { inbound | outbound } esp
View
Parameter
inbound: Sets the encryption-hex parameter for the inbound SA. IPSec uses the inbound SA for processing the packet in the inbound direction (received).
outbound: Sets the encryption-hex parameter for outbound SA. IPSec uses the outbound SA for processing the packet in the outbound direction (sent). esp: Sets the encryption-hex parameter for the SA using ESP. If the IPSec proposal used by the ipsec policy adopts ESP, the esp key word is used here to set the ESP relevant parameter of the SA. hex-key: Specifies a key for the SA input in the hex format. When applied in ESP, if DES is used, then input a 8-byte key; if 3DES is used, then input a 24-byte key.
Description
Use the sa encryption-hex command to set the SA encryption key manually for the ipsec policy of manual mode. Use the undo sa encryption-hex command to delete the SA parameter already set. This command is only used for the ipsec policy in manual mode. It is used to set the SA parameter manually and establish a SA manually. For the ipsec policy in isakmp mode, it is unnecessary to set the SA parameter manually, and this command is invalid. IKE will automatically negotiate the SA parameter and establish a SA. When configuring the SA of manual mode, the SA parameters of inbound and outbound directions must be set separately. The SA parameters set at both ends of the security tunnel must match fully. The SPI and key for the SA input at the local end must be the same as those output at the remote. The SA SPI and key output at the local end must be the same as those input at the remote. Related command: ipsec policy(system view), ipsec policy(interface view), security acl , tunnel local, tunnel remote, sa duration and proposal.
Example
# Set the SPI of the inbound SA to 10000, and the key to 0x1234567890abcdef; set the SPI of the outbound SA to 20000, and its key to 0xabcdefabcdef1234 in the ipsec policy using ESP and DES.
[3Com] ipsec proposal prop_esp [3Com-ipsec-proposal-prop_esp] transform esp [3Com-ipsec-proposal-prop_esp] ah encryption-algorithm des [3Com-ipsec-proposal-prop_esp] quit [3Com] ipsec policy tianjin 100 manual [3Com-ipsec-policy-manual-tianjin-100] proposal prop_esp [3Com-ipsec-policy-manual-tianjin-100] sa spi inbound esp 1001

[3Com-ipsec-policy-manual-tianjin-100] 1234567890abcdef

sa encryption-hex inbound esp
[3Com-ipsec-policy-manual-tianjin-100] sa spi outbound esp 2001 [3Com-ipsec-policy-manual-tianjin-100] abcdefabcdef1234 sa encryption-hex outbound esp
4.1.23 sa spi
Syntax
sa spi { inbound | outbound } { ah | esp } spi-number undo sa spi { inbound | outbound } { ah | esp }
View
Parameter
inbound: Sets the spi parameter for the inbound SA. IPSec uses the inbound SA for processing the packet in the inbound direction (received). outbound: Sets the spi parameter for outbound SA. IPSec uses the outbound SA for processing the packet in the outbound direction (sent). ah: Sets the spi parameter for the SA using AH. If the IPSec proposal set used by the ipsec policy adopts AH, the ah key word is used here to set the spi relevant parameter of the SA. esp: Sets the spi parameter for the SA using ESP. If the IPSec proposal set used by the ipsec policy adopts ESP, the esp key word is used here to set the spi relevant parameter of the SA. spi-number: Security Parameter Index (SPI) in the triplet identification of the SA, ranging from 256 to 4294967295. The triplet identification of the SA, which appears as SPI, destination address, and protocol number, must be unique.
Description
Use the sa spi command to set the SA SPI manually for the ipsec policy of manual mode. Use the undo sa spi command to delete the SA SPI already set. This command is only used for the ipsec policy in manual mode. It is used to set the SA parameter manually and establish a SA manually. For the ipsec policy in isakmp mode, it is unnecessary to set the SA parameter manually, and this command is invalid. IKE will automatically negotiate the SA parameter and establish a SA.
When configuring the SA of manual mode, the SA parameters of inbound and outbound directions must be set separately. The SA parameters set at both ends of the security tunnel must match fully. The SPI and key for the SA input at the local end must be the same as those output at the remote. The SA SPI and key output at the local end must be the same as those input at the remote. Related command: ipsec policy(system view), ipsec policy(interface view), security acl , tunnel local, tunnel remote, sa duration and proposal.
Example
# Set the SPI of the inbound SA to 10000, set the SPI of the outbound SA to 20000, in the ipsec policy using AH and MD5.
[3Com] ipsec proposal prop_ah [3Com-ipsec-proposal-prop_ah] transform ah [3Com-ipsec-proposal-prop_ah] ah authentication-algorithm md5 [3Com-ipsec-proposal-prop_ah] quit [3Com] ipsec policy tianjin 100 manual [3Com-ipsec-policy-manual-tianjin-100] proposal prop_ah [3Com-ipsec-policy-manual-tianjin-100] sa spi inbound ah 10000 [3Com-ipsec-policy-manual-tianjin-100] sa spi outbound ah 20000
4.1.24 sa string-key
Syntax
sa string-key { inbound | outbound } { ah | esp } string-key undo sa string-key { inbound | outbound } { ah | esp }
View
Parameter
inbound: Sets the string-key parameter for the inbound SA. IPSec uses the inbound SA for processing the packet in the inbound direction (received). outbound: Sets the string-key parameter for the outbound SA. IPSec uses the outbound SA for processing the packet in the outbound direction (sent). ah: Sets the string-key parameter for the SA using AH. If the IPSec proposal set used by the ipsec policy adopts AH, the ah key word is used here to set the string-key relevant parameter of the SA.
esp: Sets the string-key parameter for the SA using ESP. If the IPSec proposal set used by the ipsec policy adopts ESP, the esp key word is used here to set the string-key relevant parameter of the SA. string-key: Specifies the key for a SA input in the character string format, with a length ranging from 1 to 256 characters. For different algorithms you can input character strings of any length in the specified range, and the system will generate keys meeting the algorithm requirements automatically according to the input character strings. As for ESP, the system will automatically generate the key for the authentication algorithm and for the encryption algorithm at the same time.
Description
Use the sa string-key command to set the SA parameter manually for the ipsec policy of manual mode. Use the undo sa string-key command to delete the SA parameter already set. This command is only used for the ipsec policy in manual mode. It is used to set the SA parameter manually and establish a SA manually. For the ipsec policy in isakmp mode, it is unnecessary to set the SA parameter manually, and this command is invalid. IKE will automatically negotiate the SA parameter and establish a SA. When configuring the SA of manual mode, the SA parameters of inbound and outbound directions must be set separately The SA parameters set at both ends of the security tunnel must match fully. The SPI and key for the SA input at the local end must be the same as those output at the remote. The SA SPI and key output at the local end must be the same as those input at the remote. There are two methods for inputting the key, hex and character string. To input a hexadecimal key, use the sa authentication-hex command. For the character string key and hex string key, the last set one will be adopted. At both ends of a security tunnel, the key should be input by the same method. If the key is input in character string at one end, and it is input in hex at the other end, then a security tunnel cannot be set up correctly. Related command: ipsec policy(system view), ipsec policy(interface view), security acl , tunnel local, tunnel remote, sa duration, proposal.
Example
# Set the SPI of the inbound SA to 10000, and the key string to abcdef; sets the SPI of the outbound SA to 20000, and its key string to efcdab in the ipsec policy using AH and MD5.
[3Com] ipsec proposal prop_ah [3Com-ipsec-proposal-prop_ah] transform ah
[3Com-ipsec-proposal-prop_ah] ah authentication-algorithm md5 [3Com-ipsec-proposal-prop_ah] quit [3Com] ipsec policy tianjin 100 manual [3Com-ipsec-policy-manual-tianjin-100] proposal prop_ah [3Com-ipsec-policy-manual-tianjin-100] sa spi inbound ah 10000 [3Com-ipsec-policy-manual-tianjin-100] sa string-key abcdef [3Com-ipsec-policy-manual-tianjin-100] sa spi outbound ah 20000 [3Com-ipsec-policy-manual-tianjin-100] sa string-key efcdab
4.1.25 security acl

Syntax
security acl acl-number undo security acl
View
Parameter
acl-number: Specifies the number of the access control list used by the ipsec policy, ranging 3000 to 3999.
Description
Use the security acl command to set an access control list to be used by the ipsec policy. Use the undo security acl command to remove the access control list used by the ipsec policy. By default, no ACL has been specified for the IPSec policies. The data flow that will be protected by the IPSec policy is confined by the ACL in this command. According to the rules in the ACL, IPSec determines which packets need security protection and which do not. The packet permitted by the access control list will be protected, and a packet denied by the access control list will not be protected. The denied packets are sent out directly without IPSec protection. Related command: ipsec policy(system view), ipsec policy(interface view), tunnel local, tunnel remote, sa duration, proposal.
Example
# Set the ipsec policy as using access control list 3001.
[3Com] acl number 3001

[3Com-acl-adv-3001] 10.1.1.2 0.0.0.255 rule permit tcp

source 10.1.1.1 0.0.0.255 destination
[3Com] ipsec policy marlborough 100 manual [3Com-ipsec-policy-manual-marlborough-100] security acl 3001
4.1.26 transform
Syntax
transform { ah | ah-esp | esp } undo transform
View
IPSec proposal view
Parameter
ah: Uses AH protocol specified in RFC2402. ah-esp: Uses ESP specified in RFC2406 to protect the packets and then use AH protocol specified in RFC2402 to authenticate packets. esp: Uses ESP specified in RFC2406.
Description
Use the transform command to set a security protocol used by a proposal. Use the undo transform command to restore the default security protocol. By default, esp, that is, the ESP specified in RFC2406 is used. If ESP is adopted, the default encryption algorithm is DES and the authentication algorithm is MD5. If AH is adopted the default authentication algorithm is MD5. If the parameter ah-esp is specified, the default authentication algorithm for AH is MD5 and the default encryption algorithm for ESP is DES without authentication. AH protocol provides data authentication, data integrity check, and anti-replay function. ESP protocol provides data authentication, data integrity check, anti-replay function, and data encryption. While establishing a SA manually, the proposals used by the ipsec policy set at both ends of the security tunnel must be set as using the same security protocol. The following figure illustrates the data encapsulation formats of different security protocols in transport mode and tunnel mode.

Transfer Security mode protocol
transport IP IP IP AH ESP AH data data ESP ESP-T data ESP-T IP AH IP IP
tunnel data data ESP-T data ESP-T
ah esp ah-esp
IP ESP IP AH
ESP IP
Figure 4-1 Data encapsulation formats of security protocols data in the figure is the original IP datagram. Related proposal. command: ah esp authentication-algorithm, authentication-algorithm, ipsec proposal, esp and
encryption-algorithm,
encapsulation-mode
Example
# Set a proposal using AH.
[3Com] ipsec proposal prop1 [3Com-ipsec-proposal-prop1] transform ah
4.1.27 tunnel local

Syntax
tunnel local ip-address undo tunnel local
View
Parameter
ip-address: Local address in dotted decimal format.
Description
Use the tunnel local command to set the local address of an ipsec policy. Use the undo tunnel local command to delete the local address set in the ipsec policy. By default, the local address of an ipsec policy is not configured.
It is not necessary to set a local address for an ipsec policy in isakmp mode, so this command is invalid in this situation. IKE can automatically obtain the local address from the interface where this ipsec policy is applied. As for the ipsec policy in manual mode, it is necessary to set the local address before the SA can be established. A security tunnel is set up between the local and remote end, so the local address and remote address must be correctly configured before a security tunnel can be set up. Related command: ipsec policy(system view), ipsec policy(interface view), security acl , tunnel remote, sa duration and proposal.
Example
# Set the local address for the ipsec policy, which is applied at serial 4/1/2 whose IP address is 10.0.0.1.
[3Com] ipsec policy guangzhou 100 manual [3Com-ipsec-policy-manual-guangzhou-100] tunnel local 10.0.0.1 [3Com-ipsec-policy-manual-guangzhou-100] quit [3Com] interface serial 4/1/2 [3Com-if-Serial4/1/2] ipsec policy guangzhou
4.1.28 tunnel remote

Syntax
tunnel remote ip-address undo tunnel remote [ ip-address ]
View
Parameter
ip-address: Remote address in dotted decimal format.
Description
Use the tunnel remote command to set the remote address of an ipsec policy. Use the undo tunnel remote command to delete the remote address in the ipsec policy. By default, the remote address of an ipsec policy is not configured.
For the ipsec policy in manual mode, only one remote address can be set. If a remote address is already set, this existing address must be deleted before a new one can established. The security tunnel is established between the local and remote ends. The remote address must be set correctly on both ends of the security tunnel. Related command: ipsec policy(system view), ipsec policy(interface view), security acl , tunnel local, sa duration, proposal.
Example
# Set the remote address of the ipsec policy to 10.1.1.2.
[3Com] ipsec policy boston 10 manual [3Com-ipsec-policy-boston-10] tunnel remote 10.1.1.2
4.2 Encryption Card Configuration Commands

4.2.1 debugging encrypt-card
Syntax
debugging encrypt-card { all | command | error | misc | packet | sa } [ slot-id ] undo debugging encrypt-card { all | command | error | misc | packet | sa } debugging encrypt-card host { all | command | error | misc | packet | sa } undo debugging encrypt-card host { all | command | error | misc | packet | sa }
View
User view
Parameter
all: Enables all debugging on the encryption card. command: Enables command debugging on the encryption card. error: Enables error debugging on the encryption card. misc: Enables other debugging on the encryption card. packet: Enables packet debugging on the encryption card. sa: Enables security association (SA) debugging on the encryption card. host: Enables host debugging on the encryption card. slot-id: Slot ID for the encryption card, whose range depends on the slot number on the router. It is in 3-dimentional format, for example, x/y/z, where x stands for slot ID on the
router, y and z are fixed to 0 for the encryption card. If you do not specify a value for the parameter, the system will display the log of all encryption cards. If you input nothing here, your operation will run to all encryption cards.
Description
Use the debugging encrypt-card command to enable debugging on the encryption card. Use the undo debugging encrypt-card command to disable debugging on the encryption card.
Example
# Enable command debugging on the encryption card at slot 5/0/0.
[Router] debugging encrypt-card command 5/0/0 debugging ipsec
Syntax
debugging ipsec { all | sa | misc | packet [ policy policy-name [ seq-number ] | parameters ip-address protocol spi-number ] | misc } undo debugging ipsec { all | sa | misc | packet [ policy policy-name [ seq-number ] | parameters ip-address protocol spi-number ] | misc }
View
User view
Parameter
all: Displays all debugging information. sa: Displays debugging information of SA. packet: Displays debugging information of IPSec packets. policy policy-name: Displays debugging information of IPSec policy whose name is policy-name. seq-number: Displays debugging information of IPSec policy whose sequence number is seq-number. parameters: Displays debugging information of a SA whose remote address is ip-address, Security protocol is protocol, and SPI is spi-number. misc: Displays other debugging information of IPSec.
Description
Use the debugging ipsec command to turn IPSec debugging on.
Use the undo debugging ipsec command to turn IPSec debugging off. By default, IPSec debugging is off.
Example
# Enable IPSec SA debugging function.
<3Com> debugging ipsec sa
4.2.2 display encrypt-card fast-switch

Syntax
display encrypt-card fast-switch
View
Any view
Parameter
None
Description
Use the display encrypt-card fast-switch command to view the entries in the fast forwarding cache for the encryption cards.
Example
# Display the entries in the fast forwarding cache for the encryption cards.
[Router] display encrypt-card fast-switch encrypt-card Fast-Forwarding cache: Index SourIP 18 130 1.1.1.2 1.1.1.1 SourPort 8 0 DestIP 1.1.1.1 1.1.1.2 DestPort 0 0 Prot TdbID Type encrypt decrypt
1 0x00000024 50 0x00000023
Table 4-8 Description on the fields of the display encrypt-card fast-switch command Field Index SourIP SourPort DestIP DestPort Description Index of the fast forwarding entry Source IP address Source port Destination IP address Destination port
Prot TdbID Type
Protocol number TDB ID for encrypting this flow Two options are available: encrypt (in the outgoing direction) and decrypt (in the incoming direction)
4.2.3 display encrypt-card sa

Syntax
display encrypt-card sa [ slot-id ]
View
Any view
Parameter
slot-id: Slot ID for the encryption card, whose range depends on the slot number on the router. It is in 3-dimentional format, for example, x/y/z, where x stands for slot ID on the router, y and z are fixed to 0 for the encryption card. If you do not specify a value for the parameter, the system will display the log of all encryption cards. If you input nothing here, your operation will run to all encryption cards.
Description
Use the display encrypt-card sa command to view SA information. This command is only available on the encryption card. These kinds of information shall be displayed: SA proposal name, local address, remote address, remaining SA remaining key duration, schedule performance index (SPI), slot ID, and other similar information.
Example
# Display all SA information on the encryption card at slot 5/0/0.
[Router] display encrypt-card sa 5/0/0 AH SAs proposal: ESP-AUTH-SHA1HMAC96 local address: 20.0.0.2 remote address: 20.0.0.1 sa remaining key duration (bytes/sec): 1887435992/2401 spi: 1081108020 (0x40706634)

Uses Encrypt5/0
ESP SAs proposal: ESP-ENCRYPT-3DES proposal: ESP-AUTH-SHA1HMAC96 local address: 20.0.0.2 remote address: 20.0.0.1 sa remaining key duration (bytes/sec): 1887436136/2401 spi: 891512401 (0x35236651) Uses Encrypt5/0/0
ESP SAs proposal: ESP-ENCRYPT-3DES proposal: ESP-AUTH-SHA1HMAC96 local address: 20.0.0.1 remote address: 20.0.0.2 sa remaining key duration (bytes/sec): 1887436532/2401 spi: 3024247997 (0xb4425cbd) Uses Encrypt5/0/0
AH SAs proposal: ESP-AUTH-SHA1HMAC96 local address: 20.0.0.1 remote address: 20.0.0.2 sa remaining key duration (bytes/sec): 1887436464/2401 spi: 2937733563 (0xaf1a41bb) Uses Encrypt5/0/0
4.2.4 display encrypt-card statistics

Syntax
display encrypt-card statistics [ slot-id ]
View
Any view
Parameter
slot-id: Slot ID for the encryption card, whose range depends on the slot number on the router. It is in 3-dimentional format, for example, x/y/z, where x stands for slot ID on the
router, y and z are fixed to 0 for the encryption card. If you do not specify a value for the parameter, the system will display the log of all encryption cards. If you input nothing here, your operation will run to all encryption cards.
Description
Use the display encrypt-card statistics command to view statistics on the encryption cards. The statistics include the processing information of ESP/AH packets on the encryption card. More details are displayed in the following example. If the slot ID you type in is greater than the available slot number on the router, the error information Invalid encrypt-card slot-id will be prompted. Related command: reset encrypt-card statistic.
Example
# Display the statistics on the encryption card at slot 5/0/0.
[Router] display encrypt-card statistics 5/0/0 Encrypt5/0/0 security packets statistics : input/output security packets: 8/4 input/output security bytes: 1472/604 dropped security packet detail: no enough memory: 0 can't find SA: 0 queue is full: 0 authentication is failed: 0 wrong length: 0 replay packet: 0 too long packet: 0 wrong SA: 0 invalid proposal: 0 invalid protocol: 0 buffer error: 0 wrap error: 0 crypto error: 0 pad error: 0
4.2.5 display encrypt-card syslog

Syntax
display encrypt-card syslog [ slot-id ]
View
Any view
Parameter
slot-id: Slot ID for the encryption card, whose range depends on the number of slots on the router. If no slot is specified, information on all encryption cards is displayed. Slot numbers are represented by x/y/z, where x is the slot number, and y and z are zero with respect to encryption cards.
Description
Use the display encrypt-card syslog command to view the current system log on the encryption cards. If the slot ID you type in is greater than the available slot number on the router, the error information Invalid encrypt-card slot-id shall be prompted. Related command: encrypt-card set syslog.
Example
# Display the system log on the encryption card at slot 5/0/0.
[Router] display encrypt-card syslog 5/0/0
Date: 2004-03-27, Time: 11:45
Encrypt5/0/0 : receive time config cmd. Encrypt5/0/0 : receive add tdb cmd. Encrypt5/0/0 : receive add tdb cmd. Encrypt5/0/0 : receive link tdb cmd. Encrypt5/0/0 : receive add tdb cmd. Encrypt5/0/0 : receive add tdb cmd. Encrypt5/0/0 : receive link tdb cmd.
Date: 2004-03-27, Time: 11:50 Date: 2004-03-27, Time: 11:50 Date: 2004-03-27, Time: 11:50 Date: 2004-03-27, Time: 11:50 Date: 2004-03-27, Time: 11:50 Date: 2004-03-27, Time: 11:50
4.2.6 display interface encrypt

Syntax
display interface encrypt [ slot-id ]
View
Any view
Parameter
slot-id: Slot ID for the encryption card, whose range depends on the slot number on the router. It is in 3-dimentional format, for example, x/y/z, where x stands for slot ID on the router, y and z are fixed to 0 for the encryption card. If you do not specify a value for the parameter, the system will display the log of all encryption cards. If you input nothing here, your operation will run to all encryption cards.
Description
Use the display interface encrypt command to view the information about the ports on the encryption cards. With this command you can view the status of the encryption card, total countnumber of packets transmitted or received on it, maximum countnumber of packets dropped per second, and information during the last five seconds. Related command: interface encrypt.
Example
# Display the port information on the encryption card at slot 5/0/0.
[Router] display interface Encrypt 5/0/0 Description : Encrypt5/0/0 Interface READY READY
Protocol Status: Driver Status :
Total Statistics Packets sent to card Packets received from card Bytes sent to card Bytes received from card Dropped packets Statistics during last 5 seconds Packets sent to card Packets received from card Bytes sent to card Bytes received from card Dropped packets : : : : : 0 0 0 0 0 : : : : : 0 10 9 1216 584
4.2.7 encrypt-card backuped

Syntax
encrypt-card backuped undo encrypt-card backuped
View
System view
Parameter
None
Description
Use the encrypt-card backuped command to enable backup function for the encryption card. Use the undo encrypt-card backuped command to disable backup function for the encryption card. For the IPSec SA implemented by the encryption card, if the card is normal, IPSec is processed by the card. If the card fails, backup function is enabled on the card and the selected encryption/authentication algorithms for the SA are supported by the IPSec module on the 3Com Router Software platform, IPSec shall be implemented by the IPSec module on the 3Com Router Software platform. In the event that the selected algorithms are not supported by the IPSec module, the system drops packets.
Example
# Enable backup function for the encryption card.
[Router] encrypt-card backuped
4.2.8 encrypt-card fast-switch

Syntax
encrypt-card fast-switch undo encrypt-card fast-switch
View
System view
Parameter
None
Description
Use the encrypt-card fast-switch command to enable the fast forwarding function of the encryption card. Use the undo encrypt-card fast-switch command to disable the fast forwarding function of the encryption card. By default, the fast forwarding function of the encryption card is disabled. For the packets that have the same [SourIP, SourPort, DestIP, DestPort, Prot] quintuple, the router creates a fast forwarding entry when it receives the first packet. Then, the subsequent packets, rather than processed packet by packet, are sent directly to the encryption card, where they are sent to the destination after being encrypted or decrypted. This is how the fast forwarding function of the encryption card expedites packet processing.
Example
# Enable the fast forwarding function of the encryption card.
[Router] encrypt-card fast-switch
4.2.9 interface encrypt

Syntax
interface encrypt [ slot-id ]
View
System view
Parameter
slot-id: Slot ID for the encryption card, whose range depends on the slot number on the router. It is in 3-dimentional format, for example, x/y/z, where x stands for slot ID on the router, y and z are fixed to 0 for the encryption card.
Description
Use the interface encrypt command to enter encryption card interface view. In encryption card interface view, you can only use the shutdown and undo shutdown commands, respectively to shut down the encryption card or turn the card up.
Example
# Enter the interface mode of the encryption card at slot 5/0/0.
[Router] interface encrypt 5/0/0

[Router-Encrypt5/0/0]
4.2.10 ipsec card-proposal

Syntax
ipsec card-proposal proposal-name undo ipsec card-proposal proposal-name
View
System view
Parameter
proposal-name: Name of the SA proposal of the encryption card, a string up to 32 characters. It is case-sensitive.
Description
Use the ipsec card-proposal command to create an SA proposal for the encryption card and enter the corresponding view. Use the undo ipsec card-proposal command to delete an SA proposal of the encryption card. This command is used in encryption card SA proposal view (the corresponding encryption/decryption/authentication are implemented on the encryption card), whereas the host software is also compatible with SA proposal view of the host itself (the ipsec proposal command), in which the encryption/decryption/authentication are implemented by the host. In encryption card SA proposal view, you can also specify the slot ID of the encryption card for the SA proposal with the use encrypt card command, while other configurations are identical with the ipsec proposal command. After completing SA proposal configuration you need to return to system view using the quit command, so that you can initiate other configurations.
Example
# Create the SA proposal card using the encryption card at slot 5/0/0, configure security and encryption algorithm.
[Router] ipsec card-proposal card [Router-ipsec-card-proposal] use encrypt-card 5/0/0 [Router-ipsec-card-proposal-card] transform ah-esp [Router-ipsec-card-proposal-card] ah authentication-algorithm sha1 [Router-ipsec-card-proposal-card] esp authentication-algorithm sha1
[Router-ipsec-card-proposal-card] esp encryption-algorithm 3des [Router-ipsec-card-proposal-card] quit [Router]
4.2.11 reset counters encrypt

Syntax
reset counters interface encrypt [ slot-id ]
View
User view
Parameter
Description
Use the reset counters interface encrypt command to clear the statistics on the encryption card. The statistics record all the information starting from normal operation of the encryption card, while system debugging requires statistics of a specific time period for fault analysis. Then you may need to reset the existing statistics and get the statistics of a required time period. Related command: ipsec card-proposal and display encrypt-card sa.
Example
# Clear the statistics on the encryption card on the slot 5/0/0.
<Router> reset counters encrypt-card 5/0/0
4.2.12 reset encrypt-card sa

Syntax
reset encrypt-card sa [ slot-id ]
View
User view
Parameter
Description
Use the reset encrypt-card sa command to clear the SAs on the encryption card. You may need to clear the SA database information stored on the encryption card to output only the required information during debugging. Related command: ipsec card-proposal and display encrypt-card sa.
Example
# Clear the SAs on the encryption card on the slot 5/0/0.
<Router> reset encrypt-card sa 5/0/0
4.2.13 reset encrypt-card statistics

Syntax
reset encrypt-card statistics [ slot-id ]
View
User view
Parameter
Description
Use the reset encrypt-card statistics command to clear the statistics during processing of the encryption card. The statistics record all the protocol processing information from the last rebooting, including counts of incoming/outgoing ESP/AH packets, dropped packets, failed authentications, erroneous SAs, invalid SA proposals, and invalid protocols. Related command: display encrypt-card statistic.
Example
# Clear the processing statistics on the encryption card on the slot 5/0/0.
<Router> reset encrypt-card statistic 5/0/0
4.2.14 reset encrypt-card syslog

Syntax
reset encrypt-card syslog [ slot-id ]
View
User view
Parameter
Description
Use the reset encrypt-card syslog command to clear all the logging information on the encryption card. The encryption card records all logging history information. All the information (including those obsolete items) shall be reported for every query, which imposes difficulties to log monitoring and locating. You may need to clear the log buffer of the encryption card. Related command: display encrypt-card syslog.
Example
# Clear all the logging information on the encryption card on the slot 5/0/0.
<Router> reset encrypt-card syslog 5/0/0
4.2.15 snmp-agent trap enable encrypt-card

Syntax
snmp-agent trap enable encrypt-card undo snmp-agent trap enable encrypt-card
View
System view
Parameter
None
Description
Use the snmp-agent trap enable encrypt-card command to enable SNMP agent trap function on the encryption card. Use the undo snmp-agent trap enable encrypt-card command to disable SNMP agent trap function on the card. By default, no ACL has been specified for the IPSec policies. When combined with appropriate NM configuration, the trap function allows you to view the information about card rebooting, status transition, and packet loss processing on the Console of the NM station or router.
Example
# Enable the trap function on the encryption card.
[Router] snmp-agent trap enable encrypt-card
4.2.16 use encrypt-card

Syntax
use encrypt-card [ slot-id ] undo use encrypt-card [ slot-id ]
View
Card SA proposal view
Parameter
Description
Use the use encrypt-card command to specify the SA proposal to use the encryption card at a designated slot. Use the undo use encrypt-card command to remove the configuration. By default, no ACL has been specified for the IPSec policies.
One SA proposal can only be processed by a single encryption card, but one single encryption card can process different SA proposals. Related command: ipsec card-proposal.
Example
# Configure the slot holding the encryption card used by the encryption card SA proposal named card.
[Router] ipsec card-proposal card [Router-ipsec-card-proposal] use encrypt-card 5/0/0
Chapter 5 IKE Configuration Commands

5.1 IKE Configuration Commands
5.1.1 authentication-algorithm
Syntax
authentication-algorithm { md5 | sha } undo authentication-algorithm
View
IKE proposal view
Parameter
md5: Selects the authentication algorithm: HMAC-MD5. sha: Selects the authentication algorithm: HMAC-SHA1.
Description
Use the authentication-algorithm command to select the authentication algorithm for an IKE proposal. Use the undo authentication-algorithm command to restore the authentication algorithm for an IKE proposal to the default. By default, HMAC-SHA1 authentication algorithm is used. Related command: ike proposal, display ike proposal.
Example
# Set HMAC-MD5 as the authentication algorithm for IKE proposal 10.
[3Com] ike proposal 10 [3Com-ike-proposal-10] authentication-algorithm md5
5.1.2 authentication-method
Syntax
authentication-method { pre-share | rsa-signature } undo authentication-method
View
IKE proposal view
Parameter
pre-share: Specifies the pre-shared key authentication as the Internet Key Exchange (IKE) proposal authentication method. rsa-signature: specifies to authenticate through PKI digital signature.
Description
Use the authentication-method command to select the authentication method used by an IKE proposal. Use the undo authentication-method command to restore the authentication method used by an IKE proposal to the default. By default, the authentication method used by an IKE proposal is pre-shared key authentication. You can specify an authentication method for an IKE policy. So far, two methods are available, pre-shared key and PKI (rsa-signature). Authentication key must be configured to adopt the pre-shared key authentication method. Related command: ike pre-shared-key, ike proposal, display ike proposal, pki domain, and pki entity.
Note: For more information on configuring PKI refer to PKI Configuration in this manual.
Example
# Specify pre-shared key authentication as the authentication method for IKE proposal 10.
[3Com] ike proposal 10 [3Com-ike-proposal-10] authentication-method pre-share
5.1.3 debugging ike

Syntax
debugging ike { all | error | exchange | message | misc | transport}
undo debugging ike { all | error | exchange | message | misc | transport}
View
User view
Parameter
all: All IKE debugging functions. error: IKE error debugging information. exchange: IKE exchange mode debugging information. message: IKE message debugging information. misc: All the other IKE debugging information. transport: IKE transport debugging information.
Description
Use the debugging ike command to enable IKE debugging. Use the undo debugging ike command to disable IKE debugging. By default, IKE debugging is disabled.
Example
# Enable IKE error debugging.
<3Com> debugging ike error
5.1.4 dh
Syntax
dh { group1 | group2 } undo dh
View
IKE proposal view
Parameter
group1: Selects group1, that is, the 768-bit Diffie-Hellman group. group2: Selects group2, that is, the 1024-bit Diffie-Hellman group.
Description
Use the dh command to select the Diffie-Hellman group for an IKE proposal. Use the undo dh command to restore the Diffie-Hellman group for an IKE proposal to the default. By default, group1, that is, 768-bit Diffie-Hellman group is used. Related command: ike proposal, display ike proposal.
Example
# Specify 768-bit Diffie-Hellman for IKE proposal 10.
[3Com] ike proposal 10 [3Com-ike-proposal-10] dh group1
5.1.5 display ike peer

Syntax
display ike peer [ peer-name ]
View
Any view
Parameter
peer-name: Name of the IKE peer, a string up to 15 characters.
Description
Use the display ike peer command to view the configuration about a specified or all IKE peers.
Example
# Display the configuration about all IKE peers.
[3Com-ike-peer-good] display ike peer
--------------------------IKE Peer: good exchange mode: main on phase 1 pre-shared-key: peer id type: ip peer ip address: 0.0.0.0 ~ 255.255.255.255

peer name: nat traversal: disable ---------------------------
5.1.6 display ike proposal

Syntax
display ike proposal
View
Any view
Parameter
None
Description
Use the display ike proposal command to view the parameters configured for each IKE proposal. This command shows IKE proposals in the sequence of priority. Related command: authentication-method, ike proposal, encryption-algorithm, authentication-algorithm, dh, sa duration.
Example
# View the IKE proposal information after two IKE proposals are configured.
[3Com] display ike proposal
priority authentication authentication encryption Diffie-Hellman duration method algorithm algorithm group (seconds)
--------------------------------------------------------------------10 PRE_SHARED 11 default SHA PRE_SHARED PRE_SHARED DES_CBC MD5 SHA MODP_1024 DES_CBC DES_CBC 5000 MODP_768 MODP_768 ike proposal 50000 86400
Table 5-1 Description on the fields of the display Field Protection suite priority encryption algorithm
command
Description Priority of the IKE proposal, an integer in the range 1 to 100, with a higher number indicating a lower priority Encryption algorithm in the IKE proposal
authentication algorithm authentication method Diffie-Hellman group sa duration
Authentication algorithm in the IKE proposal Authentication mode in the IKE proposal Diffie-Hellman group identifier
ISAKMP SA lifetime in the IKE proposal
Default protection suite
Default IKE proposal. It is adopted either when configured or in case none of the configured IKE proposals is suitable. The priority of the default IKE proposal is the lowest.
5.1.7 display ike sa

Syntax
display ike sa
View
Any view
Parameter
None
Description
Use the display ike sa command to view the current security tunnels established by IKE. Related command: ike proposal.
Example
# View the security tunnels established by IKE.
[3Com] display ike sa conn-id 1 2 remote 202.38.0.2 202.38.0.2 flag RD|ST RD|ST phase 1 2 doi IPSEC IPSEC
flag meaning: RD--READY ST--STAYALIVE RL--REPLACED FDFADING TO-TIMEOUT
The descriptions of the items displayed are listed in the following table.
Table 5-2 Description on the fields of the display ike sa command Field conn-id remote Description Security channel ID Remote IP address of this SA Display the status of this SA RD (READY) means this SA has been established successfully ST (STAYALIVE) means that SA duration is negotiated, and this SA will be refreshed in fixed interval. RL (REPLACED) means that this SA has been replaced by a new one, and will be automatically deleted after a period of time. FD (FADING) means this SA has been soft timeout, but is still in use, and will be deleted at the time of hard timeout. TO (TIMEOUT) means this SA have not received any keepalive packet after previous keepalive timeout occurred. If this SA receives no keepalive packet till next keepalive timeout occurs, this SA will be deleted. Phase of the SA: Phase 1: a phase of establishing security channel to communicate, ISAKMP SA will be established in the phase; Phase 2: a phase of negotiating security service, IPSec SA will be established in the phase. doi Domain of Interpretation
flag
phase
5.1.8 encryption-algorithm
Syntax
encryption-algorithm { des-cbc | 3des-cbc } undo encryption-algorithm
View
IKE proposal view
Parameter
des-cbc: Selects the 56-bit DES-CBC encryption algorithm for an IKE proposal. DES algorithm adopts 56-bit keys for encryption. 3des-cbc: Sets the encryption algorithm to the 3DES algorithm in CBC mode. The 3DES algorithm uses 168-bit keys for encryption.
Description
Use the encryption command to specify the encryption algorithm for an IKE proposal. Use the undo encryption command to restore to the default. By default, 56-bit DES-CBC encryption algorithm is used. Related command: ike proposal and display ike proposal.
Example
# Specify the 56-bit DES-CBC encryption algorithm for IKE proposal 10.
[3Com] ike proposal 10 [3Com-ike-proposal-10] encryption-algorithm des-cbc
5.1.9 exchange-mode
Syntax
exchange-mode [ aggressive | main ] undo exchange-mode
View
IKE-peer view
Parameter
aggressive: Aggressive mode main: Main mode.
Description
Use the exchange-mode command to select an IKE negotiation mode.
Use the undo exchange-mode command to restore the default negotiation mode. By default, main mode is adopted. In main mode, you can only use IP address to perform IKE negotiation and to create an SA. It is applicable to the situation in which both ends of a tunnel have fixed IP addresses. In IKE aggressive mode, you can use both IP addresses and name to perform IKE negotiation and to create an SA. If the user at one end of a security tunnel obtains IP address automatically (for example, a dial-up user), IKE negotiation mode must be set to aggressive. In this case, you can create an SA as long as the username and password are correct. Related command: id-type.
Example
# Adopt the main mode for IKE negotiation.
[Router] ike peer new_peer [RouterA-ike-peer-new_peer] exchange-mode main
5.1.10 id-type
Syntax
id-type [ ip | name ] undo id-type
View
IKE-peer view
Parameter
ip: Selects IP address as the ID used in IKE negotiation. name: Selects name as the ID used in IKE negotiation.
Description
Use the id-type command to select the type of ID used in IKE negotiation. Use the undo id-type command to restore the default setting. By default, the IP address is the ID used in IKE negotiation. In main mode, you can only use IP address to perform IKE negotiation and to create an SA. In aggressive mode, you can use both IP address and name to perform Ike negotiation and to create an SA. Related command: ike local-name.
Example
# Set name as the ID used in IKE negotiation.
[Router] ike peer new_peer [Router-ike-peer-new_peer] id-type name
5.1.11 ike next-payload check disabled

Syntax
ike next-payload check disabled undo ike next-payload check disabled
View
System view
Parameter
None
Description
Use the ike next-payload check disabled command to disable the router to check the next-payload field in the last payload of the IKE negotiation packet during IPSec negotiation for compatibility with other vendors. Use the undo ike next-payload check disabled command to restore the default, checking the next payload field. An IKE negotiation packet comprises of multiple payloads; the next-payload field is in the generic header of the last payload. According to the protocol, this field should be set to 0. However, it may vary by vendor. For compatibilitys sake, you can use the ike next-payload check disabled command to ignore this field during IPSec negotiation.
Example
# Disable the router to check the next-payload field in the last payload of the IKE negotiation packet during IPSec negotiation.
[Router] ike next-payload check disabled
5.1.12 ike local-name

Syntax
ike local-name name
undo ike local-name
View
System view
Parameter
name: Name of the local GW in IKE negotiation, which contains 1 to 32 characters.
Description
Use the ike local-name command to set the name of the local GW. Use the undo ike local-name command to restore the default name of the local GW. By default, router name is used as the name of the local GW. If the initiator uses the GW name to perform IKE negotiation (id-type name is used), you must configure the ike local-name command on the local device. Related command: remote-name.
Example
# Identify the local GW by the configured name marlborough_VPN
[Router] ike local-name marlborough_VPN
5.1.13 ike peer (in System View)

Syntax
ike peer peer-name undo ike peer peer-name
View
System view
Parameter
peer-name: IKE peer name, which can be a string of up to 15 characters.
Description
Use the ike peer command to configure an IKE peer and access IKE-peer view. Use the undo ike peer command to delete an IKE peer.
Example
# Configure an IKE peer new_peer and access its view.
[Router] ike peer new_peer [3Com-ike-peer-new_peer]
5.1.14 ike peer (In IPSec policy view or IPSec policy template view)
Syntax
ike peer peer-name undo ike peer peer-name
View
Parameter
peer-name: IKE peer name, which is a string of up to 15 characters.
Description
Use the ike peer command to quote an IKE peer in an IPSec policy or IPSec policy template. Use the undo ike peer command to remove the quoted IKE peer from the IPSec policy or IPSec policy template. Related command: ipsec policy.
Example
# Quote an IKE peer in the IPSec policy.
[Router-ipsec-policy-isakmp-policy-10] ike peer new_peer
5.1.15 ike proposal

Syntax
ike proposal proposal-number undo ike proposal proposal-number
View
System view
Parameter
proposal-number: IKE proposal number, ranging from 1 to 100. This value also stands for the priority. A smaller value stands for a higher priority. When performing an IKE negotiation, the system matches IKE proposals by the proposal number; the one with the smallest proposal number first.
Description
Use the ike proposal command to define an IKE proposal. Use the undo ike proposal command to delete an IKE proposal. The system provides a default IKE proposal with the lowest priority. Executing this command in system view will enter IKE proposal view, where you can set parameters such as authentication method, encryption algorithm, authentication algorithm, DH group ID, and sa duration for this IKE proposal using the authentication-method, encryption-algorithm, dh, authentication-algorithm, and sa duration command. The Default IKE proposal has the following default parameters: Encryption algorithm: DES-CBC Authentication algorithm: HMAC-SHA1 Authentication method: Pre-Shared Key DH group ID: MODP_768 SA duration: 86400 seconds These parameters will be used to establish a security tunnel once these parameters are confirmed by the both sides of the negotiation. Both sides of the negotiation can be configured with more then one IKE proposal. During the negotiation, the IKE proposals in both sides are selected to match one by one, by turns of their priority level. The parameters that must be the same during the match are encryption algorithm, authentication algorithm, authentication method, and DH group. The sa duration is decided by the initiator of the negotiation, needing no agreement. Related command: authentication-algorithm, encryption-algorithm, dh,
authentication-algorithm, sa duration, display crypto isakmp policy.
Example
# Define IKE proposal 10.
[3Com] ike proposal 10 [3Com-ike-proposal-10] authentication-algorithm md5 [3Com-ike-proposal-10] authentication-method pre-share

[3Com-ike-proposal-10] sa duration 5000
5.1.16 ike sa keepalive-timer interval

Syntax
ike sa keepalive-timer interval seconds undo ike sa keepalive-timer interval
View
System view
Parameter
seconds: Specifies the interval for sending Keepalive packet to the remote end through ISAKMP SA. It can be set to a value in the range of 20 to 28800.
Description
Use the ike sa keepalive-timer interval command to configure the interval for sending a Keepalive packet to the remote end through ISAKMP SA. Use the undo ike sa keepalive-timer interval command to disable the function. By default, this function is disabled. This command is used to configure the interval for sending Keepalive packets to the remote end through ISAKMP SA. IKE maintains the link state of the ISAKMP SA by using the Keepalive packet. In general, if a timeout is configured at the remote end by using the ike sa keepalive-timer timeout command, an interval for sending a Keepalive packet must be configured at the local end. When the remote end in the configured timeout time does not receive the Keepalive packet, the ISAKMP SA with the TIMEOUT flag and the IPSec SA corresponding to it will be deleted, and the ISAKMP SA without the TIMEOUT flag will be marked as TIMEOUT. Thus the configured timeout should be longer than the interval for sending the Keepalive packet during configuration. Related command: ike sa keepalive-timer timeout.
Example
# Configure the interval as 20 seconds for the local end to send Keepalive packet to the remote end.
[3Com] ike sa keepalive-timer interval 20
5.1.17 ike sa keepalive-timer timeout

Syntax
ike sa keepalive-timer timeout seconds undo ike sa keepalive-timer timeout
View
System view
Parameter
seconds: Specifies the timeout for ISAKMP SA to wait for the Keepalive packet. It can be set to a value in the range 20 to 28800.
Description
Use the ike sa keepalive-timer timeout command to configure a timeout for ISAKMP SA to wait for the Keepalive packet. Use the undo ike sa keepalive-timer timeout command to disable the function. By default, this function is disabled. This command is used to configure the timeout for the remote end to send the Keepalive packet. IKE maintains the link state of the ISAKMP SA by using the Keepalive packet. When the remote end in the configured timeout does not receive the Keepalive packet, the ISAKMP SA with the TIMEOUT flag and the IPSec SA corresponding to it will be deleted, and the ISAKMP SA without the TIMEOUT flag will be marked as TIMEOUT. Thus the configured timeout should be longer than the interval for sending the Keepalive packet during configuration. Generally, packets will not be lost more than three consecutive times in the network, so the timeout can be configured as three times the interval set for the remote end to send Keepalive packets. Related command: ike sa keepalive-timer interval.
Example
# Configure the timeout as 20 seconds for the local end to wait for the remote end to send the Keepalive packet.
[3Com] ike sa keepalive-timer timeout 20
5.1.18 local
Syntax
local { multi-subnet | single-subnet } undo local
View
IKE-peer view
Parameter
multi-subnet: Sets the subnet type to multiple. single-subnet: Sets the subnet type to single.
Description
Use the local command to configure the subnet type in IKE negotiation. Use the undo local command to restore the default subnet type. You can use this command to enable interoperability between the router and a Netscreen device. The default is single-subnet.
Example
# Set the subnet type in IKE negotiation to multiple.
[Router-ike-peer-xhy] local multi-subnet
5.1.19 local-address
Syntax
local-address ip-address undo local-address
View
IKE-peer view
Parameter
ip-address: IP address of the local GW in IKE negotiation.
Description
Use the local-address command to configure the IP address of the local GW in IKE negotiation. Use the undo local-address command to delete the IP address of the local GW. Normally, you do not need to configure the local-address command, unless you want to specify a special address for the local GW.
Example
# Set the IP address of the local GW to 1.1.1.1.
[Router-ike-peer-xhy] local-address 1.1.1.1
5.1.20 max-connections
Syntax
max-connections number undo max-connections
View
IKE-peer view
Parameter
number: Maximum number of connections. It is in the range 1 to 1000 and defaults to 1.
Description
Use the max-connections command to configure the maximum number of connections that the IKE peer allows. Use the undo max-connections command to restore the default maximum number of connections that the IKE peer allows, that is, 1.
Example
# Configure the maximum number of connections that an IKE peer allows.
[Router] ike peer new_peer [Router-ike-peer-new_peer] max-connections 10
5.1.21 nat traversal

Syntax
nat traversal undo nat traversal
View
IKE-peer view
Parameter
None
Description
Use the nat traversal command to configure the NAT traversal function of IKE/IPSec. Use the undo nat traversal command to disable the NAT traversal function of IKE/IPSec. This command fits for the application that the NAT GW functionality is included in the VPN tunnel constructed by IKE/IPSec. To save IP address space, ISPs often add NAT gateways to public networks, in order to allocate private IP addresses to users. This may lead to IPSec/IKE tunnel having both public network address and private network address at both ends. You must enable NAT traversal at the private network end, so as to ensure normal negotiation and establishment for the tunnel.
Example
# Enable the NAT traversal function.
[Router] ike peer new_peer [Router-ike-peer-new_peer] nat traversal
5.1.22 pre-shared-key
Syntax
pre-shared-key key undo pre-shared-key
View
IKE-peer view
Parameter
key: Specifies a pre-shared key, which is a string of 1 to 128 characters.
Description
Use the pre-shared-key command to configure a pre-shared key to be used in IKE negotiation. Use the undo pre-shared-key command to remove the pre-shared key used in IKE negotiation.
Example
# Set the pre-shared key used in IKE negotiation to abcde.
[Router] ike peer new_peer [Router-ike-peer-new_peer] pre-shared-key abcde
5.1.23 peer
Syntax
peer { multi-subnet | single-subnet } undo peer
View
IKE-peer view
Parameter
multi-subnet: Sets the subnet type to multiple. single-subnet: Sets the subnet type to single.
Description
Use the peer command to configure the subnet type in IKE negotiation. Use the undo peer command to restore the default subnet type. You can use this command to enable interoperability between the router and a Netscreen device. The default is single-subnet.
Example
# Set the subnet type in IKE negotiation to multiple.
[Router-ike-peer-xhy] peer multi-subnet
5.1.24 remote-address
Syntax
remote-address ip-address undo remote-address
View
IKE-peer view
Parameter
ip-address: IP address, which can be the address of a network segment.
Description
Use the remote-address command to configure IP address of the remote GW. Use the undo remote-address command to delete IP address of the remote GW. If the initiator uses its IP address in IKE negotiation (that is, id-type ip is used), it sends its IP address to the peer as its identity, whereas the peer uses the address configured using the remote-address ip-address command to authenticate the initiator. To pass authentication, this address must be the same one configured using the local-address command on the initiator.
Example
# Set IP address of the remote GW to 10.0.0.1.
[Router] ike peer new_peer [Router-ike-peer-new_peer] remote-address 10.0.0.1
5.1.25 remote-name
Syntax
remote-name name undo remote-name
View
IKE-peer view
Parameter
name: Specifies a name for the peer in IKE negotiation. It is a string of 1 to 32 characters.
Description
Use the remote-name command to specify a name for the remote GW. Use the undo remote-name command to remove the remote GW. If the initiator uses its GW name in IKE negotiation (that is, id-type name is used), it sends the name to the peer as its identity, whereas the peer uses the username configured using the remote-name name command to authenticate the initiator. To pass authentication, this remote name must be the same one configured using the ike local-name command on the gateway at the initiator end.
Example
# Set the name of the remote GW to marlborough.
[Router] ike peer new_peer [Router-ike-peer-new_peer] remote-name marlborough
5.1.26 reset ike sa

Syntax
reset ike sa [ connection-id ]
View
User view
Parameter
connection-id: Specifies the SA to be deleted. If this parameter is not specified, all the SAs at phase 1 will be deleted.
Description
Use the reset ike sa command to delete the security tunnel set up by IKE. If connection-id is not specified, all the SAs at phase 1 will be deleted. If ISAKMP SA at phase 1 exists when deleting the local security tunnel, a Delete Message notification will be sent to the remote under the protection of this security tunnel to notify the remote to delete the corresponding SA. IKE uses ISAKMP of two phases; phase 1 or ISAKMP SA to establish SA, phase 2 or IPSec SA to negotiate and establish IPSec SA, using the former established SA. Related command: display ike sa.
Example
# Delete the security tunnel to 202.38.0.2.
<3Com> display ike sa conn-id 1 2 remote 202.38.0.2 202.38.0.2 flag RD|ST RD|ST 1 2 phase doi IPSEC IPSEC
flag meaning: RD--READY ST--STAYALIVE RT--REPLACED FD--FADING <3Com> reset ike sa 2 <3Com> display ike sa conn-id 2 remote 202.38.0.2 flag RD|ST 2 phase doi IPSEC
flag meaning: RD--READY ST--STAYALIVE RT--REPLACED FDFADING
Caution: If the SA of phase 1 is deleted first, the remote end cannot be informed of clearing the SA database when deleting the SA of phase 2.
5.1.27 sa duration
Syntax
sa duration seconds undo sa duration
View
IKE proposal view
Parameter
seconds: Specifies the ISAKMP Sa duration. When the sa duration expires, ISAKMP SA will update automatically. It can be set to a value in the range 60 to 604800 seconds.
Description
Use the sa duration command to specify the ISAKMP Sa duration for an IKE proposal.
Use the undo sa duration command to restore it to the default. By default, the value of ISAKMP Sa duration is 86400 seconds (one day). Before the sa duration for a SA expires, a new SA will be negotiated to replace the existing SA, and the old SA will be cleared automatically when the Sa duration expires. Related command: ike proposal and display ike proposal.
Example
# Specify the ISAKMP Sa duration for IKE proposal 10 as 600 seconds (10 minutes).
[3Com] ike proposal 10 [3Com-ike-proposal-10] sa duration 600
Chapter 6 PKI Configuration Commands

6.1 PKI Domain Configuration Commands
6.1.1 ca identifier
Syntax
ca identifier name undo ca identifier
View
PKI domain view
Parameter
name: CA identifier this device trusts, within the range of 1 to 63 characters
Description
Use the ca identifier command to specify the CA this device trusts and have the "name" CA bound with this device. Use the undo ca identifier command to delete the CA this device trusts. By default, no trusted CA is specified. Before the CA is deleted, the request, retrieval, revocation and polling of this certificate are all carried out through it.
Example
# Specify the name of the CA this device trusts
[RouterCA-pki-domain-1] ca identifier new-ca
6.1.2 certificate request from

Syntax
certificate request from { ca | ra } entity entity-name undo certificate request from { ca | ra }
View
PKI domain view
Parameter
ca: indicates that the entity registers by CA for certificate request; ra: indicates that the entity registers by RA for certificate request; entity entity-name: name of the entity under certificate request. Within the range of 1 to 15 characters, it shall be identical with that defined by the pki entity command.
Description
Use the certificate request from command to choose between CA and RA to register for certificate request. Use the undo certificate request from command to undo the selection registration agent. RA offers an extension to the CA certificate issue management. It takes charge of the input and verification of the applicant information as well as the certificate issuing, but it does not support signature function. Within some minor PKI systems, there is no RA and its functions are implemented through CA. By default, no registration agent is specified. PKI security policy recommends RA as registration agent. Related command: pki entity.
Example
# Specify that the entity registers by CA for certificate request
[RouterCA-pki-domain-1] certificate request from ca entity new-entity [RouterCA-pki-domain-1] undo certificate request from ca
6.1.3 certificate request mode

Syntax
certificate request mode { manual | auto } undo certificate request mode
View
PKI domain view
Parameter
manual: refers to the manual certificate request mode;
auto: refers to the auto certificate request mode.
Description
Use the certificate request mode command to decide between manual or auto request mode. Use the undo certificate request mode command to restore the default request mode. Auto mode enables the auto delivery of certificate requests when there is no certificate or when the current certificate is about to expire. Manual mode requires manual operation in the request process. By default, certificate request is carried out manually. Related command: pki request certificate.
Example
# Set the request mode to Auto
[RouterCA-pki-domain-1] certificate request mode auto [RouterCA-pki-domain-1] undo certificate request mode
6.1.4 certificate request polling

Syntax
certificate request polling { interval minutes | count count } undo certificate request polling { interval | count }
View
PKI domain view
Parameter
minutes: renders the interval between two polls. Specified in minutes, it ranges from 5 to 60 minutes, and by default, it is 20 minutes; count: indicates the retry times. It ranges from 1 to 100, and by default, is 50.
Description
Use the certificate request polling command to specify the interval between two polls and the retry times. Use the undo certificate request polling command to restore the default parameters.
When the request is delivered, if CA requires manual authentication, it takes a long time before the certificate is issued. The client therefore needs to periodically poll the request for the timely acquisition of the certificate after being authorized. Related command: display pki certificate.
Example
# Specify the interval between two polls and the retry times
[RouterCA-pki-domain-1] certificate request polling interval 15 [RouterCA-pki-domain-1] certificate request polling count 40
6.1.5 certificate request url

Syntax
certificate request url string undo certificate request url
View
PKI domain view
Parameter
string: refers to the server URL of the registration authority. Ranging from 1 to 255 characters, it composes server location and CA CGI command interface script location in the format of http: //server_location /ca_script_location. Among them, server_location is generally expressed as IP address, which if is to be replaced by server name, DNS needs to be configured for the conversion match between IP addresses and server names.
Description
Use the certificate request url command to specify the server URL for certificate request through SCEP protocol. SCEP is a protocol specialized in the communication with authentication authorities. Use the undo certificate request url command to delete the concerned location setting. By default, no server URL is specified.
Example
# Specify the server location for certificate request
[RouterCA-pki-domain-1] certsrv/mscep/mscep.dll certificate request url http: //169.254.0.100/
6.1.6 crl update period

Syntax
crl update period { default | days } undo crl update period
View
PKI domain view
Parameter
default: identical with the validity period of CRL days: number of days
Description
Use the crl update period command to specify the update period of CRL, which is the interval between local downloads of CRLs from CRL access server. Use the undo crl update period command to restore the default CRL update period. By default, it updates according to CRL validity period.
Example
# Specify CRL update period
[RouterCA-pki-domain-1] crl update period 20
6.1.7 crl url

Syntax
crl url url-string undo crl url
View
PKI domain view
Parameter
url-string: refers to the distribution point location of CRL. Ranging from 1 to 255 characters, it is in the format of ldap: //server_location. Among them, server_location is generally expressed as IP address, which if is to be replaced by server name, DNS needs to be configured for the match between IP addresses and server names.
Description
Use the crl url command to specify the distribution point URL for CRL. Use the undo crl url command to undo the specification. By default, no CRL distribution point URL is specified.
Example
# Specify the URL location of CRL database
[RouterCA-pki-domain-1] crl url ldap: // 169.254.0 30
6.1.8 ldap server

Syntax
ldap server ip ip-address [ port port-num ] [ version version-number ] undo ldap server ip
View
PKI domain view
Parameter
ip-address: IP address of LDAP server; port-num: port number of LDAP server, ranging from 1 to 65535. By default, it is 389. version-number: LDAP version number, alternatively 2 or 3. By default, it is 2.
Description
Use the ldap server ip command to configure the LDAP server IP address and the port. Use the undo ldap server ip command to cancel the related configuration. By default, no LDAP server IP address or port is configured.
Example
# Specify the LDAP server address
[RouterCA-pki-domain-1] ldap server ip 169.254.0 30
6.1.9 pki domain

Syntax
pki domain name
undo pki domain name
View
Any view
Parameter
name: PKI domain name specified for the quotation of other commands, indicating the PKI domain to which this device belongs. It can contain 1 to 15 characters.
Description
Use the pki domain command to enter PKI domain view and configure the parameters of LDAP server, and for certificate request and authentication. Use the undo pki domain command to delete the specified PKI domain. By default, no PKI domain name is specified.
Example
# Enter PKI domain view
[RouterCA] pki domain 1 [RouterCA-pki-domain-1]
6.2 PKI Entity Configuration Commands

6.2.1 fqdn
Syntax
fqdn name-str undo fqdn
View
PKI entity view
Parameter
name-str: FQDN of an entity, within the range of 1 to 255 characters
Description
Use the fqdn command to specify the FQDN of an entity. Use the undo fqdn command to delete the entity FQDN. By default, no entity FQDN is specified.
FQDN (Fully Qualified Domain Name) is the unique identifier an entity has in the network, like email address. It can be resolved into IP address, usually in the form of user.domain.
Example
# Configure the FQDN of an entity
[RouterCA-pki-entity-1] fqdn pki.3Com-3com.com
6.2.2 common-name
Syntax
common-name name-str undo common-name
View
PKI entity view
Parameter
name-str: common name of an entity, within the range of 1 to 31 character
Description
Use the common-name command to specify the common name of an entity, take User name for example. Use the undo common-name command to delete the common name of this entity. By default, no common name is specified for any entity.
Example
# Configure the common name of an entity
[RouterCA-pki-entity-1] common-name pki test
6.2.3 country
Syntax
country country-code-str undo country
View
PKI entity view
Parameter
country-code-str: country code of 2 bytes
Description
Use the country command to specify the code of the country to which the entity belongs. It is a standard 2-byte code, e.g., CN for China. Use the undo country command to delete the country code of this entity. By default, no country code is specified for any entity.
Example
# Set the country code of an entity
[RouterCA-pki-entity-1] country CN
6.2.4 ip
Syntax
ip ip-address undo ip
View
PKI entity view
Parameter
ip-address: IP address of an entity in the form of dotted decimal like A.B.C.D
Description
Use the ip command to specify the IP address of an entity. Use the undo ip command to delete the specified IP address. By default, no entity IP address is specified.
Example
# Configure the IP address of an entity
[RouterCA-pki-entity-1] ip 161.12.2.3
6.2.5 locality
Syntax
locality locality-str undo locality
View
PKI entity view
Parameter
locality-str: name of the geographical locality of an entity, in the range of 1~31 characters
Description
Use the locality command to name the geographical locality of an entity, by a city for example. Use the undo locality command to cancel the mentioned naming operation. By default, no geographical locality is specified for any entity.
Example
# Configure the name of the city where the entity lies
[RouterCA-pki-entity-1] locality marlborough
6.2.6 organization
Syntax
organization org-str undo organization
View
PKI entity view
Parameter
org-str: organization name in the range of 1~31 characters
Description
Use the organization command to specify the name of the organization to which the entity belongs.
Use the undo organization command to delete that name. By default, no organization name is specified for any entity.
Example
# Configure the name of the organization to which an entity belongs
[RouterCA-pki-entity-1] organization 3com
6.2.7 organizational-unit
Syntax
organizational-unit org-unit-str undo organizational-unit
View
PKI entity view
Parameter
org-unit-str: organization unit name in the range of 1~31 characters
Description
Use the organizational-unit command to specify the name of the organization unit to which this entity belongs. Use the undo organizational-unit command to delete the specified organization unit name. By default, no organization unit name is specified for any entity.
Example
# Configure the name of the organization unit to which an entity belongs
[RouterCA-pki-entity-1] organizational-unit soft plat
6.2.8 state
Syntax
state state-str undo state
View
PKI entity view
Parameter
state-str: state name within the range of 1~31 characters
Description
Use the state command to clarify the name of the state where an entity lies. Use the undo state command to cancel the previous operation. By default, the state of an entity is not specified.
Example
# Specify the state where an entity lies
[RouterCA-pki-entity-1] state marlborough
6.2.9 pki entity

Syntax
pki entity name-str undo pki entity name-str
View
Any view
Parameter
name-str: device-related unique character string of identification. Specified when being quoted, it shall be within the range of 1~15 characters.
Description
Use the pki entity command to name a PKI entity and enter PKI entity view. Use the undo pki entity command to delete the name and cancel all configurations under the name space. A variety of attributes can be configured in PKI entity view. name-str plays only for the convenience in being quoted by other commands. No field of certificate is concerned. By default, entity name is not specified.
Example
# Enter PKI entity view
[RouterCA] pki entity en [RouterCA-pki-entity-en]
6.3 PKI Certificate Operation Commands

6.3.1 pki delete certificate
Syntax
pki delete certificate { local | ca }
View
Any view
Parameter
local: indicates the deletion of all local certificates that are locally stored; ca: indicates the deletion of all CA certificates that are locally stored.
Description
Use the pki delete certificate command to delete the locally stored certificates.
Example
# Delete the local certificates
[RouterCA] pki delete certificate local
6.3.2 pki request certificate

Syntax
pki request certificate domain-name [ password ] [ pem ]
View
Any view
Parameter
domain-name: contains CA or RA related information. It is configured by using the pki domain command. password: optionally involved in certificate revocation;
pem: optionally involved in the printing of the certificate requests that can be in outband modes such as phone, disk, and e-mail.
Description
Use the pki request certificate command to deliver certificate request through SCEP to CA for the generated RSA key pair. If SCEP fails to go through normal communication, you can print the local certificate request in base64 format using the optional parameter "pem", copy it, and send one to CA in an outband mode. This operation is not saved within the configuration. Related command: pki domain.
Example
# Manually apply for a certificate
[RouterCA] pki request certificate 1
# Display the request information for local certificates

[RouterCA] pki request certificate 1 pem
6.3.3 pki retrieval certificate

Syntax
pki retrieval certificate { local | ca } domain domain-name
View
Any view
Parameter
local: indicates the download of a local certificate; ca: indicates the download of a CA certificate; domain-name: contains CA or RA related information. It is configured by using the pki domain command.
Description
Use the pki retrieval certificate command to download a certificate from the certificate issuing server. Related command: pki domain.
Example
# Retrieve a certificate
[RouterCA] pki retrieval certificate ca domain 1
6.3.4 pki retrieval crl

Syntax
pki retrieval crl domain domain-name
View
Any view
Parameter
domain-name: contains CA or RA related information. It is configured by using the pki domain command.
Description
Use the pki retrieval crl command to obtain the latest CRL from CRL server for the verification of validity of a current certificate. Related command: pki domain.
Example
# Retrieve a CRL
[RouterCA] pki retrieval crl domain 1
6.3.5 pki validation certificate

Syntax
pki validation certificate { local | ca } domain domain-name
View
Any view
Parameter
local: indicates the validation of a local certificate; ca: indicates the validation of a CA certificate;
domain-name: specifies the domain of the certificate about to be verified. It is configured by using the pki domain command.
Description
Use the pki validation certificate command to verify the validity of a certificate. The focus is to check the CA signature on the certificate, and to make sure that the certificate is still within the validity period and beyond revocation. All certificates with authentic signatures of CA can pass the validation, since it is believed that CA never issues fake certificates. Related command: pki domain.
Example
# Verify the validity of a certificate
[RouterCA] pki validation certificate domain 1
6.4 PKI Displaying and Debugging Commands

6.4.1 debugging pki certificate
Syntax
debugging pki { request | retrieval | verify | error } undo debugging pki { request | retrieval | verify | error }
View
Any view
Parameter
request: debugging in certificate request; retrieval: debugging in certificate retrieval; verify: debugging in certification validation; error: debugging in error cases
Description
Use the debugging pki command to enable PKI debugging functions. Use the undo debugging pki command to disable PKI debugging functions. Unexpected problems do occur during the device operation. Debugging commands enable the optional output and print of debugging information, facilitating the network monitor and fault diagnosis for the network operators and developers.
By default, all PKI debugging functions are disabled.
Example
# Enable the debugging function related to errors in PKI certificate operation
[RouterCA] debugging pki error [RouterCA] pki delete certificate ca [RouterCA] pki request certificate 1 Certificate enroll failed! Cannot get the CA/RA certificate when creating the x509 Request
# Enable the debugging function for PKI certificate retrieval

[RouterCA] debugging pki retrieval [RouterCA] pki retrieval certificate local domain 1 Retrievaling CA/RA certificates. Please wait a while...... We receive 3 certificates. The trusted CA's finger print is: MD5 fingerprint: 74C9 B71D 406B DDB3 F74A 96BC E05B 40E9
SHA1 fingerprint: 770E 2937 4E32 ACD4 4ACC 7CF1 0FF0 6FB8 6C34 E24A Is the finger print correct?(Y/N): y Saving the CA/RA certificate to flash.....................Done!
# Enable the debugging function for PKI certificate request

[RouterCA] debugging pki request [RouterCA] pki request certificate 1 Create PKCS#10 request: Create PKCS#10 request: Create PKCS#10 request: token seen: CN=pki test
CN=pki test added subject dn set to '/CN=pki test'
Certificate Request: ..
dir_name: certsrv/mscep/mscep.dll host_name: 169.254.0.100 SCEP transaction id: PKCS#7 envelope: PKCS#7 envelope: 58D41D0C5A7B1E21C5F4A008B580B1A1
creating inner PKCS#7 data payload size: 297 bytes
data payload: . PKCS#7 envelope: successfully encrypted payload

PKCS#7 envelope: PKCS#7 envelope: PKCS#7 envelope: PKCS#7 envelope: PKCS#7 envelope: PKCS#7 envelope: PKCS#7 envelope: PKCS#7 envelope: PKCS#7 envelope: PKCS#7 envelope: size 667 bytes creating outer PKCS#7
signature added successfully adding signed attributes adding string attribute transId adding string attribute messageType adding octet attribute senderNonce PKCS#7 data written successfully applying base64 encoding base64 encoded payload size: 2145 bytes
SCEP send message: IP = 0xa9fe0064 SCEP send message: Server returned status code
Valid response from server PKCS#7 develope: PKCS#7 develope: PKCS#7 develope: PKCS#7 develope: PKCS#7 develope: PKCS#7 develope: PKCS#7 develope: PKCS#7 develope: PKCS#7 develope: reading outer PKCS#7 PKCS#7 payload size: 1872 bytes
PKCS#7 contains 1276 bytes of enveloped data verifying signature signature ok finding signed attributes finding attribute transId allocating 32 bytes for attribute reply transaction id: 58D41D0C5A7B1E21C5F4A008B580B1A1
PKCS#7 develope: PKCS#7 develope: PKCS#7 develope: PKCS#7 develope: PKCS#7 develope:
finding attribute messageType allocating 1 bytes for attribute reply message type is good finding attribute senderNonce allocating 16 bytes for attribute
PKCS#7 develope:
senderNonce in reply:
a6341944 28d9b544 a4755d9a ba320d35 PKCS#7 develope: PKCS#7 develope: finding attribute recipientNonce allocating 16 bytes for attribute
PKCS#7 develope:
recipientNonce in reply:
b98da9c3 20b638c5 634f4924 65f804d9 PKCS#7 develope: finding attribute pkiStatus

PKCS#7 develope: PKCS#7 develope: PKCS#7 develope: PKCS#7 develope: PKCS#7 develope:
allocating 1 bytes for attribute pkistatus SUCCESS reading inner PKCS#7 decrypting inner PKCS#7 PKCS#7 payload size: 1003 bytes
PKI Get the Signed Certificates: subject: issuer: /emailAddress=myca@3Com.com/C=CN/ST=Marlborough/L=Marlborough/O=hw3c/OU=bjs/ CN=myca Key usage: general purpose / CN=pki test
# Enable the debugging function for PKI certificate validation

[RouterCA] debugging pki validation [RouterCA] pki validation certificate local domain 1 Verify certificate...... Serial Number: 101E266A 00000000 006B Issuer: emailAddress=myca@3Com.com C=CN ST=Marlborough L=Marlborough O=hw3c OU=bjs CN=myca Subject: C=CN ST= marlborough O= 3com CN=pki test Verify result: ok
Table 6-1 Description of PKI debugging information fields Field Create PKCS#10 request PKCS#7 envelope inner PKCS#7 Description Encapsulation of entity request in PKCS#10 format Data encapsulation in PKCS#7 encryption format PKCS#7 encryption of datagram
Field outer PKCS#7 PKCS#7 develope host_name dir_name data payload token seen pkistatus SUCCESS FAILURE PENDING fingerprint base64 encoded x509 Request Key usage Issuer Subject SCEP send message Signed Certificates
Description Signing of PKCS#7 datagram De-encapsulation of PKCS#7 encrypted packet Host name of registration server CGI script directory of registration server Data payload DN information of an entity PKI certificate operation status Succeeded Failed Waiting for procession Usually the signature of CA A data encoding mode Request for certificates in standard X509 format Encryption, signature, and other common usages Certificate issuer The entity that delivers certificate request The entity sends a certificate operation packet to CA through SCEP Certificates signed by CA
6.4.2 display pki certificate

Syntax
display pki certificate { local | ca | request-status } [ domain domain-name ]
View
Any view
Parameter
local: indicates the display of all local certificates; ca: indicates the display of all CA certificates;
request-status: refers to the status of the certificate request after being delivered; domain-name: represents the domain of the certificate about to be verified. It is configured by using the pki domain command.
Description
Use the display pki certificate command to display and browse through the certificate. Related command: pki retrieval certificate, pki domain, and certificate request polling.
Example
# Display the local certificates
[RouterCA] display pki certificate local domain 1 Data: Version: 3 (0x2)
Serial Number: 10B7D4E3 00010000 0086 Signature Algorithm: Issuer: emailAddress=myca@3Com.com C=CN ST=Marlborough L=Marlborough O=hw3c OU=bjs CN=new-ca Validity Not Before: Not After : Subject: C=CN ST=marlborough L=marlborough CN=pki test Subject Public Key Info: Public Key Algorithm: RSA Public Key: rsaEncryption Jan 13 08: 57: 21 2004 GMT Jan 20 09: 07: 21 2005 GMT md5WithRSAEncryption
(512 bit)
Modulus (512 bit): 00D41D1F Exponent: X509v3 extensions: 65537 (0x10001)
X509v3 Subject Alternative Name: DNS: hyf.3Com.com md5WithRSAEncryption
Signature Algorithm:
A3A5A447 4D08387D
6.4.3 display pki crl

Syntax
display pki crl [ domain domain-name ]
View
Any view
Parameter
domain-name: represents the domain of the certificate about to be verified. It is configured by using the pki domain command.
Description
Use the display pki crl command to display and browse through the locally saved CRL. Related command: pki retrieval crl, and pki domain.
Example
# Display a CRL
[RouterCA] display pki crl domain 1 Certificate Revocation List (CRL): Version 2 (0x1) Signature Algorithm: Issuer: C=CN O=h3c OU=soft CN=A Test Root Last Update: Next Update: Jan Jan 5 08: 44: 19 2004 GMT 5 21: 42: 13 2004 GMT sha1WithRSAEncryption
CRL extensions: X509v3 CRL Number: 2
X509v3 Authority Key Identifier: keyid:0F71448E E075CAB8 ADDB3A12 0B747387 45D612EC

Revoked Certificates: Serial Number: 05a234448E Revocation Date: Sep
6 12:33:22 2004 GMT
CRL entry extensions: Serial Number: 05a278445E Revocation Date: Sep 7 12:33:22 2004 GMT
CRL entry extensions:
Command Reference Guide VPN v2.30 Router Software
Table of Contents
Table of Contents
Chapter 1 L2TP Configuration Commands................................................................................. 1-1 1.1.1 allow l2tp ................................................................................................................. 1-1 1.1.2 debugging l2tp......................................................................................................... 1-2 1.1.3 display l2tp session ................................................................................................. 1-3 1.1.4 display l2tp tunnel ................................................................................................... 1-4 1.1.5 display l2tp user ...................................................................................................... 1-5 1.1.6 interface virtual-template......................................................................................... 1-6 1.1.7 l2tp-auto-client enable............................................................................................. 1-6 1.1.8 l2tp enable............................................................................................................... 1-7 1.1.9 session idle-time...................................................................................................... 1-8 1.1.10 l2tp match-order .................................................................................................... 1-8 1.1.11 l2tpmoreexam enable............................................................................................ 1-9 1.1.12 l2tp-group ............................................................................................................ 1-10 1.1.13 mandatory-chap .................................................................................................. 1-11 1.1.14 mandatory-lcp...................................................................................................... 1-11 1.1.15 reset l2tp session ................................................................................................ 1-12 1.1.16 reset l2tp tunnel................................................................................................... 1-13 1.1.17 reset l2tp user...................................................................................................... 1-13 1.1.18 start l2tp............................................................................................................... 1-14 1.1.19 start l2tp tunnel.................................................................................................... 1-15 1.1.20 tunnel authentication ........................................................................................... 1-16 1.1.21 tunnel avp-hidden................................................................................................ 1-17 1.1.22 tunnel flow-control ............................................................................................... 1-18 1.1.23 tunnel keepstanding ............................................................................................ 1-18 1.1.24 tunnel name......................................................................................................... 1-19 1.1.25 tunnel password .................................................................................................. 1-20 1.1.26 tunnel timer hello................................................................................................. 1-20 Chapter 2 GRE Configuration Commands.................................................................................. 2-1 2.1.1 debugging tunnel..................................................................................................... 2-1 2.1.2 destination ............................................................................................................... 2-1 2.1.3 display interface tunnel ........................................................................................... 2-2 2.1.4 gre checksum .......................................................................................................... 2-4 2.1.5 gre key..................................................................................................................... 2-5 2.1.6 interface tunnel........................................................................................................ 2-6
3Com Corporation i
Table of Contents
2.1.7 keepalive ................................................................................................................. 2-6 2.1.8 source...................................................................................................................... 2-7 2.1.9 tunnel-protocol gre .................................................................................................. 2-8 Chapter 3 Dynamic VPN ............................................................................................................... 3-1 3.1.1 debugging dvpn....................................................................................................... 3-1 3.1.2 display dvpn map .................................................................................................... 3-1 3.1.3 dvpn authenticate enable ........................................................................................ 3-2 3.1.4 dvpn class ............................................................................................................... 3-3 3.1.5 dvpn client ............................................................................................................... 3-3 3.1.6 dvpn interface-type.................................................................................................. 3-4 3.1.7 dvpn key .................................................................................................................. 3-4 3.1.8 dvpn map................................................................................................................. 3-5 3.1.9 dvpn register-type ................................................................................................... 3-6 3.1.10 dvpn retry .............................................................................................................. 3-7 3.1.11 dvpn server............................................................................................................ 3-7 3.1.12 dvpn timer aging.................................................................................................... 3-8 3.1.13 dvpn timer keepalive ............................................................................................. 3-9 3.1.14 dvpn timer redirect ................................................................................................ 3-9 3.1.15 dvpn timer register .............................................................................................. 3-10 3.1.16 dvpn timer setup.................................................................................................. 3-11 3.1.17 dvpn udp-port ...................................................................................................... 3-11 3.1.18 dvpn vpn-id.......................................................................................................... 3-12 3.1.19 private-ip.............................................................................................................. 3-13 3.1.20 public-ip ............................................................................................................... 3-13 3.1.21 reset dvpn map.................................................................................................... 3-14 3.1.22 tunnel-protocol dvpn............................................................................................ 3-14 3.1.23 udp-port ............................................................................................................... 3-15
3Com Corporation ii
Chapter 1 L2TP Configuration Commands

1.1.1 allow l2tp
Syntax
allow l2tp virtual-template virtual-template-number remote remote-name [ domain domain-name ] undo allow
View
L2TP group view
Parameter
virtual-template-number: Specifies the virtual-template used when creating a new virtual access interface; an integer ranging from 0 to 1023. remote-name: Specifies the name of the peer end of the tunnel that initiates the connection request; a case sensitive character string with length ranging from 1 to 30. domain-name: Specifies the name of enterprise with length ranging from 1 to 30.
Description
Use the allow l2tp command to specify the name of the peer end of the tunnel on receiving call and the Virtual-Template it uses. Use the undo allow command to remove the name of the peer end of the tunnel. By default, call receiving is disabled. This command is used on LNS side. For multi-instance applications of L2TP, the domain-name parameter must be configured. When L2TP group number1 (the default L2TP group number) is used, the name of the peer end of the tunnel remote-name can be unspecified. When configured in the view of L2TP group 1, the format of the command is as follows: allow l2tp virtual-template virtual-template-number [ remote remote-name ] [ domain domain-name ] If a peer end name is specified in L2TP group 1 configuration, L2TP group 1 will not serve as the default L2TP group. For example, given the environment of Windows 2000 beta 2, the local name of VPN connection is NONE, so the peer end name that the router receives
is NONE. In order to allow the router to receive tunnel connection requests sent by this kind of unknown peer ends, or for the test purpose, a default L2TP group can be configured. The allow l2tp command is used on LNS side. If the peer end name of the tunnel is configured, it should be the name of the local end configured on LAC side. Related command: l2tp-group.
Example
# Receive L2TP tunnel connection requests sent by the peer end AS8010 (LAC side), and creates a virtual-access interface on virtual-template 1.
[3Com-l2tp2] allow l2tp virtual-template 1 remote AS8010
# Use L2TP group 1 as the default L2TP group, receiving L2TP tunnel connection requests sent by any peer end, and creates a virtual-access interface according to virtual-template 1.
[3Com] l2tp-group 1 [3Com-l2tp1] allow l2tp virtual-template 1
1.1.2 debugging l2tp

Syntax
debugging l2tp { all | control | dump | error | event | hidden | payload | time-stamp } undo debugging l2tp { all | control | error | event | hidden | payload | time-stamp }
View
System view
Parameter
all: Enables all L2TP debugging. control: Enables control packet debugging. dump: Enables PPP packet debugging. error: Enables error debugging. event: Enables event debugging. hidden: Enables hidden AVP debugging. payload: Enables L2TP payload debugging. time-stamp: Enables time-stamp debugging.
Description
Use the debugging l2tp command to enable L2TP debugging.
Use the undo debugging l2tp command to disable L2TP debugging.
Example
# Enable all L2TP debugging.
<3Com> debugging l2tp all
1.1.3 display l2tp session

Syntax
display l2tp session
View
Any view
Parameter
None
Description
Use the display l2tp session command to view the current L2TP sessions. The output information of the command facilitates the user to learn information from the current L2TP sessions. Related command: display l2tp tunnel.
Example
# Display current L2TP sessions.
<3Com> display l2tp session LocalSID 1 RemoteSID 1 LocalTID Idle-Time-Left 2 600
Table 1-1 Description on the fields of the display L2tp session command Field Total session LocalSID RemoteSID LocalTID Idle-Time-Left Number of sessions The number uniquely identifies the local session. The number uniquely identifies the peer session. The local ID number of the tunnel The residual time before the session is disconnected Description
1.1.4 display l2tp tunnel

Syntax
display l2tp tunnel
View
Any view
Parameter
None
Description
Use the display l2tp tunnel command to view information of the current L2TP tunnels. The output information of the command facilitates the user to learn information from the current L2TP tunnels. Related command: display l2tp session.
Example
# Display information of the current L2TP tunnels.
<3Com> display l2tp tunnel LocalTID RemoteTID RemoteAddress Port 2 22849 11.1.1.1 Sessions 1 RemoteName keepstand lns YES
1701
Total tunnel = 1
Table 1-2 Description on the fields of the display L2tp tunnel command Field Total tunnels LocalTID RemoteTID Remote Name RemoteAddress Port Sessions Remote Name Description Number of tunnels The number uniquely identifies the local tunnel The number uniquely identifies the peer tunnel Name of the peer end IP address of the peer end Port number of the peer end Number of sessions on the tunnel Name of the peer
KeepStand
State of the tunnel-hold function
1.1.5 display l2tp user

Syntax display l2tp user View
Any view
Parameter
None
Description
Use the display l2tp user command to view information about the current L2TP users. Related command: display l2tp tunnel, display l2tp session.
Example
# Display information about the current L2TP users.
<3Com> display l2tp user User Name w@h3c LocalSID 1 RemoteSID 1 LocalTID 2
Total user = 1
Table 1-3 Description on the fields of the display L2tp user command Field User Name LocalSID RemoteSID LocalTID Total user User Local identifier of the session Remote identifier of the session Local identifier of the tunnel Total number of users Description
1.1.6 interface virtual-template

Syntax
interface virtual-template virtual-template-number undo interface virtual-template virtual-template-number
View
System view
Parameter
virtual-template-number: Number of a virtual template, an integer in the range 0 to 1023.
Description
Use the interface virtual-template command to create a virtual template. Use the undo interface virtual-template command to delete the virtual template. By default, no virtual template is created. Virtual templates are mainly used to configure parameters of the virtual interfaces dynamically created by the router in operation, such as MP interfaces (bundled logical interfaces) and L2TP logical interfaces. Related command: allow l2tp.
Example
# Create virtual template 1 and enter its view.
[3Com] interface virtual-template 1
1.1.7 l2tp-auto-client enable

Syntax
l2tp-auto-client enable undo l2tp-auto-client enable
View
Virtual template interface view
Parameter
None
Description
Use the l2tp-auto-client enable command to enable the LAC client to set up a L2TP tunnel. Use the undo l2tp-auto-client enable command to disable the LAC client from setting up a L2TP tunnel.
Example
# Enter virtual template interface view.
[3Com] interface virtual-template 1
# Enable the LAC client to set up L2TP tunnel.

[3Com-Virtual-Template1] l2tp-auto-client enable
1.1.8 l2tp enable

Syntax
l2tp enable undo l2tp enable
View
System view
Parameter
None
Description
Use the l2tp enable command to enable the L2TP function. Use the undo l2tp enable command to disable the L2TP function. By default, the L2TP function is disabled. This command and its undo form are used to enable and disable the L2TP function. Only when this function is enabled can the L2TP service be implemented. Related command: l2tp-group.
Example
# Enable the L2TP function on the router.
[3Com] l2tp enable
1.1.9 session idle-time

Syntax
session idle-time time undo session idle-time
View
L2TP group view
Parameter
time: Idle time in the range 0 to 10000 seconds. It defaults to 0, meaning the session never expires.
Description
Use the session idle-time command to set the L2TP session idle-timeout timer. Upon expiration of this timer, the L2TP session is disconnected. Use the undo session idle-time command to disable the idle-timeout timer. By default, the 2TP session never expires.
Example
# Enter L2TP group view.
[3Com] l2tp-group 1
# Set the L2TP session idle-timeout timer to 600 seconds.

[3Com] session idle-time 600
1.1.10 l2tp match-order

Syntax
l2tp match-order { dnis-domain | dnis | domain-dnis | domain } undo l2tp match-order
View
System view
Parameter
dnis-domain: Searches L2TP groups by called number and then by domain name. dnis: Searches L2TP groups only by called number.
domain-dnis: Searches L2TP groups by domain name and then by called number. domain: Searches L2TP groups only by domain name.
Description
Use the l2tp match-order command to set search order of called number and domain name. Use the undo l2tp match-order command to restore search order to the default. By default, the system searches L2TP groups by called number and then by domain name, that is, dnis-domain applies. In a multi-instance application domain search is the only option at the LNS side. In practice, it is always required to search first by full username before searching in turn according to the configured order. In multi-instance applications of L2TP, enterprises may share a single LNS and are distinguished from each other by domain name. When receiving a packet sent by LAC, LNS needs to separate its domain name from the username, and then search the configured enterprise domain names for a match. To shorten the searching delay, you should configure the l2tp match-order domain command.
Example
# Search only by domain name.
[3Com] l2tp match-order domain
1.1.11 l2tpmoreexam enable

Syntax
l2tpmoreexam enable undo l2tpmoreexam enable
View
System view
Parameter
None
Description
This command serves the LNS side of L2TP. Use the l2tpmoreexam enable command to enable the multi-instance function of L2TP.
Use the undo l2tpmoreexam enable command to disable the function. By default, L2TP multi-instance function is disabled. Only after the multi-instance function is enabled can the service be deployed. Related command: l2tp enable.
Example
# Enable the multi-instance function at the LNS side.
[3Com] l2tpmoreexam enable
1.1.12 l2tp-group
Syntax
l2tp-group group-number undo l2tp-group group-number
View
System view
Parameter
group-number: Number of L2TP group, an integer ranging from 1 to 1000.
Description
Use the l2tp-group command to create an L2TP group. Use the undo l2tp-group command to delete the L2TP group. By default, no L2TP group is created. Deleting an L2TP group using the undo l2tp-group command will also delete its configuration information. (L2TP group 1 can be the default L2TP group). Related command: allow l2tp and start l2tp.
Example
# Create L2TP group 2 and enter L2TP group 2 view.
[3Com] l2tp-group 2 [3Com-l2tp2]
1.1.13 mandatory-chap
Syntax
mandatory-chap undo mandatory-chap
View
L2TP group view
Parameter
None
Description
Use the mandatory-chap command to force LNS to perform CHAP authentication again with the client. Use the undo mandatory-chap command to disable CHAP re-authentication. By default, CHAP re-authentication is not performed. After LAC performs agent authentication on clients, LNS can perform authentication on them again to enhance security. If the mandatory-chap command is used, each VPN client whose tunnel connection is initialized by access server will undergo authentication both on access server side and on LNS side. Some PPP clients may not support the second authentication. In this case, local CHAP authentication will fail. Related command: mandatory-lcp.
Example
# Perform mandatory CHAP authentication.
[3Com-l2tp1] mandatory-chap
1.1.14 mandatory-lcp
Syntax
mandatory-lcp undo mandatory-lcp
View
L2TP group view
Parameter
None
Description
Use the mandatory-lcp command to allow LNS and client to renegotiate Link Control Protocol (LCP) between them. Use the undo mandatory-lcp command to disable LCP renegotiation. By default, LCP is not renegotiated. Concerning NAS-Initialized VPN client, PPP negotiation will first be performed with Network Access Server (NAS) at the beginning of a PPP session. If the negotiation is successful, the access server will initiate the tunnel connection and transmit the information collected during the negotiation to LNS. LNS will judge whether the user is legal based on the information. The mandatory-lcp command can be used to force LNS and client to renegotiate LCP. In this case, NAS agent authentication information is ignored. If PPP clients do not support LCP renegotiation, LCP renegotiation will fail. Related command: mandatory-chap.
Example
# Enable LCP renegotiation.
[3Com-l2tp1] mandatory-lcp
1.1.15 reset l2tp session

Syntax
reset l2tp session session-id
View
User view
Parameter
session-id: Local identifier of a session connection.
Description
Use the reset l2tp session command to disconnect a session. When the user calls in, the session can be set up again. Related command: reset l2tp tunnel.
Example
# Disconnect an L2TP session.
<3Com> reset l2tp session 1
1.1.16 reset l2tp tunnel

Syntax
reset l2tp tunnel { remote-name | tunnel-id }
View
User view
Parameter
remote-name: Name of the peer end of the tunnel, a character string with the length ranging from 1 to 30. tunnel-id: Local ID of the tunnel.
Description
Use the reset l2tp tunnel command to clear the specified tunnel connection and all sessions on the tunnel. The tunnel connection compulsorily disconnected by the reset l2tp tunnel command can be reestablished when the remote user calls in again. You may specify tunnel connections to be disconnected by specifying remote name. If no such tunnel connections exist, the current tunnel connections will not be affected. If there are several tunnel connections (with the same name but different IP addresses), they will all be cleared. When tunnel-id is specified, only the corresponding tunnel connection will be disconnected. Related command: display l2tp tunnel.
Example
# Clear the tunnel connection with the peer name of AS8010.
<3Com> reset l2tp tunnel AS8010
1.1.17 reset l2tp user

Syntax reset l2tp user user-name
View
User view
Parameter
user-name: L2TP user name.
Description
Use the reset l2tp user command to disconnect the L2TP connection of the specified user. When the user calls in, the connection can be set up. Related command: reset l2tp tunnel, reset l2tp session.
Example
# Disconnect the current L2TP user.
<3Com> reset l2tp user 3Com@h3c
1.1.18 start l2tp

Syntax
start l2tp { ip ip-addr [ ip ip-addr ] [ ip ip-addr ] ... } { domain domain-name | fullusername user-name } undo start
View
L2TP group view
Parameter
ip ip-addr: IP address of the peer end of the tunnel (LNS). Five IP addresses, at most, can be set to provide LNS backup for each other. domain-name: Domain name triggering connection requests, a case sensitive character string with a length ranging from 1 to 30. user-name: Full username triggering connection requests, a case sensitive character string with a length ranging from 1 to 32.
Description
Use the start l2tp command to specify conditions triggering the local end to place calls when it works as L2TP LAC. Use the undo start l2tp command to delete the specified triggering conditions.
This command is used on the LAC side to specify IP address of LNS; it can support several connection request triggering conditions, specifically, Initiating tunnel connection request according to the users domain name. For example, if the domain name of a users company is 3Com.com, the user with this domain name can be specified as a VPN user. Deciding whether a user is a VPN user according to its dialed number. For example, if the number 8810188 is specified to be the special service number, the access user who dials this number is a VPN user. Specifying a user to be a VPN user by directly specifying full username. For a VPN user, the local end (LAC) will send a L2TP tunnel connection request to a certain LNS according to the configured LNS priority or order. If receiving response from the LNS within the specified period, LAC will take it as the peer end of the tunnel. If not, LAC will send tunnel connection request to the next LNS. Conflicts may exist between these VPN user judgment ways. For example, LNS address specified according to full username is 1.1.1.1, while that according to domain name is 1.1.1.2. To avoid situations like this it is necessary to specify a user searching order. The system always starts a search by looking for the specified L2TP group by full username; if finding no match, it continues the search by domain name or dialed-number, the order of which is set using the l2tp match-order command. Related command: l2tp match-order.
Example
# Specify the users using the domain name of 3Com.com to be VPN users, with IP address of the L2TP access server of the headquarters being 202.38.168.1.
[3Com-l2tp1] start l2tp ip 202.38.168.1 domain 3Com.com
1.1.19 start l2tp tunnel

Syntax
start l2tp tunnel
View
L2TP group view
Parameter
None
Description
Use the start l2tp tunnel command to enable the L2TP LAC to start L2TP tunnel connection. This command is used only on LAC side. Related command: tunnel keepstanding.
Example
# Enable the LAC to start L2TP tunnel connection. It requests the LNS at 1.1.1.1 first and then the LNS at 2.2.2.2 if no response is received.
[3Com-l2tp1] start l2tp ip 1.1.1.1 2.2.2.2 fullusername vvpdnuser [3Com-l2tp1] start l2tp tunnel
Caution: You must use this command in conjunction with the tunnel keepstanding command. Otherwise, the tunnel will be torn down immediately after it is set up.
1.1.20 tunnel authentication

Syntax
tunnel authentication undo tunnel authentication
View
L2TP group view
Parameter
None
Description
Use the l2tp tunnel authentication command to enable L2TP tunnel authentication. Use the undo l2tp tunnel authentication command to disable L2TP tunnel authentication. By default, L2TP tunnel authentication is performed.
By default, L2TP tunnel authentication is permitted. Normally, authentication needs to be performed on both ends of the tunnel for securitys sake. In the case of network connectivity test or receiving connection sent by nameless peer end, tunnel authentication is not required.
Example
# Set not to authenticate the peer end of the tunnel.
[3Com-l2tp1] undo tunnel authentication
1.1.21 tunnel avp-hidden

Syntax
tunnel avp-hidden undo tunnel avp-hidden
View
L2TP group view
Parameter
None
Description
Use the tunnel avp-hidden command to configure Attribute Value Pair (AVP) data to be transmitted in hidden format. Use the undo tunnel avp-hidden command to restore the default transmission way of AVP data. By default, the tunnel transmits AVP data in plain text. Some parameters of L2TP protocol are transmitted by AVP data. If high data security is desired, this command can be used to configure AVP data to be transmitted in hidden format.
Example
# Set AVP data to be transmitted in hidden format.
[3Com-l2tp1] tunnel avp-hidden
1.1.22 tunnel flow-control

Syntax
tunnel flow-control undo tunnel flow-control
View
L2TP group view
Parameter
None
Description
Use the tunnel flow-control command to enable L2TP tunnel flow-control. Use the undo tunnel flow-control command to disable the flow-control function. By default, the L2TP tunnel flow-control function is not performed.
Example
# Enable the flow-control function.
[3Com-l2tp1] tunnel flow-control
1.1.23 tunnel keepstanding

Syntax
tunnel keepstanding undo tunnel keepstanding
View
L2TP group view
Parameter
None
Description
Use the tunnel keepstanding command to enable the tunnel-hold function of L2TP, which prevents the tunnel from being disconnected when no session is present. Use the undo tunnel keepstanding command to disable the tunnel-hold function of L2TP.
Caution: To have this command take effect on a tunnel you must configure it at both ends of the tunnel.
Example
# Enter L2TP group view.
[3Com] l2tp-group 1
# Enable the tunnel-hold function of L2TP.

[3Com-l2tp1] tunnel keepstanding
1.1.24 tunnel name

Syntax
tunnel name name undo tunnel name
View
L2TP group view
Parameter
name: Local name of the tunnel, a character string with the length ranging from 1 to 30.
Description
Use the tunnel name command to specify the local name of a tunnel. Use the undo tunnel name command to restore the default local name. By default, local name is router name. When creating an L2TP group, the system initiates local name into router name. Related command: sysname.
Example
# Set local name of the tunnel to itsme.
[3Com-l2tp1] tunnel name itsme
1.1.25 tunnel password

Syntax
tunnel password { simple | cipher } password undo tunnel password
View
L2TP group view
Parameter
simple: Password in plain text. cipher: Password in ciphertext. password: Password used for tunnel authentication, a character string with a length ranging from 1 to 16.
Description
Use the tunnel password command to specify a password for tunnel authentication. Use the undo l2tp tunnel password command to remove the tunnel authentication password. By default, tunnel authentication password is null.
Example
# Set tunnel authentication password to yougotit displayed in cipher text.
[3Com-l2tp1] tunnel password cipher yougotit
1.1.26 tunnel timer hello

Syntax
tunnel timer hello hello-interval undo tunnel timer hello
View
L2TP group view
Parameter
hello-interval: Forwarding interval of Hello packet when LAC or LNS has no packet to receive, an integer in seconds, ranging from 60 to 1000.
Description
Use the tunnel timer hello command to set a Hello packet forwarding interval. Use the undo tunnel timer hello command to restore the default Hello packet forwarding interval in the tunnel. By default, Hello packet is forwarded every 60 seconds. Different Hello packet time intervals can be configured on LNS and LAC sides.
Example
# Set Hello packet forwarding interval to 99 seconds.
[3Com-l2tp1] tunnel timer hello 99
Chapter 2 GRE Configuration Commands

2.1.1 debugging tunnel
Syntax
debugging tunnel undo debugging tunnel
View
User view
Parameter
None
Description
Use the debugging tunnel command to enable tunnel debugging. Use the undo debugging tunnel command to disable tunnel debugging.
Example
None
2.1.2 destination
Syntax
destination ip-addr undo destination
view
Tunnel interface view
Parameter
ip-addr: IP address of the physical interface used by the peer end of the tunnel.
Description
Use the destination command to specify the destination IP address to be filled in the added IP header at the time of tunnel interface encapsulation.
Use the undo destination command to delete the defined destination address. By default, destination address of tunnel is not specified in the system. The specified tunnel destination address is the IP address of the real physical interface receiving GRE packets, which should be the same as the specified source address at the opposite tunnel interface. The route to the opposite physical interface should be ensured reachable. The same source address and destination address cannot be configured on two or more tunnel interfaces using the same encapsulation protocol. Related command: interface tunnel and source.
Example
# Set up tunnel connection between the interface serial 0/0/0 of the router 3Com1 (with IP address of 193.101.1.1) and the interface serial 1/0/0 of the router 3Com2 (with IP address of 192.100.1.1).
[3Com1-Tunnel0] source 193.101.1.1 [3Com1-Tunnel0] destination 192.100.1.1 [3Com2-Tunnel1] source 192.100.1.1 [3Com2-Tunnel1] destination 193.101.1.1
2.1.3 display interface tunnel

Syntax
display interface tunnel [number ]
view
Any view
Parameter
number: Tunnel interface ID.
Description
Use the display interface tunnel command to view the working status of tunnel interface. Executing the display interface tunnel command displays information about the tunnel interface such as source address, destination address (the real physical interface address receiving/sending GRE packet), encapsulation mode, identification keyword and end-to-end check, etc. Related command: source, destination, gre key, gre checksum, and tunnel-protocol.
Example
# Display the current tunnel interface.
<3Com> display interface tunnel 2 Tunnel2/0/4 is up, line protocol is up Description : 3COM, 3Com Router, Tunnel2 Interface The Maximum Transmit Unit is 1500 Internet Protocol processing is disable Encapsulation is TUNNEL, loopback not set Tunnel source 1.1.254.88 (Ethernet2/0/0), destination 1.1.254.11 Tunnel protocol/transport GRE/IP, key disabled Checksumming of packets disabled 5 minutes input rate 0 bytes/sec, 0 packets/sec 5 minutes output rate 0 bytes/sec, 0 packets/sec 0 packets input, 0 bytes 0 input error 0 packets output, 0 output error 0 bytes
Table 2-1 Description on the fields of the display interface tunnel 2 command Field Tunnel2 is up line protocol is up Description 3Com Router Tunnel2 Interface Maximum Unit Transmit Description The physical layer of the tunnel interface is up. The link layer of the tunnel interface is up. The description information of the tunnel interface, being 3COM in this example. The router is 3Com Router Tunnel interface number The size of MTU in the tunnel, being 1500 bytes in this example The tunnel formed by encapsulated GRE protocol Enable/Disable loopback test. Because the tunnel interface does not support loopback test, disabled loopback is the case in this example. Source address of the tunnel, being 1.1.254.88 here. The interface of tunnel source address is Ethernet 2/0/0. Destination address of the tunnel, being 1.1.254.11 here.
Encapsulation Loopback Tunnel source Ethernet2/0/0 destination
Field Tunnel protocol/transport key Checksumming packets 5 minutes input rate packets/sec packets input bytes input error output error of
Description Encapsulation protocol and transport protocol of the tunnel, being GRE and IP here. Identification keyword of the tunnel interface, which is not specified here. End-to-end check of the tunnel, being disabled here. Input rate in seconds within the last 5 minutes Input packet number in seconds within the last 5 minutes Total input packet number Total input byte number Number of error packets among all input packets. Number of error packets among all output packets.
2.1.4 gre checksum

Syntax
gre checksum undo gre checksum
view
Parameter
None
Description
Use the gre checksum command to configure the two ends of a tunnel to perform end-to-end check, in order to verify the correctness of packets and discard those that do not pass verification. Use the undo gre checksum command to cancel the check. By default, end-to-end check of the two ends of tunnel is disabled. You may enable or disable checksum at each end of a tunnel as needed. If checksum is enabled at the local end but not at the opposite end, the local end will perform checksum on
the transmitted packets but not on the received packets. If checksum is disabled at the local end but enabled at the opposite end, the local end will do the opposite. Related command: interface tunnel.
Example
# Set up a tunnel between the interface serial 3/0/1 of the router 3Com1 and the interface serial 2/1/1 of the router 3Com2 and enable checksum on both ends of the tunnel.
[3Com1-Tunnel3] gre checksum [3Com2-Tunnel2] gre checksum
2.1.5 gre key

Syntax
gre key key-number undo gre key
view
Parameter
key-number: Identification keyword of the two ends of the tunnel, an integer ranging from 0 to 4294967295.
Description
Use the gre key command to set the identification keyword of the tunnel interface, and by this feeble security mechanism, avoid incorrectly identifying or receiving packets from undesired places. Use the undo gre key command to delete this configuration. By default, the system does not assign identification keyword to the tunnel in use. Regarding the setting of key-number, you are required either to specify the same key-number at both ends of the tunnel or not to specify it at all. Related command: interface tunnel.
Example
# Set up a tunnel between the router 3Com1 and the router 3Com2 and set the identification keyword of the tunnel.
[3Com1-Tunnel3] gre key 123

[3Com2-Tunnel2] gre key 123
2.1.6 interface tunnel

Syntax
interface tunnel number undo interface tunnel number
view
System view
Parameter
number: Tunnel interface number, in the range 0 to 1023.
Description
Use the interface tunnel command to create a tunnel interface and enter the view of this tunnel interface. Use the undo interface tunnel command to delete the specified tunnel interface. By default, there is no tunnel interface in the system. The interface tunnel command is used to enter the interface view of the specified tunnel. If the tunnel interface does not exist, the system will create it before entering tunnel interface view. Tunnel interface numbers only have local significance. The two ends of a tunnel can use the same or different interface numbers. Related command: source, destination, gre key, gre checksum, tunnel-protocol.
Example
# Create interface Tunnel 3.
[3Com] interface tunnel 3
2.1.7 keepalive
Syntax
keepalive seconds times undo keepalive [ seconds ] [ times ]
View
Parameter
seconds: Internal for sending keepalive messages in seconds. It is in the range of 0 to 32767 and defaults to 10. times: The maximum number of keepalive message sending attempts. It is in the range of 1 to 255 and defaults to 3.
Description
Use the keepalive command to enable the keepalive function of GRE, and configure the interval for sending keepalive messages and the maximum number of sending attempts as well. Use the undo keepalive command to disable the keepalive function and restore the default settings. By default, the keepalive function of GRE is disabled. After you configure the keepalive command, the router sends GRE keepalive messages regularly. If no response is received for a keepalive message that it has sent upon the expiration of a specified period, the router resends the keepalive message. If no response is received after the number of resending attempts exceeds the specified limit, the protocol of the local tunnel interface goes down. Related command: interface tunnel.
Example
# Configure the router to send GRE keepalive messages at intervals of 20 seconds and for up to five times.
[3Com-Tunnel0/0/5] keepalive 20 5
2.1.8 source
Syntax
source { ip-addr | interface-type interface-num } undo source
view
Parameter
ip-addr: Specifies the IP address of the real interface sending GRE packets in the address format of A.B.C.D. interface-type interface-num: Specifies the real interface sending packets by specifying its interface name and number. These interfaces include: Ethernet, Serial, ATM, Tunnel, Loopback, etc.
Description
Use the tunnel source command to specify the source IP address to be filled in the added IP header at the time of tunnel interface encapsulation. Use the undo tunnel source command to delete the defined source address. By default, source address of tunnel is not specified in the system. The specified source address of the tunnel is the real interface address sending GRE packets, which should keep accordance with the specified destination address at the opposite tunnel interface. The same source address and destination address cannot be configured on two or more tunnel interfaces using the same encapsulation protocol. Related command: interface tunnel, destination.
Example
# Configure the interface tunnel5 on the router 3Com1, on which the real output interface of the encapsulated packet is serial 0/0/0 (with the IP address of the interface being 192.100.1.1.
[3Com1-Tunnel5] source 192.100.1.1
Alternatively, you may specify the actual physical interface:

[3Com1-Tunnel5] source serial 0/0/0
2.1.9 tunnel-protocol gre

Syntax
tunnel-protocol gre undo tunnel-protocol
view
Parameter
gre: Encapsulation protocol of the tunnel.
Description
Use the tunnel mode command to set encapsulation mode of the tunnel interface to GRE. By default, the encapsulation protocol of tunnel interface is GRE. Under GRE mode users can execute and view GRE related commands, whereas other relevant commands are available only under other modes. Related command: interface tunnel.
Example
# Create a tunnel between routers 3Com1 and 3Com2, with encapsulation protocol being GRE and transport protocol being IP.
[3Com1-Tunnel3] tunnel-protocol gre [3Com2-Tunnel2] tunnel-protocol gre
Chapter 3 Dynamic VPN

3.1.1 debugging dvpn
Syntax
debugging dvpn { all | error | event | hexadecimal | packet } undo debugging dvpn { all | error | event | hexadecimal | packet }
View
User view
Parameter
all: Enables all debugging. error: Enables DVPN error debugging. event: Enables debugging on DVPN events, including register and other errors. hexadecimal: Enables hexadecimal packet display debugging. packet: Enables DVPN packet debugging.
Description
Use the debugging dvpn command to enable DVPN debugging.
Example
# Enable DVPN event debugging.
<3Com> debugging dvpn event
3.1.2 display dvpn map

Syntax
display dvpn map [ vpn-id vpn-id ] [ private-ip private-ip ]
View
Any view
Parameter
vpn-id: Specifies vpn-id.
private-IP: Specifies private IP address, that is, the IP address of a Tunnel interface.
Description
Use the display dvpn map command to view all of the Map information of the current node.
Example
# Display current map information.
[3Com] display dvpn map Public IP 202.113.11.3 211.122.12.2 UDP port 8001 8003 Private IP 10.1.1.1 10.1.1.3
# Display map information of private IP 10.1.1.1.

[3Com] display dvpn map 10.1.1.1 Private IP: 10.1.1.1 Status: Active UDP port: 8001
Used public IP: 202.113.11.3 Send : 123 Bytes, 9 Packets
Receive : 120 Bytes, 10 Packets Error: 8 Bytes, 1 Packets
3.1.3 dvpn authenticate enable

Syntax
dvpn authenticate enable undo dvpn authenticate enable
View
Parameter
None
Description
Use the dvpn authenticate enable command to enable authentication at a tunnel interface. Use the undo dvpn authenticate enable command to disable authentication at the tunnel interface.
Example
# Enable Tunnel interface authentication.
[3Com-Tunnel0] dvpn authenticate enable
3.1.4 dvpn class

Syntax
dvpn class dvpn-class-name undo dvpn class dvpn-class-name
View
System view
Parameter
dvpn-class-name: Name for a DVPN-class view, in a string of 1 to 30 bytes.
Description
Use the dvpn class command to create a DVPN-class view and enter it. In this view you can configure destination server address and UDP port ID. Use the undo dvpn class command to delete a DVPN-class view.
Example
# Create DVPN-class view abc.
[3Com] dvpn class abc
3.1.5 dvpn client

Syntax
dvpn client private-ip private-ip key key-value undo dvpn client private-ip private-ip key key-value
View
Parameter
private-ip: Private IP address of client, that is, IP address of a Tunnel interface. key-value: Private key of a client
Description
Use the dvpn client private-ip command to configure client authentication information at server. Use the undo dvpn client private-ip command to delete client authentication information. private-ip and key-value are used for client authentication at server. If no private key is configured for both the server and client, then authentication is not required for registration and establishing session links.
Example
# Set private key of the client with the IP address 10.0.0.2 to 123.
[3Com] dvpn client private-ip 10.0.0.2 key 123
3.1.6 dvpn interface-type

Syntax
dvpn interface-type { client | server }
View
Parameter
client: Interface is client. server: Interface is server.
Description
Use the dvpn interface-type command to specify a type for a tunnel interface. By default, a tunnel interface is set to be client.
Example
# Use a Tunnel interface as server.
[3Com-Tunnel0] dvpn interface-type server
3.1.7 dvpn key

Syntax
dvpn key key-value undo dvpn key key-value
View
Parameter
key-value: Encrypted value, in the range of 0 to 4294967295.
Description
Use the dvpn key command to configure private key for a client (while public key for server is generated randomly). Use the undo dvpn key command to delete a configured private key. Keys are used for establishing session links between DVPN clients. When the authentication of a client succeeds, server encrypts its public key with the private key of the client, puts the encrypted value into a Node Register Success packet and transmits it back to the client. After the client decrypts the received value using its private key and gets the public key, it can use the public key to set up session links with other clients.
Example
# Set private key to 123 for a Tunnel interface.
[3Com-Tunnel0] dvpn key 123
3.1.8 dvpn map

Syntax
dvpn map private-ip ip-address public-ip ip-address [ udp-port port-number] undo dvpn map private-ip ip-address public-ip ip-address
View
Parameter
ip-address: Specifies the IP address for the peer, public IP address, and private IP address (IP address for the tunnel interface) separately. port-number: Specifies UDP port ID for the peer. The parameter is unavailable for GRE encapsulation.
Description
Use the dvpn map private-ip command to create a static map, i.e. a static tunnel.
Use the undo dvpn map command to delete an existing map. If you already knew the private IP, public IP, and UDP port ID of other clients, you can use this command to create a static map. Note that the IP addresses and UDP port ID configured here should be consistent with those of the peer, otherwise, no correct static tunnel can be created.
Example
# Configure a static map at the tunnel interface with the public IP address 211.122.12.2, UDP port ID 8008 and private IP address 10.1.1.3.
[3Com-tunnel0] dvpn map private-ip 10.1.1.3 public-ip 211.122.12.2 8008
3.1.9 dvpn register-type

Syntax
dvpn register-type { forward | stable | undistributed | want }* undo dvpn register-type { forward | stable | undistributed | want }*
View
Parameter
forward: Instructs server to forward all data packets from the client and not to send next hop redirect notify packets. stable: Means the client has a fixed public IP address. undistributed: Instructs server not to send information about this client to other clients. want: Instructs server to send information about other clients to this client.
Description
Use the dvpn register-type command to configure the type of supplementary information for client registration at server. With the supplementary information type, server can judge if a client is configured with a fixed IP address and handle it appropriately. Use the undo dvpn register-type command to restore supplementary information type to the default. By default, the supplementary information is configured as follows: Public IP address is not fixed; server does not distribute information about other clients to this client, while it does distribute information about this client to other clients; server does not forward data packets of the client.
Example
# Set client registration type to undistributed, disallowing server to distribute information about this client to other clients.
[3Com-tunnel0] dvpn register-type undistributed
3.1.10 dvpn retry

Syntax
dvpn retry retry-times undo dvpn retry
View
Parameter
retry-times: The maximum number of redirect notification, session setup request and session keepalive request attempts, in the range of 1 to 10. By default, it is 3.
Description
Use the dvpn retry command to configure the maximum number of attempts of sending redirect notification, session setup request and session keepalive request at client. Use the undo dvpn retry command to restore the maximum number of attempts to the default.
Example
# Set the maximum number of transmission attempts allowed to 5.
[3Com-Tunnel0] dvpn retry 5
3.1.11 dvpn server

Syntax
dvpn server dvpn-class-name undo dvpn server dvpn-class-name
View
Parameter
dvpn-class-name: Dvpn-class name for the Tunnel interface. Dvpn-class is a data structure that includes information such as public and private IP addresses and UDP port ID, and it is created using the dvpn class command.
Description
Use the dvpn server command to specify the dvpn-class name for a Tunnel interface at client. Use the undo dvpn server command to delete a dvpn-class name. If the DVPN-class view specified does not exist, this command will create a dvpn-class configuration module. By default, no dvpn-class is created.
Example
# Set server name to abc for a Tunnel interface.
[3Com-Tunnel0] dvpn server abc
3.1.12 dvpn timer aging

Syntax
dvpn timer aging time-interval undo dvpn timer aging
View
Parameter
time-interval: Time interval for map age_timer, in range of 10 to 3600 seconds. By default, it is 60 seconds.
Description
Use the dvpn timer aging command to define the time interval for map age_timer. Use the undo dvpn timer aging command to restore the time interval of map age_timer to its default.
Example
# Set the time interval of map age_timer for a Tunnel interface to 120 seconds.

[3Com-Tunnel0] dvpn timer aging 120
3.1.13 dvpn timer keepalive

Syntax
dvpn timer keepalive time-interval undo dvpn timer keepalive
View
Parameter
time-interval: Time interval for map keepalive_timer, in range of 1 to 3600 seconds. By default, it is 10 seconds.
Description
Use the dvpn timer keepalive command to define the time interval for map keepalive_timer. Use the undo dvpn timer keepalive command to restore the time interval of map keepalive_timer to its default. Keepalive_Timer maintains normal session between clients. When a session link is set up successfully, a keepalive packet is sent to the peer and the keepalive_timer is enabled. Once the timer times out, the client sends a keepalive packet to the peer and waits for response from the peer.
Example
# Set the time interval of map keepalive_timer to 30 seconds.
[3Com-Tunnel0] dvpn timer keepalive 30
3.1.14 dvpn timer redirect

Syntax
dvpn timer redirect time-interval undo dvpn timer redirect
View
Parameter
time-interval: Time interval for next hop redirect notify_timer, in range of 1 to 180 seconds. By default, it is 10 seconds.
Description
Use the dvpn timer redirect command to define the time interval for next hop redirect notify_timer. Each time timeout occurs the node sends next hop redirect notifications to the source client until it receives the acknowledgement packet. Use the undo dvpn timer redirect command to set the time interval of next hop redirect notify_timer to its default. When server or a client finds a received packet is destined to another node in the VPN, it needs to forward this packet and send a Next Hop Redirect Notify packet to the source node of the packet. If no response is received from the source node within the preset time limit, the transmission attempt counts once.
Example
# Set the time interval of next hop redirect notify_timer for a Tunnel interface to 30 seconds.
[3Com-Tunnel0] dvpn timer redirect 30
3.1.15 dvpn timer register

Syntax
dvpn timer register time-interval undo dvpn timer register
View
Parameter
time-interval: Time interval for node register request_timer, in range of 1 to 600 seconds. By default, it is 30 seconds.
Description
Use the dvpn timer register command to define the time interval for node register request_timer. Each time timeout occurs a client should log into server again. Use the undo dvpn timer register command to restore the time interval of node register request_timer to its default.
Example
# Set the time interval of node register request_timer for a Tunnel interface to 60 seconds.
[3Com-Tunnel0] dvpn timer register 60
3.1.16 dvpn timer setup

Syntax
dvpn timer setup time-interval undo dvpn timer setup
View
Parameter
time-interval: Time interval for session setup request_timer, in range of 1 to 180 seconds. By default, it is 10 seconds.
Description
Use the dvpn timer setup command to define the time interval for session setup request_timer. Each time timeout occurs clients send a session Setup Request packet. Use the undo dvpn timer setup command to restore the time interval of session setup request_timer to its default. When a client sends a session setup request, it also enables session setup request_timer. If it receives no respond from the peer within the preset time limit, the attempt counts once and it sends another session setup request.
Example
# Set the time interval of session setup request_timer for a Tunnel interface to 30 seconds.
[3Com-Tunnel0] dvpn timer setup 30
3.1.17 dvpn udp-port

Syntax
dvpn udp-port udp-port undo dvpn udp-port
View
Parameter
udp-port: UDP port ID in DVPN, in range of 8000 to 8010. By default, it is 8000.
Description
Use the dvpn udp-port command to configure a UDP port ID for a Tunnel interface. This command is available at a Tunnel interface where UDP encapsulation type is configured. Use the undo dvpn udp-port command to restore the default port ID.
Example
# Configure UDP port ID for a Tunnel interface.
[3Com-Tunnel0 ] dvpn udp-port 8001
3.1.18 dvpn vpn-id

Syntax
dvpn vpn-id vpn-id undo dvpn vpn-id
View
Parameter
vpn-id: VPN ID for a tunnel interface, in range of 1 to 4294967295.
Description
Use the dvpn vpn-id command to specify VPN for a Tunnel interface. Use the undo dvpn vpn-id command to delete VPN configuration for a Tunnel interface.
Example
# Set the VPN ID for a Tunnel interface to 100.
[3Com-Tunnel0] dvpn vpn-id 100
3.1.19 private-ip
Syntax
private-ip ip-address undo private-ip ip-address
View
DVPN-class view
Parameter
ip-address: Specifies private IP address for a specific server, that is, the IP address of a Tunnel interface.
Description
Use the private-ip command to configure the private IP address of a specified server. Use the undo private-ip command to delete the private IP address of a specified server. By default, no private IP address is configured
Example
# Configure the private IP address of a server as 192.168.0.1.
[3Com-Dvpn-class-abc] private-ip 192.168.0.1
3.1.20 public-ip
Syntax
public-ip ip-address undo public-ip ip-address
View
DVPN-class view
Parameter
ip-address: Specifies public IP address for a specified server.
Description
Use the public-ip command to configure a public IP address for a specified server. Use the undo public-ip command to delete the public IP address of a specified server.
By default, no public IP address is configured.
Example
# Configure the public IP address of a server as 61.18.3.66.
[3Com-dvpn-class-abc] public-ip 61.18.3.66
3.1.21 reset dvpn map

Syntax
reset dvpn map vpn-id vpn-id private-ip ip-address
View
User view
Parameter
vpn-id: Specifies a VPN ID. ip-address: Private IP address, or the IP address of the tunnel interface.
Description
Use the reset dvpn map command to clear sessions for a specified VPN.
Example
# Clear session links of VPN 100.
<3Com> reset dvpn map 100
3.1.22 tunnel-protocol dvpn

Syntax
tunnel-protocol { gre | udp } dvpn
View
Parameter
gre dvpn: Creates tunnels in GRE DVPN encapsulation mode. udp dvpn: Creates tunnels in UDP DVPN encapsulation mode.
Description
Use the tunnel-protocol dvpn command to configure encapsulation mode for a Tunnel interface. DVPN attribute means the Tunnel interface is in DVPN mode then the interface turns into Multipoint attribute and NBMA type. By default, GRE encapsulation mode is available at a Tunnel interface, that is, point-to-point tunnels are set up in GRE mode.
Example
# Configure UDP DVPN encapsulation mode for a Tunnel interface.
[3Com-Tunnel0] tunnel-protocol udp dvpn
3.1.23 udp-port
Syntax
udp-port port-number undo udp-port
View
DVPN-class view
Parameter
port-number: UDP port ID for a specified server, only available for UDP encapsulation mode. By default, it is 8000.
Description
Use the udp-port command to configure UDP port ID for the server specified using the dvpn-class command. Use the undo udp-port command to restore UDP port ID to its default.
Example
# Set UDP port ID for a server to 8010.
[3Com-Dvpn-class-abc] udp-port 8010
Command Reference Guide QoS v2.30 Router Software
Table of Contents
Table of Contents
Chapter 1 Traffic Policing and Shaping Configuration Commands......................................... 1-1 1.1 Traffic Policing (TP) Configuration Commands ................................................................. 1-1 1.1.1 display qos car interface ......................................................................................... 1-1 1.1.2 display qos carl........................................................................................................ 1-2 1.1.3 qos car..................................................................................................................... 1-3 1.1.4 qos carl.................................................................................................................... 1-4 1.2 Traffic Shaping Configuration Commands......................................................................... 1-5 1.2.1 display qos gts interface.......................................................................................... 1-5 1.2.2 qos gts..................................................................................................................... 1-6 1.3 Line Rate Configuration Commands.................................................................................. 1-7 1.3.1 display qos lr interface ............................................................................................ 1-7 1.3.2 qos lr........................................................................................................................ 1-8 Chapter 2 Congestion Management Configuration Commands .............................................. 2-1 2.1 FIFO Queuing Configuration Commands .......................................................................... 2-1 2.1.1 qos fifo queue-length............................................................................................... 2-1 2.2 PQ Configuration Commands............................................................................................ 2-1 2.2.1 display qos pq interface .......................................................................................... 2-1 2.2.2 display qos pql......................................................................................................... 2-2 2.2.3 qos pq...................................................................................................................... 2-3 2.2.4 qos pql default-queue.............................................................................................. 2-4 2.2.5 qos pql inbound-interface........................................................................................ 2-5 2.2.6 qos pql protocol ....................................................................................................... 2-5 2.2.7 qos pql queue.......................................................................................................... 2-7 2.3 CQ Configuration Commands............................................................................................ 2-8 2.3.1 display qos cq interface........................................................................................... 2-8 2.3.2 display qos cql......................................................................................................... 2-9 2.3.3 qos cq...................................................................................................................... 2-9 2.3.4 qos cql default-queue............................................................................................ 2-10 2.3.5 qos cql inbound-interface ...................................................................................... 2-11 2.3.6 qos cql protocol ..................................................................................................... 2-12 2.3.7 qos cql queue ........................................................................................................ 2-13 2.3.8 qos cql queue serving ........................................................................................... 2-14 2.4 WFQ Configuration Commands....................................................................................... 2-15 2.4.1 display qos wfq interface....................................................................................... 2-15
3Com Corporation i
Table of Contents
2.4.2 qos wfq .................................................................................................................. 2-16 2.5 CBQ Configuration Commands ....................................................................................... 2-17 2.5.1 car ......................................................................................................................... 2-17 2.5.2 classifier behavior ................................................................................................. 2-18 2.5.3 display qos cbq interface....................................................................................... 2-19 2.5.4 display qos policy .................................................................................................. 2-20 2.5.5 display qos policy interface ................................................................................... 2-21 2.5.6 display traffic behavior .......................................................................................... 2-23 2.5.7 display traffic classifier .......................................................................................... 2-24 2.5.8 gts.......................................................................................................................... 2-25 2.5.9 if-match.................................................................................................................. 2-26 2.5.10 if-match { destination-mac | source-mac }........................................................... 2-27 2.5.11 if-match acl .......................................................................................................... 2-28 2.5.12 if-match any......................................................................................................... 2-28 2.5.13 if-match classifier ................................................................................................ 2-29 2.5.14 if-match dscp ....................................................................................................... 2-30 2.5.15 if-match inbound-interface................................................................................... 2-31 2.5.16 if-match ip-precedence........................................................................................ 2-32 2.5.17 if-match protocol.................................................................................................. 2-32 2.5.18 if-match rtp .......................................................................................................... 2-33 2.5.19 lr .......................................................................................................................... 2-34 2.5.20 lr percent ............................................................................................................. 2-35 2.5.21 qos apply policy................................................................................................... 2-36 2.5.22 qos max-bandwidth ............................................................................................. 2-37 2.5.23 qos policy ............................................................................................................ 2-38 2.5.24 queue af .............................................................................................................. 2-39 2.5.25 queue ef .............................................................................................................. 2-40 2.5.26 queue wfq............................................................................................................ 2-41 2.5.27 queue-length ....................................................................................................... 2-42 2.5.28 remark atmclp...................................................................................................... 2-42 2.5.29 remark dot1p ....................................................................................................... 2-43 2.5.30 remark dscp......................................................................................................... 2-44 2.5.31 remark fr-de......................................................................................................... 2-45 2.5.32 remark ip-precedence ......................................................................................... 2-46 2.5.33 traffic behavior..................................................................................................... 2-47 2.5.34 traffic classifier..................................................................................................... 2-47 2.5.35 traffic-policy ......................................................................................................... 2-48 2.5.36 wred..................................................................................................................... 2-49 2.5.37 wred dscp ............................................................................................................ 2-50
3Com Corporation ii
Table of Contents
2.5.38 wred ip-precedence............................................................................................. 2-52 2.5.39 wred weighting-constant ..................................................................................... 2-53 2.6 RTP Priority Queue Configuration Commands................................................................ 2-53 2.6.1 display qos rtpq interface ...................................................................................... 2-53 2.6.2 qos reserved-bandwidth........................................................................................ 2-54 2.6.3 qos rtpq ................................................................................................................. 2-55 2.7 QoS Token Commands ................................................................................................... 2-56 2.7.1 qmtoken................................................................................................................. 2-56 Chapter 3 WRED Configuration Commands .............................................................................. 3-1 3.1 WRED Configuration Commands ...................................................................................... 3-1 3.1.1 display qos wred interface....................................................................................... 3-1 3.1.2 qos wred.................................................................................................................. 3-2 3.1.3 qos wred ip-precedence.......................................................................................... 3-2 3.1.4 qos wred weighting-constant................................................................................... 3-3 Chapter 4 Frame Relay QoS Commands .................................................................................... 4-1 4.1.1 apply policy outbound ............................................................................................. 4-1 4.1.2 cbs........................................................................................................................... 4-2 4.1.3 cir............................................................................................................................. 4-3 4.1.4 cir allow ................................................................................................................... 4-4 4.1.5 congestion-threshold............................................................................................... 4-4 4.1.6 cq............................................................................................................................. 4-5 4.1.7 display fr class-map ................................................................................................ 4-6 4.1.8 display fr del ............................................................................................................ 4-7 4.1.9 display fr fragment-info............................................................................................ 4-8 4.1.10 display fr switch-table.......................................................................................... 4-10 4.1.11 display qos policy interface ................................................................................. 4-11 4.1.12 ebs....................................................................................................................... 4-12 4.1.13 fifo queue-length ................................................................................................. 4-13 4.1.14 fr class ................................................................................................................. 4-14 4.1.15 fr congestion-threshold........................................................................................ 4-15 4.1.16 fr de del ............................................................................................................... 4-16 4.1.17 fr del inbound-interface ....................................................................................... 4-16 4.1.18 fr del protocol ip................................................................................................... 4-17 4.1.19 fr pvc-pq .............................................................................................................. 4-18 4.1.20 fr traffic-policing ................................................................................................... 4-19 4.1.21 fr traffic-shaping................................................................................................... 4-20 4.1.22 fragment .............................................................................................................. 4-21 4.1.23 fr-class................................................................................................................. 4-21 4.1.24 pq ........................................................................................................................ 4-22
Table of Contents
4.1.25 pvc-pq.................................................................................................................. 4-23 4.1.26 rtpq ...................................................................................................................... 4-24 4.1.27 traffic-shaping adaptation.................................................................................... 4-25 4.1.28 wfq....................................................................................................................... 4-25 Chapter 5 MPLS QoS Configuration Commands ....................................................................... 5-1 5.1 MPLS QoS Configuration Commands ............................................................................... 5-1 5.1.1 if-match mpls-exp .................................................................................................... 5-1 5.1.2 qos cql protocol mpls exp........................................................................................ 5-1 5.1.3 qos pql protocol mpls exp ....................................................................................... 5-2 5.1.4 remark mpls-exp...................................................................................................... 5-3
3Com Corporation iv
Chapter 1 Traffic Policing and Shaping Configuration Commands

1.1 Traffic Policing (TP) Configuration Commands
1.1.1 display qos car interface
Syntax
display qos car interface [ interface-type interface-number ]
View
Any view
Parameter
Description
Use the display qos car interface command to view parameter configuration and running statistics of TP at each or all interfaces. If no interface is specified, TP configuration and running statistics of all interfaces will be displayed.
Example
# Display the TP parameter configuration information and running statistic information on each interface.
[3Com] display qos car interface Interface: Ethernet6/0/0 Direction: Inbound Rule(s): If-match CIR 8000(Bps), CARL CBS 1 EBS 0(Bit)
15000(Bit),
Conform Action: Exceed Action: Conformed: Exceeded:
remark ip-precedence 3 and pass remark ip-precedence 4 and continue
0/0 (Packets/Bytes) 0/0 (Packets/Bytes)
Direction: Outbound Rule(s): If-match ACL CIR 8000(Bps), CBS 2001 15000(Bit), EBS 0(Bit)
Conform Action: pass Exceed Action: Conformed: Exceeded: discard 0/0(Packets/Bytes) 0/0(Packets/Bytes)
1.1.2 display qos carl

Syntax
display qos carl [ carl-index ]
View
Any view
Parameter
carl-index: Committed Access Rate List (CARL) number, in the range of 1 to 199.
Description
Use the display qos carl command to view a certain rule or all the rules of CARL. If carl-index is not specified, all rules of CARL will be displayed.
Example
# Display the first rule of CAR list.
[3Com] display qos carl 1 [3Com] display qos carl 1 Current CARL Configuration: List Params
-----------------------------------------------------1 2 Precedence 1 2 MAC Address 0050-ba27-bed3
1.1.3 qos car

Syntax
qos car { inbound | outbound } { any | acl acl-number | carl carl-index } cir committed-information-rate cbs committed-burst-size ebs excess-burst-size green action red action undo qos car { inbound | outbound } { any | acl acl-number | carl carl-index } cir committed-information-rate cbs committed-burst-size ebs excess-burst-size
View
Interface view
Parameter
inbound: Limits rate for the packets received by the interface. outbound: Limits rate for the packets sent by the interface. any: Limits rates for the packets that match any rules. acl acl-number: Limits the rate of packets matching the ACL, with acl-number ranging 2000 to 3999. carl carl-index: Limits the rate of packets matching the CARL, with carl-index ranging 1 to 199. cir committed-information-rate: Committed Information Rate(CIR), in the range of 8000 to 155000000 bps. cbs committed-burst-size: Committed Burst Size (CBS), in the range of 15000 to 155000000 bits. ebs excess-committed-burst-size: Excess Burst Size (EBS), in the range of 0 to 155000000 bits. green: Action taken on the packets when the traffic rate conform to CIR. red: Action taken on the packets when the traffic rate does not conform to CIR.. action: Action taken on a packet, which can be: continue: Has it to be dealt with by the next CAR policy. discard: Dicards the packet. pass: Sends the packet. remark-prec-continue 0~7. new-precedence: Specifies a new IP priority new-precedence for the packet and execute the next TP policy. The value range is
remark-prec-pass new-precedence: Remarks the to be forwarded packet with a new IP priority new-precedence. It is in the range 0 to 7. remark-mpls-exp-continue new-mpls-exp: Remarks the received packet with a new MPLS EXP value in the range 0 to 7 and delivers the packet to the next CAR policy. remark-mpls-exp-pass new-mpls-exp: Remarks the received packet with a new MPLS EXP value in the range 0 to 7 and sends it to the destination.
Description
Use the qos car command to implement TP policy on an interface. Use the undo qos car command to remove a certain TP policy at the interface. This command only applies to IP packets. You can configure several CAR policies by using the command several times. The executing order of the policies depends on the configuration order.
Example
# Configure traffic policing for outbound packets that conform to CARL rule 1 at the interface Ethernet6/0/0. The normal traffic is 38400 bps. The burst size, twice of the normal traffic, is allowed the first time; then packets are normally transmitted when the rate is less than or equal to 38400 bps. When the rate is larger than 38400 bps, packets will be transmitted after their precedence has changed to 0.
[3Com-Ethernet6/0/0] qos car outbound any carl 1 cir 38400 cbs 76800 ebs 0 green pass red remark-prec-pass 0
1.1.4 qos carl

Syntax
qos carl carl-index { precedence precedence-value | mac mac-address } undo qos carl carl-index
View
System view
Parameter
carl: Committed access rate list. carl-index: CAR list number, in the range 1 to 199. precedence-value: Precedence, in the range 0 to 7.
mac-address: Hexadecimal MAC address. In the car inbound direction it is a source MAC address; in the car outbound direction it is a destination MAC address.
Description
Use the qos carl command to establish or modify a CARL. Use the undo qos carl command to delete a CARL. You can establish a CARL based on IP precedence or MAC address. For a different carl-index, the repeated execution of this command will create multiple CARLs, and for the same carl-index, such undertaking will modify the parameters of the CARL. At most, you can define eight precedence values. If the same precedence is specified several times, the system, by default, regards that only one precedence value has been specified. The precedence values are related to one another in the way of OR.
Example
# Configure CARL 1 with packet precedence 1 and 7.
[3Com] qos carl 1 precedence 1 7
1.2 Traffic Shaping Configuration Commands

1.2.1 display qos gts interface
Syntax
display qos gts interface [ interface-type interface-number ]
View
Any view
Parameter
Description
Use the display qos gts interface command to view GTS configuration and accounting information of a certain interface or all interfaces. If no interface is specified, the GTS configuration and running statistics of all interfaces will be displayed.
Example
# Display GTS configuration and accounting information of all interfaces.
[3Com] display qos gts interface Interface: Ethernet6/0/0 Rule(s): If-match Any CIR 64000 (bps), CBS 32000 (bit), EBS 0 (bit) Queue Length: 50 (Packet) Queue Size Passed : 13 (Packet)
: 723/979860 (Packets/Bytes)
Discarded: 0/0 (Packets/Bytes) Delayed : 723/979860 (Packets/Bytes)
1.2.2 qos gts

Syntax
qos gts { any | acl acl-number } cir committed-information-rate [ cbs
committed-burst-size [ ebs excess-burst-size [ queue-length queue-length ] ] ] undo qos gts { any | acl acl-number }
View
Interface view
Parameter
any: Performs TS on all the IP packets. acl acl-number: Limits the rate of packets matching the ACL, with acl-number being the ACL number in the range of 2000 to 2999. cir committed-information-rate: CIR, in the range 8000 to 155000000 bps. cbs committed-burst-size: CBS, in the range 15000 to 155000000 bits. By default, committed-burst-size is half of committed-information-rate. ebs excess-burst-size: EBS, in the range 0 to 155000000 bits. It defaults to 0, that is, only one token bucket is used for policing. queue-length queue-length: The maximum length of the buffer, in the range of 1 to 1024. By default, queue-length is 50.
Description
Use the qos gts command to set the shaping parameters for a certain type of traffic and to perform traffic shaping.
Use the undo qos gts command to remove the shaping configuration for a certain type of traffic. qos gts acl is used to set shaping parameters for the packets that conforms to certain ACL. Different ACLs can be used to set shaping parameters for different packets. qos gts any is used to set shaping parameters for all packets. qos gts acl cannot be used together with the qos gts any. Repeated use of qos gts will replace the configuration set earlier.
Example
# Configure traffic shaping for the packets that conform to ACL rule 2001 at the Ethernet6/2/0 interface. The normal traffic is 38400 bps. The burst size, twice of the normal traffic, is allowed the first time. Then packets are normally transmitted when the traffic is less than or equal to 38400 bps. When the rate is larger than 38400 bps, packets will be added to the buffer queue, which is 100 long.
[3Com-Ethernet6/2/0] qos gts acl 2001 cir 38400 cbs 76800 ebs 0 queue-length 100
1.3 Line Rate Configuration Commands

1.3.1 display qos lr interface
Syntax
display qos lr interface [ interface-type interface-number ]
View
Any view
Parameter
Description
Use the display qos lr interface command to view the LR configuration and statistics of an interface. If no interface is specified, the LR configuration and running statistics of all interfaces will be displayed.
Example
# Display LR configuration and statistics information of all interfaces.
[3Com] display qos lr interface Interface: Ethernet6/0/0 CIR Pass: Delay 8000 (Bps), CBS 15000 (Bit), EBS 0 (Bit)
0/0 (Packets/Bytes) : 0/0 (Packets/Bytes) : NO
Active Shaping
1.3.2 qos lr
Syntax
qos lr cir committed-information-rate [ cbs committed-burst-size [ ebs
excess-burst-size ] ] undo qos lr
View
Interface view
Parameter
cir committed-information-rate: CIR, in the range of 8000 to 155000000 bps. cbs committed-burst-size: CBS, in the range of 15000 to 155000000 bits. By default, committed-burst-size is half of committed-information-rate. ebs excess-burst-size: EBS, in the range of 0 to 155000000bits. By default, excess-burst-size is 0. There is only one token bucket is used to police.
Description
Use the qos lr command to limit the transmitting rate of the interface. Use the undo qos lr command to remove the limit. You can use this command on a tunnel interface to limit its interface rate and implement congestion management along with other queue scheduling algorithms. Before configuring queuing on the tunnel interface, you must configure the qos lr command. Before deleting the qos lr command on the interface, however, you must delete the queuing configuration.
Example
# Limit packet-forwarding rate of interface Ethernet6/0/0.
[3Com-Ethernet6/0/0] qos lr cir 38400 cbs 76800 ebs 0
Chapter 2 Congestion Management Configuration Commands

2.1 FIFO Queuing Configuration Commands
2.1.1 qos fifo queue-length
Syntax
qos fifo queue-length queue-length undo fifo queue-length
View
Interface view
Parameter
queue-length: Length limit of a queue, in the range of 1 to 1024.
Description
Use the qos fifo queue-length command to set the length limit of FIFO queue. Use the undo qos fifo queue-length command to restore the default value of the queue length. By default, queue-length is 75. Related command: display interface.
Example
# Set the length of FIFO queue to 100.
[3Com-Ethernet3/0/0] qos fifo queue-length 100
2.2 PQ Configuration Commands

2.2.1 display qos pq interface
Syntax
display qos pq interface [ interface-type interface-number ]
3Com Corporaton 2-1
View
Any view
Parameter
Description
Use the display qos pq interface command to view the configuration and statistics of priority queues (PQ) at interfaces. If no interfaces are specified when this command is used, the configuration and statistics of the priority queues at all interfaces will be displayed. Related command: qos pq.
Example
# Display the PQ configuration and statistics at interface Ethernet 6/0/0.
[3Com] display qos pq interface ethernet 6/0/0 Interface: Ethernet6/0/0 Priority queuing: PQL 1 Top: 0/20/0 Middle: (Outbound queue:Size/Length/Discards) 0/40/0 Normal: 0/60/0 Bottom: 0/80/0
2.2.2 display qos pql

Syntax
display qos pql [ pql-index ]
View
Any view
Parameter
pql-index: Priority queue list number.
Description
Use the display qos pql command to view contents of priority queue lists (PQL). Default items are not displayed. Related command: qos pq and qos pq pql.
3Com Corporaton 2-2
Example
# Display PQLs.
[3Com] display qos pql Current PQL Configuration: List Queue Params
-----------------------------------------------------1 2 2 3 Top Normal Bottom Middle Protocol ip less-than 1000 Length 60 Length 40 Inbound-interface Ethernet5/0/0
2.2.3 qos pq
Syntax
qos pq pql pql-index undo qos pq
View
Interface view
Parameter
pql-index: PQL index, ranging 1 to 16.
Description
Use the qos pq command to apply a group of priority list to an interface. Use the undo qos pq command to restore the congestion management policy at the interface to FIFO. By default, the congestion management policy at the interfaces is FIFO. All the physical ports can use the priority queue except ATM interface and interfaces with X.25 as the link layer. An interface can only use one group of priority lists. This command can configure multiple classification rules for each group in the priority list. During traffic classification, the system matches packets along the rule list. If matching a certain rule, a packet will be classified into the priority queue specified by this rule, or it will be put into the default priority queue. Related command: qos pql, display qos pq interface, display qos pql, and display interface.
3Com Corporaton 2-3
Example
# Apply the priority list 12 to the Ethernet 0/2/0.
[3Com-Ethernet0/2/0] qos pq pql 12
2.2.4 qos pql default-queue

Syntax
qos pql pql-index default-queue { top | middle | normal | bottom } undo qos pql pql-index default-queue
View
System view
Parameter
pql-index: PQL index, ranging 1 to 16. top, middle, normal and bottom: Corresponding to the four levels of priority queue, in descending order. The queue defaults to normal.
Description
Use the qos pql default-queue command to designate the packets without corresponding rules to a default queue. Use the undo qos pql default-queue command to cancel the configuration and restore the default value. During traffic classification, if a packet does not match any rule it will be put into the default priority queue. For the same pql-index, repeated use of this command will set a new default queue. Related command: display qos pql.
Example
# Set the default queue of the packets matching no rules in PQL 12 to be the bottom queue.
[3Com] qos pql 12 default-queue bottom
3Com Corporaton 2-4
2.2.5 qos pql inbound-interface

Syntax
qos pql pql-index inbound-interface interface-type interface-number queue { top | middle | normal | bottom } undo qos pql pql-index inbound-interface interface-type interface-number
View
System view
Parameter
pql-index: PQL index, ranging 1 to 16. Interface-type: Interface type. Interface-number: Interface number. top, middle, normal and bottom: Corresponding to the four levels of priority queues, in descending order. By default, it is set to normal.
Description
Use the qos pql inbound-interface command to establish classification rules based on interfaces. Use the undo qos pql inbound-interface command to delete the corresponding classification rule. This command can match packets according to which interface the packet comes from. For the same pql-index, this command can be repeatedly used, establishing classification rules for packets that come from different interfaces. Related command: qos pql default-queue, qos pql protocol, qos pql queue, and qos pq.
Example
# Display how to make packets from an interface Serial 0/0/0 be put into a middle queue.
[3Com] qos pql 12 inbound-interface Serial 0/0/0 middle
2.2.6 qos pql protocol

Syntax
qos pql pql-index protocol protocol-name queue-key key-value queue { top | middle | normal | bottom }
3Com Corporaton 2-5
undo qos pql pql-index protocol protocol-name queue-key key-value queue { top | middle | normal | bottom }
View
System view
Parameter
pql-index: PQL index, ranging 1 to 16. top, middle, normal, bottom: Priority queues, in descending order. protocol-name: Protocol type, which can only be IP by far. When the protocol-name is IP, the values of queue-key and key-value are displayed in the following table: Table 2-1 Description on values of queue-key and key-value queue-key fragments acl less-than greater-tha n tcp Null ACL group number, 2000 to 3999 Length, 0 to 65535 Length, 0 to 65535 Port number, 0 to 65535 Port number, 0 to 65535 key-value Description Any IP packet that is fragmented will be classified. Any IP packet that complies with an ACL will be classified. Any link layer frame less than the specified value is enqueued. Any link layer frame greater than the specified value is enqueued. Any IP packet whose source or destination TCP port number is the specified port number will be classified. Any IP packet whose source or destination UDP port number is the specified port number will be classified. All IP packets
udp
When queue-key is tcp or udp, key-value can be port name or the associated port number. You can enter ? to get the port numbers associated with port names.
Description
Use the qos pql protocol command to establish classification rules based on the protocol type. Use the undo qos pql protocol command to delete the corresponding classification rule.
3Com Corporaton 2-6
The system matches a packet to a rule according to the set order. When the packet matches a certain rule the search process is completed. For the same pql-index, this command can be used repeatedly to establish multiple classification rules for IP packets. Related command: display qos pql.
Example
# Specify PQ rule 1 to make IP packets matching ACL 3100 be put into the top queue.
[3Com] qos pql 1 protocol ip acl 3100 queue top
2.2.7 qos pql queue

Syntax
qos pql pql-index queue { top | middle | normal | bottom } queue-length queue-length undo qos pql pql-index queue { top | middle | normal | bottom } queue-length
View
System view
Parameter
pql-index: PQL index, ranging 1 to 16. queue-length: Four length values of priority queues, ranging from 1 to 1024. By default, the length values of the queues are displayed as follows: The default length value of the top queue is 20. The default length value of the middle queue is 40. The default length value of the normal queue is 60. The default length value of the bottom queue is 80.
Description
Use the qos pql queue command to specify the maximum number of packets that can wait in each of the priority queues, or the length of a PQ. Use the undo qos pql queue command to restore the default value of each PQ length. If a queue is full, any new incoming packet will be dropped. Related command: qos pql default-queue, qos pql inbound-interface, qos pql protocol, qos pq.
3Com Corporaton 2-7
Example
# Specify the maximum number of packets waiting in the top priority queue 10 to 10.
[3Com] qos pql 10 queue top queue-length 10
2.3 CQ Configuration Commands

2.3.1 display qos cq interface
Syntax
display qos cq interface [ interface-type interface-number ]
View
Any view
Parameter
Description
Use the display qos cq interface command to view the configuration and statistics of customized queues (CQ) at interfaces. If no interface is specified, CQ configuration and statistics of all interfaces will be displayed. Related command: qos cq.
Example
# Display CQ configuration and statistics at the interface Ethernet 6/0/0/.
[3Com] display qos cq interface 6/0/0 Interface: Ethernet6/0/0 Custom queuing: CQL 1 0: 3: 6: 9: 12: 15: 0/ 0/ 0/ 0/ 0/ 0/ 20/0 20/0 20/0 20/0 20/0 20/0 (Outbound queue:Size/Length/Discards) 1: 4: 7: 10: 13: 16: 0/ 0/ 0/ 0/ 0/ 0/ 20/0 20/0 20/0 20/0 20/0 20/0 2: 5: 8: 11: 14: 0/ 0/ 0/ 0/ 0/ 20/0 20/0 20/0 20/0 20/0
3Com Corporaton 2-8
2.3.2 display qos cql

Syntax
display qos cql
View
Any view
Parameter
None
Description
Use the display qos cql command to view contents of customized queue lists (CPL). Default values will not be displayed. Related command: qos cq cql and qos cq.
Example
# Display information about a CQL.
[3Com] display qos cql Current CQL Configuration: List 2 3 3 Queue 3 0 1 Params Protocol ip fragments Length 100 Inbound-interface Ethernet0
2.3.3 qos cq
Syntax
qos cq cql cql-index undo qos cq
View
Interface view
Parameter
cql-index: CQL index, ranging 1 to 16.
3Com Corporaton 2-9
Description
Use the qos cq cql command to apply the customized queue to an interface. Use the undo qos cq command to restore the congestion management policy at the interface to FIFO. By default, the congestion management policy at the interfaces is FIFO. All the physical ports can use customized queues, except ATM interface and interfaces with X.25 as the link layer. One interface can only use one group of customized queues. This command can configure multiple classification rules for each group in the CQL. During traffic classification, the system matches packets along the rule link. If the packet matches a certain rule, the packet will be classified into the corresponding priority queue specified by this rule. If the packet does not match any rule it will go to the default priority queue. Related command: qos cql default-queue, qos cql inbound-interface, qos cql protocol, qos cql queue serving, qos cql queue queue-length.
Example
# Apply the custom group 5 on the Ethernet 6/0/0.
[3Com-Ethernet6/0/0] qos cq cql 5
2.3.4 qos cql default-queue

Syntax
qos cql cql-index default-queue queue-number undo qos cql cql-index default-queue
View
System view
Parameter
cql-index: CQL index, ranging 1 to 16. queue-number: Queue number, ranging 0 to 16. By default, customized queue number is 1.
3Com Corporaton 2-10
Description
Use the qos cql default-queue command to assign a default queue for those packets that do not match any rule in the CQL. Use the undo qos cql default-queue command to restore the default queue. During traffic classification, if a packet does not match any rule it will go to the default queue. Related command: qos cql inbound-interface, qos cql protocol, qos cql queue serving, and qos cql queue queue-length.
Example
# Assign default queue 2 to CQL 5.
[3Com] qos cql 5 default-queue 2
2.3.5 qos cql inbound-interface

Syntax
qos cql cql-index inbound-interface interface-type interface-number queue
queue-number undo qos cql cql-index inbound-interface interface-type interface-number
View
System view
Parameter
cql-index: CQL index, in the range 1 to 16. Interface-type: Interface type. interface-number: Interface number. queue-number: Queue number in the range 0 to 16.
Description
Use the qos cql inbound-interface command to establish classification rules based on interfaces. Use the undo qos cql inbound-interface command to delete corresponding classification rules. By default, no classification rules are configured.
This command matches a packet to a rule according to the interface that the packet comes from. For the same group-number, this command can be repeatedly used, establishing different classification rules for packets from different interfaces. Related command: qos cql protocol, qos cql queue serving, qos cql queue queue-length.
Example
# Specify a rule to put packets from tunnel 1 in queue 3.
[3Com] qos cql 5 inbound-interface tunnel 1 queue 3
2.3.6 qos cql protocol

Syntax
qos cql cql-index protocol protocol-name queue-key key-value queue queue-number undo qos cql cql-index protocol protocol-name queue-key key-value
View
System view
Parameter
cql-index: CQL index, ranging 1 to 16. protocol-name: Protocol name, which can only be IP by far. queue-number: Queue number, ranging 0 to 16. When protocol-name is IP, the values of queue-key and key-value are displayed in the following table: Table 2-2 Descriptions of values of queue-key and key-value queue-key fragments Acl key-value Null ACL group number, 2000 to 3999 Length, 0 to 65535 Length, 65535 0to Description Any IP packet that is fragmented will be classified. Any IP packet that complies with ACL will be classified. Any link layer frame less than the specified value is enqueued. Any link layer frame greater than the specified value is enqueued. IP packets are classified according to source or
less-than greater-than tcp
Port number,
queue-key
key-value 0 to 65535
Description destination TCP port number. IP packets are classified according to source or destination UDP port number. All IP Packets
udp -
Port number, 0 to 65535 -
When queue-key is tcp or udp, key-value can be port name or the associated port number. You can enter ? to get the port numbers associated with port names.
Description
Use the qos cql protocol command to establish classification rules based on the protocol type. Use the undo qos cql protocol command to delete corresponding classification rules. The system matches a packet to a rule according to the order that rules are configured. When the packet matches a certain rule the search process is completed. For the same cql-index, this command can be used repeatedly establishing multiple classification rules for IP packets. Related command: qos cql inbound-interface, qos cql protocol, qos cql queue serving, qos cql queue queue-length.
Example
# Specify CQ rule 5 to make any IP packet that matches the ACL 3100 be put into queue 3.
[3Com] qos cql 5 protocol ip acl 3100 queue 3
2.3.7 qos cql queue

Syntax
qos cql cql-index queue queue-number queue-length queue-length undo qos cql cql-index queue queue-number queue-length
View
System view
Parameter
cql-index: CQL index, ranging 1 to 16. queue-number: Queue number, ranging 0 to 16.
queue-length: The maximum length of the queue, ranging 0 to 1024 packets.
Description
Use the qos cql queue command to specify a default queue for the packets without corresponding rules. Use the undo qos cql queue command to cancel the configuration and restore the default value. By default, queue-length is 20 packets. If a queue is full, any newly incoming packet will be dropped. Related command: qos cql inbound-interface, qos cql protocol, and qos cql queue serving.
Example
# Specify the maximum packets in the queue 4 in CQL 5 to 40.
[3Com] qos cql 5 queue 4 queue-length 40
2.3.8 qos cql queue serving

Syntax
qos cql cql-index queue queue-number serving byte-count undo qos cql cql-index queue queue-number serving
View
System view
Parameter
cql-index: CQL index, ranging 1 to 16. queue-number: Queue number, ranging 0 to 16. byte-count: Number of bytes in packets that the given queue sends in each poll, ranging from 0 to 16777215 bytes.
Description
Use the qos cql queue serving command to set the byte-count of the packets sent from a given queue in each poll. Use the undo qos cql queue serving command to restore the byte-count of sent packets to the default value. By default, byte-count is 1500.
Related command: qos cql inbound-interface, qos cql protocol, and qos cql queue queue-length.
Example
# Specify byte-count of queue 2 in the CQL 5 to 1400.
[3Com] qos cql 5 queue 2 serving 1400
2.4 WFQ Configuration Commands

2.4.1 display qos wfq interface
Syntax
display qos wfq interface [ interface-type interface-number ]
View
Any view
Parameter
Description
Use the display qos wfq interface command to view WFQ (weighted fair queuing) configuration and statistics of an interface. If no interface is specified, the WFQ configuration and statistics of all interfaces will be displayed. Related command: qos wfq.
Example
# Display the WFQ configuration and statistics of Ethernet 6/0/0 interface.
[3Com] display qos wfq interface ethernet 6/0/0 Interface: Ethernet6/0/0 Weighted Fair queuing: WFQ: 0/100/0 0/0/128 (Active/Max active/Total) (Outbound queue:Size/Length/Discards)
Hashed queues:
2.4.2 qos wfq

Syntax
qos wfq [ queue-length max-queue-length [ queue-number total-queue-number ] ] undo qos wfq
View
Interface view
Parameter
max-queue-length: The maximum queue length, in the range of 1 to 1024. It is the maximum number of packets in each queue. Packets out of range will be discarded. total-queue-number: Total queue number. Available numbers are 16, 32, 64, 128, 256, 512, 1024, 2048 and 4096. By default, max-queue-length is 64; total-queue-number is 256.
Description
Use the qos wfq command to apply WFQ or modify WFQ parameters at an interface. Use the undo qos wfq command to restore the default congestion management mechanism FIFO. Except ATM interface and interfaces with X.25 as the link layer, all physical ports can use weighed fair queue. When an interface does not apply WFQ policy, this command can be used to apply WFQ policy at the interface as well as specifying WFQ parameters. If an interface has applied WFQ policy, this command can be used to modify WFQ parameters. Related command: display interface and display qos wfq interface.
Example
# Apply WFQ at the Ehernet6/0/0 interface, set the queue length to 100 and set the total queue number to 512.
[3Com-Ethernet6/0/0] qos wfq queue-length100 queue-number 512
2.5 CBQ Configuration Commands

2.5.1 car
Syntax
car cir committed-information-rate [ cbs committed-burst-size ebs excess-burst-size ] [ green action [ red action] ] undo car
View
Traffic behavior view
Parameter
cir committed-information-rate: Committed information rate of traffic, in the range of 8000 to 155000000 bps. cbs committed-burst-size: Committed burst size, number of bits that can be sent in each interval, in the range of 15000 to 155000000 bits. ebs excess-burst-size: Excessive burst size, in the range of 0 to 155000000 bits. green: Action conducted to packets when traffic of packets conforms to the traffic convention. By default, the action of green is pass. red: Action conducted to packets when traffic of packets does not conform to the traffic convention. By default, the action of red is discard. action: Action conducted on a packet, which is divided into the following types: discard: Drops the packet remark-dscp-pass new-dscp: Sets new-dscp and transmits the packet. remark-prec-pass new-precedence: Sets new-precedence of IP and transmit the packet. remark-mpls-exp-pass new-exp: Sets the new MPLS EXP and transmit the packet. pass: Transmits the packet.
Description
Use the car command to configure traffic monitoring for a behavior. Use the undo car command to delete the configuration of traffic monitoring. The policy can be used in the input or outbound direction of the interface. Application of policy including TP policy on an interface will cause the previous qos car command to be ineffective.
If this command is frequently configured on classes of the same policy, the last configuration will overwrite the previous ones. Related command: qos policy, traffic behavior, classifier behavior.
Example
# Use traffic monitor for a behavior. The normal traffic of packets is 38400 bps. Burst traffic twice of the normal traffic can pass initially and later the traffic is transmitted normally when the rate does not exceed 38400bps. When the rate exceeds 38400 bps, the precedence of the packet turns to 0 and the packet is transmitted.
[3Com] traffic behavior database [3Com-behavior-database] remark-precedence-pass 0 car cir 38400 cbs 76800 ebs 0 green pass red
2.5.2 classifier behavior

Syntax
classifier tcl-name behavior behavior-name undo classifier tcl-name
View
Policy view
Parameter
tcl-name: Must be the name of the defined class, the system-defined or user-defined class. behaviorname: Must be the name of the defined behavior, the system-defined or user-defined behavior.
Description
Use the classifier behavior command to specify the behavior for the class in the policy. Use the undo classifier command to remove the application of the class in the policy. Each class in the policy can only be associated with one behavior. The undo command is not used for the default class. Related command: qos policy.
Example
# Specify the behavior test for the class database in the policy 3Com.

[3Com] qos policy 3Com
[3Com-qospolicy-3Com] classifier database behavior test
2.5.3 display qos cbq interface

Syntax
display qos cbq interface [ { interface-type interface-number } [ pvc { pvc-name [ vpi/vci ] | vpi/vci } ] ]
View
Any view
Parameter
interface-type: Interface type. interface-number: Interface number. pvc: Used for ATM interface only, i.e., policy configuration of specified PVC on specified ATM interface can be displayed. pvc-name: PVC name. vpi/vci: VPI/VCI value pair. For detailed description, refer to the Parameter Description about pvc command.
Description
Use the display qos cbq interface command to view CBQ configuration information and operating status, and the specified PVC on specified ATM interface or on all interfaces.
Example
[3Com] display qos cbq interface Interface: Ethernet10/2/0 Class Based Queuing: (Outbound queue: Total Size/Discards) CBQ: 0/0 0/0/0 (EF/AF/BE) 0/0/256 (Active/Max active/Total) 1 (Allocated)
Queue Size: BE Queues: AF Queues:
Bandwidth(Kbps): 74992/75000 (Available/Max reserve)
2.5.4 display qos policy

Syntax
display qos policy { system-defined | user-defined } [ policy-name [ classifier tcl-name ] ]
View
Any view
Parameter
system-defined: Policy pre-defined by the system. user-defined: Policy pre-defined by the user. policy-name: Policy name. If it is not specified, the configuration information of all the policies pre-defined by the system or by the user will be displayed. tcl-name: Class name in the policy.
Description
Use the display qos policy command to display the configuration information of the specified class, or all the classes and associated behaviors, in the specified policy or all policies.
Example
[3Com] display qos policy user-defined User Defined QoS Policy Information: Policy: test Classifier: default-class Behavior: be -none-
Classifier: 3COM Behavior: 3COM Marking: Remark IP Precedence 3 Committed Access Rate: CIR 20000 (bps), CBS 15000 (bit), EBS 0 (bit) Conform Action: pass Exceed Action: discard
Expedited Forwarding:
Bandwidth 50 (Kbps) CBS 1500 (Bytes)
Classifier: database Behavior: database Assured Forwarding: Bandwidth 30 (Kbps) Discard Method: Tail Queue Length : 64 (Packets)
General Traffic Shape: CIR 30000 (bps), CBS 15000 (bit), EBS 0 (bit) Queue length 50 (Packets) Marking: Remark MPLS EXP 3
2.5.5 display qos policy interface

Syntax
display qos policy interface [ interface-type interface-number ] [ inbound | outbound ] [ pvc { pvc-name [ vpi/vci ] | vpi/vci } ] ]
View
Any view
Parameter
interface-type: Interface type. interface-number: Interface number. pvc: Used for ATM interface only, i.e., policy configuration of specified PVC on specified ATM interface can be displayed. pvc-name: PVC name. vpi/vci: VPI/VCI value pair. For details refer to the parameter description about the pvc command.
Description
Use the display qos policy interface command to view the configuration and operating state of the policy on the specified interface, on the specified PVC on a particular ATM interface, or on all interfaces and PVCs.
The statistics of the MPLS EXP remarked packets include those temporarily remarked. Whether the MPLS EXP field of a packet is remarked depends on whether it is to be output as a MPLS packet.
Example
# Display qos policy on Ethernet 10/2/0.
[3Com] display qos policy interface Ethernet 10/2/0
Interface: Ethernet10/2/0
Direction: Outbound
Policy: test Classifier: default-class Matched : 0/0 (Packets/Bytes) Rule(s) : if-match any Behavior: be Default Queue: Flow Based Weighted Fair Queuing Max number of hashed queues: 256 Matched : 0/0 (Packets/Bytes)
Enqueued : 0/0 (Packets/Bytes) Discarded: 0/0 (Packets/Bytes) Discard Method: Tail
Classifier: 3COM Matched : 0/0 (Packets/Bytes) Operator: AND Rule(s) : if-match ip-precedence 5 Behavior: 3COM Marking: Remark IP Precedence 3 Remarked: 0 (Packets) Committed Access Rate: CIR 20000 (bps), CBS 15000 (bit), EBS 0 (bit) Conform Action: pass Exceed Action: discard
Conformed: 0/0 (Packets/Bytes) Exceeded : 0/0 (Packets/Bytes)

Expedited Forwarding:
Bandwidth 50 (Kbps), CBS 1500 (Bytes) Matched : 0/0 (Packets/Bytes)
Enqueued : 0/0 (Packets/Bytes) Discarded: 0/0 (Packets/Bytes)
Classifier: database Matched : 0/0 (Packets/Bytes) Operator: AND Rule(s) : if-match acl 3131 if-match inbound interface Ethernet10/2/0 Behavior: database General Traffic Shape: CIR 30000 (bps), CBS 15000 (bit), EBS 0 (bit) Queue Length: 50 (Packets) Queue size Passed : : 0 (Packets) 0/0 (Packets/Bytes) 0/0 (Packets/Bytes) 0/0 (Packets/Bytes)
Discarded: Delayed Marking: :
Remark MPLS EXP 3 Remarked: 0 (Packets) Assured Forwarding: Bandwidth 30 (Kbps) Matched : 0/0 (Packets/Bytes)
2.5.6 display traffic behavior

Command
display traffic behavior { system-defined | user-defined } [ behavior-name ]
View
Any view
Parameter
system-defined: Behavior pre-defined by the system. user-defined: Behavior pre-defined by the user.
behavior-name: Behavior name. If it is not specified, the information of the behaviors pre-defined by the system or by the user will be displayed.
Description
Use the display traffic behavior command to display the information of the traffic behavior configured on the router.
Example
[3Com] display traffic behavior user-defined User Defined Behavior Information: Behavior: test Assured Forwarding: Bandwidth 30 (Kbps) Discard Method: Tail Queue Length : 64 (Packets)
General Traffic Shape: CIR 30000 (bps), CBS 15000 (bit), EBS 0 (bit) Queue length 50 (Packets) Marking: Remark MPLS EXP 3 Behavior: 3COM Marking: Remark IP Precedence 3 Committed Access Rate: CIR 20000 (bps), CBS 15000 (bit), EBS 0 (bit) Conform Action: pass Exceed Action: discard
Expedited Forwarding: Bandwidth 50 (Kbps) CBS 1500 (Bytes)
2.5.7 display traffic classifier

Syntax
display traffic classifier { system-defined | user-defined } [ tcl-name ]
View
Any view
Parameter
system-defined: Class pre-defined by the system. user-defined: Class pre-defined by the user. tcl-name: Class name. If it is not specified, the information of all classes pre-defined by the system or by the user.
Description
Use the display traffic classifier command to view the configuration information about the class of the router.
Example
[3Com] display traffic classifier user-defined User Defined Classifier Information: Classifier: 3COM Operator: AND Rule(s) : if-match ip-precedence 5
Classifier: database Operator: AND Rule(s) : if-match acl 3131 if-match inbound-interface Ethernet10/2/0
2.5.8 gts
Syntax
gts cir committed-information-rate [ cbs committed-burst-size [ ebs excess-burst-size [ queue-length queue-length ] ] ] undo gts
View
Parameter
cir committed-information-rate: CIR, in the range of 8000 to 155000000 bps. cbs committed-burst-size: CBS, in the range of 15000 to 155000000 bits. ebs excess-burst-size: EBS, in the range of 0 to 155000000 bits. queue-length queue-length: The maximum length of a queue, in the range 1 to 1024.
By default, committed-burst-size is half of committed-information-rate, excess-burst-size is 0, and queue-length is 50.
Description
Use the gts command to configure traffic shaping for a behavior. Use the undo gts command to delete traffic shaping for a behavior. A policy in which shape is used on an interface can only be applied in the outbound direction of the interface. Application of policy including shape policy on an interface will cause the previously configured qos gts command to be ineffective. If this command is frequently configured on the same traffic behavior, the last configuration will overwrite the previous ones. Related command: qos policy, traffic behavior, and classifier behavior.
Example
# Configure TS for a behavior. The normal traffic is 38400 bps. Burst traffic twice of the normal traffic can pass initially and later the traffic is transmitted normally when the rate is less than or equal to 38400 bps. When the rate exceeds 38400 bps, the traffic will enter the queue buffer and the buffer queue length is 100.
[3Com] traffic behavior database [3Com-behavior-database] gts cir 38400 cbs 76800 ebs 0 queue-length 100
2.5.9 if-match
Syntax
if-match [ not ] match-criteria undo if-match [ not ] match-criteria
View
Class view
Parameter
match-criteria: Match rule of a class, which can be acl, any, class-map, destination-mac, inbound-interface, ip-precedence, dscp, protocol, source-mac, mpls-exp.
Description
Use the if-match command to define the rule of all packets not satisfying the specified match rule. Use the undo if-match command to delete the rule of all packets not satisfying the specified match rule. Related command: traffic classifier.
Example
# Define the class to match packets which protocol is not IP.
[3Com] traffic classifier class1 [3Com-classifier-class1] if-match not protocol ip
2.5.10 if-match { destination-mac | source-mac }

Syntax
if-match [not ] { destination-mac | source-mac } mac-address undo if-match [not ] { destination-mac | source-mac } mac-address
View
Class view
Parameter
mac-address: MAC address.
Description
Use the if-match { destination-mac | source-mac } command to define a match rule of destination or source MAC address. Use the undo if-match { destination-mac | source-mac } command to delete the match rule of destination or source MAC address. The match rules of the destination MAC address are only meaningful for the policies of the outbound direction and the interface of Ethernet type. The match rules of the source MAC address are only meaningful for the policies of the input direction and the interface of Ethernet type. Related command: traffic classifier.
Example
# Define that the match rule of class2 is to match the packets with the destination MAC address 0050-ba27-bed3.
[3Com] traffic classifier class1 [3Com-classifier-class1] if-match destination-mac 0050-ba27-bed3
# Define the match rule of class2 as matching the packets with source MAC address 0050-ba27-bed2.
[3Com] traffic classifier class2 [3Com-classifier-class2] if-match source mac 0050-ba27-bed2
2.5.11 if-match acl

Syntax
if-match [ not ] acl access-list-number undo if-match [ not ] acl access-list-number
View
Class view
Parameter
access-list-number: ACL number.
Description
Use the if-match acl command to define ACL match rule. Use the undo if-match acl command to delete ACL match rule. Related command: traffic classifier.
Example
# Define a class to match ACL3101.
[3Com] traffic classifier class1 [3Com-classifier-class1] if-match acl 3101
2.5.12 if-match any

Syntax
if-match [ not ] any
undo if-match [ not ] any
View
Class view
Parameter
none
Description
Use the if-match any command to define the rule matching all packets. Use the undo if-match any command to delete the rule matching all packets. Related command: traffic classifier.
Example
# Define the rule matching all packets.
[3Com] traffic classifier class1 [3Com-classifier-class1] if-match any
2.5.13 if-match classifier

Syntax
if-match [ not ] classifier tcl-name undo if-match [ not ] classifier tcl-name
View
Class view
Parameter
tcl-name: Class name.
Description
Use the if-match classifier command to define class-map match rule. Use the undo if-match classifier command to delete the class-map match rule. This configuration method is the only one to match the traffic with both the match-all and match-any features. For example: classA need to match: rule1 & rule2 | rule3 traffic classifier classB operator and
if-match rule1 if-match rule2 traffic classifier classA operator or if-match rule3 if-match classifier classB Related command: traffic classifier.
Example
# Define match rule of class2 and class1 should be used. Therefore, class1 is configured first. The match rule of class1 is ACL 101 and the IP precedence is 5.
[3Com] traffic classifier class1 [3Com-classifier-class1] if-match ip-precedence 5
# Define the packet whose class is class2, match rule is class1 and destination MAC address is 0050-BA27-BED3.
[3Com] traffic classifier class2 [3Com-classifier-class2] if-match classifier class1 [3Com-classifier-class2] if-match destination-address mac 0050-BA27-BED3
2.5.14 if-match dscp

Syntax
if-match [ not ] dscp { dscp-value } undo if-match [ not ] dscp { dscp-value }
View
Class view
Parameter
dscp-value: DSCP value, in the range of 0 to 63.
Description
Use the if-match dscp command to define IP DSCP match rule. Use the undo if-match dscp command to delete IP DSCP match rule. More than one such command can be configured under a class. They do not overwrite one another. When each command is configured, the dscp-value will sort the values
automatically in the ascending order. Only when the specified DSCP values are identical with those in the rule (sequence may be different) can the command be deleted. More than one DSCP value can be configured and the maximum number is 8. By default, if multiple DSCPs of the same value are specified, the system regards them as one. Relation between different DSCP values is OR. Related command: traffic classifier.
Example
# Define the match rule of class1 as matching the packets with the DSCP value as 1, 6 or 9.
[3Com] traffic classifier class1 [3Com-classifier-class1] if-match dscp 1 6 9
2.5.15 if-match inbound-interface

Syntax
if-match [ not ] inbound-interface interface-type interface-number undo if-match [ not ] inbound-interface interface-type interface-number
View
Class view
Parameter
Description
Use the if-match inbound-interface command to define ingress interface match rule of a class. Use the undo if-match inbound-interface command to delete ingress interface match rule of a class. If the interface is deleted, the match rule will not exist. Supported interface type: ATM, Ethernet, Serial, Tunnel, VT etc. Related command: traffic classifier.
Example
# Define that the class matches the packets entering from Ethernet6/0/0.

[3Com] traffic classifier class1
[3Com-classifier-class1] if-match inbound-interface Ethernet6/0/0
2.5.16 if-match ip-precedence

Syntax
if-match [ not ] ip-precedence { ip-precedence-value } undo if-match [ not ] ip-precedence
View
Class view
Parameter
ip-precedence-value: Precedence value, in the range of 0 to 7. Multiple values can be specified and the maximum number is 8. If multiple precedence of the same value are specified, only one of them is taken. Relation between different DSCP values is OR.
Description
Use the if-match ip-precedence command to define IP precedence match rule. Use the undo if-match ip-precedence command to delete IP precedence match rule. When the command is configured, the ip-precedence-value will be sorted automatically in ascending order. Multiple precedence values can be specified and the maximum number is 8. If multiple precedence values of the same value are specified, the system regards them as one. Relation between different precedence values is OR. Related command: traffic classifier.
Example
# Define the match rule of class1 as matching the packets with the precedence value as 1 or 6.
[3Com] traffic classifier class1 [3Com-classifier-class1] if-match ip-precedence 1 6
2.5.17 if-match protocol

Syntax
if-match [ not ] protocol protocol-name
undo if-match [ not ] protocol protocol-name
View
protocol-name Protocol name. IP is used.
Parameter
Class view
Description
Use the if-match protocol command to define protocol match rule. Use the undo if-match protocol command to delete protocol match rule. Related command: traffic classifier.
Example
# Define the packet whose class match protocol is IP.
[3Com] traffic classifier class1 [3Com-classifier-class1] if-match protocol ip
2.5.18 if-match rtp

Syntax
if-match [ not ] rtp start-port starting-port-number end-port end-port-number undo if-match [ not ] rtp start-port starting-port-number end-port end-port-number
View
Class view
Parameter
starting-port-number: Starting RTP port number, in the range of 2000 to 65535. end-port-number: Ending RTP port numbers, in the range of 2000 to 65535.
Description
Use the if-match rtp command to define port match rule of RTP. Use the undo if-match rtp command to delete the port match rule of RTP. This command can match RTP packets in the range of specified RTP port number, i.e., to match packets of even UDP port numbers between <starting-port-number> and <
end-port-number >. If this command is frequently used under a class, the last configuration will overwrite the previous one. Related command: traffic classifier.
Example
# Define the match rule of class1 as matching the packets whose RTP port number is the even UDP port number between 16384 and 32767.
[3Com] traffic classifier class1 [3Com-classifier-class1] if-match rtp start-port 16384 end-port 32767
2.5.19 lr
Syntax
lr cir committed-information-rate [ cbs committed-burst-size [ ebs excess-burst-size] ] undo lr
View
Parameter
committed-information-rate: CIR in the range 8000 to 155000000 bps. committed-burst-size: CBS in the range 15000 to 155000000 bits. The default CBS is half of the specified CIR. excess-burst-size: EBS in the range 0 to 155000000 bits. It defaults to 0, meaning only one token bucket is used for policing.
Description
Use the lr command to configure LR. Use the undo lr command to disable LR. By default, LR is disabled. LR is different from GTS in the sense that the former is functioning at the link layer whereas the latter is functioning at the IP layer. Related command: display traffic policy interface.
Example
# For the specified behavior, set CIR to 38400 bps and CBS to 76800 bits. This allows bursty traffic twice the CIR to pass at the first time. After that, traffic smaller than 38400 bps is sent and traffic larger than 38400 bps is put in queues.
[3Com] traffic behavior database [3Com-behavior-database] lr cir 38400 cbs 76800
2.5.20 lr percent
Syntax
lr percent cir committed-information-rate [ cbs committed-burst-size [ ebs
excess-burst-size ] ] undo lr
View
Parameter
committed-information-rate: CIR in percentages, in the range 1 to 100. committed-burst-size: CBS in the range 50 to 2000 milliseconds. The default CBS is 500 milliseconds. excess-burst-size: EBS in the range 0 to 2000 milliseconds. It defaults to 0, meaning only one token bucket is used for policing.
Description
Use the lr percent command to configure LR. Use the undo lr percent command to disable LR. By default, LR is disabled. The CIR, CBS, and EBS in the lr percent command are computed based on interface or ATM PVC bandwidth. Note that the interface bandwidth discussed here is computed based on the bandwidth in the qos max-bandwidth command without multiplying the maximum reserved-bandwidth percentage. If the computed CIR is smaller than 8 kbps, it is regarded 8 kbps; if the computed CBS is smaller than 15000 bits it is regarded 15000 bits. LR is different from GTS in the sense that the former is functioning at the link layer whereas the latter is functioning at IP layer.
Related command: display traffic policy interface.
Example
# For the specified behavior, set CIR to 50% of interface bandwidth and CBS to 200 milliseconds. This allows bursty traffic equivalent to 200 milliseconds x 50% of interface bandwidth to pass at the first time. After that, traffic smaller than or equal to 50% of interface bandwidth is sent and larger traffic is put in queues.
[3Com] traffic behavior database [3Com-behavior-database] lr percent cir 50 cbs 200
2.5.21 qos apply policy

Syntax
qos apply policy policy-name { inbound | outbound [ dynamic ] } undo qos apply policy { inbound | outbound }
View
Interface view
Parameter
inbound: Inbound direction. outbound: Outbound direction. policy-name: Policy name. dynamic: Dynamically applies the policy, but only when MP is enabled.
Description
Use the qos apply policy command to attach a service policy to the interface. Use the undo qos apply policy command to delete the associated policy on the interface. When applying a CBQ policy on an ATM interface, note that: If the IPoA protocol is adopted, the interface must be physical or PVC. If the IPoEoA/PPPoEoA/PPPoA protocol is adopted, the interface must be virtual Ethernet or virtual template. In the event that the ATM interface where the policy is applied is physical, the policy will not take effect. When applying the policy, the interface will be unavailable if the sum of bandwidth specified for the classes in the policy to assured forwarding and expedited forwarding, exceeds the available bandwidth on the interface. When the available bandwidth on the interface is modified, the policy will be deleted if the sum of bandwidth specified for the
classes in the policy to assured forwarding and expedited forwarding exceeds the available bandwidth on the interface. The configurations of queue af, queue ef, queue wfq and gts are not allowed in the inbound policy and the behaviors associated with the class. dynamic applies only to the dial or VT interface configured with MP for dynamic policy application. Before applying a QoS policy to such a dial or VT interface, use the qos max-bandwidth command to configure adequate bandwidth for running the policy. However, the policy that you apply to the interface is not used immediately. Instead, it is used dynamically depending on the actual bandwidth condition as follows: When the bandwidth of the bundle reaches the policy requirement (bandwidth >ef+af), the policy is enabled on the interface; but before that, the default FIFO queuing applies. If bandwidth >ef+af, the policy is enabled to accommodate changes when a channel comes up, goes down, or joins the bundle. When some channels in use are disconnected resulting in inefficient bandwidth use, FIFO queuing applies.
Example
# Apply the policy 3Com in the outbound direction of interface Ethernet6/0/0.
[3Com-Ethernet6/0/0] qos apply policy 3COM outbound
2.5.22 qos max-bandwidth

Syntax
qos max-bandwidth bandwidth undo qos max-bandwidth
View
Interface view
Parameter
bandwidth: Available bandwidth of the interface. It is in kbps (1 to 1000000). By default, this value is the actual interface baud rate or speed for a physical interface, the total bandwidth of the channel set for a logical serial interface that is formed by bundling in T1/E1 or MFR, or 64 kbps for a logical interface like virtual template or VE.
Description
Use the qos max-bandwidth command to configure the maximum interface bandwidth used when CBQ enqueues packets. Use the undo qos max-bandwidth command to cancel the bandwidth configuration. The maximum available bandwidth of an interface is preferred to be smaller than the real available bandwidth of the physical interfaces or the logical links. For a serial interface, the value defaults to 64 kbps. To modify it, you can change the interface rate using the baudrate command to 2.048 Mbps for example, and then set a new value, 115.2 kbps for example.
Example
# Set the bandwidth of virtual-template 1 to 128 kbps.
[3Com-Virtual-Template1] qos max-bandwidth 128
2.5.23 qos policy

Syntax
qos policy policy-name undo qos policy policy-name
View
System view
Parameter
Description
Use the qos policy command to define a policy and enter policy view. Use the undo qos policy command to delete a policy. The policy cannot be deleted if it is applied on an interface. It is necessary to remove application of the policy on the current interface before deleting it via the undo qos policy command. policy-name should not be the policy defined by the system. The default is the policy defined by the system. Related command: classifier behavior and qos apply policy.
Example
# Define a policy named as 3Com.

[3Com] qos policy 3Com [3Com-qospolicy-3Com]
2.5.24 queue af
Syntax
queue af bandwidth { bandwidth | pct percentage } undo queue af
View
Parameter
bandwidth: Bandwidth in Kbps, in the range of 8 to 1000000. pct percentage: Percentage of the available bandwidth configured, in the range of 1 to 100.
Description
Use the queue af command to configure the class to perform the assured-forwarding and the minimum bandwidth used. Use the undo queue af command to cancel the configuration. When associating the class with the queue af behavior in the policy, the following must be satisfied. The sum of the bandwidth specified for the classes in the same policy to assured forwarding (queue af) and expedited forwarding (queue ef) must be less than or equal to the available bandwidth of the interface where the policy is applied. The sum of percentages of the bandwidth specified for the classes in the same policy to assured forwarding (queue af) and expedited forwarding (queue ef) must be less than or equal to 100. The bandwidth configuration for the classes in the same policy to assured forwarding (queue af) and expedited forwarding (queue ef) must adopt the value of the same type. For example, they all adopt the absolute value form or the percentage form. Related command: qos policy, traffic behavior, and classifier behavior.
Example
# Configure traffic behavior named database and configure the minimum bandwidth of the traffic behavior to 200Kbps.

[3Com] traffic behavior database
[3Com-behavior-database] queue af bandwidth 200
2.5.25 queue ef
Syntax
queue ef bandwidth { bandwidth [ cbs committed-burst-size ] | pct percentage [ cbs_ratio ratio ] } undo queue ef
View
Parameter
bandwidth: Bandwidth in Kbps, in the range of 8 to 1000000. percentage: Percentage of available bandwidth, in the range of 1 to 100. committed-burst-size: Specifies the committed burst size in bytes, in the range of 32 to 2000000. By default, burst is bandwidth*25. ratio: Committed burst percentage, in the range 25 to 500.
Description
Use the queue ef command to configure expedited-forwarding packets to the absolute priority queue and configure the maximum bandwidth. Use the undo queue ef command to cancel the configuration. The command can not be used together with queue af, queue-length, and wred in traffic behavior view. In the policy the default class default-class cannot be associated with the traffic behavior queue ef belongs to. The sum of the bandwidth specified for the classes in the same policy to assured forwarding (queue af) and expedited forwarding (queue ef) must be less than or equal to the available bandwidth of the interface where the policy is applied. The sum of percentages of the bandwidth specified for the classes in the same policy to assured forwarding (queue af) and expedited forwarding (queue ef) must be less than or equal to 100. The bandwidth configuration for the classes in the same policy to assured forwarding (queue af) and expedited forwarding (queue ef) must adopt the value of the same type. For example, they all adopt the absolute value form or the percentage form.
Related command: qos policy, traffic behavior, and classifier behavior.
Example
# Configure packets to enter priority queue. The maximum bandwidth is 200Kbps and burst is 5000 bytes by default.
[3Com] traffic behavior database [3Com-behavior-database] queue ef bandwidth 200 cbs 5000
2.5.26 queue wfq

Syntax
queue wfq [ queue-number total-queue-number ] undo queue wfq
View
Parameter
total-queue-number: Number of fair queue, which can be 16, 32, 64, 128, 256, 512, 1024, 2048 and 4096 and the default value is 64.
Description
Use the queue wfq command to configure the default-class to use WFQ. Use the undo queue wfq command to .delete the configuration. The traffic behavior configured with the command can only be associated with the default class. It can also be used together with the command queue-length or wred. Related command: qos policy, traffic behavior, and classifier behavior.
Example
# Configure WFQ for default-class and the queue number is 16.
[3Com] traffic behavior test [3Com-behavior-test] queue wfq 16 [3Com] qos policy 3Com [3Com-qospolicy-3Com] classifier default-class behavior test
2.5.27 queue-length
Syntax
queue-length queue-length undo queue-length queue-length
View
Parameter
queue-length: The maximum threshold value of the queue, in the range of 1 to 512. The default drop mode is tail drop and the queue length is 64.
Description
Use the queue-length command to configure maximum queue length. Use the undo queue-length command to delete the configuration. This command can be used only after the queue af or queue wfq command has been configured. The queue-length, which has been configured, will be deleted when the undo queue af or undo queue wfq command is executed. The queue-length, which has been configured, will be deleted when the random drop mode is configured via the wred command, and vise versa. By default, tail drop is configured. Related command: qos policy, traffic behavior, and classifier behavior.
Example
# Configure tail drop and set the maximum queue length to 16.
[3Com] traffic behavior database [3Com-behavior-database] queue af bandwidth 200 [3Com-behavior-database] queue-length 16
2.5.28 remark atmclp

Syntax
remark atmclp atmclp-value undo remark atmclp
View
Parameter
atmclp-value: Value of the cell loss priority (CLP) bit in ATM packets, 0 or 1.
Description
Use the remark atmclp command to have the system remark the CLP bit of ATM packets in the class. Use the undo remark atmclp command to disable remarking the CLP bit of ATM packets. By default, the CLP bit of ATM packets is not remarked. The policy that includes CLP remark can apply only on the outbound direction of interfaces or ATM PVCs. When congestion occurs, the router drops packets with a high CLP bit value, if CLP remark is supported.
Example
# Remark the CLP bit of ATM packets to 1.
[3Com] traffic behavior database [3Com-behavior-database] remark atmclp 1
2.5.29 remark dot1p

Syntax
remark dot1p cos-value undo remark dot1p
View
Parameter
cos-value: 802.1p priority value of VLAN packets, ranging from 0 to 7.
Description
Use the remark dot1p command to configure the 802.1p priority value in the VLAN packets of a class. Use the undo remark dot1p command to remove the 802.1p priority value from the VLAN packets.
By default, VLAN packets have no 802.1p priority value. 802.1p priority value is the CoS domain value in VLAN packets. The level 2 switching devices, such as Ethernet switch, set up forwarding policy according to this priority value.
Example
# Set the 802.1p priority value in the VLAN packets of a class to 6.
[3Com] traffic behavior database [3Com-behavior-database] remark dot1p 6
2.5.30 remark dscp

Syntax
remark dscp dscp-value undo remark dscp
View
Parameter
dscp-value: Preset DSCP value, in the range of 0 to 63, which can be any of these keywords: ef, af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, cs1, cs2, cs3, cs4, cs5, cs7, or default. Table 2-3 DSCP keywords and values Keyword ef af11 af12 af13 af21 af22 af23 af31 af32 af33 DSCP value(binary) 000000 001010 001100 001110 010010 010100 010110 011010 011100 011110 0 10 12 14 18 20 22 26 28 30 DSCP value(decimal)
Keyword af41 af42 af43 cs1 cs2 cs3 cs4 cs5 cs6 cs7 default
DSCP value(binary) 100010 100100 100110 001000 010000 011000 100000 101000 110000 111000 000000
DSCP value(decimal) 34 36 38 8 16 24 32 40 48 56 0
Description
Use the remark dscp command to configure DSCP value for a class to identify matched packets. Use the undo remark dscp command to remove the DSCP value setting. Related command: qos policy, traffic behavior, classifier behavior.
Example
# Configure DSCP value to 6 to identify packets.
[3Com] traffic behavior database [3Com-behavior-database] remark dscp 6
2.5.31 remark fr-de

Command
remark fr-de fr-de-value undo remark fr-de
View
Parameter
fr-de-value: Value of the DE flag bit in the frame relay packet, 0 or 1.
Description
Use the remark fr-de command to configure the value of the DE flag bit in the frame relay packet. Use the undo remark fr-de command to remove the setting. Related command: qos policy, traffic behavior, and classifier behavior.
Example
# Configure the value of the DE flag bit in the frame relay packet as 1.
[3Com] traffic behavior database [3Com-behavior-database] remark fr-de 1
2.5.32 remark ip-precedence

Syntax
remark ip-precedence ip-precedence-value undo remark ip-precedence
View
Parameter
ip-precedence-value: Preset precedence value, in the range of 0 to 7.
Description
Use the remark ip-precedence command to configure precedence value to identify matched packets. Use the undo remark ip-precedence command to remove the setting. Related command: qos policy, traffic behavior, and classifier behavior.
Example
# Configure precedence value to 6 to identify packets.
[3Com] traffic behavior database [3Com-behavior-database] remark ip-precedence 6
2.5.33 traffic behavior

Command
traffic behavior behaviorname undo traffic behavior behaviorname
View
System view
Parameter
behavior-name: Behavior name.
Description
Using the traffic behavior command you can define a traffic behavior and enter the behavior view. Use the undo traffic behavior command to delete a traffic behavior. behavior-name will not be the traffic behavior pre-defined by the system. The traffic behavior defined by the system includes ef, af, and be. Related command: qos policy, qos apply policy, and classifier behavior.
Example
# Define a traffic behavior named behavior1.
[3Com] traffic behavior behavior1 [3Com-behavior-behavior1]
2.5.34 traffic classifier

Syntax
traffic classifier tcl-name [ operator { and | or } ] undo traffic classifier tcl-name
View
System View
Parameter
and: Specifies the relation between the rules in the class as logic AND. That is, the packet that matches all the rules belongs to this class.
or: Specifies the relation between the rules in the class as logic OR. That is, the packet that matches any one of the rules belongs to this class. tcl-name: Class name.
Description
Use the traffic classifier command to define a class and enter the class view. Use the undo traffic classifier command to delete a class. By default, the relation is operator and. tcl-name shall not be the classes pre-defined by the system. The classes defined by the system include: default-class, ef, af1, af2, af3, af4, ip-prec0, ip-prec1, ip-prec2, ip-prec3, ip-prec4, ip-prec5, ip-prec6, ip-prec7, mpls-exp0, mpls-exp1, mpls-exp2, mpls-exp3, mpls-exp4, mpls-exp5, mpls-exp6, and mpls-exp7. Related command: qos policy, qos apply policy, and classifier behavior.
Example
# Define a class named as class 1.
[3Com] traffic classifier class1 [3Com-classifier-class1]
2.5.35 traffic-policy
Syntax
traffic-policy policy-name undo traffic-policy
View
Parameter
policy-name: Specifies a policy by its name.
Description
Use the traffic-policy command to associate a sub-policy to the behavior. Use the undo traffic-policy command to remove the association. After defining a class using the traffic classifier command you can have it perform the associated behavior defined in its policy and in addition, use a sub-policy to sub-classify
the class, having it perform the behavior defined in the sub-policy. You can thus implement policy embedding. Related command: traffic behavior, traffic classifier.
Example
# Embed the sub-policy Child in the policy for the traffic behavior database
[3Com] traffic behavior database [3Com-behavior-database] traffic-policy Child
2.5.36 wred
Syntax
wred [ dscp | ip-precedence ] undo wred [ dscp | ip-precedence ]
View
Parameter
dscp: Uses DSCP value for calculating drop probability for a packet. ip-precedence: Uses IP precedence value for calculating drop probability for a packet.
Description
Use the wred command to configure drop mode as weighted random early detection (WRED). Use the undo wred command to delete the configuration. By default, ip-precedence is configured. This command can be used only after the queue af command has been configured. The wred command and queue-length command can not be used simultaneously. Other configurations under the random drop will be deleted when this command is deleted. When a policy is applied on an interface, the previous WRED configuration on interface level will become ineffective. When configuration is performed in default-class view, ip-precedence is configured by default. The behavior associated with default-class can only use wred ip-precedence. Related command: qos policy, traffic behavior, and classifier behavior.
Example
# Configure WRED for a traffic behavior named database and drop probability is calculated by IP precedence.
[3Com] traffic behavior database [3Com-behavior-database] wred
2.5.37 wred dscp

Syntax
wred dscp dscp-value low-limit low-limit high-limit high-limit [ discard-probability discard-prob ] undo wred dscp dscp-value
View
Parameter
dscp-value: DSCP value, in the range of 0 to 63, which can be any of the following keywords: ef, af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, cs1, cs2, cs3, cs4, cs5, cs7, or default. Table 2-4 DSCP keywords and values Keyword ef af11 af12 af13 af21 af22 af23 af31 af32 af33 af41 af42 DSCP value(binary) 000000 001010 001100 001110 010010 010100 010110 011010 011100 011110 100010 100100
DSCP value(decimal) 0 10 12 14 18 20 22 26 28 30 34 36
Keyword af43 cs1 cs2 cs3 cs4 cs5 cs6 cs7 default
DSCP value(binary) 100110 001000 010000 011000 100000 101000 110000 111000 000000
DSCP value(decimal) 38 8 16 24 32 40 48 56 0
low-limit: Lower threshold value, in the range of 1 to 1024. It is 10 by default. high-limit: Upper threshold value, in the range of 1 to 1024. It is 30 by default. discard-prob: Denominator of drop probability, in the range of 1 to 255, and by default, it is 10.
Description
Use the wred dscp command to set DSCP lower-limit, upper-limit and drop probability denominator of WRED. Use the undo wred dscp command to delete the configuration. This command can be used only after the wred command has been used to enable WRED drop mode based on DSCP. The configuration of wred dscp will be deleted if the configuration of qos wred is deleted. The configuration of drop parameter will be deleted if the configuration of queue af is deleted. Related command: qos policy, traffic behavior, classifier behavior.
Example
# Set the queue lower-limit to 20, upper-limit to 40 and discard probability to 15 for the packet whose DSCP is 3.
[3Com] traffic behavior database [3Com-behavior-database] wred dscp [3Com-behavior-database] discard-probability 15 wred dscp 3 low-limit 20 high-limit 40
2.5.38 wred ip-precedence

Syntax
wred ip-precedence precedence low-limit low-limit high-limit high-limit
[ discard-probability discard-prob ] undo wred ip-precedence precedence
View
Parameter
precedence: Precedence of IP packet, in the range of 0 to 7. low-limit: Lower threshold value, in the range of 1 to 1024. It is 10 by default. high-limit: Upper threshold value, in the range of 1 to 1024. It is 30 by default. discard-prob: Denominator of drop probability, in the range of 1 to 255. It is 10 by default.
Description
Use the wred ip-precedence command to set precedence lower-limit, upper-limit and drop probability denominator of WRED. This command can be used only after the wred command has been used to enable WRED drop mode based on IP precedence. The configuration of wred ip-precedence will be deleted when wred configuration is deleted. The configuration of drop parameters will be deleted if queue af is deleted. Related command: qos policy, traffic behavior, classifier behavior.
Example
# Set lower-limit to 20, upper-limit to 40 and discard probability to 40 for the packet with the precedence 3.
[3Com] traffic behavior database [3Com-behavior-database] wred [3Com-behavior-database] discard-probability 15 wred ip-precedence 3 low-limit 20 high-limit 40
2.5.39 wred weighting-constant

Syntax
wred weighting-constant exponent undo wred weighting-constant
View
Parameter
exponent: Exponential, in the range of 1 to 16. It is 6 by default.
Description
Use the wred weighting-constant command to set exponential for the calculation of average queue length by WRED. This command can be used only after the queue af command has been configured and the wred command has been used to enable WRED drop mode. The configuration of wred weighting-constant will be deleted if random-detect is deleted. Related command: qos policy, traffic behavior, classifier behavior.
Example
# Configure exponential for calculating average queue length to 6.
[3Com] traffic behavior database [3Com-behavior-database] queue af bandwidth 200 [3Com-behavior-database] wred ip-precedence [3Com-behavior-database] wred weighting-constant 6
2.6 RTP Priority Queue Configuration Commands

2.6.1 display qos rtpq interface
Syntax
display qos rtpq interface [ interface-type | interface-number ]
View
Any view
Parameter
Description
Use the display qos rtpq interface command to view information of the current IP RTP Priority queue, including the current RTP queue depth and number of RTP packets dropped, and display the RTP priority queue configuration and statistics on an interface or on all interfaces.
Example
# Display information of the current IP RTP Priority queue.
[3Com] display qos rtpq interface Ethernet 10/2/0 Interface: Ethernet10/2/0 RTP Queuing: (Output queue: Size/Max/Outputs/Discards) RTPQ: 0/0/0/0
2.6.2 qos reserved-bandwidth

Syntax
qos reserved-bandwidth pct percentage undo qos reserved-bandwidth
View
Interface view
Parameter
percentage: Percentage of the reserved bandwidth to the available bandwidth. It is in the range of 1 to 100 and the default value is 80.
Description
Use the qos reserved-bandwidth command to set the maximum reserved bandwidth percentage. Use the undo qos reserved-bandwidth command to restore the default value. Usually the bandwidth configured for the QoS queue is less than 75 percent of the total bandwidth, considering that part of the bandwidth should be used for controlling protocol packets, layer 2 frame headers, and so on.
Caution should be taken in using this command to the maximum preserved bandwidth. Related command: qos rtpq.
Example
# Set the maximum reserved bandwidth allocated for RTP priority queue to 80% of the available bandwidth.
[3Com-Serial1/0/0] qos reserved-bandwidth pct 80
2.6.3 qos rtpq

Syntax
qos rtpq start-port first-rtp-port-number end-port last-rtp-port-number bandwidth bandwidth [ cbs committed-burst-size ] undo qos rtpq
View
Interface view
Parameter
first-rtp-port-number: Specifies the first UDP port number to initiate RTP messages. last-rtp-port-number: Specifies the last UDP port number to initiate RTP messages. bandwidth: Bandwidth for RTP priority queue, which is part of the maximum reserved bandwidth in Kbps. committed-burst-size: Committed burst size, in the range 1500 to 2000000 bytes.
Description
Use the qos rtpq command to enable the RTP queue feature on an interface to reserve a real-time service for the RTP packets sent to some UDP destination port ranges. Use the undo qos rtpq command to disable the RTP queuing feature of the interface. By default, the RTP queuing feature is disabled. This command is applied to the delay-sensitive applications, like real-time voice transmission. Configured with the qos rtpq command, the system will serve the voice services first among all other services. The parameter "bandwidth" should be set greater than the service-required bandwidth to prevent conflict caused by burst traffic. However, the bandwidth should be no greater than 75% of the total bandwidth. If you need to configure the bandwidth to be greater than 75%
of the total bandwidth, first change the maximum reserved bandwidth via qos reserved-bandwidth command. In bandwidth allocation, the bandwidth for data load, IP header, UDP header and RTP header is allocated, except that for the Layer2 frame header. Therefore, it is obligatory to reserve 25% of the total bandwidth. Related command: qos reserved-bandwidth.
Example
# Enable IP RTP Priority on Serial 1/0/0. The starting port number is 16384. The starting port number is 16383.The RTP packets in the range of 16384~32767 of the destination port use 64Kbps bandwidth. If network convergence happens, the packets will enter IP RTP Priority queue.
[3Com-Serial1/0/0] qos rtpq start-port 16384 end-port 32767 bandwidth 64
2.7 QoS Token Commands

2.7.1 qmtoken
Syntax
qmtoken token-number undo qmtoken
View
Interface view
Parameter
token-number: The number of transmitted tokens, in the range 1 to 50.
Description
Use the qmtoken command to configure the number of transmitted tokens. Use the undo qmtoken command to disable the token function of QoS. By default, the token function of QoS is disabled. When FTP is used to transfer data, the upper layer protocol such as TCP provides the flow control function. This can however cause the configuration of CQ and WFQ, if they are configured, to become ineffective. To solve this problem, the token function of QoS was introduced into the 3Com Router Software. This function provides a flow control
mechanism at the underlying layer queuing level. It can control the number of packets sent to the underlying interface queues based on the number of tokens. If FTP applies, you are recommended to set the number of tokens sent by an interface to 1.
Note: After you configure this command on an interface, you must perform shutdown and undo shutdown on the interface to have the function take effect. So far, this command is supported only by Ethernet, serial, and BRI interfaces.
Example
# Set the number of transmitted tokens to 1.
[Router-Ethernet1/0/0]qmtoken 1
Chapter 3 WRED Configuration Commands

3.1 WRED Configuration Commands
3.1.1 display qos wred interface
Syntax
display qos wred interface [ interface-type interface-number ]
View
Any view
Parameter
Description
Use the display qos wred interface command to view WRED (weighed random early detection) configuration and statistics of an interface. If no interface is specified, WRED configuration and statistics of all interfaces will be displayed.
Example
# Display WRED configuration and statistics about the specified interface.
[3Com] display qos wred interface ethernet 6/0/0 Interface: Ethernet6/0/0 Current WRED configuration: Exponent: 10 (1/1024) Precedence Random Tail discard Low limit High limit Discard probability
discard
------------------------------------------------------------------------0 1 2 3 4 0 0 0 0 0 0 0 0 0 0 10 100 10 10 10 30 1000 30 30 30 10 1 10 10 10

5 6 7 0 0 0 0 0 0 10 10 10

30 30 30 10 10 10
3.1.2 qos wred

Syntax
qos wred undo qos wred
View
Interface view
Parameter
None
Description
Use the qos wred command to apply WRED at an interface. Use the undo qos wred command to restore the default dropping method. By default, the dropping method of a queue is tail drop. WRED must be used together with the WFQ mechanism. So before WRED is enabled at an interface, it is necessary to ensure that the WFQ has been applied at the interface. Related command: qos wfq, qos wred, display qos wred interface.
Example
# Apply WRED at Ethernet0/0/0 interface. (Provided that WFQ has already been applied at the interface).
[3Com-Ethernet0/0/0] qos wred
3.1.3 qos wred ip-precedence

Syntax
qos wred ip-precedence ip-precedence low-limit low-limit high-limit high-limit discard-probability discard-prob undo qos wred ip-precedence ip-precedence
View
Interface view
Parameter
ip-precedence: Precedence of IP packets, in the range of 0 to 7; low-limit low-limit: The minimum threshold, in the range of 1 to 1024; by default, it is 10. high-limit high-limit: The maximum threshold, in the range of 1 to 1024; by default, it is 30. discard-probability discard-prob: Drop probability denominator, ranging 1 to 255; by default, it is 10.
Description
Use the qos wred ip-precedence command to configure the minimum threshold, maximum threshold, and drop probability denominator for each precedence level in WRED. Use the undo qos wred ip-precedence command to restore the default value. WRED parameters can be set only after the command qos wred has been used to apply WRED at the interface. The thresholds are for the average quantity of packets in queue. Related command: qos wred, display qos wred interface.
Example
# Display how to set minimum threshold of the packet of precedence 3 at an interface to 20, maximum threshold to 40 and discard probability to 15.
[3Com-Ethernet0/0/0] qos wred ip-precedence 3 low-limit 20 high-limit 40 discard-probability 15
3.1.4 qos wred weighting-constant

Syntax
qos wred weighting-constant exponent undo qos wred weighting-constant
View
Interface view
Parameter
exponent: Exponential used to calculate the average queue length, in the range 1 to 16. It defaults to 9.
Description
Use the qos wred weighting-constant command to set exponential used to calculate the average length of WRED queues. Use the undo qos wred weighting-constant command to restore the default value. The WRED parameters can be set only after the command random-detect is used to apply WRED at the interface. Related command: qos wred, display qos wred interface.
Example
# Set the exponential used to calculate average queue length to 6 at Ethernet0/0/0 interface, provided that WRED has already been applied on this interface.
[3Com-Ethernet0/0/0] qos wred weighting-constant 6
Chapter 4 Frame Relay QoS Commands

4.1.1 apply policy outbound
Syntax
apply policy outbound policy-name undo apply policy outbound
View
Frame relay class view
Parameter
policy-name: Name of the applied policy. It is a string with 1 to 31 characters.
Description
Use the apply policy outbound command to set the frame relay virtual circuit queuing to CBQ (Class-Based Queuing). Use the undo apply policy outbound command to restore the frame relay virtual circuit queuing to FIFO. By default, FIFO queuing is adopted.
Example
# Define a classifier named class 1.
[3Com] traffic classifier class1 [3Com-classifier-class1]
# Define a traffic behavior named behavior 1.

[3Com] traffic behavior behavior1 [3Com-behavior-behavior1] queue af bandwidth 56
# Define a policy named policy 1 and associate class 1 with behavior.

[3Com] qos policy policy1 [3Com-qospolicy-policy1] classifier class1 behavior behavior1
# Apply a defined policy to the frame relay class named test 1 and set the queuing of test 1 to CBQ.
[3Com] fr class test1
[3Com-fr-class-test1] apply policy policy1 outbound
4.1.2 cbs
Syntax
cbs [ inbound | outbound ] committed-burst-size undo cbs [ inbound | outbound ]
View
Parameter
inbound: Sets the committed burst size of the inbound packet, valid only when FRTP (frame relay traffic policing) is enabled on the interface. outbound: Sets the committed burst size of the outbound packet, valid only when FRTS (frame relay traffic shaping) is enabled on the interface. committed-burst-size: Committed burst size, in bits, ranging from 300 to 16000000. It defaults to 56000 bits.
Description
Use the cbs command to set the committed burst size of a frame relay virtual circuit. Use the undo cbs command to restore the default value. If the packet direction is not specified in configuration, the parameter will be set in both inbound and outbound directions. The committed burst size is the packet traffic that is committed to send on a frame relay network within an interval of Tc. When there is no congestion on the network, the frame relay network ensures this part of traffic can be sent successfully. Related command: ebs, cir allow, and cir.
Example
# Set the committed burst size of the frame relay class named test1 as 64000 bits.
[3Com] fr class test1 [3Com-fr-class-test1] cbs 64000
4.1.3 cir
Syntax
cir committed-information-rate undo cir
View
Parameter
committed-information-rate: The minimum committed information rate (CIR), in bps, ranging from 1000 to 45000000. It defaults to 56000 bps.
Description
Use the cir command to set the CIR of a frame relay virtual circuit. Use the undo cir command to restore the default value. The CIR is the minimum sending rate that can be provided by virtual circuit. It ensures the user can still send data at this rate upon network congestion. Upon network congestion, DCE will send a packet with a BECN flag bit of 1 to DTE. After DTE receives this packet, it gradually reduces the sending rate of virtual circuit from the allowed CIR (CIR ALLOW) to CIR. If DTE does not receive the packet with the BECN flag bit of 1 within a certain period of time, it will restore the sending rate of virtual circuit as CIR ALLOW.
Note: The CIR must not exceed CIR ALLOW.
Related command: cbs, ebs, and cir allow.
Example
# Set the CIR of the frame relay class named test1 as 32000 bps.
[3Com] fr class test1 [3Com-fr-class-test1] cir 32000
4.1.4 cir allow

Syntax
cir allow [ inbound | outbound ] committed-information-rate undo cir allow [ inbound | outbound ]
View
Parameter
inbound: Sets the CIR ALLOW of an inbound packet, valid only when FRTP is enabled on the interface. outbound: Sets the CIR ALLOW of an outbound packet, valid only when FRTS is enabled on the interface. committed-information-rate: CIR ALLOW, in bps, ranging from 1 to 45000000. It defaults to 56000 bps.
Description
Use the cir allow command to set the CIR ALLOW of frame relay virtual circuit. Use the undo cir allow command to restore the default value. CIR ALLOW is the sending rate that can be normally provided by a frame relay network. When there is no congestion on the network, it ensures the user can send data at this rate. If packet direction is not specified upon configuration the parameter will be set in both inbound and outbound directions. Related command: cbs, ebs, and cir.
Example
# Set the CIR ALLOW of the frame relay class that is named test1 as 64000bps.
[3Com] fr class test1 [3Com-fr-class-test1] cir allow 64000
4.1.5 congestion-threshold
Syntax
congestion-threshold { de | ecn } queue-percentage undo congestion-threshold { de | ecn }
View
Parameter
de: Discards the frame relay packet whose DE flag bit is 1 upon congestion. ecn: Processes the flag bits, BECN and FECN, of frame relay packet upon congestion. queue-percentage: Network congestion threshold, the utility ratio of virtual circuit queue, namely the percentage of the current queue length of virtual circuit to the total queue length, ranging from 1 to 100. By default, it is 100.
Description
Use the congestion-threshold command to enable congestion management function of frame relay virtual circuit. Use the undo congestion-threshold command to disable this function. When the percentage of current queue length to the total queue length of virtual circuit exceeds the set congestion threshold, it will be regarded that congestion occurs on the virtual circuit and congestion management will be performed on packets on virtual circuit. Related command: fr congestion-threshold.
Example
# Set to discard the frame relay packet whose DE flag bit is 1 concerning the frame relay class named test1, when the current queue length of virtual circuit exceeds 80% of the total length.
[3Com] fr class test1 [3Com-fr-class-test1] congestion-threshold de 80
4.1.6 cq
Syntax
cq cql cql-index undo cq
View
Parameter
cql cql-index: Number of custom queue, from 1 to 16 available.
Description
Use the cq command to set the queue type of the frame relay virtual circuit to be custom queue. Use the undo cq to restore the type to FIFO. By default, the queue type of the virtual circuit is FIFO. The value will be refreshed if this command is repeatedly applied to one same frame relay class. The related commands are wfq, pq, and fr pvc-pq.
Example
# Apply the custom queue 10 to the frame relay class test1:
[3Com] fr class test1 [3Com-fr-class-test1] cq cql 10
4.1.7 display fr class-map

Syntax
display fr class-map { fr-class class-name | interface interface-type interface-number }
View
Any view
Parameter
class-name: 30 characters long. interface-type: Specifies an interface together with interface number. interface-number: Specifies an interface together with interface-type.
Description
Use the display fr class-map command to view information on frame relay class to interface map, including DLCIs of interfaces, subinterfaces on the interfaces and their DLCIs. When configuring this command you can specify a frame relay class name or main interface, but not a subinterface.
Example
# Display information on the map of frame relay class to the interface serial 6/0/0.
[3Com]display fr class-map interface serial 6/0/0 Serial6/0/0 fr-class ts fr dlci 100 Serial6/0/0
fr-class ts Serial6/0/0.1 fr-class ts fr dlci 200 fr-class ts Serial6/0/0.1
# Display information on the map of frame relay class ts to interfaces.

[3Com]display fr class-map fr-class ts Serial6/0/0 fr-class ts fr dlci 100 fr-class ts Serial6/0/0.1 fr-class ts fr dlci 200 fr-class ts Serial6/0/1 fr-class ts Serial6/0/0.1 Serial6/0/0
4.1.8 display fr del

Syntax
display fr del [ list-number ]
View
Any view
Parameter
list-number: DE rule list number, in the range 1 to 10.
Description
Use the display fr del command to view the contents in the specified or all DE rule lists. After a DE rule list is applied on a frame relay VC, the VC sets the DE bit to 1 if the received packets match the list. These packets are always discarded first when congestion occurs.
You may add up to 100 rules to a DE rule list using the fr del inbound-interface and fr del protocol commands. You may create up to 10 DE rule lists. Related command: fr del inbound-interface, fr del protocol.
Example
# Display the contents in DE rule list 1.
[Router] display fr del 1 Current DEL Configuration: List Params
inbound-interface Serial0/0/0 protocol ip tcp bgp protocol ip acl 2001 protocol ip fragment 0 protocol ip greater-than 2000 4 8 9 protocol ip less-than 5000 protocol ip tcp echo protocol ip udp biff
Table 4-1 Description on the fields of the display fr del command Field inbound-interface Protocol Description Specifies that the DE rule list is interface-based. Specifies that the DE rule list is protocol-based. At present, only IP is available.
4.1.9 display fr fragment-info

Syntax
display fr fragment-info [ interface interface-type interface-number ] [ dlci-number ]
View
Any view
Parameter
interface-type: Interface type. interface-number: Interface number, in 3-dimension form: slot number/card
number/interface number.
dlci-number: DLCI number, ranging from 16 to 1007. The detailed information will be displayed when specifying the parameter.
Description
Use the display fr fragment-info command to view the frame relay fragment information. Related command: fragment.
Example
# Display frame relay fragment information of all the interfaces.
<3Com> display fr fragment-info interface serial 0/1/1:10: dlci 100 type FRF12(ETE) size 80 in/out/ drop 0/0/0
# Display frame relay fragment information of a certain interfaces. <3Com> display fr fragment-info serial0/1/1:10 100 Type Size : : FRF11
80
Pre-fragment: out pkts : 0 Fragmented: in pkts : 0 in bytes: 0 Assembled : in pkts : 0 Dropped : out pkts :0 out bytes: 0 in bytes :0 out pkts : 0 out bytes: 0 out bytes :0
in pkts : 0 in bytes: 0
Out-of-sequence pkts: 0
Table 4-2 Description on the fields of the display fr fragment-info command Field interface dlci type size in/out/drop Interface DLCI number Fragment type Fragment size Number of received fragment packets/number of sent fragment packets/number of discarded fragment packets Description
Pre-fragment: Fragmented : Assembled : Out-of-sequen ce fragment :
Number of packets and bytes to send before fragmented Number of fragments received and sent counted in packet and byte. Number of assembled fragments Number of out-of-sequence fragments
4.1.10 display fr switch-table

Syntax
display fr switch-table { all | name switch-name }
View
Any view
Parameter
all: All the VC information switch-name: VC information of a certain name.
Description
Use the display mfr command to view configuration and status information of the frame relay route to confirm the correctness of the configuration. Related command: fr switch.
Example
# Display configuration and state information of all frame relay bundles and frame relay # Display all the characters of the frame relay route.
[3Com] display fr switch-table all Switch-Name test Interface MFR4/0/100 DLCI 100 Interface MFR4/0/101 DLCI 101 State UP
The fields are described in the following table: Table 4-3 Description on the fields of the display fr switch-table all command Field Switch-Name Description the name of PVC used for switching
Field Interface DLCI State
Description The first denotes local interface and the second denotes remote interface local and remote VC identifier Linkage status
4.1.11 display qos policy interface

Syntax
display qos policy interface [ interface-type interface-number [ dlci dlci-number [ outbound ] | inbound | outbound ] ]
View
Any view
Parameter
interface-type: Interface type. interface-number: Interface number. dlci dlci-number: Information about the specified DLCI applying CBQ. inbound: Information about inbound interface applying CBQ. outbound: Information about outbound interface applying CBQ.
Description
Use the display qos policy interface command to view information about CBQ application on the interface.
Example
# Display the information about CBQ application of the virtual circuit with DLCI of 10 on Serial1/0/0.
<3Com> display qos policy interface serial 1/0/0 dlci 100 MFR4/0/0, DLCI 25 Direction: Outbound Policy: xujin
Class: default-class Matched : 1/133 (Packets/Bytes)

Rule(s) : if-match any Behavior: Default Queue: Flow Based Weighted Fair Queuing Max number of hashed queues: 256 Matched : 0/0 (Packets/Bytes)
Enqueued : 0/0 (Packets/Bytes) Discarded: 0/0 (Packets/Bytes) Discard Method: Tail
Class: xujin Matched : 0/0 (Packets/Bytes) Operator: Logic AND Rule(s): Behavior: Assured Forwarding: Bandwidth 10 (Kbps) Matched : 0/0 (Packets/Bytes) if-match acl 2001
4.1.12 ebs
Syntax
ebs [ inbound | outbound ] excess-burst-size undo ebs [ inbound | outbound ]
View
Parameter
inbound: Sets the EBS in inbound direction, valid only when FRTP is enabled on the interface. outbound: Sets EBS in outbound direction, valid only when FRTS is enabled on the interface. excess-burst-size: EBS in bits, ranging from 0 to 16000000. It defaults to 0 bits.
Description
Use the ebs command to set EBS of frame relay virtual circuit. Use the undo ebs command to restore the default value. EBS is the maximum of the part that packet traffic exceeds the committed burst size (CBS) within an interval of Tc. When congestion occurs on the network, this part of excess traffic will be discarded first. When this command is used, the set EBS value will be valid in both inbound and outbound directions if the parameters inbound and outbound are not specified. Related command: cbs, cir allow, cir.
Example
# Set the EBS of the frame relay class named test1 to 32000 bits.
[3Com] fr class test1 [3Com-fr-class-test1] ebs 32000
4.1.13 fifo queue-length

Syntax
fifo queue-length queue-length undo fifo queue-length
View
Parameter
queue-length: FIFO queue length, namely, the maximum number of packets that can be held by the queue, ranging from 1 to 1024. By default, it is 40.
Description
Use the fifo queue-length command to set the FIFO queue length of frame relay virtual circuit. Use the undo fifo queue-length command to restore the default value. When the router serves as DCE for switching, the FIFO queue length of DLCI can be set if FRTS has been applied to DLCI. Related command: fr class.
Example
# Set the FIFO queue of the frame relay class named test1 to hold 80 packets at most.
[3Com] fr class test1 [3Com-fr-class-test1] fifo queue-length 80 [3Com] fr del 1 protocol ip
4.1.14 fr class
Syntax
fr class class-name undo fr class class-name
View
System view
Parameter
class-name: Class name, with 30 characters at most.
Description
Use the fr class command to create a frame relay class and enter frame relay class view. Use the undo fr class command to delete a specified frame relay class. By default, no frame relay class is created. Only after associating a frame relay class with an interface or virtual circuit and enabling the frame relay QoS function on the corresponding interface, can the set frame relay class parameter take effect. When a frame relay class is deleted, the association between all interfaces or DLCIs and the frame relay class will be released. Related command: fr-class.
Example
# Create a frame relay class named test1.
[3Com] fr class test1 [3Com-fr-class-test1]
4.1.15 fr congestion-threshold
Syntax
fr congestion-threshold { de | ecn } queue-percentage undo fr congestion-threshold { de | ecn }
View
Parameter
de: Discards the frame relay packet whose DE flag bit is 1 when congestion occurs. ecn: Processes the BECN and FECN flag bits of frame relay packets when congestion occurs. queue-percentage: Network congestion threshold, the occupation ratio of the interface queue, equal to the percentage of current queue length to the total queue length of the interface, ranging from 1 to 100. By default, it is 100.
Description
Use the fr congestion-threshold command to enable congestion management function of a frame relay interface. Use the undo fr congestion-threshold command to disable this function. By default, the congestion management function of a frame relay interface is disabled. This command is similar to the congestion-threshold command. The difference is that this command is applied to frame relay interfaces, while the congestion-threshold command is applied to frame relay virtual circuit.
Note: The command can only be used for frame relay DCE interfaces or NNI interfaces.
Related command: congestion-threshold.
Example
# Set to process the flag bit of a frame relay packet when the interface queue length exceeds 80% of the total length.
[3Com-Serial4/1/2] fr congestion-threshold de 80
4.1.16 fr de del
Syntax
fr de del list-number dlci dlci-number undo fr de del list-number dlci dlci-number
View
Parameter
list-number: DE rule list number, ranging from 1 to 10. dlci-number: Frame relay virtual circuit number, ranging from 16 to 1007.
Description
Use the fr de del command to apply a DE rule list to the specified frame relay virtual circuit. Use the undo fr de del command to delete a DE rule list from virtual circuit. By default, no DE rule list is applied to frame relay virtual circuit. After a DE rule list is applied to frame relay virtual circuit, those packets that match the rule list will have their DE flag set to 1. Related command: fr del inbound-interface and fr del protocol.
Example
# Apply DE rule list 3 to the DLCI 100 of the interface Serial 4/1/2.
[3Com-Serial4/1/2] fr de del 3 dlci 100
4.1.17 fr del inbound-interface

Syntax
fr del list-number inbound-interface interface-type interface-number undo fr del list-number inbound-interface interface-type interface-number
View
System view
Parameter
list-number: Number of DE rule list, ranging from 1 to 10.
interface-type: Interface type. interface-number: Interface number, in 3-dimension form (slot number/card
number/interface number).
Description
Use the fr del inbound-interface command to configure an interface-based DE rule list. For the packet received from the specified interface, if it is forwarded from the router as a frame relay packet, and its DE flag bit is set to 1 before being forwarded. Use the undo fr del inbound-interface command to delete the specified DE rule from a DE rule list. By default, no DE rule list is created. New rules can be added to a DE rule list by using this command repeatedly. At most, 100 rules can be configured in a DE rule list. To delete a DE rule list, you should first delete all DE rules in it. Related command: fr de del and fr del protocol.
Example
# Add a rule to DE rule list 1. For the packet received from the interface Serial 4/1/2, if it is needed to be forwarded by encapsulating frame relay protocol, flag the DE flag bit of the packet as 1 before forwarding.
[3Com] fr del 1 inbound-interface serial 4/1/2
4.1.18 fr del protocol ip

Syntax
fr del list-number protocol ip [ fragments | acl acl-number | less-than bytes | greater-than bytes | tcp ports | udp ports ] undo fr del list-number protocol ip [ fragments | acl acl-number | less-than bytes | greater-than bytes | tcp ports | udp ports ]
View
System view
Parameter
list-number: DE rule list number, ranging from 1 to 10. protocol ip: IP. fragments: All fragmented IP packets.
acl acl-number: IP packets meeting ACL matching requirement. acl-number ranges from 2000 to 3999. less-than bytes: IP packets whose length is less than bytes. bytes ranges from 0 to 65535. greater-than bytes: IP packets whose length is greater than bytes. bytes ranges from 0 to 65535. tcp ports: IP packets whose source or destination TCP port number are ports. udp ports: IP packets whose source or destination UDP port number are ports. If optional parameters are not used, it represents all IP packets.
Description
Use the fr del protocol ip command to configure an IP-based DE rule list. The DE flag bit of the frame relay packet encapsulated with an IP packet matching the specified rule will be flagged as 1. Use the undo fr del protocol ip command to delete the specified DE rule from a DE rule list. By default, no DE rule list is created. New rules can be added to a DE rule list by using this command repeatedly. At most, 100 rules can be configured in a DE rule list. The undo form of this command can once delete one DE rule only. To delete a DE rule list, you must delete all DE rules in it. Related command: fr de del and fr del inbound-interface.
Example
# Add a rule to DE rule list 1. For all frame relay packets encapsulated with IP packets, flag their DE flag bits as 1.
[3Com] fr del 1 protocol ip
4.1.19 fr pvc-pq
Syntax
fr pvc-pq [ top-limit middle-limit normal-limit bottom-limit ] undo fr pvc-pq
View
Parameter
top-limit: Length of top priority queue, ranging from 0 to 1024. By default, it is 20. middle-limit: Length of middle priority queue, ranging from 0 to 1024. By default, it is 40. normal-limit: Length of normal priority queue, ranging from 0 to 1024. By default, it is 60. bottom-limit: Length of bottom priority queue, ranging from 0 to 1024. By default, it is 80.
Description
Use the fr pvc-pq command to set the queue type of a frame relay interface as PVC PQ (PVC Priority Queuing) and set the queue length, i.e. the maximum number of packets that can be held by a queue, for each queue. Use the undo fr pvc-pq command to restore the queue type of the interface into FIFO. By default, the queuing type of a frame relay interface is FIFO. After FRTS is enabled on an interface, the queuing type of the interface can only be FIFO or PVC PQ. PVC PQ is a new queuing mechanism of FRTS. Similar to PQ, it also has four queue types: top, middle, normal and bottom, in descending order. Configure the queue of PVC PQ that DLCI enters in frame relay class. When congestion occurs on an interface, different DLCIs enter different PVC PQs. When sending data, according to queue priority, data in higher priority queues will be sent before lower priority queues. Related command: pvc-pq.
Example
# Set the queuing type of the interface Serial 2/0/0 as PVC PQ.
[3Com-Serial2/0/0] fr pvc-pq
4.1.20 fr traffic-policing
Syntax
fr traffic-policing undo fr traffic-policing
View
Parameter
None
Description
Use the fr traffic-policing command to enable FRTP function. Use the undo fr traffic-policing command to disable FRTP function. FRTP function is applied to the inbound interface of frame relay packets on a router. Furthermore, it is only used at the DCE end of a frame relay network. When configuring traffic policing for an inbound interface, you must first set the DCE as frame relay switching by using the fr switching command. Related command: fr class.
Example
# Enable the traffic policing function on the interface Serial 2/0/0.
[3Com-Serial2/0/0] fr traffic-policing
4.1.21 fr traffic-shaping
Syntax
fr traffic-shaping undo fr traffic-shaping
View
Parameter
None
Description
Use the fr traffic-shaping command to enable FRTS function. Use the undo fr traffic-shaping command to disable FRTS function. By default, FRTS function is disabled. The FRTS function is applied to the outbound interface of a router, generally used at the DTE end of a frame relay network. Related command: fr class, fr-class, and fr dlci.
Example
# Enable FRTS on the serial interface Serial 2/0/0.
[3Com-Serial2/0/0] fr traffic-shaping
4.1.22 fragment
Syntax
fragment [ fragment-size ] undo fragment [ fragment-size ]
View
Parameter
fragment-size: Size of a fragment, in byte, ranging from 16 to 1600. By default, the fragment size is of 45 bytes.
Description
Use the fragment command to enable the fragmentation function on frame relay virtual circuit. Use the undo fragment command to disable this function. By default, the fragmentation function on frame relay virtual circuit is disabled. Related command: fr class.
Example
# Configure fragment size as 128 in the frame relay class named test1.
[3Com] fr class test1 [3Com-fr-class-test1] fragment 128
4.1.23 fr-class
Syntax
fr-class class-name undo fr-class class-name
View
Frame relay DLCI view
Parameter
class-name: Name of a frame relay class, in the form of character string, with a length ranging from 1 to 30.
Description
Use the fr-class command to associate a frame relay class with the current frame relay virtual circuit or frame relay interface. Use the undo fr-class command to remove the association between a frame relay class and the frame relay virtual circuit or frame relay interface. By default, there is no association between a frame relay class and the frame relay virtual circuit or frame relay interface. If the specified frame relay class does not exist, the command will first create a frame relay class before associating the frame relay class with the current virtual circuit or interface. If the specified frame relay class does exist, the command will associate the frame relay class with the current virtual circuit or interface without creating a new frame relay class. The undo command only removes the association between a specified frame relay class and a virtual circuit or an interface rather than deleting the real frame relay class. To delete a frame relay class, use the undo fr class command. After a frame relay class is associated with an interface, all virtual circuits on the interface will inherit the frame relay QoS parameter of this frame relay class. Related command: fr class and fr dlci.
Example
# Associate the frame relay class named test1 with the frame relay virtual circuit whose DLCI is 200.
[3Com] interface serial 4/0/1 [3Com-Serial4/0/1] fr dlci 200 [3Com-fr-dlci-Serial4/0/1-200] fr-class test1
4.1.24 pq
Syntax
pq pql pql-index undo pq
View
Parameter
pql pql-index: Group number of Priority Queuing, ranging from 1 to 16.
Description
Use the pq command to set the queue type of frame relay virtual circuit as Priority Queuing. Use the undo pq command to restore the queue type of virtual circuit to FIFO. By default, the queuing type of frame relay virtual circuit is FIFO. Related command: cq, pvc-pq.
Example
# Apply the group10 of Priority Queuing to the frame relay class named test1.
[3Com] fr class test1 [3Com-fr-class-test1] pq pql 10
4.1.25 pvc-pq
Syntax
pvc-pq { top | middle | normal | bottom } undo pvc-pq
View
Parameter
top: Sets the top PVC PQ , namely, top priority queue, to accept the packets from the VC. middle: Sets the middle PVC PQ , namely, middle priority queue, to accept the packets. normal: Sets the normal PVC PQ , namely, normal priority queue, to accept the packets. bottom: Sets the bottom PVC PQ , namely, normal priority queue, to accept the packets.
Description
Use the pvc-pq command to set the type of the PVC PQ that packets sent by frame relay virtual circuit enter. Use the undo pvc-pq command to restore the default PVC PQ type. By default, the packets sent by frame relay virtual circuit enter into the normal PVC PQ. PVC PQ falls into four groups: top, middle, normal and bottom. PVC PQ is relative to DLCI. After the queue of an interface is set as PVC PQ, packets on each virtual circuit can enter only one type of PVC PQ. Related command: fr pvc-pq.
Example
# Set packets sent by virtual circuit which is associated with the frame relay class named test1 to enter top PVC PQ.
[3Com-fr-class-one] pvc-pq top
4.1.26 rtpq
Syntax
rtpq start-port min-dest-port end-port max-dest-port bandwidth bandwidth undo rtpq
Parameter
min-dest-port: Lower limit of a destination UDP port, ranging from 2000 to 65535. max-dest-port: Upper limit of a destination UDP port, ranging from 2000 to 65535. bandwidth bandwidth: Bandwidth of a RTP queue, in kbps, ranging from 0 to 2000.
View
Description
Use the rtpq command to configure to apply Realtime Transport Protocol (RTP) Priority Queuing. Use the undo rtpq command to remove the application. The application of a frame relay class configured with RTPQ to a PVC results in the creation of a strict priority queue on the PVC. Packets in the port range specified by RTPQ of the destination UDP port will enter RTPQ. When congestion occurs in the virtual circuit, the packets in the queue will be sent with preference without exceeding the configured bandwidth. When congestion does not occur in the virtual circuit, the RTP packets in the specified port range can occupy the available bandwidth on the virtual circuit. Generally, the UDP port range used by VoIP can be configured as from 16384 to 32767.
Example
# Configure RTP priority queue on the frame relay class named test1 with a bandwidth of 20kbps.
[3Com] fr class test1 [3Com-fr-class-test1] rtpq start-port 16383 end-port 16384 bandwidth 20
4.1.27 traffic-shaping adaptation

Syntax
traffic-shaping adaptation { becn percentage | interface-congestion number } undo traffic-shaping adaptation { becn | interface-congestion }
View
Parameter
becn: Adjusts the packets with the BECN flag. percentage: Adjustment percentage, ranging from 1 to 30 percent. The default value is 25 percent. interface-congestion: Traffic shaping according to the number of the packets in the outbound queue. number: Number of packets in the queue, ranging from 1 to 40.
Description
Use the traffic-shaping adaptation command to enable the adaptive traffic shaping function of frame relay. Use the undo traffic-shaping adaptation command to disable this function. By default, traffic-shaping adaptation is enabled, and the ratio of each adaption is set to 25. Related commands are fr traffic-shaping, cir allow, and cir.
Example
# Enable the frame relay traffic shaping function, by adjusting the packets with the BECN flag.
[3Com] fr class test1 [3Com-fr-class-test1] traffic-shaping adaptation becn 20
4.1.28 wfq
Syntax
wfq [ congestive-discard-threshold [ dynamic-queues ] ] undo wfq
View
Parameter
congestive-discard-threshold: The maximum number of packets allowed in the queue. Packets exceeding this limitation will be discarded. The permitted value ranges from 1 to 1024, with a default of 64. dynamic-queues: Total number of queues, the value can be one of 16, 32, 64, 128, 256, 512, 1024, 2048 and 4096, with the default of 256.
Description
Use the wfq command to set the queue type of the VC to be WFQ. Use the undo wfq command to restore the queue type to FIFO. Related command: cq, pq, and fr pvc-pq.
Example
# Apply WFQ to the frame relay class test1.
[3Com] fr class test1 [3Com-fr-class-test1] wfq 128 512
Chapter 5 MPLS QoS Configuration Commands

5.1 MPLS QoS Configuration Commands
5.1.1 if-match mpls-exp
Syntax
if-match [ not ] mpls-exp { mpls-experimental-value } undo if-match [ not ] mpls-exp
View
Class view
Parameter
mpls-experimental-value: EXP value, in the range of 0 to 7.
Description
Use the if-match mpls-exp command to configure the matching rule for EXP domain of MPLS. Use the undo if-match mpls-exp command to delete the matching rule. Multiple exp-values can be specified in the command and the maximum number is 8. If multiple exp-values of the same value are specified, the system only takes one. Relation between different values is OR. If this command is frequently configured under one class, the last configuration will overwrite the previous ones. After this command is configured, the exp-value will be sorted automatically in ascending order. Related command: traffic classifier.
Example
# Define the class to match the packet whose exp is 3 or 4.
[3Com-classifier-database] if-match mpls-exp 3 4
5.1.2 qos cql protocol mpls exp

Syntax
qos cql cql-index protocol mpls exp mpls-experimental-number queue queue-number
undo qos cql cql-index protocol mpls exp mpls-experimental-number
View
System view
Parameter
cql-index: Group number of precedence list, in the range of 1 to 16. mpls-experimental-number: EXP domain of MPLS packet, in the range of 0 to 7. queue-number: Queue number, in the range of 0 to 16.
Description
Use the qos cql protocol mpls exp command to configure classification rule based on the MPLS protocol. Use the undo qos cql protocol mpls exp command to delete the corresponding classification rule. The system matches packets in the sequence that rules are configured. When the packet is found to match a rule, the entire searching process comes to an end. For the same group-number, this command can be used repeatedly to establish multiple types of classification rules for IP packets. Related command: qos cq.
Example
# Configure classification rule based on the MPLS protocol and sets EXP value of MPLS to 1.
[3Com] qos cql 10 protocol mpls exp 1
5.1.3 qos pql protocol mpls exp

Syntax
qos pql pql-index protocol mpls exp mpls-experimental-value queue { top | middle | normal | bottom } undo qos pql pql-index protocol mpls exp mpls-experimental-value
View
System view
Parameter
pql-index: Group number of priority list, in the range of 1 to 16. mpls-experimental-value: EXP domain of MPLS packet, in the range of 0 to 7. queue top | middle | normal | bottom: Top/middle/normal/bottom priority queue.
Description
Use the qos pql protocol mpls exp command to establish the classification rule based on MPLS protocol. Use the undo qos pql protocol mpls exp command to delete the corresponding classification rules. The system matches packets in the sequence that rules are configured. When the packet is found to match a rule, the entire searching process comes to an end. For the same group-number, this command can be used repeatedly to establish several types of classification rules for IP packets. Related command: qos pql protocol.
Example
# Establish the classification rule based on MPLS protocol and sets the EXP value of MPLS to 5.
[3Com] qos pql 10 protocol mpls exp top 5
5.1.4 remark mpls-exp

Syntax
remark mpls-exp mpls-experimental-value undo remark mpls-exp
View
Parameter
mpls-experimental-value: Preset EXP value of MPLS, in the range of 0 to 7.
Description
Use the remark mpls-exp command to configure MPLS EXP value to identify matched packets.
Use the undo remark mpls-exp command to delete the configuration. Related command: traffic classifier, qos policy, classifier behavior.
Example
# Set EXP value of MPLS to 0.
[3Com] qos policy 3Com [3Com] traffic behavior database [3Com-behavior-database] remark mpls-exp 0
Command Reference Guide Reliability v2.30 Router Software
Table of Contents
Table of Contents
Chapter 1 Backup Center Configuration Commands ................................................................ 1-1 1.1 Backup Center Configuration Commands ......................................................................... 1-1 1.1.1 debugging standby event ........................................................................................ 1-1 1.1.2 display standby flow ................................................................................................ 1-1 1.1.3 display standby state............................................................................................... 1-3 1.1.4 standby bandwidth .................................................................................................. 1-4 1.1.5 standby interface ..................................................................................................... 1-5 1.1.6 standby threshold.................................................................................................... 1-6 1.1.7 standby timer delay ................................................................................................. 1-7 1.1.8 standby timer flow-check......................................................................................... 1-8 Chapter 2 VRRP Configuration Commands ............................................................................... 2-1 2.1 VRRP Configuration Commands ....................................................................................... 2-1 2.1.1 debugging vrrp ........................................................................................................ 2-1 2.1.2 display vrrp .............................................................................................................. 2-1 2.1.3 vrrp authentication-mode ........................................................................................ 2-3 2.1.4 vrrp ping-enable ...................................................................................................... 2-4 2.1.5 vrrp vrid preempt-mode........................................................................................... 2-4 2.1.6 vrrp vrid priority........................................................................................................ 2-5 2.1.7 vrrp vrid timer advertise........................................................................................... 2-6 2.1.8 vrrp vrid track........................................................................................................... 2-6 2.1.9 vrrp vrid virtual-ip..................................................................................................... 2-7
3Com Corporation i
Chapter 1 Backup Center Configuration Commands

1.1 Backup Center Configuration Commands
1.1.1 debugging standby event
Syntax
debugging standby event undo debugging standby event
View
User view
Parameter
event: Enables event debugging.
Description
Use the debugging standby event command to enable debugging of the backup center. Use the undo debugging standby event command to disable debugging of the backup center.
Example
# Enable debugging of the backup center.
<3Com> debugging standby event
1.1.2 display standby flow

Syntax
display standby flow
View
Any view
Description
Use the display standby flow command to view statistics about traffic on the main interfaces participating in backup load sharing.
Example
# Set Serial 1/0/0, Serial 0/0/0 and Logic-channel0 to back up interface Serial 3/0/0 and configure backup load sharing on Serial 3/0/0.
[3Com] interface serial3/0/0 [3Com-Serial3/0/0] standby interface serial1/0/0 10 [3Com-Serial3/0/0] standby interface serial0/0/0 30 [3Com-Serial3/0/0] standby interface logic-channel0 [3Com-Serial3/0/0] standby threshold 80 50 [3Com-Serial3/0/0] standby timer flow-check 100 [3Com-Serial3/0/0] standby bandwidth 9
# Display statistics about the traffic on the main interfaces participating in backup load sharing.
[3Com-Serial3/0/0] display standby flow Interfacename :Serial3/0/0 Flow-interval(s) : 100 LastInOctets : 868168 LastOutOctets : 1818667 InFlow(Octets) : 50070 OutFlow(Octets) : 100088 BandWidth(b/s) :9000 UsedBandWidth(b/s) : 8000
The following table describes the fields of the command. Table 1-1 Description on the fields of the display standby flow command Field Flow-interval(s) LastInOctets LastOutOctets InFlow(Octets) OutFlow(Octets) BandWidth(b/s) UsedBandWidth(b/s) Description Intervals for checking traffic on the main interface. The sum of the octets received on the main interface until the last check. The sum of the octets sent on the main interface until the last check. The sum of the octets received on the main interface during the last interval. The sum of the octets sent on the main interface during the last interval. Bandwidth of the main interface. Actual bandwidth of the interface during the last interval.
1.1.3 display standby state

Syntax
display standby state
View
Any view
Description
Use the display standby state command to view information about the main and standby interfaces. The following table describes the information that the command provides and the possible values. Table 1-2 Information about the main and standby interfaces Item Interface state Standby state Main interface UP, DOWN MUP, MUPDELAY, MDOWN, MDOWNDELAY, MDESERT Standby interface UP, DOWN, STANDBY UP, UPDELAY, DOWN, DOWNDELAY, STANDBY, DESERT
M---MAIN: the interface is a main interface. S---Standby: the interface is a standby interface. V---MOVED: the interface or its main interface is removed, or all standby interfaces of the interface are removed. Standby flag U---USED: the interface is in use as a main or standby interface. D---LOAD: the interface participates in backup load sharing as a main interface. P---PULLED: the interface card where this interface is located is not in place. G---LOGICCHANNEL: the interface is a logical channel interface. Pri Load state Priority of the standby interface WAKE, TO-HYPNOTIZE, TO-WAKE, STABLE
Example
# Set Serial 1/0/0, Serial 0/0/0 and Logic-channel 0 to back up Serial 3/0/0, and configure backup load sharing on Serial 3/0/0.
[3Com] interface Serial3/0/0 [3Com-Serial3/0/0] standby interface serial1/0/0 10 [3Com-Serial3/0/0] standby interface serial0/0/0 30 [3Com-Serial3/0/0] standby interface logic-channel0 [3Com-Serial3/0/0] standby threshold 80 50
# Display information about the main and standby interfaces.

[3Com-Serial3/0/0] display standby state Interface Serial2/1 Serial2/3 Interfacestate Standbystate Standbyflag Pri Loadstate DOWN DOWN MDOWN DOWN MU BU 0
Virtual-Ethernet1 Serial2/0
DOWN DOWN
MDOWN DOWN
MU BU 0
Standby-flag meaning: M---MAIN D---LOAD S---Standby P---PULLED V---MOVED U---USED
G---LOGICCHANNEL
1.1.4 standby bandwidth

Syntax
standby bandwidth number undo standby bandwidth
View
Interface view
Parameter
number: Interface bandwidth in the range 0 to 4000000 kilobits. It defaults to 0.
Description
Use the standby bandwidth command to configure the actual bandwidth that the main interface uses in backup load sharing.
Use the undo standby bandwidth command to restore the default, that is, 0, to disable backup load sharing. When the main interface participates in backup load sharing, the backup center uses the backup bandwidth that you configured preferentially on the main interface. If it is not configured, the backup center automatically obtains the information that the system provides on the physical bandwidth of the main interface. In case the information is not available, the backup center will require you to assign backup bandwidth to the main interface. Before you can use this command, you must use the standby interface command to specify physical interfaces or logical channels to back up the interface.
Example
# Configure interface Serial 0/0/0 to use interface Serial 1/0/0 for back up, and assign it bandwidth for backup load sharing.
[3Com] interface serial0/0/0 [3Com-Serial0/0/0] standby interface serial1/0/0 50 [3Com-Serial0/0/0] standby bandwidth 10000 [3Com-Serial0/0/0] standby threshold 80 50
1.1.5 standby interface

Syntax
standby interface type number [ priority ] undo standby interface type number
View
Interface view
Parameter
type: Interface type. number: Interface number. priority: Priority of the standby interface, in the range 0 to 255, and by default to 0. The greater the value is, the higher the priority is.
Description
Use the standby interface command to specify a physical interface to back up the interface.
Use the undo standby interface command to remove the specified standby interface. By default, no standby interface is specified. You can configure multiple standby interfaces for a main interface. The order in which they are used depends on the assigned priority. The standby interface with higher priority is used first.
Example
# Specify interface Serial 1/0/0 to back up interface Serial 0/0/0, and assign it the priority of 50.
[3Com-Serial0/0/0] standby interface serial1/0/0 50
1.1.6 standby threshold

Syntax
standby threshold enable-threshold disable-threshold undo standby threshold
View
Interface view
Parameter
enable-threshold: Percentage of the available bandwidth that the traffic load must exceed to bring up a standby interface or logical channel. It is in the range 1 to 99. disable-threshold: Percentage of the available bandwidth that the traffic load must be less than to close a standby interface or logical channel. It is in the range 1 to 99.
Description
Use the standby threshold command to configure backup load sharing on an interface or logical channel. Use the undo standby threshold command to disable backup load sharing on the interface or logical channel. By default, backup load sharing is disabled. This command applies to the main interface in the backup center. When the traffic on all the active interfaces reaches the enable-threshold, the backup center enables the standby interface with the highest priority. When the total traffic on all active interfaces decreases below the disable-threshold, the backup center disables the standby interface with the lowest priority.
The enable-threshold argument must not be less than the disable-threshold argument. Executing the undo standby threshold command shuts down all standby interfaces that have been enabled, if there are any. After that, only the main interface works. Related command: standby interface.
Example
# Configure backup load sharing on interface Serial 0/0/0.
[3Com-Serial0/0/0] standby threshold 80 50
1.1.7 standby timer delay

Syntax
standby timer delay enable-delay disable-delay undo standby timer delay
View
Interface view
Parameter
enable-delay: Failover delay, or the delay for the interface to switch its state from main to standby. It is in the range 0 to 65535 seconds. disable-delay: Fallback delay, or the delay for the interface to switch from backup to main. It is in the range 0 to 65535 seconds, and defaults to 0, meaning switching without delay.
Description
Use the standby timer delay command to set failover and fallback delays on the interface, avoiding frequent switchover caused by instability of interface state. Use the undo standby timer delay command to restore the default, or 0, meaning switching without delay. Before you can use this command you must use the standby interface command to specify physical interfaces or logical channels to back up the interface.
Example
# Configure interface Serial 0/0/0 to use interface Serial 1/0/0 for backup, and to experience 10 seconds of delay before failover or fallback.
[3Com-Serial0/0/0] standby interface serial1/0/0 [3Com-Serial0/0/0] standby timer delay 10 10
1.1.8 standby timer flow-check

Syntax
standby timer flow-check interval-time undo standby timer flow-check
View
Interface view
Parameter
interval-time: Flow checking interval, in the range 30 to 600 seconds, and by default 30 seconds.
Description
Use the standby timer flow-check command to configure the interval for checking the traffic size on the main interface. Use the undo standby timer flow-check command to restore the default or 30 seconds. When the main interface participates in backup load sharing, the backup center automatically checks the traffic size on the main interface at intervals configured using this command. Before you can use this command you must use the standby interface command to specify physical interfaces or logical channels to back up the interface.
Example
# Set Serial 1/0/0 to the standby interface of Serial 0/0/0, and configure the backup bandwidth of the main interface on Serial 0/0/0.
[3Com] interface serial 0/0/0 [3Com-Serial0/0/0] standby interface serial10/0/0 50 [3Com-Serial0/0/0] standby bandwidth 10000 [3Com-Serial0/0/0] standby threshold 80 50 [3Com-Serial0/0/0] standby timer flow-check 60
Chapter 2 VRRP Configuration Commands

2.1 VRRP Configuration Commands
2.1.1 debugging vrrp
Syntax
debugging vrrp { packet | state } undo debugging vrrp { packet | state }
View
User view
Parameter
packet: Enables VRRP packet debugging. state: Enables VRRP state debugging.
Description
Use the debugging vrrp command to enable VRRP debugging. Use the undo debugging vrrp command to disable VRRP debugging. By default, VRRP debugging is disabled.
Example
# Enable VRRP packet debugging.
[3Com] debugging vrrp packet
2.1.2 display vrrp

Syntax
display vrrp [ interface interface-name [ virtual-router-ID ] ]
View
Any view
Parameter
interface-name: Specifies an interface by its name. The type of the interface must be Ethernet. virtual-router-ID: Standby group number.
Description
Use the display vrrp command to view the current configuration and state information about VRRP. If the interface name and standby group number are not specified, the state information about all the standby groups on the router is displayed. If the interface name is specified, the state information about all the standby groups on the interface is displayed. If both arguments are specified, the status information about the specified standby group is displayed.
Example
# Display information about all standby groups on the router.
<3Com> display vrrp Virtual Ip Ping : Disable Ethernet1/0/0 | Virtual Router 1 state : Initialize Virtual IP : 22.2.2.2 Config Priority : 100 Run Priority : 100 Preempt : YES Timer : 1 Auth Type : NONE Delay Time : 0
GigabitEthernet0/1/0 | Virtual Router 1 state : Initialize Virtual IP : 1.1.11.1 Config Priority : 100 Run Priority : 100 Preempt : YES Timer : 1 Auth Type : NONE Delay Time : 0
2.1.3 vrrp authentication-mode

Syntax
vrrp authentication-mode { md5 key | simple key } undo vrrp authentication-mode
View
Interface view
Parameter
simple: Simple text authentication. md5: Authentication header (AH) authentication using the MD5 algorithm. key: Authentication key. When simple authentication applies, the authentication key is in clear text with a length of 1 to 8 characters. When md5 authentication applies, the authentication key is in MD5 ciphertext and the length of the key depends on its input format. If the key is input in clear text, its length is 1 to 8 characters, such as 1234567; if the key is input in ciphertext, its length must be 24 characters, such as _(TT8F]Y\5SQ=^Q`MAF4<1!!.
Description
Use the vrrp authentication-mode command to configure authentication mode and authentication key for the VRRP standby groups on the interface. Use the undo vrrp authentication-mode command to disable authentication in the VRRP standby groups on the interface. By default, authentication is disabled. With this command, all standby groups on the interface share the same authentication type and authentication key. Note that the members of the same standby group must use the same authentication mode and authentication key. The authentication key is case sensitive.
Example
# Set the authentication mode and authentication key of all VRRP standby groups on interface Ethernet 0/2/0.
[3Com-Ethernet0/2/0] vrrp authentication-mode simple 3Com
2.1.4 vrrp ping-enable

Syntax
vrrp ping-enable undo vrrp ping-enable
View
System view
Parameter
None
Description
Use the vrrp ping-enable command to enable users to ping the virtual IP addresses of standby groups. Use the undo vrrp ping-enable command to disable users from pinging the virtual IP addresses of standby groups. By default, users cannot ping the virtual IP addresses of standby groups. Note that you must configure this command before creating standby groups. Once a standby group is created you cannot use this command, including its undo form.
Example
# Enable users to ping the virtual IP addresses of standby groups.
[3Com] vrrp ping-enable
2.1.5 vrrp vrid preempt-mode

Syntax
vrrp vrid virtual-router-ID preempt-mode [ timer delay delay-value ] undo vrrp vrid virtual-router-ID preempt-mode
View
Interface view
Parameter
virtual-router-ID: Virtual router ID or VRRP standby group number, in the range 1 to 255. delay-value: Delay in the range 0 to 255 seconds. It defaults to 0 seconds.
Description
Use the vrrp vrid preempt-mode command to enable preemption on the router and configure its preemption delay in the specified standby group. Use the undo vrrp vrid preempt-mode command to disable preemption on the router in the specified standby group. The default mode is preemption without delay. To allow a backup router in a standby group to preempt the current master when it has a higher priority, you must enable preemption on it. If immediate preemption is not desired, you can set a preemption delay. The delay automatically changes to 0 seconds when preemption is disabled.
Example
# Enable preemption on the router in standby group 1.
[3Com-Ethernet0/2/0] vrrp vrid 1 preempt-mode
# Set the preemption delay to five seconds.

[3Com-Ethernet0/2/0] vrrp vrid 1 preempt-mode timer delay 5
# Disable preemption on the router in standby group 1.

[3Com-Ethernet0/2/0] undo vrrp vrid 1 preempt-mode
2.1.6 vrrp vrid priority

Syntax
vrrp vrid virtual-router-ID priority priority-value undo vrrp vrid virtual-router-ID priority
View
Interface view
Parameter
virtual-router-ID: VRRP standby group number, in the range 1 to 255. priority-value: Priority value of the router in the specified standby group, in the range 1 to 254. It defaults to 100.
Description
Use the vrrp vrid priority command to configure the priority of the router in the specified standby group.
Use the undo vrrp vrid priority command to restore the default. In VRRP, the role that a router plays in a standby group depends on its priority. A higher priority means that the router is more likely to become the master. Note that priority 0 is reserved for special use and 255 for the IP address owner.
Example
# Set the priority of the router in standby group 1 to 150.
[3Com-Ethernet0/2/0] vrrp vrid 1 priority 150
2.1.7 vrrp vrid timer advertise

Syntax
vrrp vrid virtual-router-ID timer advertise adver-interval undo vrrp vrid virtual-router-ID timer advertise
View
Interface view
Parameter
virtual-router-ID: VRRP standby group number, in the range 1 to 255. adver-interval: Interval at which the master in the specified standby group sends VRRP packets. It is in the range 1 to 255 seconds and defauts to 1 second.
Description
Use the vrrp vrid timer advertise command to configure the Adver_Timer of the specified standby group. Use the undo vrrp vrid timer advertise command to restore the default. The Adver_Timer controls the interval at which the master sends VRRP packets.
Example
# Set the master in standby group 1 to send VRRP packets at intervals of five seconds.
[3Com-Ethernet0/2/0] vrrp vrid 1 timer advertise 5
2.1.8 vrrp vrid track

Syntax
vrrp vrid virtual-router-ID track interface-name [ reduced priority-reduced ]
undo vrrp vrid virtual-router-ID track [ interface-name ]
View
Interface view
Parameter
virtual-router-ID: VRRP standby group number, in the range 1 to 255. interface-name: Interface to be tracked. priority-reduced: Value by which the priority is reduced. It is in the range 1 to 255 and defaults to 10.
Description
Use the vrrp vrid track command to configure the interface to be tracked. Use the undo vrrp vrid track command to disable tracking the specified interface. The interface tracking function expands the backup functionality of VRRP. It provides backup not only when routers fail but also when network interfaces go down. After the monitored interface specified in this command goes down, the priority of the router owning this interface automatically decreased by the value specified by value-reduced, allowing a higher priority router in the standby group to take over as the master. When the router is the IP address owner, however, you cannot configure interface tracking on it.
Example
# Track interface Serial 0/0/0.
[3Com-Ethernet0/2/0] vrrp vrid 1 track serial0/0/0 reduced 50
# Disable the router to track interface Serial 0/0/0.

[3Com-Ethernet0/2/0] undo vrrp vrid 1 track serial0/0/0
2.1.9 vrrp vrid virtual-ip

Syntax
vrrp vrid virtual-router-ID virtual-ip virtual-address undo vrrp vrid virtual-router-ID virtual-ip [ virtual-address ]
View
Interface view
Parameter
virtual-router-ID: VRRP standby group number, in the range 1 to 255. virtual-address: Virtual IP address.
Description
Use the vrrp vrid virtual-ip command to create a standby group the first time that you add a virtual IP address or add a virtual IP address to it after that. Use the undo vrrp vrid virtual-ip virtual-router-ID command to remove a standby group. Use the undo vrrp vrid virtual-router-ID virtual-ip virtual-address command to delete a virtual IP address from the specified standby group. The system removes a standby group after you delete all the virtual IP addresses in it. By default, no standby group exists.
Example
# Create a standby group.
[3Com-Ethernet0/2/0] vrrp vrid 1 virtual-ip 10.10.10.10
# Add a virtual IP address to the existing standby group.

[3Com-Ethernet0/2/0] vrrp vrid 1 virtual-ip 10.10.10.11
# Delete a virtual IP address.

[3Com-Ethernet0/2/0] undo vrrp vrid 1 virtual-ip 10.10.10.10
Command Reference Guide Dial-up v2.30 Router Software
Table of Contents
Table of Contents
Chapter 1 DCC Configuration Commands.................................................................................. 1-1 1.1 DCC Configuration Commands ......................................................................................... 1-1 1.1.1 debugging dialer...................................................................................................... 1-1 1.1.2 dialer bundle............................................................................................................ 1-1 1.1.3 dialer bundle-member ............................................................................................. 1-2 1.1.4 dialer callback-center .............................................................................................. 1-3 1.1.5 dialer call-in ............................................................................................................. 1-4 1.1.6 dialer circular-group ................................................................................................ 1-5 1.1.7 dialer enable-circular............................................................................................... 1-6 1.1.8 dialer isdn-leased .................................................................................................... 1-7 1.1.9 dialer number .......................................................................................................... 1-8 1.1.10 dialer priority.......................................................................................................... 1-9 1.1.11 dialer queue-length ............................................................................................. 1-10 1.1.12 dialer route .......................................................................................................... 1-10 1.1.13 dialer threshold.................................................................................................... 1-12 1.1.14 dialer timer autodial............................................................................................. 1-13 1.1.15 dialer timer compete............................................................................................ 1-14 1.1.16 dialer timer enable............................................................................................... 1-14 1.1.17 dialer timer idle .................................................................................................... 1-15 1.1.18 dialer timer wait-carrier........................................................................................ 1-16 1.1.19 dialer user............................................................................................................ 1-16 1.1.20 dialer-group ......................................................................................................... 1-17 1.1.21 dialer-rule ............................................................................................................ 1-18 1.1.22 display dialer interface ........................................................................................ 1-20 1.1.23 interface dialer..................................................................................................... 1-20 1.1.24 flow-interval ......................................................................................................... 1-21 1.1.25 ppp callback ........................................................................................................ 1-22 1.1.26 ppp callback ntstring ........................................................................................... 1-23 Chapter 2 Dynamic Routing Standby Configuration Commands ............................................ 2-1 2.1.1 standby timer routing-disable .................................................................................. 2-1 2.1.2 standby routing-group ............................................................................................. 2-2 2.1.3 standby routing-rule ................................................................................................ 2-2 Chapter 3 Modem Configuration Commands............................................................................. 3-1 3.1 Modem Configuration Commands ..................................................................................... 3-1
3Com Corporation i
Table of Contents
3.1.1 debugging modem .................................................................................................. 3-1 3.1.2 modem .................................................................................................................... 3-1 3.1.3 modem auto-answer ............................................................................................... 3-2 3.1.4 script trigger connect............................................................................................... 3-3 3.1.5 script trigger dial ...................................................................................................... 3-4 3.1.6 script trigger init ....................................................................................................... 3-4 3.1.7 script trigger login .................................................................................................... 3-5 3.1.8 script trigger logout.................................................................................................. 3-6 3.1.9 script-string.............................................................................................................. 3-7 3.1.10 service modem-callback...................................................................................... 3-10 3.1.11 start-script............................................................................................................ 3-10
3Com Corporation ii
Chapter 1 DCC Configuration Commands

1.1 DCC Configuration Commands
1.1.1 debugging dialer
Syntax
debugging dialer { all | event | packet }
View
System view
Parameter
event: Enables DCC event debugging. packet: Enables DCC packet debugging.
Description
Use the debugging dialer command to enable DCC debugging.
Example
None
1.1.2 dialer bundle

Syntax
dialer bundle number undo dialer bundle
View
Parameter
number: Number of dialer bundle, ranging from 1 to 255.
Description
Use the dialer bundle command to configure a dialer bundle used by a dialer interface.
Use the undo dialer bundle command to disassociate the dialer bundle from the dialer interface. By default, the Resource-Shared DCC is not enabled, and dialer bundle is not specified. This command can be applied only on a dialer interface for configuring the dialer bundle that the interface will use. Furthermore, a dialer interface can only use a dialer bundle. This command can be used to specify a dialer bundle used by a dialer interface, no matter what link-protocol, PPP or Frame Relay, runs on the interface. Related command: dialer bundle-member.
Example
# Configure the interface Dialer1 to use dialer bundle3, in which the interface Serial0 is included.
[3Com-Dialer1] dialer bundle 3 [3Com-Serial0/0/0] dialer bundle-member 3
1.1.3 dialer bundle-member

Syntax
dialer bundle-member number [ priority priority | max-link max-num | min-link min-num] undo dialer bundle-member number
View
Physical interface view
Parameter
number: Dialer bundle number ranging from 1 to 255. priority: Priority of the physical interface in the dialer bundle, ranges from 1 to 255. The physical interface with a higher priority will be used first. This is an optional parameter. By default, priority is 1. max-num: The maximum number of channels that can be used. min-num: The minimum number of channels that can be used.
Description
Use the dialer bundle-member command to configure a physical interface included in a dialer bundle in the Resource-Shared DCC application. Use the undo dialer bundle-member command to remove the physical interface from the dialer bundle.
By default, the physical interface is not assigned to any dialer bundle. This command can only be applied to a physical interface, which can be assigned to multiple dialer bundles.
Note: To enable the B channel of ISDN interface (BRI or PRI) to configure its link layer protocol dynamically, in terms of the Dialer interface it belongs to, the link layer protocol that the interface uses should be specified as PPP.
Related command: dialer bundle.
Example
# Make Bri1/0/0 a member of dialer bundle1 and dialer bundle2, and assigns it a priority of 50.
[3Com] interface bri 1/0/0 [3Com-Bri1/0/0] dialer bundle-member 1 priority 50 [3Com-Bri1/0/0] dialer bundle-member 2 priority 50
1.1.4 dialer callback-center

Syntax
dialer callback-center [ user ] [ dial-number ] undo dialer callback-center
View
Physical or dialer interface view
Parameter
user: Calls back according to the parameter user hostname configured in the dialer route command. dial-number: Calls back according to the parameter telephone-number configured in the local-user callback-number command.
Description
Use the dialer callback-center command to enable the callback server function.
Use the undo dialer callback-center command to disable the callback server function of a router. By default, PPP callback server is not configured. This command must be configured at the server end when PPP is used to implement callback. The parameter user indicates that DCC will call back according to the parameter configured in the dialer route command. The parameter dial-number indicates that DCC will call back the remote end according to the callback-number configured in the local-user command. When both user and dial-number are applied concurrently, the router will first attempt to place a return call according to the first parameter. If the callback attempt fails, it will try the second parameter for callback. Related command: ppp callback, ppp authentication-mode.
Example
# Configure a remote username and set the router to call the user back.
[3Com] local-user 3Comb password simple 3Comb [3Com] interface serial0/0/0 [3Com-Serial0/0/0] dialer route ip 1.1.1.2 user 3Comb 8810052 [3Com-Serial0/0/0] dialer callback-center user
1.1.5 dialer call-in

Syntax
dialer call-in remote-number [ callback ] undo dialer call-in remote-number [ callback ]
View
Parameter
remote-number: Used for matching the remote incoming call number. The character * represents any character. callback: When calling back the server end, the incoming number will match with the dialer call-in command containing this keyword, and originate a callback.
Description
Use the dialer call-in command to enable ISDN callback according to ISDN caller ID. Use the undo dialer call-in command to cancel the configuration. By default, ISDN callback according to ISDN caller ID is not configured. This command must be configured at the server end when ISDN caller ID is applied for callback. In Resource-Shared DCC, because both PPP and frame relay protocols can be encapsulated on dialer interfaces, ISDN interface can encapsulate link layer protocol dynamically according to the corresponding dialer interface. The caller first searches corresponding dialer interface by matching the caller number with the dialer number command. The dialer call-in command is used to preprocess the ISDN call-in number, determining whether the user with this number can be permitted to access. If the PBX switch does not provide the caller number, refuse the call directly. Related command: dialer callback-center.
Example
# Configure the router to call back the calling number 8810152.
[3Com-Bri0/0/0] dialer route ip 100.1.1.2 8810152 [3Com-Bri0/0/0] dialer call-in 8810152 callback
1.1.6 dialer circular-group

Syntax
dialer circular-group number undo dialer circular-group
View
Parameter
number: Number of the dialer circular group, and a physical interface belongs to this specified group, ranges from 0 to 1023. This number is defined through the interface dialer command.
Description
Use the dialer circular-group command to add the physical interface to the dialer circular group specified here. Use the undo dialer circular-group command to cancel the configuration.
By default, the physical interface is not a member of any dialer circular group. One physical interface can only be added to one dialer circular group, which may contain multiple physical interfaces. When a call is originated on a dialer interface, the highest priority physical interfaces in the circular group on the dialer interface will place the call. Related command: interface dialer.
Example
# Assign Serial1/0/0 and Serial2/0/0 to dialer circular group1.
[3Com-Serial1/0/0] dialer circular-group 1 [3Com-Serial2/0/0] dialer circular-group 1
1.1.7 dialer enable-circular

Syntax
dialer enable-circular undo dialer enable-circular
View
Parameter
None
Description
Use the dialer enable-circular command to enable Circular DCC. Use the undo dialer enable-circular command to disable Circular DCC. By default, Circular DCC is enabled on the ISDN interfaces and disabled on other interfaces. The user must use this command to enable it before using Circular DCC. Related command: dialer circular-group.
Example
# Enable Circular DCC on Serial 0/0/0.
[3Com-Serial0/0/0] dialer enable-circular
1.1.8 dialer isdn-leased

Syntax
dialer isdn-leased number undo dialer isdn-leased number
View
Parameter
number: Number of the ISDN B channel for leased line connection. It is in the range of 0 to 1 if the channel is on a BRI interface, in the range of 0 to 30 on a PRI interface, and 0 to 23 on a CT1/PRI interface.
Description
Use the dialer isdn-leased command to configure an ISDN B channel (can be either the channel on a BRI or PRI interface) as the leased line. Use the undo dialer isdn-leased command to cancel the setting. By default, no ISDN B channel is configured as leased line. The user can configure any ISDN B channel to be the leased line without affecting the settings of other B channels.
Note: On an ISDN BRI interface, you may configure ISDN BRI 128k leased line in addition. For more information refer to the dialer isdn-leased command in the chapter ISDN Configuration Commands in section Link Layer Protocol of this manual.
Related command: dialer isdn-leased (in the Link Layer Protocol section of this manual).
Example
# Configure the first B channel on the interface Bri0/0/0 to be the leased line.
[3Com-Bri0/0/0] dialer isdn-leased 1
1.1.9 dialer number

Syntax
dialer number dial-number undo dialer number
View
Parameter
dial-number: Dial number for calling a remote end.
Description
Use the dialer number command to configure a dial number for placing a call to a single remote end. Use the undo dialer number command to cancel the configured dial number. By default, no dial number is set for calling the remote end. This command is used when the dialer interface of Circular DCC serves as the caller end and the dialer originates calls to only one destination address or the default address. This command is only valid after at least one of the following requirements is satisfied: The dialer route command is not configured on the interface. The next hop address that sends packets cannot be found in the corresponding dialer route command. When dialer interfaces of Resource-Shared DCC run link protocol of PPP, the remote user names, which are obtained via PPP authentication and configured with dialer user respectively, will decide which dialer interface will receive the incoming call. In this case, dialer user must be configured, and dialer number is optional. When dialer interfaces run link protocol of Frame Relay, the calling numbers, which are received from the incoming call and configured with dialer number respectively, will decide which dialer interface will receive the incoming call. In this case, dialer number must be configured, and dialer user is optional.
Note: If the dialer-group command is not configured DCC will not dial, even if the dialer number command is configured. When using Resource-Shared DCC the same dialer number should be configured on different dialer interfaces at the calling side otherwise the call will fail; however, this is not the case at the called side. When using Circular DCC, the same dialer number can be configured on different dialer interfaces at the calling side, and it is the same to the called side.
Related command: dialer route.
Example
# Set the dialer number for dialer1 calling the remote end to 11111.
[3Com] interface dialer 1 [3Com-Dialer1] dialer number 11111
1.1.10 dialer priority

Syntax
dialer priority priority undo dialer priority
View
Parameter
priority: Indicates the priority level for a physical interface which belongs to a dialer circular group, ranging from 1 to 127. By default, the priority is 1.
Description
Use the dialer priority command to configure a priority for a physical interface in a dialer circular group in the Circular DCC configuration. Use the undo dialer priority command to restore the default priority. This command sets the order in which the available physical interfaces in a dialer circular group are used. The physical interfaces higher priorities will be used first. Related command: dialer circular-group.
Example
# Set the priority of Serial 3/0/0 in dialer circular group0 to 5.
[3Com-Serial3/0/0] dialer circular-group 0 [3Com-Serial3/0/0] dialer priority 5
1.1.11 dialer queue-length

Syntax
dialer queue-length packets undo dialer queue-length
View
Parameter
packets: Indicates the packet numbers buffered on this interface, ranging from 1 to 100. By default, the value of max-threshold is 30.
Description
Use the dialer queue-length command to configure the number of packets which comply with the "permit" statement that can be buffered before a link is set up. Use the undo dialer queue-length command to restore the default number of the packets that can be buffered. In the link establishing process, as soon as the link is set up the packets which comply with the "permit" statement are held in the buffer queue to wait for transmission. The setting of packets decides the queue length.
Example
# Configure that 10 packets are buffered on Serial1/0/0.
[3Com-Serial1/0/0] dialer queue-length 10
1.1.12 dialer route

Syntax
dialer route protocol next-hop-address [ mask network-mask-length] [ user hostname ] [ broadcast ] [ dial-number ] [ autodial ] [ logical-channel logic-channel-number ] undo dialer route protocol next-hop-address [ mask network-mask-length ]
View
Parameter
protocol: Network protocol. At present, it can be IP only. next-hop-address: Host or network address of the dialed destination. mask network-mask-length: Optional, mask length of the network address of the dialed destination, in the range of 0 to 32. If no mask length is specified, the default, 32, applies, where the next-hop-address argument is handled as a host address. If you want to set the next-hop-address argument to a network address you must specify its mask length. user hostname: Remote user name, which is optionally specified for authentication implemented when receiving calls. Hostname is a string of 1 to 80 characters. broadcast: An optional parameter indicating that the broadcast packets can be transmitted on this link. dial-number: Dial number of the remote end. autodial: If this parameter is defined in a dialer route, the router will automatically attempt to dial according to the dialer route at a certain interval. The interval is set using the dialer autodial-interval command, which is 300 seconds by default. logical-channel logic-channel-number: Number of the specified logic channel of the standby center.
Description
Use the dialer route command to allow a DCC interface to call the specified destination address (host or network address) or to receive calls from multiple remote ends. Use the undo dialer route command to remove a dialer route. By default, no dialer route is defined. To originate a call, the parameter dial-number must be configured. If the user keyword is used, PPP authentication must be configured. The user can configure multiple dialer routes for a dial port or a destination address.
Note: If the dialer-group command is not configured, DCC will not dial.
Related command: dialer enable-circular, dialer autodial-interval.

Example
# Dial 888066 to set up link for the packets destined to network segment 192.168.1.0/24.
[3Com] dialer route ip 192.168.1.0 mask 24 888066
# Dial 888066 to set up link for the packets destined to host address 192.168.1.1 (not recommended).
[3Com] dialer route ip 192.168.1.1 mask 888066
1.1.13 dialer threshold

Syntax
dialer threshold traffic-percentage [ in | in-out | out ] undo dialer threshold
View
Parameter
traffic-percentage: Percentage of the actual traffic on the link over the bandwidth, ranges from 0 to 99. in: Only the inbound traffic is calculated. in-out: Calculates the larger one of the inbound traffic and the outbound traffic in the actual traffic calculation. out: Only the outbound traffic is calculated.
Description
Use the dialer threshold command to configure the traffic threshold of a link on the DCC interface, in order to enable another link to call the same destination address when the ratio of traffic on all connected links exceeds the present percentage. Use the undo dialer threshold command to restore the default value. By default, MP flow control is not enabled. If the ratio of the traffic on a link of a DCC interface to the bandwidth exceeds the defined threshold, the second link is brought up to form an MP bundle with the first one. When the ratio of traffic on the two links to the bandwidth exceeds the specified threshold a third link is brought up, and so on and so forth. On the contrary, when the ratio of the traffic on N (N is an integer greater than or equal to 2) links to the bandwidth of N-1 links is less than the specified threshold, a link is dropped.
When only one link is left in the MP bundle, whether and when to disconnect it depends on the timer configured using the dialer timer idle command. So far, this command is not available with physical interfaces; it is only applicable to dialer interfaces and must be used together with the ppp mp command. With traffic-percentage set to 0, the router does not look at the ratio of traffic to bandwidth when making calls to bring up links. Rather, all the available links come up automatically. As for links that already exist, they are not torn down because of timeout. Simply put, the dialer threshold 0 command voids the dialer timer idle command. Related command: ppp mp and flow-interval.
Example
# Set the traffic threshold on Dialer1 to 80%.
[3Com-Dialer1] dialer threshold 80
1.1.14 dialer timer autodial

Syntax
dialer timer autodial seconds undo dialer timer autodial
View
Parameter
seconds: Interval before the next call attempt, ranging from 1 to 604800 in units of second. The default interval is 300 seconds.
Description
Use the dialer timer autodial command to configure the automatic dialing interval of DCC. Use the undo dialer timer autodial command to resume the default interval. This command should be used together with the auto-dial keyword in the dialer route command. DCC will automatically attempt to dial at intervals of seconds until the connection is established. The automatic dialing function is independent of the trigger with data packets and the established connection will not be automatically cut for timeout. That is, the configuration of the dialer timer idle command does not affect it. Related command: dialer route.
Example
# Set the DCC automatic calling interval on Serial0/0/0 to 60 seconds.
[3Com-Serial0/0/0] dialer timer autodial 60
1.1.15 dialer timer compete

Syntax
dialer timer compete seconds undo dialer timer compete
View
Parameter
Seconds: Idle interval when contention occurs, ranges from 0 to 65535 seconds. By default, the idle interval is 20 seconds.
Description
Use the dialer timer compete command to configure an idle interval for an interface after call contention occurs on the interface. Use the undo dialer timer compete command to restore the default interval. Contention occurs if no free channel is available when DCC tries to originate a call. Normally, after a link is set up, timer idle timing will take effect. However, if a call to a different destination address is to be originated on this interface under the contention circumstances, DCC replaces the timer idle timing with the timer compete timing.
Example
# Set timer idle and timer compete respectively to 50 seconds and 10 seconds on Serial 0/0/0.
[3Com-Serial0/0/0] dialer timer idle 50 [3Com-Serial0/0/0] dialer timer compete 10
1.1.16 dialer timer enable

Syntax
dialer timer enable seconds undo dialer timer enable
View
Parameter
seconds: Interval for originating the next call, ranges from 5 to 65535 seconds. By default, the interval is 5 seconds.
Description
Use the dialer timer enable command to configure an interval for the next call attempt on an interface after the link is disconnected. Use the undo dialer timer enable command to restore the default interval.
Example
# Set the interval for DCC to make the next call attempt to 15 seconds.
[3Com-Serial0/0/0] dialer timer enable 15
1.1.17 dialer timer idle

Syntax
dialer timer idle seconds undo dialer timer idle
View
Parameter
seconds: Time that a link is allowed to be idle, ranges from 0 to 65535 seconds. By default, seconds is 120 seconds.
Description
Use the dialer timer idle command to configure the interval that a link is allowed to be idle (in other words, the interval when there is no packets which comply with the permit statements transmitted) after a call has been set up on the interface. Use the undo dialer timer idle command to restore the default duration. After a link is set up, the timer idle timer will take effect. If no interesting packets are transmitted on the link within the specified time, DCC will automatically disconnect the link.
If timer idle is set to 0, the link will never be disconnected, regardless of whether there are packets, which comply with the permit statements, to be transmitted over the link or not.
Example
# Set the timer idle on the interface Serial 0/0/0 to 50 seconds.
[3Com-Serial0/0/0] dialer timer idle 50
1.1.18 dialer timer wait-carrier

Syntax
dialer timer wait-carrier seconds undo dialer timer wait-carrier
View
Parameter
seconds: Waiting time in seconds, ranges from 0 to 65535. By default, the time waiting for a call connection is 60 seconds.
Description
Use the dialer timer wait-carrier command to configure the timeout time of wait-carrier timer. Use the undo dialer timer wait-carrier command to restore the default time of the timer. Wait-carrier timer begins to time after the DCC call is initiated. If the call connection fails to be set up within the timeout time of this timer, the call will be terminated. If the connection for a call is not established yet within the specified time, DCC will terminate the call.
Example
# Set the maximum duration of the time that Serial 0/0/0 waits for call to establish to be 100 seconds.
[3Com-Serial0/0/0] dialer timer wait-carrier 100
1.1.19 dialer user

Syntax
dialer user username undo dialer user
View
Parameter
username: Remote user name for PPP authentication, which is a string of 1 to 80 characters.
Description
Use the dialer user command to configure a remote user name for authenticating the requests when calls are received. Use the undo dialer user command to cancel the remote user name. By default, no remote user name is set. This command is only valid on dialer interfaces of Resource-Shared DCC. Up to 255 Dialer users can be set on one Dialer interface. When one Dialer interface is configured with multiple users, multiple physical interfaces can access this Dialer interface. When a Dialer interface encapsulates PPP, the remote user that has passed PPP authentication decides which Dialer interface receives calls. In this case, you have the option to configure the dialer number command. Related command: ppp pap local-user, ppp chap user.
Example
# Set the remote username to RouterB.
[3Com-Dialer3] dialer user RouterB
1.1.20 dialer-group
Syntax
dialer-group group-number undo dialer-group
View
Parameter
group-number: sequence number of dialer access number, ranges from 1 to 255. This group is set through the dialer-rule command.
Description
Use the dialer-group command to configure access control on the packets transmitted on a DCC interface, and to place the interface in an access control group. Use the undo dialer-group command to cancel the interface from uniting with the access control group. By default, this command is not configured. This command is used for associating a physical interface with an access control group. Through the dialer-rule command, the user can associate an access control group with the acl command. A DCC interface can only be a member of one access control group. If it is configured to be a member of another access control group, this configuration will replace the previous one.
Note: In the default configuration of the interface, dialer-group is not configured. The user must configure this command. Otherwise, DCC will be unable to transmit packets.
Related command: dialer-rule.
Example
# Add Serial1/0/0 interface to dialer-group 1.
[3Com] dialer-rule 1 acl 3101 [3Com] interface serial1/0/0 [3Com-Serial1/0/0] dialer-group 1
1.1.21 dialer-rule
Syntax
dialer-rule dialer-number { protocol-name { permit | deny } | acl acl-number } undo dialer-rule dialer-number
View
System view
Parameter
dialer-number: Number of the dialer access group, corresponding to the parameter group-number in the dialer-group group number command in DCC interface view. The argument ranges from 1 to 255. protocol-name: Network protocol, the value can be ip alike. permit: Permits the packets of the specified protocol. deny: Denies the packets of the specified protocol. acl acl-number: Number of the access control list to which the access control group corresponds.
Description
Use the dialer-rule command to configure the conditions of the data packet that can trigger a DCC call. Use the undo dialer-rule command to cancel the setting. By default, no conditions of packet-triggering DCC calls are set for dial interfaces. This command is used to set the DCC call packet-triggering control to which an access control group corresponds. A dial interface can be placed in an access control group using the dialer-group command. Thereby, the DCC calls packet-triggering on the DCC interface can be controlled. If an access control group cannot find the corresponding dialer-rule, DCC will regard the packets as packets which do not comply with the permit conditions in ACL rule and just drop them. No DCC call will be originated. Related command: dialer-group.
Example
# Set a dialer-rule.
[3Com] acl number 3101 [3Com-acl-adv-3101] rule permit ip source 0.0.0.0 255.255.255.255 destination 0.0.0.0 255.255.255.255 [3Com-acl-adv-3101] quit [3Com] dialer-rule 1 acl 3101 [3Com] interface serial1/0/0 [3Com-Serial1/0/0] dialer-group 1
1.1.22 display dialer interface

Syntax
display dialer interface interface-type interface-number
View
Any view
Parameter
Description
Use the display dialer interface command to view the information of DCC interface. By default, the information of all the DCC interfaces is displayed. Related command: dialer timer idle, dialer timer compete, dialer timer wait-for-carrier, dialer timer enable.
Example
# Display the information on the DCC interface Dialer 1.
[3Com] display dialer interface serial1/0/0 Dial Interface:Serial0/0 Dialer Route: NextHop_address Dialer_Numbers 131.108.2.5 14155553434
Dialer Timers(Secs): Auto-dial:300 Idle:50 Compete:10 Enable:5
Wait-for-Carrier:100
1.1.23 interface dialer

Syntax
interface dialer number undo interface dialer number
View
System view
Parameter
number: Interface number in the range of 0 to 1023.
Description
Use the interface dialer command to create a dialer circular group for the Circular DCC, or to configure a dialer interface for the Resource-Shared DCC. Use the undo interface dialer command to cancel the existing setting. By default, no dialer interface is defined. In Resource-Shared DCC, any dialer interface can use the services provided by multiple physical interfaces, and individual physical interfaces can provide services for multiple dialer interfaces at the same time. Therefore, authentication must be configured on these physical interfaces, so as to use the user name of a dial-in party to locate the corresponding dialer interface for the call. In this mode, physical interfaces and dialer interfaces are dynamically bound. Furthermore, a dialer interface can only call a destination address, which will be specified in the dialer number command. The physical interfaces in Circular DCC and Resource-Shared DCC do not use individual network addresses. Instead, they use the addresses of the corresponding dialer interfaces.
Example
# Define a dialer interface dialer 1.
[3Com] interface dialer 1
1.1.24 flow-interval
Syntax
flow-interval interval undo flow-interval
View
System view
Parameter
interval: Traffic statistic interval. It is in the range 1 to 1500 seconds and defaults to 20 seconds.
Description
Use the flow-interval command to configure traffic statistic interval.
Use the undo flow-interval command to restore the default traffic statistic interval. This command takes effect only on DCC packet-triggered dial-up. This command specifies intervals at which the system provides statistics about traffic on the links in an MP bundle. It is applied to the situation where links are brought up depending on traffic size. Changing the interval setting can affect the interface traffic statistic interval that you can see when executing the display interfaces command. Related command: dialer threshold, display interface.
Example
# Set the traffic statistic interval to 3 seconds.
[3Com] flow-interval 3
1.1.25 ppp callback

Syntax
ppp callback { client | server } undo ppp callback { client | server }
View
Parameter
client: As the client end, sends callback requests. server: As the server end, accepts callback requests.
Description
Use the ppp callback command to enable an interface to send or accept PPP callback requests. Use the undo ppp callback command to disable the interface from sending or accepting PPP callback requests. By default, sending or receiving callback requests is disabled. The callback function can be used to save the communication cost for the calling party in a case where the calling party pays the charge for calls. Related command: ppp callback ntstring.
Example
# Enable accepting callback request on Serial0/0/0 interface.

[3Com-Serial0/0/0] ppp callback server
1.1.26 ppp callback ntstring

Syntax
ppp callback ntstring dial-number undo ppp callback ntstring
View
Parameter
dial-number: Dial number for a Windows NT server to call back the router.
Description
Use the ppp callback ntstring command to configure the dial number required for a Windows NT server to call back the router. Use the undo ppp callback ntstring command to cancel the configured callback dial number. By default, no callback dial number is set for the Windows NT server. This command should be configured if the server needs the router to send the callback number when a router functions as the callback server to call a Windows NT server. Related command: ppp callback.
Example
# Set the dial number for a Windows NT server to call back the router to 2489.
[3Com-Dialer1] ppp callback NTString 2489
Chapter 2 Dynamic Routing Standby Configuration Commands

2.1.1 standby timer routing-disable
Syntax
standby timer routing-disable seconds undo standby timer routing-disable
View
Dial interface view
Parameter
seconds: Delay for the dynamic routing standby module to disconnect the secondary link. It is in the range of 1 to 65535 and defaults to 0.
Description
Use the standby timer routing-disable command to specify a delay for the secondary link to be disconnected after the primary link goes up in order to avoid route oscillation. Use the undo standby timer routing-disable command to restore the default delay, that is, 0. By default, the secondary link is disconnected immediately.
Note: A dial interface refers to a physical dial interface such as PRI and BRI, or a logical dial interface, that is, dialer interface.
Example
# On the interface BRI 0/0/0 disconnect the secondary link five seconds after the primary link resumes.
[3Com-Bri0/0/0] standby timer routing-disable 5
# On the interface BRI 0/0/0 disconnect the secondary link immediately after the primary link resumes.
[3Com-Bri0/0/0] undo standby timer routing-disable
2.1.2 standby routing-group

Syntax
standby routing-group group-number undo standby routing-group group-number
View
Dial interface view
Parameter
group-number: Number of the dynamic routing standby group, ranging from 1 to 255.
Description
Use the standby routing-group command to apply a dynamic routing standby group on the secondary interface. Use the undo standby routing-group command to remove the dynamic routing standby group from the dialer interface. Before applying a dynamic routing standby group on the interface, make sure you have successfully configured the legacy DCC.
Example
# Apply dynamic routing standby group 1 on the interface BRI 0/0/0.
[3Com-Bri0/0/0] standby routing-group 1
# Remove dynamic routing standby group 1 from the interface BRI 0/0/0.
[3Com-Bri0/0/0] undo standby routing-group 1
2.1.3 standby routing-rule

Syntax
standby routing-rule group-number ip ip-address ip-mask undo standby routing-rule group-number
View
System view
Parameter
group-number: Number of the dynamic routing standby group, ranging from 1 to 255. ip-address: Address of the network segment to be monitored, or the destination address of the call placed after standby dialup is enabled. ip-mask: IP address mask.
Description
Use the standby routing-rule command to create a dynamic routing standby group and assign a monitored network segment to it. Use the undo standby routing-rule command to delete the dynamic routing standby group.
Note: One dynamic routing standby group can contain only one monitored network segment.
Example
# Configure dynamic routing standby group 1 to monitor routing to the network segment 20.0.0.0.
[3Com] standby routing-rule 1 ip 20.0.0.1 255.0.0.0
# Delete dynamic routing standby group 1. The segment 20.0.0.0 will not be monitored as the result.
[3Com] undo standby routing-rule 1
Chapter 3 Modem Configuration Commands

3.1 Modem Configuration Commands
3.1.1 debugging modem
Syntax
debugging modem
View
User view
Parameter
None
Description
Use the debugging modem command to enable Modem debugging. According to the information output after executing this command, the user can make sure that the correct Modem script has been specified for a particular event.
Example
None
3.1.2 modem
Syntax
modem [ both | call-in | call-out ] undo modem [ both | call-in | call-out ]
View
User-interface view
Parameter
both: Permits both modem call-in and modem call-out. out: Permits only modem call-in.
call-out: Permits only modem call-out.
Description
Use the modem command to enable modem call-in and call-out on the interface. Use the undo modem and undo modem both command to disable modem call-in and call-out. Use the undo modem [ call-in | call-out ] command to disable modem call-in or call-out. By default, both modem call-in and call-out are disabled on the interface. This command can be used to set the authority of Modem dial-in and dial-out on an interface.
Example
# Enable receiving incoming Modem calls on interface u-tty1..
[3Com-ui-tty1] modem call-in
3.1.3 modem auto-answer

Syntax
modem auto-answer undo modem auto-answer
View
User interface view
Parameter
None
Description
Use the modem auto-answer command to have the external modem connected to the asynchronous interface automatically answer or hook off. Use the undo modem auto-answer command to disable the connected external modem to answer automatically. In this case, the modem answers only when receiving an AT instruction sent by software. By default, the connected external modem is set to non-auto answer mode. Use this command depending on the answer state of the connected external modem. When the modem is in auto-answer mode (AA LED of the modem lights), configure the modem auto-answer command to prevent the router from sending an answer instruction
after the modem answers automatically. If the modem is in non-auto answer mode configure the undo modem auto-answer command.
Note: If the configuration of this command is not consistent with the current answer state of the connected modem anomalies may occur.
Related command: modem.
Example
# Set the answer mode of the modem connected to the asynchronous serial interface UI-TTY1 to auto.
[3Com-ui-tty1] modem auto-answer
3.1.4 script trigger connect

Syntax
script trigger connect script-name undo script trigger connect
View
User interface view
Parameter
script-name: Name of Modem script.
Description
Use the script trigger connect command to configure the Modem script that will be executed once an incoming call connection is established. Use the undo script trigger connect command to cancel this feature. By default, no Modem script is configured. If this command is configured, the specified script will be executed anytime when an incoming call connection is established. Related command: script-string, start-chat, script trigger login, script trigger connect, script trigger logout, script trigger dial, script trigger init.
Example
# Specify the script example to be executed anytime an incoming call connection is established.
[3Com-ui-tty1] script trigger connect example
3.1.5 script trigger dial

Syntax
script trigger dial script-name undo script trigger dial
View
User interface view
Parameter
Description
Use the script trigger dial command to configure the Modem script that is used for DCC dialing. Use the undo script trigger dial command to cancel the feature. By default, the system does not specify the script. If this command is configured the specified script will be executed for DCC dialing. Related command: script-string, start-chat, script trigger login, script trigger connect, script trigger logout, script trigger init.
Example
# Specify the script example to be used for DCC dialing.
[3Com-ui-tty1] script trigger dial example
3.1.6 script trigger init

Syntax
script trigger init script-name undo script trigger init
View
User interface view
Parameter
Description
Use the script trigger init command to configure the Modem script that will be executed when the system is powered on or rebooted. Use the undo script trigger init command to cancel this feature. By default, the system does not specify the script. If this command is configured the specified Modem script will be executed for initializing the asynchronous device connected to the interface when the system is powered on or rebooted. Related command: script-string, start-chat, script trigger login, script trigger connect, script trigger dial, script trigger logout.
Example
# Set the system to execute example when the system is powered on or rebooted.
[3Com-ui-tty1] script trigger init example
3.1.7 script trigger login

Syntax
script trigger login script-name undo script trigger login
View
User interface view
Parameter
Description
Use the script trigger login command to configure the Modem script that will be executed when an outgoing call connection is successfully established. Use the undo script trigger login command to cancel this feature.
By default, no Modem script is configured. If this command is configured the specified script will start to execute anytime when an outgoing call connection is established. This script can be the registration information on a remote system. For example, when a router is connected to a remote UNIX server, we can log in to the remote UNIX server using this script by sending login information and password to the UNIX server. Related command: script-string, start-chat, script trigger connect, script trigger logout, script trigger dial, script trigger init.
Example
# Specify the script example to be executed anytime an outgoing call connection is established.
[3Com-ui-tty1] script trigger login example
3.1.8 script trigger logout

Syntax
script trigger logout script-name undo script trigger logout
View
User-interface view
Parameter
Description
Use the script trigger logout command to configure the Modem script that is executed when a link is reset. Use the undo script trigger logout command to cancel this feature. By default, no Modem script is configured. If this command is configured the specified Modem script will be executed when a link is reset. For example, reset the Modem when the call on the interface is down. Related command: script-string, start-chat, script trigger login, script trigger connect, script trigger dial, script trigger init.
Example
# Specify the Modem script that will be executed when the link is reset.
[3Com] script-string drop-line "" +++ OK ATH OK "ATS0=1" OK [3Com-ui-tty1] script trigger logout drop-line
3.1.9 script-string
Syntax
script-string script-name script-content undo script-string script-name
View
System view
Parameter
script-name: Name of Modem script. script-content: Script content.
Description
Use the script-string command to configure a Modem script. Use the undo script-string command to cancel the Modem script. By default, the system does not have a Modem script. 3Com routers provide the Modem script, which is mainly used for: Providing flexibility in controlling the Modems of different models. For example, using different initialization strings can make the Modem of different manufacturers or models interoperate with the 3Com routers better. Implementing the interactive login to remote systems. Interactive negotiation of the scripts can enable the systems to enter different link states. For example, after the asynchronous serial interfaces on the two routers set up a connection via the Modems, the routers can negotiate the protocol to be encapsulated with the physical link and its operating parameters. The Modem script format in common use is as follow: send-string1 receive-string1 send-string2 receive-string2 ...... Among the above format: send-string indicates a sending string. receive-string indicates a receiving string.
Normally, send-string and receive-string appear in pairs, and the script must begin with a sending string. For example, send-string1 receive-string1 represents the execution flow: Send send-string1 to the Modem and expect to receive receive-string1. If the string matching receive-string1 is received before timeout, the execution of the subsequent script, which will be otherwise terminated, will continue. If the last string is a sending string, it indicates that the execution of the script will be terminated after the string is sent without waiting for any receiving string. If the beginning of the script does not need sending string, but needs to wait for receiving string directly, the first string can be set as , the meaning of which will be explained later. Except for ending with \c, the sending string will be automatically added with a return to its end whenever it is sent. A receiving string is matched via the location-independent matching method. That is, a match is considered successful as long as the received contents contain the expected string. Concerning the match of receiving string, there can be multiple expected receiving strings. The match operation on a receiving string will be considered successful if the receiving string is matched with any expected receiving strings which are separated by hyphens (-). The default timeout time waiting for a receiving string is 5 seconds. TIMEOUT seconds can be inserted into the script to adjust the timeout time waiting for the receiving string, which is valid until a new TIMEOUT is set in the same script. For its meanings, refer to the following table. Table 3-1 Script keywords Keyword ABORT receive-stri ng Description The string following ABORT will be compared with the string sent from a Modem or a remote DTE device for a full match. Multiple ABORT entries can be configured for a script, and all of them take effect in the whole script execution period. The digit following TIMEOUT is used to set the timeout interval that the device waits for receiving strings. If no expected strings are received within the interval, the execution of the script will be failed. Once being set, the setting will be valid till a new TIMEOUT is set.
TIMEOUT seconds
All the strings and keywords in a script are case-sensitive. Both strings and keywords are separated by spaces. If a space is contained in a string, it should be put in double quotation marks (" "). A pair of empty quotation marks (that is, "") has two possible meanings. Being a leading "" in a script, it means that no string
needs to be sent and the system will directly wait for the receiving string. If "" is put at any other location, the string content will be regarded to be "". ABORT receive-string can be inserted anywhere in a script to change the script execution flow. Its presence in the script indicates that the script execution will be terminated if a received string is fully matched to the receive-string set by ABORT receive-string. Multiple ABORT entries can be defined in a script, and they will take effect concurrently. Once a received string matches any of them, the script execution will be terminated. Regardless of where the ABORT receive-string is placed, it will take effect during the whole script execution process. Escape characters can be inserted in a script for the purpose of better controlling the script and increasing its flexibility. In addition, all the escape characters are the delimiters in the string at the same time. Refer to the following table for details. Table 3-2 Script escape characters Escape character Description It means that only the specified string can be sent and the character "Enter" will not be sent. The character of "\c" must be at the end of the sending strings. Otherwise, it is invalid at other location. Represents pausing 2 seconds. Represents the character "newline". Represents the character "Enter". Represents the character "Space". Represents the character "Tab". Represents the character "\". Represents telephone number.
\c
\d \n \r \s \t \\ \T
Related command: sendat, start-chat, script trigger login, script trigger connect, script trigger logout, script trigger dial, script trigger init.
Example
# Define a Modem script.
[3Com]script-string example "" AT OK ATS0=1 OK
3.1.10 service modem-callback

Syntax
service modem-callback undo service modem-callback
View
System view
Parameter
None
Description
Use the service modem-callback command to enable the callback function of modems. Use the undo service modem-callback command to disable the callback function of modems. When a modem line is active, that is, when the modem detects the carrier or data is being received, you may enable callback. As the service modem-callback command uses modem scripts to implement callback before entering PPP, it enables callback before accounting is started. This can thus help you save cost.
Example
# Enable the callback function.
[3Com] service modem-callback
3.1.11 start-script
Syntax
start-script script-name number
View
User view
Parameter
script-name: Name of Modem script. number: Interface number of the script.
Description
Use the start-script command to configure executing the specified Modem script on an interface. This command provides the user with means of instantly executing the Modem script. If another script is being executed on the corresponding interface, this command will not be executed and an error will be reported. Related command: script-string.
Example
# Execute the specified Modem script example on the interface 1.
<3Com> start-script example 1
Command Reference Guide Voice v2.30 Router Software
Table of Contents
Table of Contents
Chapter 1 VoIP Configuration Commands ................................................................................. 1-1 1.1 VoIP Configuration Commands ......................................................................................... 1-1 1.1.1 address.................................................................................................................... 1-1 1.1.2 area ......................................................................................................................... 1-2 1.1.3 area-id (in Voice Entity View) .................................................................................. 1-3 1.1.4 busytone-t-th ........................................................................................................... 1-3 1.1.5 caller-permit............................................................................................................. 1-4 1.1.6 cid display................................................................................................................ 1-6 1.1.7 cid enable ................................................................................................................ 1-7 1.1.8 cid send ................................................................................................................... 1-8 1.1.9 cid type .................................................................................................................... 1-8 1.1.10 cng-on ................................................................................................................... 1-9 1.1.11 compression ........................................................................................................ 1-10 1.1.12 debugging voice data-flow .................................................................................. 1-16 1.1.13 debugging voice dpl ............................................................................................ 1-17 1.1.14 debugging voice h225 ......................................................................................... 1-17 1.1.15 debugging voice h245 ......................................................................................... 1-18 1.1.16 debugging voice ipp ............................................................................................ 1-19 1.1.17 debugging voice rcv ............................................................................................ 1-19 1.1.18 debugging voice vas ........................................................................................... 1-20 1.1.19 debugging voice vmib ......................................................................................... 1-21 1.1.20 debugging voice vpp ........................................................................................... 1-22 1.1.21 default entity compression .................................................................................. 1-23 1.1.22 default entity payload-size................................................................................... 1-23 1.1.23 default entity vad-on............................................................................................ 1-24 1.1.24 delay.................................................................................................................... 1-25 1.1.25 description (in Voice Entity View)........................................................................ 1-27 1.1.26 description (in Voice Subscriber-Line View) ....................................................... 1-27 1.1.27 dial-prefix............................................................................................................. 1-28 1.1.28 dial-program ........................................................................................................ 1-30 1.1.29 display voice call-history-record .......................................................................... 1-30 1.1.30 display voice call-info .......................................................................................... 1-31 1.1.31 display voice default............................................................................................ 1-33 1.1.32 display voice entity .............................................................................................. 1-34 1.1.33 display voice number-substitute.......................................................................... 1-35
3Com Corporation i
Table of Contents
1.1.34 display voice rcv ccb ........................................................................................... 1-36 1.1.35 display voice rcv statistic..................................................................................... 1-39 1.1.36 display voice sip register-state ............................................................................ 1-41 1.1.37 display voice subscriber-line ............................................................................... 1-42 1.1.38 display voice voip data-statistic........................................................................... 1-44 1.1.39 display voice vpp ................................................................................................. 1-47 1.1.40 dot-match ............................................................................................................ 1-50 1.1.41 dscp..................................................................................................................... 1-51 1.1.42 dtmf threshold...................................................................................................... 1-52 1.1.43 echo-canceller ..................................................................................................... 1-56 1.1.44 em-phy-parm ....................................................................................................... 1-58 1.1.45 em-signal............................................................................................................. 1-59 1.1.46 entity.................................................................................................................... 1-60 1.1.47 fast-connect......................................................................................................... 1-61 1.1.48 first-rule ............................................................................................................... 1-61 1.1.49 impedance........................................................................................................... 1-62 1.1.50 ip-precedence...................................................................................................... 1-63 1.1.51 line....................................................................................................................... 1-64 1.1.52 match-template.................................................................................................... 1-65 1.1.53 max-call (in Voice Dial Program View)................................................................ 1-68 1.1.54 max-call (in Voice Entity View)............................................................................ 1-69 1.1.55 number-match ..................................................................................................... 1-69 1.1.56 number-substitute ............................................................................................... 1-70 1.1.57 outband ............................................................................................................... 1-71 1.1.58 payload-size ........................................................................................................ 1-72 1.1.59 plan-numbering ................................................................................................... 1-74 1.1.60 priority.................................................................................................................. 1-75 1.1.61 private-line........................................................................................................... 1-76 1.1.62 receive gain ......................................................................................................... 1-77 1.1.63 reset voice call-history-record line....................................................................... 1-77 1.1.64 reset voice ipp ..................................................................................................... 1-78 1.1.65 reset voice rcv ..................................................................................................... 1-78 1.1.66 reset voice vpp .................................................................................................... 1-79 1.1.67 reset voice voip data-statistic .............................................................................. 1-79 1.1.68 ring-generate ....................................................................................................... 1-80 1.1.69 rule ...................................................................................................................... 1-81 1.1.70 select-rule rule-order ........................................................................................... 1-83 1.1.71 select-rule search-stop........................................................................................ 1-84 1.1.72 select-rule type-first............................................................................................. 1-85
3Com Corporation ii
Table of Contents
1.1.73 select-stop ........................................................................................................... 1-86 1.1.74 send-busytone..................................................................................................... 1-87 1.1.75 send-number (in Voice Entity View) .................................................................... 1-88 1.1.76 send-number (in Voice Subscriber-Line View).................................................... 1-88 1.1.77 shutdown (in Voice Entity View).......................................................................... 1-89 1.1.78 send-ring ............................................................................................................. 1-90 1.1.79 shutdown (in Voice Subscriber-Line View) ......................................................... 1-90 1.1.80 silence-th-span .................................................................................................... 1-91 1.1.81 slic-gain ............................................................................................................... 1-92 1.1.82 special-service..................................................................................................... 1-93 1.1.83 subscriber-line ..................................................................................................... 1-93 1.1.84 substitute ............................................................................................................. 1-94 1.1.85 substitute incoming-call....................................................................................... 1-95 1.1.86 substitute outgoing-call ....................................................................................... 1-96 1.1.87 terminator ............................................................................................................ 1-98 1.1.88 timer dial-interval ................................................................................................. 1-98 1.1.89 timer first-dial....................................................................................................... 1-99 1.1.90 timer ring-back................................................................................................... 1-100 1.1.91 timer wait-digit ................................................................................................... 1-101 1.1.92 trace interval...................................................................................................... 1-101 1.1.93 transmit gain...................................................................................................... 1-102 1.1.94 tunnel-on ........................................................................................................... 1-103 1.1.95 type.................................................................................................................... 1-104 1.1.96 type-number ...................................................................................................... 1-104 1.1.97 vad-on ............................................................................................................... 1-105 1.1.98 vi-card busy-tone-detect.................................................................................... 1-106 1.1.99 vi-card custom-toneparam ................................................................................ 1-107 1.1.100 vi-card reboot .................................................................................................. 1-108 1.1.101 voice-setup ...................................................................................................... 1-109 1.1.102 voip calledtunnel ............................................................................................. 1-110 1.1.103 voip call-start ................................................................................................... 1-110 1.1.104 voip h323-descriptor........................................................................................ 1-111 1.1.105 vqa data-statistic ............................................................................................. 1-112 1.1.106 vqa dscp .......................................................................................................... 1-113 1.1.107 vqa dsp-monitor .............................................................................................. 1-114 1.1.108 vqa ip-precedence........................................................................................... 1-115 1.1.109 vqa jitter-buffer ................................................................................................ 1-116 1.1.110 vqa performance ............................................................................................. 1-117
Table of Contents
Chapter 2 E1/T1 Voice Configuration Commands ..................................................................... 2-1 2.1 E1/T1 Voice Configuration Commands ............................................................................. 2-1 2.1.1 ani............................................................................................................................ 2-1 2.1.2 ani-offset.................................................................................................................. 2-2 2.1.3 answer..................................................................................................................... 2-2 2.1.4 cas........................................................................................................................... 2-3 2.1.5 clear-forward-ack..................................................................................................... 2-4 2.1.6 debugging voice r2.................................................................................................. 2-5 2.1.7 debugging voice rcv r2 ............................................................................................ 2-6 2.1.8 debugging voice vpp r2 ........................................................................................... 2-6 2.1.9 default...................................................................................................................... 2-7 2.1.10 delay...................................................................................................................... 2-9 2.1.11 display voice em call-statistic .............................................................................. 2-11 2.1.12 display voice em ccb ........................................................................................... 2-13 2.1.13 display voice r2 call-statistics .............................................................................. 2-14 2.1.14 display voice rcv statistic r2................................................................................. 2-16 2.1.15 display voice subscriber-line ............................................................................... 2-18 2.1.16 display voice voip ................................................................................................ 2-21 2.1.17 dl-bits................................................................................................................... 2-22 2.1.18 dtmf ..................................................................................................................... 2-23 2.1.19 effect-time............................................................................................................ 2-24 2.1.20 final-callednum .................................................................................................... 2-25 2.1.21 force-metering ..................................................................................................... 2-26 2.1.22 group-b ................................................................................................................ 2-26 2.1.23 line....................................................................................................................... 2-27 2.1.24 loopback .............................................................................................................. 2-28 2.1.25 mfc (R2 CAS) ...................................................................................................... 2-29 2.1.26 mode ................................................................................................................... 2-30 2.1.27 re-answer ............................................................................................................ 2-31 2.1.28 register-number ................................................................................................... 2-32 2.1.29 register-value....................................................................................................... 2-33 2.1.30 renew................................................................................................................... 2-36 2.1.31 req-category-offset .............................................................................................. 2-36 2.1.32 reset voice em ..................................................................................................... 2-37 2.1.33 reset voice r2....................................................................................................... 2-38 2.1.34 reverse ................................................................................................................ 2-38 2.1.35 seizure-ack .......................................................................................................... 2-39 2.1.36 select-mode......................................................................................................... 2-40 2.1.37 sendring............................................................................................................... 2-41
3Com Corporation iv
Table of Contents
2.1.38 signal-value ......................................................................................................... 2-42 2.1.39 special-character ................................................................................................. 2-43 2.1.40 subscriber-line ..................................................................................................... 2-44 2.1.41 timer (Digital E&M) .............................................................................................. 2-45 2.1.42 timer dtmf (R2) .................................................................................................... 2-46 2.1.43 timer register-pulse (R2) ..................................................................................... 2-47 2.1.44 timer register-complete (R2) ............................................................................... 2-47 2.1.45 timer ring (R2) ..................................................................................................... 2-48 2.1.46 timer dl (R2)......................................................................................................... 2-49 2.1.47 timeslot-set .......................................................................................................... 2-50 2.1.48 trunk-direction...................................................................................................... 2-52 2.1.49 ts.......................................................................................................................... 2-53 Chapter 3 Fax Configuration Commands ................................................................................... 3-1 3.1 Fax Configuration Commands ........................................................................................... 3-1 3.1.1 cngced-detection ..................................................................................................... 3-1 3.1.2 debugging voice fax ................................................................................................ 3-2 3.1.3 debugging voice vas fax.......................................................................................... 3-3 3.1.4 default entity fax ...................................................................................................... 3-3 3.1.5 display voice fax ...................................................................................................... 3-5 3.1.6 fax baudrate ............................................................................................................ 3-7 3.1.7 fax ecm.................................................................................................................... 3-8 3.1.8 fax level ................................................................................................................... 3-9 3.1.9 fax local-train ......................................................................................................... 3-10 3.1.10 fax nsf-on............................................................................................................. 3-10 3.1.11 fax protocol.......................................................................................................... 3-11 3.1.12 fax support-mode ................................................................................................ 3-13 3.1.13 fax train-mode ..................................................................................................... 3-14 3.1.14 voip h323-conf tcs-t38......................................................................................... 3-14 Chapter 4 Voice RADIUS Configuration Commands ................................................................. 4-1 4.1 Voice RADIUS Configuration Commands ......................................................................... 4-1 4.1.1 aaa-client................................................................................................................. 4-1 4.1.2 card-digit.................................................................................................................. 4-1 4.1.3 cdr ........................................................................................................................... 4-2 4.1.4 debugging voice vcc................................................................................................ 4-3 4.1.5 display aaa unsent-h323-call-record ....................................................................... 4-5 4.1.6 display current-configuration voice.......................................................................... 4-6 4.1.7 display voice aaa-client configuration ..................................................................... 4-8 4.1.8 display voice aaa-client local-user .......................................................................... 4-8 4.1.9 display voice aaa-client statistic .............................................................................. 4-9
3Com Corporation v
Table of Contents
4.1.10 display voice call-history-record .......................................................................... 4-10 4.1.11 display voice vcc ................................................................................................. 4-14 4.1.12 gw-access-number.............................................................................................. 4-17 4.1.13 local-user............................................................................................................. 4-18 4.1.14 password-digit ..................................................................................................... 4-19 4.1.15 process-config ..................................................................................................... 4-20 4.1.16 redialtimes ........................................................................................................... 4-21 4.1.17 reset voice aaa-client statistic ............................................................................. 4-22 4.1.18 reset voice vcc..................................................................................................... 4-23 4.1.19 selectlanguage .................................................................................................... 4-24 Chapter 5 GK Client Configuration Commands ......................................................................... 5-1 5.1 GK Client Configuration commands .................................................................................. 5-1 5.1.1 area-id (in Voice GK Client View)............................................................................ 5-1 5.1.2 debugging voice ras ................................................................................................ 5-2 5.1.3 display voice gateway ............................................................................................. 5-2 5.1.4 gk-client ................................................................................................................... 5-3 5.1.5 gk-2nd-id ................................................................................................................. 5-4 5.1.6 gk-id......................................................................................................................... 5-5 5.1.7 gk-security call......................................................................................................... 5-6 5.1.8 gk-security register-pwd .......................................................................................... 5-7 5.1.9 gw-address.............................................................................................................. 5-7 5.1.10 gw-id...................................................................................................................... 5-8 5.1.11 ras-on .................................................................................................................... 5-9 Chapter 6 SIP Client Commands ................................................................................................. 6-1 6.1 SIP Client Commands ....................................................................................................... 6-1 6.1.1 address sip .............................................................................................................. 6-1 6.1.2 debugging voice sip ................................................................................................ 6-1 6.1.3 display voice sip call-statistics................................................................................. 6-2 6.1.4 mode ....................................................................................................................... 6-6 6.1.5 register-enable ........................................................................................................ 6-7 6.1.6 reset voice sip ......................................................................................................... 6-8 6.1.7 sip............................................................................................................................ 6-8 6.1.8 sip-id........................................................................................................................ 6-9 6.1.9 sip-server............................................................................................................... 6-10 6.1.10 source-ip.............................................................................................................. 6-11
3Com Corporation vi
Chapter 1 VoIP Configuration Commands

1.1 VoIP Configuration Commands
1.1.1 address
Syntax
address { ip ip-address | ras } undo address { ip | ras }
View
Voice entity view
Parameter
ip ip-address: Indicate a VoIP dial entity session destination, i.e. the called IP address. ras: Router uses RAS recommendation to interact information with GK Server to map the called phone number to the IP address of peer voice gateway. It is used only in the networking configuration that uses GK (gatekeeper) to provide voice IP services.
Description
Use the address command to configure the voice routing policy to the peer voice gateway. Use the undo address command to cancel the voice routing policy that has been configured. By default, no routing policy is configured. This command is used to configure the network address for the VolP voice entity. The system supports the following two VolP routing policies at present. Static routing policy: Find the IP address of destination voice gateway in static mode according to address ip ip-address command. Dynamic routing policy: The router and GK Server interact RAS information after using the address ras command. GK will dynamically send back the peer voice gateway address that matches the called number to the router. Related command: address sip, match-template.
Example
# Configure the destination IP address corresponding to the called 12345 as 10.1.1.2.
[Router-voice-dial-entity1] match-template 12345 [Router-voice-dial-entity1] address ip 10.1.1.2
1.1.2 area
Syntax
area { north-america | custom | europe } undo area
View
Voice subscriber-line view
Parameter
north-america: Busy tone type of the switch connected to this subscriber-line is of North America standard. custom: Busy tone type of the switch connected to this subscriber-line is defined by the users. europe: Busy tone type of the switch connected to this subscriber-line is of Europe standard.
Description
Use the area command to configure the type of busy tone detection for FXO voice subscriber-line. Use the undo area command to restore the default value. By default, europe busy tone type standard is set. This command is used only for 2-wire loop trunk subscriber-line FXO, and it can only perform configuration to the first voice subscriber-line on the voice card. If successful, the configuration will be effective for all the voice subscriber-lines of the voice card. When this subscriber-line is connected to a common user line of a program-controlled switch, if the user on the switch side hooks on first, only by detecting the busy tone can the router know the user on-hooking operation. Since different switches execute different prompt tone schemes, there exist different frequency spectrum characteristics. This command is used to set the frequency spectrum characteristic used by the router to detect the existence of the busy tone.
Example
# Use north-america standard to detect the existence of the busy tone on voice subscriber-line 0/0/1.
[Router-voice-line0/0/1] area north-america
1.1.3 area-id (in Voice Entity View)

Syntax
area-id string undo area-id
View
Voice entity view
Parameter
string: Area ID, an integer in the range of 0 to 9. The # can be used.
Description
Use the area-id command to configure the area ID of voice GW. Use the undo area-id command to cancel the specified area ID. By default, no area ID of voice GW is configured. The voice area ID is set in VoIP voice entity view and will be automatically added to the beginning of called numbers when establishing calls. Related command: match-template, entity.
Example
# Configure the VoIP voice entity 101 with the area ID 6#.
[Router-voice-dial-entity101] area-id 6#
1.1.4 busytone-t-th
Syntax
busytone-t-th time-threshold undo busytone-t-th
View
FXO voice subscriber-line view
Parameter
time-threshold: Threshold of busy tone detection. It ranges from 2 to 12, with a bigger value meaning longer detection time. The threshold defaults to 2, that is, the device hangs up upon two contiguous detections of busy tone.
Description
Use the busytone-t-th command to configure the threshold of busy tone detection. Use the undo busytone-t-th command to restore the default. The actual busy tone data does not always match the configured parameter. If the difference is large, detection inaccuracy may occur, resulting in on-hook failure or improper on-hook. You can however, tune the threshold of busy tone detection to achieve detection accuracy. For example, you can eliminate improper on-hooks caused by busy tone data inaccuracy by increasing the time for busy tone detection. Note that before you configure the threshold of busy tone detection, you must test it fully making sure that on-hook operation can be done properly.
Example
# Set the threshold of busy tone detection to 3.
[VG-voice-line0]busytone-t-th 3
1.1.5 caller-permit
Syntax
caller-permit calling-string undo caller-permit { calling-string | all }
View
Voice entity view
Parameter
all: All callers. calling-string: Calling numbers that are permitted to call in, in the format of { [ + ] string [ $ ]| $ }. The largest length of the string is 31. The symbols are described in the following:
+: Appears at the beginning of a calling number to indicate that the number is E.164-compliant. $: As the last character to indicate the end of the number. That means the entire calling number must match all the characters before $ in the string. If there is only $ in the string, the calling number can be empty. string: A string composed of any characters of 0123456789ABCD#*.!+%[]()-. The meanings of the characters are described in the following table: Table 1-1 Meanings of the characters in string Character 0-9 ABCD # and * . Meaning Numbers from 0 to 9. Each means a digit. Each character means a digit. Each means a valid digit. A wildcard. It can match any digit of a valid number. For example, 555. . . . matches any string that begins with 555 and with four additional characters. The character or characters right in front of it does not appear or appears once. For example, 56!1234 can match 51234 and 561234. The character or characters right in front of it appears once or several times. But its appearance at the beginning of the whole number means the number is E.164-compliant. Hyphen. It connects two values (the smaller one before it and the bigger one after it) to indicate a range. For example, 1-9 means numbers from 1 to 9 (inclusive). The character or characters right in front of it does not appear, or appears once or several times. Selects one character from the group. For example, [1-36A] can match only one character among 1, 2, 3, 6, and A. A group of characters. For example, (123A) means a string 123A. It is usually used with !, %, and +. For example, 408(12)+ can match 40812 or 408121212. But it cannot match 408. That is, 12 can appear continuously and it must at least appear once.
% []
()
Note: The character or characters in front of "!, %, and + are not to be matched accurately. They are handled similar to the wildcard .. Moreover, these symbols cannot be used alone. There must be a valid digit or digits in front of them. If you want to use [ ] and ( ) at the same time, you must use them in the format ( [ ] ). Other formats, such as [ [ ] ] and [ ( ) ] are illegal. - can only be used inside [ ], and it only connects the same type of characters, such as 0-9. The formats like 0-A are illegal.
Description
Use the caller-permit command to configure the calling numbers that are permitted to call in. Use the undo caller-permit command to delete the calling numbers that are permitted to call in. By default, no calling number is configured. That means there is no limitation on calling numbers. You can configure 32 calling numbers for a voice entity at most. If you only use $, empty calling numbers are permitted to call in. Related command: match-template.
Example
# Configure voice entity 2 to permit 660268 or empty calling numbers to call in.
[3Com-voice-dial-entity2] caller-permit 660268 [3Com-voice-dial-entity2] caller-permit $
1.1.6 cid display

Syntax
cid display undo cid display
View
Parameter
None
Description
Use the cid display command to enable caller identification display. Use the undo cid display command to disable caller identification display. By default, caller identification display is enabled. This command is applicable to FXS subscriber-lines. When functioning as the called, the FXS module can send caller identification information to its called phone between the first and second rings. When disabled to send caller identification information, the FXS interface sends the character P received from the IP side instead. Thus, the called phone is unable to display caller identification information.
Example
# Enable caller identification display on voice subscriber-line 1/0/0.
[Router-voice-line1/0/0] cid display
1.1.7 cid enable

Syntax
cid enable undo cid enable
View
Parameter
None
Description
Use the cid enable command to enable CID on the FXO interface. The FXO interface can receive the modulated caller identification data from an analog line between the first ring and second rings and then send the data demodulated with FSK to the IP side. Use the undo cid enable command to disable CID on the FXO interface. By default, CID is enabled on the FXO interface. This command applies to FXO voice subscriber-lines only.
Example
# Enable CID on FXO voice subscriber-line 1/0/0.
[Router-voice-line1/0/0] cid enable
1.1.8 cid send

Syntax
cid send undo cid send
View
Parameter
None
Description
Use the cid send command to enable the FXO or FXS module to send caller identification information to the IP side. Use the undo cid send command to disable the FXO or FXS module to send caller identification information to the IP side. By default, caller identification information is sent to the IP side.
Example
# Enable the FXO voice subscriber-line 3/0/0 to send caller identification information to the IP side.
[Router-voice-line3/0/0] cid send
# Disable the FXS voice subscriber-line 1/0/0 to send caller identification information to the IP side.
[Router-voice-line1/0/0] undo cid send
1.1.9 cid type

Syntax
cid type { complex | simple }
View
Parameter
complex: Caller identification information is transmitted in multiple-data message format (MDMF). simple: Caller identification information is transmitted in single-data message format (SDMF).
Description
Use the cid type command to configure the format of transmitted information about the calling party. Two formats are available: multiple data message format (MDMF) and single data message format (SDMF). When the remote end supports one format only, you must use the same setting at the local end. This command applies to both FXO and FXS subscriber-lines.
Example
# Set the format of the transmitted caller identification information to SDMF on voice subscriber line 1/0/0.
[Router-voice-line1/0/0] cid type simple
1.1.10 cng-on
Syntax
cng-on undo cng-on
View
Parameter
None
Description
Use the cng-on command to enable the comfort noise function. Use the undo cng-on command to disable the comfort noise function.
By default, comfort noise setting is enabled. This command is applicable to FXO, FXS, E&M subscriber-lines and digital E1 voice subscriber-line. When the silence detecting function on a corresponding voice entity is enabled, some background noise can be generated by using the command to fill the toneless intervals during a conversation. If no comfort noise is generated, the toneless intervals during a conversation will cause the interlocutors uncomfortable. Related command: subscriber-line and vad-on.
Example
# Disable comfort noise function on subscriber line 1/0/0.
[Router-voice-line1/0/0] undo cng-on
1.1.11 compression
Syntax
compression { 1st-level | 2nd-level | 3rd-level | 4th-level } { g711alaw | g711ulaw | g723r53 | g723r63 | g729a | g729r8 | g726r16 | g726r24 | g726r32 | g726r40 } undo compression { 1st-level | 2nd-level | 3rd-level | 4th-level }
View
Voice entity view
Parameter
1st-level: Indicates the first selected voice compression method. 2nd-level: Indicates the second selected voice compression method. 3rd-level: Indicates the third selected voice compression method. 4th-level: Indicates the fourth selected voice compression method. g711alaw: Specifies G.711 A-law coding (defining the pulse code modulation technology), requiring the bandwidth of 64 kbps, usually adopted by Europe. g711ulaw: Specifies G.711-law coding, requiring the bandwidth of 64 kbps, usually adopted in the North America and Japan. g723r53: Specifies G.723.1 Annex A coding, requiring the bandwidth of 5.3 kbps. g723r63: Specifies G.723.1 Annex A coding, requiring the bandwidth of 6.3 kbps. g729a: Specifies G.729 Appendix A coding, requiring the bandwidth of 8 kbps. g729r8: Specifies G.729 (the voice coding technology using conjugate algebraic-code-excited linear-prediction) coding, requiring the bandwidth of 8 kbps.
g726r16: Specifies G.726 Annex A coding. It uses the adaptive differential pulse code modulation (ADPCM) technology, requiring the bandwidth of 16 kbps. g726r24: Specifies G.726 Annex A coding. It uses ADPCM, requiring the bandwidth of 24 kbps. g726r32: Specifies G.726 Annex A coding. It uses ADPCM, requiring the bandwidth of 32 kbps. g726r40: Specifies G.726 Annex A coding. It uses ADPCM, requiring the bandwidth of 40 kbps.
Description
Use the compression command to configure the voice coding method according to priority level. Use the undo compression command to restore the default value. By default, g729r8 coding mode is set. g711alaw and g711ulaw coding provide high-quality voice transmission, while requiring greater bandwidth. g726r16, g726r24, g726r32, and g726r40 are widely adopted now for voice coding. They use the ADPCM technology and provide multiple bandwidth options. g723r53 and g723r63 coding provide silence suppression technology and comfort noise, the relatively high speed output is based on multi-pulse multi-quantitative level technology and provides relatively high voice quality to certain extent, and the relatively low speed output is based on the Algebraic-Code-Excited Linear-Prediction technology and provides greater flexibility for application. The voice quality provided by the g729r8 and g729a coding is similar to the ADPCM of 32 kbps, having the quality of a toll, and also featuring low bandwidth, lesser event delay and medium processing complexity, hence it has a wide field of application. The following table describes the relation between codec algorithms and bandwidth. Usually, 8000 Hz is adopted to collect voice samples. The bandwidth without compression is 64kbps, and it is compressed using the ITU-T G series codec algorithms. The table also shows the compression ratio. Table 1-2 Relation between algorithms and bandwidth Codec algorithm G.711 (A-law and -law) G.726 G.729 Bandwidth 64 kbps (without compression) 16, 24, 32, 40 kbps 8 kbps
Voice quality Best Good Good
Codec algorithm G.723 r63 G.723 r53 6.3 kbps 5.3 kbps
Bandwidth
Voice quality Fair Fair
Actual network bandwidth is related to packet assembly interval and network structure. The longer the packet assembly interval is, the closer the network bandwidth is to the media stream bandwidth. More headers consume more bandwidth. Longer packet assembly interval results in longer fixed coding latency. The following tables show the relevant packet assembly parameters without IPHC compression, including packet assembly interval, bytes coded in a time unit, and network bandwidth, etc. Thus, you can choose a suitable codec algorithm according to idle and busy status of the line and network situations more conveniently. Table 1-3 G.711 algorithm (A-law and -law) Packet assembly interval 10 ms 20 ms 30 ms Bytes coded in a time unit 80 160 240 Packet length IP 120 200 280 Network bandwidt h IP 96 kbps 80 kbps 74.7 kbps Packet length IP+PPP 126 206 286 Network bandwidt h IP+PPP 100.8 kbps 82.4 kbps 76.3 kbps Coding latency 10 ms 20 ms 30 ms
G.711 algorithm (A-law and -law): media stream bandwidth 64kbps, minimum packet assembly interval 10 ms.
Table 1-4 G.729 algorithm Packet assembly interval 10 ms 20 ms 30 ms Bytes coded in a time unit 10 20 30 Packet length IP 50 60 70 Network bandwidt h IP 40 kbps 24 kbps 18.7 kbps Packet length IP+PPP 56 66 76 Network bandwidt h IP+PPP 44.8 kbps 26.4 kbps 20.3 kbps Coding latency 10 ms 20 ms 30 ms
G.729 algorithm: media stream bandwidth 8 kbps, minimum packet assembly interval 10 ms.
Table 1-5 G.723 r63 algorithm Packet assembly interval 30 ms 60 ms 90 ms Bytes coded in a time unit 24 48 72 Packet length IP 64 88 112 Network bandwidt h IP 16.8 kbps 11.6 kbps 9.8 kbps Packet length IP+PPP 70 94 118 Network bandwidt h IP+PPP 18.4 kbps 12.3 kbps 10.3 kbps Coding latency 30 ms 60 ms 90 ms
G.723 r63 algorithm: media stream bandwidth 6.3 kbps, minimum packet assembly interval 30 ms.
Table 1-6 G.723 r53 algorithm Packet assembly interval 30 ms 60 ms 90 ms Bytes coded in a time unit 20 40 60 Packet length IP 60 80 100 Network bandwidt h IP 15.9 kbps 10.6 kbps 8.8 kbps Packet length IP+PPP 66 86 106 Network bandwidt h IP+PPP 17.5 kbps 11.4 kbps 9.3 kbps Coding latency 30 ms 60 ms 90 ms
G.723 r53 algorithm: media stream bandwidth 5.3 kbps, minimum packet assembly interval 30 ms.
Table 1-7 G.726 r16 algorithm Packet assembly interval 10 ms 20 ms 30 ms 40 ms 50 ms 60 ms 70 ms 80 ms 90 ms Bytes coded in a time unit 20 40 60 80 100 120 140 160 180 Packet length IP 60 80 100 120 140 160 180 200 220 Network bandwidt h IP 48 kbps 32 kbps 26.7 kbps 24 kbps 22.4 kbps 21.3 kbps 20.6 kbps 20 kbps 8.8 kbps Packet length IP+PPP 66 86 106 126 146 166 186 206 226 Network bandwidt h IP+PPP 52.8 kbps 34.4 kbps 28.3 kbps 25.2 kbps 23.4 kbps 11.4 kbps 21.3 kbps 20.6 kbps 9.3 kbps Coding latency 10 ms 20 ms 30 ms 40 ms 50 ms 60 ms 70 ms 80 ms 90 ms
100 ms 110 ms
200 220
240 260
19.2 kbps 18.9 kbps
246 266
19.7 kbps 19.3 kbps
100 ms 110 ms
G.726 r16 algorithm: media stream bandwidth 16 kbps, minimum packet assembly interval 10 ms.
Table 1-8 G.726 r24 algorithm Packet assembly interval 10 ms 20 ms 30 ms 40 ms 50 ms 60 ms 70 ms Bytes coded in a time unit 30 60 90 120 150 180 210 Packet length IP 70 100 130 160 190 220 250 Network bandwidt h IP 56 kbps 40 kbps 34.7 kbps 32 kbps 30.4 kbps 29.3 kbps 28.6 kbps Packet length IP+PPP 76 106 136 166 196 226 256 Network bandwidt h IP+PPP 60.8 kbps 42.4 kbps 17.5 kbps 33.2 kbps 31.2 kbps 11.4 kbps 30.1 kbps Coding latency 10 ms 20 ms 30 ms 40 ms 50 ms 60 ms 70 ms
Table 1-9 G.726 r32 algorithm Packet assembly interval 10 ms 20 ms 30 ms 40 ms 50 ms Bytes coded in a time unit 40 80 120 160 200 Packet length IP 80 120 160 200 240 Network bandwidt h IP 64 kbps 48 kbps 42.7 kbps 40 kbps 38.4 kbps Packet length IP+PPP 86 126 166 206 246 Network bandwidt h IP+PPP 68.8 kbps 50.4 kbps 44.3 kbps 41.2 kbps 39.4 kbps Coding latency 10 ms 20 ms 30 ms 40 ms 50 ms
Table 1-10 G.726 r40 algorithm Packet assembly interval 10 ms 20 ms 30 ms 40 ms Bytes coded in a time unit 50 100 150 200 Packet length IP 90 140 190 240 Network bandwidt h IP 72 kbps 56 kbps 50.7 kbps 48 kbps Packet length IP+PPP 96 146 196 246 Network bandwidt h IP+PPP 76.8 kbps 58.4 kbps 52.3 kbps 49.2 kbps Coding latency 10 ms 20 ms 30 ms 40 ms
Note: Packet assembly interval is the duration to encapsulate information into a voice packet. Bytes coded in a time unit = packet assembly interval X media stream bandwidth. Packet length (IP) = IP header + RTP header + UDP header + voice information length = 20+12+8+data Packet length (IP+PPP) = PPP header + IP header + RTP header + UDP header + voice information length = 6+20+12+8+data Network bandwidth = Bandwidth of the media stream X packet length / bytes coded in a time unit
Since IPHC compression is affected significantly by network stability, it cannot achieve high efficiency unless line is of high quality, network is very stable, and packet loss does not occur or seldom occurs. When the network is unstable, IPHC efficiency drops drastically. With best IPHC performance, IP (RTP) header can be compressed to 2 bytes. If PPP header is compressed at the same time, a great deal of media stream bandwidth can be saved. The following table shows the best IPHC compression efficiency of codec algorithms with packet assembly interval of 30ms. Table 1-11 Compression efficiency of IPHC+PPP header Before compression Coding modes Bytes coded in a time unit 30 Packet length IP+PPP 76 Network bandwidth IP+PPP 20.3 kbps After IPHC+PPP compression Packet length IP+PPP 34 Network bandwidth IP+PPP 9.1 kbps
G.729
G.723r63 G.723r53
24 20
70 66
18.4 kbps 17.5 kbps
28 24
7.4 kbps 6.4 kbps
Only when there is an intersection (a compression mode recognized by both parties) in the voice compression modes owned by the two communication parties can the two parties establish normal communication with each other. If there is no consistency in the compression modes set for the equipment at the two ends connected to each other, or there is no common compression method, the calling will fail.
Example
# Configure to select g723r53 compression method first, then to select the g729r8 compression method.
[Router-voice-dial-entity1] compression 1st-level g723r53 [Router-voice-dial-entity1] compression 2nd-level g729r8
1.1.12 debugging voice data-flow

Syntax
debugging voice data-flow { all | detail | error | fax | fax-error | jitter | jitter-error | receive | send | vpp }
View
User view
Parameter
all: Enable debugging on all voice data processes. detail: Enable debugging on detailed information of voice packets. error: Enable debugging on voice data errors. fax: Enable debugging for fax data stream. fax-error: Enable debugging on fax data errors. jitter: Enable jitter buffer debugging. jitter-error: Enable debugging for jitter buffer processing errors. receive: Enable debugging output at the receiving side of the data stream. send: Enable debugging at the sending side of the data stream. vpp: Enable debugging on the data stream of VPP software module.
Description
Use the debugging voice data-flow command to enable debugging for voice data processes. Use the undo debugging voice data-flow command to disable the debugging.
Example
# Enable debugging on all voice data processes.
<3Com> debugging voice data-flow all
1.1.13 debugging voice dpl

Syntax
debugging voice dpl { all | error | general }
View
User view
Parameter
all: Enable all debugging of voice dial program. error: Enable error debugging of voice dial program. general: Enable general debugging of voice dial program.
Description
Use the debugging voice dpl command to enable the debugging of voice dial program. Use the undo debugging voice dpl command to disable the debugging.
Example
# Enable all debugging of voice dial program.
<3Com> debugging voice dpl all
1.1.14 debugging voice h225

Syntax
debugging voice h225 { asn1 | event }
View
User view
Parameter
asn1: Information related to negotiation messages is output. event: Information related to negotiation events is output.
Description
Use the debugging voice h225 command to enable debugging for the H.225.0 negotiation messages or events. Use the undo debugging voice h225 command to disable the debugging.
Example
# Enable H.225 negotiation events debugging.
<3Com> debugging voice h225 event
1.1.15 debugging voice h245

Syntax
debugging voice h245 { asn1 | event }
View
User view
Parameter
asn1: Information related to negotiation messages is output. event: Information related to negotiation events is output.
Description
Use the debugging voice h245 command to enable debugging for the H.245 negotiation messages or events. Use the undo debugging voice h245 command to disable the debugging.
Example
# Enable H.245 negotiation events debugging.
<3Com> debugging voice h245 event
1.1.16 debugging voice ipp

Syntax
debugging voice ipp { all | error | rtp-rtcp | socket | timer | vcc | vpp | x691 }
View
User view
Parameter
all: Enable all debugging for IPP module. error: Enable error debugging for IPP module. rtp-rtcp: Enable RTP/RTCP information debugging. socket: Enable Socket information debugging. timer: Enable timer information debugging. vcc: Enable VCC message receiving and sending debugging. vpp: Enable VCC message receiving and sending debugging. x691: Enable X.691 message debugging.
Description
Use the debugging voice ipp command to enable H.323 recommendation suite module debugging. Use the undo debugging voice ipp command to disable this debugging.
Example
# Enable all debugging on IPP module.
<3Com> debugging voice ipp all
1.1.17 debugging voice rcv

Syntax
debugging voice rcv { all | cc | error | ipp | timer | vas | vcc | vpp }
View
User view
Parameter
all: Enable all the debugging of the RCV module. cc: Enable the debugging between the RCV module and the underlying CC module. error: Enable the debugging of RCV-caused connection failures. ipp: Enable the debugging between the RCV module and the upper layer IPP module. timer: Enable the debugging for the timer operation of the RCV module. vas: Enable the debugging between the RCV module and the underlying VAS module. vcc: Enable the debugging between RCV and the underlying VCC module. vpp: Enable the debugging between the RCV module and the underlying VPP module.
Description
Use the debugging voice rcv command to enable the debugging of the RCV module. Use the undo debugging voice rcv command to disable the debugging.
Example
# Enable all the debugging of the RCV module.
<3Com> debugging voice rcv all
1.1.18 debugging voice vas

Syntax
debugging voice vas { all | buffer | cid | command | dsp | em | error | fax | line | rcv | receive | send }
View
User view
Parameter
all: Enable all the debugging of the VAS module. buffer: Enable the debugging of the buffer area for the VAS module to transmit commands to the DSP module. cid: Enable VAS CID debugging command: Enable the debugging between the VAS module and the command buffer area. dsp: Enable the debugging between the VAS module and the underlying DSP module. em: Enable the debugging of the EM subscriber-line operation of the VAS module.
error: Enable the debugging of the connection failure caused by the VAS module. fax: Enable VAS fax debugging. line: Enable the debugging for the VAS module to log on to a specified line. rcv: Enable the debugging between VAS and RCV. receive: Enable the debugging for the VAS module to receive data. send: Enable the debugging for the VAS module to transmit data.
Description
Use the debugging voice vas command to enable the VAS module debugging. Use the undo debugging voice vas command to disable the debugging.
Example
# Enable all the debugging of the VAS module.
<3Com> debugging voice vas all
1.1.19 debugging voice vmib

Syntax
debugging voice vmib { aaaclient | all | analogif | callactive | callhistory | dialcontrol | digitalif | error | general | gkclient | h323statistic | voiceif } undo debugging voice vmib { aaaclient | all | analogif | callactive | callhistory | dialcontrol | digitalif | error | general | gkclient | h323statistic | voiceif }
View
User view
Parameter
aaaclient: Enable the debugging of the AAA client. all: Enable all the debugging of the voice MIB. analogif: Enable the debugging of the analog voice interfaces. callactive: Enable the debugging of the current call. callhistory: Enable the debugging of the history calls. dialcontrol: Enable the dialing debugging. error: Enable debugging for voice MIB errors. general: Enable the general voice MIB debugging.
gkclient: Enable the GK client debugging. h323statistic: Enable debugging for 323 statistics. voiceif: Enable the voice interface debugging.
Description
Use the debugging voice vmib command to enable the voice MIB module debugging. Use the undo debugging voice vmib command to disable the debugging.
Example
# Enable all voice MIB debugging.
<3Com> debugging voice vmib all
1.1.20 debugging voice vpp

Syntax
debugging voice vpp { all | codecm | error | ipp | r2 | rcv | timer | vas | vcc }
View
User view
Parameter
all: Enable all the debugging of the VPP module. codecm: Enable the debugging between the VPP module and the underlying CODECM module. error: Enable the debugging of the connection failure of the VPP module. ipp: Enable the debugging between the VPP module and the upper layer IPP module. r2: Enable the debugging of information between VPP and R2 rcv: Enable the debugging between the VPP module and the RCV module timer: Enable the debugging for the timer operation of the VPP module. vas: Enable the debugging between the VPP module and the VAS module. vcc: Enable the debugging of information between VPP and VCC
Description
Use the debugging voice vpp command to enable the debugging of the VPP module. Use the undo debugging voice vpp command you can disable the debugging switch.
Example
# Enable all the debugging of the VPP module.
<3Com> debugging voice vpp all
1.1.21 default entity compression

Syntax
default entity compression { 1st-level | 2nd-level | 3rd-level | 4th-level } { g711alaw | g711ulaw | g723r53 | g723r63 | g729a | g729r8 | g726r16 | g726r24 | g726r32 | g726r40 } undo default entity compression { 1st-level | 2nd-level | 3rd-level | 4th-level }
View
Voice dial program view
Parameter
Refer to the compression command.
Description
Use the default entity compression command to globally configure the mode of coding and decoding as the default value. Use the undo default entity compression command to restore the fixed value (i.e. g729r8 code mode) in the system as the default value. By default, the mode of coding and decoding is g729r8 coding mode. The default entity compression command can be used to globally configure the default value of the voice coding and decoding. In this case, all the voice entities and newly created voice entities on this router, which have not been configured with this function, will inherit this configuration. Related command: compression.
Example
# Adopt the g723r53 coding and decoding mode as the first selection globally.
[Router-voice-dial] default entity compression 1st-level g723r53
1.1.22 default entity payload-size

Syntax
default entity payload-size { g711 | g723 | g726r16 | g726r24 | g726r32 | g726r40 | g729 } undo default entity payload-size { g711 | g723 | g726r16 | g726r24 | g726r32 | g726r40 | g729 }
View
Parameter
g711: Specifies the time length of voice packets with g711 coding. It can be 10 milliseconds, 20 milliseconds (the default), or 30 milliseconds. g723: Specifies the time length of voice packets with g723 coding, in the range 30 to 180 milliseconds. It defaults to 30 milliseconds. g726r16: Specifies the time length of voice packets with g726r16 coding. It ranges from 10 to 110 milliseconds and defaults to 30 milliseconds. g726r24: Specifies the time length of voice packets with g726r24 coding. It ranges from 10 to 70 milliseconds and defaults to 30 milliseconds. g726r32: Specifies the time length of voice packets with g726r32 coding. It ranges from 10 to 50 milliseconds and defaults to 30 milliseconds. g726r40: Specifies the time length of voice packets with g726r40 coding. It ranges from 10 to 40 milliseconds and defaults to 30 milliseconds. g729: Specifies the time length of voice packets with g729 coding, in the range10 to 180 milliseconds. It defaults to 20 milliseconds.
Description
Use the default entity payload-size command to configure the default time length of voice packets with different coding formats. Use the undo default entity payload-size command to restore the default.
Example
# Set the time length of voice packets with G.711 coding to 30 milliseconds.
[Router-voice-dial] default en payload-size g711 30
1.1.23 default entity vad-on

Syntax
default entity vad-on
undo default entity vad-on
View
Parameter
None
Description
Use the default entity vad-on command to globally configure enabling silence detection as the default value. Use the undo default entity vad-on command to restore the fixed value (i.e. disabling the silence detection) to be the default value. By default, the silence detection is disabled. The default entity vad-on command is used to globally configure enabling silence detection as the default value. In this case, all the voice entities and newly created voice entities on this router, which have not been configured with this function, will inherit this configuration. Related command: vad-on.
Example
# Enable the silence detection globally.
[Router-voice-dial] default entity vad-on
1.1.24 delay
Syntax
delay { call-interval | hold | rising | send-dtmf | dtmf | dtmf-interval | wink-rising | wink-hold | send-wink | start-dial } milliseconds undo delay { call-interval | hold | rising | send-dtmf | dtmf | dtmf-interval | wink-rising | wink-hold | send-wink | start-dial }
View
Parameter
call-interval milliseconds: Call interval, which is in the range of 200 to 2000ms and defaults to 300ms.
hold milliseconds: The maximum time that the calling party waits for the called party to hook up so as to send DTMF signals in analog E&M subscriber-line delay start mode. It is in the range of 100 to 5000ms and defaults to 400ms. rising milliseconds: The interval waiting for the calling party to detect the state of the called party after it sends the off-hook signals in analog E&M subscriber-line delay start mode. It is in the range of 20 to 2000ms and defaults to 300ms. send-dtmf milliseconds: The delay before the calling party sends signals in analog E&M subscriber-line immediate start mode. It is in the range of 50 to 5000ms and defaults to 100ms. dtmf milliseconds: The lasting duration of a DTMF signal, which is in the range of 50 to 500ms and defaults to 120ms. dtmf-interval milliseconds: Interval between two DTMF signals, which is in the range of 50 to 500ms and defaults to 120ms. wink-rising milliseconds: The maximum time duration that the calling party waits for the wink signals after sending the seizure signals in analog E&M subscriber-line wink start mode. It is in the range of 100 to 5000ms and defaults to 500ms. wink-hold milliseconds: The maximum lasting duration of the wink signals received by the calling party in analog E&M subscriber-line wink start mode. It is in the range of 100 to 3000ms and defaults to 500ms. send-wink milliseconds: The maximum duration waiting for the wink signals on an analog E&M subscriber-line, which is in the range of 100 to 5000ms and defaults to 500ms. start-dial milliseconds: Delay for dialing, which is significant on an FXO subscriber-line. It ranges from 0 to 10 seconds and defaults to 1 second.
Description
Use the delay command to configure the relevant time parameters on an FXO or analog E&M subscriber-line. Use the undo delay command to restore the default values of these time parameters. All the commands listed above are used for configuring the device of a calling party and hence are only useful for the calling party. Related command: timer and em-signal.
Example
# Set the maximum hold time for delay on line 1/0/0 to 3000ms.
[Router-voice-line1/0/0] delay hold 3000
1.1.25 description (in Voice Entity View)

Syntax
View
Voice entity view
Parameter
string: Voice entity description string, with length ranging from 1 to 255 characters.
Description
Use the description command to configure a voice entity description string. Use the undo description command to delete the voice entity description string. You can make a description of the voice entity by using the description command. This operation will not affect the performance of interfaces at all. You can view its information when executing the display command.
Example
# Identify voice entity 10 with local-entity 10.
[3Com-voice-dial-entity10] description local-entity10
1.1.26 description (in Voice Subscriber-Line View)

Syntax
View
Parameter
string: Subscriber-line description character string, and its value range is 1 to 255 characters.
Description
Use the description command to configure a subscriber-line description character string. Use the undo description command to cancel the subscriber-line description of character string. This command is applicable to FXO, FXS, analog E&M subscriber-lines and digital E1 voice subscriber-line. With the description command, make a description of the voice subscriber-line connection. This operation will not have any influence on the subscriber-line running, only when the display command is being executed will the configuration information be seen.
Example
# Identify subscriber line 1/0/0 as connected to lab_1.
[Router-voice-line1/0/0] description lab_1
1.1.27 dial-prefix
Syntax
dial-prefix string undo dial-prefix
View
Voice entity view
Parameter
string: Prefix code, a number of fixed lengths. The string is composed of any characters from 0123456789,ABCD#*, with the largest length of 31 characters. The meanings of the characters are shown in the following table. Table 1-12 Meanings of the characters in string Character 0-9 ABCD , # and * Means Numbers from 0 to 9. Each means a digit. Each character means a digit. Pause of 500ms. It can be placed on any position of the number. Valid digits.
Description
Use the dial-prefix command to configure the prefix of the telephone number dialed by the voice entity. Use the undo dial-prefix command to cancel the prefix of the telephone number dialed by the voice entity. This command only applies to the configuration of POTS voice entity. And the dial-prefix command only applies to FXO and analog E&M interface. Whether to send a second stage dialing tone is determined by the configuration of the PBX connected to the router. When a router with which a voice function is configured receives a voice call, it makes a comparison between the number configured in the match-template of its own POTS voice entity and the number received, and selects one POTS voice entity to continue the call processing. If send-number is set to its default value (truncate), the router will remove from the called number the string that matches the match-template beginning from the left. If the dial-prefix command is configured, the prefix will be added in front of the rest of the called number. The router will initiate a call according to the new string. For example, supposing that the called number is 0102222, the called number template of the voice entity that is configured by match-template is 010., and the dial prefix is 0, then 010 that accurately matches the template will be removed, and the rest part 2222 will be added a prefix 0. The router initiates a call to the new number 02222. If the number with the added prefix contains more than 31 digits, only the first 31 characters will be sent. Related command: match-template and send-number. The router will remove the string of the called number that matches the match-template starting from the left. If a dial-prefix is configured, the prefix will be added before the remaining number string, and the router will make a call according to the new string generated. Suppose the called number is 0102222, the 010 on the left will be deleted because of matching with the match-template. The remaining 2222 will be added with a prefix 0 and will be dialed out again, that is, the number called by the router is 02222. This command is used only for the POTS voice entity configuration. It is valid only for FXO and E&M subscriber-lines. Related command: match-template.
Example
# Use 0 as a prefix.

[Router-voice-dial-entity3] dial-prefix 0
1.1.28 dial-program
Syntax
dial-program
View
Voice view
Parameter
None
Description
Use the dial-program command to enter the voice dial program view. Use the quit command to return to the voice view.
Example
# Enter the dial program view.
[Router-voice] dial-program
1.1.29 display voice call-history-record

Syntax
display voice call-history-record { callednumber number | callingnumber number | cardnumber number | last number | line number | remote-ip-addr address } [ brief ]
View
Any view.
Parameter
callednumber number: Displays the call history of the specified called number. callingnumber number: Displays the call history of the specified calling number. cardnumber number: Displays the call history of the specified card number. last number: Specifies the number of the last call history entries to be displayed. remote-ip-addr address: Displays the call history of the remote IP address. brief: Displays information briefly.
Description
Use the display voice call-history-record command to view call history.
Example
# Display information about the calls on the specified voice subscriber-line.
[Router] display voice call-history-record line 0 Subscriber-line 0 type FXS POTS , Line state is opened start outgoing call 72 times, 48 success receive incoming call 9 times, 6 success the latest 10 called number is: %1% called number 900 %2% called number 900 %3% called number 900 %4% called number 900 %5% called number 17912 %6% called number 17920 %7% called number 17920 %8% called number 17920 %9% called number 2186 %10% called number 2526
1.1.30 display voice call-info

Syntax
display voice call-info { brief | detail | mark TAG }
View
Any view
Parameter
brief: Display the call information table in brief. detail: Display the call information table in detail. mark: Display the marked call information table. TAG: Tag in the call information table, ranging from 1 to 128.
Description
Use the display voice call-info command to view the call information table, including: channel number of the call, reference counter of all voice modules, module ID in use, list of
the voice entities that can be selected by the current call, and the voice entity used by the current call.
Example
# Display the call information table of a certain time in brief:
[3Com] display voice call-info brief The information table for current calls in brief # # CALL ( 0): Channel Module ID End <--> 0 <--> RCV VAS VPP
# Display the call information table of a certain time in detail:

[3Com] display voice call-info detail The information table for current calls in detail # **************** CALL 0 *************** Channel number : 0
Reference counter : 4 Module check ID RCV VCC IPP : VPP
Current used voice entity: 180 Voice entities are offered: 196 284 100 # **************** CALL 1 *************** Channel number : 1 132 188 124 180
Reference counter : 5 Module check ID RCV VAS VCC : IPP VPP
Current used voice entity : 196 Voice entities are offered : 196 284 # End 132 124
1.1.31 display voice default

Syntax
display voice default all
View
Any view
Parameter
None
Description
Use the display voice default command to view the current default values and the system-fixed default values. This command can be used to display the current default values and system-fixed default values for voice and fax. If both the current default setting and the system-fixed default setting are to truncate called numbers, the carrier transmission energy level of GW defaults to 15 (the system-fixed default value is 10) and so on.
Example
# Display the current default values and the system-default default values.
[Router] display voice default all default entity fax ecm off(system: off) default entity fax protocol t38(system: t38) default entity fax protocol t38 hb-redundancy 0(system: 0) default entity fax protocol t38 lb-redundancy 0(system: 0) default entity fax level 15(system: 15) default entity fax local-train threshold 10(system: 10) default entity fax baudrate voice(system: voice) default entity fax nsf-on off(system: off) default entity fax support-mode rtp(system: rtp) default entity fax train-mode ppp(system: ppp) default entity compression 1st-level g729r8(system: g729r8) default entity compression 2nd-level g711alaw(system: g711alaw) default entity compression 3rd-level g711ulaw(system: g711ulaw) default entity compression 4th-level g723r53(system: g723r53) default entity vad-on off(system: off) default entity payload-size g711 20(system: 20)
default entity payload-size g723 30(system: 30) default entity payload-size g726r16 30(system: 30) default entity payload-size g726r24 30(system: 30) default entity payload-size g726r32 30(system: 30) default entity payload-size g726r40 30(system: 30) default entity payload-size g729 30(system: 30)
1.1.32 display voice entity

Syntax
display voice entity { all | pots | voip | mark entity-number }
View
Any view
Parameter
all: All voice entities. pots: All POTS voice entities. voip: All VoIP voice entities. mark: Displays a voice entity. entity-number: Tag of the voice entity that is to be displayed, ranging from 1 to 2147483647.
Description
Use the display voice entity command to view the configuration information of voice entities of different types. Usually, you can view the information of all the interfaces that are active in the router and the global configuration by executing the display current-configuration command. But it will display a great deal of information. So if you just want to view the configuration information of voice entities, you can use the display voice entity command.
Example
# Display the configuration information of POTS voice entities.
[3Com] display voice entity pots Current configuration of entities ! entity 66 pots match-template 6600.. shutdown

compression 1st-level g711alaw dial-prefix 6600 line 6 ! entity 67 pots match-template 6600.. shutdown compression 1st-level g711alaw dial-prefix 6600 line 7 ! End
1.1.33 display voice number-substitute

Syntax
display voice number-substitute [ list-number ]
View
Any view
Parameter
list-number: Serial number of the number-substitute list, ranging from 1 to 2147483647.
Description
Use the display voice number-substitute command to view the configuration information of number-substitute lists. It can display the information of a certain list and all the lists. Related command: number-substitute.
Example
# Display all the configured number-substitute lists.
[3Com] display voice number-substitute Current configuration of number-substitute ! ************ NUMBER-SUBSTITUTE 1 ************ First-rule : 1 Dot-match rule 1 Input-format : 102331 : end-only

Output-format : 3132190132 rule 2 Input-format : 10102
Output-format : 31321901321 ! ************ NUMBER-SUBSTITUTE 2 ************ First-rule : 2 Dot-match rule 1 Input-format : 1123 : left-right
Output-format : 3456 rule 3 Input-format : 145
Output-format : 5456 ! End
1.1.34 display voice rcv ccb

Syntax
display voice rcv ccb
View
Any view
Parameter
None
Description
Use the display voice rcv ccb command to view the information related to the call control block in the RCV module. This command is used to display the information related to the incoming and outgoing call control block, the connection status of modules, the caller status, the caller numbers and the called numbers, etc.
Example
# Display the information related to the call control block in the RCV module.
[Router] display voice rcv ccb RCV : CCB [ 1 ]

{ CallID CallState IppID IppState CcID CcState VasID CallType CallAttribute CallSignaling EncodeType E1Slot E1Port TimeSlot ChannelID VpuState IppTimer CcTimer VpuTimer CcChanMsg E1ChanMsg CallerNumber CalledNumber prev next } RCV { CallID CallState IppID IppState CcID CcState VasID CallType CallAttribute CallSignaling : : : : : : : : : : 0x0042 TALK 0x004e IPPS_CONNECTED 0xffff CCS_CONNECTED 0x0039 INCOMING 0x00000000 0x00000004 : CCB [ 2 ] : : : : : : : : : : : : : : : : : : : : : : : : : 0x0043 TALK 0x004f IPPS_CONNECTED 0xffff CCS_CONNECTED 0xffff OUTGOING 0x00000000 0x00000002 0x0000001f 0xffffffff 0xffffffff 0xffffffff 0x00000003 VS_CONNECTED 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 111 660010 0x00000000 0x01409500

EncodeType E1Slot E1Port TimeSlot ChannelID VpuState IppTimer CcTimer VpuTimer CcChanMsg E1ChanMsg CallerNumber CalledNumber prev next } : : : : : : : : : : : : : : : 0x00000009 0xffffffff 0xffffffff 0xffffffff 0x00000000 VS_CONNECTED 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 111 660010 0x01409000 0x00000000
Table 1-13 Description on call control block in RCV module Field CCB [ ] CallID IppID IppState CcID CcState VasID CallType CallAttribute CallSignaling EncodeType E1Slot E1Port TimeSlot ChannelID VpuState Description Index of call control block Flag or Identifier of the calling Index of IPP module in calling period Status of IPP module in calling period Index of CC module in calling period Status of CC module in calling period Index of VAS module in calling period Type of the calling Attribute of the calling Signaling of the calling Voice compression method of the calling Number of slot where E1V1 board is located for the calling Number of CE1/PRI interface for the calling Timeslot on the E1 of the calling Identifier of logic channel of the calling Status of VPU of the calling
Field IppTimer CcTimer VpuTimer CcChanMsg E1ChanMsg CallerNumber CalledNumber prev next
Description Timer of IPP module in calling period Timer of CC module in calling period Timer of VPU module in calling period Pointer of CC channel message in calling period Pointer of E1VI channel message in calling period Calling number of the calling Called number of the calling Previous RCV call control block Next RCV call control block
1.1.35 display voice rcv statistic

Syntax
display voice rcv statistic { all | call | cc | error | ipp | proc | r2 | timer | vas | vcc | vpp }
View
Any view
Parameter
all: Display all the statistics information of the RCV module. call: Display the calling statistics information in the RCV module. cc: Display all the statistic information between the RCV module and the underlying CC module. error: Display all the statistic information on the failure of connection caused by the RCV module. ipp: Display all the statistic information between the RCV module and the upper layer IPP module. proc: Display the statistic information on the number of times of the execution of various functions in the RCV module. r2: Display the calling statistics information in the R2 module. timer: Display all the statistic information on the timer operation in the RCV module.
vas: Display all the statistic information between the RCV module and the underlying VAS module. vcc: Display the calling statistics information in the VCC module. vpp: Display all the statistic information between the RCV module and the underlying VPP module.
Description
Use the display voice rcv statistic command to view the statistics information of calling between the RCV module and the CC module, VAS module, and so on.
Example
# Display the statistics information of calling between the RCV module and other modules.
[Router] display voice rcv statistic call Statistic about RCV calls : { RCV_CC_ACTIVE_CALL RCV_CC_ACTIVE_CALL_SUCCEEDED RCV_CC_ACTIVE_CALL_FAILED RCV_CC_PASSIVE_CALL RCV_CC_PASSIVE_CALL_SUCCEEDED RCV_CC_PASSIVE_CALL_FAILED RCV_R2_ACTIVE_CALL RCV_R2_ACTIVE_CALL_SUCCEEDED RCV_R2_ACTIVE_CALL_FAILED RCV_R2_PASSIVE_CALL RCV_R2_PASSIVE_CALL_SUCCEEDED RCV_R2_PASSIVE_CALL_FAILED RCV_VAS_ACTIVE_CALL RCV_VAS_ACTIVE_CALL_SUCCEEDED RCV_VAS_ACTIVE_CALL_FAILED RCV_VAS_PASSIVE_CALL RCV_VAS_PASSIVE_CALL_SUCCEEDED RCV_VAS_PASSIVE_CALL_FAILED } : : : : : : : : : : : : : : : : : : 0 0 0 0 0 0 5 2 3 4 1 3 39 11 28 18 15 3
Table 1-14 Description on call statistics about RCV module and other module Field RCV_CC_ACTIVE_CALL Description Number of active call between self and CC module
Field RCV_CC_ACTIVE_CALL_S UCCEEDED RCV_CC_ACTIVE_CALL_F AILED RCV_CC_PASSIVE_CALL RCV_CC_PASSIVE_CALL_ SUCCEEDED RCV_CC_PASSIVE_CALL_ FAILED RCV_R2_ACTIVE_CALL RCV_R2_ACTIVE_CALL_S UCCEEDED RCV_R2_ACTIVE_CALL_F AILED RCV_R2_PASSIVE_CALL RCV_R2_PASSIVE_CALL_ SUCCEEDED RCV_R2_PASSIVE_CALL_ FAILED RCV_VAS_ACTIVE_CALL RCV_VAS_ACTIVE_CALL_ SUCCEEDED RCV_VAS_ACTIVE_CALL_ FAILED RCV_VAS_PASSIVE_CALL RCV_VAS_PASSIVE_CALL _SUCCEEDED RCV_VAS_PASSIVE_CALL _FAILED
Description Successful number of active call between self and CC module Failing number of active call between self and CC module Number of passive call between self and CC module Successful number of passive call between self and CC module Failing number of passive call between self and CC module Number of active call between self and R2 module Successful number of active call between self and R2 module Failing number of active call between self and R2 module Number of passive call between self and R2 module Successful number of passive call between self and R2 module Failing number of passive call between self and R2 module Number of active call between self and VAS module Successful number of active call between self and VAS module Failing number of active call between self and VAS module Number of passive call between self and VAS module Successful number of passive call between self and VAS module Failing number of passive call between self and VAS module
1.1.36 display voice sip register-state

Syntax
display voice sip register-state
View
Any view
Parameter
None
Description
Use the display voice sip register-state command to view the registration state about the SIP user agents (UAs).
Example
# Display the registration state about the SIP UAs.
<Router> display voice sip register-state
[ SIP-REG Information ] +-------------------------------------------------+
[RegFlag] [IPAddr] [Port]
-> SIP_REGISTER_FAILURE -> 192.168.80.50 -> 5060
Current SIP Server IPAddr = [192.168.80.50], Port = [5060]
1.1.37 display voice subscriber-line

Syntax
display voice subscriber-line line-number
View
Any view
Parameter
line-number: Subscriber line number.
Description
Use the display voice subscriber-line command to view the configuration information about the type, status, codec mode, input gain and output attenuation of the subscriber line. Related command: subscriber-line.
Example
# Display the configuration information about the subscriber line.
[Router] display voice subscriber-line 0 Current information --- line: 0 , type: LINE FXO , state: opened Status information (Voice channel) : CH_IDLE Use as coding protocol, use as decoding protocol , DNIS (called-number) , direction NULL
Current ANI (calling-number)
Current call-ID is 0 call-reference is 0 Voice Comfort-noice is enabled, current reset 0 times
Current echo cancel reference delay value : 32 ms Foreign Exchange Station Slot is 0, Port is 0
cid receive function is enabled cid display function is enabled Current line State : UP Receive Gain vlaue : 0 Transmit Gain vlaue : 0 Echo Cancellation is enable First-dial timer is 10 s Dial-interval Timer is : 10 s
Ring-back timer is 60 s Wait-digit timer is 5 s Pre-dial delay time 1 s DTMF digit duration 120 ms Interdigit duration 120 ms
Table 1-15 Description on voice subscriber-line configuration Field line type state Status information Use as coding protocol use as protocol Current ANI decoding Description Index of voice subscriber-line Type of voice subscriber-line Status of voice subscriber-line Calling status of voice subscriber-line Voice compression method of voice subscriber-line Voice decompression method of voice subscriber-line Calling number of current call
Field Current DNIS Current direction Current call-ID Current call-reference Comfort-noise reset times echo cancel delay FXO Slot FXO Port cid receive function cid display function Current line State Receive Gain value Transmit Gain value Echo Cancellation First-dial timer Dial-interval Timer Ringing Time Out Wait-digit Time Out Pre-dial delay time DTMF digit duration Interdigit duration
Description Called number of current call Direction of current call Identifier of current call Call reference of current call Comfort noise configuration on the voice subscriber-line Reset times of the board where voice subscriber-line is located Time of echo cancel on the voice subscriber-line Slot number of the voice subscriber-line Port number of the voice subscriber-line Receive calling numbers about CID function Display calling number about CID function Status of voice subscriber-line( UP or DOWN) Input gain of the voice subscriber-line Output gain of the voice subscriber-line Echo cancel function of the voice subscriber-line Timeout of dialing subscriber-line the first number on local
Interval timeout of dialing on local subscriber-line Timeout of sending subscriber-line ringing back signal on
Timeout of wait digit dialed by user for subscriber-line Delay time of pre-dial on subscriber-line Duration time of DTMF number on subscriber-line Interval time of DTMF number on subscriber-line
1.1.38 display voice voip data-statistic

Syntax
display voice voip data-statistic { brief | channel channel-number ] | detail }
View
Any view
Parameter
channel channel-number: Display statistics information of voice data on specified channel, channel-number is the logical channel number of voice, which accumulates from 0. The channel for 2VI and 4VI modularized card is numbered first and then E1V1 modularized card. detail: Display detailed information of logical channel of voice.
Description
Use the display voice voip data-statistic command to view statistics information of voice data. This command is used to display the following information: time for successfully searching the voice table, total number of received data packets, time for searching the table in fast and common modes and voice and fax of receive and transmit channels etc. Used with the detail parameter, this command displays detailed information of receive and send channels (including detailed input/output statistics and jitter Buffer of information packets). Related command: vqa data-statistic and reset voice voip data-statistic.
Example
# Display the statistics information of voice data.
[Router] display voice voip data-statistic === VoIP datagram summary === -------------------------------------------------------------------[NET] SearchVoiceTableSuccess [NET] ReceiveDatagramTotal [NET] FastSearchTableTimes [NET] NormalSearchTableTimes : 0 : 0 : 0 : 0
------------------------ Receive channel: 000 ---------------------[NET] ReceiveDatagramTotal [COM] DiscardDatagramTotal [NET] ReceiveRtpDatagram [NET] ReceiveRtcpDatagram [COM] AddReceiveTable [COM] ClearReceiveTable [COM] FreeReceiveBuffer [COM] TrsmitDone : 0 : 0 : 0 : 0 : 3 : 0 : 0 : 462

VOICE DATA INFORMATION: [NET] ReceiveDataTotal [NET] NormalProcessData FAX DATA INFORMATION: [NET] ReceiveDataTotal [NET] NormalProcessData -----------------------COMMON INFORMATION: [VPP] LinkReceiveDataTotal [VPP] LinkReceiveEmptyData [COM] AddTableTimes [COM] ClearTableTimes VOICE DATA INFORMATION: [FSD] FSSend_ReceiveDataTotal [COM] DiscardDataTotal [NET] NormalSendDataTotal [NET] SendToIPDataTotal [LOC] SendToLocalDataTotal FAX DATA INFORMATION: [FSD] FSSend_RcvFaxDataTotal [FDF] DiscardDataTotal [NET] SendToIPDataTotal [LOC] SendToLocalDataTotal
: 0 : 0
: 0 : 0 Send channel: 000 ----------------------
: 484 : 0 : 0 : 0
: 483 : 0 : 0 : 0 : 484
: 0 : 0 : 0 : 0
Table 1-16 Description on statistics information of voice data Field SearchVoiceTableSuccess ReceiveDatagramTotal(sum mary) FastSearchTableTimes NormalSearchTableTimes ReceiveDatagramTotal(chan nel) DiscardDatagramTotal ReceiveRtpDatagram ReceiveRtcpDatagram AddReceiveTable Description Successful times of searching voice table Number of total packets received Times of fast searching voice table Times of normal searching voice table Number of total packets received in channel Number of total packets dropped in channel Number of total RTP packets received in channel Number of total RTCP packets received in channel Times of adding receiving table
Field ClearReceiveTable FreeReceiveBuffer TrsmitDone ReceiveDataTotal(voice) NormalProcessData(voice) ReceiveDataTotal(fax) NormalProcessData(fax) LinkReceiveDataTotal LinkReceiveEmptyData AddTableTimes ClearTableTimes FSSend_ReceiveDataTotal(v oice) DiscardDataTotal(voice) NormalSendDataTotal SendToIPDataTotal(voice) SendToLocalDataTotal(voice ) FSSend_ReceiveDataTotal(f ax) DiscardDataTotal(fax) SendToIPDataTotal(fax) SendToLocalDataTotal(fax)
Description Times of resetting receiving table Times of clearing buffer on board Times of freeing transmit buffer Number of total data received in channel Number of total data processed normally in channel Number of total fax data received in channel Number of total fax data processed normally in channel Number of total local data received in channel Number of total null local data received in channel Times of adding sending table Times of resetting sending table Number of total data fast received or sent Number of total data dropped Number of total data sent normally Number of total data sent to IP side Number of total data sent to local side Number of total fax data fast received or sent Number of total fax data droped Number of total fax data sent to IP side Number of total fax data sent to local side
1.1.39 display voice vpp

Syntax
display voice vpp [ channel channel-number ]
View
Any view
Parameter
channel-number: Voice channel number.
Description
Use the display voice vpp command to view all the statistic information in the VPP module. This command is used to display the number of times of correct and incorrect connection, the number of times of correct and incorrect disconnection, the number of times of correct and incorrect code data receiving, the number of times of correct and incorrect code data transmission, the number of times of correct and incorrect IPP data receiving, the number of times of correct and incorrect IPP data transmission, the total number of bytes of code data received, and the total number of bytes of IPP data received in various voice channels.
Example
# Display all the statistic information in the VPP module.
[Router] display voice vpp channel 0 Channel = 0 Status = CH_IDLE = 0 = 0 ConnectWrongTimes DisConnectWrongTimes = 0 = 0
ConnectRightTimes DisConnectRightTimes
RecvCodecmDataRightTimes = 0 SendCodecmDataRightTimes = 0 RecvIppDataRightTimes SendIppDataRightTimes RecvCodecmDataBytes = 0 = 0 = 0
RecvCodecmDataWrongTimes = 0
RecvIppDataWrongTimes SendIppDataWrongTimes RecvIppDataBytes
= 0 = 0 = 0
TimeJitterLess10msTimes = 0 TimeJitterLess30msTimes = 0 TimeJitterLess50msTimes = 0 TimeJitterLess70msTimes = 0 TimeJitterLess90msTimes = 0 TimeJitterLess110msTimes = 0
TimeJitterLess20msTimes = 0 TimeJitterLess40msTimes = 0 TimeJitterLess60msTimes = 0 TimeJitterLess80msTimes = 0 TimeJitterLess100msTimes = 0
RecvIppDataSeqHopeTimes = 0 RecvIppDataRecvSeqLessTimes = 0
RecvIppDataDisorderTimes = 0 RecvIppDataSeqMoreTimes = 0

ulSendNoBDTimes = 0

ulRecvExpirePacketTimes = 0
ulRecvDuplicatePacketTimes = 0 ulJitterBufferOverFlowTimes2= 0 ulSendDSPVOIPPacket ulCorputTimes = 0 = 0
ulJitterBufferOverFlowTimes1 = 0 ulEmptyPacketTimes ulSendDSPFOIPPacket = 0 = 0
Table 1-17 Description of statistics information in VPP module Field ConnectRightTimes ConnectWrongTimes DisConnectRightTimes DisConnectWrongTimes RecvCodecmDataRightTimes RecvCodecmDataWrongTimes SendCodecmDataRightTimes RecvIppDataRightTimes RecvIppDataWrongTimes SendIppDataRightTimes SendIppDataWrongTimes RecvCodecmDataBytes RecvIppDataBytes TimeJitterLess(10-110)msTimes RecvIppDataSeqHopeTimes RecvIppDataDisorderTimes RecvIppDataRecvSeqLessTimes RecvIppDataSeqMoreTimes ulSendNoBDTimes ulRecvExpirePacketTimes Description Times of connecting correctly Times of connecting wrongly Times of disconnecting correctly Times of disconnecting wrongly Times of receiving compression/decompression data correctly Times of receiving compression/decompression data wrongly Times of sending compression/decompression data correctly Times of receiving IPP data correctly Times of receiving IPP data wrongly Times of sending IPP data correctly Times of sending IPP data wrongly Number of bytes of compression/decompression data receiving
Number of bytes of receiving IPP data Statistics of Jitter time of receiving IPP data Times of receiving IPP data whose sequence is accordant with expectation Times of receiving IPP data which is out of order Times of receiving IPP data whose sequence is less than expectation Times of receiving IPP data whose sequence is larger than expectation Times of sending data without buffer Times of receiving expired packets
Field ulRecvDuplicatePacketTimes ulJitterBufferOverFlowTimes1 ulJitterBufferOverFlowTimes2 ulEmptyPacketTimes ulSendDSPVOIPPacket ulSendDSPFOIPPacket ulCorputTimes
Description Times of receiving duplicate packets Times 1 of JitterBuffer overflows Times 2 of JitterBuffer overflows Times of empty packets Number of voice packets sending to DSP Number of fax packets sending to DSP Times of collision in JitterBuffer
1.1.40 dot-match
Syntax
dot-match { end-only | left-right | right-left } undo dot-match
View
Voice number-substitute view
Parameter
end-only: Reserve the digits that correspond to all the dots . at the end of the number input format. left-right: Reserve from left to right the digits that correspond to the dots in the number input format. right-left: Reserve from right to left the digits that correspond to the dots in the number input format.
Description
Use the dot-match command to configure dot match rules of the number-substitute rules. Use the undo dot-match command to restore the default value. The configuration of this command only applies to the rules of the number-substitute list in the current view. By default, the dot match rule is set to end-only. According to the configuration of the dot-match command, the dots can be reserved by quantity and position of the dots configured in output format of the number-substitute rules,. There are three dot match modes in the number-substitute rules.
Reserve the digits that correspond to all the dots at the end of the number input format. It is the default mode. Reserve from left to right the digits that correspond to the dots in the number input format. Reserve from right to left the digits that correspond to the dots in the number input format. The dots . here are virtual match digits. Virtual match digits are the digits that match the variable part (such as + % ! []) in an expression. For example, when 1255 is matched with 1[234]55, the virtual match digit is 2; when it is matched with 125+, the virtual match digits are 55; when it is matched with 1..5, the virtual match digits are 25. Related command: rule.
Example
# Set the dot match rule of the number-substitute list 20 to right-left.
[3Com-voice-dial] number-substitute 20 [3Com-voice-dial-substitute20] dot-match right-left
1.1.41 dscp
Syntax
dscp media dscp-value undo dscp media
View
Voice entity view
Parameter
dscp-value: DSCP value in the range 0 to 63 or the keyword ef, af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, cs1, cs2, cs3, cs4, cs5, cs7, or default.
Description
Use the dscp media command to set the DSCP value in the ToS field in the IP packets that carry the RTP stream of the voice entity. Use the undo dscp media command to restore the default DSCP. The function of this command is the same as that of the vqa dscp command.
Example
# Set the DSCP value in the ToS field in the IP packets that carry the RTP stream of VoIP voice entity 2 to af41.
[Router-voice-dial] entity 2 voip [Router-voice-dial-entity2] dscp media af41
1.1.42 dtmf threshold

Syntax
dtmf threshold { analogue index value1 | digital value2 } undo dtmf threshold { analogue | digital } index
View
Parameter
analogue: Sets an analog voice subscriber-line. digital: Sets a digital voice subscriber-line. index: Index number corresponding to the threshold, an integer in the range 0 to 12. value1: Specifies the threshold corresponding to the specified index. value2: Takes 0 or 1 to set DTMF digit detection to insensitivity or sensitivity. On an E1 voice subscriber-line, DTMF digit detection defaults to 1. The following table provides the description on the index numbers. Table 1-18 Description on the index numbers Index numbers Indicates The lower threshold of ROWMAX plus COLMAX. The input signal which is otherwise regarded too weak is recognized as a DTMF digit when ROWMAX + COLMAX) > 0. The threshold is an integer in the range 0 to 5000 and defaults to 1400. A higher threshold means increased detection reliability but decreased sensitivity.
Index numbers
Indicates The upper threshold of the maximum value of ROWMAX or COLMAX, whichever is larger. This threshold is used for detecting the inter-digit delay. A detected digit is regarded ended only when max (ROWMAX, COLMAX) < 1. The threshold is an integer in the range 0 to 5000 and defaults to 458. A smaller value means increased detection reliability but decreased sensitivity. The lower threshold of COLMAX / ROWMAX , where ROWMAX < COLMAX. A DTMF digit is regarded ideal when COLMAX ROWMAX, because the difference between the two values is small then. An input signal is recognized as a DTMF digit only when (COLMAX / ROWMAX) > 2. The threshold is an integer in the range -18 to -3 dB and defaults to -9 dB. A higher value means increased detection reliability but decreased sensitivity. The lower threshold of ROWMAX / COLMAX when COLMAX >= ROWMAX. The function of this parameter is similar to that of index 2, except that they are in reverse. The ratio must be greater than this threshold for the input signal to be recognized as a DTMF digit. The threshold is an integer in the range -18 to -3 dB and defaults to -9 dB. A higher value means increased detection reliability but decreased sensitivity. The upper threshold of the ratio of the second largest energy level from the row frequency group to ROWMAX. The ratio must be lower than this threshold for the input signal to be recognized as a DTMF digit. The threshold is an integer in the range -18 to -3 dB and defaults to -9 dB. A smaller value means increased detection reliability but decreased sensitivity. The upper threshold of the ratio of the second largest energy level from the column frequency group to COLMAX. The ratio must be lower than this threshold for the input signal to be recognized as a DTMF digit. The threshold is an integer in the range -18 to -3 dB and defaults to -9 dB. A smaller value means increased detection reliability but decreased sensitivity. The upper threshold of ROW2nd / ROWMAX. An input signal is recognized as a DTMF digit only when ROW2nd / ROWMAX < 6.
The threshold is an integer in the range -18 to -3 dB and defaults to -3 dB. A smaller value means increased detection reliability but decreased sensitivity.
Index numbers
Indicates The upper threshold of COL2nd / COLMAX. The ratio must be lower than this threshold for the input signal to be recognized as a DTMF digit. The threshold is an integer in the range -18 to -3 dB and defaults to -12 dB. A smaller value means increased detection reliability but decreased sensitivity. The upper threshold of the ratio of the maximum value of the larger energy level among two extra specified frequency points to max (ROWMAX, COLMAX). The ratio must be greater than this threshold for the input signal to be recognized as a DTMF digit. The threshold is an integer in the range -18 to -3 dB and defaults to -12 dB. A smaller value means increased detection reliability but decreased sensitivity. The lower threshold of the DTMF signal duration. The duration of DTMF key tone must be larger than this threshold for the input signal to be recognized as a DTMF digit. The threshold is in the range 30 to 150 milliseconds and defaults to 30 milliseconds. A greater value means increased detection reliability but decreased sensitivity. The frequency of the first extra frequency point specified for detection. It is an integer in the range 300 to 3400 Hz and defaults to 300 Hz. In addition, it must be a value beyond the row and column frequency groups. The frequency of the second extra frequency point specified for detection. It is an integer in the range 300 to 3400 Hz and defaults to 3200 Hz. In addition, it must be a value beyond the row and column frequency groups. The lower threshold of the amplitude of the input signal. The average amplitude must be greater than this threshold for the input signal to be recognized as a DTMF digit.
10
11
12
This threshold is an integer in the range 0 to 700 and defaults to 375. A greater value means increased detection reliability but decreased sensitivity. This parameter is a time domain threshold, which is specified to prevent the noise with small amplitude from being detected.
Description
Use the dtmf threshold command to configure the sensitivity of DTMF digit detection. Use the undo dtmf threshold command to restore the default.
The dtmf threshold command issues the thresholds for DTMF dial tone detection to the underlying layer DSP for the purpose of tuning detection sensitivity and reliability of the device. Inside the DSP, a set of generic default values have been configured. They are 1400, 458, -9, -9, -9, -9, -3, -12, -12, 30, 300, 3200, 375, with their index being 0 through 12. Professionals can use this command to adjust the device when DTMF digit detection fails. In normal cases, the defaults are adequate. When the value2 argument is set to 0 or DTMF digit detection to insensitivity, the neglect probability is decreasing and the detection error probability is increasing as the DTMF digit collection tolerance becomes larger. DTMF digit detection is implemented by calculating the spectrum of the input voice signal. Its spectrum shape is restricted to the configured thresholds. A DTMF dial tone is regarded valid only when all the constraints are met. To understand this, you must be aware of DTMF dial tone, as shown in the following figure:
Figure 1-1 Spectrum of keys The tone of each telephone digit is composed of two single-frequency tones. For example, the tone of the digit 1 is compounded by two sine wave signal tones of 697 Hz and 1209 Hz. A valid key tone must last at least 45 milliseconds and have an inter-digit delay of 23 milliseconds. Refer to ITU-T Q.24 recommendation for full information.
Figure 1-2 Spectrum of key 1 Figure 1-2 illustrates the spectrum of key 1. Compared with other frequency points, the energy levels at frequency points of 697 Hz and 1209 Hz are relatively greater. The underlying layer DSP regards the frequencies of 1209 Hz, 1336 Hz, 1477 Hz, and 1633 Hz as column frequency group and the frequencies of 697 Hz, 770 Hz, 852 Hz, and 941Hz as row frequency group. Each DTMF key tone is composed of one column frequency and one row frequency. The DSP module determines whether the input voice signal is a valid DTMF digit by its energy at the above eight frequencies and their double frequencies. The maximum energy in the row frequency group is ROWMAX, its double energy is ROW2nd; the maximum energy in the column frequency group is COLMAX and its double energy is COL2nd.
Example
# Set DTMF threshold 9 in voice subscriber-line view.
[Router-voice-line0/0/0] dtmf threshold analogue 9 30
# Restore the default of DTMF threshold 9 in voice subscriber-line view.

[Router-voice-line0/0/0] undo dtmf threshold analog 9
1.1.43 echo-canceller
Syntax
echo-canceller { enable | tail-length milliseconds | parameter { convergence-rate value | max-amplitude value | mix-proportion-ratio value | talk-threshold value } } undo echo-canceller { enable | tail-length }
View
Parameter
enable: Enables echo-cancellation function. tail-length milliseconds: Adjusts echo-cancellation duration, in the range 0 to 64 milliseconds. parameter: sets echo-cancellation parameters. convergence-rate value: Sets the convergence rate of comfort noise. It defaults to 255. max-amplitude value: Sets maximum amplitude of comfort noise. It defaults to 256. mix-proportion-ratio value: Sets comfort noise mixture proportion control factor. It defaults to 100. talk-threshold value: Sets the threshold of simultaneous talks. It defaults to 1.
Description
Use the echo-canceller command to configure echo-cancellation parameters. Use the undo echo-canceller command to remove the configuration. By default, the echo-cancellation function is enabled and duration is 32 ms. This command is applicable to FXO, FXS, analog E&M subscriber-lines and digital E1 voice subscriber-line. If a too large time value is set, the converge time of the echo canceling on the network will become longer, so when the connection has just been established, the user may hear the echo; and if the time value is set as too small, the user may also hear part of the echo, because the relatively longer echo has not been completely cancelled. There are no echo and echo-cancel on the IP side.
Note: The echo-canceller enable command must be used in pair with the echo-canceller tail-length command.
Related command: subscriber-line.
Example
# Set the echo-cancel sampling time as 24 ms on subscriber line 1/0/0.
[Router-voice-line1/0/0] echo-canceller enable [Router-voice-line1/0/0] echo-canceller tail-length 24
1.1.44 em-phy-parm
Syntax
em-phy-parm { 2-wire | 4-wire } undo em-phy-parm { 2-wire | 4-wire }
View
Parameter
2-wire: Choose the 2-wire analog E&M wire scheme. 4-wire: Choose the 4-wire analog E&M wire scheme.
Description
Use the em-phy-parm command to configure a wire scheme for the analog E&M subscriber-line. Use the undo em-phy-parm command to cancel an existing wire selection scheme. By default, the 4-wire analog E&M wire scheme is selected. This command is only applicable to analog E&M subscriber-line. When analog E&M is used in PBX communication, its voice uses two or four wires, plus two or four signaling wires. So, a 4-wire analog E&M actually has at least six wires. 2-wire mode provides full-duplex voice transmission, in which voice is transmitted between two wires in both directions. 4-wire mode resembles the simplex mode. Every two wires are responsible for voice transmission in one direction. This command is used for the wire match between the voice router and remote end equipment connected with it. It has influence on voice transmission only and has nothing to do with signaling.
Example
# Choose the 4-wire scheme for the analog E&M subscriber-line.
[Router-voice-line1/0/0] em-phy-parm 4-wire
1.1.45 em-signal
Syntax
em-signal { delay | immediate | wink } undo em-signal { delay | immediate | wink }
View
Parameter
wink: Wink start mode. The caller end hooks off to seize the line through line E, and it has to wait for a wink signal from the remote end before sending out the called number. immediate: Immediate start mode. The caller end hooks off to seize the line through line E and sends the called number. The prerequisite for using the immediate start mode is: The equipment at the remote end should survey the dial signal immediately after identifying the off-hook signal. delay: When using the delay start mode, the calling end occupies the trunk line, and the called end, such as PBX, will also enter the hook-off state to respond the caller till it is ready for receiving the called number.
Description
Use the em-signal command to configure a voice subscriber-line start mode. Use the undo em-signal command to cancel the set voice subscriber-line start mode. By default, analog E&M subscriber-lines select the immediate start mode. This command is only applicable to analog E&M subscriber-line. The start mode used for an analog E&M subscriber-line should be in consistency with the PBX connected with it. When using the immediate start mode, the numbers will not be correctly sent or received due to the signaling type in some PBX, please modify start mode as the wink or delay. Related command: delay.
Example
# Configure the immediate mode for the analog E&M subscriber-line.
[Router-voice-line1/0/0] em-signal immediate
1.1.46 entity
Syntax
entity entity-number { voip | pots } undo entity { entity-number | all | voip | pots }
View
Parameter
entity-number: Identify a voice entity, The value range is from 1 to 2147483647. all: All dial program entities. voip: Key character, indicating that this subscriber-line is a network subscriber-line. pots: Key character, indicating that this subscriber-line is an often used telephone subscriber-line.
Description
Use the entity command to configure a voice entity and enter its view (at the same time specify the working mode related to voice). Use the undo entity command to cancel an existing voice entity. In a global view, use the entity command to enter a Voice entity view, and use quit to return to the dial program view. Related command: line.
Note: The entity-number assigned to a VoIP or POTS entity must be unique among all VoIP and POTS entities.
Example
# Create and enter the Voice entity view to configure a POTS voice entity whose identification is 10.
[Router-voice] dial-program [Router-voice-dial] entity 10 pots
1.1.47 fast-connect
Syntax
fast-connect undo fast-connect
View
Voice entity view
Parameter
None
Description
Use the fast-connect command to enable fast connect. Use the undo fast-connect command to disable fast connect. By default, fast connect is disabled. As there is no ability negotiation for fast connect, the ability confirmation of the two parties is determined by the called gateway. When the router acts as a calling gateway, one can set whether or not to apply fast connect mode for each originated call. If the calling gateway adopts fast connect mode, the called gateway will adopt it, too. Otherwise, neither one will do so. Fast connect procedure will be used when both the calling and called parties support fast connect. Provided that neither the calling nor the called gateway supports fast connect mode, the system will automatically switch to normal connect procedure to resume the call. It is OK to only configure fast-connect command for VoIP voice entity on the calling gateway. Just after successfully enabling the fast connect can the tunnel function be configured. Related command: outband, tunnel-on, voip call-start.
Example
# Enable fast connect for VoIP voice entity 10.
[Router-voice-dial-entity10] fast-connect
1.1.48 first-rule
Syntax
first-rule rule-number
undo first-rule
View
Parameter
rule-number: Serial numbers of the number-substitute rules, ranging from 0 to 127.
Description
Use the first-rule command to configure the number-substitute rule that is first used in the current number-substitute list. Use the undo first-rule command to restore the default number-substitute rule. By default, the configured rule with the smallest serial number is used first. In a voice call, the system first uses the rule that is defined by the first-rule command when it begins to use the number-substitute rules. If this rule fails, it will try all other rules in order, till it finds the one that works or till it confirms all the rules do not work.
Example
# Set rule 4 as the first-used rule in number-substitute list 20.
[3Com-voice-dial] number-substitute 20 [3Com-voice-dial-substitute20] rule 4 663 3 [Router-voice-dial-substitute20] first-rule 4
1.1.49 impedance
Syntax
impedance { country-name | R550 | R600 | R650 | R700 | R750 | R800 | R850 | R900 | R950 } undo impedance
View
Parameter
country-name: Specifies a country so that its impedance standard is used. It can be Australia, Austria, Belgium-Long, Belgium-Short, Brazil, China, Czech-Republic, Denmark, ETSI-Harmanized, Finland, France, German-Swiss, Greece, Hungary, India, Italy, Japan,
Korea, Mexico, Netherlands, Norway, Portugal, Slovakia, Spain, Sweden, U.K., US-Loaded-Line, US-Non-Loaded, or US-Special-Service. R550: 550-ohm real impedance. R600: 600-ohm real impedance. R650: 650-ohm real impedance. R700: 700-ohm real impedance. R750: 750-ohm real impedance. R800: 800-ohm real impedance. R850: 850-ohm real impedance. R900: 900-ohm real impedance. R950: 950-ohm real impedance.
Description
Use the impedance command to configure the current electric impedance on a voice subscriber-line. Use the undo impedance command to restore the default electric impedance on the voice subscriber-line. You can specify an impedance value by specifying the country where the value applies. You may just input the leading letters that uniquely identify the country however. The default electric impedance on the voice line is US.
Example
# Configure the current electric impedance to r600 on voice subscriber-line 1/0/0.
[Router-voice-line1/0/0] impedance r600
1.1.50 ip-precedence
Syntax
ip-precedence priority-number undo ip-precedence
View
Voice entity view
Parameter
priority-number: Priority level of the IP packets that carry voice traffic (UDP), an integer in the range 0 and 7. It defaults to 0.
Description
Use the ip-precedence command to specify the priority level (ToS field) of the IP packets that carry voice traffic related to this voice entity. Use the undo ip-precedence command to restore the default. In the command, when the value of priority-number is between 1 and 5, it indicates that the configuration is set for the IP data flow, and values 6 and 7 mean updating network and backbone routings. For instance, in order to ensure the voice flow related to the voice entity 103 which is of the VolP type, the IP data package priority level is defined as 5, then when an IP call is related to this voice entity 103, the TOS field of the IP header of all the data packages transmitted to the IP network through this voice entity are set as 5. When the network receives these packages that have been set with a recognized priority levels, these packages will be processed before those packages with relatively lower priority levels. Related command: entity.
Example
# Configure the IP data package priority level as 5 for the VoIP voice entity 103.
[Router-voice-dial-entity103] ip-precedence 5
1.1.51 line
Syntax
line line-number undo line
View
Voice entity view
Parameter
line-number: Number of a subscriber line.
Description
Use the line command to associate the voice entity with a specified voice subscriber-line.
Use the undo line command to cancel this association. This command can be used in POTS Voice entity view only. It can take effect only on FXS, FXO, analog E&M, and digital E&M interfaces.
solt 3
solt 2
solt 0
slot 1
line0/0/0 line0/0/1 line0/0/2 line0/0/3
line1/0/0 line1/0/1
Figure 1-3 Number the voice subscriber-lines on voice cards The above figure displays the rear view of a router installed with four voice cards. The first card provides two subscriber lines, while other three provides four subscriber lines each. The voice subscriber-line numbers are set according to the card sequence from the left to the right, and add 1 in order starting from 0.
Example
# Associate voice entity 10 and voice subscriber-line 0/0/0.
[Router-voice-dial-entity10] line 0/0/0
1.1.52 match-template
Syntax
match-template match-string undo match-template
View
Voice entity view
Parameter
match-string: Match template. Its format is [ + ] { string [ T ] [ $ ] | T }, with the largest length of 31 characters. The characters are described in the following. +: Appears at the beginning of a calling number to indicate that the number is E.164-compliant.
$: Is the last character, indicating the end of the number. That means the entire called number must match all the characters before $ in the string. T: Timer. It means the system is waiting the subscriber for dialing any number till: the number length threshold is exceeded; the subscriber inputs the terminator; or the timer expires. It seems to subscribers that T matches any number in any length. string: A string composed of any characters of 0123456789ABCD#*.!+%[]()-. The meanings of the characters are described in the following table: Table 1-19 Meanings of the characters in string Character 0-9 ABCD # and * . Meaning Numbers from 0 to 9. Each means a digit. Each character means a digit. Each means a valid digit. A wildcard. It can match any digit of a valid number. For example, 555. . . . matches any string that begins with 555 and with four additional characters. The character or characters right in front of it does not appear or appears once. For example, 56!1234 can match 51234 and 561234. The character or characters right in front of it appears once or several times. But its appearance at the beginning of the whole number means the number is E.164-compliant. Hyphen. It connects two values (the smaller one before it and the bigger one after it) to indicate a range. For example, 1-9 means numbers from 1 to 9 (inclusive). The character or characters right in front of it does not appear, or appears several times. Select one character from the group. For example, [1-36A] can match only one character among 1, 2, 3, 6, and A. A group of characters. For example, (123A) means a string 123A. It is usually used with !, %, and +. For example, 408(12)+ can match 40812 or 408121212. But it cannot match 408. That is, 12 can appear continuously and it must at least appear once.
% []
()
Note: The character or characters in front of "!, %, and + are not to be matched accurately. They are handled similar to the wildcard .. Moreover, these symbols cannot be used alone. There must be a valid digit or digits in front of them. If you want to use [ ] and ( ) at the same time, you must use them in the format ( [ ] ). Other formats, such as [ [ ] ] and [ ( ) ] are illegal. - can only be used in [ ], and it only connects the same type of characters, such as 0-9. The formats like 0-A are illegal.
Description
Use the match-template command to configure the match template for a voice entity. Use the undo match-template command to delete this configuration. The match template defined by the match-template command can be used to match the number reaching the corresponding voice entity. The voice entity will complete the call if the match is successful. The match template can be defined flexibly. It can not only be a string of a unique number like 01016781234, but also an expression that can match a group of numbers, such as 010[1-5]678. They are used to match the actual numbers in the received call packets to complete the calls.
Note: 3Com Router Software does not check the validity of E.164 numbers. In E1 voice, T, #, and * are not supported currently.
Related command: dial-prefix, subscriber-line, address, and timer.
Example
# Set 5557922 as the telephone number of voice entity 10.
[3Com-voice-dial-entity10] match-template +5557922
# Set 66.... as the match template of voice entity 20.

[3Com-voice-dial-entity20] match-template 66....
# Set the match template for the numbers beginning with 661, 662, 663, and 669, and containing four other digits.
[3Com-voice-dial-entity1] match-template 66[1-3, 9]....
# Set the match template for the numbers beginning with 66 and 6602 and containing four other digits.
[3Com-voice-dial-entity1] match-template 66(02)!....
# Set the match template for the numbers beginning with 66 and within the length of 31 digits.
[3Com-voice-dial-entity1] match-template 66T
# Set the match template for the numbers beginning with any number and within the length of 31 digits.
[3Com-voice-dial-entity1] match-template T
1.1.53 max-call (in Voice Dial Program View)

Syntax
max-call set-number max-number undo max-call { all | set-number }
View
Parameter
set-number: Specify a max-call set. Its value ranges from 1 to 2147483647. You can configure 128 sets at most. max-number: Specify the maximum number of call connections for a max-call set. It ranges from 1 to 120. All: All max-call sets.
Description
Use the max-call command to configure max-call sets (128 sets at most). Use the undo max-call command to delete the specified set or all the max-call sets. This command is used to limit the number of call connections for a voice entity or a group of voice entities. It needs to be used with the max-call command in voice entity view: It defines the serial number of a max-call set and the maximum call connections; while the max-call command in voice entity view binds that voice entity to the max-call set with the serial number. Related command: max-call (voice entity).
Example
# Set the maximum number of call connections of max-call set 1 to 5.
[3Com-voice-dial] max-call 1 5
1.1.54 max-call (in Voice Entity View)

Syntax
max-call set-number undo max-call
View
Voice entity view
Parameter
set-number: Specify a max-call set. Its value ranges from 1 to 2147483647.
Description
Use the max-call command to bind a voice entity to the max-call set specified by set-number. Use the undo max-call command to delete the binding. Each voice entity can only be bound to one max-call set, but you can change the binding. By default, no max-call set is bound. That means there is no limitation on the number of call connections. This command is used with the max-call command in voice dial program view: the max-call command in voice dial program view sets the serial number of max-call set and the maximum number of call connections; this command binds the voice entity to the max-call set with the serial number. Related command: max-call (voice dial program).
Example
# Bind voice entity 10 to max-call set 1.
[3Com-voice-dial-entity10] max-call 1
1.1.55 number-match
Syntax
number-match { longest | shortest }
View
Parameter
longest: Indicate to perform the match according to the longest number. shortest: Indicate to perform the match according to the shortest number.
Description
Use the number-match command to configure a global number match-policy. By default, match according to the shortest number. Command number-match is used to decide if the match is performed according to the longest or the shortest number for the number match. For instance, match-template 0106688 and match-template 01066880011 are respectively configured in two voice entities. when the user dials 01066880011, if the router is configured with the shortest number match-policy, then the router originates a connection to 0106688 at the remote end, and the four numbers 0011 will not be processed; if the router is configured with the longest number match-policy, and the user only dials 0106688, the router will wait for the user to dial. After timeout, the number match-policy configured with the system is neglected, and the shortest number match-policy will be automatically followed to make a call; if the user dials 0106688# (here the "# represents the dial terminator configured by the system), the router will likewise neglect the number match-policy configured by the system and use the shortest number match-policy, thus providing a greater flexibility for the configuration of user dial scheme. Related command: match-template.
Example
# Configure that the number match is performed according to the longest number.
[Router-voice-dial] number-match longest
1.1.56 number-substitute
Syntax
number-substitute list-number undo number-substitute { list-number | all }
View
Parameter
list-number: Serial number of number-substitute list. Its value ranges from 1 to 2147483647. all: All number-substitute lists.
Description
Use the number-substitute command to create a number-substitute list and enter voice dial program view. Use the undo number-substitute command to delete the specified number-substitute list or all the number-substitute lists. By default, no number-substitute list is created. Related command: rule and substitute.
Example
# Enter voice dial program view and create a number-substitute list.
[3Com-voice-dial] number-substitute 1 [3Com-voice-dial-substitute1]
1.1.57 outband
Syntax
outband { h245 | sip } undo outband
View
Voice entity view
Parameter
h245: Indicate that DTMF code to be transmitted is encapsulated in the UserInput message of H.245 recommendation. sip: Indicate that DTMF code to be transmitted is encapsulated in the UserInput message of SIP.
Description
Use the outband command to configure transmission of DTMF code in the outband mode. Use the undo outband command to restore transmission of DTMF code to inband mode.
By default, the inband transmission mode is adopted. Adopting normal connect mode, DTMF code can be directly transmitted through UserInput message of H.245 recommendation. Adopting fast connect mode, with the aid of tunnel function, the DTMF code can be encapsulated in the UserInput message of H.245 and transmitted. Thus, when adopting fast connect mode, if either the calling or the called parties doesn't support the tunnel function, the DTMF code can't be transmitted in outband. Once transmitting DTMF code in outband mode has been configured for NON-STANDARD router, in order to confirm whether or not the peer gateway can accept such transmission mode of DTMF, the ability negotiation must be fulfilled after the connection is established. Currently, 3Com routers only reactively accept transparent transmission ability negotiation of DTMF code. In no case will it actively initiate the negotiation process mentioned above. In order to transparently transmit DTMF code, it is demanded, during actual application, to configure this command for VoIP voice entity on the calling gateway and also for POTS voice entity for the called gateway. Related command: fast-connect and tunnel-on.
Example
# Configure DTMF code outband transmission in the fast connect mode for VoIP voice entity 10.
[Router-voice-dial-entity10] fast-connect [Router-voice-dial-entity10] tunnel-on [Router-voice-dial-entity10] outband h245
1.1.58 payload-size
Syntax
payload-size { g711 | g723 | g726r16 | g726r24 | g726r32 | g726r40 | g729 } time-length undo payload-size { g711 | g723 | g726r16 | g726r24 | g726r32 | g726r40 | g729 }
View
Voice entity view
Parameter
g711: Specifies the time length of voice packets with g711 coding (g711alaw or g711ulaw). It ranges from 10 to 30 milliseconds and defaults to 20 milliseconds. g723: Specifies the time length of voice packets with g723 coding (g723r53 or g723r63). It ranges from 30 to 180 milliseconds and defaults to 30 milliseconds.
g726r16: Specifies the time length of voice packets with g726r16 coding. It ranges from 10 to 110 milliseconds and defaults to 30 milliseconds. g726r24: Specifies the time length of voice packets with g726r24 coding. It ranges from 10 to 70 milliseconds and defaults to 30 milliseconds. g726r32: Specifies the time length of voice packets with g726r32 coding. It ranges from 10 to 50 milliseconds and defaults to 30 milliseconds. g726r40: Specifies the time length of voice packets with g726r40 coding. It ranges from 10 to 40 milliseconds and defaults to 30 milliseconds. g729: Specifies the time length of voice packets with g729 coding (g729r8 or g729a). It ranges from 20 to 180 milliseconds and defaults to 30 milliseconds. time-length: Duration for DSP to assemble a packet in the corresponding codec mode.
Description
Use the payload-size command to notify the underlying layer how much time DSP spends assembling a voice packet, or the time length of each voice packet. Use the undo payload-size command to restore the default. This time length may differ by card type. Because voice entities, which are upper layer relevant, are hardware independent, the upper-layer can only verify whether the specified value is in the valid range for the applied codec mode. Whether this value is valid within the range is decided by DSP based on hardware type. If valid, the value delivered by the upper layer is used; if otherwise, the default value for the codec mode is used. If you find that the configured duration does not take effect, first check that the assigned value is valid for the card type and codec mode. Table 1-20 Valid ranges corresponding to cards Codec mode Valid range for C55xx (milliseconds) Valid range for C54xx (milliseconds) Default (milliseconds) 20 G711 10 to 30 (must be an integral multiple of 10) G723 30 to 180 (must be an integral multiple of 30) 30 to 180 (must be an integral multiple of 30) 30 G729 20 to 180 (must be an integral multiple of 10) 20 to 180 (must be an integral multiple of 10) 20 Description 8FXS VG2032 VG2016 4VI/2VI/17VI VG1040 VG1041
20
In voice dial program view, you can use the default entity command to configure global attributes for voice entities, namely the default time that DSP spends assembling a packet in each codec mode. Related command: default entity, entity compression.
Example
# Set the time that DSP spends assembling a voice packet in g711 mode to 30 milliseconds for voice entity 8801.
[route-voice-dial-entity8801] payload-size g711 30
# Restore the default time that DSP spends assembling a voice packet in g711 codec mode for voice entity 8801.
[route-voice-dial-entity8801] undo payload-size g711
# Set the default time that DSP spends assembling a voice packet in g729 mode to 180 milliseconds.
[route-voice-dial] default entity payload-size g729 180
# Restore the initial default time that DSP spends assembling a packet in g729 codec mode in voice dial program view.
[route-voice-dial] undo default entity payload-size g729
1.1.59 plan-numbering
Syntax
plan-numbering { called | calling } { data | isdn | national | private | reserved | telex | unknown } undo plan-numbering { called | calling }
View
Voice entity view
Parameter
called: Called number. calling: Calling number. data: Data numbering plan. isdn: Numbering plan of ISDN telephone. national: Numbering plan of national standard. private: Private numbering plan.
reserved: Reserved extension. telex: Subscriber telex numbering plan unknown: Unknown numbering plan.
Description
Use the plan-numbering command to configure the calling/called numbering plan attribute of voice entities. Use the undo plan-numbering command to restore the default numbering plan. By default, the calling/called numbering plan of a voice entity is set to unknown. The numbering plans comply with ITU-T Recommendation Q931. Related command: type-number.
Example
# Set the called numbering plan of voice entity 10 to national.
[3Com-voice-dial-entity10] plan-numbering called national
1.1.60 priority
Syntax
priority priority-number undo priority
View
Voice entity view
Parameter
priority-number: Priority of a voice entity. Its value ranges from 0 to 10. The smaller the number is, the higher the priority is. That means 0 is the highest priority and 10 is the lowest priority.
Description
Use the priority command to configure the priority levels for voice entities. Use the undo priority command to restore the default priority level. By default, the priority level is set to 0. If you have configured priority levels for voice entities and have configured priority in voice entity select rule (see select-rule), the system will first select the voice entity of the highest
priority when it initiates a call. If the voice entity of the highest priority fails, it will try those of lower priority levels to initiate the call.
Example
# Set the priority level of voice entity 10 to 5.
[3Com-voice-dial-entity10] priority 5
1.1.61 private-line
Syntax
private-line string undo private-line
View
Parameter
string: E.164 telephone number of the destination end, and it may include the wild-card ..
Description
Use the private-line command to configure private auto-ring mode for the subscriber line and the E.164 telephone number of the destination end. Use the undo private-line command to cancel the specified connection mode. By default, no private auto-ring mode is configured. This command is applicable to FXO, FXS, analog E&M subscriber-lines and digital E1 voice subscriber-line. The private-line command is used to specify a connection mode for subscriber-line. The parameter string will serve as the called number of all the calls incoming to this subscriber line, i.e., after off-hook, the user need not perform any operation and the system will dial out the string as the called number automatically. If the private-line command is not configured, when the subscriber-line enters an off-hook status, the standard session application program will generate a dial tone until enough numbers are collected and the call process is completed.
Example
# Set an automatic dialing to 5559262 after off-hook on the subscriber line 1/0/0.
[Router-voice-line1/0/0] private-line 5559262
1.1.62 receive gain

Syntax
receive gain value undo receive gain
View
Parameter
value: Voice input gain ranging from -14.0 to 14.0 in dB with one digit after the decimal point. By default, the value is 0 dB.
Description
Use the receive gain command to configure the gain value at the voice subscriber-line input end. Use the undo receive gain command to restore the default value. This command is applicable to FXO, FXS, analog E&M subscriber-lines and digital E1 voice subscriber-line. When the voice signal on the line attenuates to a relatively great extent, this command can be used to appropriately enhance the voice input gain. Related command: transmit gain and subscriber-line.
Example
# Configure the voice input gain as 3.5dB on subscriber line 1/0/0.
[Router-voice-line1/0/0] receive gain 3.5
1.1.63 reset voice call-history-record line

Syntax
reset voice call-history-record line
View
User view
Parameter
None
Description
Use the reset voice call-history-record line command to clear the call history of all voice subscriber lines, or information displayed by the display voice call-history-record line command.
Example
# Clear the call history of all voice-subscriber lines.
<Router> reset voice call-history-record line Really reset all of the call-history information? [y]y All of the call-history information have been removed!
1.1.64 reset voice ipp

Syntax
reset voice ipp
View
User view
Parameter
None
Description
Use the reset voice ipp command to reset IPP statistics. Related command: display voice vpp.
Example
# Clear IPP statistics.
<Router> reset voice ipp
1.1.65 reset voice rcv

Syntax
reset voice rcv
View
User view
Parameter
None
Description
Use the reset voice rcv command to reset RCV statistics. Related command: display voice rcv statistic.
Example
# Clear RCV statistics.
<Router> reset voice rcv
1.1.66 reset voice vpp

Syntax
reset voice vpp
View
User view
Parameter
None
Description
Use the reset voice vpp command to reset VPP statistics. Related command: display voice vpp.
Example
# Clear VPP statistics
<Router> reset voice vpp channel 1
1.1.67 reset voice voip data-statistic

Syntax
reset voice voip data-statistic
View
User view
Parameter
None
Description
Use the reset voice voip data-statistic command to reset statistics information of voice data. After voice data statistics is enabled via the vqa data-statistic command, all statistics items (time for successfully searching the voice table, total number of received data packets, time for searching the table in fast and common modes and voice and fax of receive and transmit channels) perform data accumulation until all counters are cleared via the reset voice voip data-statistic command. After that, new statistics begins. Related command: vqa data-statistic and display voice voip data-statistic.
Example
# Clear statistics information of voice data.
<Router> reset voice voip data-statistic
1.1.68 ring-generate
Syntax
ring-generate undo ring-generate
View
Parameter
None
Description
Use the ring-generate command to configure the gateway at the called side to give a ringback tone when in quick start mode. Use the ring-generate command to remove the configuration and then the ringback tone generated by the switch will be transmitted transparently. By default, the gateway at the called side gives a ringback tone when in quick start mode.
Example
# Configure the gateway at the called side to give a ringback tone when in quick start mode.
[Router] undo ring-generate
1.1.69 rule
Syntax
rule rule-tag input-number output-number undo rule rule-tag
View
Parameter
rule-tag: Number of a rule. Its value ranges from 1 to 2147483647. input-number: Input string for number substitute. Format of the number is [ ^ ] [ + ] string [ $ ], with the maximum length of 31 digits. The characters are described in the following: ^: Indicates a number must be matched from the first character. When the system matches a subscriber number with the match string, it must begin from the first character of the subscriber number. +: Appears at the beginning of a calling number to indicate that the number is E.164 compliant. $: Is the last character, indicating the end of the number. string: String composed of any characters of 0123456789ABCD#*.!%. The characters are described in the following table: Table 1-21 Meanings of the characters in string Character 0-9 ABCD # and * . Meaning Numbers from 0 to 9. Each means a digit. Each character means a digit. Each means a valid digit. A wildcard. It can match any digit of a valid number. For example, 555. . . . matches any string that begins with 555 and with four additional characters. The character or characters right in front of it does not appear or appears once. For example, 56!1234 can match 51234 and 561234.
Character + %
Meaning The character or characters right in front of it appears once or several times. The character or characters right in front of it does not appear or appears several times.
output-number: Output string for number substitute. It is composed of any characters of 0123456789#., with the largest length of 31 digits. The meanings of the characters are shown in the table above. Please pay attention to the following points: The character or characters in front of "!, %, and + are not to be matched accurately. They are handled similar to the wildcard .. Moreover, these symbols cannot be used alone. There must be a valid digit or digits in front of them. Dots in output-number are handled in two ways: 1) Invalid dots. If you have set the dot match rule to end-only using the dot-match command (i.e., only the dots at the end of the input format are handled), the dots in output-number are discarded immediately. And the digits corresponding to all the dots at the end of input-number are added to the end of output-number. 2) You can use the dot-match command to configure the dot match rule of the number-substitute rule: match the digits corresponding to the wildcards in input-number from right to left or from left to right. 3) If the right-left rule is adopted, according to the number of dots in output-number, the system takes the number of digits corresponding to the dots in input-number from right to left, or all the digits corresponding to the dots (When the number of dots in output-number is bigger than or equal to that in input-number, the system takes all the digits corresponding to the dots in input-number.). 4) The left-right is contrary to the right-left rule, that is, the digits corresponding to the dots are taken from left to right. If the digits corresponding to the dots in input-number are not matched, they will be discarded. If the dots in output-number are more than those in input-number, the unwanted dots will be discarded from right to left, that is, the dot closest to the right end will be discarded first.
Description
Use the rule command to configure the number-substitute rules. Use the undo rule command to delete the specified number-substitute rules. By default, no number-substitute rules are configured. When you have successfully created a number-substitute list, you need to use the command to configure the number-substitute rules in it.
Related command: substitute, number-substitute, first-rule, and dot-match.
Example
# Configure the number-substitute rules for number-substitute list 1
[3Com-voice-dial-substitute1] rule 1 ^91 1 [3Com-voice-dial-substitute1] rule 2 ^92 2 [3Com-voice-dial-substitute1] rule 3 ^93 3
1.1.70 select-rule rule-order

Syntax
select-rule rule-order 1st-rule [ 2nd-rule [ 3rd-rule ] ] undo select-rule rule-order
View
Parameter
1st-rule: Serial number of the select rule of first priority, ranging from 1 to 4. The meanings of the serial numbers are shown in the following table. 2nd-rule: Serial number of the select rule of second priority. It cannot be the same number as 1st-rule. 3rd-rule: Serial number of the select rule of third priority. It cannot be the same number as 1st-rule or 2nd-rule. Table 1-22 Meanings of the serial numbers Serial Number 1 2 3 4 Exact match Priority Random select Longest unused Meaning
Description
Use the select-rule rule-order command to configure the select rule of voice entities. Use the undo select-rule rule-order command to restore the default value.
By default, the order of voice entity select rules is 1->2->3. That means exact match first, voice entity priority second, and random select last. Use the select-rule rule-order command to configure three rules of different priorities at most. But you cannot configure the same rules. Order of priorities is the order of select rules. If there are three rules of three priorities, the system first select voice entities according to the rule of first priority. If that rule cannot distinguish the priorities of the voice entities, the rule of second priority will be used. And the rule of third priority will be used for the voice entities that cannot be distinguished by the first and second rules. If all the three rules cannot distinguish voice entity priorities, random select is used as the default method. The select rules are described in the following: 1) 2) 3) 4) Exact match. From left to right, the more digits it matches, the better the precision is. The system stops using the rule once it meets a digit that cannot be matched uniquely. Priority. Voice entities are divided into 11 classes, with values ranging from 0 to 10. The smaller the value is, the higher the priority is. That means 0 is the highest priority. Random select. The system selects a voice entity from a group of qualified voice entities randomly. Longest unused. The longer the voice entity is unused, the higher its priority is. There will be no collision between voice entities when random select is applied. Therefore, random select can only be used as the last rule or the only rule. Related command: select-rule search-stop and select-rule type-first.
Example
# Set the select rule of voice entities to exact match-> priority-> longest unused.
[3Com-voice-dial] select-rule rule-order 1 2 4
1.1.71 select-rule search-stop

Syntax
select-rule search-stop max-number undo select-rule search-stop
View
Parameter
max-number: Maximum number of voice entities found, in the range 1 to 400.
Description
Use the select-rule search-stop command to configure the maximum number of voice entities found. Use the undo select-rule search-stop command to cancel the limitation on the search for voice entities. By default, no maximum number is configured to the search for voice entities. That means there is no limitation on the search for voice entities. There might be multiple voice entities that meet the call requirements during call connection. If a voice entity fails, the system can search for other qualified ones and continue the call. The select-rule search-stop command is used to define the maximum number of qualified voice entities to be found before the search stops. If there are multiple qualified voice entities, only the one of the highest priority is used to initiate a call. Related command: select-rule rule-order and select-rule type-first.
Example
# Configure to search 5 voice entities at most.
[3Com-voice-dial] select-rule search-stop 5
1.1.72 select-rule type-first

Syntax
select-rule type-first 1st-type 2nd-type undo select-rule type-first
View
Parameter
1st-type: Serial number of the type of the first priority, ranging from 1 to 2. The meanings of the serial numbers are shown in the following table. 2nd-type: Serial number of the type of the second priority, ranging from 1 to 2. It cannot be the same number as 1st-rule. Table 1-23 Meaning of the serial numbers Serial Number 1 Meaning VoIP voice entity
POTS voice entity
Description
Use the select-rule type-first command to configure the type-first select rules for voice entities. Use the undo select-rule type-first command to delete the type-first select rules. By default, voice entities are not selected according to their types. The command is used to configure the select order for voice entities according to their types. If multiple voice entities (of different types) are qualified for a call connection, the system will select the suitable voice entity according to the type-first rules configured by the select-rule type-first command. The order of inputting the parameters determines the voice entity type priorities, which are divided into first type and second type. The system first selects the first type and then the second type. Related command: select-rule rule-order and select-rule search-stop.
Example
# Configure to select voice entities according to the type-first rules: VoIP-> POTS
[3Com-voice-dial] select-rule type-first 2 1
1.1.73 select-stop
Syntax
select-stop undo select-stop
View
Voice entity view
Parameter
None
Description
Use the select-stop command to disable the search for voice entities. Use the undo select-stop command to re-enable the search for voice entities. By default, the search for voice entities is enabled.
There might be multiple qualified voice entities for a call connection. If a voice entity fails, the system can search for another one that meets the requirements and continue the call. In that case, you can use this command to configure the system to stop the search when it has found the specified voice entity. Related command: select-rule rule-order, select-rule type-first.
Example
# Configure the system to stop the search once voice entity 10 is found.
[3Com-voice-dial-entity10] select-stop
1.1.74 send-busytone
Syntax
send-busytone [ seconds ] undo send-busytone
View
Parameter
seconds: Duration of busy tone, in the range 2 to 15 seconds. It defaults to 3 seconds.
Description
Use the send-busytone command to enable busy tone sending on the FXO interface. If busy tone duration is not specified, the default applies. Use the undo send-busytone command to disable busy tone sending on the FXO interface. This command is valid only on FXO interfaces. By default, busy tone sending is disabled.
Example
# Enable FXO interface 1/0/0 to send busy tone that lasts 5 seconds.
[Router-voice] subscriber-line 3/1 FXO interface encountered [Router-voice-line3/1] send-busytone 5
1.1.75 send-number (in Voice Entity View)

Syntax
send-number { digit-number | all | truncate } undo send-number
View
Voice entity view
Parameter
digit-number: Number of least significant digits that are sent, ranging from 0 to 31. It is not larger than the total number of digits of the called number. all: All digits of the called number. truncate: Send the truncated called number.
Description
Use the send-number command to configure the number sending mode. Use the undo send-number command to restore the default mode. By default, the truncate mode is used. This command only applies to POTS voice entities. As for the numbers sent to PSTN, this command is used to control how to send the called numbers. You can not only configure to send some digits (defined by digit-number from right to left) or all digits of the called number, but also the truncated called numbers, i.e., the numbers that match the wildcard . at the end. Related command: dot-match and match-template.
Example
# Configure voice entity 10 to send the 6 least significant digits of the called number.
[3Com-voice-dial-entity10] send-number 6
1.1.76 send-number (in Voice Subscriber-Line View)

Syntax
send-number undo send-number
View
Parameter
None
Description
Use the send-number command to configure the FXS voice subscriber-line to allow the FXS to send called numbers. Use the undo send-number command to disable the FXS to send called numbers. By default, the FXS is disabled to send called numbers. Normally, the FXS interface is connected to a standard telephone, so the FXS does not need to send called numbers. But sometimes, the FXS interface is connected to the FXO interface. In this case, when the FXO receives a ring from the FXS, it imitates an off-hook and sends dial tone for the second stage of dial. With the send-number feature enabled, the FXS voice subscriber-line can send called numbers to the connected FXO interface directly to free the calling party from the second stage of dial.
Example
# Enable the FXS to send called numbers on FXS voice subscriber-line 0/0/0.
[Router-voice-line0/0/0] send-number
1.1.77 shutdown (in Voice Entity View)

Syntax
View
Voice entity view
Parameter
None
Description
Use the shutdown command in voice entity view to configure to change the management status of specified voice entity from UP to DOWN.
Use the undo shutdown command in voice entiry view to restore the voice entity management status from DOWN to UP. By default, the voice entity management status is UP. Running command shutdown will cause the voice entity unable to make calls.
Example
# Change the status of voice entity 4 to DOWN.
[Router-voice-dial-entity4] shutdown
1.1.78 send-ring
Syntax
send-ring undo send-ring
View
VoIP voice entity view
Parameter
None
Description
Use the send-ring command to enable the local end to play ringback tone. Use the undo send-ring command to disable the local end to play ringback tone. This command is available only when fast-connect mode is enabled. By default, the local end is disabled to play ringback tone.
Example
# Enable the local end to play ringback tone.
[Router-voice-dial-entity8801] send-ring
1.1.79 shutdown (in Voice Subscriber-Line View)

Syntax
View
Parameter
None
Description
Use the shutdown command in voice subscriber-line view to configure the voice subscriber-line from UP to DOWN. Use the undo shutdown command in voice subscriber-line to restore the voice subscriber-line from DOWN to UP. By default, the voice subscriber-line status is UP. This command is applicable to FXO, FXS, analog E&M subscriber-lines and digital E1 voice subscriber-line. The function of the POTS voice subscriber-line specified by the command shutdown is disabled, whereas using command undo shutdown will enable all the voice subscriber-lines on the voice card.
Example
# Shut down voice subscriber-line 0/0/0.
[Router-voice-line0/0/0] shutdown
1.1.80 silence-th-span
Syntax
silence-th-span threshold time-length undo silence-th-span
View
FXO subscriber-line view
Parameter
threshold: Silence detection threshold. If the voice signal from the switch is smaller than this value, the system regards it as silence. This threshold ranges from 0 to 200 and defaults to 3. Normally, the signal amplitude on the links without traffic is in the range 2 to 5. time-length: Duration of silence detection. Upon expiration of this duration, the system goes on-hook automatically. It ranges from 2 to 7200 (default) seconds.
Description
Use the silence-th-span command to set the silence detection parameters that have the system take automatic on-hook action. Use the undo silence-th-span command to restore the default. Silence detection-based disconnection applies to prevent an FXO interface from hanging when the busy tone parameters provided by the connected PBX are special. In normal cases, you need not to use this function to tune the busy tone detection parameters and any wrong configuration may result in incorrect disconnection. When configuring this command, you are recommended to test multiple parameter sets for the one that allows quick resource release on the FXO interface after the user hangs up while eliminating the likelihood of incorrect on-hook.
Example
# Set the silence detection threshold to 20 and the duration to 10 seconds.
[Router-voice-line0/0/0] silence-th-span 20 10
1.1.81 slic-gain
Syntax
slic-gain { 0 | 1 } undo slic-gain
View
Analog E&M voice subscriber-line view
Parameter
0: Sets the output gain of the subscriber line interface circuit (SLIC) chip to 0.8 dB (the default). 1: Sets the output gain of the SLIC chip to 2.1 dB (the default).
Description
Use the slic-gain command to configure the output gain of the SLIC chip. Use the undo slic-gain command to restore the default or 0. The underlying layer tunes signal gain through the SLIC chip.
Example
# Set SLIC-gain to 1 in analog E&M voice subscriber-line view.

[3Com-voice-line1/0/0] slic-gain 1
1.1.82 special-service
Syntax
special-service enable undo special-service enable
View
Parameter
enable: Enable the special-service numbers. All special-service numbers are enabled.
Description
Use the special-service command to enable or disable the special-service numbers. By default, the special-service numbers are disabled. The special-service numbers include: do-not-disturb, call forwarding on busy, call forwarding unconditionally, alarm service, and call forwarding during conversation (not supported at present). If you use the command to disable the special-service numbers, all the numbers are disabled, and vice versa. Related command: special-service, transfer-number.
Example
# Enable the special-service numbers.
[3Com-voice-dial] special-service enable
1.1.83 subscriber-line
Syntax
subscriber-line line-number
View
Any voice view except for voice entity view
Parameter
line-number: Subscriber line number.
Description
Use the subscriber-line command to enter FXS, FXO, analog E&M, or digital E1 voice subscriber-line view. In the view, use subscriber-line command to enter the voice subscriber-line view. When line-number is the FXS voice subscriber-line, the system will enter the FXS voice subscriber-line view. When the line-number is the analog E&M voice subscriber-line, the system will enter analog E&M voice subscriber-line view, etc. Related command: entity.
Example
# Enter the view of the voice subscriber line 0/0/0 in voice view.
[GateWay01-voice] subscriber-line 0/0/0 FXO interface encountered [GateWay01-voice-line0/0/0]
1.1.84 substitute
Syntax
substitute { called | calling } list-number undo substitute { called | calling }
View
Voice subscriber-line view, voice entity view
Parameter
called: Apply the number-substitute rules to the called number. calling: Apply the number-substitute rules to the calling number. list-number: Serial number of the number-substitute list. Its value ranges from 1 to 2147483647.
Description
Use the substitute command to bind the calling/called number-substitute list to the voice subscriber-line or voice entity. Use the undo substitute command to delete the calling/called number-substitute list that is bound to the voice subscriber-line or voice entity. By default, no number-substitute list is bound to voice subscriber-line or voice entity. That means the system does not substitute number.
Firstly, you should use the number-substitute list-number command to configure the number-substitute lists in voice dial program view, and use the rule command to configure the rules in the list. Secondly, you should use the substitute command to apply the number-substitute list to the voice subscriber-line or voice entity.
Note: According to network requirements, you can complete number substitute in the following two ways. Before voice entities are matched, you can use the substitute command in the voice subscriber-line view to substitute the calling/called numbers corresponding to the specified subscriber-line. After voice entities are matched and before a call is initiated, you can use the substitute command in voice entity view to substitute the specified calling/called numbers.
Related command: number-substitute and rule.
Example
# Apply called number-substitute list 6 to voice subscriber-line 0/0/0.
[3Com-voice-line0/0/0] substitute called 6
1.1.85 substitute incoming-call

Syntax
substitute incoming-call { called | calling } list-number undo substitute incoming-call { called | calling } { all | list-number }
View
Parameter
called: Apply the number-substitute rules to the called number. calling: Apply the number-substitute rules to the calling number. list-number: Serial number of the number-substitute list. Its value ranges from 1 to 2147483647. all: All number-substitute rule lists.
Description
Use the substitute incoming-call command to bind the calling/called numbers of the incoming calls from the network side to the number-substitute list. Use the undo substitute incoming-call command to cancel the binding. By default, no number-substitute list is bound. That means the system does not substitute any number. First, you can use the number-substitute list-number command in voice dial program view to create a number-substitute list, and then use the rule command to configure the rules in the list. Second, you can use the substitute incoming-call command to apply the number-substitute list to the strategy of incoming calls from the network. You should follow these rules in using the command: 1) 2) 32 number-substitute lists can be bound at most. The system searches all the rules in the number-substitute lists in order, and it stops the search once one rule works.
Note: According to network requirements, before voice entities are matched, you can use the substitute incoming-call command in the voice dial program view to substitute all the calling/called numbers of the incoming calls from the network side.
Related command: number-substitute, rule, and substitute outgoing-call.
Example
# Apply number-substitute list 5 to the called numbers of the incoming calls from the network side.
[3Com-voice-dial] substitute incoming-call called 5
1.1.86 substitute outgoing-call

Syntax
substitute outgoing-call { called | calling } list-number undo substitute outgoing-call { called | calling } { all | list-number }
View
Parameter
called: Apply the number-substitute rules to the called number. calling: Apply the number-substitute rules to the calling number. list-number: Serial number of the number-substitute list. Its value ranges from 1 to 2147483647. all: Delete all number-substitute rule lists.
Description
Use the substitute outgoing-call command to bind the calling/called numbers of the outgoing calls from the network side to the number-substitute list. Use the undo substitute outgoing-call command to cancel the binding. By default, no number-substitute list is bound. That means the system does not substitute any number. First, you can use the number-substitute list-number command in voice dial program view to create a number-substitute list, and then use the rule command to configure the rules in the list. Second, you can use the substitute outgoing-call command to apply the number-substitute list to the policy of outgoing calls from the network. You should follow these rules to use the command: 1) 2) 32 number-substitute lists can be bound at most. The system searches all the rules in the number-substitute lists in order, and it stops the search once one rule works.
Note: According to network requirements, before voice entities are matched, you can use the substitute outgoing-call command in the voice dial program view to substitute all the calling/called numbers of the outgoing calls from the network side.
Related command: number-substitute, rule, and substitute incoming-call.
Example
# Apply number-substitute lists 5, 6, and 8 to the called numbers of the outgoing calls from the network side.
[3Com-voice-dial] substitute outgoing-call called 5 [3Com-voice-dial] substitute outgoing-call called 6 [3Com-voice-dial] substitute outgoing-call called 8
1.1.87 terminator
Syntax
terminator character undo terminator
View
Parameter
character: Telephone number terminator. The valid characters are digits 0 through 9, alphabetic characters A through D, pound sign (#), and asterisk (*).
Description
Use the terminator command to configure a special character string as the terminator of a telephone number whose length is variable. Use the undo terminator command to cancel the existing setting. By default, no terminator is configured. In areas where telephone numbers with variable are used, a character can be specified as a terminator in order to avoid that the system cannot dial until the dial is timeout. Related command: match-template and timer.
Example
# Configure using # as a terminator.
[Router-voice-dial] terminator #
1.1.88 timer dial-interval

Syntax
timer dial-interval seconds
undo timer dial-interval
View
Parameter
seconds: The maximum interval between two digits, which is in the range of 1 to 300 seconds, by default seconds is 10s.
Description
Use the timer dial-interval command to configure the timer that the system waits for a subscriber to dial the next digit. Use the undo timer dial-interval command to restore the default time settings. This command is applied to FXO, FXS subscriber-lines. This timer will restart whenever the subscriber dials a digit and will work in this way until all the digits of the number are dialed. If the timer times out before the dialing is completed, the subscriber will be prompted to hook up and the call is terminated. Setting the argument seconds of a timer to 0 will disable this timer.
Example
# Set the maximum duration waiting for the next digit on voice line 0/0/0 to 5 seconds.
[Router-voice-line0/0/0] timer dial-interval 5
1.1.89 timer first-dial

Syntax
timer first-dial seconds undo timer first-dial
View
Parameter
seconds: The maximum time waiting for the first dial, which is in the range of 1 to 300 seconds, by default seconds is 10s.
Description
Use the timer first-dial command to configure the timer that the system waiting for a subscriber to dial the first digit. Use the undo timer first-dial command to restore the default time settings. This command is applied to FXO, FXS subscriber-lines. Upon the expiration of the timer, the subscriber will be prompted to hook up and the call is terminated. Setting the argument seconds of a timer to 0 will disable this timer.
Example
# Set the maximum duration waiting for the first dial on voice line 0/0/0 to 10 seconds.
[Router-voice-line0/0/0] timer first-dial 10
1.1.90 timer ring-back

Syntax
timer ring-back seconds undo timer ring-back
View
Parameter
seconds: Maximum duration of ringback tone, in the range 5 to 120 seconds. It defaults to 60 seconds. This argument applies on interfaces that are analog E&M, digital E&M, FXS, or FXO.
Description
Use the timer ring-back command to configure the maximum duration for the system to send the ringback tone. Use the undo timer ring-back command to restore the default. This command applies only on interfaces that are analog E&M, digital E&M, FXS, or FXO.
Example
# Set the maximum time duration for the system to send ringback tone to eight seconds.
[Router-voice-line0/0/0] timer ring-back 8
1.1.91 timer wait-digit

Syntax
timer wait-digit { infinity | seconds } undo timer wait-digit
View
Parameter
infinity: Infinite time. seconds: The maximum duration waiting for a digit, in the range 3 to 600 seconds. It defaults to 5 seconds. This argument only applies to analog and digital E&M interfaces.
Description
Use the timer wait-digit command to configure the maximum time duration that the system waits for a digit. Use the undo timer wait-digit command to restore the default time settings. This command is applied to analog E&M and digital E&M subscriber-lines. Setting the argument seconds of a timer to 0 will disable this timer.
Example
# Set the maximum duration waiting for the first dial on voice line 0/0/0 to 10 seconds.
[Router-voice-line0/0/0] timer first-dial 10
1.1.92 trace interval

Syntax
trace interval [ packets ]
View
Voice view
Parameter
packets: Number of voice packets, which is in the range of 1 to 10000 and defaults to 200.
Description
Use the trace interval command to configure the frequency that the information will be recorded in the debugging process, that is, the number of voice packets upon the pass of which a record will be made.
Example
# Record debugging information for every 300 voice packets.
[Router-voice] trace interval 300
1.1.93 transmit gain

Syntax
transmit gain value undo transmit gain
View
Parameter
value: Voice output gain ranging -14.0 to 14.0 in dB with one digit after the decimal point. By default, the value is 0 dB.
Description
Use the transmit gain command to configure the voice subscriber-line output end gain value. Use the undo transmit gain command to restore the default value. This command is applicable to FXO, FXS, analog E&M subscriber-lines and digital E1 voice subscriber-line. When a relatively small voice signal power is needed on the output line, this command can be used to properly increase the voice output gain value to adapt to the output line signal requirement. Related command: receive gain and subscriber-line.
Example
# Configure the voice output gain value as -6.7dB on subscriber line 0/0/0
[Router-voice-line0/0/0] transmit gain -6.7
1.1.94 tunnel-on
Syntax
tunnel-on undo tunnel-on
View
Voice entity view
Parameter
None
Description
Use the tunnel-on command to enable tunnel function. Use the undo tunnel-on command to disable tunnel function. By default, the tunnel function is disabled. Tunnel function can assist in negotiating process of such nonstandard H.245 message as transmitting DTMF code transparently. Only after successfully enabling the fast connect mode, can one fulfill the configuration of tunnel function. As the calling gateway, it can be decided whether or not to enable the tunnel function for each call on the router. Being the called gateway, it shall be decided whether or not to enable the tunnel function based on the status of the calling gateway. That is, if the function is enabled on calling gateway, it will also be enabled on the called gateway. Otherwise, tunnel function is disabled on both sides. In order to transmit DTMF code transparently via the fast connect mode, the tunnel function must be enabled. Otherwise DTMF code cannot be transmitted. During actual configuration, it is only necessary to fulfill this command for the VoIP voice entity at the calling gateway. Related command: fast-connect and outband.
Example
# Enable the tunnel function for VoIP voice entity 10.
[Router-voice-dial-entity10] fast-connect [Router-voice-dial-entity10] tunnel-on
1.1.95 type
Syntax
type { 1 | 2 | 3 | 5 } undo type
View
Parameter
1, 2, 3 and 5: Correspond respectively to the four signal types of analog E&M subscriber-lines, i.e. type 1, 2, 3 and 5.
Description
Use the type command to configure the analog E&M subscriber-line signal type. Use the undo type command to cancel the existing setting. By default, the analog E&M subscriber-line signal type is type 5. This command is only applicable to the analog E&M subscriber-line. Of the analog E&M signaling types, a PBX transmits signals on the M line (M means Mouth, indicating it is transmitted from a PBX), and receives signals from E line (E means Ear, indicating it is received by the PBX). So, as to a router that has voice function, the router receives the M signal of the PBX, and transmits E signal to the PBX. The analog E&M subscriber-line has four data transmission (signal) lines, and two or all the four lines are used according to different types: E (Ear or receive): the signal line from the router side to the PBX side. M (Mouth or transmit): the signal line from the PBX side to the router side. SG (Signal Ground): used for some types of analog E&M only. SB (Signal Battery): used for some types of analog E&M only.
Example
# Configure subscriber line 0/0/0 analog E&M subscriber-line type as type 3.
[Router-voice-line0/0/0] type 3
1.1.96 type-number
Syntax
type-number { called | calling } { abbreviated | international | national | network | reserved | subscriber | unknown } undo type-number { called | calling }
View
Voice entity view
Parameter
called: Called number. calling: Calling number. abbreviated: Abbreviated dial type. international: International number type. national: National number type. network: Special network number type. reserved: Extension reserved. subscriber: Subscriber number type. unknown: Unknown number type.
Description
Use the type-number command to configure the calling/called number types of voice entities. Use the undo type-number command to restore the default number types. By default, calling/called number types of voice entities are set to unknown. The number types comply with ITU-T Recommendation Q931.
Example
# Set the called number of voice entity 10 to national type.
[3Com-voice-dial-entity10] type-number called national
1.1.97 vad-on
Syntax
vad-on undo vad-on
View
Voice entity view
Parameter
None
Description
Use the vad-on command to enable silence detection function. Use the undo vad-on command to disable silence detection function. By default, the silence detection function is disabled. VAD is an abbreviation of Voice Activity Detection, generally termed as silence detection. Its basic idea is to detect and delete any silence on the basis of the difference of energy between the voice signals of peoples conversation and their silence signals, so that no signals are produced; and only when an abrupt activity tone is detected will a voice signal be generated and transmitted. It is displayed by research that no less than 50% transmission bandwidth can be attained by the use of VAD technology. Related command: entity.
Example
# Enable the VAD function of POTS voice entity 10.
[Router-voice-dial-entity10] vad-on
1.1.98 vi-card busy-tone-detect

Syntax
vi-card busy-tone-detect auto index line-number [ free | time ]
View
Voice view
Parameter
Index: Identify busy tone detection feature types, in the range 0 to 3. line-number: Subscriber line number, the range of which is determined upon the router type and the card inserted on. It can only be an even number. free: Release data and stop busy tone detection. time: Specify the time for busy tone detection.
Description
Use the vi-card busy-tone-detect command to configure busy tone detection method on FXO subscriber-line. This command is only valid for FXO type subscriber-lines, and can only be configured on the first subscriber-line of each two-subscriber-line voice board or four-subscriber-line voice board. Otherwise, the busy tone detection is not valid. The system supports four types of busy tone detection features, which are identified by the index parameter. The command vi-card busy-tone-detect is applicable in most cases, which can facilitate the busy tone detection. Related command: vi-card custom-toneparam.
Example
# Enable busy tone detection feature 0 on the subscriber line 2.
[Router-voice] vi-card busy-tone-detect auto 2
1.1.99 vi-card custom-toneparam

Syntax
vi-card custom-toneparam area-number index argu f1 f2 p1 p2 p3 p4 p5 p6 p7 undo vi-card custom-toneparam index
View
Voice view
Parameter
area-number: a number, reserved parameter currently. It cannot be zero. index: Identify busy tone detection feature types argu: Reserved. f1: Frequency of single frequency tone in Hz. f: Reserved. p1:Energy threshold of single frequency tone. p2: Reserved. p3:Duration of single frequency tone, in milliseconds. p4: Error range for duration of single frequency tone, in milliseconds.
p5: Duration of silence tone, in milliseconds. p6: Error range for duration of silence tone, in milliseconds. p7: Difference between the duration of single frequency tone and silence duration,, in milliseconds, that is, the difference between p3 and p4.
Description
Use the vi-card custom-toneparam command to save DSP parameters and customize busy tone detection parameters on the FXO interface. Use the undo vi-card custom-toneparam command to restore the custom default busy-tone detection settings on the FXO interface. When detecting the busy tone on the FXO interface after the vi-card busy-tone-detect command is run, the system can calculate busy tone detection-related parameters. You can view these parameters, which can be referred to in your customization of these parameter, with the display current-configuration command.
Caution: You must use the area custom command in FXO subscriber line view to validate you custom configuration.
Related command: area custom, vi-card busy-tone-detect.
Example
# Save such values as frequency, high/low electrical level duration, error range of high/low electrical level duration and the difference of high and low electrical level duration for busy tone 0.
[Router-voice] vi-card custom-toneparam 2 0 99 450 450 8000 8000 800 300 500 500 500
1.1.100 vi-card reboot

Syntax
vi-card reboot slot-number
View
Voice view
Parameter
slot-number: Slot number where the voice card is located.
Description
Use the vi-card reboot command to reboot a voice card. To reset a voice card will interrupt all the service on the voice card, and re-initialize the card status. Generally, if the voice card works abnormally (e.g. the configuration is correct but normal connection is not possible), this operation can be used. You can view the card indicator status when resetting the voice card to judge whether to perform the reset operation. First use command display version to display the distributed slots of the voice cards in the router. Related command: display version.
Example
# Reset the voice card of slot 3.
[Router-voice] vi-card reboot 3
1.1.101 voice-setup
Syntax
voice-setup
View
System view
Parameter
None
Description
Use the voice-setup command to enter Voice view.
Example
# Enter voice configuration view.

[3Com] voice-setup [3Com-voice]
1.1.102 voip calledtunnel

Syntax
voip calledtunnel enable undo voip calledtunnel enable
View
Voice view
Parameter
enable: Enables the tunnel function on the called gateway.
Description
Use the voip calledtunnel command to enable the tunnel function on the called gateway. Use the undo voip calledtunnel enable command to disable the tunnel function on the called gateway. By default, the tunnel function on the called gateway is enabled. When the router is a called gateway, it decides whether to use the tunnel function depending on the configuration of the voip calledtunnel command. To interoperate with devices that do not support tunneling using H.323 recommendation, you need to disable with the undo form of this command the tunnel function on the called gateway. Related command: tunnel-on.
Example
# Disable the tunnel function on the called gateway.
[Router-voice] undo voip calledtunnel enable
1.1.103 voip call-start

Syntax
voip call-start { fast | normal }
View
Voice view
Parameter
fast: The called GW initializes calls in a fast way. normal: The called GW initializes calls in a non-fast way.
Description
Use the voip call-start command to configure a call initialization mode for the called GW. By default, the fast mode is used. As the process of faculty negotiation is omitted in fast connect procedures, the faculties of the two parties are determined by the GW. If a router acts as a calling GW, you can enable or disable fast connect for each channel of initiated calls. If it acts as a called GW, it will use or not use the fast connect mode to initialize calls depending on the parameters of the voip call-start command, in the case that the calling GW uses the fast connect mode. For related configurations, see fast-connect command.
Example
# Configure the called gateway to initialize calls in normal mode.
[Router-voice] voip call-start normal
1.1.104 voip h323-descriptor

Syntax
voip h323-descriptor descriptor undo voip h323-descriptor
View
Voice view
Parameter
descriptor: The description character string of H.323, in the length of 1 to 64. By default, the descriptor is "3Com Gateway".
Description
Use the voip h323-descriptor command to configure the description character string of the voice gateway H.323. It is recommended to configure with default value, also you can configure according to the actual requirements. If both ends are the device based on 3Com Router Software, and the
attribute is configured at both ends (i.e., the default value is not adopted), the character strings of both ends must be the same.
Example
# Configure the descriptor of H.323 as mystring.
[3Com-voice] voip h323-descriptor mystring
1.1.105 vqa data-statistic

Syntax
vqa data-statistic enable undo vqa data-statistic enable
View
Voice view
Parameter
enable: Enables counting of voice data.
Description
Use the vqa data-statistic command to enable counting of voice data. Use the undo vqa data-statistic enable command to disable counting of voice data. By default, counting of voice data is disabled. In order to quickly locate trouble in VoIP call and perform debugging, use the vqa data-statistic enable command to enable statistics of voice data. Information to be performed statistics includes time for successfully searching the voice table, total number of received data packets, time for searching the table in fast and common modes and voice and fax of receive and transmit channels. Statistics of voice data mainly serves debugging. Therefore, the user is recommended to disable this function when the service is normal so as to ensure higher performance of voice data processing. Related command: reset voice voip data-statistic, display voice voip data-statistic.
Example
# Enable counting of voice data.
[3Com-voice] vqa data-statistic enable
1.1.106 vqa dscp

Syntax
vqa dscp { media | signal } dscp-value undo vqa dscp { media | signal }
View
Voice view
Parameter
media: Global DSCP value in the ToS field of the IP packets that carry RTP streams. signal: Global DSCP value in the ToS field of the IP packets that carry voice signaling. dscp-value: DSCP value in the range 0 to 63 or the keyword ef, af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, cs1, cs2, cs3, cs4, cs5, cs7, or default. Table 1-24 DSCP values Keyword ef af11 af12 af13 af21 af22 af23 af31 af32 af33 af41 af42 af43 cs1 cs2 cs3 DSCP value in binary 101110 001010 001100 001110 010010 010100 010110 011010 011100 011110 100010 100100 100110 001000 010000 011000 DSCP value in decimal 46 10 12 14 18 20 22 26 28 30 34 36 38 8 16 24
Keyword cs4 cs5 cs6 cs7 default
DSCP value in binary 100000 101000 110000 111000 000000
DSCP value in decimal 32 40 48 56 0
Description
Use the vqa dscp command to set the global DSCP value in the ToS field in the IP packets that carry the RTP stream or voice signaling. Use the undo dscp media command to restore the default DSCP, that is, default.
Note: The function of this command is the same as the command used for setting DSCP in the QoS part of this manual. If two DSCP values are configured, the one configured in the QoS part takes priority. This command is valid for both SIP and H.323.
Example
# Set the DSCP value in the ToS field in the IP packets that carry voice signaling to af41.
[Router] voice-setup [Router-voice] vqa dscp signal af41
1.1.107 vqa dsp-monitor

Syntax
vqa dsp-monitor buffer-time time undo vqa dsp-monitor buffer-time
View
Voice view
Parameter
buffer-time time: Duration of DSP buffer data monitoring in milliseconds.
Description
Use the vqa dsp-monitor command to set duration for DSP buffer data monitoring. Use the undo vqa dsp-monitor buffer-time command to remove the setting. By default, DSP data is not monitored. If the DSP buffering duration exceeds the preset threshold, DSP will discard voice data to keep the voice delay with a rational range. A time value greater than 240 is recommended for too small duration value will result in poor voice quality in the case of severe jitter. Related command: ip-precedence.
Example
# Set the duration for DSP buffer data monitoring to 270 milliseconds.
[Router-voice] vqa dsp-monitor buffer 270
1.1.108 vqa ip-precedence

Syntax
vqa ip-precedence priority-number undo vqa ip-precedence
View
Voice view
Parameter
priority-number: Precedence level of IP packets that carry voice signaling (TCP), an integer in the range 0 to 7. It defaults to 0.
Description
Use the vqa ip-precedence command to configure the global precedence of VoIP packets (the ToS field of IP packets) that carry voice signaling (TCP sockets in H.245 and H.225 signaling, and UDP sockets in SIP signaling). Use the undo ip-precedence command to restore the default.
Take care to distinguish it from the ip-precedence command in voice entity view. The latter is only used to configure the precedence of the entity-relevant VoIP packets. However, vqa ip-precedence in voice view is used to configure the precedence of the VoIP packets globally. If both of the precedence levels configured in the ip-precedence and vqa ip-precedence commands are available for VoIP packets, the precedence configured in the former command is preferred. Related command: ip-precedence.
Example
# Set the precedence for IP packets to 5.
[Router-voice] vqa ip-precedence 5
1.1.109 vqa jitter-buffer

Syntax
vqa jitter-buffer depth undo vqa jitter-buffer
View
Voice view
Parameter
depth: Identify the jitter buffer depth in the range of 0 to 10. Setting jitter buffer depth to 0 indicates not to enable the jitter buffer function. The larger the value, the larger the depth, that is, the more complexly the jitter buffer processes the voice packets. By default, the jitter buffer depth is 3.
Description
Use the vqa jitter-buffer command to configure jitter buffer depth. Use the vqa jitter-buffer command to restore the default jitter buffer depth. For networks of different performances, the depth for jitter buffer to provide the best performance is different. Therefore the jitter buffer depth must be selected based on a long-term observing and attempts, and in depth analysis of the actual network situations. So that the reasonable value fitting to the network requirements can be selected. If the depth value is too small, the jitter buffer function cannot provide the best loss compensation, disorder adjustment, jitter removing and re-discarding processing. If the depth value is too large, the delay will become influential to the receiving voice gateway.
Example
# Configure the depth of jitter buffer as 5.
[3Com-voice] vqa jitter-buffer 5
1.1.110 vqa performance

Syntax
vqa performance { receive | send } { fast | normal }
View
Voice view
Parameter
fast: Enable fast voice data forwarding. normal: Disable fast forwarding.
Description
Use the vqa performance command to enable/disable fast voice data forwarding. By default, fast voice data forwarding is enabled. Voice data forwarding falls into two modes: normal and fast. Fast forwarding includes fast receiving and fast sending. The user can configure data performance switches as required. Compared to normal receive process, fast receive process reduces the processes of memory application and data copy appropriately and improves receive speed of voice data. With the break mechanism, fast send process packs voice data and sends the packets to network layer according to the routing and link information to perform forwarding.
Example
# Disable fast voice data forwarding, i.e., enable normal forwarding.
[3Com-voice] vqa performance receive normal [3Com-voice] vqa performance send normal
Chapter 2 E1/T1 Voice Configuration Commands

2.1 E1/T1 Voice Configuration Commands
2.1.1 ani
Syntax
ani undo ani
View
R2 CAS view
Parameter
None
Description
Use the ani command to enable or disable the terminating point to send the calling party information (service category and calling number) to the originating point during call connecting process. Use the undo ani command to cancel the above configuration. By default, the terminating point does not send the calling party information to the originating point. Configure the local end with this command to support the automatic number identification. This command applies to E1 voice only. Related command: cas and ani-offset.
Example
# Configure that the local exchange request the opposite exchange to send the calling number during the connecting process.
[Router-cas1/0/0:0] ani
2.1.2 ani-offset
Syntax
ani-offset number undo ani-offset
View
R2 CAS view
Parameter
number: The number quantity collected, with a value range being the integer from 1 to10. By default, the value of number is 1.
Description
Use the ani-offset command to configure the quantity of numbers to be collected prior to requesting the calling party information. Use the undo ani-offset command to restore the default value. This command applies to E1 voice only. This command is used for setting the number quantity to be collected prior to requesting the caller number or caller identifier. When the quantity of the collected numbers is less than this value, the system will wait to the next number till timeout, and in the waiting it will not request the caller number information from the remote end. When the quantity of the collected numbers is equal to or exceeds this value, it is able to request the caller number or caller identifier from the remote end. Related command: cas, timeouts, r2-ka, r2-kd, reverse, renew.
Example
# Set to start requesting the caller number or caller identifier after receiving the 3-digit numbers.
[Router-cas1/0/0:0] ani-offset 3
2.1.3 answer
Syntax
answer { enable | disable }
View
R2 CAS view
Parameter
enable: The originating points requires that the terminating point must send answer signal. Only after receiving the signal, will the originating point report the answer message to the upper layer to have the peers enter the communicating state. disable: The originating point does not require the terminating point to send answer signal. In case the terminating point does not send answer signal, the originating point automatically report the answer message to the upper layer when the timer times out to have the peers enter the communicating state.
Description
Use the answer command to configure whether the terminating point is required to send answer signal. By default, the terminating point is required to send answer signal. This command applies to E1 voice only. In some countries, answer signals are not sent in the R2 line signaling coding scheme. In this case, you can use the answer command to adjust this signaling coding scheme. If the originating point does not require answer signals, the terminating point confirms call connection after the specified time. Related command: re-answer, timer dl re-answer.
Example
# Disable the terminating point to send answer signals.
[Router-cas1/0/0:0] answer disable
2.1.4 cas
Syntax
cas ts-set-number
View
Parameter
ts-set-number: The serial number of the Timeslot set predefined, with a value range being the integer from 0 to 30.
Description
Use the cas command to enter the R2 CAS view. This command applies to E1 voice only The command cas is used to enter the custom R2 CAS view. Under this mode various parameters of the R2 signaling in the E1 interface can be configured as required. To validate the custom R2 parameters, it is required to keep the parameter of ts-set-number in the command cas consistent with the parameter set-number in the command timeslots-set. Related command: timeslots-set, ani-offset, effect-time, reverse, select-mode, timer, trunk-direction and renew.
Example
# Enter the R2 CAS view of No.5 Timeslot set.
[Router-E1 1/0/0] timeslot-set 5 timeslot-list 1-31 signal r2 [Router-E1 1/0/0] cas 5
2.1.5 clear-forward-ack
Syntax
clear-forward-ack { enable | disable }
View
R2 CAS view
Parameter
enable: Enables the terminating point to acknowledge the clear-forward signal by sending a clear-back signal. disable: Disables the terminating point to acknowledge the clear-forward signal by sending a clear-back signal.
Description
Use the clear-forward-ack command to enable or disable the terminating point to respond by sending a clear-back signal when the originating point (calling party) disconnects a call.
By default, the terminating point does not send a clear-back signal to acknowledge the clear-forward signal. This command applies to E1 voice only. In some countries, if the terminating point controls the relay circuit reset in the R2 signaling exchange process, when the calling party disconnects a call and the originating point sends a clear-forward signal to the terminating point, the terminating point sends a clear-back signal as an acknowledgement, and then sends a release guard signal to indicate that the line of the terminating point is thoroughly released. Related command: mode US default-standard.
Example
# Enable the terminating point to send a clear-back signal to acknowledge the clear-forward signal.
[Router-cas1/0/0:0] clear-forward-ack enable
2.1.6 debugging voice r2

Syntax
debugging voice r2 { all | ccb controller slot-number timeslots-list | dl | dtmf | error | mfc | msg | rcv | warning }
View
User view
Parameter
all: Enables all the debugging in R2 software module. ccb controller: Enables all the CCB debugging in R2 signaling. dl: Enables the line signaling debugging in R2 signaling. dtmf: Enables the Dual-Tone Multifrequency (DTMF) debugging in R2 signaling. error: Enables the error debugging in R2 software module. msg: Enables the message interface debugging in R2 signaling. mfc: Enables the interregister signaling debugging in R2 signaling. rcv: Enables the RCV software module debugging in R2 software module. warning: Enables warning debugging in R2 software module. slot-number: E1 port number. timeslots: Time slot number, ranging from 1 to 31.
Description
Use the debugging voice r2 command to enable the corresponding debugging in R2 signaling module. Use the debugging voice r2 ccb command to view the information of the corresponding control block by specifying the E1 port number and time slot number. This command applies to E1 voice only.
Example
# Enable all the line signaling debugging in R2 signaling on E1 voice port.
<Router> debugging voice r2 dl
2.1.7 debugging voice rcv r2

Syntax
debugging voice rcv r2
View
User view
Parameter
r2: Enable the debugging between the RCV module and the R2 module of bottom layer.
Description
Use the debugging voice rcv r2 command to enable the debugging between the RCV module and the R2 module of bottom layer. This command applies to E1 voice only.
Example
None
2.1.8 debugging voice vpp r2

Syntax
debugging voice vpp r2
View
User view
Parameter
r2: Enable the debugging between the VPP module and the R2 module of bottom layer.
Description
Use the debugging voice vpp r2 command to enable the debugging between the VPP module and the R2 module of bottom layer. This command applies to E1 voice only.
Example
None
2.1.9 default
Syntax
default
View
R2 CAS view
Parameter
None
Description
Use the default command to restore the default of all the R2 configurations and reset the R2 call statistics to 0. The following table gives the configuration items affected by this command. Table 2-1 Configuration items affected by the default command Configuration item The originating exchange sends the seizure acknowledgement signal. The originating exchange sends the answer signal. The originating exchange answers at the time of clear-back. The originating exchange answers with the clear-back signal at the time of clear-forward. Answer signal timeout interval Clear-forward signal timeout interval
Default ENABLE ENABLE DISABLE DISABLE 60 seconds 10 seconds
Configuration item Seizure signal timeout interval Re-answer timeout interval Delay before sending the release-guard signal upon a timeout Seizure acknowledgement signal timeout interval The ABCD bit pattern that represents an idle receive line The ABCD bit pattern that represents an idle transmit line The ABCD bit pattern that represents a seized receive line The ABCD bit pattern that represents a seized transmit line The ABCD bit pattern that represents the seizure acknowledged state of the transmit line. The ABCD bit pattern that represents the seizure acknowledged state of the receive line. The ABCD bit pattern that represents the answered state of the receive line. The ABCD bit pattern that represents the answered state of the transmit line. The ABCD bit pattern that represents the clear-forward state of the receive line. The ABCD bit pattern that represents the clear-forward state of the transmit line. The ABCD bit pattern that represents the clear-back state of the receive line. The ABCD bit pattern that represents the clear-back state of the transmit line. The ABCD bit pattern that represents the release-guard state of the receive line. The ABCD bit pattern that represents the release-guard state of the transmit line. The ABCD bit pattern that represents a blocked receive line. The ABCD bit pattern that represents a blocked transmit line. Country mode
Default 1 second 1 second 10 second 40 seconds 1001 1001 0001 0001 1101 1101 0101 0101 1001 1001 1101 1101 1001 1001 1101 1101 ITU-T default
Example
# Restore the default of all the configurations on CAS 1/0/0:5.
[Router-E1 1/0/0] timeslot-set 5 timeslot-list 1-31 signal r2 [Router-cas 1/0/0:5] default
2.1.10 delay
Syntax
delay { call-interval | hold | rising | send-dtmf | dtmf | dtmf-interval | wink-rising | wink-hold | send-wink | start-dial } milliseconds undo delay { call-interval | hold | rising | send-dtmf | dtmf | dtmf-interval | wink-rising | wink-hold | send-wink | start-dial }
View
Parameter
call-interval milliseconds: The call interval in the range of 200 to 2000ms. By default, the value is 200ms. hold milliseconds: The maximum duration the caller will wait for the callee to hang up so as to send the DTMF number in analog E&M subscriber-line delay-start mode. It ranges from 100 to 5000ms, and is defaulted to 400ms. rising milliseconds: The maximum duration the caller will wait from the sending of off-hook signal to the callee's status detected in analog E&M subscriber-line delay-start mode. It ranges from 20 to 2000ms, and is defaulted to 300ms. send-dtmf milliseconds: The delay before the caller sends signal in analog E&M subscriber-line immediate-start mode. It ranges from 50 to 5000ms, and is defaulted to 100ms. dtmf milliseconds: The lasting duration of the DTMF signals in the range of 50 to 500ms. By default, the value is 120ms. dtmf-interval milliseconds: The interval between two DTMF signals in the range of 50 to 500ms. By default, the value is 120ms. wink-rising milliseconds: The maximum duration the caller will wait for the wink signals after sending the seizure signals in analog E&M subscriber-line wink-start mode. It ranges from 100 to 5000ms, and is defaulted to 500ms.
wink-hold milliseconds: The maximum lasting duration of the wink signals are received by the caller in analog E&M subscriber-line wink-start mode. It ranges from 100 to 3000ms, and is defaulted to 500ms. send-wink milliseconds: Specify how long the called party will delay sending wink signal after receiving the seizure signal on E&M interface. It ranges from 100 to 5000ms and defaults to 500ms. start-dial milliseconds: The delay for dialing. It is in the range of 1 to 10 seconds and defaults to 1 second.
Description
Use the delay command to configure the related time parameters at the digital E&M subscriber-line (E1 controller). Use the undo delay command to restore these parameters to the default value. On the digital E&M subscriber-line, the waiting duration of originating the next call set by the delay call-interval milliseconds command is applicable to the immediate, wink and delay start. When the digital E&M subscriber-line uses the delay start mode, the calling party will use the delay hold milliseconds command to set the longest time waiting for the delay signals . When the digital E&M subscriber-line uses the delay start mode, use the delay rising milliseconds command to set the time waiting for the delay signals of called party after the calling party sends out the off-hook signals, and then detect the device state of the called party. When the digital E&M subscriber-line uses the immediate start mode, use the delay send-dtmf milliseconds command to set the delay time before the calling party sends the called number. The delay dtmf milliseconds command is used to set the duration that the DTMF signals are being sent, and the delay dtmf-interval milliseconds command is used to set the interval for sending the DTMF signals. When the digital E&M subscriber-line uses the wink start mode, the delay wink-rising milliseconds command is used to set the longest time it takes for the calling party to wait for the wink signals after it sends the seizure signals. When the digital E&M subscriber-line uses the wink start mode, the delay wink-hold milliseconds command is used to set the longest duration that the wink signals sent by the called party.
When the digital E&M subscriber-line uses the wink start mode, the delay send-wink milliseconds command is used to set the longest time that the called party delays before sending the wink signals. Related command: timeslots-set, timer.
Example
# Set the longest delay-waiting duration to 3000 milliseconds on voice subscriber line 1/0/1:3.
[Router-voice-line1/0/1:3] delay hold 3000
2.1.11 display voice em call-statistic

Syntax
display voice em call-statistic
View
Any view
Parameter
None
Description
Use the display voice em call-statistic command to view the call statistics of the digital E&M subscriber-line. This command applies to E1 voice only. This command is used to display the statistics of the E&M signaling being placed in the state of idle, seizure ready, seizure confirmation, transmitting numbers, receiving numbers, conversation and clear ready.
Example
# Display the call statistics of the E&M subscriber-line.
[Router] display voice em call-statistic On state of EM_IDLE : On state of EMCALLER_WAIT_OCCUPY : On state of EMCALLER_WAIT_SEND_NUMBER : On state of EMCALLER_SENDING_NUMBER : On state of EMCALLER_RINGING : On state of EMCALLER_TALKING :
On state of EMCALLER_CALLER_ONHOOK : On state of EMCALLED_WAIT_SEND_OCCUPY : On state of EMCALLED_WAIT_RECEIVE_NUMBER : On state of EMCALLED_RECEIVING_NUMBER : On state of EMCALLED_RINGING : On state of EMCALLED_TALKING : On state of EMCALLED_CALLED_ONHOOK : On state of EMCALLED_BUSYTONE : On state of STATE_UNKNOWN :
Table 2-2 E&M call statistics field description Field EM_IDLE EMCALLER_WAIT_OCCUPY EMCALLER_WAIT_SEND_NUM BER EMCALLER_SENDING_NUMBE R EMCALLER_RINGING EMCALLER_TALKING EMCALLER_CALLER_ONHOOK EMCALLED_WAIT_SEND_OCC UPY EMCALLED_WAIT_RECEIVE_N UMBER EMCALLED_RECEIVING_NUMB ER EMCALLED_RINGING EMCALLED_TALKING Description Number of messages processed in idle status by E&M module Number of messages processed in waiting for seizure status by E&M module Number of messages processed in the caller end waiting for sending phone number status by E&M module Number of messages processed in the caller end sending phone number status by E&M module Number of messages processed in the caller end ringback status by E&M module Number of messages processed in the caller end talking status by E&M module Number of messages processed in the caller end hooking on status by E&M module Number of messages processed in the called end waiting for seizure status by E&M module Number of messages processed in the called end waiting for receiving phone number status by E&M module Number of messages processed in the called end receiving phone number status by E&M module Number of messages processed in the called end ringing back status by E&M module Number of messages processed in the called end talking status by E&M module
Field EMCALLED_CALLED_ONHOOK EMCALLED_BUSYTONE STATE_UNKNOWN
Description Number of messages processed in the called end hooking on status by E&M module Number of messages processed in the called end busy status by E&M module Number of messages processed in unknown status by E&M module
2.1.12 display voice em ccb

Syntax
display voice em ccb
View
Any view
Parameter
None
Description
Use the display voice em ccb command to view the information of call control block of the E&M subscriber-line. This command applies to E1 voice only. This command is used to display the call status, call-ID, start type, signal type, channel number, etc.
Example
# Display the information of E&M signaling call control block.
[Router] display voice em ccb EMCCB of channel[ status em call ID start type signal type channel rcv call ID sig-wait timer 5]: : EMCALLER_TALKING : 1624 : EM_START_IMMEDIATE : EM_SIGNAL_DIGITAL : 5 : 1639 : 0

sig-conf timer msg-wait timer : 0 : 0
MCCB of channel[ 37]: status m call ID start type signal type channel rcv call ID sig-wait timer sig-conf timer msg-wait timer : EMCALLED_TALKING : 1625 : EM_START_IMMEDIATE : EM_SIGNAL_DIGITAL : 37 : 1640 : 0 : 0 : 0
Table 2-3 E&M call control block field description Field status em call ID start type signal type channel rcv call ID sig-wait timer sig-conf timer msg-wait timer Status of the call Identifier of E&M module in calling status Start mode of E&M connection Signal type of E&M connection Channel number of E&M connection Identifier of RCV module in calling status Timer of waiting for signal Timer of confirming signal Timer of waiting for message Description
2.1.13 display voice r2 call-statistics

Syntax
display voice r2 call-statistics
View
Any view
Parameter
None
Description
Use the display voice r2 call-statistics command to view the R2 call statistics. This command applies to E1 voice only. Related command: reset voice r2 call-statistics.
Example
# Display the information of R2 signaling call statistics.
[Router] display voice r2 call-statistics [ E1-Group(0:0) Call Statistics ] +-------------------------------------------------+ [Call sumcount] [call success] [Call failure] -> 4 -> 4 -> 0
[Call-in count] [Call-in success] [Call-in failure] [Call-in answer] [Call-in nullnum]
-> 1 -> 1 -> 0 -> 0 -> 0
[Call-out count] [Call-out success] [Call-out failure] [Call-out answer] [Call-out busy] [Call-out nullnum] [Call-out congestion]
-> 3 -> 3 -> 0 -> 3 -> 0 -> 0 -> 0
Table 2-4 R2 signaling call statistics field description Field Call sumcount Description Total number of calls: total number of calls in E1 time slot group (sum of incoming and outgoing calls) Number of successful calls: total number of successful signaling connection, that is, R2 signaling connection is successfully completed, and the opposite exchange is available for another call connection.
call success
Field Call failure Call-in count Call-in success Call-in failure Call-in answer
Description Number of failed calls: total number of failed signaling exchange during call connecting process, such as peer subscriber line busy, null called number, and line failure, etc.) Total number of incoming calls Total number of successful incoming calls Total number of failed incoming calls Number of sent answers: number of answer signals that the local exchange sends to the originating point when the call is connected successfully and the called party picks up the phone. Routing failure times: number of failed incoming calls due to no corresponding route available for the called number to create connection. Total number of outgoing calls Total number of successful outgoing calls Total number of failed outgoing calls Number of received answers: number of answer signals received from the terminating point when the call is connected successfully. Subscriber line busy times: number of subscriber line busy signals received from the terminating point during call connecting process. Count of null calling numbers: number of null number signals received from the terminating point during call connecting process. Number of received congestion: number of congestion signals received from the terminating point during call connecting process.
Call-in nullnum Call-out count Call-out success Call-out failure Call-out answer
Call-out busy
Call-out nullnum
Call-out congestion
2.1.14 display voice rcv statistic r2

Syntax
display voice rcv statistic r2
View
Any view
Parameter
None
Description
Use the display voice rcv statistic r2 command to view the information of call statistics related to the R2 signaling in the RCV module. This command applies to E1 voice only. This command is used to display the interactive messages between the RCV module and the R2 signaling module, including the number of sending the messages of the connection request to acknowledge success and fail, the number of sending the messages of activation acknowledgement of success and failure, the number of sending the messages of on-hook and off-hook, the number of receiving the messages of connection request, the number of receiving activation messages, and the number of receiving such messages as release, ringing, and unknown.
Example
# Display the information of R2 signaling call statistics in RCV module .
[Router] display voice rcv statistic r2 Statistic between RCV and R2 : { Send_R2_ConnectReqAck_SUCCESS Send_R2_ConnectReqAck_FAIL Send_R2_ActiveAck_SUCCESS Send_R2_ActiveAck_FAIL Send_R2_Onhook Send_R2_Offhook Send_R2_IPAlerting Recv_R2_ConnectReq Recv_R2_Active_TD_IN Recv_R2_Active_TD_OUT Recv_R2_Active_ELSE Recv_R2_Release Recv_R2_Alert_AP_ALERTING Recv_R2_Alert_ELSE Recv_R2_Unknow } : : : : : : : : : : : : : : : 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
Table 2-5 Field description of R2 signal call statistics in RCV module Field Send_R2_ConnectReqAck_ SUCCESS Send_R2_ConnectReqAck_F AIL Send_R2_ActiveAck_SUCC ESS Send_R2_ActiveAck_FAIL Send_R2_Onhook Send_R2_Offhook Send_R2_IPAlerting Recv_R2_ConnectReq Recv_R2_Active_TD_IN Recv_R2_Active_TD_OUT Recv_R2_Active_ELSE Recv_R2_Release Recv_R2_Alert_AP_ALERTI NG Recv_R2_Alert_ELSE Recv_R2_Unknow Description Number of sending connection request success-acknowledge message to R2 module Number of sending connection request failure-acknowledge message to R2 module Number of sending activation success-acknowledge message to R2 module Number of sending activation failure-acknowledge message to R2 module Number of sending onhook message to R2 module Number of sending offhook message to R2 module Number of sending IP side alerting message to R2 module Number of receiving R2 connection request message Number of receiving R2 called end hooking off message Number of receiving R2 caller end hooking off message Number of receiving R2 other hooking off message Number of receiving R2 release request message Number of receiving R2 alerting message Number of receiving R2 other alerting message Number of receiving R2 unknown message
2.1.15 display voice subscriber-line

Syntax
display voice subscriber-line e1-number : { ts-set-number | 15 } display voice subscriber-line t1-number : 23
View
Any view
Parameter
e1-number, t1-number: Indicate the number of subscriber line generated in creating the Timeslot set or the ISDN PRI set. ts-set-number: Indicate the number of the Timeslot set created successfully. 15: Indicate the subscriber line is generated in creating the ISDN PRI set on E1 subscriber line. 23: Indicate the subscriber line is generated in creating the ISDN PRI set on T1 subscriber line.
Description
Use the display voice subscriber-line command to view the subscriber line configuration. This command applies to E1 and T1 voice. The command display voice subscriber-line e1-number:ts-set-number is mainly used to display the Timeslot set corresponding to the E1 subscriber line, whether to adopt the private-line auto-ring connection and connection number, the subscriber line description, whether to start the echo cancellation function and echo cancellation sampling time length, and whether to start the comfort noise function. The command display voice subscriber-line e1-number:15 is mainly used to display the configuration information of the subscriber line corresponding to the ISDN PRI set, the command display voice subscriber-line t1-number:23 is mainly used to display the configuration information of the subscriber line corresponding to the ISDN PRI set, such as whether to adopt the private-line auto-ring connection, subscriber line description, whether to start the echo cancellation function and echo cancellation sampling time length, input gain and output attenuation, whether to adopt the nonlinear processing in echo cancellation, the time of waiting for the initial number and the dial-up time interval between numbers, etc.
Example
# Display the configuration about voice subscriber-line 1/0/0:0.
[Router] display voice subscriber-line 1/0/0:0 The voice line was ds0 this subscriber line was not set connection The subscriber line's descrition: echo cancellation enable echo cancellation coverage 16 comfort noise enable PCM companding type :A-law
[Router] display voice subscriber-line 1:15 The voice line was pri this subscriber line was not set connection The subscriber line's descrition: echo cancellation enable echo cancellation coverage 16 music threshold is -38 receive gain 0 transmit gain 0 first-dial timer 10 dial-interval Timer 10 PCM companding type :A-law
Table 2-6 Field description on voice subscriber-line configuration Field The voice line was this subscriber line The subscriber line's description echo cancellation echo cancellation coverage comfort noise The voice line was this subscriber line receive gain transmit gain first-dial timer dial-interval Timer Description The signaling type of the subscriber line The connection method of the subscriber line The description of the subscriber line The echo cancellation configuration of the subscriber line The echo cancellation coverage of the subscriber line The comfort noise of the subscriber line The signaling type of the subscriber line The connection method of the subscriber line The receive gain of the subscriber line The transmit gain of the subscriber line The timeout value after the subscriber dials the first digit The timeout value between dialing the first digit and dialing the second digit
2.1.16 display voice voip

Syntax
display voice voip { down-queue e1t1vi-no | phy-statistic e1t1vi-no | up-queue e1t1vi-no }
View
Any view
Parameter
e1t1vi-bno; Indicate the card number of the E1/T1 voice card.
Description
This command applies to E1 and T1 voice. The command display voice voip downqueue e1t1vi-bno displays the contents of the down interrupt queue between the E1/T1 voice card and the router main card. The command display voice voip up-queue e1t1vi-no displays the contents of the up interrupt queue between the E1/T1 voice card and the router main card. The command display voice voip phy-statistic e1t1vi-bno displays the statistics of the physical layer.
Example
# Display the contents of the down interrupt queue between the E1/T1 voice card and the router main card.
[Router] display voice voip down-queue 5 V = 0,I = 0,P = 0,C = 0,E = E1/T1VI_NULL_EVENT, B = 0 V = 0,I = 1,P = 0,C = 0,E = E1/T1VI_NULL_EVENT, B = 0 V = 0,I = 2,P = 0,C = 0,E = E1/T1VI_NULL_EVENT, B = 0 V = 0,I = 255,P = 0,C = 0,E = E1/T1VI_NULL_EVENT, B = 0 E1VI board 0 down interrupt queue is empty :
Table 2-7 Field description of the down interrupt queue between the E1/T1 voice card and the router main card. Field V I Description Value flag of interrupt Sequence number of interrupt down-queue
P C E B E1VI board 0 down interrupt queue is empty
Port number of E1VI board Channel number of E1VI board Type of event Flag of queue ending Interrupt down-queue of E1VI board is empty
2.1.17 dl-bits
Syntax
dl-bits { answer | blocking | clear-back | clear-forward | idle | seize | seizure-ack | release-guard } { receive | transmit } ABCD undo dl-bits { answer | blocking | clear-back | clear-forward | idle | seize | seizure-ack | release-guard } { receive | transmit }
View
R2 CAS view
Parameter
answer: Answer signal of R2 line signaling. blocking: Blocking signal of R2 line signaling. clear-back: Clear-back signal of R2 line signaling. clear-forward: Clear-forward signal of R2 line signaling. idle: Idle signal of R2 line signaling. seize: Seizure signal of R2 line signaling. seizure-ack: Seizure acknowledgement signal of R2 line signaling. release-guard: Release guard signal of R2 line signaling. receive:Signal of receiving R2 line signaling transmit: Signal of sending R2 line signaling ABCD: Value of signal bits of receiving/sending R2 line signaling, ranging from 0000 to 1111.
Table 2-8 Default values of R2 line signaling Signal Answer Blocking Clear-back Clear-forward Idle Seize Seizure-ack Release-guard Default rx-bits ABCD 0101 1101 1101 1001 1001 0001 1101 1001 Default tx-bits ABCD 0101 1101 1101 1001 1001 0001 1101 1001
Description
Use the dl-bits command to configure the bit value of all the signals of R2 line signaling. Use the undo dl-bits command to restore the values to defaults. This command applies to E1 voice only. You can use the dl-bits command to configure the ABCD bits value of R2 signaling for different coding schemes in different countries. Related command: seizure-ack{enable/disable} and answer {enable/disable}.
Example
# Configure ABCD bits value of the idle signal of receiving R2 signaling to 1101, and that of the idle signal of transmitting R2 signaling to 1011.
[3Com-cas1/0/4:0] dl-bits idle receive 1101 [3Com-cas0:0] dl-bits idle transmit 1011
2.1.18 dtmf
Syntax
dtmf { enable | disable }
View
R2 CAS view
Parameter
enable: Enables R2 signaling to be received and sent in DTMF mode. disable: Disables R2 signaling to be received and sent in DTMF mode.
Description
Use the dtmf command to configure the way of sending and receiving R2 signaling. By default, MFC mode, not DTMF mode, is used to collect call number information. This command applies to E1 voice only. The dtmf command is used to configure whether to use MFC or DTMF for sending and receiving R2 signaling. DTMF mode is used when you configure dtmf enable. MFC mode is used when you configure dtmf disable. Related command: timer dtmf.
Example
# Configure DTMF mode to receive and send R2 signaling.
[3Com-cas1/0/0:0] dtmf enable
2.1.19 effect-time
Syntax
effect-time time undo effect-time
View
R2 CAS view
Parameter
time: The lower threshold of the debounce time of line signaling, in the range 10 to 40 milliseconds. It defaults to 10 milliseconds.
Description
Use the effect-time command to configure the debounce time of line signaling. Use the undo effect-time command to restore the default. This command applies to E1 voice only. The change of the line is regarded valid only when the duration of line signaling exceeds this threshold.
Related command: timeslots-set, pri-set.
Example
# Set the debounce time of line signaling to 20 milliseconds for timeslot set 3 on the E1 subscriber-line 1/0/0.
[Router-cas1/0/0:3] effect-time 20
2.1.20 final-callednum
Syntax
final-callednum { enable | disable }
View
R2 CAS view
Parameter
enable: Enables the called number terminate signal to be sent back. disable: Disables the called number terminate signal to be sent back.
Description
Use the final-callednum command to enable or disable the terminate signal to be sent to the terminating point after the called number is sent. By default, the called number terminate signal is disabled. This command applies to E1 voice only. In some countries, the R2 interregister signaling can be used to send the called number terminate signal after the called number is sent out, indicating that the called number transmission is completed. In this case, you can use this command to adjust the signaling exchange approach. When the terminating point receives the terminate signal, it stops requesting for the called number. Related command: register-value digital-end.
Example
# Enable the called number terminate signal.
[3Com-cas1/0/0:0] final-callednum enable
2.1.21 force-metering
Syntax
force-metering { enable | disable }
View
R2 CAS view
Parameter
enable: Enables the metering signal of R2 signaling. disable: Disables the metering signal of R2 signaling.
Description
Use the force-metering command to enable or disable the metering signal of R2 signaling. By default, the metering signal of R2 signaling is disabled. This command applies to E1 voice only. If the opposite exchange supports the metering signal, the 3Com router, as the terminating point, sends a forced-release signal instead of a clear-back signal when it terminates a call so as to indicate that the called party has released the line and the call is terminated; and so metering signal collision can be avoided.
Example
# Enable the metering signal of R2 signaling.
[3Com-cas1/0/0:0] force-metering enable
2.1.22 group-b
Syntax
group-b { enable | disable }
View
R2 CAS view
Parameter
enable: Enables signal exchange at Group-B stage of R2 signaling. disable: Disables signal exchange at Group-B stage of R2 signaling, that is, backward Group-A signal A6 is used to complete register exchange directly.
Description
Use the group-b command to enable or disable Group-B stage signal to complete register exchange. By default, Group-B stage signal is used to complete register exchange, that is, the command is in enable state. This command applies to E1 voice only. In some countries, R2 register exchange does not support Group-B stage exchange, or cannot correctly interpret Group-B signal value. Then you can use the group-b command to enable or disable Group-B signal exchange. Related command: register-value req-switch-groupb.
Example
# Enable Group-B signal to complete register exchange.
[3Com-cas1/0/0:0] group-b enable
2.1.23 line
Syntax
line slot -number : { ts-set-number | 15 } line slot -number : 23 undo line
View
Voice entity view
Parameter
slot number; Indicate the serial number of E1/T1 subscriber-line to which this subscriber line belongs. ts-set-number: Indicate the serial number of Timeslot set established successfully. 15 Indicate adopting the E1 voice ISDN PRI interface mode. 23 Indicate adopting the T1 voice ISDN PRI interface mode.
Description
Use the line command to configure the corresponding relationship between the POTS voice entity and the logic subscriber line.
Use the undo line command to cancel the corresponding relationship between the POTS peer and the logical subscriber line. This command applies to E1 and T1 voice. This command can be used in POTS voice entity view only and takes effect on E1/T1 voice subscriber-line only. After configuring the destination mode of voice entity by using the command match-template, it is required to use the command line to configure the corresponding relationship between the POTS voice entity and logic line, that is, to specify that via which line the routing should be performed toward this destination. Use the command line e1-number:ts-set-number to select the subscriber line corresponding to Timeslot set in this E1 subscriber-line as the routing output. Use the command line e1-number:15 corresponding to the ISDN PRI set in this E1 subscriber-line as the routing output. Use the command line t1-number:23 corresponding to the ISDN PRI set in this T1 subscriber-line as the routing end. Related command: timeslots-set, entity, pri-set.
Example
# Configure the corresponding relationship between POTS voice entity 3 and No.1 Timeslot set in E1 subscriber-line.
[Router-voice-dial-entity3] line 1/0/1:1
2.1.24 loopback
Syntax
View
Parameter
local: Places the local physical layer in a local loopback. remote: Places the local physical layer in a remote loopback. payload: Places the local physical layer in a payload loopback.
Description
Use the loopback command to set the loopback mode on the interface.
Use the undo loopback command to restore the default.
Example
# Place the local physical layer of interface E1 1/0 in a local loopback.
[Router-E1 1/0/0] loopback local
2.1.25 mfc (R2 CAS)

Syntax
mfc { block | open | query } timeslots timeslots-list
View
R2 CAS view
Parameter
block: Indicates blocking the MFC channel of the specified timeslot. open: Indicates opening the MFC channel of the specified timeslot. query: Indicates querying the MFC channel of the specified timeslot. timeslots-list: Specifies a timeslot range. The expression includes the single digit, two digits separated by ,, a pair of digits separated by -, or the combination form (e.g., 1-14, 15, 17-31). The value range of digits is the integer from 1 to 31.
Description
Use the mfc command to maintain a MFC channel of the specified timeslot. This command applies to E1 voice only. To block the MFC channel means that this channel will no longer load the R2 interregister signaling information, that is, this channel is set manually as unavailable. To open the MFC channel is the processes inverse to the blocking operation, which can re-set the channel as available and enable it to load R2 interregister signaling. To query the MFC channel will display the busy/idle, opened/blocked status of channel in a real time way. Related command: cas, ts.
Example
# Block the timeslots 1-15 in No.5 Timeslot set, and query the channel status of the timeslots 1-31.
[Router-cas1/0/0:5] mfc block timeslots 1-15
[Router-cas1/0/0:5] mfc query timeslots 1-31
2.1.26 mode
Syntax
mode zone-name [ default-standard ]
View
R2 CAS view
Parameter
zone-name: Name of the country or region. By default, it is set to the mode of ITU-T. It can be: argentina: Uses Argentinean R2 signaling standard. australia: Uses Australian R2 signaling standard. China: Uses Chinese R2 signaling standard. bengal: Uses Bengalee R2 signaling standard. brazil: Uses Brazilian R2 signaling standard. custom: Uses the R2 signaling mode defined by customer. hongkong: Uses Hongkong R2 signaling standard. india: Uses Indian R2 signaling standard. indonesia: Uses Indonesian R2 signaling standard. itu-t: Uses ITU-T R2 signaling standard. korea: Uses Korean R2 signaling standard. malaysia: Uses Malaysian R2 signaling standard. mexico: Uses Mexican R2 signaling standard. newzealand: Uses New Zealand R2 signaling standard. singapore: Uses Singaporean R2 signaling standard. thailand: Uses Thai R2 signaling standard. default-standard: Initializes the related parameters of R2 signaling according to the mode in the current country, that is, initializes the values of the sense and force-metering commands.
Description
Use the mode command to configure the R2 signaling mode in a country or region.. This command applies to E1 voice only. The implementation and parameters of R2 signaling vary in different countries. Therefore, the mode needs to be adjusted to enable 3Com router to exchange R2 signaling with the
switching devices of different countries or regions. According to the configuration, the system automatically selects the appropriate subscriber-line state, service type, metering signal, and the signal values of C and D bits, etc. At present, it supports the modes in Brazil, Mexico, Argentina, India, New Zealand, Thailand, Bengal, South Korea, Hongkong, Indonesia, as well as the countries and regions that comply with ITU-T standards. If the default-standard parameter is configured, then the system will initialize the subscriber line status, service type, metering signal and C singaling bit and D signaling bit and other parameters according to the national standards of the countries or regions. In the custom mode, you can configure the specific signaling exchange process and signal values of R2 signaling, so as to adjust the R2 signaling in your country in a more flexible way. You can execute this command only when the register-enable off command is configured. Related command: register-value, force-metering, effect-time.
Example
# Adopt the default standard of Hongkong R2 signaling mode.
[3Com-cas1/0/0:0] mode hongkong default-standard
2.1.27 re-answer
Syntax
re-answer { enable | disable }
View
R2 CAS view
Parameter
enable: Enables the originating point to support re-answer signal process. disable: Disables the originating point to support re-answer signal process.
Description
Use the re-answer command to enable or disable the originating point to support re-answer signal process. By default, the originating point does not support re-answer signal process. This command applies to E1 voice only. In some countries, re-answer process is needed in R2 signaling. When the terminating point sends a clear-back signal, the originating point does not release the line right away,
but maintains the call state instead. If it receives the re-answer signal from the terminating point in the specified time, it continues the call; otherwise, it disconnects the call after timeout. Related command: answer, timer dl re-answer.
Example
# Enable the originating point to process re-answer signals.
[Router-cas1/0/0:0] re-answer enable
2.1.28 register-number
Syntax
register-number undo register-number
View
Voice entity view
Parameter
None
Description
Use the register-number command to enable the gateway (the VoIP-enabled router) to register the number of the voice entity with the H.323 gatekeeper or SIP server. Use the undo register-number command to disable the gateway to register the number of the voice entity when registering with the H.323 gatekeeper or SIP server. By default, the number of the voice entity is registered. You need to use the undo register-number command to disable the gateway to register the numbers of some voice entities with a gatekeeper or SIP server in the situations where: POTS entities with the same number exist on multiple gateways on the same network. But for their gatekeeper or SIP server, the number of a POTS entity must be unique. Therefore, those POTS entities cannot register with the gatekeeper or SIP server at the same time. The user needs to register the numbers of some ports with the gatekeeper or SIP server but not the numbers of others for special purposes. This command is only applicable to the configurations of POTS voice entities.
Caution: After configuring this command, use the ras-on command in GK-client view or the register-enable command in SIP view to register the number with the gatekeeper or SIP server to make the configuration effective.
Related command: match-template.
Example
# Disable the gateway to register the number of voice entity 1.
[Router-voice-dial-entity1] undo register-number
2.1.29 register-value
Syntax
register-value { billingcategory | callcreate-in-groupa | callingcategory | congestion | demand-refused | digit-end | nullnum | req-billingcategory | req-callingcategory | req-currentdigit | req-firstcallingnum | req-firstdigit | req-nextcallednum | req-nextcallingnum | req-lastfirstdigit | req-lastseconddigit | req-lastthirddigit | req-switch-groupb | subscriber-busy | subscriber-idle } value undo register-value { billingcategory | callcreate-in-groupa | callingcategory | congestion | demand-refused | digit-end | nullnum | req-billingcategory | req-callingcategory | req-currentdigit | req-firstcallingnum | req-firstdigit | req-nextcallednum | req-nextcallingnum | req-lastfirstdigit | req-lastseconddigit | req-lastthirddigit | req-switch-bgroup | subscriber-busy | subscriber-idle }
View
R2 CAS view
Parameter
billingcategory value: Specifies the billing category value, in the range 1 to 16. It defaults to 1. callcreate-in-groupa value: Specifies the directly created calling signal value, in the range 1 to 16. It defaults to 6. callingcategory value: Specifies calling category value, in the range 1 to 16. It defaults to 1.
congestion value: Specifies congestion value, in the range 1 to 16. It defaults to 4. demand-refused value: Specifies demand-refused value, in the range 1 to 16. It defaults to 12. digit-end value: Specifies digit-end value, in the range 1 to 16. It defaults to 15. nullnum value: Specifies null number value, which ranges from 1 to 16. It defaults to 5. req-billingcategory value: Specifies request billing category value, in the range 1 to 16. It defaults to 3. req-callingcategory value: Specifies request calling category value, in the range 1 to 16. It defaults to 3. req-currentdigit value: Specifies request current digit value, in the range 1 to 16. It defaults to 16. req-firstcallingnum value: Specifies request first calling number value, in the range 1 to 16. It defaults to 5. req-firstdigit value: Specifies request first digit value, in the range 1 to 16. It defaults to 16. req-nextcallednum value: Specifies request next called number value, in the range 1 to 16. It defaults to 1. req-nextcallingnum value: Specifies request next calling number value, in the range 1 to 16. It defaults to 5. req-lastfirstdigit value: Specifies request last first digit value, in the range 1 to 16. It defaults to 2. req-lastseconddigit value: Specifies request last second digit value, in the range 1 to 16. It defaults to 7. req-lastthirddigit value: Specifies request last third digit value, in the range 1 to 16. It defaults to 8. req-switch-groupb value: Specifies request switch Group-B value, in the range 1 to 16. It defaults to 3. subscriber-busy value: Specifies subscriber line busy value, in the range 1 to 16. It defaults to 3. subscriber-idle value: Specifies subscriber line idle value, in the range 1 to 16. It defaults to 6.
Description
Use the register-value command to configure the value of all register signals of R2 signaling.
Use the undo register-value command to restore the default value. Signal value 16 means the corresponding signal function does not exist. For example, if the request last first digit function does not exist in some countries, the value of req-lastfirstdigit is 16. This command applies to E1 voice only. By configuring the register-value command, you can send the specified request signal and require the opposite exchange to send back the corresponding answer signal. For example, using the register-value callingcategory command, you can enable the terminating point to send the specified signal to require the originating point to send back the calling category. The register-value billingcategory command is used to configure KA signal of R2 signaling. That is, the originating point sends a calling category signal to the originating toll office or originating international exchange, which provides two kinds of information: billing category of this connection (paid at the specified time or at once, or toll free) and subscriber level (with or without priority). The register-value callingcategory command is used to configure KD signal of R2 signaling, i.e., calling category. It functions to identify whether break-in and forced- release can be implemented by or on the calling party. The register-value subscriber-idle command is used to configure KB signal of R2 signaling. It indicates subscriber status (such as idle), and acknowledges and controls connection. You should make sure that KB values of the both ends are the same. Otherwise, call connection might not be established even if the called party is idle. If 3Com routers are used at both ends, you should make sure that KB values of the both ends are the same. If PBX is used at one end, and a router is used at the other end, you should adjust the KB value of the router to keep it consistent with that of the PBX.
Note: In some countries, the register signal encoding scheme does not necessarily support all the register signals described above. For example, there is no billingcategory but callingcategory in ITU-T recommendation. Therefore, it is recommended that you use the default values and do not configure unless there are special requirements.
Related command: group-b {enable/disable}.
Example
# Request the originating point to send calling category by configuring a backward signal (signal value 7).
[3Com-cas1/0/0:0] register-value req-callingcategory 7
2.1.30 renew
Syntax
renew ABCD undo renew
View
R2 CAS view
Parameter
ABCD: Indicate the default of each signal bit in transmission, with the value being 0 or 1. It defaults to 1111.
Description
Use the renew command to configure the signal values of C bit and D bit. Use the undo renew command to restore the default value. This command applies to E1 voice only. In the R2 signaling A-bit and B-bit are used to transmit the valid information, and the actual transmission signal has nothing to do with the setting value. C-bit and D-bit do not transmit the valid information, and generally the set signal value is adopted as the transmission signals. Therefore, for the R2 signaling, this command only makes sense to C-bit and D-bit. Using this command, you can adjust the values of C and D bits according to the line signaling encoding standards in different countries. For example, in China, the values of C and D bits of R2 signaling are fixed to 1 and 1 respectively. However, in most other countries, the values of C and D bits can only be 0 and 1 respectively. Related command: cas, reverse.
Example
# Configure the signal values of both the C-bit and D-bit of R2 line signaling as 1.
[Router-cas1/0/0:5] renew 0011
2.1.31 req-category-offset
Syntax
req-category-offset value
undo req-category-offset
View
R2 CAS view
Parameter
value: Number of called number digits that must be collected for another calling category request, ranging from 0 to 32. By default, it is set to 0, meaning no service category request.
Description
Use the req-category-offset command to configure the number of digits the system should have collected before requesting the calling category only. Use the undo req-category-offset command to restore the default value. This command applies to E1 voice only. In some counties, after collecting the digits of the called number, R2 interregister signaling does not have to collect the calling number information, it only needs to request the calling category. In such cases, you can use the req-category-offset command to adjust this signaling exchange method. Related command: ani-offset.
Example
# Configure the system to request the calling category only, after it has collected 5 digits of the called number.
[3Com-cas1/0/0:0] req-category-offset 5
2.1.32 reset voice em

Syntax
reset voice em
View
User view
Parameter
None
Description
Use the reset voice em command to reset the call statistics on the digital E&M interface. This command applies to E1 voice lines only. Related command: display voice em call-statistics.
Example
# Reset the call statistics on the E&M interface.
<Router> reset voice em
2.1.33 reset voice r2

Syntax
reset voice r2
View
User view
Parameter
None
Description
Use the reset voice r2 command to reset the call statistics of R2 signaling. This command applies to E1 voice only. Related command: display voice r2 call-statistics.
Example
# Reset the call statistics of R2 signaling.
<Router> reset voice r2
2.1.34 reverse
Syntax
reverse ABCD undo reverse
View
R2 CAS view
Parameter
ABCD: Indicates whether to perform the inversion of each signal bit, with the value of each bit being 0 or 1. The default ABCD is 0000, that is, the function of inversion is disabled.
Description
Use the reverse command to configure the inversion mode of line signals. Use the undo reverse command to restore the default value. This command applies to E1 voice only. This command can be used to perform the inversion change to A, B, C, and D bits prior to sending and after receiving the line signal, that is, 0 is changed to 1, and 1 to 0. If the value of one bit is 1, it indicates this bit is needed to invert. Related command: cas, renew.
Example
# reverse the B-bit and D-bit of the R2 line signaling.
[Router-cas1/0/0:0] reverse 0101
2.1.35 seizure-ack
Syntax
seizure-ack { enable | disable }
View
R2 CAS view
Parameter
enable: Enables the terminating point to send seizure acknowledgement signal. disable: Disables the terminating point to send seizure acknowledgement signal.
Description
Use the seizure-ack command to enable or disable the terminating point to send seizure acknowledgement signal. By default, the terminating point sends seizure acknowledgement signal. This command applies to E1 voice only. Normally, the terminating point sends seizure acknowledgement signal when it receives a seizure signal from the originating point. However, in some countries R2 signaling encoding
scheme allows the terminating point not to send seizure acknowledgement signal. In this case, you can use the seizure-ack command to adjust the signaling encoding scheme. If the originating point does not require acknowledgement signal, the terminating point has no need to send back the signal when it receives a seizure signal. Related command: timer dl seizure.
Example
# Disable the terminating point to send seizure acknowledgement signal.
[3Com-cas1/0/0:0] seizure-ack disable
2.1.36 select-mode
Syntax
select-mode [ max | maxpoll | min | minpoll ]
View
R2 CAS view
Parameter
max: Indicate the maximum selection. maxpoll: Indicate the maximum polling selection. min: Indicate the minimum selection. minpoll: Indicate the minimum polling selection.
Description
Use the select-mode command to configure the E1 trunk selection mode. By default, the trunk selection mode is min. This command applies to E1 voice only. The proper selection policy can not only enables each timeslot in E1 trunk to have the balanced opportunity to be used but also helps to enhance the speed of selecting idle timeslot, so as to improve the telephone connection speed. The parameter max indicates the maximum selection, selecting the timeslot of the maximum serial number from the currently available timeslots. The parameter maxpoll indicates the maximum polling selection. When used for the first time, select the timeslot of the maximum serial number from the currently available timeslots, and next time select the available timeslot whose serial number is less than it.
For example, No.31 and No.29 timeslots are unavailable in 32 timeslots, so select firstly No.30 timeslot, and select No.28 timeslot secondly. The parameter min indicates the minimum selection, selecting the timeslot of the minimum serial number from the currently available timeslots. The parameter minpoll indicates the minimum polling selection. When used for the first time, select the timeslot of the minimum serial number from the currently available timeslots , and next time select the available timeslot whose serial number is bigger than it. For example, No.1 and No.3 timeslots are unavailable in 32 timeslots, so select firstly No.2 timeslot, and select No.4 timeslot secondly. Using the command select-mode without any parameter can restore the default trunk timeslot selection mode. Related command: cas and trunk-direction.
Example
# Configure the trunk selection mode as max for the No.5 Timeslot set in No.0 E1 subscriber-line.
[Router-cas1/0/0:5] select-mode max
2.1.37 sendring
Syntax
sendring { ringback | ringbusy } { enable | disable }
View
R2 CAS view
Parameter
ringback { enable | disable }: Enables/disables the sending of ring-back signal. ringbusy { enable | disable }: Enables/disables the sending of ring-busy signal.
Description
Use the sendring command to enable or disable the terminating point to send ring-back tone or busy tone singal to the calling party. By default, the ring-back tone and busy tone signals are sent. This command applies to E1 voice only. In some regions a PBX, as the originating point, might not send ring-back tone to the calling party during call connecting process. To avoid call connection failure due to the calling party
not able to hear the corresponding tone, you can manually configure the sendring command. If 3Com router works as the terminating point, it sends the corresponding tone to the originating point according to call connection situations. Related command: timer ringring.
Example
# When time slot 5 on the E1 port 0 works as the terminating point, enable it to send ring-back tone to the originating point.
[3Com-cas1/0/0:5] sendring ring-back enable
2.1.38 signal-value
Syntax
signal-value { received idle | received seize | transmit-bits idle | transmit seize } ABCD undo signal-value { received idle | received seize | transmit-bits idle | transmit seize }
View
Parameter
received idle: The digital E&M subscriber-line receives the idle signaling. received seize: The digital E&M subscriber-line receives the seizure signaling. transmit idle: That the digital E&M subscriber-line transmits the idle signaling. transmit seize: The digital E&M subscriber-line transmits the seizure signaling. ABCD: The default value of each signaling bit in a transmission. It is valued to be either 0 or 1. By default, the ABCD bits value of the received and transmitted idle signaling and seizure signaling on the digital E&M subscriber-line are 1101.
Description
Use the signal-value command to configure the digital E&M subscriber-line to receive and transmit the ABCD bits of idle signaling and seizure signaling. Use the undo signal-value command to restore the bits of the corresponding signaling to the default value. This command applies to E1 voice only. When the router and its peer device, such as a PBX, communicate using the digital E&M signaling, it should be ensured that they interpret the ABCD bits of the received and
transmitted idle signaling and seizure signaling in the same way. That is, the signaling of the same type should have the same bit value at both ends. Related command: subscriber-line.
Example
# Set the ABCD bits of seizure signaling transmitted by the digital E&M subscriber-line are 1011.
[Router-voice-line1/0/0:0] signal-value transmit seize 1011
2.1.39 special-character
Syntax
special-character character number
View
R2 CAS view
Parameter
character: A special character, which can be #, *, A, B, C, or D. number: Code of the register signal, ranging from 11 to 15.
Description
Use the special-character command to configure the supported special characters during register signal exchange. By default, no special character is configured. This command applies to E1 voice only. In some countries, besides numerical information, register forward Group I signal of R2 signaling also supports the information containing special characters, such as # and *. To encode these special characters, you need to use the special-character command.
Note: Do not use the special-character command to configure one special character to different signal codes.
Example
# Configure register signal code of # to 11.
[3Com-cas1/0/0:0] special-character # 11
2.1.40 subscriber-line
Syntax
subscriber-line slot-number: { ts-set-number | 15 } subscriber-line slot-number: 23
View
Any voice view except voice entity view
Parameter
slot number: Indicate the subscriber line number generated in creating Timeslot set or ISDN PRI set, determined by the slot number of the E1V1 module. ts-set-number: Indicate the number of Timeslot set created successfully. 15: Indicate the subscriber line is generated in creating the ISDN PRI set on E1 subscriber line. 23: Indicate the subscriber line is generated in creating the ISDN PRI set on T1 subscriber line.
Description
Use the subscriber-line command to enter the voice subscriber-line view. This command applies to E1 and T1 voice. After creating the Timeslot set successfully, the system will generate the subscriber line corresponding to this Timeslot set according to current E1 subscriber-line number and Timeslot set number, and the subscriber line number is E1 subscriber-line number: Timeslot set number. After configuring the ISDN PRI set successfully, the system will generate the subscriber line corresponding to this PRI set according to the number of E1 subscriber-line where the current PRI subscriber-line is located, and the subscriber line number is E1 subscriber-line number: 15. After configuring the ISDN PRI set successfully on T1 subscriber-line, the system will generate the subscriber line corresponding to this PRI set according to the number of T1
subscriber-line where the current PRI subscriber-line is located, and the subscriber line number is T1 subscriber-line number: 23. Related command: timeslots-set, pri-set.
Example
# Enter the view of subscriber line 1/0/0:5.
[Router-voice] subscriber-line 1/0/0:5 [Router-voice-line1/0/0:5]
2.1.41 timer (Digital E&M)

Syntax
timer { dial-interval | ring-back } seconds timer wait-digit { seconds | infinity } undo timer { dial-interval | ring-back | wait-digit }
View
Parameter
dial-interval seconds: Set the max waiting time between two digit numbers, it is any integer in the 0 to 300 seconds. By default, the dial-interval seconds is 100 seconds. ring-back seconds: Set the timeout time for the calling party to wait for the ringback response from the called party. It is any integer in the range 5 to 60000 seconds. By default, the ring-back seconds is 60 seconds. wait-digits second: Set the timeout time for the called party to wait for the called number. It is any integer in the range 3 to 600 seconds. By default, the wait-digits seconds is 5 seconds. infinity: Indicate that there is no time limit, that is, timeout will not occur.
Description
Use the timer command to configure the timeout values of the signals in the digital E&M signaling. Use undo timer command to restore them to defaults. This command applies to E1 voice only.
The timer ring-back seconds command can be used at the digital E&M subscriber-line to set the timeout time for a calling party to wait for the ringback response from the called party. The timer wait-digit seconds command can be used at the digital E&M subscriber-line to set the timeout time for a called party to wait for the called number. Related command: timing.
Example
# Set the ringback response timer to 30 seconds on a voice subscriber-line.
[Router-voice-line1/0/0:3] timer ring-back 30
2.1.42 timer dtmf (R2)

Syntax
timer dtmf time undo timer dtmf
View
R2 CAS view
Parameter
time: Interval at which R2 signaling sends DTMF signals, in the range 50 to 10000 milliseconds. It defaults to 50 milliseconds.
Description
Use the timer dtmf command to configure the time interval for sending DTMF signals. Use the undo timer dtmf command to restore the default value. This command applies to E1 voice only. Normally, the originating point sends a DTMF signal upon receiving the line seizure acknowledgement signal. Using this command, you can configure the device at the originating point to send a DTMF signal after the specified time interval, so as to make it appropriate to the number receiving process of the peer PBX, Related command: dtmf { enable | disable }.
Example
# Configure the R2 signaling to send a DTMF signal 800 milliseconds after the reception of the seizure acknowledgement signal.

[3Com-cas1/0/0:0] timer dtmf 800
2.1.43 timer register-pulse (R2)

Syntax
timer register-pulse persistence time undo timer register-pulse
View
R2 CAS view
Parameter
persistence time: Duration time of the register pulse signal of R2 signaling, ranging from 100 to 1,000 milliseconds. By default, it is set to 150+30 milliseconds.
Description
Use the timer pulse command to configure the persistence time of the register pulse signal of R2 signaling (A3, A4 and A6, etc.). Use the undo timer pulse command to restore the default value. This command applies to E1 voice only. When the terminating point sends a backward register pulse signal, such as A3, the signal must persist for a specified time range. When the originating point receives the pulsed A3 signal, it has to send a forward Group II signal. When the originating point recognizes the pulse signal A4, A6, or A15, it stops sending any forward signal, and terminates the register signal exchange. Related command: timer register-complete.
Example
# Set the persistence time of the register pulse signal of R2 signaling to 300ms.
[Router-cas1/0/0:0] timer register-pulsepersistence 300
2.1.44 timer register-complete (R2)

Syntax
timer register-complete group-b time undo timer register-complete group-b
View
R2 CAS view
Parameter
group-b time: Timeout value in which the originating point waits for Group-B signal of R2 signaling. The terminating point should send Group-B signal in the specified time when switching to Group-B exchange. It ranges from 100 to 90,000ms. By default, it is set to 30,000ms.
Description
Use the timer register-complete command to configure the timeout value for register signals of R2 signaling. Use the undo timer register-complete command to restore the default value. This command applies to E1 voice only. Related command: timer dl.
Example
# Configure the maximum Group-B signal exchange time to 10,000 ms during connecting process.
[Router-cas1/0/0:0] timer register-complete group-b 10000
2.1.45 timer ring (R2)

Syntax
timer ring { ringback | ringbusy } time undo timer ring { ringback | ringbusy }
View
R2 CAS view
Parameter
ringback time: Time interval before ring-back tone is sent, ranging from 1,000 to 90,000ms. By default, it is set to 60,000ms. ringbusy time: Time interval before busy tone is sent, ranging from 1,000 to 90,000ms. By default, it is set to 30,000ms.
Description
Use the timer ring command to configure the maximum time range before the signal tone of R2 signaling is sent. Use the undo timer ring command to restore it to the default value. This command applies to E1 voice only. By manually configuring the sending command, you can enable the device at the originating point to send ring-back and busy tones to the calling party. The timer ring command helps you identify these signals. Related command: sendring.
Example
# Configure the timeout interval for R2 signaling ring-back tone to 10,000ms.
[Router-cas1/0/0:0] timer ring ringback 10000
2.1.46 timer dl (R2)

Syntax
timer dl { answer | clear-back | clear-forward | seizure | re-answer | release-guard } time undo timer dl { answer | clear-back | clear-forward | seizure | re-answer | release-guard }
View
R2 CAS view
Parameter
answer time: Timeout interval during which R2 waits for an answer signal. The terminating point should send back an answer signal in the specified time after a seizure acknowledgement signal is sent. It ranges from 10 to 120000 milliseconds and defaults to 60000 milliseconds. clear-back time: Timeout interval of R2 clear-back signal. After it sends a clear-back signal, the terminating point should recognize the forward signal sent by the originating point in the specified time. It ranges from 100 to 60000 milliseconds. By default, it is set to 10000 milliseconds. clear-forward time: Timeout interval of R2 clear-forward signal. After the originating point sends a clear-forward signal, the terminating point should send back a corresponding line
signal in the specified time, such as clear-back signal or release guard signal. It ranges from 100 to 60000 milliseconds. By default, it is set to 10000 milliseconds. seizure time : Timeout value of R2 seizure signal. After the originating point sends a seizure signal, the terminating point should send back a seizure acknowledgement signal in the specified time. It ranges from 100 to 5000 milliseconds. By default, it is set to 1000 milliseconds. re-answer time: Timeout interval of R2 re-answer signal. When the originating point recognizes the clear-back signal, if the terminating point does not send a re-answer signal in the specified time, the originating point releases the line. It ranges from 100 to 60000 milliseconds. By default, it is set to 1000 milliseconds. release-guard time: Timeout interval of R2 release guard signal. When the originating point sends a clear-forward signal, the terminating point should send a release guard signal in the specified time after it sends back a clear-back signal. It ranges from 100 to 60000 milliseconds. By default, it is set to 10000 milliseconds.
Description
Use the timer dl command to configure the timeout value of line signals of R2 signaling. Use the undo timer dl command to restore the default value. This command applies to E1 voice only. Related command: timer complete.
Example
# Configure the timeout interval of R2 signaling seizure signal to 300ms.
[Router-cas1/0/0:0] timer dl seize 300
2.1.47 timeslot-set
Syntax
timeslot-set ts-set-number timeslot-list timeslots-list signal { e&m-delay |
e&m-immediate | e&m-wink | r2 } undo timeslot-set ts-set-number
View
Parameter
ts-set-number: Specify the identification number of a certain Timeslot set, with the value ranging from 0 to 30. timeslots-list: Specify a timeslot range. The expression includes the single digit, two digits separated by ,, a pair of digits separated by -, or the combination form (e.g., 1-14, 15, 17-31). The value range of digits is the integer from 1 to 31. signal: Specify the binding signaling mode of this Timeslot set, which is generally used to configure the signaling mode adopted by the central office. It includes the following types of signaling: e&m-delay Adopt the delay-start mode in the digital E&M signaling. e&m-immediate Adopt the immediate-start mode in the digital E&M signaling. e&m-wink Adopt the wink-start mode in the digital E&M signaling. r2 Specify that the signaling mode adopt ITU-T Q.421 digital line signaling R2, which is the most common configuration signaling.
Description
Use the timeslot-set command to configure the timeslot set to perform R2 signaling and digital E&M signaling configurations. Use the undo timeslot-set command to cancel the specified timeslot set. By default, no TS set is configured, and if the digital E&M signaling is used, then adopts e&m-immediate mode. This command applies to E1 voice only. The Timeslot set is actually the logical subscriber line abstracted from the physical E1 interface, mainly used for configuring R2 signaling, digital E&M signaling and other voice functions. In one E1 interface only one Timeslot set can be defined. In defining the timeslot range of Timeslot set, the timeslot range can be distributed is 1-15 and 17-31, and the No.16 timeslot is reserved as the transmission channel of the out-of-band signaling. When using the digital E&M signaling delay-start mode (e&m-delay), If the calling side off-hooks to occupy the trunk line, the connected peer (e.g., PBX) will also enter the off-hook state to answer the calling party and will remain in that state until it is ready for receiving the address message. In this case, the PBX enters the hook-up state (this interval is the delay-dial period). The calling party sends the address message, and PBX connects this call to the called party, and thus the two parties can begin their communications. When the digital E&M signaling e&m-immediate mode is adopted, the calling party off-hooks to wait for the confirmation of time, and then it sends the dialing address
message to the connected peer such as a PBX. During the process, it does not detect whether the PBX is ready to receive. When the digital E&M signaling e&m-wink mode is adopted, the calling party first off-hooks to occupy the trunk line while the connected peer (e.g., a PBX) remains in the hook-up state until it receive the connecting signal from the calling party. In this case, the wink signal sent by the PBX indicates that it has been ready. Upon receiving the wink signal, the calling party begins to send the address message and the PBX will connect the call to the called party and thus the two parties can begin their communications. Only after establishing TS set successfully can the command subscriber-line be used to enter the subscriber line and configure the voice-related attributes. Related command: subscriber-line, cas.
Example
# Create a timeslot set numbered 5, including 1 to 31 timeslots and using R2 signaling.
[Router-E1 1/0/0] timeslot-set 5 timeslot-list 1-31 signal r2
2.1.48 trunk-direction
Syntax
trunk-direction timeslots timeslots-list { in | out | dual } undo trunk-direction timeslots timeslots-list
View
R2 CAS view
Parameter
timeslots-list: Specify the range of trunk timeslot. The expression includes the single digit, two digits separated by ,, a pair of digits separated by -, or the combination form (e.g., 1-14, 15, 17-31). The value range of digits is the integer from 1 to 31. in: Indicate the trunk is the incoming trunk. out: Indicate the trunk is the outgoing trunk. dual: Indicate the trunk is the bidirectional trunk.
Description
Use the trunk-direction command to configure the E1 trunk direction. Use the undo trunk-direction command to restore the default value. By default, configure the bidirectional trunk.
This command applies to E1 voice only. When configuring the E1 trunk direction as incoming trunk, this trunk will not load any outgoing call. When configuring the E1 trunk direction as outgoing trunk, this trunk can only be used for the outgoing call and not for incoming call. When configuring it as bidirectional trunk, it can load the outgoing call and incoming call respectively according to the initiative of originating call. To keep the E1 communication appropriate, if the E1 trunk adopts the mode of incoming trunk or outgoing trunk, then one end of it must be ensured as incoming and other as outgoing, or the connection will fail. If both ends of E1 trunk adopt the bidirection mode, it is required to use the command of select-mode to adjust the trunk selection policy to avoid the simultaneous hold of timeslot by the two sides of communication. In configuration avoid that one end is bidirectional trunk while the other end is outgoing trunk, or the call from the end configured as the bidirectional trunk will always fail. Related command: cas, select-mode.
Example
# Configure the trunk direction as bidirectional trunk for timeslot set 5 on E1 port 1/0/0.
[Router-cas1/0/0:5] trunk-direction timeslots 1-31 dual
2.1.49 ts
Syntax
ts { block | open | query | reset } timeslots timeslots-list
View
R2 CAS view
Parameter
block: Indicate blocking the trunk circuit of the specified timeslot. open: Indicate opening the trunk circuit of the specified timeslot. query: Indicate querying the trunk circuit of the specified timeslot. reset: Indicate resetting the trunk circuit of the specified timeslot. timeslots-list: Specify a timeslot range. The expression includes the single digit, two digits separated by ,, a pair of digits separated by -, or the combination form (e.g., 1-14, 15, 17-31). The value range of digits is the integer from 1 to 31.
Description
Use the ts command to maintain the trunk circuit of the specified timeslot. This command applies to E1 voice only. To block the trunk circuit means that the circuit no longer loads the service information, that is, this circuit is set manually as unavailable. To open the trunk circuit is the inverse process of the blocking operation, which can reset the trunk circuit as available and enable it to load service information. To query the trunk circuit will display the busy/idle, opened/blocked status of the circuit in a real time way. To reset the trunk circuit refers to re-initializing the state of trunk circuit. Generally, if the circuit state cannot be restored to normal in blocking or opening the circuit manually, it is required to perform the resetting. If the circuit cannot be reset automatically and correctly because of other reasons,, it is generally required to reset manually the circuit, too. Related command: cas, mfc.
Example
# Reset the circuit of timeslots 1-15 in No.5 Timeslot set and query the status of the circuit of timeslots 1-31.
[Router-cas1/0/0:5] ts reset timeslots 1-15 [Router-cas1/0/0:5] ts query timeslots 1-31
Chapter 3 Fax Configuration Commands

3.1 Fax Configuration Commands
3.1.1 cngced-detection
Syntax
cngced-detection threshold times undo cngced-detection
View
Voice subscriber-line viewParameter threshold: Calling tone/Called terminal identification (CNG/CED) detection threshold with fax. It is an integer in the range 0 to 30 and its default is 0. times: Threshold of CNG/CED detections with fax. It is an integer in the range 0 to 100 and the default is 10.
Description
Use the cngced-detection command to set the threshold parameters for CNG/CED signal detection. Use the undo cngced-detection command to restore the default. CNG is generated when the fax machine at the calling end starts, while CED is generated when the fax machine at the called end starts. A voice gateway determines fax state by detecting CNG/CED. The likelihood of detection failure or error exists however depending on the environment where the device is deployed. As a solution, you can use this command to tune the CNG/CED detection sensitivity and reliability. As the threshold value is increasing, detection reliability increases; if you assign a value that is too large, however, detection may fail as well. The same applies to the setting of the times argument. The times argument specifies the lower limit of the CNG/CED duration. For instance, the default of times is 10; this means the CNG/CED signal must last at least 300 milliseconds to be regarded valid. As the times value is incrementing by one, the minimum CNG/CED signal duration increases by 30 milliseconds.
Example
# Set the threshold argument to 5 and the times argument to 20 in voice subscriber-line view for CNG/CED signal detection.
[Router-voice-line0] cngced-detection 5 20
3.1.2 debugging voice fax

Syntax
debugging voice fax { all | api | cc | channel [ channel-no ] | nonstandard-compatible | controller | error-all | ipp | t38 }
View
User view
Parameter
all: Enables all fax debugging. api: Enables API function debugging of fax. cc: Enables main task debugging of fax. channel [ channelno ]: Enables debugging of the specified channel. nonstandard-compatible: Enables debugging of the nonstandard-compatible fax protocol. controller: Enables fax controller debugging. error-all: Enables fax error debugging at all levels. ipp: Enables debugging of the messages between the fax and IPP modules. t38: Enables Fax T38 debugging.
Description
Use the debugging voice fax command to enable fax debugging.
Example
# Enables main task debugging of fax.
<Router> debugging voice fax cc
3.1.3 debugging voice vas fax

Syntax
debugging voice vas fax
View
User view
Parameter
None
Description
Use the debugging voice vas fax command to enable the debugging of fax data access between the VAS module and voice card.
Example
# Enable the debugging of fax data access between the VAS module and voice card.
<Router> debugging voice vas fax
3.1.4 default entity fax

Syntax
default entity fax baudrate { 2400 | 4800 | 9600 | 14400 | disable | voice } default entity fax ecm default entity fax level level default entity fax local-train threshold value default entity fax nsf-on default entity fax protocol { h323-t38 [ hb-redundancy number | lb-redundancy number ] default entity fax protocol nonstandard default entity fax protocol pcm { g711alaw | g711ulaw } default entity fax protocol sip-t38 [ hb-redundancy number | lb-redundancy number ] default entity fax protocol t38 [ hb-redundancy number | lb-redundancy number ] default entity fax support-mode { rtp | sip-udp | vt } default entity fax train-mode { local | ppp }
undo default entity fax { baudrate | ecm | level | local-train threshold | nsf-on | protocol | support-mode | train-mode }
View
Parameter
baudrate: Specifies the maximum transmission speed of the fax. It defaults to voice. 2400: Sets the maximum transmission speed to 2400 bps. 4800: Sets the maximum transmission speed to 4800 bps. 9600: Sets the maximum transmission speed to 9600 bps. 14400: Sets the maximum transmission speed to 14400 bps. disable: Disables the fax forwarding faculty. voice: Sets the fax speed to the allowed maximum voice speed. ecm: Enables fax error correction mode. It is disabled by default. level level: The level of the fax transmission signal. It defaults to 15. local-train: Specifies the threshold of fax local training. threshold value: Specifies the threshold of fax local training. It defaults to 10. nsf-on: Enables NSF message transmission. It is disabled by default. protocol: Specifies the transport protocol of the fax. By default, the T.38 fax protocol applies. Both hb-redundancy number and lb-redundancy number default to 0. h323-t38: Adopts the H323 T38 (UDP) fax protocol. nonstandard: Adopts the nonstandard protocol compatible with private fax protocols. pcm: Enables PCM mode. g711alaw: Adopts G.711 a-law. g711ulaw: Adopts G.711 -law. sip-t38: Adopts the SIP T.38 (UDP) fax protocol. t38: Adopts the T.38 fax protocol. hb-redundancy number: Number of redundant high-speed T.38 packets. lb-redundancy number: Number of redundant low-speed T.38 packets. support-mode: Fax transport format. It defaults to real time protocol (RTP). rtp: Adopts RTP fax mode. sip-udp: Uses the fax packets without RTP header. vt: Adopts VT fax mode. train-mode: Specifies the fax training mode. It defaults to end to end mode or PPP. local: Adopts local training.
ppp: Adopts end to end training.
Description
Use the default entity fax command to set the default fax parameter settings globally. Use the undo default entity fax command to restore the system-default default settings.
Example
# Set the maximum global fax speed to 9600 bps.
[Router-voice-dial] default entity fax baudrate 9600
# Configure the gateway carrier transmitting energy level to 20 globally.

[Router-voice-dial] default entity fax level 20
3.1.5 display voice fax

Syntax
display voice fax { statistics | trans-statistics }
View
Any view
Parameter
statistics: Displays the fax statistics of the fax module. trans-statistics: Displays the statistics in the fax transformation module.
Description
Use the display voice fax command to view the fax statistics in the fax module and the statistics in the fax transformation module as well.
Example
# Display the statistics about the fax module.
[Router] display voice fax statistic
# Display the statistics about the fax transformation module.

[Router] display voice fax trans-statistics Statistic of FOFR to FOIP { Create_FaxTransformNode_Times: 0 Send_Data_Packets: 0

Recieve_Data_Packets: 0 Recieve_InvalidData_Packets: 0 V21Data_WithOutRedundance_Packets: 0 V21Data_WithRedundance_Packets: 0 T4Data_WithOutRedundance_Packets: 0 T4Data_WithRedundance_Packets: 0 Fax_ECM_Times: 0 Fax_NoECM_Times: 0 } Statistic of FOIP to FOFR { Create_FaxTransformNode_Times: 0 Send_Data_Packets: 0 Recieve_Data_Packets: 0 Recieve_InvalidData_Packets: 0 V21Data_WithOutRedundance_Packets: 0 V21Data_WithRedundance_Packets: 0 T4Data_WithOutRedundance_Packets: 0 T4Data_WithRedundance_Packets: 0 }
Table 3-1 Description on the transformation statistics Field Create_FaxTransformNo de_Times Send_Data_Packets Recieve_Data_Packets Recieve_InvalidData_Pa ckets V21Data_WithOutRedun dance_Packets V21Data_WithRedundan ce_Packets T4Data_WithOutRedund ance_Packets T4Data_WithRedundanc e_Packets Description Times of transform node created from IP fax side to FR fax side Number of packets sent from IP fax side to FR fax side Number of packets received at IP fax side from FR fax side Number of invalid packets received at IP fax side from FR fax side Number of packets sent from IP fax side to FR fax side without redundancy V.21 data Number of packets sent from IP fax side to FR fax side with redundancy V.21 data Number of packets sent from IP fax side to FR fax side without redundancy T.4 data Number of packets sent from IP fax side to FR fax side with redundancy T.4 data
Field Fax_ECM_Times Fax_NoECM_Times Create_FaxTransformNo de_Times Send_Data_Packets Recieve_Data_Packets Recieve_InvalidData_Pa ckets V21Data_WithOutRedun dance_Packets V21Data_WithRedundan ce_Packets T4Data_WithOutRedund ance_Packets T4Data_WithRedundanc e_Packets
Description Times of fax communication using ECM at IP fax side Times of fax communication using non-ECM at IP fax side Times of transform node created from FR fax side to IP fax side Number of packets sent from FR fax side to IP fax side Number of packets received at FR fax side from IP fax side Number of invalid packets received at FR fax side from IP fax side Number of packets sent from FR fax side to IP fax side without redundancy V.21 data Number of packets sent from FR fax side to IP fax side with redundancy V.21 data Number of packets sent from FR fax side to IP fax side without redundancy T.4 data Number of packets sent from FR fax side to IP fax side with redundancy T.4 data
3.1.6 fax baudrate

Syntax
fax baudrate { 14400 | 2400 | 4800 | 9600 | disable | voice }
View
Voice entity view
Parameter
14400: Negotiate first according to V.17 fax recommendation, the highest fax baudrate is 14400bit/s. 2400: The first fax baudrate is 2400bps. 4800: Negotiate first according to V.27 fax recommendation, the highest fax baudrate is 4800bps. 9600: Negotiate first according to V.29 fax recommendation which has the priority, the highest fax baudrate is 9600bps.
disable: Disable fax function. voice: Decide the highest rate enabled by fax first according to the different voice encoding/decoding recommendations. By default, the parameter of voice is adopted to decide the max fax baudrate.
Description
Use the fax baudrate command to configure the highest fax baudrate enabled by the gateway. If the rate is set to be others rather than disable and voice, rate negotiation is performed first according to the fax recommendation which is correspondent to the rate. Here the rate is the highest rate enabled but not specified one. When the rate is set as voice, decide the highest rate enabled by fax first according to the difference of voice encoding/decoding recommendations. If G.711 voice encoding/decoding recommendation is used, the fax baudrate is 14400bit/s and the corresponding fax recommendation is V.17. If G.723.1 Annex A voice encoding/decoding recommendation is used, the fax baudrate is 4800bit/s and the corresponding fax recommendation is V.27. If G.729 voice encoding/decoding recommendation is used, the fax baudrate is 9600bit/s and the corresponding fax recommendation is V.29. If the rate is set as disable, fax function is disabled.
Example
# Set the gateway to use V.29 fax recommendation to perform rate negotiation.
[Router-voice-dial-entity1] fax baudrate 9600
3.1.7 fax ecm

Syntax
fax ecm undo fax ecm
View
Voice entity view
Parameter
None
Description
Use the fax command to configure the forced adoption of ECM mode at the gateway, that is, to make the facsimiles at both ends support ECM mode. Use the undo fax command to cancel the ECM mode at the gateway. By default, the ECM mode is not used on the gateway. This command is used to perform the forced limitation at the gateway. If the facsimile terminals at both ends support ECM mode, but the non-ECM mode has been configured at the gateway, then the non-ECM mode is selected. If one or two of the facsimile terminals at both ends do not support the ECM mode, the non-ECM mode is selected. Only when the facsimile terminals at both ends support the ECM mode, and the gateway doesnt perform the forced limitation to enable the non-ECM mode, is the ECM mode selected.
Example
# Configure forced adoption of ECM mode at the gateway.
[Router-voice-dial-entity1] fax ecm
3.1.8 fax level

Syntax
fax level level undo fax level
View
Voice entity view
Parameter
level: Gateway carrier transmitting energy level, ranging 3 to 60. By default level is 15.
Description
Use the fax level command to configure the gateway carrier transmitting energy level. Use the undo fax level command to restore it to the default value. Usually the default of the gateway carrier transmitting energy level is acceptable. If fax still cant be sent when other configurations are correct to try to adjust the gateway carrier transmitting energy level. The smaller the level is, the greater the energy is.
Example
# Configure the gateway carrier transmitting energy level as 20.

[Router-voice-dial-entity1] fax level 20
3.1.9 fax local-train

Syntax
fax local-train threshold threshold undo fax local-train threshold
View
Voice entity view
Parameter
threshold: The percentage of local training threshold value, ranging 0 to 100. By default threshold is 15.
Description
Use the fax local-train command to configure the percentage of fax local training threshold value. Use the undo fax local-train command to restore the default value. This command can be applied to IP Fax and Frame Relay Fax. When rate training is being carried on between facsimile terminals, the transmitting facsimile terminal transmits the 0 TCF data at 1.5s10% to the receiving facsimile terminal, and the receiving facsimile terminal decides whether or not the rate is acceptable according to the TCF data received. The command is used to configure the percentage of local training threshold value if the local training mode is configured. Error happens during the TCF transmission if the percentage of the number of "1" received in proportion to the whole TCF data is less than the threshold value configured, the transmission is successful, otherwise, it is unsuccessful.
Example
# Configure the percentage of fax local training threshold to 20.
[Router-voice-dial-entity1] fax local-train threshold 20
3.1.10 fax nsf-on

Syntax
fax nsf-on
undo fax nsf-on
View
Voice entity view
Parameter
None
Description
Use the fax nsf-on common to configure the fax faculty transmission mode as Not Standard mode. Use the undo nsf-on command to restore the default fax faculty transmission mode. By default, the fax faculty transmission mode is undo nsf-on. This command is only applied to IP Fax. In some occasions, like communicating with encrypted fax, the Not Standard Faculty, or NSF for short, is rather important for the fax communication. It is necessary to configure the fax nsf-on command, so that the fax terminals on both sides will first exchange NSF message at the beginning of transmission, and then complete the follow-up fax negotiation according to NSF and communicate with each other.
Example
# Configure to perform fax transmission with NSF.
[Router-voice-dial-entity1] fax nsf-on
3.1.11 fax protocol

Syntax
fax protocol { t38 | h323-t38 | sip-t38 } [ lb-redundancy number | hb-redundancy number ] fax protocol nonstandard fax protocol pcm { g711alaw | g711ulaw } undo fax protocol
View
Voice entity view
Parameter
t38: Uses T.38 fax recommendation. h323-t38: Uses H.323 T38 (UDP) fax recommendation. sip-t38: Uses SIP T.38 (UDP) fax recommendation. lb-redundancy number: Configures the number of low-speed redundant packets. number ranges from 0 to 5, and default value is 0. hb-redundancy number: Configures the number of high-speed redundant packets. number ranges from 0 to 2, and default value is 0. nonstandard: Uses the fax recommendation compatible with the mainstream devices of the industry. pcm: Uses PCM coding/decoding. g711alaw: Enables G.711A-law voice coding/decoding. g711ulaw: Enables G.711 -law voice coding/decoding.
Description
Use the fax protocol command to configure the recommendation for intercommunication with other devices or enable the fax Passthrough mode, and configure the number of redundant packets sent via the T.38 fax recommendation. Use the undo fax protocol command to restore the default number of redundant packets and disable the fax Passthrough. By default, fax Passthrough mode is disabled. This command is only applied to IP Fax. Low-speed data refers to the V.21 command data, and high-speed data refers to the TCF and graphic data. To intercommunicate with the mainstream fax terminals of the industry, the mainstream fax recommendation must be used. Likewise, to intercommunicate with other fax terminals supporting the T.38 recommendation, the T.38 recommendation must be adopted. As the mainstream devices do not support local training mode for fax, the end-to-end training mode must be adopted in order to implement intercommunication with the mainstream devices of the industry. Increasing the number of redundant packets will improve reliability of network transmission and reduce packet loss ratio. A great amount of redundant packets, however, can increase bandwidth consumption to a great extent and thereby, in the case of low bandwidth, affect the fax quality seriously. Therefore, the number of redundant packets should be selected properly according to the network bandwidth.
The fax Passthrough is easily influenced by such factors as loss of packet, jitter and delay, so the clock on both sides of the communication must be kept synchronous. At present, only G.711Alaw and G.711law compression methods are supported, and the voice activity detection (VAD) function should be disabled for fax Passthrough.
Example
# Configure the number of high-speed redundant packets sent through the T.38 fax recommendation as 2.
[Router-voice-dial-entity1] fax protocol t38 hb-redundancy 2
3.1.12 fax support-mode

Syntax
fax support-mode { rtp | vt | sip-udp } undo fax support-mode
View
Voice entity view
Parameter
rtp: RTP mode. vt: The mode when interworking with the VocalTec gateway. sip-udp: Specifies SIP UDP mode.
Description
Use the fax support-mode command to configure the fax interworking mode with other equipments. Use the undo fax support-mode command to restore the fax interworking mode with other equipment to its default. By default, the RTP mode is adopted. This command is only applied to IP Fax. Under common conditions, use the rtp mode. When interworking with the VocalTec gateway, the vt mode is adopted.
Example
# Configure the mode when interworking with VocalTec device to vt.
[Router-voice-dial-entity1] fax support-mode vt
3.1.13 fax train-mode

Syntax
fax train-mode { local | ppp } undo fax train-mode
View
Voice entity view
Parameter
local: Use the local training mode. ppp: Use the end-to-end training mode.
Description
Use the fax train-mode command to configure the training mode used by the gateway. Use the undo fax train-mode command to restore the training mode used by the gateway to the default. By default, the ppp mode is adopted. The local training mode means that the gateway participates in the rate training between the facsimile terminals at both ends. In this mode, first carry on the training between the facsimile terminals and between the gateways respectively, then the receiving gateway will transmit the training result of the receiving end to the gateway at the transmitting end. The transmitting gateway will decide the final packet transmission rate according to the training results of both ends. The end-to-end training mode means that the gateway does not participates in the rate training between the facsimile terminals at both ends. In this mode, the rate training is carried on between the facsimile terminals at both ends, and it is transparent to the gateway.
Example
# Set the mode used by the gateway as the local training mode.
[Router-voice-dial-entity1] fax train-mode local
3.1.14 voip h323-conf tcs-t38

Syntax
voip h323-conf tcs-t38
undo voip h323-conf tcs-t38
View
Voice view
Parameter
None
Description
Use the voip h323-conf tcs-t38 command to enable the voice gateway to include the T.38 capability description in its capability set when it is in H.323 slow-start mode. Use the undo voip h323-conf tcs-t38 command to disable the voice gateway to include the T.38 capability description in its capability set when it is in H.323 slow-start mode. By default, T.38 description is included. As NetMeeting does not support T.38 capability description parsing, you must disable the voice gateway in H.323 slow-start mode to include the T.38 capability description in its capability set in order to work with NetMeeting.
Note: As this command is globally effective, the configuration of its undo form can disable all the voice entities to carry the T.38 capability description in their capability sets. If interoperability with NetMeeting is required only by a voice entity, you can disable fax using the fax baudrate disable command or set the fax mode to a non-T.38 mode, pcm, or nonstandard for example.
Example
# Disable the voice gateway to carry T.38 capacity description in its capacity set when it is in H.323 slow-start mode.
[Router-voice] undo voip h323-conf tcs-t38
Chapter 4 Voice RADIUS Configuration Commands

4.1 Voice RADIUS Configuration Commands
4.1.1 aaa-client
Syntax
aaa-client
View
Voice view
Parameter
None
Description
Use the aaa-client command to enter Voice AAA view. Use the quit command to exit this view. Related command: accounting, authentication-did, clienttype, local-user.
Example
# Enter Voice AAA view.
[Router] voice-setup [Router-voice] aaa-client [Router-voice-aaa]
4.1.2 card-digit
Syntax
card-digit card-digit
View
Voice access-number view
Parameter
card-digit: The card digits, in the range from 1 to 31. By default, the user card number is in 12 digits.
Description
Use the card-digit command to configure a user card digit of a certain access service number. This command is used to configure digits of the card number of the two-stage dialing card number process (use the card number/password for ID authentication) user. Once the digits are specified, all users using this access service number must enter the card number in specified digits. If the dialing process of the access service number to be configured is not specified as the card number process through the process-config command, this command will not take effect. Only after the dialing process is set as the card number process, can this command function properly in the Voice access-number view. Related command: gw-access-number, process-config, password-digit.
Example
# Set the user card number in 10 digits for the access service number 18901.
[Router-voice-dial-anum18901] card-digit 10
4.1.3 cdr
Syntax
cdr { buffer [ size-number ] | duration [ timer-number ] | threshold { threshold | default } } undo cdr
View
Voice AAA view
Parameter
buffer: Save the call records by setting the upper limit of the number of records. size-number: Number of the saved call detail records, in the range from 0 to 500, with the value 0 indicating that no call detail record is saved. In max-size mode, the default value of size-number is 50. duration: Save the call records by setting the maximum retaining time of records (start from the moment when a conversation ends).
timer-number: Retaining time of call detail records, in minutes, with the value range from 0 to 2147483647, and the value 0 indicating that no call detail record is saved. In max-size mode, the default value of timer-number is 15. threshold threshold: Threshold for call history output, in the range 0 to 100. It defaults to 80. default: Default threshold for call history output.
Description
Use the cdr command to configure the saving rule for call detail record. Use the undo cdr command to restore the default saving rule. This command is used to set the saving rule for call detail records. The system will save certain amount of call detail record information according to the rule set by the user. Related command: display aaa unsent-h323-call-record, display voice
call-history-record.
Note: In 3Com Router Software, at most 500 call detail records can be saved. That is, even if it is specified that call detail records should be saved according to the maximum retaining time, no more than 500 records can be saved in the system. If a large amount of traffic occurs in a certain period of time and more than 500 call detail records to be stored are generated which satisfy the time requirement, the excessive records that end earlier will be deleted, though they comply with the saving rule.
Example
# Specify that at most 400 call detail records can be saved.
[Router-voice-aaa] cdr buffer 400
# Specify that the detail records of the conversation ending within 10 minutes should be saved.
[Router-voice-aaa]cdr duration 10
4.1.4 debugging voice vcc

Syntax
debugging voice vcc { all | error | ipp | proc | rcv | timer | vpp | line line-number }
View
User view
Parameter
all: Enable all debugging of the VCC module. error: Enable the error debugging of the VCC module. ipp: Enable the debugging of the messages sent to the IPP module from the VCC module. proc: Enable the debugging of the messages sent to the system process from the VCC module. rcv: Enable the debugging of the messages sent to the RCV module from the VCC module. timer: Enable the debugging information of the messages sent to the timer module from the VCC module. vpp: Enable the debugging information of the messages sent to the VPP module from the VCC module. line: Enable the debugging of the specified subscriber line on the router. line-number: Subscriber line number, the value range of it is decided by the type and quantity of the voice cards actually put into operation.
Description
Use the debugging voice vcc command to enable the debugging at various levels of the VCC module. This command is used to enable the debugging of the VCC module, and to specify the levels and types of the debugging. Related command: reset voice vcc, display voice vcc.
Note: When specifying the levels and types of the debugging , pay attention to the following points: No character other than figures can appear in the specified line number, If any character other than figures appears in the entered line-number, this enter is invalid. The specified line number cannot be greater than the number of the actual subscriber lines. If the specified line-number is greater than the number of the actual subscriber lines, this enter is invalid.
Example
# Debug the messages sent to the VPP module from the VCC module.
<Router> debugging voice vcc vpp
4.1.5 display aaa unsent-h323-call-record

Syntax
display aaa unsent-h323-call-record
View
Any view
Parameter
None
Description
Use the display aaa unsent-h323-call-record command to view the detail record information about the calls failed to be sent. If the mode for RADIUS Client (i.e. the router system) to process the accounting request/responding packets is set as start-ack, for a call, once RADIUS Server does not return the response to an accounting request message within the specified time, VoIP of this call cannot be established. Then the system will save the failed call and initiate an accounting request again to RADIUS Server later to set up connection. This command is used to display the history records of the calls that are not established at the VoIP side because RADIUS Server has not returned the response to the accounting start message. The output information of this command can help the user confirm which calls have failed, so as to analyze, locate and eliminate the faults.
Example
# Display the history records of the calls that are not established at the VoIP side.
[Router] display aaa unsent-h323-call-record Index = 1 Acct_session_Id = 10 CallOrigin = Answer CallType = Telephony Callernumber = 1000 Callednumber = 1001 CallDuration = 00:00:03

TransmitPackets = 1000 TransmitBytes = 32000 ReceivePackets = 1100 ReceiveBytes = 35200
Table 4-1 Description of detailed record about the calls failed to be sent Field Index Acct_session_Id CallOrigin CallType Callernumber Callednumber CallDuration TransmitPackets TransmitBytes ReceivePackets ReceiveBytes Description Index of a call failure history record RADIUS session ID, negotiated by RADIUS Server and Client Call direction, indicating whether the local end is the caller or called Call type, classified into Telephony and Fax Caller number Called number Call duration Number of packets sent from the local end Number of bytes sent from the local end Number of packets received at the local end Number of bytes received at the local end
4.1.6 display current-configuration voice

Syntax
display current-configuration voice
View
Any view
Parameter
None
Description
Use the display current-configuration voice command to view the current voice RADIUS configuration information of the system.
Example
# Display the configuration information of the current access service number of the system.
[Router] display current-configuration voice access-number
# voice-setup vqa data-statistic enable # aaa-client # dial-program # entity 1 pots match-template 1001 line 2 # entity 9660 pots match-template 9660 line 1 # entity 12345 pots match-template 12345 line 2 # entity 660263 pots match-template 660263 send-number all # gk-client # subscriber-line 0/0/0 # subscriber-line 0/0/1 # subscriber-line 0/0/2 # subscriber-line 0/0/3 # subscriber-line 1/0/4:1

# return
4.1.7 display voice aaa-client configuration

Syntax
display voice aaa-client configuration
View
Any view
Parameter
None
Description
Use the display voice aaa-client configuration command to view information about voice AAA.
Example
# Display information about voice AAA.
[Router] display voice aaa-client configuration AAA configuration : accounting\authentication\authorization: accounting = off
authentication-did = off authorization-did accounting-method = off = start-stop
dial-control-mib-info: buffer duration = 50 = 15
4.1.8 display voice aaa-client local-user

Syntax
display voice aaa-client local-user
View
Any view
Parameter
None
Description
Use the display voice aaa-client local-user command to view the user names and passwords in local voice user database. This command is used to display the user names and passwords in the local voice user database of the router, and only voice users are displayed.
Example
# Display the information of local voice user database.
[Router] display voice aaa-client local-user Username:abcde Username:xyz Username:cao password:12345 password:12345 password:cao status : valid status : valid status : valid
Table 4-2 Description of local voice user database Field Current voip user number Username password status Description Total number of voice users Name of voice user Password of voice user Status of voice user
Above information shows that there 3 users contained in local voice user database with user names and passwords as abcde/12345, xyz/12345 and cao/cao respectively.
4.1.9 display voice aaa-client statistic

Syntax
display voice aaa-client statistic
View
Any view
Parameter
None
Description
Use the display voice aaa-client statistic command to view the statistics related to RADIUS Server. This command is used to display the duration of RADIUS Server off-line (i.e., the service cannot be provided normally or there is no response to the communication) and the number of lost bills. Related command: also reset voice aaa-client statistic.
Example
# Display the statistics related to RADIUS Server.
[Router] display voice aaa-client statistic Server down duration = 00h 33m 30s The VoIP dropped end-accounting packets = 356
Table 4-3 Description of the statistics related to RADIUS Server Field Server down duration The VoIP dropped end-accounting packets Description Time of communication interrupt with RADIUS server Number of dropped request packets for accounting stop
The above information indicates that the conversation breakdown duration of the RADIUS server is 33 minutes and 30 seconds, and the lost end-accounting packets are 356.
4.1.10 display voice call-history-record

Syntax
display voice call-history-record { callednumber called-number | callingnumber calling-number | cardnumber card-number | remote-ip-addr a.b.c.d | last last-number | line line-number } [ brief ]
View
Any view
Parameter
callednumber: Display the call history records according to the called number filtering. called-number: The called E.164 number, being a character string within 31 characters.
callingnumber: Display the call history records according to the calling number filtering. calling-number: The calling E.164 number, being a character string within 31 characters. cardnumber: Display the call history records according to the prepaid card number. card-number: The prepaid card number, being a character string within 31 characters. remote-ip-addr: Display the call history records according to the IP address of the called user. a.b.c.d: The IP address of the called user, in the dotted decimal format. last: Display the call history records according to the specified number of the latest conversation records. last-number: The number of the latest conversation records, in the value range from 0 to 500. line: Display the call history records according to the voice subscriber-line receiving calls on the router. line-number: The number of the voice subscriber-line receiving calls on the router, and its value range is decided according to the type and quantity of voice cards actually put into operation on the router. brief: Use a brief format to display call history records.
Description
Use the display voice call-history-record command to view the information about call history records. If such parameters as callednumber, callingnumber, cardnumber, remote-ip-addr, last, line are not entered, all the saved call history records should be output by default. If it is specified that call history records are displayed according to the number of the latest conversation records (in last mode), the default number of records are 10. The display format of call history records can be customized by setting the display and filtering rule. The possible information display formats are as follows: 1) 2) If the parameter brief is specified, the records will be displayed in a brief format. If the parameter brief is not specified, the records will be displayed in a detailed format.
If it is required to search according to the specified last-number, the records will be displayed according to the number of records actually retrieved. If no record is found or the record found is null, the prompting information as follows will appear:
Not found any record.
Note: When setting the display and filtering rule, pay attention to the following points: No unacceptable character is allowed to appear in the calling number or called number. If any character other than figures and *, #, T, . appears in the entered called-number or calling-number, the enter is invalid. No character other than figures is allowed to appear in the specified number of the latest conversation records times and voice subscriber-line number. If any character except figures appears in the entered last-number/line-number, the enter is invalid. The digits of the specified called number and calling number cannot be over 31. If the entered called-number or calling-number has over 31 characters, the enter is invalid. The specified number of the latest conversation records cannot be over 500. If the specified last-number is greater than 500, the enter is invalid. The specified voice subscriber-line number cannot be greater than the number of available subscriber lines. If the specified line-number is greater than the number of available subscriber lines, the enter is invalid.
Example
# Display the call history records according to the number of 10 of the latest conversation records.
[Router] display voice call-history-record last 10 ! CallRecord[30]: CallerNum CalledNum EncodeType PeerAddress DisconnectCause DisconnectText TalkingTimes VoiceTimes FaxTimes ImgPages CallDirection SetupTime(voip) ConnectTime(voip) DisconectTime(voip) = 4000 = 2000 = 711u = 127.0.0.1 = 0 = Normal release = 00h 00m 00s = 00h 00m 00s = 00h 00m 00s = 0 = 2 = Mar 11, 2000 02:20:27 = None = Mar 11, 2000 02:20:29

Transmit (voip) Received(voip) SetupTime(pstn) ConnectTime(pstn) DisconectTime(pstn) Transmit (pstn) Received(pstn) = 0 = 0

(package) : 45456 (byte) 45456 (byte)
(package) :
= None = None = None = 0 = 0 (package) : 45456 (byte) 45456 (byte)
(package) :
Table 4-4 Description on the fields of the display voice call-history-record command Field CallRecord[30] CallerNum CalledNum EncodeType PeerAddress DisconnectCause DisconnectText TalkingTimes VoiceTimes FaxTimes ImgPages CallDirection SetupTime(voip) ConnectTime(voip) DisconectTime(voip) Transmit (voip) Received(voip) SetupTime(pstn) ConnectTime(pstn) DisconectTime(pstn) Description Number of call record Callers number Called number Encoding type Peer address Code of disconnect cause Text of disconnect cause Talking duration Voice talking duration Fax talking duration Facsimile pages Calling direction Call setup time on network side Call connecting time on network side Call disconnecting time on network side Number of packets transported on network side (packet/byte) Number of packets (packet/byte) received on network side
Call setup time on PSTN side Call connecting time on PSTN side Call disconnecting time on PSTN side
Field Transmit (pstn) Received(pstn)
Description Number of packets transported on PSTN side (packet/byte) Number of packets (packet/byte) received on PSTN side
4.1.11 display voice vcc

Syntax
display voice vcc { channel [ line-number ] } | { statistic { all | error | ipp | proc | rcv | rds | timer | vpp } }
View
Any view
Parameter
channel: Display the status information of the call channel on the specified subscriber line. line-number: subscriber line number, the value range of it is decided by the type and quantity of the voice cards actually put into operation. statistic: Display the statistics of the VCC module. all: Display all the statistics of the VCC module. error: Display the error statistics of the VCC module. ipp: Display the statistics of the interaction messages between the VCC module and the IPP module. proc: Display the statistics of the interaction messages between the VCC module and the system process. rcv: Display the statistics of the interaction messages between the VCC module and the RCV module. rds: Display the statistics of the interaction messages between the VCC module and the RDS module. timer: Display the statistics of the interaction messages between the VCC module and the timer. vpp: Display the statistics of the interaction messages between the VCC module and the VPP module.
Description
Use the display voice vcc command to view the information about the call channel status and call statistics. If it is required to display the status information of the call channel on the subscriber line, but the parameter line-number is not entered, the status information of all voice subscriber-lines will be displayed by default. Related command: reset voice vcc, debugging voice vcc.
Note: When setting the filtering rule, pay attention to the following points: The specified voice subscriber-line number cannot be greater than the number of the actual subscriber lines. If the specified line-number is greater than the number of the actually available subscriber lines, this enter is invalid.
Example
# Display the call status information of the 2VI board voice subscriber-line 1.
[Router] display voice vcc channel 1 ! GENERIC: Index CallerNum CalledNum EncodeType PeerAddress DisconnectCause DisconnectText CallDuration VoiceCallDuration FaxCallDuration ImgPages CallOrigin ! VoIP: SetupTime(voip) ConnectTime(voip) = Mar 29, 2003 15:37:21 = Mar 29, 2003 15:37:24 = 12 = 100 = 200 = 729 = 127.0.0.1 = 0 = Normal release = 00h 00m 17s = 00h 00m 17s = 00h 00m 00s = 0 = 1

DisconectTime(voip) TransmitPackets(voip) TransmitBytes(voip) ReceivePackets(voip) ReceiveBytes(voip) ! PSTN: SetupTime(pstn) ConnectTime(pstn) DisconectTime(pstn) TransmitPackets(pstn) TransmitBytes(pstn) ReceivePackets(pstn) ReceiveBytes(pstn)

= Mar 29, 2003 15:37:41 = 531 = 17126 = 550 = 23100
= Mar 29, 2003 15:37:06 = Mar 29, 2003 15:37:06 = Mar 29, 2003 15:37:41 = 550 = 16500 = 913 = 18130
Table 4-5 Description on call channel status Field Index CallerNum CalledNum EncodeType PeerAddress DisconnectCause DisconnectText CallDuration VoiceTxDuration FaxTxDuration ImgPages CallOrigin SetupTime(voip/p stn) ConnectTime(voip /pstn) DisconnectTime(v oip/pstn) Description Index of current call in channel Caller number of current call in channel Called number of current call in channel Compression/Decompression type of current call in channel IP address of Peer GW of current call in channel Cause code of disconnection of current call in channel Cause explanation of disconnection of current call in channel Call duration of current call in channel Total voice duration of current call in channel at PSTN side Total fax duration of current call in channel at PSTN side Total pages of sending/receiving fax Direction of current call in channel, it means local end is caller end or called end corresponding with 1 or 2 respectively Time of current call is setup(VoIP/PSTN) Connect start time of current call in channel(VoIP/PSTN) Disconnect start time of current call in channel(VoIP/PSTN)
Field TransmitPackets TransmitBytes ReceivePackets ReceiveBytes
Description Number of packets sent at local end of current call in channel Number of bytes sent at local end of current call in channel Number of packets received at local end of current call in channel Number of bytes received at local end of current call in channel
4.1.12 gw-access-number
Syntax
gw-access-number access-number undo gw-access-number [ access-number ]
View
Parameter
access-number: The specified access service number (such as 169, 17900, etc.). The value is a character string within 31 characters, and the acceptable symbols include the figures from 0 to 9, the wildcard . and the character T, and other English characters. The . wildcard indicates a character. The character T" is control character, it indicating that the dial string is a string whose length is variable. At most 100 access service numbers can be configured.
Description
Use the gw-access-number command to configure the access service number or enter the view of the access service number. Use the undo gw-access-number command to cancel a single access service number or all access service numbers that have been set. This command is used to configure the access service number and enter the view of the access service number. If the undo form of this command does not include the specific access-number parameter, all the set access service numbers will be deleted. If the undo form of this command includes the specific access-number parameter, the specified single access service numbers will be deleted. To delete all the access service numbers that have been set, the system will give the following operation warning:
Delete all of the access number? (n/y)
Then please select y to confirm the deletion or n to cancel the deletion. Related command: process-config, card-digit, password-digit, redialtimes.
Note: When setting an access service number, pay attention to the following points: No unacceptable character is allowed to appear in the access service numbers, if any of these characters (such as English characters, etc.) appears in the entered access-number, this enter is invalid. The digits of an access service number cannot be more than 31, if those of the entered access-number are over 31, this enter is invalid. At most 100 access service numbers are allowed to be set in the system, if 100 pieces of access-number have been set, no more access service number can be added. To continue with adding settings, please delete some records.
Example
# Add the access service number 18901 and enter the voice access-number view.
[Router-voice-dial] gw-access-number 18901 [Router-voice-dial-anum18901]
# Delete all the access service numbers that have been set in the system.
[Router-voice-dial] undo gw-access-number
4.1.13 local-user
Syntax
local-user username password password undo local-user username
View
Voice AAA view
Parameter
username: User name containing 1 to 16 characters.
password password: Password for user authentication, containing 1 to 16 characters. No input means the parameter is null.
Description
Use the local-user command to configure the user name and password of the user in local voice user database. Use the undo local-user command to cancel the specified local voice user. By default, the user name and password of local voice user is configured. If a local voice user database is configured, voice users are authenticated using this local database first. At present, up to 200 local users are supported. Related command: clienttype.
Example
# Configure the name and password of local voice user as "abcde" and "12345" respectively.
[Router-voice-aaa] local-user abcde password 12345
4.1.14 password-digit
Syntax
password-digit password-digit
View
Parameter
password-digit: The password digit, in the range from 1 to 16.By default, the user password is in 6 digits.
Description
Use the password-digit command to configure the user password digits of a certain access service number in the card number process. This command is used to configure the password digit of two-stage dialing card number process (use the card number/password to authenticate a users ID) users. If the dialing process of the access service number to be configured is not specified as the card number process through the process-config command, this command cannot take
effect. Only after the dialing process is set as the card number process, can the access service number be retrieved, and can this command function properly. Related command: gw-access-number, process-config, card-digit.
Example
# Set the password in 4 digits for the access service number 18901.
[Router-voice-dial-anum18901] password-digit 4
4.1.15 process-config
Syntax
process-config { callernumber | cardnumber | voice-caller }
View
Parameter
callernumber: Caller number process. After a user dials the access service number, the system continues to send dialing tones to the user, so that he can enter the called number. Under this process, the users ID is authenticated by identifying the caller number. cardnumber: Card number process. After a user dials the access service number, the system continues to send prompting tones to the user, so that he can enter the prepaid card number and password. Under this process, the users ID is authenticated by identifying the prepaid card number/password. voice-caller: Voice caller number process. Configured with it, the system plays voice messages to users after they dial the access number, asking them to select language and input the called numbers. In this process, users are authenticated using calling number identification (CNI). When the user changes the current dial process (that is, between the calling number dial process and the card number dial process), the system will restore the involved parameters (for example, card number/PIN, and redial times in the card number process) to the defaults automatically.
Description
Use the process-config command to configure the dialing process of a certain access service number. By default, all access service numbers use the card number process.
Each access service number has a specific dialing process. For a certain access service number, all the users to whom it belongs must implement call establishment in the same process. With 3Com Router Software, three dial processes are available: calling number process, card number process, and voice caller number process. Caller number process: It is actually the caller number authentication process, which is the authentication, authorization and accounting process carried out according to the caller number of the user. The caller number process does not require further parameter setting in the process. Voice caller number process: uses calling numbers for authentication. After a user dials the access number, the voice gateway plays voice messages to prompt the user to select prompt language and dial the called number. This is different from the caller number process where the voice gateway displays only dial tone (long tone) after a user dials the access number. Card number process: As its name implies, the user should dial its own card number and password to complete the authentication process after dialing an access service number, and he cannot dial the called number to set up a call until it is authenticated. The parameters in a card number process can be set through the such commands as card-digit, password-digit and redialtimes. Related command: gw-access-number, card-digit, password-digit, redialtimes.
Example
# Specify the user access process of the access service number 18901 as the card number process.
[Router-voice-dial-anum18901] process-config cardnumber
4.1.16 redialtimes
Syntax
redialtimes redialtimes-number
View
Parameter
redialtimes-number: The number of times of dialing in each dialing phase in a card number process, in the value range from 1 to 10. By default, the number can be dialed 3 times in each dialing phase.
Description
Use the redialtimes command to configure the number of times of dialing in each dialing phase for a certain access service number. If the caller number process is adopted, this configuration can be skipped. For the card number process, it is required to dial the prepaid card number, password and called number in turn after connecting the access service number properly. In this process, the dialer may enter wrong numbers in each dialing phase, hence the dialing fails. This command offers a chance for the dialer to reenter numbers so as to ensure proper fault tolerance in such a case. Related command: gw-access-number, process-config, card-digit, password-digit.
Note: To set the number of times of dialing, pay attention to the following points: The setting of the number of times of dialing is also significant for the caller number process, and it should be specified how many times the user can dial the called number after entering the access service number correctly. The number of times of dialing places the same restriction on every dialing phase, that is, in a card number process, the numbers of times of entering the card number, password and called number are the same. Literally this command is number of times of redialing, but actually, it refers to the total number of times of dialing. Therefore, when using this command, note that if it is required that a number can be redialed for n times, it should be ensured that redialtimes-number = n+1. For example, if it is required that a number can be redialed for 3 times, then redialtimes-number should be set as 4.
Example
# Configure the number of redialing times of the card number/password of the access service number 18901 to be 4 (the number can be dialed for 5 times).
[Router-voice-dial-anum18901] redialtimes 5
4.1.17 reset voice aaa-client statistic

Syntax
reset voice aaa-client statistic
View
User view
Parameter
None
Description
Use the reset voice aaa-client statistic command to reset the statistics related to the RADIUS Server state. This command is used to reset the statistics information, which is stored on RADIUS Client (i.e., the router), related to the status of RADIUS Server. Related command: display voice aaa-client statistic.
Example
# Clear the statistics related to the RADIUS Server state.
<Router> reset voice aaa-client statistic
4.1.18 reset voice vcc

Syntax
reset voice vcc { all | call-record | statistics }
View
User view
Parameter
all: Clear all information. call-record: Clear the call record information. statistics: Clear the statistics.
Description
Use the reset voice vcc command to reset the information related to VCC. All or part of the information related to VCC module which is stored in the system can be cleared according to the information categories. Related command: display voice vcc, debugging voice vcc.
Example
# Clear the generated call record information.
<Router> reset voice vcc call-record
4.1.19 selectlanguage
Syntax
selectlanguage { disable | enable }
View
Voice access-number view Parameter disable: Disables language selection. enable: Enables language selection.
Description
Use the selectlanguage command to enable or disable the voice gateway to play the prompt language selection message in the voice caller number process. This command only applies to the voice caller number process. With language selection enabled, the voice gateway plays a message asking the user to select a prompt language and then to input the called number. If language selection is disabled, the called number input prompt is played in Chinese after authentication. By default, language selection is disabled.
Example
# Disable prompt language selection.
[Router-voice-dial-anum163] selectlanguage disable
# Enable prompt language selection.

[Router-voice-dial-anum163] selectlanguage enable
Chapter 5 GK Client Configuration Commands

5.1 GK Client Configuration commands
5.1.1 area-id (in Voice GK Client View)
Syntax
area-id string undo area-id
View
Voice GK client view
Parameter
string: Indicate the area ID. The value range is the integer between 0 and 9, which can be separated by , or "#".
Description
Use the area-id command to configure the H.323 gateway area ID. Use the undo-area-id command to cancel a specified area ID. By default, no H.323 gateway area ID is configured. The area-id is mainly used to facilitate the identifying of gateway type by the GK Server. The gateway and the GK Server reach an agreement on the gateway type in advance, for example, consider that the area-id 1# represents the voice gateway and that the area-id 2# represents the video gateway, etc. When the gateway communicates normally with the GK Server, the GK will judge the gateway type according to the area-id information sent by the gateway. To set the H.323 area ID in the Voice GK client voice is mainly to facilitate the GK Server to identify the types of GK client. An agreement on the related types is reached beforehand between the GK client and the GK Server, e.g. area ID 1# represents a voice GK client, prefix 2# represents a video GK client, etc. When a normal communication is going on between the GK client and the GK Server, the GK judges the client type according to the area ID information received. Up to 30 area-ides can be configured in voice GK clien view. Related command: match-template, entity.
Example
# Configure the GK client with a area ID 6#.
[Router-voice-gk] area-id 6#
5.1.2 debugging voice ras

Syntax
debugging voice ras event
View
User view
Parameter
event: Output interacted RAS message record.
Description
Use the debugging voice ras command to enable the debugging information output switch of RAS messages interacted between GK Client and GK Server.
Example
# Enable the debugging information output switch of RAS messages interacted between GK Client and GK Server.
<Router> debugging voice ras event
5.1.3 display voice gateway

Syntax
display voice gateway
View
Any view
Parameter
None
Description
Use the display voice gateway command to view the gateway registration state information to GK Server.
This command is used to display the gateway registration information to GK Server and gateway alias name list etc.
Example
# Display the gateway registration state information to GK Server.
[Router] display voice gateway GW_Statue = GK_ID = Registed 8040gk.3com.com
Current GW information : H323-ID E164 3681gw 34601000
Current GK Information: H323-ID 3681gw
Table 5-1 Description of gateway registration state information to GK Server Field GW_Statue GK_ID Current GW information : H323-ID Current GW information : E164 Current GK Information: H323-ID Current GK Information: E164 NONE Description State of the current GW terminal ID of the currently registered GK H323 ID of the current GW E164 number of the current GW Local H323ID fed back by GK Local E164 number fed back by GK None
5.1.4 gk-client
Syntax
gk-client
View
Voice view
Parameter
None
Description
Use the gk-client command to enter Voice GK client view, and configure the GK parameters for voice. Use the quit command to exit this view. Related command: area-id, gk-2nd-id, gk-id, gw-address, gw-id, ras-on.
Example
# Enter gk-client view.
[Router-voice] gk-client [Router-voice-gk]
5.1.5 gk-2nd-id
Syntax
gk-2nd-id gk-name gk-addr gk-ipaddress [ ras-port ] undo gk-2nd-id
View
Parameter
Refer to the parameters of the gk-id command.
Description
Use the gk-2nd-id command to configure the name and IP address of the backup GK Server corresponding to the gateway. Use the undo gk-2nd-id command to cancel the name and IP address of the backup GK Server corresponding to the gateway. When the communication between the GK Client and the master GK Server is abnormal (e.g. timeout) or the master GK Server fails, the 3Com router can also send registration requests to the backup GK Server. Use the gk-2nd-id command to configure the IP address, name and port of the backup GK Server.
Note: The gk-id command must be used first to configure the name and address of the master GK Server, before those of the backup GK Server can be configured.
Related command: gk-id.
Example
# Configure the backup GK Server as follows: The IP address is 1.1.1.2, the name is "gk-backup", and use the default port.
[Router-voice-gk] gk-id gk-center gk-addr 1.1.1.1 [Router-voice-gk] gk-2nd-id gk-backup gk-addr 1.1.1.2
5.1.6 gk-id
Syntax
gk-id gk-name gk-addr gk-ipaddress [ ras-port ] undo gk-id
View
Parameter
gk-name: GK Server name, a string of 1 to 128 case sensitive characters. gk-ipaddress: IP address of the GK Server. ras-port: RAS communication port of GK Server, with the value range being the integer between 1 and 65535. By default ras-port is 1719.
Description
Use the gk-id command to configure the GK Server name and IP address corresponding to the gateway. Use the undo gk-id command to cancel the GK Server name and IP address corresponding to the gateway. Use the command gk-id to configure such information as the IP address, name, and port of GK Server to facilitate the research for the right GK Server equipment by the GK Client according to this information, so as to implement the register task of gateway in the GK Server.
Related command: area-id, gw-id, gk-2nd-id, gw-address, ras-on.
Example
# Configure the IP address of the GK Server as 1.1.1.1, name as gk-center, port as the default.
[Router-voice-gk] gk-id gk-center gk-addr 1.1.1.1
5.1.7 gk-security call

Syntax
gk-security call enable undo gk-security call enable
View
Parameter
None
Description
Use the gk-security call enable command to enable security calls on the GK Client (router). Use the undo gk-security call enable command to disable security calls on the GK Client (router). By default, enable security calls. To let the router acting as a GK client pass calling tokens of a GK Server, you need to configure GK security calls. After a call is originated, the calling gateway obtains the calling token from the calling GK server and transparently transports it to the called gateway that will then pass the token to the called GK server. In some voice network environments, the called GK Servers cannot process calling tokens; in this case you must disable the GK Client security calls.
Example
# Disable the security calls on the GK Client (router).
[Router-voice-gk] undo gk-security call enable
5.1.8 gk-security register-pwd

Syntax
gk-security register-pwd { cipher | simple } password undo gk-security register-pwd
View
Parameter
cipher: Use encrypted password when echo is adopted. simple: Do not use encrypted password when echo is adopted. password: Password that has been set, 1 to 16 printable characters, except space.
Description
Use the gk security register-pwd command to set the GK register password. Use the gk-security register-pwd command to remove the GK register password. By default, the GK Client (router) has no password. After the GK Client (router) is configured with the register password, the password is carried during the whole register process.
Example
# Configure a GK register password to 3Com in cyphertext mode.
[Router-voice-gk] gk-security register-pwd cipher 3Com
5.1.9 gw-address
Syntax
gw-address ip-address undo gw-address
View
Parameter
ip-address: The source address of gateway.
Description
Use the gw-address command to configure the source IP address used by the voice gateway. Use the undo gw-address command to cancel the source IP address used by the voice gateway. By default, the source IP address used by the voice gateway is not configured.
Caution: This command takes effect immediately after it is configured, disregarding whether the GK client has been enabled (using the ras-on command) or not.
Related command: area-id, gk-2nd-id, gk-id, gw-address, ras-on.
Example
# Configure the source IP address used by the voice gateway as 1.1.1.1.
[Router-voice-gk] gw-address 1.1.1.1
5.1.10 gw-id
Syntax
gw-id namestring undo gw-id
View
Parameter
namestring: Gateway alias (gateway ID), a string of 1 to 128 case sensitive characters.
Description
Use the gw-id command to configure the gateway alias. Use the undo gw-id command to cancel the alias of the specified gateway. By default, the gateway alias is empty, i.e., the interface alias is not configured.
Use the command gw-id to configure the gateway alias, which is used for the gateway to register and identify the voice gateway. Each gateway has only one alias, and the new alias will cover the old one. Related command: area-id, gk-2nd-id, gk-id, gw-address, ras-on.
Example
# Configure the gateway alias as marlborough-gw.
[Router-voice-gk] gw-id marlborough-gw
5.1.11 ras-on
Syntax
ras-on undo ras-on
View
Parameter
None
Description
Use the ras-on command to enable the GK Client function. Use the undo ras-on command to disable the GK Client function. By default, the GK Client function is disabled. Only after activating the GK Client function can the normal communication be maintained between the router voice gateway and the GK server, or it is unable to establish the connection between them.
Example
# Activate the GK Client function.
[Router-voice-gk] ras-on
Chapter 6 SIP Client Commands

6.1 SIP Client Commands
6.1.1 address sip
Syntax
address sip { proxy | { ip ip-address port port-number } } undo address
View
Voice entity view
Parameter
proxy: Adopts SIP proxy server to complete SIP interaction. ip-address: IPv4 address to which SIP packets of a call is destined. port port-number: Port number in the range 1 to 65535.
Description
Use the address sip command to set routing policy for reaching the remote voice gateway (VG) to SIP. Use the undo address command to restore the default. By default, no routing policy is configured for reaching the remote VG. If address sip ip ip-address port port-number is configured, SIP packets in a call are routed directly to the address specified in the command. If address sip proxy is configured, the SIP interaction process involves a SIP proxy server. Configure the command appropriate to the call routing policy applies to the network. Related command: address.
Example
# Configure the current voice entity to complete SIP interaction through a SIP proxy server.
[Router-voice-dial-entity1] address sip proxy
6.1.2 debugging voice sip

Syntax
debugging voice sip { all | calls | error | message { all | call | register } | register | warning } undo debugging voice sip { all | calls | error | message | register | warning }
View
User view
Parameter
all: Enables all SIP debugging. calls: Enables SIP call debugging. error: Enables SIP error debugging. message: Enables SIP message debugging. call: Enables SIP call packet debugging. register: Enables SIP call register packet debugging. register: Enables SIP register debugging. warning: Enables SIP warning debugging.
Description
Use the debugging voice sip command to enable SIP debugging. Use the undo debugging voice sip command to disable SIP debugging.
Example
# Enable all SIP debugging.
<Router> debugging voice sip all
6.1.3 display voice sip call-statistics

Syntax
display voice sip call-statistics
View
Any view
Parameter
None
Description
Use the display voice sip call-statistics command to view all statistic information about the SIP client.
Example
# Display all statistic information about the SIP client.
[Router] display voice sip call-statistics SIPRegisters : SIPInvites : SIPAcks : SIPPracks : SIPByes : SIPCancels : SIPInfos : 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
SIPOKRegisters : SIPOKInvites : SIPOKAcks : SIPOKPracks : SIPOKByes : SIPOKCancels :
SIPResp3MultipleChoice : SIPResp3MovedPermanently : SIPResp3MovedTemporarily : SIPResp3UseProxy : SIPResp3Other : 0 0 0 0 0 0
SIPResp4BadRequest : SIPResp4Unauthorized : SIPResp4Forbidden : SIPResp4NotFound :
SIPResp4MethodNotAllowed : SIPResp4NotAcceptable : 0
SIPResp4ProxyAuthRequired : SIPResp4ReqTimeout : 0
SIPResp4ReqEntityTooLarge : SIPResp4ReqURITooLarge : 0
SIPResp4UnsupportedMediaType : SIPResp4UnsupportedURIScheme : SIPResp4BadExtension : 0 0
0 0
SIPResp4ExtensionRequired :

SIPResp4AddrIncomplete : SIPResp4BusyHere : 0 0 0
SIPResp4RequestTerminated : SIPResp4Other : 0 0 0
SIPResp5InternalError : SIPResp5NotImplemented : SIPResp5BadGateway : 0
SIPResp5ServiceUnavailable : SIPResp5GatewayTimeout : SIPResp5BadSipVersion : SIPResp5MessageTooLarge : SIPResp5Other : SIPResp6xx : 0 0 0 0 0
See the following table for field description. Table 6-1 Description of the fields of the display voice sip call-statistics command Field SIPRegisters SIPInvites SIPAcks SIPPracks SIPByes SIPCancels SIPInfos SIPOKRegisters SIPOKInvites SIPOKAcks SIPOKPracks Description REGISTER requests sent and received by the SIP gateway INVITE requests sent and received by the SIP gateway ACKs sent and received by the SIP gateway PACK requests sent and received by the SIP gateway BYE requests sent and received by the SIP gateway CANCEL requests sent and received by the SIP gateway INFO requests sent and received by the SIP gateway Successful REGISTER requests sent and received by the SIP gateway Successful INVITE requests sent and received by the SIP gateway Successful ACK requests sent and received by the SIP gateway Successful PACK requests received by the SIP gateway sent and
Field SIPOKByes SIPOKCancels SIPResp3MultipleChoice SIPResp3MovedPermanently SIPResp3MovedTemporarily SIPResp3UseProxy SIPResp3Other SIPResp4BadRequest SIPResp4Unauthorized SIPResp4Forbidden SIPResp4NotFound SIPResp4MethodNotAllowed SIPResp4NotAcceptable SIPResp4ProxyAuthRequired SIPResp4ReqTimeout SIPResp4ReqEntityTooLarge SIPResp4ReqURITooLarge SIPResp4UnsupportedMediaType
Description Successful BYE requests sent and received by the SIP gateway Successful CANCEL requests sent and received by the SIP gateway 300 (Multiple Choices) responses received by the SIP gateway 301 (Moved Permanently) received by the SIP gateway 302 (Moved Temporarily) received by the SIP gateway responses responses
305 (Use Proxy) responses received by the SIP gateway Other 3xx responses received by the SIP gateway 400 (Bad Request) responses received by the SIP gateway 401 (Unauthorized) responses received by the SIP gateway 403 (Forbidden) responses received by the SIP gateway 404 (Not Found) responses received by the SIP gateway 405 (Method Not Allowed) responses received by the SIP gateway 406 (Not Acceptable) responses received by the SIP gateway 407 (Proxy Authentication Required) responses received by the SIP gateway 408 (Request Timeout) responses received by the SIP gateway 413 (Request Entity Too Large) responses received by the SIP gateway 414 (Request-URI Too Long) responses received by the SIP gateway 415 (Unsupported Media Type) responses received by the SIP gateway
Field SIPResp4UnsupportedURIScheme SIPResp4BadExtension SIPResp4ExtensionRequired SIPResp4AddrIncomplete SIPResp4BusyHere SIPResp4RequestTerminated SIPResp4Other SIPResp5InternalError SIPResp5NotImplemented SIPResp5BadGateway SIPResp5ServiceUnavailable SIPResp5GatewayTimeout SIPResp5BadSipVersion SIPResp5MessageTooLarge SIPResp5Other SIPResp6xx
Description 416 (Unsupported URI Scheme) responses received by the SIP gateway 420 (Bad Extension) responses received by the SIP gateway 421 (Extension Required) received by the SIP gateway 484 (Address Incomplete) received by the SIP gateway responses responses
486 (Busy Here) responses received by the SIP gateway 487 (Request Terminated) received by the SIP gateway responses
Other 4xx responses received by the SIP gateway 500 (Server Internal Error) responses received by the SIP gateway 501 (Not Implemented) responses received by the SIP gateway 502 (Bad Gateway) responses received by the SIP gateway 503 (Service Unavailable) received by the SIP gateway responses
504 (Server Time-Out) responses received by the SIP gateway 505 (Version Not Supported) responses received by the SIP gateway 513 (Message Too Large) received by the SIP gateway responses
Other 5xx responses received by the SIP gateway 6xx responses received by the SIP gateway
6.1.4 mode
Syntax
mode {gateway | phone number number }
undo mode
View
SIP Client view
Parameter
gateway: sets the registration mode of the gateway to gateway. phone: sets the registration mode of the gateway to phone. number number: the number to be registered in phone mode.
Description
Use the mode command to set the registration mode of the gateway. Use the undo mode command to restore the default registration mode, or the gateway mode. In gateway mode, the router can register multiple numbers while in phone mode it can register only the one specified by the number argument.
Example
# Set the gateway registration mode to phone and the number to be registered to 1688.
[Router] mode phone number 1688
6.1.5 register-enable
Syntax
register-enable { on | off } undo register-enable
View
SIP client view
Parameter
on: Enables the SIG registration function. off: Disables the SIG registration function.
Description
Use the register-enable command to enable or disable the SIP registration function. By default, the SIP registration function is not enabled.
You can disable the SIP registration function by executing either undo register-enable or register-enable off.
Example
# Enable the SIP registration function.
[Router-voice-sip] register-enable on
6.1.6 reset voice sip

Syntax
reset voice sip
Parameter
None
View
System view
Description
Use the reset voice sip command to reset all the statistic information about the SIP client.
Example
# Reset all the statistic information about the SIP client.
[Router] reset voice sip
6.1.7 sip
Syntax
sip
View
Voice view
Parameter
None
Description
Use the sip command to access SIP client view.
Before you can configure a SIP client, you should first access the appropriate SIP client view.
Example
# Access SIP client view.
[Router-voice] sip [Router-voice-sip]
6.1.8 sip-id
Syntax
sip-id id password { simple | cipher } password undo sip-id
View
SIP client view
Parameter
id: SIP ID of router, which is a case sensitive character string in the range 1 to 31 and defaults to 3Com-GATEWAY. simple: Displays the configuration of SIP-ID password in plain text. cipher: Displays the configuration of SIP-ID password in ciphertext. password: SIP authentication password of the gateway, which defaults to 3Com-SIP.
Description
Use the sip-id command to set ID of the local gateway and configure its SIP authentication password. Use the undo sip-id command to restore the default. By default, SIP ID of gateway is 3Com-GATEWAY and authentication password is 3Com-SIP. During the SIP message interaction, the local device may be required by the remote SIP device to provide SIP ID and password for authentication. You can use this command however only when the register-enable off command is configured.
Example
# Set SIP ID of the router to 3Com, password to 1234, and display mode to ciphertext.
[Router-voice-sip] sip-id 3Com password cipher 1234
6.1.9 sip-server
Syntax
sip-server { master | slaver } ip-address port port-number [ inbound | all ] undo sip-server
View
SIP client view
Parameter
master: Master proxy server. slaver: Slave proxy server. ip-address: IPv4 address. port port-number: Port number, which is in the range 1 to 65535 and defaults to 5060. inbound: Accepts only SIP call requests from the specified server. all: Accepts all the SIP call requests.
Description
Use the sip-server command to configure address information of SIP proxy server and define call requests that can be accepted. Use the undo sip-server command to restore the default. By default, all the SIP call requests are accepted. You can use this command to configure master and slave SIP proxy servers. During an interaction, requests are sent to the slave proxy server if the master is not available. If the inbound keyword applies, only SIP call requests from the specified proxy server are acceptable; if the all keyword applies, all the SIP call requests are acceptable. You can use this command however only when the register-enable off command is configured. The address configured here should be consistent with that assigned to the specified SIP proxy server at the time of networking.
Example
# Set the address of master SIP proxy server to 169.54.5.10 and port number to 1120.
[Router-voice-sip] sip-server master 169.54.5.10 port 1120 all
6.1.10 source-ip
Syntax
source-ip ip-address undo source-ip
View
SIP client view
Parameter
ip-address: IPv4 address.
Description
Use the source-ip command to bind a source IP address to the gateway when it functions as a User Agent (UA). By default, no SIP source IP address is configured. When receiving a TCP or UDP packet from the current device, its peer device uses the source IP address carried by the packet, that is, IP address of the interface where the packet is sent, as the destination address of the response packet. Note that this source address should be the IP address of an existing interface on the gateway. You can use this command however only when the register-enable off command is configured.
Example
# Set the local source address to 1.1.1.1.
[Router-voice-sip] source-ip 1.1.1.1
Command Reference Guide Command Index v2.30 Router Software
Appendix A Command Index

The command index includes all the commands in the 3Com Router Software v2.30 Command Reference Guide, which are arranged alphabetically.
ABCDEFGHIJKLMNOPQRSTUVWXYZ
1.1.100 vi-card reboot 1.1.101 voice-setup 1.1.102 voip calledtunnel 1.1.103 voip call-start 1.1.104 voip h323-descriptor 1.1.105 vqa data-statistic 1.1.106 vqa dscp 1.1.107 vqa dsp-monitor 1.1.108 vqa ip-precedence 1.1.109 vqa jitter-buffer 1.1.110 vqa performance Voice Voice Voice Voice Voice Voice Voice Voice Voice Voice Voice 1-101 1-102 1-102 1-103 1-103 1-104 1-105 1-106 1-107 1-108 1-109
A
aaa-client abr-summary access-limit accounting optional acl acl activate activate address address sip adsl standard adsl tx_attenuation Voice Routing Protocol Security Security System Management Security Interface Interface Voice Voice Interface Interface 4-1 3-1 1-1 1-1 4-1 2-1 5-21 5-31 1-1 6-1 5-32 5-33
A-1 3Com Corporation
Command Reference Guide Command Index v2.30 Router Software aggregate aggregate aging-time ah authentication-algorithm alarm-threshold allow l2tp ani ani-offset answer apply access-vpn vpn-instance apply as-path apply community apply cost apply cost-type apply default output-interface apply ip-address apply ip-address default next-hop apply ip-address next-hop apply ip-address next-hop apply ip-precedence apply isis apply local-preference apply mpls-label apply origin apply output-interface apply output-interface apply policy outbound apply tag area area area-authentication-mode area-id (in Voice Entity View) area-id (in Voice GK Client View)
Appendix A Command Index Routing Protocol Multicast Protocol Security Security Interface VPN Voice Voice Voice MPLS Routing Protocol Routing Protocol Routing Protocol Routing Protocol Network Protocol Routing Protocol Network Protocol Network Protocol Network Protocol Network Protocol Routing Protocol Routing Protocol MPLS Routing Protocol Network Protocol Network Protocol QoS Routing Protocol Routing Protocol Voice Routing Protocol Voice Voice 5-1 5-1 3-7 4-1 4-20 1-1 2-1 2-1 2-2 2-1 6-1 6-1 6-2 6-3 8-1 6-3 8-2 8-2 9-1 8-3 6-4 6-5 2-1 6-6 8-4 9-2 4-1 6-6 3-2 1-2 4-1 1-2 5-1
Command Reference Guide Command Index v2.30 Router Software arp check enable arp static arp-proxy enable asbr-summary ascii aspf-policy async mode atm class atm-class atm-link check authentication-algorithm authentication-method authentication-mode authentication-mode auto-config auto-config enable auto-execute command
Appendix A Command Index Network Protocol Network Protocol Network Protocol Routing Protocol System Management Security Interface Link Layer Protocol Link Layer Protocol Link Layer Protocol Security Security System Management Routing Protocol System Management System Management System Management 2-2 2-1 2-5 3-2 3-19 3-8 4-1 7-1 7-1 7-2 5-1 5-1 4-1 3-3 1-1 1-3 4-2
B
balance baudrate bgp binary bootfile backup bootfile dir bootfile main bridge aging-time bridge bridge-set enable bridge bridging bridge enable bridge learning bridge mac-address bridge routing Routing Protocol Interface Routing Protocol System Management System Management System Management System Management Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol 5-2 4-2 5-3 3-19 3-3 3-1 3-1 9-1 9-1 9-2 9-3 9-3 9-4 9-5
Command Reference Guide Command Index v2.30 Router Software bridge routing-enable bridge-set bridge-set (in Ethernet Interface view) bridge-set (in synchronous serial interface view) broadcast-limit link broadcast-suppression bsr-policy busytone-t-th bye
Appendix A Command Index Link Layer Protocol Link Layer Protocol Network Protocol Network Protocol Interface Interface Multicast Protocol Voice System Management 9-6 9-6 11-2 11-1 6-9 3-1 3-1 1-3 3-20
C
ca identifier cable cable cable (CT1/PRI Interface) cable (CT3 Interface) cache-sa-enable caller-permit car card-digit cas cbs c-bsr ccc interface out-interface ccc interface transmit-lsp receive-lsp cd cd cdr cdup ce certificate request from certificate request mode certificate request polling Security Interface Interface Interface Interface Multicast Protocol Voice QoS Voice Voice QoS Multicast Protocol MPLS MPLS System Management System Management Voice System Management MPLS Security Security Security 6-1 5-2 5-14 4-22 4-52 4-1 1-4 2-15 4-1 2-3 4-2 3-2 3-1 3-1 3-3 3-20 4-2 3-21 3-8 6-1 6-2 6-3
Command Reference Guide Command Index v2.30 Router Software certificate request url channel channel-set (CE1/PRI Interface) channel-set (CT1/PRI Interface) checkzero cid display cid enable cid send cid type cir cir allow classifier behavior clear-forward-ack clock clock clock clock clock clock clock clock (CE1/PRI Interface) clock (CE3 Interface) clock (CT1/PRI Interface) clock (CT3 Interface) clock (Serial Interface) clock datetime clock summer-time clock timezone close cngced-detection cng-on code code (CEI/PRI Interface)
Appendix A Command Index Security Link Layer Protocol Interface Interface Routing Protocol Voice Voice Voice Voice QoS QoS QoS Voice Interface Interface Interface Interface Interface Interface Link Layer Protocol Interface Interface Interface Interface Interface Getting Started Getting Started Getting Started System Management Voice Voice Interface Interface 6-4 8-1 4-12 4-22 2-1 1-6 1-6 1-7 1-8 4-2 4-3 2-16 2-4 4-62 4-82 5-3 5-15 5-17 5-19 7-3 4-13 4-43 4-23 4-52 4-3 1-1 1-1 1-2 3-21 3-1 1-8 5-4 4-14
Command Reference Guide Command Index v2.30 Router Software code (CT1/PRI Interface) code nrzi code nrzi command-alias enable command-alias mapping command-privilege common-name compare-different-as-med compression confederation id confederation nonstandard confederation peer-as congestion-threshold connection controller cpos controller e1 controller e3 controller t1 controller t3 copy cost-style count country country-code cpu-usage cycle cq crc crc crl update period crl url c-rp crp-policy
Appendix A Command Index Interface Interface Network Protocol Getting Started Getting Started Getting Started Security Routing Protocol Voice Routing Protocol Routing Protocol Routing Protocol QoS MPLS Interface Interface Interface Interface Interface System Management Routing Protocol System Management Security Interface Getting Started QoS Interface Interface Security Security Multicast Protocol Multicast Protocol 4-24 4-4 11-2 1-20 1-21 1-3 6-7 5-4 1-9 5-4 5-5 5-6 4-4 3-9 4-63 4-14 4-43 4-25 4-53 3-4 4-2 2-1 6-8 4-5 1-4 4-5 4-53 4-83 6-4 6-5 3-3 3-4
D
dampening databits datafill data-flow-format data-flow-format datasize debugging debugging debugging arp packet debugging aspf debugging atm all debugging atm error debugging atm event debugging atm packet debugging bgp debugging bgp mp-update debugging bridge debugging dhcp client debugging dhcp relay debugging dhcp server debugging dialer debugging dlsw debugging dns debugging dvpn debugging encrypt-card debugging firewall debugging fr debugging fr compress debugging fr compression debugging hwtacacs debugging igmp Routing Protocol System Management System Management Security Security System Management System Management System Management Network Protocol Security Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Routing Protocol Multicast Protocol Link Layer Protocol Network Protocol Network Protocol Network Protocol Dial-up Network Protocol Network Protocol VPN Security Security Link Layer Protocol Link Layer Protocol Link Layer Protocol Security Multicast Protocol 5-7 4-3 2-1 1-14 1-37 2-2 1-4 3-22 2-2 3-8 7-4 7-4 7-5 7-6 5-8 5-2 9-7 5-36 5-39 5-4 1-1 11-3 2-7 3-1 4-35 3-1 6-1 6-3 6-3 1-38 2-1
Command Reference Guide Command Index v2.30 Router Software debugging ike debugging ip debugging ip multicast-policy debugging ip urpf debugging ipsec debugging ipx packet debugging ipx ping debugging ipx rip debugging ipx rtpro-flash debugging ipx rtpro-interface debugging ipx rtpro-routing debugging ipx sap packet debugging isdn debugging isis debugging l2tp debugging lapb debugging llc2 debugging modem debugging mpls l2vpn debugging mpls ldp debugging mpls lspm debugging msdp debugging multicast forwarding debugging multicast kernel-routing debugging multicast status-forwarding debugging nat debugging ntp-service debugging ospf debugging pad debugging physical debugging pim common debugging pim dm debugging pim sm
Appendix A Command Index Security Network Protocol Network Protocol Network Protocol Security Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Link Layer Protocol Routing Protocol VPN Link Layer Protocol Network Protocol Dial-up MPLS MPLS MPLS Multicast Protocol Multicast Protocol Multicast Protocol Multicast Protocol Network Protocol System Management Routing Protocol Link Layer Protocol Interface Multicast Protocol Multicast Protocol Multicast Protocol 5-2 6-1 9-2 2-14 4-2 10-1 10-2 10-3 10-4 10-5 10-6 10-7 3-1 4-3 1-2 8-1 11-4 3-1 3-2 1-13 1-1 4-1 1-1 1-1 1-2 7-1 5-1 3-4 8-2 1-1 3-5 3-5 3-6
Command Reference Guide Command Index v2.30 Router Software debugging pki certificate debugging ppp compression iphc rtp debugging ppp compression iphc tcp debugging pppoe-client debugging pppofr debugging radius debugging rip debugging rlogin debugging rsh debugging sdlc debugging slip debugging snmp-agent debugging ssh server debugging standby event debugging tcp event debugging tcp md5 debugging tcp packet debugging telnet debugging tunnel debugging udp packet debugging udp-helper debugging voice data-flow debugging voice dpl debugging voice fax debugging voice h225 debugging voice h245 debugging voice ipp debugging voice r2 debugging voice ras debugging voice rcv debugging voice rcv r2 debugging voice sip debugging voice vas
Appendix A Command Index Security Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Security Routing Protocol System Management System Management Network Protocol Link Layer Protocol System Management System Management Reliability Network Protocol Network Protocol Network Protocol System Management VPN Network Protocol Network Protocol Voice Voice Voice Voice Voice Voice Voice Voice Voice Voice Voice Voice 6-15 1-20 1-21 2-6 6-4 1-15 2-2 8-22 8-21 11-4 4-1 6-1 8-8 1-1 6-2 6-3 6-4 8-1 2-1 6-5 3-1 1-15 1-16 3-2 1-16 1-17 1-17 2-4 5-2 1-18 2-5 6-1 1-19
Command Reference Guide Command Index v2.30 Router Software debugging voice vas fax debugging voice vcc debugging voice vmib debugging voice vpp debugging voice vpp r2 debugging vrrp debugging vty debugging x25 debugging x25 x2t debugging x25 xot default default cost default cost default entity compression default entity fax default entity payload-size default entity vad-on default interval default limit default local-preference default med default tag default type default-cost default-route imported default-route-advertise default-route-advertise delay delay delete delete delete rpf-route-static all delete static-routes all Voice Voice Voice Voice Voice
Appendix A Command Index 3-2 4-3 1-19 1-20 2-6 2-1 4-4 8-3 8-4 8-3 2-6 2-2 3-5 1-21 3-3 1-22 1-23 3-6 3-7 5-9 5-10 3-7 3-8 3-9 5-9 3-9 4-4 1-23 2-8 3-5 3-22 6-1 1-15
Reliability System Management Link Layer Protocol Link Layer Protocol Link Layer Protocol Voice Routing Protocol Routing Protocol Voice Voice Voice Voice Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Voice Voice System Management System Management Multicast Protocol Routing Protocol
Command Reference Guide Command Index v2.30 Router Software description description description description description (in Voice Entity View) description (in Voice Subscriber-Line View) destination destination-ip destination-port detect detect dh dhcp enable dhcp relay release dhcp select (in Interface View) dhcp select (in System View) dhcp server detect dhcp server dns-list dhcp server dns-list interface (in System View) dhcp server domain-name (in Interface View) dhcp server domain-name (in System View) dhcp server expired (in Interface View) dhcp server expired interface (in System View) dhcp server forbidden-ip dhcp server ip-pool dhcp server nbns-list (in Interface View) dhcp server nbns-list (in System View) dhcp server netbios-type (in Interface View) dhcp server netbios-type (in System View) dhcp server option (in Interface View) dhcp server option interface (in System View) dhcp server ping dhcp server static-bind
Appendix A Command Index System Management Interface Interface MPLS Voice Voice VPN System Management System Management Interface Security Security Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol 2-2 1-1 3-1 2-2 1-25 1-25 2-1 2-3 2-4 4-5 3-9 5-3 5-1 5-40 5-1 5-2 5-3 5-5 5-6 5-7 5-7 5-8 5-9 5-10 5-11 5-12 5-13 5-14 5-15 5-16 5-16 5-17 5-18
Command Reference Guide Command Index v2.30 Router Software dialer bundle dialer bundle-member dialer callback-center dialer call-in dialer circular-group dialer enable-circular dialer isdn-leased dialer isdn-leased (ISDN BRI Leased Line Configuration) dialer number dialer priority dialer queue-length dialer route dialer threshold dialer timer autodial dialer timer compete dialer timer enable dialer timer idle dialer timer wait-carrier dialer user dialer-group dialer-rule dial-prefix dial-program differential-delay dir dir disconnect display aaa unsent-h323-call-record display acl display alarm urgent display arp display aspf all display aspf interface
Appendix A Command Index Dial-up Dial-up Dial-up Dial-up Dial-up Dial-up Dial-up Link Layer Protocol Dial-up Dial-up Dial-up Dial-up Dial-up Dial-up Dial-up Dial-up Dial-up Dial-up Dial-up Dial-up Dial-up Voice Voice Interface System Management System Management System Management Voice Security System Management Network Protocol Security Security 1-1 1-2 1-3 1-4 1-5 1-5 1-6 3-1 1-7 1-8 1-9 1-9 1-11 1-12 1-13 1-13 1-14 1-15 1-15 1-16 1-17 1-26 1-28 5-4 3-6 3-23 3-23 4-4 2-2 1-30 2-3 3-10 3-12
Command Reference Guide Command Index v2.30 Router Software display aspf policy display aspf session display atm class display atm interface display atm map-info display atm pvc-group display atm pvc-info display auto-config display bgp group display bgp l2vpn display bgp multicast group display bgp multicast network display bgp multicast peer display bgp multicast routing-table display bgp multicast routing-table as-path-acl display bgp multicast routing-table cidr display bgp multicast routing-table community display bgp multicast routing-table community-list display bgp multicast routing-table different-origin-as display bgp multicast routing-table peer display bgp multicast routing-table regular-expression display bgp multicast routing-table statistic display bgp network display bgp paths display bgp peer display bgp routing-table display bgp routing-table as-path-acl display bgp routing-table cidr display bgp routing-table community display bgp routing-table community-list display bgp routing-table dampened display bgp routing-table different-origin-as display bgp routing-table flap-info
Appendix A Command Index Security Security Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol System Management Routing Protocol MPLS Multicast Protocol Multicast Protocol Multicast Protocol Multicast Protocol Multicast Protocol Multicast Protocol Multicast Protocol Multicast Protocol Multicast Protocol Multicast Protocol Multicast Protocol Multicast Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol 3-13 3-13 7-8 7-8 7-9 7-10 7-12 1-3 5-11 3-10 5-2 5-3 5-3 5-4 5-4 5-5 5-5 5-6 5-6 5-7 5-7 5-8 5-12 5-12 5-13 5-15 5-18 5-19 5-19 5-20 5-21 5-22 5-22
Command Reference Guide Command Index v2.30 Router Software display bgp routing-table label display bgp routing-table peer { advertised | received } display bgp routing-table peer dampened display bgp routing-table peer regular-expression display bgp routing-table regular-expression display bgp vpnv4 display bridge address-table display bridge information display bridge traffic display brief interface display ccc display channel display clipboard display clock display command-alias display connection display controller cpos display controller cpos e1 display controller cpos t1 display controller e1 display controller e3 display controller t1 display controller t3 display cpu-usage display cpu-usage history display current-configuration display current-configuration voice display debugging display debugging ospf display device display dhcp client display dhcp relay address display dhcp relay statistics
Appendix A Command Index MPLS Routing Protocol Routing Protocol Routing Protocol Routing Protocol MPLS Link Layer Protocol Link Layer Protocol Link Layer Protocol Interface MPLS System Management Getting Started Getting Started Getting Started Security Interface Interface Interface Interface Interface Interface Interface Getting Started Getting Started System Management Voice System Management Routing Protocol System Management Network Protocol Network Protocol Network Protocol 2-2 5-23 5-24 5-25 5-26 2-3 9-7 9-9 9-10 1-2 3-3 1-12 1-5 1-5 1-21 1-2 4-63 4-66 4-67 4-15 4-44 4-25 4-60 1-6 1-7 3-32 4-6 1-5 3-11 1-31 5-36 5-40 5-41
Command Reference Guide Command Index v2.30 Router Software display dhcp server conflict display dhcp server expired display dhcp server free-ip display dhcp server ip-in-use display dhcp server statistics display dhcp server tree display diagnostic-information display dialer interface display dlsw bridge-entry display dlsw circuits display dlsw information display dlsw reachable-cache display dlsw remote display dns domain display dns dynamic-host display dns server display domain display dsl configuration display dsl configuration display dsl status display dsl status display dsl version display dsl version display dvpn map display encrypt-card fast-switch display encrypt-card sa display encrypt-card statistics display encrypt-card syslog display environment display fe1 serial display fib display fib acl display fib begin
Appendix A Command Index Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol System Management Dial-up Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Security Interface Interface Interface Interface Interface Interface VPN Security Security Security Security System Management Interface Network Protocol Network Protocol Network Protocol 5-19 5-19 5-21 5-21 5-22 5-24 1-5 1-18 11-5 11-5 11-6 11-9 11-8 2-10 2-11 2-10 1-3 5-24 5-34 5-26 5-35 5-28 5-37 3-1 4-36 4-37 4-39 4-40 1-30 4-31 6-6 6-6 6-7
Command Reference Guide Command Index v2.30 Router Software display fib ip-prefix display fib longer display fib statistics display firewall ethernet-frame-filter display firewall-statistics display fr class-map display fr compress display fr del display fr dlci-switch display fr fragment-info display fr inarp-info display fr interface display fr lmi-info display fr map pppofr display fr map-info display fr pvc-info display fr statistics display fr switch-table display ft1 serial display ftp-server display ftp-user display history-command display hwping display hwtacacs display icmp statistics display igmp group display igmp interface display igmp local display ike peer display ike proposal display ike sa display info-center display interface
Appendix A Command Index Network Protocol Network Protocol Network Protocol Link Layer Protocol Security QoS Link Layer Protocol QoS Link Layer Protocol QoS Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol QoS Interface System Management System Management Getting Started System Management Security Network Protocol Multicast Protocol Multicast Protocol Multicast Protocol Security Security Security System Management Interface 6-8 6-9 6-11 9-12 3-2 4-6 6-5 4-7 6-5 4-8 6-6 6-7 6-8 6-10 6-9 6-10 6-11 4-9 4-36 3-15 3-16 1-9 2-4 1-39 6-11 2-1 2-2 2-4 5-4 5-4 5-6 1-13 1-3
Command Reference Guide Command Index v2.30 Router Software display interface display interface display interface atm display interface encrypt display interface ethernet display interface ima-group display interface loopback display interface mfr display interface mp-group display interface null display interface pos display interface tunnel display interface virtual-ethernet display interface virtual-template display ip fast-forwarding cache display ip host display ip interface display ip interface brief display ip ip-prefix display ip multicast-policy display ip policy display ip policy setup display ip policy statistic display ip routing-table display ip routing-table acl display ip routing-table ip_address display ip routing-table ip_address1 ip_address2 display ip routing-table ip-prefix display ip routing-table protocol display ip routing-table radix display ip routing-table statistics display ip routing-table verbose display ip routing-table vpn-instance
Appendix A Command Index Interface Link Layer Protocol Interface Security Interface Interface Interface Link Layer Protocol Interface Interface Interface VPN Interface Interface Network Protocol Network Protocol Network Protocol Network Protocol Routing Protocol Network Protocol Network Protocol Network Protocol Network Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol 3-2 8-5 5-1 4-41 2-1 5-5 6-14 6-12 6-12 6-15 4-84 2-2 6-13 6-9 6-12 2-6 6-13 6-14 6-7 9-3 8-5 8-5 8-6 1-1 1-2 1-3 1-6 1-6 1-8 1-9 1-10 1-11 1-12
Command Reference Guide Command Index v2.30 Router Software display ip routing-table vpn-instance display ip socket display ip statistics display ip vpn-instance display ipsec policy display ipsec policy-template display ipsec proposal display ipsec sa display ipsec statistics display ipx interface display ipx routing-table display ipx routing-table statistics display ipx service-table display ipx statistics display isdn active-channel display isdn call-info display isdn call-record display isdn parameters display isdn spid display isis brief display isis interface display isis lsdb display isis mesh-group display isis peer display isis routing display isis spf-log display l2tp session display l2tp tunnel display l2tp user display llc2 display loadsharing ip address display local-user display logbuffer
Appendix A Command Index MPLS Network Protocol Network Protocol MPLS Security Security Security Security Security Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol VPN VPN VPN Network Protocol Routing Protocol Security System Management 2-5 6-15 6-16 2-6 4-2 4-5 4-6 4-7 4-10 10-9 10-11 10-14 10-15 10-16 3-2 3-3 3-5 3-5 3-7 4-5 4-5 4-6 4-7 4-8 4-8 4-9 1-3 1-3 1-4 11-9 1-18 1-4 1-14
Command Reference Guide Command Index v2.30 Router Software display memory display memory display mfr display mpls interface display mpls l2vc display mpls l2vpn forwarding-info display mpls l3vpn-lsp display mpls ldp display mpls ldp buffer-info display mpls ldp interface display mpls ldp lsp display mpls ldp peer display mpls ldp remote display mpls ldp session display mpls lsp display mpls static-l2vc display mpls static-lsp display mpls statistics display msdp brief display msdp peer-status display msdp sa-cache display msdp sa-count display multicast forwarding-table display multicast routing-table display multicast routing-table static display multicast routing-table static display multicast routing-table static config display multicast rpf-info display nat display ntp-service sessions display ntp-service status display ntp-service trace display ospf abr-asbr
Appendix A Command Index Getting Started Routing Protocol Link Layer Protocol MPLS MPLS MPLS MPLS MPLS MPLS MPLS MPLS MPLS MPLS MPLS MPLS MPLS MPLS MPLS Multicast Protocol Multicast Protocol Multicast Protocol Multicast Protocol Multicast Protocol Multicast Protocol Multicast Protocol Multicast Protocol Multicast Protocol Multicast Protocol Network Protocol System Management System Management System Management Routing Protocol 1-10 7-1 6-13 1-2 3-7 3-11 2-6 1-14 1-15 1-16 1-16 1-17 1-17 1-18 1-2 3-6 1-3 1-3 4-2 4-2 4-4 4-4 1-3 1-3 1-5 6-1 6-2 1-6 7-1 5-2 5-2 5-3 3-11
Command Reference Guide Command Index v2.30 Router Software display ospf asbr-summary display ospf brief display ospf cumulative display ospf error display ospf interface display ospf lsdb display ospf nexthop display ospf peer display ospf request-queue display ospf retrans-queue display ospf routing display ospf sham-link display ospf vlink display pim bsr-info display pim interface display pim neighbor display pim routing-table display pim rp-info display pki certificate display pki crl display port display port-mapping display ppp compression iphc rtp display ppp compression iphc tcp display ppp compression stac-lzs display ppp mp display pppoe-server session display pppoe-server session display qos car interface display qos carl display qos cbq interface display qos cq interface display qos cql
Appendix A Command Index Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol MPLS Routing Protocol Multicast Protocol Multicast Protocol Multicast Protocol Multicast Protocol Multicast Protocol Security Security Interface Security Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol QoS QoS QoS QoS QoS 3-12 3-13 3-14 3-16 3-17 3-17 3-22 3-23 3-24 3-24 3-25 2-7 3-26 3-7 3-8 3-9 3-9 3-11 6-19 6-20 3-4 3-15 1-21 1-22 1-22 1-1 2-1 2-7 1-1 1-2 2-17 2-7 2-8
Command Reference Guide Command Index v2.30 Router Software display qos gts interface display qos lr interface display qos policy display qos policy interface display qos policy interface display qos pq interface display qos pql display qos rtpq interface display qos wfq interface display qos wred interface display radius display radius statistics display rip display rip interface display rip routing display rip vpn-instance display rmon alarm display rmon event display rmon eventlog display rmon history display rmon prialarm display rmon statistics display route-policy display rsa local-key-pair public display rsa peer-public-key display saved-configuration display schedule reboot display snmp-agent display snmp-agent community display snmp-agent group display snmp-agent mib-view display snmp-agent statistics display snmp-agent sys-info QoS QoS QoS QoS QoS QoS QoS QoS QoS QoS
Security Security Routing Protocol Routing Protocol Routing Protocol Routing Protocol System Management System Management System Management System Management System Management System Management Routing Protocol System Management System Management System Management System Management System Management System Management System Management System Management System Management System Management
Command Reference Guide Command Index v2.30 Router Software display snmp-agent usm-user display sot display ssh server display ssh user-information display standby flow display standby state display startup display status interface ima-group display stop-accounting-buffer display stop-accounting-buffer display tcp statistics display tcp status display tcp status display this display time-range display traffic behavior display traffic classifier display trapbuffer display udp statistics display udp-helper server display user-interface display users display version display virtual-access display vlan display vlan interface display vlan max-packet-process display vlan statistics interface display vlan statistics vid display voice aaa-client configuration display voice aaa-client local-user display voice aaa-client statistic display voice call-history-record
Appendix A Command Index System Management Network Protocol System Management System Management Reliability Reliability System Management Interface Security Security Network Protocol System Management Network Protocol System Management Security QoS QoS System Management Network Protocol Network Protocol System Management System Management Getting Started Interface Interface Interface Interface Interface Interface Voice Voice Voice Voice 6-6 12-1 8-11 8-11 1-1 1-3 3-35 5-6 1-20 1-39 6-18 8-1 6-20 3-36 2-7 2-21 2-22 1-16 6-21 3-1 4-4 4-5 1-10 6-10 6-2 6-3 6-3 6-4 6-4 4-7 4-8 4-9 1-28
Command Reference Guide Command Index v2.30 Router Software display voice call-history-record display voice call-info display voice default display voice em call-statistic display voice em ccb display voice entity display voice fax display voice gateway display voice number-substitute display voice r2 call-statistics display voice rcv ccb display voice rcv statistic display voice rcv statistic r2 display voice sip call-statistics display voice sip register-state display voice subscriber-line display voice subscriber-line display voice vcc display voice voip display voice voip data-statistic display voice vpp display vrrp display x25 alias-policy display x25 cug display x25 hunt-group-info display x25 map display x25 pad display x25 switch-table pvc display x25 switch-table svc display x25 vc display x25 x2t switch-table display x25 xot dl-bits Voice Voice Voice Voice Voice Voice Voice Voice Voice Voice Voice Voice Voice Voice Voice Voice Voice Voice Voice Voice Voice
Reliability Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Voice
Command Reference Guide Command Index v2.30 Router Software dlsw bridge-set dlsw diverse dlsw enable dlsw ethernet-frame-filter dlsw local dlsw reachable dlsw reachable-cache dlsw remote dlsw timer dns domain dns resolve dns server dns-list domain domain-authentication-mode domain-id domain-name dot-match dscp dtmf dtmf threshold duplex duplex dvpn authenticate enable dvpn class dvpn client dvpn interface-type dvpn key dvpn map dvpn register-type dvpn retry dvpn server dvpn timer aging
Appendix A Command Index Network Protocol Network Protocol Network Protocol Link Layer Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Security Routing Protocol MPLS Network Protocol Voice Voice Voice Voice Interface Interface VPN VPN VPN VPN VPN VPN VPN VPN VPN VPN 11-10 11-11 11-11 9-13 11-12 11-13 11-14 11-15 11-16 2-9 2-8 2-8 5-27 1-5 4-10 2-8 5-28 1-47 1-48 2-21 1-48 2-3 3-5 3-2 3-2 3-3 3-4 3-4 3-5 3-5 3-6 3-7 3-7
Command Reference Guide Command Index v2.30 Router Software dvpn timer keepalive dvpn timer redirect dvpn timer register dvpn timer setup dvpn udp-port dvpn vpn-id VPN VPN VPN VPN VPN VPN
Appendix A Command Index 3-8 3-9 3-9 3-10 3-11 3-11
E
e1 channel-set e1 channel-set e1 set clock e1 set clock e1 set frame-format e1 set frame-format e1 set loopback e1 set loopback e1 shutdown e1 shutdown e1 unframed e1 unframed ebs echo-canceller effect-time eliminate-pulse em-phy-parm em-signal encapsulation encapsulation-mode encrypt-card backuped encrypt-card fast-switch encryption-algorithm entity esp authentication-algorithm Interface Interface Interface Interface Interface Interface Interface Interface Interface Interface Interface Interface QoS Voice Voice Interface Voice Voice Link Layer Protocol Security Security Security Security Voice Security 4-45 4-69 4-46 4-70 4-47 4-71 4-47 4-71 4-48 4-72 4-49 4-73 4-11 1-52 2-22 4-6 1-54 1-54 7-13 4-11 4-42 4-42 5-7 1-55 4-12
Command Reference Guide Command Index v2.30 Router Software esp encryption-algorithm exchange-mode execute expired
Appendix A Command Index Security Security System Management Network Protocol 4-13 5-8 3-7 5-28
F
fast-connect fax baudrate fax ecm fax level fax local-train fax nsf-on fax protocol fax support-mode fax train-mode fdl fe1 clock fe1 code fe1 frame-format fe1 loopback fe1 timeslot-list fe1 unframed fifo queue-length file prompt filename filter-policy export filter-policy export filter-policy export filter-policy export filter-policy export filter-policy import filter-policy import filter-policy import Voice Voice Voice Voice Voice Voice Voice Voice Voice Interface Interface Interface Interface Interface Interface Interface QoS System Management System Management Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol 1-56 3-7 3-8 3-9 3-9 3-10 3-11 3-12 3-13 4-26 4-32 4-33 4-34 4-34 4-35 4-36 4-12 3-8 2-6 2-6 3-26 4-11 5-27 6-8 2-7 3-27 4-12
Command Reference Guide Command Index v2.30 Router Software filter-policy import filter-policy import final-callednum firewall aspf firewall default firewall enable firewall ethernet-frame-filter firewall fragments-inspect firewall fragments-inspect { high | low } firewall packet-filter first-rule flag flag flow-control flow-control flow-control flow-interval flow-interval force-link force-metering format fqdn fr class fr compression frf9 fr compression iphc fr congestion-threshold fr de del fr del inbound-interface fr del protocol ip fr dlci fr dlci-switch fr inarp fr interface-type
Appendix A Command Index Routing Protocol Routing Protocol Voice Security Security Security Link Layer Protocol Security Security Security Voice Interface Interface System Management Interface Interface Interface Dial-up Interface Voice System Management Security QoS Link Layer Protocol Link Layer Protocol QoS QoS QoS QoS Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol 5-27 6-9 2-23 3-15 3-2 3-3 9-14 3-3 3-4 3-5 1-57 4-74 4-84 4-7 2-4 3-6 1-5 1-20 2-5 2-23 3-9 6-7 4-13 6-16 6-17 4-13 4-14 4-15 4-16 6-17 6-18 6-19 6-20
Command Reference Guide Command Index v2.30 Router Software fr iphc fr lmi n391dte fr lmi n392dce fr lmi n392dte fr lmi n393dce fr lmi n393dte fr lmi t392dce fr lmi type fr map bridge fr map ip fr map ppp interface virtual-template fr pvc-pq fr switch fr switching fr traffic-policing fr traffic-shaping fragment frame-format frame-format frame-format frame-format frame-format frame-format (CE1/PRI Interface) frame-format (CT1/PRI Interface) frame-format (CT3 Interface) frame-length fr-class free user-interface frequency ft1 alarm-threshold ft1 cable ft1 clock ft1 code
Appendix A Command Index Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol QoS Link Layer Protocol Link Layer Protocol QoS QoS QoS Interface Interface Interface Interface Interface Interface Interface Interface Interface QoS System Management System Management Interface Interface Interface Interface 6-21 6-22 6-22 6-23 6-24 6-25 6-26 6-27 9-14 6-27 6-28 4-17 6-29 6-30 4-18 4-18 4-19 4-75 4-85 5-7 5-15 5-19 4-16 4-27 4-54 5-8 4-20 4-7 2-7 4-41 4-37 4-38 4-39
Command Reference Guide Command Index v2.30 Router Software ft1 frame-format ft1 loopback ft1 timeslot-list ftp ftp server enable ftp timeout ftp update ftp-operation
Appendix A Command Index Interface Interface Interface System Management System Management System Management System Management System Management 4-39 4-40 4-41 3-24 3-17 3-17 3-18 2-8
G
gateway-list get gk-2nd-id gk-client gk-id gk-security call gk-security register-pwd gre checksum gre key group group-b gts gw-access-number gw-address gw-id Network Protocol System Management Voice Voice Voice Voice Voice VPN VPN Routing Protocol Voice QoS Voice Voice Voice 5-29 3-24 5-4 5-3 5-5 5-5 5-6 2-4 2-5 5-28 2-24 2-23 4-16 5-7 5-8
H
header history-command max-size history-records host-route hotkey http-operation Getting Started System Management System Management Routing Protocol Getting Started System Management 1-11 4-8 2-9 2-8 1-12 2-9
Command Reference Guide Command Index v2.30 Router Software http-string hwping hwping-agent enable hwping-agent max-requests hwping-server enable hwping-server tcpconnect hwping-server udpecho hwtacacs nas-ip hwtacacs scheme
Appendix A Command Index System Management System Management System Management System Management System Management System Management System Management Security Security 2-10 2-11 2-11 2-12 2-23 2-24 2-25 1-40 1-41
I
idlecode (in CE1/PRI Interface View) idlecode (in CT1/PRI Interface View) idle-mark idle-mark idle-timeout id-type if-match if-match { destination-mac | source-mac } if-match acl if-match acl if-match acl if-match acl if-match any if-match as-path if-match classifier if-match community if-match cost if-match dscp if-match inbound-interface if-match interface if-match ip next-hop if-match ip-precedence Interface Interface Interface Network Protocol System Management Security QoS QoS Network Protocol Network Protocol Routing Protocol QoS QoS Routing Protocol QoS Routing Protocol Routing Protocol QoS QoS Routing Protocol Routing Protocol QoS 4-16 4-27 4-7 11-17 4-8 5-9 2-24 2-25 8-7 9-4 6-10 2-25 2-26 6-11 2-26 6-11 6-12 2-27 2-28 6-13 6-14 2-29
Command Reference Guide Command Index v2.30 Router Software if-match ip-prefix if-match mpls-exp if-match mpls-label if-match packet-length if-match protocol if-match rtp if-match tag igmp enable igmp group-limit igmp group-policy igmp host-join igmp lastmember-queryinterval igmp max-response-time igmp proxy igmp robust-count igmp timer other-querier-present igmp timer query igmp version ignore-lsp-checksum-error ike local-name ike next-payload check disabled ike peer (In IPSec policy view or IPSec policy template view) ike peer (in System View) ike proposal ike sa keepalive-timer interval ike sa keepalive-timer timeout ima ima-group ima-clock ima-test impedance import-route import-route import-route
Appendix A Command Index Routing Protocol QoS MPLS Network Protocol QoS QoS Routing Protocol Multicast Protocol Multicast Protocol Multicast Protocol Multicast Protocol Multicast Protocol Multicast Protocol Multicast Protocol Multicast Protocol Multicast Protocol Multicast Protocol Multicast Protocol Routing Protocol Security Security Security Security Security Security Security Interface Interface Interface Voice Routing Protocol Routing Protocol Routing Protocol 6-15 5-1 2-9 8-7 2-30 2-30 6-15 2-4 2-5 2-6 2-6 2-7 2-8 2-9 2-9 2-10 2-11 2-12 4-13 5-10 5-9 5-11 5-11 5-12 5-13 5-14 5-9 5-9 5-10 1-58 2-9 3-28 4-14
Command Reference Guide Command Index v2.30 Router Software import-route import-route import-route isis import-route ospf import-source info-center channel info-center console channel info-center enable info-center logbuffer info-center loghost info-center loghost source info-center monitor channel info-center snmp channel info-center source info-center timestamp info-center trapbuffer interface interface interface interface atm interface atm interface bridge-template interface dialer interface encrypt interface ethernet interface ima interface logic-channel interface loopback interface mfr interface mp-group interface null interface serial [ p2p | p2mp ] interface tunnel
Appendix A Command Index Routing Protocol Multicast Protocol Routing Protocol MPLS Multicast Protocol System Management System Management System Management System Management System Management System Management System Management System Management System Management System Management System Management Interface Interface Interface Interface Link Layer Protocol Link Layer Protocol Dial-up Security Interface Interface Interface Interface Link Layer Protocol Interface Interface Link Layer Protocol VPN 5-29 5-8 4-15 2-9 4-5 1-17 1-17 1-18 1-19 1-20 1-21 1-21 1-22 1-23 1-25 1-25 1-6 3-6 6-1 5-11 7-14 9-15 1-19 4-43 6-5 5-11 6-8 6-16 6-31 6-12 6-17 6-31 2-5
Command Reference Guide Command Index v2.30 Router Software interface virtual-ethernet interface virtual-template interface virtual-template invert receive-clock invert transmit-clock ip ip address ip address bootp-alloc ip address dhcp-alloc ip address ppp-negotiate ip address unnumbered ip as-path-acl ip binding vpn-instance ip community-list ip fast-forwarding ip host ip ip-prefix ip local policy route-policy ip multicast-policy route-policy ip policy route-policy ip pool ip relay address ip relay address cycle ip relay address interface ip route-static ip route-static vpn-instance ip rpf-longest-match ip rpf-route-static ip tcp vjcompress ip urpf ip vpn-instance ip-precedence ip-precedence
Appendix A Command Index Interface Interface VPN Interface Interface Security Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Routing Protocol MPLS Routing Protocol Network Protocol Network Protocol Routing Protocol Network Protocol Network Protocol Network Protocol Security Network Protocol Network Protocol Network Protocol Routing Protocol MPLS Multicast Protocol Multicast Protocol Link Layer Protocol Network Protocol MPLS Link Layer Protocol Voice 6-13 6-11 1-5 4-8 4-9 6-9 1-1 4-1 5-38 1-2 1-3 5-30 2-10 5-31 6-22 2-6 6-16 8-8 9-5 8-9 1-7 5-42 5-43 5-44 1-15 2-11 6-3 6-3 1-23 2-13 2-12 7-15 1-59
Command Reference Guide Command Index v2.30 Router Software ipsec card-proposal ipsec policy (in System View) ipsec policy(in Interface View) ipsec policy-template ipsec proposal ipsec sa global-duration ipv4-family ipv4-family ipv4-family multicast ipv4-family vpn-instance ipv4-family vpnv4 ipx enable ipx encapsulation ipx netbios-propagation ipx network ipx rip import-route ipx rip mtu ipx rip multiplier ipx rip timer update ipx route ipx route load-balance-path ipx route max-reserve-path ipx sap disable ipx sap gns-disable-reply ipx sap gns-load-balance ipx sap max-reserve-servers ipx sap mtu ipx sap multiplier ipx sap timer update ipx service ipx split-horizon ipx tick ipx update-change-only
Appendix A Command Index Security Security Security Security Security Security Routing Protocol MPLS Multicast Protocol Routing Protocol Routing Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol 4-44 4-15 4-14 4-17 4-18 4-19 5-55 2-13 5-9 2-10 5-56 10-18 10-19 10-20 10-21 10-22 10-22 10-23 10-24 10-24 10-26 10-26 10-27 10-28 10-28 10-29 10-30 10-30 10-31 10-32 10-33 10-34 10-34
Command Reference Guide Command Index v2.30 Router Software isdn bch-local-manage isdn bch-select-way isdn caller-number isdn calling isdn check-called-number isdn crlength isdn ignore connect-ack isdn ignore hlc isdn ignore llc isdn ignore sending-complete isdn L3-timer isdn number-property isdn overlap-sending isdn pri-slipwnd-size isdn protocol-type isdn send-restart isdn spid auto_trigger isdn spid nit isdn spid resend isdn spid service isdn spid timer isdn spid1 isdn spid2 isdn statistics isdn two-tei isis isis authentication-mode isis circuit-level isis cost isis dis-priority isis enable isis mesh-group isis small-hello
Appendix A Command Index Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol 3-8 3-9 3-10 3-10 3-11 3-12 3-13 3-14 3-15 3-16 3-17 3-18 3-22 3-23 3-24 3-24 3-25 3-26 3-28 3-27 3-27 3-29 3-30 3-31 3-32 4-15 4-16 4-17 4-18 4-19 4-20 4-21 4-22
Command Reference Guide Command Index v2.30 Router Software isis timer csnp isis timer hello isis timer holding-multiplier isis timer lsp isis timer retransmit is-level itfcode (in CE1/PRI Interface View) itfcode (in CT1/PRI Interface View)
Appendix A Command Index Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Interface Interface 4-22 4-23 4-24 4-25 4-26 4-26 4-17 4-28
J
jitter-interval jitter-packetnum System Management System Management 2-12 2-13
K
keepalive key key VPN Security Security 2-6 1-21 1-41
L
l2tp enable l2tp match-order l2tp-auto-client enable l2tp-group l2tpmoreexam enable l2vpn-family language-mode lapb max-frame lapb modulo lapb retry lapb timer lapb window-size lcd ldap server VPN VPN VPN VPN VPN MPLS Getting Started Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol System Management Security 1-7 1-8 1-6 1-9 1-9 3-11 1-14 8-17 8-18 8-19 8-19 8-20 3-25 6-6
Command Reference Guide Command Index v2.30 Router Software level line line link-protocol link-protocol fr link-protocol fr mfr link-protocol hdlc link-protocol lapb link-protocol ppp link-protocol sdlc link-protocol slip link-protocol sot link-protocol x25 llc2 max-ack llc2 max-send-queue llc2 max-transmission llc2 modulo llc2 receive-window llc2 timer ack llc2 timer ack-delay llc2 timer busy llc2 timer poll llc2 timer reject loadbandwidth local local-address locality local-user local-user local-user password-display-mode lock log enable log-peer-change
Appendix A Command Index Security Voice Voice Interface Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Network Protocol Link Layer Protocol Network Protocol Link Layer Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Routing Protocol Security Security Security Security Voice Security Getting Started Security Routing Protocol 1-8 1-60 2-25 4-85 6-32 6-33 5-1 8-21 1-3 11-18 4-1 12-3 8-22 11-19 11-19 11-20 11-21 11-21 11-22 11-22 11-23 11-24 11-24 1-18 5-15 5-15 6-9 1-8 4-17 1-9 1-15 3-16 4-28
Command Reference Guide Command Index v2.30 Router Software loopback loopback loopback loopback loopback loopback loopback loopback loopback loopback (CE1/PRI Interface View) loopback (CE3 Interface) loopback (CT1/PRI Interface) loopback (CT3 Interface) loopback (Ethernet/GE Interface) loopback (ISDN BRI Interface) lr lr percent ls lsp-trigger
Appendix A Command Index Interface Interface Interface Interface Interface Interface Interface Interface Voice Interface Interface Interface Interface Interface Interface QoS QoS System Management MPLS 3-7 4-9 4-75 4-86 5-12 5-16 5-18 5-20 2-26 4-18 4-49 4-28 4-55 2-5 4-61 2-31 2-32 3-25 1-5
M
mac-address mac-address timer aging mandatory-chap mandatory-lcp map bridge map ip map ppp match-template max-call (in Voice Dial Program View) max-call (in Voice Entity View) max-connections max-packet-process Interface Interface VPN VPN Link Layer Protocol Link Layer Protocol Link Layer Protocol Voice Voice Voice Security Interface 6-14 3-7 1-10 1-11 7-16 7-17 7-18 1-61 1-63 1-64 5-16 6-6
Command Reference Guide Command Index v2.30 Router Software md5-compatible memory memory auto-establish disable memory auto-establish enable mfc (R2 CAS) mfr bundle-name mfr fragment mfr fragment-size mfr link-name mfr retry mfr timer ack mfr timer hello mfr window-size min-active-links mkdir mkdir mode mode modem modem modem auto-answer modem auto-answer modem timer answer more move mpls mpls l2vc mpls l2vpn mpls l2vpn encapsulation mpls ldp mpls ldp enable mpls ldp hops-count mpls ldp loop-detect
Appendix A Command Index Routing Protocol Routing Protocol Routing Protocol Routing Protocol Voice Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Interface System Management System Management Voice Voice System Management Dial-up System Management Dial-up System Management System Management System Management MPLS MPLS MPLS MPLS MPLS MPLS MPLS MPLS 4-28 7-4 7-2 7-3 2-26 6-33 6-34 6-35 6-35 6-36 6-37 6-37 6-38 5-13 3-9 3-26 2-27 6-6 4-9 3-1 4-10 3-2 4-10 3-10 3-10 1-6 3-8 3-12 3-13 1-18 1-19 1-19 1-20
Command Reference Guide Command Index v2.30 Router Software mpls ldp password mpls ldp path-vectors mpls ldp remote-peer mpls ldp reset-session mpls ldp timer mpls ldp transport-ip mpls lsr-id mpls static-l2vc msdp msdp-tracert mtracert mtu mtu mtu (Ethernet/GE Interface) mtu (POS Interface) mtu (Serial Interface) multicast minimum-ttl multicast packet-boundary multicast route-limit multicast routing-enable multi-path-number multiplex mode
Appendix A Command Index MPLS MPLS MPLS MPLS MPLS MPLS MPLS MPLS Multicast Protocol Multicast Protocol Multicast Protocol Link Layer Protocol MPLS Interface Interface Interface Multicast Protocol Multicast Protocol Multicast Protocol Multicast Protocol Routing Protocol Interface 1-21 1-21 1-22 1-23 1-23 1-24 1-7 3-7 4-6 4-7 1-6 7-19 3-13 2-6 4-87 4-10 1-8 1-9 1-9 1-10 2-11 4-76
N
nas-ip nas-ip nat address-group nat aging-time nat outbound nat outbound static nat server nat static nat traversal Security Security Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Security 1-22 1-42 7-3 7-4 7-5 7-6 7-7 7-9 5-17
Command Reference Guide Command Index v2.30 Router Software national-bit naturemask-arp nbns-list netbios-type network network network network network network-entity nslookup type nssa ntp-service access ntp-service authentication enable ntp-service authentication-keyid ntp-service broadcast-client ntp-service broadcast-server ntp-service max-dynamic-sessions ntp-service multicast-client ntp-service multicast-server ntp-service refclock-master ntp-service reliable authentication-keyid ntp-service source-interface ntp-service unicast-peer ntp-service unicast-server number-match number-substitute
Appendix A Command Index Interface Network Protocol Network Protocol Network Protocol Network Protocol Routing Protocol Routing Protocol Routing Protocol Multicast Protocol Routing Protocol Network Protocol Routing Protocol System Management System Management System Management System Management System Management System Management System Management System Management System Management System Management System Management System Management System Management Voice Voice 4-50 2-4 5-30 5-30 5-31 2-11 3-30 5-32 5-9 4-29 2-12 3-31 5-4 5-5 5-6 5-6 5-7 5-8 5-8 5-9 5-10 5-11 5-12 5-12 5-13 1-64 1-65
O
oam ais-rdi oam frequency oamping interface opaque-capability Link Layer Protocol Link Layer Protocol Link Layer Protocol Routing Protocol 7-19 7-20 7-21 3-32
Command Reference Guide Command Index v2.30 Router Software open option organization organizational-unit originating-rp ospf ospf authentication-mode ospf cost ospf dr-priority ospf mib-binding ospf mtu-enable ospf network-type ospf timer dead ospf timer hello ospf timer poll ospf timer retransmit ospf trans-delay ospf vpn-instance outband
Appendix A Command Index System Management Network Protocol Security Security Multicast Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol MPLS Voice 3-26 5-32 6-10 6-10 4-9 3-33 3-34 3-35 3-36 3-36 3-37 3-38 3-39 3-40 3-40 3-41 3-42 2-14 1-66
P
pad parity passive password password password-digit payload-size peer peer peer peer peer advertise-community Link Layer Protocol System Management System Management System Management Security Voice Voice Routing Protocol Routing Protocol Multicast Protocol Security Routing Protocol 8-22 4-11 3-27 2-14 1-10 4-18 1-67 2-12 3-43 4-10 5-18 5-33
Command Reference Guide Command Index v2.30 Router Software peer advertise-community peer allow-as-loop peer allow-as-loop peer as-number peer as-path-acl peer as-path-acl peer connect-interface peer default-route-advertise peer default-route-advertise peer description peer description peer ebgp-max-hop peer enable peer enable peer enable peer enbale peer filter-policy peer filter-policy peer group peer ip-prefix peer ip-prefix peer label-route-capability peer mesh-group peer minimum-ttl peer next-hop-invariable peer next-hop-local peer next-hop-local peer password peer public-as-only peer public-as-only peer reflect-client peer reflect-client peer request-sa-enable
Appendix A Command Index Multicast Protocol Routing Protocol Multicast Protocol Routing Protocol Routing Protocol Multicast Protocol Routing Protocol Routing Protocol MPLS Routing Protocol Multicast Protocol Routing Protocol Routing Protocol Routing Protocol MPLS Multicast Protocol Routing Protocol Multicast Protocol Routing Protocol Routing Protocol Multicast Protocol MPLS Multicast Protocol Multicast Protocol MPLS Routing Protocol Multicast Protocol Routing Protocol Routing Protocol Multicast Protocol Routing Protocol Multicast Protocol Multicast Protocol 5-10 5-33 5-11 5-34 5-35 5-11 5-35 5-36 2-16 5-37 4-10 5-37 5-38 5-57 3-14 5-12 5-39 5-13 5-40 5-41 5-14 2-16 4-11 4-12 2-17 5-42 5-15 5-42 5-43 5-15 5-44 5-16 4-12
Command Reference Guide Command Index v2.30 Router Software peer route-policy peer route-policy peer route-update-interval peer sa-cache-maximum peer sa-policy peer sa-request-policy peer shutdown peer timer peer upe peer-public-key end pfs physical-mode pim pim bsr-boundary pim dm pim neighbor-limit pim neighbor-policy pim sm pim timer hello ping ping ipx pki delete certificate pki domain pki entity pki request certificate pki retrieval certificate pki retrieval crl pki validation certificate plan-numbering policy vpn-target port access vlan port hybrid pvid vlan port hybrid vlan
Appendix A Command Index Routing Protocol Multicast Protocol Routing Protocol Multicast Protocol Multicast Protocol Multicast Protocol Routing Protocol Routing Protocol MPLS System Management Security Interface Multicast Protocol Multicast Protocol Multicast Protocol Multicast Protocol Multicast Protocol Multicast Protocol Multicast Protocol System Management Network Protocol Security Security Security Security Security Security Security Voice MPLS Interface Interface Interface 5-45 5-16 5-46 4-13 4-14 4-15 5-46 5-47 2-18 8-12 4-20 4-10 3-11 3-12 3-13 3-13 3-14 3-15 3-15 1-8 10-35 6-12 6-6 6-11 6-13 6-13 6-14 6-14 1-69 2-18 3-8 3-8 3-9
Command Reference Guide Command Index v2.30 Router Software port link-type port trunk permit vlan port trunk pvid vlan port-mapping ppp authentication-mode ppp callback ppp callback ntstring ppp chap password ppp chap user ppp compression iphc ppp compression iphc rtp-connections ppp compression iphc tcp-connections ppp compression stac-lzs ppp ipcp dns ppp ipcp dns admit-any ppp ipcp dns request ppp ipcp remote-address forced ppp lqc ppp mp ppp mp binding-mode ppp mp lfi ppp mp lfi ppp mp lfi delay-per-frag ppp mp max-bind ppp mp min-bind ppp mp min-fragment ppp mp mp-group ppp mp user ppp mp virtual-template ppp pap local-user ppp timer negotiate pppoe-client pppoe-server bind virtual-template
Appendix A Command Index Interface Interface Interface Security Link Layer Protocol Dial-up Dial-up Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol 3-10 3-10 3-11 3-16 1-5 1-20 1-21 1-6 1-6 1-24 1-24 1-25 1-26 1-7 1-8 1-10 1-9 1-10 1-12 1-4 1-13 1-27 1-27 1-14 1-15 1-15 1-12 1-16 1-17 1-18 1-19 2-8 2-2
Command Reference Guide Command Index v2.30 Router Software pppoe-server log-information off pppoe-server max-sessions local-mac pppoe-server max-sessions remote-mac pppoe-server max-sessions total pq preference preference preference preference pre-shared-key primary accounting primary accounting primary authentication primary authentication primary authorization priority pri-set (CE1/PRI Interface) pri-set (CT1/PRI Interface) private-ip private-line probe-failtimes process-config promiscuous proposal protocol inbound public-ip public-key-code begin public-key-code end put pvc pvc max-number pvc-group pvc-pq
Appendix A Command Index Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol QoS Routing Protocol Routing Protocol Routing Protocol Routing Protocol Security Security Security Security Security Security Voice Interface Interface VPN Voice System Management Voice Interface Security System Management VPN System Management System Management System Management Link Layer Protocol Link Layer Protocol Link Layer Protocol QoS 2-3 2-3 2-4 2-5 4-21 2-13 3-43 4-30 5-48 5-17 1-23 1-43 1-23 1-44 1-45 1-70 4-18 4-29 3-12 1-70 2-14 4-19 2-7 4-21 4-12 3-12 8-13 8-13 3-27 7-22 7-24 7-23 4-21
Command Reference Guide Command Index v2.30 Router Software pvp limit pwd pwd
Appendix A Command Index Link Layer Protocol System Management System Management 7-25 3-11 3-28
Q
qmtoken qos apply policy qos car qos carl qos cq qos cql default-queue qos cql inbound-interface qos cql protocol qos cql protocol mpls exp qos cql queue qos cql queue serving qos fifo queue-length qos gts qos lr qos max-bandwidth qos policy qos pq qos pql default-queue qos pql inbound-interface qos pql protocol qos pql protocol mpls exp qos pql queue qos reserved-bandwidth qos rtpq qos wfq qos wred qos wred ip-precedence qos wred weighting-constant QoS QoS QoS QoS QoS QoS QoS QoS QoS QoS QoS QoS QoS QoS QoS QoS QoS QoS QoS QoS QoS QoS QoS QoS QoS QoS QoS QoS 2-51 2-33 1-2 1-4 2-9 2-9 2-10 2-11 5-1 2-12 2-13 2-1 1-5 1-7 2-34 2-35 2-3 2-3 2-4 2-5 5-2 2-6 2-50 2-50 2-14 3-2 3-2 3-3
Command Reference Guide Command Index v2.30 Router Software queue af queue ef queue wfq queue-length quit quit QoS QoS QoS QoS
Appendix A Command Index 2-35 2-36 2-37 2-38 1-15 3-28
Getting Started System Management
R
radius nas-ip radius scheme ras-on re-answer reboot receive gain redialtimes redirect disconnect redirect enable redirect listen-port redirect refuse-negotiation redirect return-deal from-telnet redirect return-deal from-terminal redirect timeout reflect between-clients reflector cluster-id refresh bgp register-enable register-number register-policy register-value remark atmclp remark dot1p remark dscp remark fr-de Security Security Voice Voice System Management Voice Voice System Management System Management System Management System Management System Management System Management System Management Routing Protocol Routing Protocol Routing Protocol Voice Voice Multicast Protocol Voice QoS QoS QoS QoS 1-25 1-24 5-8 2-28 1-10 1-71 4-20 8-5 8-2 8-3 8-5 8-4 8-4 8-3 5-48 5-49 5-50 6-7 2-29 3-16 2-30 2-39 2-40 2-40 2-42
Command Reference Guide Command Index v2.30 Router Software remark ip-precedence remark mpls-exp remote address remote-address remotehelp remote-ip remote-name remove slot rename renew req-category-offset reset reset acl counter reset alarm urgent reset arp reset atm reset bgp reset bgp flap-info reset bgp group reset bridge address-table reset bridge traffic reset counters encrypt reset counters interface reset counters interface reset dampening reset dhcp relay statistics reset dhcp server conflict reset dhcp server ip-in-use reset dhcp server statistics reset dlsw bridge-entry reset dlsw circuits reset dlsw reachable-cache reset dns dynamic-host QoS QoS
Network Protocol Security System Management MPLS Security System Management System Management Voice Voice Routing Protocol Security System Management Network Protocol Interface Routing Protocol Routing Protocol Routing Protocol Link Layer Protocol Link Layer Protocol Security Interface Interface Routing Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol
Command Reference Guide Command Index v2.30 Router Software reset dvpn map reset encrypt-card sa reset encrypt-card statistics reset encrypt-card syslog reset firewall ethernet-frame-filter reset firewall-statistics reset fr inarp reset hwtacacs statistics reset igmp group reset ike sa reset ip fast-forwarding cache reset ip routing-table reset ip statistics reset ipsec sa reset ipsec statistics reset ipx routing-table statistics reset ipx statistics reset isis all reset isis peer reset l2tp session reset l2tp tunnel reset l2tp user reset lapb reset logbuffer reset mpls statistics reset msdp peer reset msdp sa-cache reset msdp statistics reset multicast forwarding-table reset multicast routing-table reset nat reset ospf reset pim neighbor VPN
Security Security Security Link Layer Protocol Security Link Layer Protocol Security Multicast Protocol Security Network Protocol Routing Protocol Network Protocol Security Security Network Protocol Network Protocol Routing Protocol Routing Protocol VPN VPN VPN Link Layer Protocol System Management MPLS Multicast Protocol Multicast Protocol Multicast Protocol Multicast Protocol Multicast Protocol Network Protocol Routing Protocol Multicast Protocol
Command Reference Guide Command Index v2.30 Router Software reset pim routing-table reset ppp compression iphc reset ppp compression stac-lzs reset pppoe-client reset pppoe-server reset radius statistics reset recycle-bin reset saved-configuration reset stop-accounting-buffer reset stop-accounting-buffer reset tcp statistics reset trapbuffer reset udp statistics reset vlan statistics interface reset vlan statistics vid reset voice aaa-client statistic reset voice call-history-record line reset voice em reset voice ipp reset voice r2 reset voice rcv reset voice sip reset voice vcc reset voice voip data-statistic reset voice vpp reset x25 reset xot restart retry retry realtime-accounting retry stop-accounting retry stop-accounting return
Appendix A Command Index Multicast Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Security System Management System Management Security Security Network Protocol System Management Network Protocol Interface Interface Voice Voice Voice Voice Voice Voice Voice Voice Voice Voice Link Layer Protocol Link Layer Protocol Interface Security Security Security Security Getting Started 3-17 1-28 1-29 2-9 2-5 1-26 3-13 3-36 1-26 1-46 6-24 1-27 6-25 6-6 6-7 4-21 1-72 2-34 1-72 2-35 1-73 6-7 4-22 1-74 1-73 8-24 8-23 1-8 1-28 1-28 1-29 1-47 1-16
Command Reference Guide Command Index v2.30 Router Software reverse ring-generate rip rip authentication-mode rip input rip metricin rip metricout rip output rip split-horizon rip version rip work rlogin rmdir rmdir rmon alarm rmon event rmon history rmon prialarm rmon statistics route-distinguisher route-policy route-policy router id route-tag routing-table limit rsa local-key-pair create rsa local-key-pair destroy rsa peer-public-key rsh rtpq rule rule Voice Voice
Appendix A Command Index 2-35 1-74 2-14 2-15 2-16 2-17 2-17 2-18 2-19 2-20 2-20 8-23 3-14 3-29 7-7 7-8 7-9 7-10 7-11 2-19 9-6 6-17 3-45 2-20 2-21 8-14 8-15 8-16 8-20 4-22 2-3 1-75
Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol Routing Protocol System Management System Management System Management System Management System Management System Management System Management System Management MPLS Network Protocol Routing Protocol Routing Protocol MPLS MPLS System Management System Management System Management System Management QoS Security Voice
S
sa authentication-hex sa duration sa duration sa encryption-hex sa spi sa string-key save schedule reboot at schedule reboot delay scheme scramble scramble scramble scramble screen-length script trigger connect script trigger dial script trigger init script trigger login script trigger logout script-string sdlc controller sdlc mac-map local sdlc mac-map remote sdlc max-pdu sdlc max-send-queue sdlc max-transmission sdlc modulo sdlc sap-map local sdlc sap-map remote sdlc simultaneous Security Security Security Security Security Security System Management System Management System Management Security Interface Interface Interface Interface System Management Dial-up Dial-up Dial-up Dial-up Dial-up Dial-up Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol 4-24 4-25 5-21 4-26 4-28 4-29 3-37 1-33 1-34 1-10 4-87 5-13 5-17 5-21 4-13 3-3 3-4 3-4 3-5 3-6 3-6 11-26 11-27 11-28 11-29 11-29 11-30 11-30 11-31 11-32 11-32
Command Reference Guide Command Index v2.30 Router Software sdlc status sdlc timer ack sdlc timer lifetime sdlc timer poll sdlc window sdlc xid secondary accounting secondary accounting secondary authentication secondary authentication secondary authorization security acl seizure-ack selectlanguage select-mode select-rule rule-order select-rule search-stop select-rule type-first select-stop send send-busytone sendloopcode send-number (in Voice Entity View) send-number (in Voice Subscriber-Line View) sendpacket passroute sendring send-ring send-trap server-type service cbr service modem-callback service ubr service vbr-nrt
Appendix A Command Index Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Security Security Security Security Security Security Voice Voice Voice Voice Voice Voice Voice System Management Voice Interface Voice Voice System Management Voice Voice System Management Security Link Layer Protocol Dial-up Link Layer Protocol Link Layer Protocol 11-33 11-34 11-35 11-35 11-36 11-37 1-30 1-47 1-31 1-48 1-49 4-31 2-36 4-22 2-37 1-77 1-78 1-79 1-80 4-13 1-81 4-30 1-81 1-82 2-16 2-38 1-84 2-15 1-32 7-26 3-9 7-28 7-28
Command Reference Guide Command Index v2.30 Router Software service vbr-rt service-type service-type ftp service-type ppp session idle-time set authentication password set-overload sham-link shdsl annex shdsl margin shdsl mode shdsl rate shdsl snr shell shutdown shutdown shutdown shutdown shutdown shutdown (in Voice Entity View) shutdown (in Voice Subscriber-Line View) signal-value silence-th-span silent-interface silent-interface sip sip-id sip-server slic-gain snmp-agent snmp-agent community snmp-agent group snmp-agent local-engineid
Appendix A Command Index Link Layer Protocol Security Security Security VPN System Management Routing Protocol MPLS Interface Interface Interface Interface Interface System Management Interface Interface Interface Link Layer Protocol Multicast Protocol Voice Voice Voice Voice Routing Protocol Routing Protocol Voice Voice Voice Voice System Management System Management System Management System Management 7-29 1-12 1-12 1-13 1-7 4-14 4-31 2-22 5-22 5-24 5-30 5-23 5-23 4-15 1-9 3-13 4-77 6-39 4-17 1-83 1-84 2-39 1-85 3-46 4-32 6-8 6-8 6-9 1-86 6-7 6-8 6-9 6-10
Command Reference Guide Command Index v2.30 Router Software snmp-agent mib-view snmp-agent packet max-size snmp-agent sys-info snmp-agent target-host snmp-agent trap enable snmp-agent trap enable encrypt-card snmp-agent trap enable ldp snmp-agent trap enable lsp snmp-agent trap enable ospf snmp-agent trap life snmp-agent trap queue-size snmp-agent trap source snmp-agent usm-user sot counter keepalive sot gather sot group-set sot peer sot sdlc broadcast sot sdlc controller sot sdlc-status primary sot sdlc-status secondary sot send address sot send all tcp sot timer keepalive source source-interface source-ip source-ip source-policy source-port special-character special-service speed
Appendix A Command Index System Management System Management System Management System Management System Management Security MPLS MPLS Routing Protocol System Management System Management System Management System Management Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol Network Protocol VPN System Management System Management Voice Multicast Protocol System Management Voice Voice System Management 6-11 6-12 6-12 6-13 6-14 4-47 1-8 1-9 3-47 6-15 6-16 6-17 6-17 12-3 12-4 12-5 12-5 12-6 12-7 12-7 12-8 12-9 12-10 12-10 2-7 2-16 2-17 6-10 3-18 2-17 2-40 1-86 4-16
Command Reference Guide Command Index v2.30 Router Software speed speed spf-delay-interval spf-schedule-interval spf-slice-size spt-switch-threshold ssh server authentication-retries ssh server rekey-interval ssh server timeout ssh user assign ssh user authentication-type standby bandwidth standby interface standby routing-group standby routing-rule standby threshold standby timer delay standby timer flow-check standby timer routing-disable start l2tp start l2tp tunnel start-script startup saved-configuration state state state static-bind ip-address static-bind mac-address static-lsp egress static-lsp egress l2vpn static-lsp ingress static-lsp ingress l2vpn static-lsp transit
Appendix A Command Index Interface Interface Routing Protocol Routing Protocol Routing Protocol Multicast Protocol System Management System Management System Management System Management System Management Reliability Reliability Dial-up Dial-up Reliability Reliability Reliability Dial-up VPN VPN Dial-up System Management Security Security Security Network Protocol Network Protocol MPLS MPLS MPLS MPLS MPLS 2-7 3-13 4-33 3-48 4-33 3-19 8-16 8-17 8-18 8-18 8-19 1-4 1-5 2-2 2-2 1-6 1-6 1-7 2-1 1-13 1-14 3-10 3-38 1-14 1-32 6-11 5-34 5-35 1-9 3-3 1-10 3-4 1-11
Command Reference Guide Command Index v2.30 Router Software static-lsp transit l2vpn static-rp static-rpf-peer stop-accounting-buffer enable stopbits stub subscriber-line subscriber-line substitute substitute incoming-call substitute outgoing-call summary summary summary super super password sysname system-view
Appendix A Command Index MPLS Multicast Protocol Multicast Protocol Security System Management Routing Protocol Voice Voice Voice Voice Voice Routing Protocol Routing Protocol Routing Protocol Getting Started Getting Started Getting Started Getting Started 3-5 3-20 4-18 1-33 4-17 3-49 1-87 2-40 1-88 1-89 1-90 2-21 4-34 5-53 1-16 1-18 1-18 1-19
T
t1 channel-set t1 channel-set t1 set clock t1 set clock t1 set frame-format t1 set frame-format t1 set loopback t1 set loopback t1 shutdown t1 shutdown t1 unframed t1 unframed tcp mss Interface Interface Interface Interface Interface Interface Interface Interface Interface Interface Interface Interface Network Protocol 4-55 4-77 4-56 4-78 4-57 4-79 4-57 4-80 4-58 4-81 4-59 4-82 6-25
Command Reference Guide Command Index v2.30 Router Software tcp timer fin-timeout tcp timer syn-timeout tcp window telnet telnet source-interface telnet source-ip terminal debugging terminal logging terminal monitor terminal trapping terminator test-enable test-failtimes test-type tftp tftp-server acl timeout timer (Digital E&M) timer dial-interval timer dl (R2) timer dtmf (R2) timer first-dial timer hold timer hold timer hold timer keep-alive hold timer lsp-max-age timer lsp-refresh timer quiet timer quiet timer realtime-accounting timer realtime-accounting timer register-complete (R2)
Appendix A Command Index Network Protocol Network Protocol Network Protocol System Management System Management System Management System Management System Management System Management System Management Voice System Management System Management System Management System Management System Management System Management Voice Voice Voice Voice Voice Link Layer Protocol Link Layer Protocol Link Layer Protocol Routing Protocol Routing Protocol Routing Protocol Security Security Security Security Voice 6-26 6-27 6-27 8-6 8-7 8-7 1-27 1-28 1-28 1-29 1-91 2-19 2-19 2-18 3-31 3-32 2-20 2-41 1-92 2-45 2-42 1-92 1-19 5-1 6-40 5-54 4-35 4-36 1-34 1-50 1-35 1-51 2-44
Command Reference Guide Command Index v2.30 Router Software timer register-pulse (R2) timer response-timeout timer response-timeout timer retry timer ring (R2) timer ring-back timer spf timer wait-digit time-range timers timeslot-set tos trace interval tracert traffic behavior traffic classifier traffic-policy traffic-shaping adaptation traffic-share-across-interface transform translate ip translate X25 transmit gain transmit-priority trunk-direction ts ttl ttl expiration ttl propagate tunnel authentication tunnel avp-hidden tunnel flow-control tunnel keepstanding Voice
Security Security Multicast Protocol Voice Voice Routing Protocol Voice Security Routing Protocol Voice System Management Voice System Management QoS QoS QoS QoS Routing Protocol Security Link Layer Protocol Link Layer Protocol Voice Link Layer Protocol Voice Voice System Management MPLS MPLS VPN VPN VPN VPN
Command Reference Guide Command Index v2.30 Router Software tunnel local tunnel name tunnel password tunnel remote tunnel timer hello tunnel-on tunnel-protocol dvpn tunnel-protocol gre type type-number
Appendix A Command Index Security VPN VPN Security VPN Voice VPN VPN Voice Voice 4-33 1-18 1-18 4-34 1-19 1-96 3-13 2-8 1-96 1-97
U
udp-helper enable udp-helper port udp-helper server udp-port undelete undo schedule reboot undo synchronization upgrade upgrade use encrypt-card user user privilege user-interface username user-name-format user-name-format using (CE1/PRI Interface) using (CE3 Interface) using (CT3 Interface) Network Protocol Network Protocol Network Protocol VPN System Management System Management Routing Protocol System Management System Management Security System Management System Management System Management System Management Security Security Interface Interface Interface 3-2 3-2 3-3 3-14 3-15 1-36 5-54 1-35 3-39 4-48 3-29 4-17 4-18 2-22 1-36 1-52 4-19 4-51 4-60
V
Command Reference Guide Command Index v2.30 Router Software vad-on validate-source-address verbose vi-card busy-tone-detect vi-card custom-toneparam virtualbaudrate vlan-type dot1q vlink-peer voip h323-conf tcs-t38 vpninstance vpn-instance-capability simple vpn-target vrbd vrrp authentication-mode vrrp ping-enable vrrp vrid preempt-mode vrrp vrid priority vrrp vrid timer advertise vrrp vrid track vrrp vrid virtual-ip Voice
Appendix A Command Index 1-98 2-24 3-30 1-99 1-100 4-11 6-7 3-50 3-14 2-23 2-24 2-25 1-19 2-2 2-3 2-4 2-5 2-5 2-6 2-7
Routing Protocol System Management Voice Voice Interface Interface Routing Protocol Voice System Management MPLS MPLS Getting Started Reliability Reliability Reliability Reliability Reliability Reliability Reliability
W
wfq wred wred dscp wred ip-precedence wred weighting-constant QoS QoS QoS QoS QoS 4-24 2-45 2-46 2-47 2-48
X
x25 alias-policy x25 call-facility x25 cug-service x25 default-protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol 8-26 8-28 8-29 8-30
Command Reference Guide Command Index v2.30 Router Software x25 hunt-group x25 ignore called-address x25 ignore calling-address x25 local-cug x25 map x25 map bridge x25 modulo x25 packet-size x25 pvc x25 queue-length x25 receive-threshold x25 response called-address x25 response calling-address x25 reverse-charge-accept x25 roa-list x25 switch pvc x25 switch svc hunt-group x25 switch svc interface x25 switch svc xot x25 switching x25 timer hold x25 timer idle x25 timer tx0 x25 timer tx1 x25 timer tx2 x25 timer tx3 x25 vc-per-map x25 vc-range x25 window-size x25 x121-address x25 xot pvc x29 timer inviteclear-time
Appendix A Command Index Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol Link Layer Protocol 8-31 8-32 8-32 8-33 8-34 9-17 8-36 8-37 8-38 8-40 8-41 8-41 8-42 8-43 8-44 8-45 8-46 8-48 8-49 8-50 8-51 8-51 8-52 8-53 8-54 8-54 8-55 8-56 8-57 8-58 8-58 8-60
Y Z

3com Command Reference v2p3

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

3com Command Reference v2p3

Uploaded by

Copyright:

Available Formats

3Com Router Software Command Reference

Published September 2005

Command Reference Guide Getting Started v2.30 Router Software

Command Reference Guide Getting Started v2.30 Router Software

Chapter 1 Basic Configuration Commands

Chapter 1 Basic Configuration Commands

1.1.2 clock summer-time

3Com Corporation 1-1

Command Reference Guide Getting Started v2.30 Router Software

Chapter 1 Basic Configuration Commands

undo clock summer-time

1.1.3 clock timezone

Command Reference Guide Getting Started v2.30 Router Software

Chapter 1 Basic Configuration Commands

undo clock timezone

3Com Corporation 1-3

Command Reference Guide Getting Started v2.30 Router Software

Chapter 1 Basic Configuration Commands

commandkey: Command to be set in the specified view.

1.1.5 cpu-usage cycle

3Com Corporation 1-4

Command Reference Guide Getting Started v2.30 Router Software

Chapter 1 Basic Configuration Commands

1.1.6 display clipboard

3Com Corporation 1-5

Command Reference Guide Getting Started v2.30 Router Software

Chapter 1 Basic Configuration Commands

-----------------clipboard ----------------ip route 10.1.0.0 255.0.0.0 eth 0

1.1.7 display clock

1.1.8 display cpu-usage

Command Reference Guide Getting Started v2.30 Router Software

Chapter 1 Basic Configuration Commands

CPU Usage Stat. Time : 2004-09-15

3Com Corporation 1-7

Command Reference Guide Getting Started v2.30 Router Software

Chapter 1 Basic Configuration Commands

1.1.9 display cpu-usage history

3Com Corporation 1-8

Command Reference Guide Getting Started v2.30 Router Software

Chapter 1 Basic Configuration Commands

cpu-usage last 60 minutes(SYSTEM)

# Display the CPU usage statistic history of task 6.

cpu-usage last 60 minutes(T03M)

3Com Corporation 1-9

Command Reference Guide Getting Started v2.30 Router Software

Chapter 1 Basic Configuration Commands

1.1.10 display history-command

1.1.11 display memory

3Com Corporation 1-10

Command Reference Guide Getting Started v2.30 Router Software

Chapter 1 Basic Configuration Commands

1.1.12 display version

Rpu's version information: Router AR46-40 with 1 PowerPC 750 Processor

3Com Corporation 1-11

Command Reference Guide Getting Started v2.30 Router Software

Chapter 1 Basic Configuration Commands

Config Register points to FLASH

[SLOT 0] AUX0 [SLOT 0] ETH0 [SLOT 0] ETH1

(Hardware)A.1, (Driver)1.0, (Cpld)3.4 (Hardware)A.1, (Driver)1.0, (Cpld)3.4 (Hardware)A.1, (Driver)1.0, (Cpld)3.4

3Com Corporation 1-12

Command Reference Guide Getting Started v2.30 Router Software

Chapter 1 Basic Configuration Commands

*no decompiling or reverse-engineering shall be allowed.* *********************************************************

Command Reference Guide Getting Started v2.30 Router Software

no decompiling or reverse-engineering shall be allowed. *********************************************************