3Com 10014299 User Manual

3Com Router Configuration Guide

http://www.3com.com/

Published March 2004 Part No. 10014299

3Com Corporation 350 Campus Drive Marlborough, MA 01752-3064

Copyright © 2004, 3Com Corporation. All rights reserved. No part of this do cumentation m ay be reproduced in any form or by any means or used to make any derivative work (such as translation, transformation, or adaptation) without written permission from 3Com Corporation.

3Com Corporation reserves the right to revise this docum en tation an d to make changes in content from time to time without obligation on the part of 3Com Corporation to provide notification of such r evision or change.

3Com Corporation provides this documentation without warranty, term, or condition of any kind, either implied or expressed, including, but not limited to, the implied warranties, terms or conditions of merchantability, satisfactory quality, and fitness for a particular purpose. 3Com may make improvements or changes in the product(s) and/or the program(s) described in this documentation at any time.

If there is any software on removable media described in this documentation, it is furnished under a license agreement included with the product as a separate document, in the hard copy documentation, or on the removable media in a directory file named LICENSE.TXT or !LICENSE.TXT. If you are unable to locate a copy, please contact 3Com and a copy will be provided to you.

UNITED STATES GOVERNMENT LEGEND

If you are a United States government agency, then this documentation and the software described herein are provided to you subject to the following:

All technical data and computer software are commercial in nature and developed solely at private expense. Software is delivered as “Commercial Computer Software” as defined in DFARS 252.227-7014 (June 1995) or

as a “commercial item” as defined in FAR 2.101(a) and as such is provided with only such rights as are provided in 3Com’s standard commercial license for the Software. Technical data is provided with limited rights only as provided in DFAR 252.227-7015 (Nov applicable. You agree not to remove or deface any portion of any legend provided on any licensed program or documentation contained in, or delivered to you in conjunction with, this User Guide.

Unless otherwise indicated, 3Com regist er ed tr ademarks are registered in the United States and may or may not be registered in other countries.

3Com, the 3Com logo, are registered trademarks of 3Com Corporation. Intel and Pentium are registered trademarks of Intel Corporation. Microsoft, MS-DOS, Windows, and

Windows NT are registered trademarks of Microsoft

States and other countries, licensed exclusively through X/Open Company, Ltd.

All other company and product names may be trademarks of the respective companies with which they are associated.

1995) or FAR 52.227-14 (June 1987), whichever is

Corporation. UNIX is a registered trademark in the United

GETTING STARTED 1

SYSTEM MANAGEMENT 33

INTERFACE 121

LINK LAYER PROTOCOL 183

NETWORK PROTOCOL 335

ROUTING 423

MULTICAST 517

SECURITY 543

VPN 615

RELIABILITY 665

QOS 681

DIAL-UP 721

ABOUT THIS GUIDE

This guide describes 3Com routers and how to configure them.

Conventions Table 1 and Table 2 list conventions that are used throughout this guide.

Table 1 Notice Icons

Icon Notice Type Description

Information note Information that describes important features or

Caution Information that alerts you to potential loss of data

Warning Information that alerts you to potential personal

instructions.

or potential damage to an application, system, or device.

injury.

Table 2 Text Conventions

Convention Description

Screen displays This typeface represents information as it appears on the screen. Keyboard key names If you must press two or more keys simultaneously, the key names are

The words “enter” and type”

Words in italics Italics are used to:

Words in bold Boldface type is used to highlight command names. For example, “Use

linked with a plus sign (+), for example: Press Ctrl+Alt+Del When you see the word “enter” in this guide, you must type

something, and then press Return or Enter. Do not press Return or Enter when an instruction simply says “type.”

Emphasize a point. Denote a new term at the place where it is defined in the text. Identify command variables. Identify menu names, menu commands, and software button names.

Examples: From the Help menu, select Contents. Click OK.

the display user-interface command to...”

2 ABOUT THIS GUIDE

GETTING STARTED

Chapter 1 3Com Router Introduction

Chapter 2 3Com Router User Interface

3COM ROUTER INTRODUCTION

This chapter includes information on the following topics:

■ Overview of the 3Com Router System

■ Architecture of the 3Com Router

■ Features of the 3Com Router Version 1.10

■ New Features of the 3Com Router 1.x

Overview of the 3Com Router System

Architecture of the 3Com Router

The 3Com Router OS is the network operating system platform. With TCP/IP protocol stack as the core, the 3Com Router integrates data communication essentials such as routing technology, multicast technology, QoS technology, VPN technology, security technology in the operating system and provides excellent data transmission capability.

The 3Com Router can run on multiple hardware platforms with consistent network interface, user interface and management interface, providing flexible and multiple application solutions for users.

This manual describes features and functions of the 3Com Router 1.x system software platform series of low end and middle range routers. In this manual the 3Com Router is also referred to as the 3Com Router 1.x software version. You should make sure that the 3Com Router you use is operating with the software version documented in this manual.

The software specification is different between various types of products. Product specification related matters should be confirmed with the 3Com Technical Support Department.

With TCP/IP model as its reference, the 3Com Router implements data link layer, network layer, and application layer pr otocols, as per the architecture shown in the following diagram:

6 CHAPTER 1: 3COM ROUTER INTRODUCTION

Figure 1 Schematic diagram of the 3Com Router architecture

Features of the 3Com Router Version 1.10

Attribute Description

Interconnection protocol LAN ■ Supports Ethernet_II and Ethernet_SNAP frame structure

HTTP

RIP OSPF BGP

Route policy

management

System service

Fast

forwarding

PPP/SLIP

FTP

TELNET

Voice Service

IP forwarding engine

IP security

and firewall

HDLC EthernetX.25Frame Relay

......

TCP/UDP

management

QoS

assurance

The following table lists the basic features of the 3Com Router 1.x:

Table 3 List of the 3Com Router 1.x features

■ Follows IEEE 802.2 and IEEE 802.3 regulations

WAN ■ Supports Frame Relay and Frame Relay switching

■ Supports FRoIP, FRoISDN

■ Supports Multi-link Frame Relay (MFR), FR compression

■ Supports FR Traffic Shaping (FRTS) to ensure even traffic over

the VCs on FR

■ Supports X.25 and X.25 switching, X.25 Over TCP (XOT)

■ Supports HDLC, SDLC and LAPB regulations

■ Supports SLIP, PPP and MP

■ Supports PPPoE Client

■ Supports ITU-T Q.921 and Q.931 regulations, ISDN (ITU-T

Q.921, Q.931) and ISDN semi-permanent connection

■ Supports bridging technology

Dial-up network ■ Manages Modem through the AT command and configures

VPN ■ Supports L2TP, implements VPDN (Supports DNIS user,

script to dial up.

■ Supports dial demand Routing (dialer profiles and legacy

BDR)

■ Supports Callback (PPP callback and ISDN Calling Line

Identification callback)

■ Provides ISDN leased line, automatic dialing, and cyclic dial

queue backup

■ Provides Dial interface backup

domain name user, and full name user)

■ Supports L3 channel protocol GRE

VPN

Configuration

Command

line

SNMP

Web

management

Features of the 3Com Router Version 1.10 7

Attribute Description

Network protocol IP service ■ Supports ARP

■ Supports Static domain name resolution

■ Supports IP Address Unnumbered

■ Supports DHCP Server and DHCP relay

■ Supports VLAN

■ Supports IP Accounting

Non-IP service ■ Supports Novell IPX protocol, provide RIP and SAP to

maintain the database of Internetwork routes and service information

■ Supports DLSw of SNA system, implementing SNA through

WAN transmission

IP performance ■ Supports IP fast forwarding

■ Supports Van Jacobson TCP message header compression

IP routing ■ Supports Static route management

■ Supports Dynamic route protocol

■ RIP-1/RIP-2

■ OSPF

■ BGP

■ Supports IP routing policy

■ Supports IP policy-based routing

Multicast routing ■ Supports Internet Group Management Protocol (IGMP)

■ Supports Multicast routing protocol

■ PIM-DM

■ PIM-SM

8 CHAPTER 1: 3COM ROUTER INTRODUCTION

Attribute Description

Network security Authentication,

Network reliability Backup center ■ Can back up any physical interface or sub-interface on the

■ Provides PPP and login user authentication

Authorization and Accounting (AAA) service

■ Supports RADIUS, provides RADIUS

authentication/accounting

■ Provides local authentication

■ Supports CHAP and PAP authentication

Firewall ■ Supports standard access control list

■ Supports extended access control list

■ Supports interface-based access control list

■ Supports time segment based access control list

NAT ■ Supports the users in LAN to access external networks by

using the IP address in a configured address pool.

■ Supports to configure relationship between access control

list and address pool.

■ Supports to configure relationship between access control

list and interface.

■ Supports the host of external network to access the internal

server

■ Supports to configure valid period for address translation

Data security ■ Supports terminal access security (user classification

protection, user login authentication)

■ Supports IPSec, provides tunnel and transmission

encapsulation modes and supports AH and ESP security authentication

■ Supports network data encryption card and provide IPSec

encryption/decryption

■ Supports IKE, automatically negotiates on security key and

create the security federation

router and an X.25 or frame relay virtual circuit on the interface as well.

■ Barring the Ethernet interface, any physical interfaces or

virtual interface templates on the router can be used as backup interfaces. An X.25 or frame relay virtual circuit on the interface or a dialer route on the dial interface can be used as backup interface as well.

■ Provides multiple backup interfaces for one main interface.

These backup interfaces will be used according to their priorities.

■ Backs up multiple main interfaces of the interfaces with

multiple physical channels

■ Supports to configure the conditions to switch the

main/standby interfaces

Hot backup ■ Supports VRRP

Attribute Description

Quality of service (QoS)

Traffic classification and flow control

Traffic shaping ■ Uses buffer and token bucket to support general traffic

Congestion management

Congestion Avoidance

Configuration management

Command line interface

Terminal server

Terminal service ■ Performs local or remote configuration via the console port,

System Management

Network management

Features of the 3Com Router Version 1.10 9

■ Supports CAR (Committed Access Speed) and packet

priority, monitoring the network traffic entering ISP

■ Supports LR (Line Rate of physical interface) to limit the total

speed of packet transmission on physical interface

shaping (GTS).

■ Supports FIFO (first-in-first-out queue)

■ Supports PQ (priority queue)

■ Supports CQ (customization queue)

■ Supports WFQ (Weighted Fair queue)

■ Supports WRED (Weighted Random Early Detection),

implementing flow-based congestion avoidance

■ Prompts provide information in English

■ Prompt command line hierarchical protection, to ensure that

the unauthorized users cannot access the router.

■ Prompt Detailed debugging information, helpful for

diagnosis of network faults

■ Provides network test tools such as tracert and ping

commands, to quickly diagnose whether the network is normal.

■ Info-center loghost configuration

asynchronous serial port, X.25 PAD, Telnet and Reverse Telnet etc.

■ Logs on the UNIX host via Rlogin

■ Configures router via the dumb terminal service

■ Provides dumb terminal service via PRI port

■ Supports the send function and provide the information

interaction between terminal subscribers

■ Terminal access via asynchronous serial port

■ Supports dial-up POS and network POS accessing based on

the shared POS access technology, which improves card account processing

■ Supports to upload and download programs/configuration

files via FTP

■ Supports to upload and download programs/configuration

files via TFTP

■ Supports on-line upgrade of the cards.

■ Supports SNMP (Simple Network Management Protocol)

■ Supports RMON (Remote Monitor)

10 CHAPTER 1: 3COM ROUTER INTRODUCTION

New Features of the

New features have been added to the 3Com Router1.10.

3Com Router 1.x

Support New Interfaces E3 and CE3 Interfaces

Both E3 and E1 are part of the ITU-T digital carrier architecture and are used in most regions beyond North America. The data transmission speed of E3 is

34.368 protocols including PPP, HDLC, Frame Relay, LAPB, and X.25, as well as the network protocol such as IP. Similar to E1/CE1, E3/CE3 interfaces can work in two operating modes, namely, E3 mode and CE3 mode.

■ When working in E3 mode, an E3/CE3 interface is a timeslot-less interface of

■ When working in CE3 mode, it can multiplex/demultiplex 16 channels of E1

E1-F/T1-F Interface

E1-F and T1-F interfaces refer to the fractional E1 and T1 interfaces, which are equivalent to the simplified CE1/PRI and CT1/PRI interfaces. In essence, they are a low-cost approach to E1/T1 access. In a simple E1 or T1 access application requiring neither division of multiple channel groups nor ISDN PRI, either the E1-F or T1/F interface will be a good choice.

Mbps and the line code is HDB3. E3/CE3 interfaces support the link layer

the bandwidth of 34.368 Mbps.

signals. The E3-to-E1 multiplexing is compliant with the G.751 and G.742 provisions of ITU-T. In addition, each E1 interface can be divided into 32 timeslots.

Null Interface

The functions of the Null interface are similar to those of null devices supported by many operating systems. It is always in UP status, but cannot forward data packets or configure IP addresses or encapsulate other protocols. Null interface is a virtual interface with software characteristics. Any network data packet sent to this interface will be dropped.

FRoIP and FRoISDN Frame Relay over IP

As IP networks have gained wider acceptance, Frame Relay (FR) applications have relied on IP networks for data communication and interconnection between networks. FRoIP technology enables IP networks to carry FR data by establishing a GRE tunnel across the IP network to connect the two FR networks at both ends of the IP network.

Frame Relay over ISDN

Frame Relay over ISDN provides a method for accessing the Frame Relay network based on ISDNs and the related devices. This shortens the time for users to access and lowers the cost of leased lines.

The Frame Relay over ISDN is mainly used in the following two aspects:

■ The simplest application is to take Frame Relay over ISDN as the main

communications method. That is, all the routers support Frame Relay over ISDN, and the individual routers can directly access the Frame Relay networks (without TA adapters) to communicate.

New Features of the 3Com Router 1.x 11

■ Combined with BDR, Frame Relay over ISDN can be taken as the backup

communication method for Frame Relay.

Multilink Frame Relay The Multilink Frame Relay (MFR) feature introduces functionality based on the

Frame Relay Forum Multilink Frame Relay UNI/NNI Implementation Agreement (FRF.16). This feature provides a cost-effective way to increase bandwidth for particular applications by enabling multiple serial links to be aggregated into a single bundle of bandwidth. MFR is supported on User-to-Network Interfaces (UNI) and Network-to-Network Interfaces (NNI) in Frame Relay networks.

FR Compression FR compression technology is used to compress the FR packets for the purpose of

effectively saving the network bandwidth and decreasing the network load, and hence to implement data transmission over FR networks with high efficienc y. 3Com Routers follow the FRF.9 standard for FR compression. FR compression can achieve a significant effect on a FR line with low bandwidth. FR interfaces fall into two categories, namely, point-to-point interface and multipoint interface.

Bridge Bridges are a type of network devices that connect LANs at the data link layer for

data transmission among them. For some small or remote networks, a bridge can reduce the network maintenance cost and free the network terminal subscribers from making special settings for the devices. In addition, its network connection is no difference f rom a HUB.

IP Count IP count implements accounting on the incoming and outgoing packets as well as

Virtual Router

Redundancy Protocol

(VRRP)

3Com Routers support transparent bridging and are compatible with IEEE 802.1d. The routers support the STP and bridging functions defined in IEEE 802.1d and support bridging on the links encapsulated with PPP, HDLC, X.25, or Frame Relay, as well as bridging on VLAN sub-interfaces and BDR. Furthermore, the routers can implement multi-port binding and load sharing.

the packets denied by the firewall on the routers. When implementing IP count, whether the packets match the count list rules and whet her the packets are denied by the firewall, are two standards by which the router sorts the bidirectional packet s for count. When making data statistics, both the number of packets and the total bytes are recorded.

Virtual Router Redundancy Protocol (VRRP) is a fault tolerant protocol. Normally, the default route set for a host in a network takes the GW route of the network as the next hop. Through the default route, the host can carry out the communications with the external networks. If the GW route fails to work, all the hosts that take it as the next hop on the segment will be unable to communicate with the outside. VRRP can fulfill the router redundancy by assigning multiple routers into a router group. Thus, whenever a member fails to work, a backup router will take up the work of the failed router and thus can ensure the normal communications between the hosts on the network and the outside.

12 CHAPTER 1: 3COM ROUTER INTRODUCTION

3COM ROUTER USER INTERFACE

This chapter includes information on the following topics:

■ Establish Configuration Environment

■ Command Line Interface (CLI)

■ User Identity Management

■ Basic Configuration and Management of the System

Establish Configuration Environment

Local Configuration

Environment via Console

Port

The 3Com Router 1.x supports local and remote configuration, and the configuration environment can be established in the following ways:

The local configuration environment can be established via the console port (configuration interface).

1 As shown in Figure 2, the local configuration environment can be established via

the console port just by connecting the serial port of the computer with the console port of the router via a standard RS-232 cable.

Figure 2 Establish a local configuration environment via configuration interface

Configuration interface (Console)

Cable

RS-232 serial

port

Workstation

Cable

Router

Console interface

Configuration

(

interface)

On 3Com modular routers the CONSOLE port and AUX port are on the front of the unit, while other ports are on the rear of the unit. The above diagram shows the rear of the unit. For details, please refer to the 3Com Installation Guide.

2 Run a terminal emulator application such as HyperTerminal of Win9X on the

computer to establish a new connection. Select an RS-232 serial port on the computer, set the terminal communication baudrate parameters as 9600 bps, 8 data bits, 1 stop bit, no parity and no flow control, and select the terminal emulation type as VT100, as shown in the following diagram (“HyperTerminal” setting interface in Windows 9X).

14 CHAPTER 2: 3COM ROUTER USER INTERFACE

Figure 3 Establish a new connection

Figure 4 Select the computer serial port for actual connection

Figure 5 Set port communication parameters

Establish Configuration Environment 15

Figure 6 Select terminal emulation type

3 Power on the router to display the self-test information of the router. Press Enter

after the self-test to display the prompt “Username:” and “password:”. Type in the correct username and the password, then enter the system view of Router.

16 CHAPTER 2: 3COM ROUTER USER INTERFACE

4 Enter the command to configure the router or view the running status of the

router. Enter “?” to get help when necessary . For details of specific commands, please refer to the following chapters.

Remote Configuration

Environment via Async

Serial Port

The router powers on, then creates a remote configuration environment by connecting to the asynchronous serial ports of the router (including synchronous/asynchronous serial port, AUX interface, i.e., auxiliary interface, etc.) via modem dial-up. Detailed below is the description on how to establish a remote configuration environment via asynchronous serial port, with AUX interface as an example.

T o establish a remote configuration environment via an asynchronous serial port of the router , pre-configure it to flow mode. For specific setting method, please refer to the Terminal Service chapter in this manual.

The modem connected to the asynchronous serial interface should be set to auto-answer mode.

1 As shown in Figure 7, connect a modem to computer serial port and another

modem to the routers asynchronous serial port (AUX interface in the diagram).

Figure 7 Establish a remote configuration environment

RS-232

Serial port

Workstation

Modem

PSTN

Tel No.660000

Modem

AUX interface

Router

2 Run a terminal emulator application, such as HyperTerminal of Win9X, on the

computer to establish a new connection. Select the RS-232 serial port on the computer for actual connection; set the terminal communication parameters to 9600 baud rate, 8 data bits, 1 stop bit, no parity, no flow control or hardware flow control, and select the terminal emulation type as VT100, the same as the connection established via the console port.

3 Before powering on the router, power on its external modem. Initialize the router

via A T command, and then dial on the r emote computer to establish a connection with the router, as shown in the following figure.

Establish Configuration Environment 17

Figure 8 Establish a dial-up connection via “HyperTerminal”

Figure 9 Dial on remote computer

Local/Remote Telnet

Connection

Configuration

Environment

4 If a dial-up connection is established, then press Enter after the self-test to display

the prompt “Username:” and “password:”. Enter the correct username and the password, then enter the system view of Router.

5 Enter command to configure the router or view running status of the router. Enter

? to get help when necessary . For details of specific commands, please refer to the following chapters.

After the router powers on, and IP addresses of the interfaces have been properly configured on the router, you can use the Telnet client program to establish a connection with the router and log in the router via LAN or WAN. Then configure the router.

1 As shown in the following two figures, connect the Ethernet port adapter on the

computer with the Ethernet interface of the router. To establish a remote

18 CHAPTER 2: 3COM ROUTER USER INTERFACE

configuration environment, connect the computer with the router via the WAN interface.

Figure 10 .Establish configuration environment of local telnet connection

Workstation

Ethernet

LAN

Server

Work station runni ng

Telnet C l i ent

Figure 11 Establish a configuration environment of a remote telnet connection

Workstation

LAN

Ethernet

Local workstation running

Telnet client

Remote router to be

Router

WAN

configured

Remote LAN

Workstat io n

Ethernet

Workstation

2 As shown in the following two figures (T elnet client pr ogram interface in Windows

9X), run the Telnet client program on the computer and set its terminal emulation type as VT100.

Figure 12 Run a telnet program

Figure 13 Establish a telnet connection with router

Command Line Interface (CLI) 19

Command Line Interface (CLI)

The host name in the above figure is the name or IP address of a router interface of the remote connection.

3 If connection is established, press Enter after the self-test to display the prompt

“Username:” and “password:”. Enter the correct username and the password, then enter the system view of the router. If the prompt of

Too many users!

appears, try to connect later. Usually, there should be no more than five Telnet users at any one time.

4 Enter the command to configure the router or view running status of the router.

Enter ? to get help if necessary. For det ails of specific commands, please refer to the following chapters.

In router configuration via Telnet connection, the Telnet connection will be disabled if you change the IP address of the router interface. So please enter the new IP address of the router interface at the Telnet client prompt after any changes in address, so as to re-establish the connection.

The 3Com Router 1.x provides a series of configuration commands for the user to configure and manage network equipment via command line interface. The command line interface can accomplish the following:

■ Perform local or remote configuration via the console port.

■ Log in the router through modem dial-up with asynchronous serial port and

perform remote configuration.

■ Perform local or remote configuration via Telnet connection

■ Provide terminal access service.

■ Configure command hierarchical protection to reject the illegal users.

20 CHAPTER 2: 3COM ROUTER USER INTERFACE

■ Provide online help any time the user keys in “?”.

■ Provide network test commands, such as tracert and ping, etc. to quickly

diagnose whether the network is normal.

■ Provide rich and detailed debugging information for diagnosis of network

faults.

■ Use telnet command to directly log in and manage other routers

■ Support TFTP service, convenient for users to upload or download the 3Com

Router main program files and configuration files.

■ Provide FTP service, convenient for users to upload or download the 3Com

Router main program files and configuration files.

■ Provide function similar to DosKey to execute a history command.

■ Searches the key word via command line interpreter with an incomplete match

method. Interpre tation will be avail able just by entering non-conflict key words. For example, enter abbreviated “

View View is the interface of the 3Com Router command. Different commands are

implemented in different views, and different views are realized according to different function requirements. For example, the RIP view can configure corresponding commands.

dis” for display command.

The views in the 3Com Router are in a hierarchical structure. You can enter the function views in system view and the sub-function views in the function views. The following figure shows the view stru ct u re of the 3Com Router.

Command Line Interface (CLI) 21

Figure 14 Hierarchical view structure of the 3Com Router

RIP view OSPF view BGP view

Sync serial interface view

Ethernet interface view

Async serial interface view

CE1 interface view

……

Routing policy view

DLCI view

R2 CAS view

System view

X.25 hunt group view

Frame Relay switch view

Frame Relay class view

DHCP address pool view

Voice view

MFR interface view

PIM view

L2TP group view IPSec proposal view IPSec p olicy view IKE proposal view ACL view

……

Voice GK client view Voice AAA view Voice dial program view Voice subscriber-line view

Voice access-number view Voice entity view

The following table gives some details of the functionality features of the command views as well as the commands for entering these views.

System view Table 4 Views and their prompts

View name Function Prompt Enter command Exit command

system view Configures the system

parameters

RIP view Configures the RIP

parameters

OSPF view Configures the OSPF

parameters

BGP view Configures the BGP

parameters

routing policy view

Configures the routing policy parameters

PIM view Configures the

multicast routing parameters

sync serial interface view

Configures the synchronous serial interface parameters

[Router] Directly enter the view

upon the login of subscribers

[Router-rip] Enter rip in system

view

[Router-ospf] Enter ospf in system

view

[Router-bgp] Enter bgp in system

view

[Router-route-policy] Enter

route-policy

abc permit 1 or

route-policy

abc deny 1 in

system view

[Router-pim] Enter pim in system

view

[Router-Serial0] Enter interface

serial 0 in any

views

Enter logout to disconnect the connection with the Router

Enter quit to return to the system view

22 CHAPTER 2: 3COM ROUTER USER INTERFACE

View name Function Prompt Enter command Exit command

async serial interface view

AUX interface view

AM interface view

Ethernet interface view

loopback interface view

ISDN BRI interface view

CE1 interface view

CT1 interface view

CE3 interface view

CT3 interface view

E1-F interface view

T1-F interface view

dialer interface view

virtual template interface view

tunnel interface view

NULL interface view

logical channel view

bridge template interface view

Configures the asynchronous serial interface parameters

Configures the AUX interface parameters

Configures the AM interface parameters

Configures the Ethernet interface parameters

Configures the loopback interface parameters

Configures the ISDN BRI interface parameters

Configures a time slot binding method on the CE1 interface and the physical layer parameters

Configures a time slot binding method on the CT1 interface and the physical layer parameters

Configures a time slot binding method on the CE3 interface and the physical layer parameters

Configures a time slot binding method on the CT3 interface and the physical layer parameters

Configures the physical layer parameters for the E1-F interface

Configures the physical layer parameters for the T1-F interface

Configures the dialer interface parameters

Configures the virtual template parameters

Configures the tunnel interface parameters

Configures the null interface parameters

Configures the AUX interface parameters

Configures the virtual Ethernet interface parameters

[Router-Async0] Enter interface

async 0 in any

views

[Router-Aux0] Enter interface

aux 0 in any views

[Router-AM0] Enter interface

am 0 in any views

[Router-Ethernet0] Enter interface

ethernet 0 in any

views

[Router-LoopBack1] Enter interface

loopback 0 in any

views

[Router-Bri0] Enter interface

bri 0 in any views

[Router-E1-0] Enter controller

e1 0 in any views

[Router-T1-0] Enter controller

t1 0 in any views

[Router-E3-0] Enter controller

e3 0 in any views

[Router-T3-0] Enter controller

t3 0 in any views

[Router-Serial0] Enter interface

serial 0 in any

views

[Router-Serial0] Enter interface

serial 0 in any

views

[Router-Dialer0] Enter interface

dialer 0 in any

views

[Router-Virtual-Template1] Enter interface

Virtual-Templat

e 1 in any views

[Router-Tunnel0] Enter interface

tunnel 0 in any

views

[Router-Null0] Enter interface

null 0 in any views

[Router-logic-channel1] Enter

logic-channel 1

in any views

[Router-Bridge-Template1] Enter interface

Bridge-Template

0 in any views

Enter quit to return to the system view

Command Line Interface (CLI) 23

View name Function Prompt Enter command Exit command

X.25 hunt group view

Frame Relay class view

DLCI view Configures the DLCI

Frame Relay switch view

MFR interface view

L2TP group view

IPSec proposal view

IPSec policy view

IKE proposal view

ACL view Configures ACL rules [Router-acl-1] Enter acl 1 in

DHCP address pool view

Configures the X.25 hunt group parameters

Configures the FR class parameters

parameters

Configures the FR switch parameters

Configures the MFR interface parameters

Configures L2TP group [Router-l2tp1] Enter l2tp-group

Configures a security proposal

Configures a security policy

Configures an IKE proposal

Configures a DHCP address pool

[Router-X25-huntgroup-abc] Enter x25

hunt-group abc

round-robin in

system view

[Router-fr-class-abc] Enter fr class

abc in system view

[Router-fr-dlci-100] Enter fr dlci 100

in synchronous serial interface view. (The link layer protocol encapsulated on the interface should be FR.

[Router-fr-switch-abc] Enter fr switch

abc in system view

[Router-MFR0] Enter interface

mfr 0 in any views

1 in system view

[Router-ipsec-proposal-abc] Enter ipsec

proposal abc in

system view

[Router-ipsec-policy-abc-0] Enter ipsec

policy abc 0 in

system view

[Router-ike-proposal-0] Enter ike

proposal 0 in

system view

[Router-dhcpabc] Enter dhcp server

ip-pool abc in

system view

Enter quit to return to the system view

Enter quit to return to the synchronous serial interface view

Enter quit to return to the system view

Command Line

Online Help

The command line prompt character consists of the network device name (Router by default) and the command view name, such as [Router-rip].

The commands are divided according to view. In general, in a certain view, only the commands defined by the view can be executed, but some widely used commands (including

logic-channel, and controller) can be executed in all views

ping, display, debugging, reset, save, interface,

For some views listed in the above table, you must enable the corresponding functions before you can enter the views. To enter some other views, however, you should configure the related restriction conditions. For more information, see the related chapters in this manual.

In all views, you can use the quit command to return to the superior-level views, and the return command to the system view directly.

The command line interface of the 3Com Router provides the following online helps:

■ Full help

■ Partial help

24 CHAPTER 2: 3COM ROUTER USER INTERFACE

■ The help information obtained via the above-mentioned online help is

described as follows:

1 Full help: Enter “?” in any view, all the commands in this view and their brief

descriptions can be obtained.

[Router]?

aaa-enable Enable AAA(Authentication, Authorization and Accounting)

acl Specifystructure of access-list configure information

arp Add a ARP entry

bgp Enable/disable BGP protocol

bridge Bridge Set

clock Set system clock

copy Copy config or system file to remote tftp server

configfile Select config file stored in flash or NVRAM

controller Set a E1/T1 entry

......

2 Partial help: Enter a command followed by “?” separated with the space key , and

if parameters are available, descriptions of related parameters will be listed.

[Router]display ? aaa AAA information aaa-client Display the buffered voice information acl Display access-list information arp ARP table information bgp BGP protocol information bridge Remote bridge information

......

Command Line Error

Message

3 Partial help: Enter a character string followe d by “?”, and descriptions of all the

commands beginning with this character string will be listed.

[Router]di? dialer dialer-rule display

4 Partial help: Enter a command and a character string, followed by “?”, and all the

key words beginning with this character string will be listed.

For example:

[Router]display a? aaa aaa-client acl arp

In the 3Com Router, all the commands entered by users will be accurately executed if they pass the syntax check. Otherwise, users will be informed by an error message. The following table shows common error messages.

Table 5 List of common command line error messages

Common error message

Incorrect command No command has been found.

Incomplete command The command input is incomplete. Invalid parameters Parameter value beyond limit Too many parameters Too many parameters are input.

Causes

No key word has been found. Wrong parameter type

Command Line Interface (CLI) 25

History Command The command line interface of the 3Com Router 1.x provides a function similar to

DOSKey by automatically saving the history of commands inputted users. Users can check the history of commands saved in the command line to repeat execution. 10 history commands can be saved at the most for each user. The configuration steps are shown in the following two tables.

1 Display history command

The following command can be used in all views to display the command recently input:

Table 6 Display history command

Operation Command

Display history command display history-command

2 Check history command

The following keys can be used in all views to check recent commands:

Table 7 Check history command

Operation Keys Result

Go to the previous history command

Go to the next history command

Ctrl+E (in Windows 9x)

Ctrl+R (in Windows 9x)

If there are earlier inputted commands, fetch the previous one. Otherwise, the alarms rings.

If there are later inputted commands, fetch the next one. Otherwise, clear the commands and the alarms rings.

Edit Features of

Command Line

Display Features of

Command Line

The command line of the 3Com Router 1.x provides basic command edit functions and supports multi-line editing. The maximum length of each command is 256 characters, as shown in the following table:

The following keys can be used in all views to edit commands:

Table 8 Edit function table

Key Function

Any key on board If the edit buffer is not full, insert the character at the cursor and

move the cursor to the right.

Backspace key: BackSpace

Delete key: Delete Delete the character at the cursor and the alarm rings when the

Left cursor key The cursor moves one character to the left, and the alarm rings when

Right cursor key The cursor moves one character to the right, and the alarm rings

Delete the character to the left of the cursor and move the cursor back one character. If the cursor gets to the beginning of the command line, the alarm rings.

cursor gets to the end of the command line.

the cursor gets to the beginning of the command line.

when the cursor gets to end of the command line.

The command line interface of the 3Com Router 1.x provides the following display features:

Provide pause function when the information displayed exceeds one screen page, and three options are available for users.

26 CHAPTER 2: 3COM ROUTER USER INTERFACE

Table 9 Display function table

Operation Commands or keys

Stop display information on terminal Press Ctrl+C when display information pauses. Continue to display information of next

screen page Continue to display information of next

line

Press Space when display information pauses.

Press Enter when display information pauses.

User Identity Management

The 3Com Router sets three kinds of router management users: administrator user, operator user and guest user . Dif fer ent kinds of users have differ ent rights to execute commands.

1 An administrator user has the right to execute all the commands of the router.

Only the administrator user can configure all the functions and parameters and can enter all views.

2 An operator user can monitor and maintain the router, they can also obtain the

debugging information of the router. The operator user can only execute the following commands.

debugging Enable system debugging functions display Display system running information language Switch language mode (English) logout logout pad Try to open a PAD connection ping Send ICMP ECHO_REQUEST packets to network hosts reboot Reboot the router under certain condition reset Reset operation rlogin Log in remote UNIX host send Send a message to other terminals telnet Telnet to a remote host tracert Trace the route taken by packets to reach a network host undo Cancel current setting

3 A guest user has no right to manage the router, but only has the right to perform

a remote test on the router. The guest user can only execute the following commands.

language Switch language mode (English, Chinese)

logout logout

pad Try to open a PAD connection

ping Send ICMP ECHO_REQUEST packets to network hosts

rlogin log in remote UNIX host.

telnet Telnet to a remote host

tracert Trace the route taken by packets to reach a network host

Please perform the following commands in system view.

Table 10 Configure the user

Operation Command

Configure a user local-user user-name service-type type [ password {

simple | cipher } password ]

Delete a user undo local-user user-name

+ 732 hidden pages