The Revision History provides a summary of any changes in this manual. Please make sure you are using the
latest revision of this manual.
June 30, 2006
RevisionRelease DateRevisions Made
01January 26, 2005Initial Release
02August 5, 2005Revisions to various first-level and
second-level commands. Addition of
new Appendix: “SG-1 Vendor Specific
Attributes.”
03June 30, 2006Software Upgrade.
This manual is available online at ADC’s website (www.adc.com/documentationlibrary/) or you can order copies
of the manual by contacting your sales representative. Please ask for document SG1-UM-8500-03.
ADC is a register ed tr ademark of ADC Telecommunications, Inc. No right, license, or interest to such trademarks is granted
hereunder, and you agree that no such right, license, or interest shall be asserted by you with respect to such trademark.
Other product names mentioned in this practice are used for identification purposes only and may be trademarks or registered trademarks of their respective companies.
Disclaimer of Liability
Information contained in this document is company private to ADC Telecommunications, Inc. and shall not be modified,
used, copied, reproduced or disclosed in whole or in part without the written consent of ADC.
Contents herein are current as of the date of publication. ADC reserves the right to change the contents without prior notice.
In no event shall ADC be liable for any damages resulting from loss of data, loss of use, or loss of profits, and ADC further
disclaims any and all liability for indirect, incidental, special, consequential or other similar damages. This d isclaimer of
liability applies to all products, publications and services during and after the warranty period.
Table of Contents
About This Manual ..........................................................................................................xi
Table A-1.Vendor-Specific Attribute Li st ..............................................................................A-1
SG1-UM-8500-03ix
List of TablesJune 30, 2006
xSG1-UM-8500-03
ABOUT THIS MANUAL
INTRODUCTION
This manual applies to ADC's Service Gateway (SG) system, hereafter referred to as "SG-1." This document
includes an overview of the platform, installation procedures, and an SG- 1 comma nds refer ence.
ORGANIZATION
This manual includes the following chapters:
ChapterDescription
Chapter 1: OverviewDetails features and pre-installation requirements for the SG-1
platform, including site requirements for power and cabling.
Chapter 2: InstallationProvides detailed procedures for installing SG-1.
Chapter 3: Command-Line Interface (CLI)Describes the SG-1 Command-Line Interface (CLI), the steps to
access the CLI, and the steps to perform initial configuration
using the CLI.
Chapter 4: Accessing the Command Line
Interface
Chapter 5: Using the Command Line Interface Describes how to access the command-line interface; it also
Chapter 6: First-Level CommandsDefines the commands available at the first command level of
Chapter 7: Second Level CommandsDefines commands available at the second command level.
Appendix A: SG-1 Vendor-Specific AttributesDescribes the vendor-specific attributes related to SG-1 EDS
Appendix B: Redirection ServerExplains how ADC’s product redirects all peers’ HTTP requests
Appendix C: Product SupportProvides information on how to contact the ADC Technical
GlossaryDefines abbreviations and acronyms for the SG-1 Service
Details how to log on locally to an SCC or rear I/O port (if a rear
I/O card option is used) and set an IP address to allow for remote
management via a Telnet session.
directs you to other manuals for administering, configuring, and
managing the SG-1.
each SCC.
architecture.
to their personal sites as predefined in the Radius Server.
Support group.
Gateway system.
INTENDED AUDIENCE
This manual is intended for anyone needing to operate, administer, or maintain ADC’s line of Service Creation
Gateway products.
SG1-UM-8500-03xi
About This ManualJune 30, 2006
CONVENTIONS
The following style conventions and terminology are used throughout this guide.
ElementMeaning
Bold fontText that you must input exactly as shown (e.g., type 1 for card 1), menu buttons
(e.g., ACCEPT SHELF OPTIONS) or menu screen options (e.g., ALARMS screen) that
you must select
Italic fontVariables that you must determine before inputting the correct value (e.g., Password )
Monospace fontReferences to screen prompts (e.g., Invalid Password...Try Again:.)
Reader AlertMeaning
Alerts you to supplementary information
IMPORTANT
Alerts you to supplementary information that is essential to the completion of a task
!
Alerts you to possible equipment damage from electrostatic discharge
ATTENTION
CAUTION
WARNING
DANGER
EU COMPLIANCE
This product has been CE marked in accordance with the requirements of European Directive 73/23/EEC; the
following mentioned product is in conformity with Low Voltage Directive 73/23/EEC in order to comply with the
requirements in the Council Directive 73/23/EEC relating to electrical equipment designed for use within certain
voltage limits and the Amendment Directive 93/68/EEC.
For safety evaluation of the compliance with this Directive 73/23/EEC, the se standards were applied: IEC
60950:1999, EN 60950:2000.
Alerts you to possible data loss, service-affecting procedures, or other similar type
problems
Alerts you that failure to take or avoid a specific action might result in hardware damage or
loss of service
Alerts you that failure to take or avoid a specific action might result in personal harm
INSPECTING YOUR SHIPMENT
Upon receipt of the equipment:
• Unpack each container and visually inspect the content s for signs of damage. If the equipment has been damaged in transit, immediately report the extent of damage to the transportation company and to ADC. Order
replacement equipment, if necessary.
• Check the packing list to ensure complete and accurate shipment of each listed item. If the shipment is short
or irregular, contact ADC as described in Appendix C: Product Support on page C-1. If you must store the
equipment for a prolonged period, store the equipment in its original co ntainer.
xiiSG1-UM-8500-03
Chapter
1
OVERVIEW
The SG-1 is a service creation platform optimized for delivering differentiated services to residential, mobile, and
private subscribers. The SG-1 enables service providers to of fer attra ctive new services that can be selected
dynamically and automatically by their wireless, dial-up and broadband users.
The SG-1 can provide services over existing infrastructure, integrating smoothly with leading network access
servers, RADIUS servers, databases, and billing systems.
The SG-1 can be deployed to meet the requirements of Internet Service Providers (ISPs), Digital Subscriber Loop
(DSL) providers, cable providers, or "hot spot" (802.11) wireless Local Area Network (LAN) providers.
FEATURES
Designed to easily integrate into operations of existing and emerging service providers, the SG-1 has the following
features:
• Network Centric and Scalable Architecture: is designed for a service provider network, scales to carrier class
requirements, and allows for a more easily maintained solution because it is deployed in a centralized location.
This minimizes the number of systems and makes service changes faster and more economical. As part of this
network centric architecture, Customer Premises Equipment (CPE) software, "cookies", and loca l service point s
can be eliminated.
Note: Not all can be eliminated. For example, CPE equipment (such as, DSL modem, etc.) will still be
needed. Cookies may still be needed depending on the application.
• Dynamic Provisioning: allows users to change a service package or u ser profile "on the fly" without forcin g the
user to disconnect and then reconnect. This vital feature enables streamlined service provisioning without
involvement of a service provider's personnel and immediate service creation following the user's service-selection decision.
• Flexible Network Integration: can be easily operated with existing access infrastructure, requiring minor
changes in network and billing servers.
• Universal Platform: the processing engines support different access types: xDSL, cable, wireless, and dial-up.
The SG-1 also handles ATM and Gigabit Ethernet.
• Flexible Scalability: is available in a range of capacities, with varying configurations up to 64,000 virtual ports
per chassis. As a result, service providers can easily scale SG-1's capacity to meet their changing needs.
• Hot Swappable Cards: has redundancies built in including the ability of cards to be mixed and matched.
• Subscriber Redirection: subscribers can be redirected to selected web sites or port als, regardless of their individual Uniform Resource Locator (URL) selection. This feature enables increased traffic to specific sites and
personalized communications with individual users. It also enables a service provider to control and authorize
access to incidental users that are not regular subscribers to the network. Subscriber redirection is a key building block for customized services that can be easily created using SG-1 including walled gar dens, selective an d
targeted promotional activities, anti-virus protection , and other se rvices and applications.
• Anti-Spoofing Mechanism: supplies an anti-spoofing prevention mechanism, which blocks an unauthorized
user's computer from pretending to have a different IP address than it really has.
• Billing and Accounting: provides accounting information for each selected service using the st andard RADIUS
protocol. This enables network providers to bill their users based on the actual services used. Unique accounting capabilities are provided to simplify billing including those required for Session accounting and Service
accounting using simple RADIUS commands.
• Carrier Class: supports telecom standards including Point-to-Point Protocol (PPP), Layer 2 Tunneling protocol
(L2TP), SNMP, and others.
SG1-UM-8500-031-1
Chapter 1: OverviewJune 30, 2006
The SG-1 comprises two types of system chassis: 1U and 10U. The 1U chassis (or Mini System Chassis) has 2
service creation slots and 1 power supply slot built into the chassis. The 10U chassis (or Full-Size System Chassis)
has 16 service creations slots and 4 power supply slots for load sharing redundancy (see Figure 1-1).
Figure 1-1. SG-1 10U
BEFORE YOU BEGIN
Before installing the SG-1 chassis and its associated modules, it is important to prepare for installation by:
• Preparing the site (site preparations) and reviewing the instal la tion plans.
• Establish a Method of Procedure (MOP).
• Unpacking and inspecting the system components.
• Gathering the tools to properly install th e SG-1 chassis and its associated modules.
SITE PREPARATIONS
Typically, you should have prepared the installation site beforehand. As p art of your prep aration, obt ain a plan of the
site or Telco environment where the SG-1 chassis will be installed. All personnel involved in the installation of the
SG-1 chassis, including installers, engineers, and supervisors, should participate in the preparation of a MOP for
approval by the customer.
Method of Procedure
An example of a pre-installation checklist of tasks and considerations (Method of Procedure) that needs to be
addressed and agreed upon before proceeding with the installation is given below:
• Assign personnel.
• Determine protection requirements for personnel, equipment, and tools.
• Evaluate potential hazards that may affect service.
• Schedule time for installation.
• Determine any power and space requirements.
1-2SG1-UM-8500-03
June 30, 2006Chapter 1: Overview
• Identify any required procedures and tests.
• On an equipment plan, make a preliminary decision that locates each of the SG-1 chassis tha t you plan
to install.
• Read this manual, whether you are replacing or adding a SG-1 chassis that is being installed.
• Verify the list of repl aceable parts for the installation (screws, bolts, washers, and so on) so that the parts are
identified (see Table 1-1 on page 1-4).
• Check the required tools list to make sure the necessary tools are available (see “Required Tools and Equip-
ment” on page 1-5).
• Purchase necessary parts.
• Identify work steps and any necessary notifications to CO personnel or engineers before work begin s.
• Perform the installation (see Chapter 2: Installation).
UNPACKINGAND CHECKINGTHE CONTENTSOF YOUR SHIPMENT
The shipping package for the SG-1 chassis is designed to reduce the po ssibility of product dama ge associated with
routine material handling experienced during shipment. To reduce the potential damage to the product, transport the
chassis in its ADC-specified packaging. Failure to do so may result in damage to the chassis. Do not remove the
chassis from its shipping container until you are ready to install it.
Note: Do not discard the packaging materials used in shipping your SG-1 chassis. You will need the
packaging materials in the future if you move or ship your SG-1 chassis.
Table 1-1 on page 1-4 provides a list of required and optional components that may not be included in the SG-1
chassis kit, but are either required or recommended for the SG-1. A notes section (Table 1-2 on page 1-4) has been
provided to document any components not listed below .
SG1-UM-8500-031-3
Chapter 1: OverviewJune 30, 2006
Table 1-1. Packing List
Catalog/Part
Item
SG-1 Service Gateway System Chassis
SG-1 Service Gateway System User Manual
SG-1 Service Gateway System Installation Kit
• Ten (10) 6-32 x 3/16 screws:
• Two (2) 8-32 x 5/16 screws:
• Eight (8) 12-24 x 3/8 screws:
Number
Notes:
• Two (2) mounting brackets
• One (1) #6 ground cable
• DB9/RJ45 “F” connector
Table 1-2. System Installation Notes
1-4SG1-UM-8500-03
June 30, 2006Chapter 1: Overview
REQUIRED TOOLSAND EQUIPMENT
The following tools are required to install the SG-1 chassis:
• Grounding or ESD-preventive wrist strap
• No. 2 Phillips-head screwdriver
• Multimeter (for continuity testing)
• Wire stripper
• Wire-wrap tool
• Box cutter
• #26 AWG wire
SPECIFIC SG-1 CHASSIS INSTALLATI ON REQUIREMENTS
The SG-1 chassis dimensions are:
• Height of 17.50 inches (44.4 cm) (10U)
• Width of 19.0 inches (44.8 cm) without rack adapters attache d to the left and right side of the unit
• Depth of 11.4 inches (28.9 cm)
IMPORTANT
!
Location Requirements
To install the chassis in an equipment room or central office:
• Install in a 19-inch, 23-inch, 24-inch, or 600 mm rack using the customer provided rack adapter brackets.
• Allow a 1-inch minimum clearance between the chassis to provide for proper air flow for cooling.
Use the following card types in the SG-1 chassis:
• Fast Ethernet card in slots 1 through 16
• Gigabit Ethernet card in slots 1 through 16
• ATM card in slots 1 through 16
• Rear I/O card on the rear of the chassis in slots 1 through 16
When selecting system components, consider future expansion of your SG-1 with items in T able 1-3 as possible
options.
Observe the clearances specified below in “Location Requirements” to provide proper air flow
for chassis cooling.
SG1-UM-8500-031-5
Chapter 1: OverviewJune 30, 2006
Table 1-3. Possible SG-1 Options
If you want to add:Then:
SG-1 chassisConsider installing the first chassis in the top
position of a rack to allow for further expansion
below it.
Fast Ethernet PortAdd a Rear I/O card on the corresponding rear
slot of an SCC that Fast Ethernet access is
desired.
Service Creation Cards:
VRRPUse an SCC of the same type in any slot (1
through 16). Consider placing cards participating
in functional groups in adjacent slots for ease of
identification.
RedundancyAdd an additional SCC, of the same type, in slots
1 through 16 to have an additional card that
provides the same service in the event of a card
or connectivity failure.
POWER REQUIREMENTS
The following specifies the power versions available for the SG1 chassis, then specifies the power requirements for
your facility relative to the SG1 power version you selected.
SG-1 Chassis
The SG-1 chassis provides four 100 to 240 Vac (50 to 60 Hz) power supplies with AC power co nnectors. You must
install one power supply for every five Service Creation Cards installed in a chassis (three power supplies are
required for a chassis having slots 1 through 16 fully populated). If you want redundant power, install an additional
power supply in an open power module slot. It is recommended to have one power module above the minimum to
provide uninterrupted service should a power module fail.
Facility Requirements for AC Power
Verify that the facility AC power sour ce for the primary connection falls with in the recommended voltage rang e of 1 10
to 220 Vac with a maximum current of 10 amps for 110 Vac and 5 amps for 220 Vac.
BLANK FACEPLATE REQUIREMENT
When slots in an SG-1 chassis do not contain a card, the slot must be covered with a blank faceplate to prevent
personnel contact with back panel connectors and to maintain proper air flow within the chassis.
ENVIRONMENTAL REQUIREMENTS
The SG-1 chassis has an ambient operating temperature range of +32 to +104° F (0 to +40° C) with a maximum
humidity of 95% when installed according to the instructions in this inst alla tion manual.
The storage temperature range is from -4 to +158° F (-20 to +70° C).
SYSTEM CABLING REQUIREMENTS
You will complete only the cabling appropriate for the cards installed in the chassis.
1-6SG1-UM-8500-03
June 30, 2006Chapter 1: Overview
Chassis Ground and Power Cabling
The recommended cabling to ground the SG-1 cha ssis is 6 AWG (minimum) stranded copper wire.
For the SG-1 chassis, the recommended cabling is 14 AWG (1.88 mm diameter) stra nded copper or 14 A WG (1.628
mm diameter) solid wire to connect the DC terminal block to the facility provided power.
For the SG-1 chassis power cable, use one of the following:
• PC US for North America
• PC EURO for Europe
• PC UK for the United Kingdom
Network Cabling
Network connectors interface the SG-1 to an ATM backbone network, a LAN, or a WAN.
Configuration Port Cabling
In addition to the RJ-45 craft port provided on the front panel of each SCC card, each card may have a rear access
RS-232 interface through a RJ-45 connector for craft access and configuration if a Rear I/O card is installed. There
are two Ethernet ports located on the Rear I/O card.
Note: The Rear I/O card is optional when used with an ATM or Gigabit SCC.
SG1-UM-8500-031-7
Chapter 1: OverviewJune 30, 2006
1-8SG1-UM-8500-03
Chapter
INSTALLATION
This chapter provides detailed information about installing the SG-1.
MOUNTINGTHE SG-1 CHASSIS
To mount the SG-1, complete the following procedure.
StepAction
1If required, securely attach the customer provided rack adapters to the left and right sides of the rack in
which the SG-1 chassis will be installed.
2Position the chassis in the rack.
3Align the chassis adapter holes with the vertical rack mounting holes.
4Secure the rack adapters to the rack using a Phillips screwdriver and four 12-24 x ½ inch pan head
screws for each rack adapter.
CONNECTINGTHE SG-1 CHASSIS GROUND
To connect the SG-1 chassis ground, complete the following procedure.
2
IMPORTANT
!
StepAction
1Use the vendor provided cable.
2Attach one end of the ground wire to the chassis ground lug and tighten the screw. Make sure the ground
3Connect the other end of the ground wire to the CO ground termination point or building earth ground.
IMPORTANT
!
Attach your antistatic wris t st rap to the ESD ground jack on the SG-1 chassis.
The recommended copper wire is a minimum 6A WG stranded copper wire with a maximum length
of 5 feet (1.52 m).
wire has a secure connection.
Make sure the ground wire has a secure connection.
You must wear an antistatic wrist strap connected to the ESD jack on the SG-1 chassis to perform
the installation procedures. You must also observe normal ESD precautions when handling
electronic equipment. Do not hold electronic plugs by their edge. Do not touch components or
circuitry.
Note: Procedures marked with an ESD symbol require you to use the antistatic wrist strap to complete
the step.
CONNECTINGTHE POWER SOURCE
The SG-1 AC chassis (SG1-400-005) supports 110 to 240 Vac (50 to 60 Hz) power. Connect facility power to the
chassis as described in the following section.
SG1-UM-8500-032-1
Chapter 2: InstallationJune 30, 2006
Connecting AC Power to an SG-1 AC Chassis
Connect an AC power cord(s) to AC power connectors, as required.
StepAction
1Turn off the AC power switch on the back of the SG-1 AC chassis.
2Plug the power cord into the chassis power connector.
3Connect the AC power cord from the power supply to the facility power source. Do not turn on the power
switches at this time. You will turn on the power switches when you power up the chassis (as described in
“Powering Up the SG-1” on page 2-4) and install the cards (as described in “Installing Cards and Blank
Faceplates” on page 2-4).
INSTALLI NG INTERFACE CABLES
This section provides procedures for installing the cabling for the network, subscriber, and management interfaces.
Connecting Network Cards
Connect the SG-1 system, through a network card interface, to an ATM backbone network, WAN, or LAN for a
network uplink.
Refer to the following sections to complete cabling for the network interface connectors for these network cards:
• WAN ATM-OC3/STM1
• LAN GEthernet
Connecting the Ethernet Interface
The Rear I/O card provides two back panel access 10/100Base-T Ethernet interfaces.
Note: The Rear I/O is required for Fast Ethernet.
The Rear I/O card connector is MDI. Use one of the following cables as described below:
• Straight thro ugh cable to connect to a device with an MDI X port such as a hub, repeater, bridge, or router
• Cross over cable to connect to a device that also has an MDI port such as a PC with an Ethernet Network Interface Card (NIC)
Table 2-1 shows the pin-outs for the RJ-45 connectors.
2-2SG1-UM-8500-03
June 30, 2006Chapter 2: Installation
Table 2-1. RJ-45 Pin-Outs
MDI Pin NumberMDI-X Pin NumberSignal
a
SymbolDirection
13Transmit Data (+)TX+ (TX0+)Out(Bidirect)
26Transmit Data (-)TX-(TX0-)Out(Bidirect)
31Receive Data (+)RX+(TX1+)In(Bidirect)
44NC(TX2+)(Bidirect)
55NC(TX2-)(Bidirect)
62Receive Data (-)RX-(TX1-)In(Bidirect)
77NC(TX3-)(Bidirect)
88NC(TX3+)(Bidirect)
casecaseChassis Ground
a.NC = no connection.
Figure 2-1 shows the pin-outs for straight-through and cross-connect cabling.
Straight-through cable
MDI-X port
(data network device)
3
6
1
Receive
2
Cable jack
3
6
1
2
Cable jack
3
6
1
2
MDI port
(management card)
3
6
1
2
Cross-over cable
MDI port
(data network device)
3
ReceiveReceive
6
1
TransmitTransmit
2
Cable jack
3
6
1
2
Cable jack
3
6
1
2
MDI port
(management card)
3
6
1
2
ReceiveTransmit
Transmit
Figure 2-1. Straight-Through and Cross-Over Cable Pin-Out s
SG1-UM-8500-032-3
Chapter 2: InstallationJune 30, 2006
Connecting to an Ethernet Port
StepAction
1Plug the RJ-45 connector of the Ethernet cable into the FAST E-NET port on the SG-1 chassis
back panel.
2Connect the other end of the cable into the Ethernet port on the PC, hub, or other Ethernet device.
CONNECTINGTHE CRAFT PORT INTERFACE
In situations where a Rear I/O card is inst alled, the default cr af t port is on th e Rear I/O card. Moving a jumper on the
Rear I/O card is required if you wish to use the front craft port.
POWERING UPTHE SG-1
IMPORTANT
!
Connect to facility power using an AC power cord and confirm proper function of th e AC power supplies.
Electrical and mechanical shock hazards are present throughout the system; be aware of this
possibility when power is applied to the chassis. Only qualified personnel should service the
system.
StepAction
1Connect the power cord from the AC power connector on the SG-1 AC chassis back panel to the facility
power source. Turn on the power switch.
2Verify that all cabling is securely terminated.
3On each AC power supply, verify that the power LED lights green, indicating that the power supply is
receiving power.
INSTALLI NG CARDSAND BLANK FACEPLATES
Install SG-1 cards in the appropriate slots in the SG-1 chassis as indicated below. When slots do not have cards
installed, use blank faceplates as indicated below.
Installing Cards
Note: SG-1 cards are inserted under power (hot inserted).
CAUTION
Once you’ve powered up the chassis, as described in “Powering Up the SG-1,” you can begin to install cards in the
SG-1 chassis.
Refer to guidelines for “Site Preparations” on page1-2 to select the appropriate slot for a card, or refer to the
applicable card installation manual to select the appropriate slot and for detailed information on the card.
2-4SG1-UM-8500-03
When inserting the cards, make sure the cards are properly aligned on the tracks to prevent
equipment damage or personal injury.
June 30, 2006Chapter 2: Installation
Installing Blank Faceplates
Use the blank faceplate identified in the “Blank Faceplate Requirement” on page 1-6.
IMPORTANT
!
Install blank faceplates in the SG-1 chassis to cover unused slots. Unused slots must be covered
to prevent personnel contact with back panel connectors under power and to maintain proper
airflow within the chassis.
StepAction
1Slide the blank faceplate into the empty slot. Ensure the ret ainin g la tches are lifted.
2Push the blank faceplate in until the retaining latches touch the SG-1 chassis.
3Gently close the retaining latches until they snap into place .
4Tighten the captive screw on the top and bottom retaining latches.
SERIAL CABLE
SG1-UM-8500-032-5
Chapter 2: InstallationJune 30, 2006
2-6SG1-UM-8500-03
Chapter
3
COMMAND-LINE INTERFACE (CLI)
This chapter describes the SG-1 Command-Line Interface (CLI), the step s to a ccess the CLI, and the steps to
perform initial configuration using the CLI.
OVERVIEW
The SG-1 Service Gateway System management interface is accessed using a CLI, which provides comprehensive
SG-1 system management including configuration, performance monitoring, and system maintenance and
administration. An SG-1 Service Gateway System com prises an SG-1 10U Chassis with associated Service
Creation Cards (10/100 SCC, GiG-E SCC, ATM/GiG-E SCC) and rear I/O cards.
The command-line interface is accessed through the SCC (or rear I/O card if installed) COM port using either a
terminal connected directly to the COM port or over a network using a Telnet session. You can connect your Telne t
session from:
• A PC connected on the SG-1 Ethernet Local Area Network (LAN).
OR
• A remote PC connected over a router to the SG-1 Ethernet port.
This chapter provides an introduction to the command-line interfa ce structure and then pro vides information on how
to use it.
UNDERSTANDINGTHE INTERFACE STRUCTURE
The command-line interface has four system management m enus for administration, configuration, display, and
diagnostics.
These four system management menus comprise four sub-menus (Configuration, Main, Debug, and ConfigurationDebug). Table 3-1 provides a description of these sub-menus and their associated commands.
Table 3-1. SG-1 Sub-Menus and Associated Commands
MenuTypes of Commands
ConfigurationUse the commands in this second level menu to configure:
• port configuration
• system passwords
• default authentication service type
• RADIUS parameters
• ACL permissions
• Tunnel server p ar ameters
• ATM parameters
• PPP and LCP configuration
• service parameters
• system parameters
• native IP parameters
• VRRP parameters
• IP parameters
• debug message levels
MainUse the commands in this menu to access other command levels and perform
system updates, system reloading, and network troubleshooting.
DebugUse the commands in this first level menu to display system parameters
such as:
• Memory allocation
• Network/tunnel connections
• Sonet clock source
Configuration-DebugUse the commands in this third level menu to configure system debug
messages such as:
• Error and event level
• Time server IP address
• Log server IP address
COMMANDSAND NAVIGATION
Navigate the command-line interface by entering a command name or a command string to move to the appropriate
command level. The command level is indicated by the prompt. You can abbreviate command-line interface
commands if the abbreviations are distinct; however, you must use at least two letters of the command. Also, the
commands are not case sensitive. The following general and navigation commands are available from each prompt
(see Table 3-2 below and Table 3-3 on page 3-3, respectively).
Table 3-2. General Commands
Enter the following command:To:
?Display a list of commands available from the
current prompt.
command name? (for example, show?)Display an explanation of a particular command.
ExitLeave the current level and return to the
upper level.
Command Path Navigation
For each command that provides configuration or management of a SG-1 system, a path is provided in the
applicable section of the user document to help locate that command in the command-line interface structure. The
path will be displayed in a box before the description of the command.
3-2SG1-UM-8500-03
June 30, 2006Chapter 3: Command-Line Interface (CLI)
COMMAND-LINE EDITING
The command-line interface provides a DOS-like environment for editing. It provid es special key functions and other
special functions developed for a VT100-type terminal.
Note: Commands may not be recognized under some vendor's versions of Telnet. With Microsoft®
Windows® HyperTerminal, or other terminal emulation programs, you may need to set the terminal
preferences to VT100 arrows to use these functions (see Table 3-3 on page 3-3).
T able 3-3 . Nav igation Commands
Use This Feature:To:
Up arrow keyProvide the capability to scroll backward through
a list to retrieve information.
Down arrow keyProvide the capability to scroll forward through a
list to retrieve information.
Tab keyAllows the completion of a command given the
input of at least two characters and no other
ambiguous commands occur.
The initial step for managing the SG-1 Service Gateway System is to log on locally to an SCC or rear I/O port (if a
rear I/O card option is used) and set an IP address to allow for remote management via a Telnet session. This IP
address should place the SG-1 system on the same subnet as a router or other device to which it connects
upstream through its Ethernet port.
CONNECTINGTOTHE CRAFT PORT
Complete the following procedure to connect to the Craft port.
StepAction
1Connect one end of a straight-thru Ethernet cable to the front of the SCC or the COM 1 port of a rear I/O,
if a rear I/O card is installed. Connect the other end of the straight-thru Ethernet cable to the DB9/RJ45
connector (provided in the SG-1 shipment) and then to the PC’s COM1 or COM2 port.
2Power up the ASCII terminal or PC.
Please refer to the appropriate SCC installation manual for more detailed installation instructions, including the
location of the respective SCC Craft port and a description of the SCC Craft port connector pin-outs.
LOGGINGONTOTHE CRAFT PORT
Complete the following procedure to log on to the Craft port.
Note: If the keyboard remains inactive for five minutes, the command-line interface Inactivity Timer
automatically logs the current user off. If this happens, log on to the command-line interface again. If
debugging is activated, you may have to press CTRL+C to access the login prompt.
Table 4-1. Default Username/Password
UsernamePasswordAuthority
technicianggconFull-access read/write
supervisorsg1Read/write to second level
operatorPopgateRead-only to first level with user
drop capability
viewerPopgateFirst-level show capabilities
If you are using a PC as a terminal, use a terminal emulation program such as HyperTerminal or Procomm™. Refer
to your terminal emulation program’s documentation for instructions.
StepAction
1Configure the terminal or the PC terminal emulation program as follows:
• Baud rate: 19200 bps
• Data bits: 8
• Parity: none
• Stop bits: 1
• Flow control: none
2When using a PC, select the COM setting of the port to which the RS-232 cable is connected (for
example, COM1 or COM2) using the terminal emulation program.
SG1-UM-8500-034-1
Chapter 4: Accessing the Command Line InterfaceJune 30, 2006
StepAction
3Press ENTER to initiate the terminal session.
4Enter your user name at the Username: prompt.
5Enter your password at the Password: prompt.
Set the management card IP address, subnet mask, and default gateway (if a gateway exists) to enable
communication with external networks and to enable access to the SG-1 CLI for Telnet sessions.
To set a new IP address and subnet mask for the SCC, do the following.
StepAction
1From the Host(config)# prompt, enter the interface command in the following format:
The SCC IP address for interface in question. This address is set up to be on the same subnet as the Ethernet
network to which the SG-1 system is attached (format xxx.xxx.xxx.xxx).
<netmask>
The subnet mask associated with the SCC IP address. This address is based on the Ethernet network to which the
SG-1 system is attached (format xxx.xxx.xxx.xxx).
Host> configure terminal
Host(config)# interface ethernet 0 \ 2 12.3.66.211 255.255.255.0 auto mtu 1500
Added Item
SG1-UM-8500-034-3
Chapter 4: Accessing the Command Line InterfaceJune 30, 2006
DISPLAYINGTHE IP ADDRESS
Host> show configuration
From the Host> prompt, enter the show configuration command to verify your configuration.
Example(s)
Host> show configuration
…
interface ethernet 0\1 192.168.0.1 255.255.255.0 mode auto
ip default-gateway 192.168.0.253
…
When the show configuration command is entered, A screen similar to the one above displays the SG-1 SCC
card’s Ethernet port IP address, subnet mask, and default gateway (if applicable).
4-4SG1-UM-8500-03
Chapter
5
USINGTHE COMMAND LINE INTERFACE
There are multiple ways to access an SG-1 for management. Also, there are rules that determine the number of
accesses that can be made at one time to an SG-1 system. Once you have access, you can complete the
configuration and management of the SG-1.
CONFIGURINGTHE SG-1
The operational software for an SCC resides on each individual card. The software is accessed through a
command-line interface to configure and manage an SG-1.
The command-line interface can be accessed on an SG-1 locally through a serial interface to the Craft port on the
SCC (or rear I/O card) or through a Telnet session as shown below. The command-line interface modifies and views
the SG-1 Management Information Base (MIB) objects to implement system configuration and management.
Additionally, SG-1 can also be configured and managed through a customer-provided Element Management
System (EMS). The EMS uses SNMP to modify and view the SG-1 MIB objects.
LOGGING ON
In addition to logging on to an SG-1 locally through the Craft port, up to four additional remote users can log on
through a Telnet session.
The following example shows how to access the SG-1 CLI using a Telnet session from a remote system. S pecify the
IP address previously designated for this purpose:
C:\users\default>telnet 192.168.0.1
You receive a Welcome prompt when you successfully log on to the SG-1 CLI. Log on with the user account
information assigned to you.
Welcome to SG-1 System
Username: technician
Password: *****
Host>
LOGGING OFF
To log off, enter the exit command at the first level Host> prompt.
Host> exit
Note: The CLI Inactivity Timer automatically logs the current user off the system if the keyboard remains
inactive for five minutes.
SG1-UM-8500-035-1
Chapter 5: Using the Command Line InterfaceJune 30, 2006
WHATTO DO NEXT
From the command-line interface, use the procedures in this manual to (among other things):
• Configure the network card ports, followed by services for the network connections, including Automatic Protection Switching (APS) for the OC3 card.
• Configure ATM traffic, including traffic profiles, policing, packet discard, over-subscription, and traffic shaping
for Unspecified Bit Rate (UBR) traffic.
• Set up ATM routing parameters for either IISP (static ATM routing) or Private Network to Node Interface
(PNNI) dynamic A TM routing.
• Set up system ATM configuration, such as signaling characteristics, ATM prefixes and addresses, ATM interfaces, and aliases for ATM addresses.
• Configure ATM connections for Permanent Virtual Circuits (PVC's).
• Set up bridging and routing global parameters and sessions over PVC's.
• Set up an IP/Ethernet uplink (bridging and rou ting over ATM PVC's) using an SCC card.
Use Table 3-1 on page 3-1 to navigate command menus and perform the necessary actions.
5-2SG1-UM-8500-03
Chapter
6
FIRST-LEVEL COMMANDS
This chapter describes the commands available at the first command level of each SCC.
You can enter the entire command or the first two letters of most commands and command-line arguments. If there
are two commands with the same first two letters, enter enough letters to differentiate between the two commands.
The remaining letters can be displayed, if you wish to see the complete command, by pressing TAB after the first
two letters. If a command-line argument is missing, the system responds by displaying the words Incomplete command or illegal command directly below the position of the missing argument.
Previously used command lines can be retrieved by pressing the Up
these command lines. Any of the command lines can be executed by pressing ENTER when it appears on the
screen.
Y ou can view th e command options and command-line argument optio ns by typing ? at any point before a command
line is complete. For example, typing ? right after the prompt will provide a list of available commands, and typing ?
after a command will display a list of options for the next command-line argument. Similarly, typing ? after an option
will display a list of options for the following command-line argument.
The help facility can be used to obtain a list of the first-level commands and their functions by typing ? immediately
after the first-level prompt. The question mark does not appear on the screen, but the system responds by
displaying the information requested.
To verify the functionality of the initial configuration of the SCC, the commands at the first level may be used to:
1. Show hardware, software, and license versions
2. Show running configuration and port stat us
3. Show system information
4. Write to and Load from the system configuration on a TFTP server
5. Access the configuration menu
6. Disconnect users
7. Confirm network connectivity
8. View debug parameters
Ç and DownÈ arrow keys to browse the list of
SG1-UM-8500-036-1
Chapter 6: First-Level CommandsJune 30, 2006
SHOWINGA LISTOF AVAILABLE PARAMETERS
Using the GREP command
The GREP command may be operated on any of the system commands.
SNMP-server community get T}y||g
SNMP-server community set T}y||g
tunnel-server host 0.0.0.0 mask 0.0.0.0
pppoe enable interface 0\1 0
router id 172.16.1.13
hostname Mankali
banner BannerString
session-timeout 500000
idle-timeout 1800
lcp renegotiate
service cache off
service internal framed-PPP
native-ip dhcp pre-auth-mode mac
native-ip def-service-auth Guest
native-ip enable interface Ethernet 0\2
SG1-UM-8500-036-7
Chapter 6: First-Level CommandsJune 30, 2006
ip local-pool pool1 162.10.1.1 162.10.1.254 internal
ip domain-name POPmaestro
ip primary-name-server 62.90.133.233
ip secondary-name-server 0.0.0.0
ip default-gateway 172.16.1.1
ip tcp adjust-mss on
ip dhcp relay server Ethernet 0\2 1 172.16.1.15
debug
watchdog-TimeValue 60
time-server-ip 0.0.0.0
error-level default 3 output-device console
event-level default 5 output-device console
trace default off
sysLog-server-ip 192.168.1.1
Host>
Note: Using show configuration for the first time on a blank system may return a File does not exist
message until the configuration is written to NVRAM using the write memory command.
6-8SG1-UM-8500-03
June 30, 2006Chapter 6: First-Level Commands
Displaying Ethernet port configurations
Host> show terminal
Displaying Ethernet Port Statistics
Host> show ethernet 0 \ 1
Use the show ethernet command to display the Ethernet port parameters for the Rear I/O Ethernet port.
Note: When keying in the command, the backward slash ‘\’ is optional. The command will work with just a
space between the slot number and port number.
Usage
show ethernet <slot number> <port number>
Parameter(s)
<slot number>
The slot number refers to 0 (for the Rear I/O) card and 1 for a Gigabit Ethernet port on the SCC card itself.
<port number>
The port number refers to a value of 1 to 3 for the card in question.
SG1-UM-8500-036-9
Chapter 6: First-Level CommandsJune 30, 2006
Example(s)
Host> show ethernet 0 \ 1
Interface Slot 0 Port 1 is up, line protocol is up
Hardware address is 008042195FB7
Internet address is 10.0.1.220 Mask is 255.255.255.0
Gateway IP address is 10.0.1.253
Duplex mode sensed by auto-negotiation is full-duplex
Ethernet speed is 1 Gbps
MTU 1500 bytes, BW 1000 Mbps
23778 packets input, 1997552 bytes
Received 5473 broadcast
, 0 runts, 0 giants, 0 CRC
Input frame discard = 0
Assign Rx buffers failure = 0
Free Rx buffers = 1005
13879 packets output, 1386325 bytes
0 output errors, 0 output late collisions, 0 retry
0 re-transmission limit
Output discards = 0
Redundancy status: redundancy is not configured
Host>
6-10SG1-UM-8500-03
June 30, 2006Chapter 6: First-Level Commands
Displaying SONET port status
Host> show port sonet
Usage
show port sonet
Parameter(s)
None.
Example(s)
Host> show port sonet
ATM_SCC> show port sonet
Slot Port Status Capacity Redundant Redundant
Conf Status
____ ______ ________ ___ ___________ ______
2 1 OK 155 working active
2 2 OK 155 protected not-active
ATM_SCC>
SG1-UM-8500-036-11
Chapter 6: First-Level CommandsJune 30, 2006
Displaying ATM Port Status
Host> show atm pvc
Usage
show atm pvc
Parameter(s)
None.
Example(s)
Host> show atm pvc
Name VPI VCI Slot Port Sub-port PCR Status
______ ____ ____ ____ ______ ________ ___ ______
none 0 32 2 1 1 155 UP
test 2 32 2 1 1 155 UP
test 2 33 2 1 1 155 UP
test 2 34 2 1 1 155 UP
test 2 35 2 1 1 155 UP
next 2 36 2 1 1 155 UP
next 2 37 2 1 1 155 UP
next 2 38 2 1 1 155 UP
Host>
6-12SG1-UM-8500-03
June 30, 2006Chapter 6: First-Level Commands
Displaying User Status
Host> show user
Usage
show [<cr>|<number>]
Parameter(s)
[<number>]
The line number of the user to be viewed.
Example(s)
Host> show users
Line Line User User Name IP Address Duration Calling
Type Type hh:mm:ss Number
____ ____ ____ __________ __________ ________ _______
52 Eth PPP status 155.226.20.50 00:01:00 0010A4C15AFB
Total number of Network connected lines: 1
ANet (Analog source) lines: 0, INet (ISDN source) lines: 0
Eth (Ethernet source) lines: 1
ATM (ATM source) lines: 0
EATM (ATM source) lines: 0
PPP (PPP source) lines: 1
Total number of Framed users: 1
PPP users: 1, MLP users: 0
Total number of tunnel switch users: 0
Total number of native IP users: 0
NIPP (radius-proxy triggered) users: 0
NIPD (dhcp-proxy triggered) users: 0
NIPI (ip triggered) users: 0
Host>
SG1-UM-8500-036-13
Chapter 6: First-Level CommandsJune 30, 2006
Host> show users 704
Line number: 702 Line type: ANet User type: PPP
User name: 0_220
IP address: 10.220.3.191, IP pool name: 1
Next Hop: 10.0.1.253
Tunnel ID(in): 4798 Tunnel Session ID(in): 21182 LAC source IP 10.0.1.64
Session duration/timeout: 00:00:39 / 17:59:21
Idle duration/timeout: 00:00:35 / 00:30:00
Slot: 0 Port: 1
Calling number: <N/A> Called number: 0
Input packets/Octets: 3 / 30,
Output packets/Octets: 3 / 42,
Used Data Quota: 0
PPP Native IP Pipe: Off
Redirect Gateway: <N/A> Accounting Type: Standard
User Group: 0 DHCP Server IP: <N/A>
Service name: Original-Service
Service duration: 00:00:40
Host>
6-14SG1-UM-8500-03
June 30, 2006Chapter 6: First-Level Commands
Displaying Routing Tables
Host> show ip-route
Use this command to display the configured routes.
Use this command to display the system administrators that are logged onto the system.
Parameter(s)
None.
Example(s)
Host> show telnet-users
Number User Level Duration Source
______ __________ ________ ______
1 Technician 00:01:07 Console
2 Technician 00:00:08 Network
Host>
SG1-UM-8500-036-15
Chapter 6: First-Level CommandsJune 30, 2006
Displaying System Parameters
Host> show system
Usage
show system
show system <load>
Parameter(s)
<load>
Calculates the throughput through each interface in Mbps.
Example(s)
Host> show system
Up-time: 1 Hours, 56 Minutes, 58 Seconds
Total number of network incoming calls: 702
Total number of network connected calls: 702
Current number of Network connected lines: 1
ANet (Analog source) lines: 1, INet (ISDN source) lines: 0
Eth (Ethernet source) lines: 0
ATM (ATM source) lines: 0
Ethernet Over ATM (EATM source) lines: 0
Current number of PPP (PPP source) lines: 0
Current number of connected Framed users: 1
PPP users: 1, MLP users: 0
Current number of connected native IP users: 0
Host>
6-16SG1-UM-8500-03
June 30, 2006Chapter 6: First-Level Commands
Host> show system load
Calculating load ...
Total current connected users: 0
Total sessions' capacity: 2000
System load: 0%
CPU usage: 1%
Interface 0/2
Throughput [5 sec. Avg.]: 0.0 Mbit/s In, 0.0 Mbit/sec Out
Total available throughput: 100 Mbit/s In, 100 Mbit/sec Out
Traffic Usage: In 0.0%, Out 0.0%
Interface 1/1
Throughput [6 sec. Avg.]: 0.0 Mbit/s In, 0.0 Mbit/sec Out
Total available throughput: 1000 Mbit/s In, 1000 Mbit/sec Out
Traffic Usage: In 0.0%, Out 0.0%
Interface 2/1
Throughput [6 sec. Avg.]: 0.0 Mbit/s In, 0.0 Mbit/sec Out
Total available throughput: 155 Mbit/s In, 155 Mbit/sec Out
Traffic Usage: In 0.0%, Out 0.0%
Host>
SG1-UM-8500-036-17
Chapter 6: First-Level CommandsJune 30, 2006
Displaying License Attributes
Host> show license
This command displays the system license information.
Usage
show license
Parameter(s)
None.
6-18SG1-UM-8500-03
June 30, 2006Chapter 6: First-Level Commands
Example(s)
Host> show license
Working license : permanent
Temp License Magic: T001001086
[CREATION]
DATE=December 22 2005 16:03:57
[VERSION]
MAJOR=10
[SN]
SNSOURCE=1
SNNUM=1
SN1=6046838
[MAGIC]
Magic String=C000000067
MaxAllowedDays=30
[OPTIONS]
Allow Maximum 500 Users=off
Allow Maximum 1000 Users=off
Allow Maximum 2000 Users=on
Allow Maximum 4000 Users=off
Gigabit Ethernet=on
ATM=on
Pre Paid=on
Bandwidth Control=on
Hierarchical Bandwidth Control=on
Customized Guided Entry=on
Dynamic COS=on
Differentiated Routing=on
SG1-UM-8500-036-19
Chapter 6: First-Level CommandsJune 30, 2006
Filter Redirection=on
Location Based Service=on
Service Selection=on
Native IP=on
Dynamic IP Changing=on
Application Awareness=on
MPLS=on
Native IP Roaming=on
Host>
6-20SG1-UM-8500-03
June 30, 2006Chapter 6: First-Level Commands
Displaying VRRP attributes
Host> show vrrp interface
Use this command to display the configured Virtual Router Redundancy Protocol (VRRP) status on the specified
interfaces.
Usage
show vrrp interface (<ethernet>|<vlan>) <slot number> <port number> <number>
Parameter(s)
(<ethernet>|<vlan>)
The interface will be either an Ethernet or VLAN interface.
<slot number>
Slot number; valid values are 0 to 3.
<port number>
Defines the port; valid values are 1 or 2.
<number>
Defines the Virtual Router ID number (VRID); valid values are 1 to 15.
Example(s)
For the master:
Host> show vrrp interface Ethernet 0\1
Ethernet 0\1 - Group 1
State is Master
Virtual IP address is 192.168.1.1
Master router is 192.168.1.2 (local)
Virtual MAC address is 00-00-5E-00-01-01
Advertisement interval is 1 seconds
Priority 254
Preemption mode: off
Host>
SG1-UM-8500-036-21
Chapter 6: First-Level CommandsJune 30, 2006
For the backup:
Host> show vrrp interface Ethernet 0\1
Ethernet 0\1 - Group 1
State is Backup
Virtual IP address is 192.168.1.1
Master router is 192.168.1.2
Virtual MAC address is 00-00-5E-00-01-01
Advertisement interval is 1 seconds
Priority 100
Preemption mode: on
Host>
Displaying active GRE and IP-in-IP tunnels
Host> show ip-tunnel
This command displays the active GRE and IP-in-IP tunnels in the system.
Usage
show ip-tunnel [gre | ip-in-ip [<remote endpoint Ip address> <tunnel direction>]]
Host> show ip-tunnel ip-in-ip 10.10.1.20 remote <cr>
Line Line User User-name IP address
Type Type
---- ---- ---- --------------- -------------- 2 Eth NIPI test1 212.168.1.4
5 Eth NIPI test2 212.168.1.5
56 Eth NIPI test3 212.168.1.6
Host>
SG1-UM-8500-036-23
Chapter 6: First-Level CommandsJune 30, 2006
Displaying show mpls-labels commands
Host> show mpls-labels
It displays the incoming labels binding received from the neighbors and the out-going label binding distributed by the
system. When no specific FEC is defined, the system shows all FECs.
Usage
Show mpls-labels <standard | vc> <out | in> [<FEC identifier>]
Parameter(s)
<standard | vc>
Standa rd labels are the first labels on the sta ck, while vc labels (tunne ls) ar e the second lable on the stack.
<out | in>
Lables that are out-going or incoming.
<FEC identifier>
It is the FEC (Forward Equivalence Class) identifier .
Note: The system default value is 0 (which means all FECs).
Example(s)
Standa rd in:
Host> show labels standard in
FEC ID IP destination FECLabelNext-HopInterface
1192.168.1.0/24 123876 10.0.1.8 Ethernet 1
2212.8.1.0/24 103410.0.1.3 Ethernet 1
Standa rd out:
Host> show labels standard out
FEC ID IP destination FECLabel
1192.168.1.0/24 123876
2212.8.1.0/24 1034
6-24SG1-UM-8500-03
June 30, 2006Chapter 6: First-Level Commands
VC in for Martini draft:
Host> show labels vc in
VC ID VC Type Group ID Label Tunnel Endpoint Upper stack FEC ID
1LAN0xc2010000123876192.0.1.81
2LAN0xc2010000123876192.0.1.81
1VLAN0xc20100011034212.1.3.42
1PPP0xc20100021035195.3.4.53
VC OUT for Martini draft:
Host> show labels vc OUT
VC ID VC TypeGroup IDLabelTunnel Endpoint
1 LAN 0xc2010000 123876 192.0.1.8
2 LAN 0xc2010000 123876 192.0.1.8
Standard in specific FEC lable:
Host> show labels in 192.168.1.0/24 <cr>
FECLabelNext-HopInterface
192.168.1.0/24 123876 10.0.1.8 Ethernet 1
SG1-UM-8500-036-25
Chapter 6: First-Level CommandsJune 30, 2006
Displaying show mpls l2transport vc commands
Host> show mpls l2transport vc
It shows confine redirected interface traffic through MPLS l2vpn tunnel based on Martini draft.
Example(s)
Host> show mpls l2transport vc
Dest address VC IDStatus Type
194.90.1.4 200UP redirect
194.90.1.4201 UP redirect
Displaying a list of available write commands
Host> write ?
This command shows the available write commands enabled on the SCC.
Host> ping -c 5 -i 5 -s 500 155.226.20.250
Press <Ctrl C> to abort.
508 bytes from 155.226.20.250:icmp_seq=1 ttl=63 time<20 ms
508 bytes from 155.226.20.250:icmp_seq=2 ttl=63 time<10 ms
508 bytes from 155.226.20.250:icmp_seq=3 ttl=63 time<10 ms
508 bytes from 155.226.20.250:icmp_seq=4 ttl=63 time<10 ms
508 bytes from 155.226.20.250:icmp_seq=5 ttl=63 time<20 ms
Host>
SG1-UM-8500-036-29
Chapter 6: First-Level CommandsJune 30, 2006
Using the reload command to restart the system
Host> reload non-graceful
Use the reload non-graceful command to reset the system and reload the software. Using this command will
terminate all sessions.
Usage
reload non-graceful
Parameter(s)
None.
Example(s)
Host> reload non-graceful
Resetting the system in 10 seconds...
6-30SG1-UM-8500-03
June 30, 2006Chapter 6: First-Level Commands
Clearing Users
Host> clear user
A specific user can be disconnected from the SG-1 by writing the clear user command followed by its line number.
Usage
clear user <line number>
Note: You can use the show user command to determine the list of connected users.
Note: If the user is a multi-link user , the following message will appear: Note that multi-link users
may have other lines that are still connected.
Parameter(s)
<line number>
The line number of the user to be cleared.
Example(s)
Host> clear user 22
Note that multi-link users may have other lines that are still connected
SG1-UM-8500-036-31
Chapter 6: First-Level CommandsJune 30, 2006
Using the Tr aceroute Command
Host> traceroute
Use the traceroute command to track the route a packet takes to a network host.
The IP address to which the trace is to be performed.
[ -h <number>]
The maximum number of hops to be attempted (max = 30).
[ -i <seconds>]
The max. number of seconds to wait for a response.
Example(s)
Host> traceroute 155.226.10.200
Press <Ctrl C> to abort.
1 < 20 ms < 10 ms < 10 ms 155.226.20.240
2 < 10 ms < 10 ms < 10 ms 155.226.248.14
3 < 10 ms < 10 ms < 10 ms 155.226.1.2
4 < 10 ms < 10 ms < 10 ms 155.226.10.200
Traceroute completed successfully
Host>
6-32SG1-UM-8500-03
June 30, 2006Chapter 6: First-Level Commands
Using the exit command
Host> exit
This command exits the user from the current configuration level. When used at the fir st level, the user is logged out
of the session.
Usage
exit
Parameter(s)
None.
Example(s)
Host> (config-debug)# exit
Host> (config)#
Host> (config)# exit
Host> exit
SG1-UM-8500-036-33
Chapter 6: First-Level CommandsJune 30, 2006
USING DEBUG MODE
This section provides information on the commands and options available in debug mode.
Switching to Debug Mode
Host> debug
Use the debug command at the first-level prompt (Host>) to switch the system to the second-level debug prompt:
Host(debug)#. This prompt indicates that the user is now in the second-level debug mode and has access to the
five second-level commands in the debug menu.
Usage
StepAction
1Use the show command to display memory, system and fragmentation information.
2The port sonet source-clock command determines timing configuration for the ATM port specified.
3At this level, the exit and end commands will return the user to the first configuration level.
4From the Host> prompt, enter the debug comma n d in the follo win g fo rm at :
debug
Parameter(s)
None.
Example(s)
Host(debug)# ?
show - Display debug parameters
port - Select a port to configure
port-ethernet - Port ethernet interface
radius-server - radius server command
clear - Clear arp table
exit - Exit current level
end - Return to first level
Host(debug)#
6-34SG1-UM-8500-03
June 30, 2006Chapter 6: First-Level Commands
Using the show command in debug mode
Host(debug)# show
Use the show command to display memory, system, and fragmentation information.
Usage
show [memory | system |log-modules | statistics | arp]
Parameter(s)
[memory]
Display memory allocation.
[system]
Display connection information.
[log-modules]
Display system log modules.
[statistics]
Display fragmentation information.
[arp]
Display ARP information table.
SG1-UM-8500-036-35
Chapter 6: First-Level CommandsJune 30, 2006
Example(s)
Host(debug)# show statistics fragmentation
Total number of packets that were fragmented: 0
Total number of packets that were reassembled: 0
Total number of upstream packets in which the MSS field was adjusted: 0
Total number of downstream packets in which the MSS field was adjusted: 0
Host(debug)#
Host(debug)# show system
Up-time: 4 Days, 20 Hours, 56 Minutes, 12 Seconds
Total number of:
Network incoming calls: 0
Network calls in which PPP was established: 0
Network calls in which PPP established via LCP options: 0
Network calls in which link was authenticated: 0
Network connected calls: 0
Current number of Network connected lines: 0
ANet (Analog source) lines: 0, INet (ISDN source) lines: 0
Eth (Ethernet source) lines: 0
ATM (ATM source) lines: 0
Ethernet Over ATM (EATM source) lines: 0
Current number of PPP (PPP source) lines: 0:
Current number of connected Framed users: 0
PPP users: 0, MLP users: 0
Current number of connected native IP users: 0
Total connected LNS tunnels: 0
Total connected PPPoE tunnels: 0
Total connected PPPoA tunnels: 0
Total connected LAC tunnels: 0
Maximum used of tunnel sessions: 0
Host(debug)#
6-36SG1-UM-8500-03
June 30, 2006Chapter 6: First-Level Commands
Host(debug)# show log-modules
Group Error Error Event Event Trace
Name Min Max Min Max
Default Max Error Level: 3
Default Max Event Level: 5
Default Trace Setting: Off
6-38SG1-UM-8500-03
June 30, 2006Chapter 6: First-Level Commands
show arp command
This command displays the arp table information.
Host(debug)# show arp
Usage
Show arp [<index><NextAddress>]
Parameter(s)
<index>
The interface on which this entry’s equivalence is effective. Numbers are 1 to 65,000.
<NextAddress>
This is the IP address corresponding to the media-dependent “physical address. It should be a legal IP address.
It clears the arp table entry (only dynamic entries), the clear arp specific, clears any entry except the static ones.
Note: when deleting a non-volatile arp entry the system might re-creates it as a dynamic entry.
Usage
Clear arp [arp-specific <ifindex><NetAddress>]
Parameter(s)
<ifindex>
This is the interface on which this entry’s equivalence is effective. Numbers are 1 to 65,000.
<NetAddress>
This is the IP address corresponding to the media-dependent “physical” address. It should be a legal IP address.
The port sonet source-clock command defines the sonet port source clock.
Usage
port sonet source-clock <slot> <port> [loop | free-running]
Parameter(s)
<slot>
Specify atm/sonet slot, 2 is the only value used since this command is only applicable to the ATM/SONET port.
<port>
ATM/SONET port 1 or 2.
[loop]
The transmit clock is derived from the clock source received on the same interface.
[free-running]
The transmit clock on the interface is delivered from the port adapter's local oscillator.
6-42SG1-UM-8500-03
June 30, 2006Chapter 6: First-Level Commands
Checking the system RADIUS interface
Host(debug)# radius-server check
This command checks the system RADIUS interface, by authenticating user-name and password the same wa y the
system authenticates a connected call (including retries and RADIUS redundancy).
This chapter describes the primary commands available at the second command level. For additional second level
commands, refer to Appendix B: Redirection Serve r .
Note: Some non-applicable information was removed from sample screens for ease of viewing.
Using the configure command
Use the configure terminal command at the first level prompt to switch the system to the seco nd-level configuration
prompt, Host(config)#. This indicates that the user is now in the second level configuration mode and has
access to the second level commands in the configuration menu. These commands change the parameters only in
RAM. Y ou can save a new configuration in the flash memory by returning to the first level prompt and using the write
memory command.
Note: Use the help facility to view a list of the second level configuration commands and their fu nctions by
typing ? immediately after the second level configuration prompt.
Using the write memory command following the use of the configure parameter will overwrite the
configuration loaded from the TFTP server .
Parameter(s)
[<network>]
Copies a previously saved configuration from a TFTP server to NVRAM.
[<ip address>]
The IP address of the TFTP server to which the running configuration will be written.
[<alpha numeric string>]
The filename of the running configuration to be saved.
[<terminal>]
Places the user in the second level command level.
SG1-UM-8500-037-1
Chapter 7: Second Level CommandsJune 30, 2006
Example(s)
Host> configure network 155.226.20.250 filename
Loading file ...
Preparing TFTP download...Done.
Starting the TFTP download....completed(downloaded size is 892 ).
Converting file ...
File loaded successfully
Host>
Host> configure terminal
Host(config)#
7-2SG1-UM-8500-03
June 30, 2006Chapter 7: Second Level Commands
BANNER COMMAND
Creating a Login Banner
You may create a greeting message or banner, to be displayed on the user's terminal when they log in. The banne r
may be a string of up to 32 alphanumeric characters.
To set "Welcome to SG-1" as a banner:
At the second level command prompt, type: banner Welcome to SG-1 (then press ENTER).
Configuring Banner command
Host(config)# banner command
Usage
Host(config)# banner <Alpha numeric string>
Parameter
<Alpha numeric string>
It is the Terminal greeting (maximum 32 characters).
Example
Host(config)# banner ADC
ETHERNET COMMANDS
This section contains instructions for configuring service for Gigabit Ethernet cards installed in a SCG1664A/D.
Configuring Gigabit Ethernet ports
Host(config)# interface ethernet
Use this command to configure service for Ethernet cards.
This is the interface slot number you want to configure.
<port number>
This is the physical port number you want to configure.
Example(s)
Host(config)# no interface Ethernet 0\1
SG1-UM-8500-037-5
Chapter 7: Second Level CommandsJune 30, 2006
Configuring Ethernet Redundancy
The system supports redundancy between 0\1 and 0\2 ethernet interface or between 1\1 or 1\2 Ethernet inter face.
The system, automatically while detects a malfunction in the working Ethernet (for example link down), switches to
the protecting (redundant) Ethernet interface.
Using the port-ethernet redundancy-enable command
Host(config)# port-ethernet redundancy-enable
Use this command to configure Ethernet port redundancy.
Note: The system should refuse to enable the Ethernet redundancy mode in case the protecting Ethernet
interface is not the associated redundant interface (0/2 to 0/1 and 1/2 to 1/1). It should indicate such kin d of
command failure to the system log and to the user interface (telnet/console).
Host(config) # port-ethernet redundancy-enable 0\1 0\2
Operation Error:
Protecting interface is not the associated redundant interface
Using the no port-ethernet redundancy-enable command
Host(config)# no port-ethernet redundancy-enable
This command disables redundancy between the two Ethernet interfaces.
Usage
no port-ethernet redundancy-enable <working slot>\<working port> <protecting slot>
\<protecting port>
Parameter(s)
<working slot>
This is the working Ethernet interface slot; valid values include 0 or 1.
<working port>
This is the working Ethernet interface physical port; valid values include 1 or 2.
<protecting slot>
This is the protecting Ethernet interface slot; valid values include 0 or 1.
<protecting port>
This is the protecting Ethernet interface physical port; valid values inclu de 1 or 2.
Example(s)
Host(config)# no port-ethernet redundancy-enable 1\1 1\2
SG1-UM-8500-037-7
Chapter 7: Second Level CommandsJune 30, 2006
LOOPBACK COMMANDS
Configuring interface loopback
Host(config)# interface loopback
This command enables the administrator to either add or change the loopback interface.
Note: The loopback interface can be part of the IP route lines/commands.
Note: When assigning the loopback interface an address that is in the subnet of one of the system
interfaces the system should ignore the command and indicates the reason.
Host(config)# interface loopback 1 192.168.3.4 255.255.255.0
The loopback address is not valid.
Using the no interface loopback command
Host(config)# no interface loopback
This command deletes the loopback interface.
Usage
no interface loopback <interface number>
Parameter(s)
<interface number>
This is the loopback interface number to be deleted; valid range is 1 to 200.
Example(s)
Host(config)# no interface loopback 1
Note: The system should refuse to delete a loopback interface if an application source-interface is
configured to the loopback.
VLAN COMMANDS
Configuring the VLAN
Host(config)# interface vlan
A virtual (or logical) LAN (called a VLAN) is a local area network with a definition that maps workstations on some
basis other than geographic location (for example, by PVC, type of user, or primary application). VLANs are likely to
be used with Gigabit Ethernet networks. The SG-1 supports virtual LAN as specified in the IEEE 8 02.1Q standard . It
allows the LAN to be divided into several, disparate LANs and to serve each virtual LAN differently. The SG-1
handles both incoming and outgoing VLAN traffic and supports the full VLAN range (2 - 4095).
The main benefit of using a VLAN is it enables the support of multiple LANs in the same physical interface.
The following command also enables to congigure VLAN on Gigabit Ethernet interface, and also supports QinQ
VLAN interface identifier; valid number range is 1 to 4095.
<IP address>
IP address for the VLAN.
<mask>
Subnet mask for the VLAN.
[VLAN name]
It is a unique alphanumeric name assigned to the VLAN (it is 1 ÷ 64 alphabetic characters).
<start ID>
This is the start QinQ VLAN ID; valid number range is 2 to 4095.
<range>
This is the QinQ VLAN range; valid number range is 1 to 4095.
This command deletes a VLAN definition for the Ethernet interface.
Usage
no interface vlan <slot number> \ <port number> < id>
Parameter(s)
<slot number>
This is the slot number of the physical card.
<port number>
This is the port number of the card (1 or 2).
<id>
This is the VLAN interface identifier; valid number range is 1 to 4095.
Example(s)
Host(config)# no vlan 3 1\1
AUTHENTICATION COMMANDS
Using the password pre-authentication command
Host(config)# password pre-authentication
This command defines the system pre-authentication password.
Usage
password pre-authentication <password>
For <password> options, see Table 4-1, “Default Username/Password,” on page 4-1.
SG1-UM-8500-037-11
Chapter 7: Second Level CommandsJune 30, 2006
Setting the default-service authentication mode
Host(config)# def-service-auth
When using authentication by username and password two protocols are available:
• PAP (Password Authentication Protocol)–the most basic form of authentication. In PAP, a user's name and
password are transmitted over the network and comp ared to a table of name-p assword p airs. The main disadvantage of PAP is that both the username and password are transmitted without encryption.
• CHAP (Challenge Handshake Authentication Protocol)–a type of authentication in which the network server
sends the client program a key to encrypt the username and password. This enables the username and p assword to be transmitted in encrypted form to protect them against eavesdroppers.
The def-service-auth command is used to set the type of authentication for PPP connections in the default step.
Five options may be typed on the command line after this command, as shown in Table 7-4.
T able 7-4 . def-service- auth comma nd parameters
ParameterDescription
no-serviceDisables authentication in the default step, even if authentication by caller ID is
enabled.
ppp-noneAllows PPP access without authentication in the final step if authentication by
caller ID was enabled.
ppp-papAuthentication in the default step by the PAP authentication method, even if
authentication by caller ID was enabled.
ppp-chapAuthentication in the default step by the CHAP authentication method, even if
authentication by caller ID was enabled.
auto-select auth-retry on / offEnables PPP authentication by PAP, CHAP or terminal + enables 3 more
retries through an after dialing window if the user inserted wrong username or
password (auth-retry on).
Example(s):
Host(config)# def-service-auth ppp-auto
7-12SG1-UM-8500-03
June 30, 2006Chapter 7: Second Level Commands
Changing domain authentication settings
Host(config)# domain-authentication
In a SG-1 system, virtual private tunnels (VPNs) are created upon RADIUS request. The tunneling service is always
enabled within the SG-1 (there is no configuration command for turning it on or off). The domain-authentication
configuration command is used to enable and disable authentication of the user's domain.
The domain-authentication separator command defines a list of characters that will be regar ded as separators within
usernames. The SG-1 can then extract the domain name by discarding the portion of the username before the
separator. This command also enables the domain authentication process. The valid separators are !, @, #, $, %,
and -.
To define @ and # as separators and enable domain authentication, type:
domain-authentication separator @# (then press ENTER).
To turn off the domain authentication process, type:
no domain-authentication (then press ENTER).
Host(config)#
• The authentication web-auth-method command defines the system authentication method to be used in WEB
authentication (when authenticating a user via WEB authentication process).
• The system default value is PAP. When configured to its default values the system does not present it in write
terminal command.
• The authentication methods are PAP or CHAP. The system should authenticate a WEB authenticated user
based on this configuration. When CHAP is configured the system should process all necessary attributes for
CHAP authentication (produce challenge, calculate the response based on the challenge and the password
and communicate with the RADIUS as defined in the RFC).
Usage:
authentication web-auth-method [<PAP | CHAP>]
Parameter(s)
<PAP | CHAP>
Set the system WEB authentication method.
PAP – Authenticate the user using PAP
CHAP – Authenticate the user using CHAP
authentication web-auth-method
SG1-UM-8500-037-13
Chapter 7: Second Level CommandsJune 30, 2006
Example 1:
Host(config)# authentication web-auth-method CHAP <cr>
Host(config)# end <cr>
Host # write terminal.
authentication web-auth-method CHAP
...
The “no” command set the system web authentication mode to PAP.
Host(config)# no authentication web-auth-method
Example 2:
Host(config)# no authentication web-auth-method <cr>
Host(config)# end <cr>
Host # write terminal
...
ATM COMMANDS
This section describes the procedure for configuring an ATM PVC (Permanent Virtua l Circuit). The following
requirements must be met before a circuit can be created.
• The SONET/SDH port must be configured.
• The interface must be configured as a working port.
• The sub-interface must be type PPP.
Using the port sonet command
Host(config)# port sonet
Use this command to configure the ATM card port (it has two ports) to reflect whether the physical interface is
SONET or SDH.
Note: Setting the interface type for one port will force the other port to the same type. This occurs because
the second port is used for implementing Automatic Protection Switching (APS), where the re dundant por t
must have the same interface type as the primary port.
7-14SG1-UM-8500-03
June 30, 2006Chapter 7: Second Level Commands
Usage
port sonet <slot> \ <port> type (OC3c|STM1)
Parameter(s)
<slot>
The line card slot to be configured. Use the value 2 to indicate the configuration of the SONET/SDH port.
<port>
The line card port to be configured (either 1 or 2).
(OC3c|STM)
The type of physical interface:
• OC3c–the North American standard for 155.52 Mbps data over optical fiber.
• STM–the standard for 155.52 Mbps data over optical fiber outside of North America.
Example(s)
Host(config)# port sonet 2 \ 1 type OC3C
Updated item
Host(config)#
Configuring SONET/SDH port redundancy
Host(config)# port sonet redundancy-enable
SG1 systems use APS to switch ATM traffic from the main SONET/SDH channel (the working channel) to a
secondary SONET/SDH channel (the protection channel on the same card) when a failur e occurs. This redu ndancy
enables service to continue despite failures on the working SONET/SDH channel. Refer to the System Technology
and Applications Overview for an explanation of how an APS works.
<ip address>Interface IP addressIP address
<mask>Interface maskMask
<loopback interface
number>
<1500 | 1544>MTU value1500, 1544
Sub-interface typeppp - supporting PPPoE and PPPoA
routed - routing capability only (IP over ATM)
routed-bridge - bridge and routing capability (IP
over Ethernet)
routed-bridge-ppp - bridge and routing
capability (PPP and IP over Ethernet
simultaneously)
(Default value: ppp)
Network topology typepoint-to-point
point-to-multipoint
Loopback interface numberNumber
Example(s)
Host(config)# interface atm 2\1\1 <cr>
Host(config)# interface atm 2\1\1 type routed point-to-point ip 192.168.1.2
255.255.255.0 <cr>
Host(config)# interface atm 2\1\1 type routed-bridge point-to-point loopback 1 <cr>
Host(config)# no interface atm
After this command is run, the system deletes the ATM interface, as well as all of the enabled applications for this
interface (such as, PPPoE, PVC, PPPoA, etc.).
Usage
no interface atm <slot number>\<port number>\<sub-interface number>
For parameters and examples, refer to Table 7-6.
SG1-UM-8500-037-19
Chapter 7: Second Level CommandsJune 30, 2006
Configuring a single PVC
Host(config)# atm pvc
This command creates a permanent virtual circuit (PVC) on an ATM interface.