No part of this manual may be reproduced or transmitted in any form or by any means without prior written
consent of New H3C Technologies Co., Ltd.
Trademarks
H3C, , H3CS, H3CIE, H3CNE, Aolynk, , H
3
Care, , IRF, NetPilot, Netflow, SecEngine,
SecPath, SecCenter, SecBlade, Comware, ITCMM and HUASAN are trademarks of New H3C Technologies
Co., Ltd.
All other trademarks that may be mentioned in this manual are the property of their respective owners
Notice
The information in this document is subject to change without notice. Every effort has been made in the
preparation of this document to ensure accuracy of the contents, but all statements, information, and
recommendations in this document do not constitute the warranty of any kind, express or implied.
Preface
Convention
Description
Convention
Description
This command reference describes the configuration commands for PPP, HDLC, L2TP, and so on.
This preface includes the following topics about the documentation:
• Audience.
• Conventions
• Obtaining documentation
• Technical support
• Documentation feedback
Audience
This documentation is intended for:
• Network planners.
• Field technical support and servicing engineers.
• Network administrators working with the H3C MSR Router series.
Conventions
The following information describes the conventions used in the documentation.
Command conventions
Boldface Bold
Italic
[ ] Square brackets enclose syntax choices (keywords or arguments) that are optional.
{ x | y | ... }
[ x | y | ... ]
{ x | y | ... } *
[ x | y | ... ] *
&<1-n>
# A line that starts with a pound (#) sign is comments.
GUI conventions
text represents commands and keywords that you enter literally as shown.
Italic text represents arguments that you replace with actual values.
Braces enclose a set of required syntax choices separated by vertical bars, from which
you select one.
Square brackets enclose a set of optional syntax choices separated by vertical bars,
from which you select one or none.
Asterisk marked braces enclose a set of required syntax choices separated by vertical
bars, from which you select a minimum of one.
Asterisk marked square brackets enclose optional syntax choices separated by vertical
bars, from which you select one choice, multiple choices, or none.
The argument or keyword and argument combination before the ampersand (&) sign
can be entered 1 to n times.
Boldface
>
Window names, button names, field names, and menu items are in Boldface. For
example, the
Multi-level menus are separated by angle brackets. For
New User
window opens; click OK.
Convention
Description
example,
File
>
Create
>
Folder
.
Symbols
Convention
Description
IMPORTANT:
TIP:
Convention
Description
T
T
T
T
WARNING!
CAUTION:
NOTE:
Network topology icons
An alert that calls attention to important information that if not understood or followed
can result in personal injury.
An alert that calls attention to important information that if not understood or followed
can result in data loss, data corruption, or damage to hardware or software.
An alert that calls attention to essential information.
An alert that contains additional or supplementary information.
An alert that provides helpful information.
Represents a generic network device, such as a router, switch, or firewall.
Represents a routing-capable device, such as a router or Layer 3 switch.
Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that
supports Layer 2 forwarding and other Layer 2 features.
Represents an access controller, a unified wired-WLAN module, or the access
controller engine on a unified wired-WLAN switch.
Represents an access point.
Wireless terminator unit.
Wireless terminator.
Represents a mesh access point.
Represents omnidirectional signals.
Represents directional signals.
Represents a security product, such as a firewall, UTM, multiservice security
gateway, or load balancing device.
Represents a security module, such as a firewall, load balancing, NetStream, SSL
VPN, IPS, or ACG module.
Examples provided in this document
Examples in this document might use devices that differ from your device in hardware model,
configuration, or software version. It is normal that the port numbers, sample output, screenshots,
and other information in the examples differ from what you have on your device.
Obtaining documentation
To a ccess the most up-to-date H3C product documentation, go to the H3C website at
http://www.h3c.com.hk
To obtain information about installation, configuration, and maintenance, click
http://www.h3c.com.hk/Technical_Documents
To obtain software version information such as release notes, click
http://www.h3c.com.hk/Software_Download
Technical support
service@h3c.com
http://www.h3c.com.hk
Documentation feedback
You can e-mail your comments about product documentation to info@h3c.com.
We appreciate your comments.
Contents
PPP and MP commands ···································································· 1
display ip pool [ pool-name ] [ group group-name ]
1
Field
Description
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
pool-name: Specifies a PPP address pool by its name, a case-sensitive string of 1 to 31 characters.
groupgroup-name: Displays PPP address pools in a group specified by its name, a case-sensitive
string of 1 to 31 characters.
Usage guidelines
If you do not specify any parameters, the command displays brief information about all PPP address
pools.
If you specify an address pool, the command displays detailed information about the specified PPP
address pool.
Examples
# Display brief information about all PPP address pools.
<Sysname> display ip pool
Group name: a
Pool name Start IP address End IP address Free In use
aaa1 1.1.1.1 1.1.1.5 5 0
aaa2 1.1.1.6 1.1.1.10 5 0
Group name: b
Pool name Start IP address End IP address Free In use
bbb 1.1.2.1 1.1.2.5 4 1
2.2.2.1 2.2.2.5 5 0
# Display brief information about the PPP address pools in group a.
<Sysname> display ip pool group a
Group name: a
Pool name Start IP address End IP address Free In use
aaa1 1.1.1.1 1.1.1.5 5 0
aaa2 1.1.1.6 1.1.1.10 5 0
# Display detailed information about PPP address pool bbb.
<Sysname> display ip pool bbb
Group name: b
Pool name Start IP address End IP address Free In use
bbb 1.1.2.1 1.1.2.5 4 1
2.2.2.1 2.2.2.5 5 0
In use IP addresses:
IP address Interface
1.1.2.1 POS2/2/0
Table 1 Command output
Free Number of free IP addresses.
In use Number of IP addresses that have been assigned.
2
Field
Description
In use IP addresses Information about the IP addresses that have been assigned.
Interface Local interface that requests the IP address for the peer interface.
Related commands
ip pool
display ppp access-user
Use display ppp access-user to display PPP user information.
interface interface-type interface-number: Displays brief information about PPP users on the
specified interface.
count: Displays the total number of PPP users that match the specified criteria.
ip-address ip-address: Displays detailed information about the PPP user specified by its IP address.
ipv6-address ipv6-address: Displays detailed information about the PPP user specified by its IPv6
address.
username user-name: Displays detailed information about the PPP user specified by its username,
a case-sensitive string of 1 to 80 characters.
user-type: Displays brief information about online users of the specified type.
lac: Displays brief information about L2TP users for an LAC.
lns: Displays brief information about L2TP users for an LNS.
pppoa: Displays brief information about PPPoA users.
pppoe: Displays brief information about PPPoE users.
Usage guidelines
Brief information about a PPP user includes the following:
• Brief name of the VA interface.
• Username.
• MAC address.
• IPv4 address, IPv6 address, or IPv6 prefix of the PPP user.
Detailed information about a PPP user includes the following:
• Brief name of the VA interface.
• User ID.
3
Field
Description
• Username.
• Authentication information.
• Uplink and downlink traffic.
• Access start time of the PPP user.
Examples
# Display brief information about PPP users on GigabitEthernet 1/0/1.
rtp: Displays IPHC RTP header compression statistics.
tcp: Displays IPHC TCP header compression statistics.
interface interface-type interface-number: Specifies an interface by its type and number. If you do
not specify this option, the command displays IPHC statistics on all interfaces.
Usage guidelines
When IPHC applies to an MP link:
•If an MP template is used, such as a VT interface or a dialer interface, the associated VA
interface performs IPHC. You can view the compression information on the VA interface.
•If an MP-group interface is used, the MP-group interface performs IPHC. You can view the
compression information on the MP-group interface.
When IPHC applies to a normal PPP link, the physical interface performs IPHC. You can view the
compression information on the physical interface.
Use ip address ppp-negotiate to enable IP address negotiation on an interface, so that the
interface can accept the IP address allocated by the server.
Use undo ip address ppp-negotiate to restore the default.
Syntax
ip address ppp-negotiate
undo ip address ppp-negotiate
Number of connections.
• Rx—Number of connections that the receiver can decompress.
• Tx—Number of connections that the sender can compress.
• Five-Minute-Miss—Number of search failures within the last 5
minutes.
•Max-Miss—Maximum number of search failures within 5
minutes.
9
Default
IP address negotiation is disabled on an interface.
Views
Interface view
Predefined user roles
network-admin
Usage guidelines
If you execute the ip address ppp-negotiate and ip address commands multiple times, the most
recent configuration takes effect.
Examples
# Enable IP address negotiation on Serial 2/1/0.
<Sysname> system-view
[Sysname] interface serial 2/1/0
[Sysname-Serial2/1/0] ip address ppp-negotiate
Related commands
ip address (Layer 3—IP Services Command Reference)
remote address
ip pool
Use ippool to configure a PPP address pool.
Use undo ip pool to remove a PPP address pool or an IP address range of the PPP address pool.
Syntax
ip pool pool-name start-ip-address [ end-ip-address ] [ group group-name ]
undo ip pool pool-name [ start-ip-address [ end-ip-address ] ]
Default
No PPP address pool is configured.
Views
System view
Predefined user roles
network-admin
Parameters
pool-name: Specifies a name for the PPP address pool to be created, a case-sensitive string of 1 to
31 characters.
start-ip-address [ end-ip-address ]: Specifies an IP address range. If you do not specify
the end-ip-address argument, the PPP address pool has only the start IP address.
groupgroup-name: Specifies a group by its name to which the PPP address pool belongs. The
group name is a c ase-sensitive string of 1 to 31 characters. If you do not specify this option, the
group name is default (the default group).
Usage guidelines
The system supports multiple address spaces that each correspond to a VPN instance. The same IP
addresses can exist in different address spaces.
10
Each address space is represented by a group. One group can contain multiple PPP address pools,
but one PPP address pool can belong to only one group.
One PPP address pool can contain multiple IP address ranges. You can execute this command
multiple times to specify multiple IP address ranges for a PPP address pool. A PPP address pool can
contain a maximum of 65535 IP addresses, and so can an IP address range.
IP address ranges in different groups can be overlapping, but those in the same group cannot.
Changes to a PPP address pool do not affect assigned IP addresses. For example, if you delete a
PPP address pool from which an IP address has been assigned, the IP address can still be used.
When assigning IP address to users through a PPP address pool, make sure the PPP address pool
excludes the gateway IP address of the PPP address pool.
Examples
# Configure PPP address pool aaa that contains IP addresses 129.102.0.1 through 129.102.0.10 for
group a.
<Sysname> system-view
[Sysname] ip pool aaa 129.102.0.1 129.102.0.10 group a
Related commands
display ip pool
ip pool gateway
Use ippool gateway to configure a gateway address for a PPP address pool.
Use undo ip pool gateway to remove the gateway address for the specified PPP address pool.
Syntax
ip pool pool-name gateway ip-address [ vpn-instance vpn-instance-name ]
undo ip pool pool-name gateway
Default
A PPP address pool is not configured with a gateway address.
Views
System view
Predefined user roles
network-admin
Parameters
pool-name: Specifies an existing PPP address pool by its name, a case-sensitive string of 1 to 31
characters.
ip-address: Specifies a gateway address for the PPP address pool.
vpn-instance vpn-instance-name: Specifies an existing MPLS L3VPN instance by its name, a
case-sensitive string of 1 to 31 characters. If you do not specify this option, the specified gateway
belongs to the public network.
Usage guidelines
The IP pool gateway setting takes precedence over the DHCP pool gateway setting.
An interface on a BRAS must have an IP address before it can assign an IP address from a PPP or
DHCP address pool to a client. This command enables interfaces that have no IP address to use a
gateway address for IPCP negotiation and address allocation.
11
When you configure a gat eway address for a P PP address pool, follow these restrictions and
guidelines:
•If you also specify an IP address for an interface, the interface uses its own IP address to
perform IPCP negotiation.
•You can specify only one gateway address for a PPP address pool. Different PPP address
pools must have different gateway addresses (different combinations of
and vpn-instance-name).
•You can specify any gateway address for a PPP address pool.
Examples
# Specify gateway address 1.1.1.1 and VPN instance test for PPP address pool aaa.
<Sysname> system-view
[Sysname] ip pool aaa gateway 1.1.1.1 vpn-instance test
Related commands
ip pool
link-protocol ppp
Use link-protocol ppp to enable PPP encapsulation on an interface.
Syntax
ip-address
link-protocol ppp
Default
PPP encapsulation is enabled on all interfaces except Ethernet, VLAN, and ATM interfaces.
Views
Interface view
Predefined user roles
network-admin
Examples
# Enable PPP encapsulation on Serial 2/1/0.
<Sysname> system-view
[Sysname] interface serial 2/1/0
[Sysname-Serial2/1/0] link-protocol ppp
nas-port-type
Use nas-port-type to configure the nas-port-type attribute on a VT interface.
Use undo nas-port-type to restore the default.
The nas-port-type attribute is determined by the service type and link type of the PPP user, as shown
in Table 5.
12
Service type
Link type
Nas-port-type attribute
Table 5 Default nas-port-type attribute
PPPoE
PPPoA Any
L2TP Any
Views
VT interface view
Predefined user roles
network-admin
Parameters
802.11: Specifies IEEE 802.11. The code value is 19.
adsl-cap: Specifies asymmetric DSL, Carrierless Amplitude Phase. The code value is 12.
adsl-dmt: Specifies asymmetric DSL, Discrete Multi-Tone. The code value is 13.
async: Specifies async. The code value is 0.
cable: Specifies cable. The code value is 17.
ethernet: Specifies Ethernet. The code value is 15.
g.3-fax: Specifies G.3 Fax. The code value is 10.
Layer 3 virtual Ethernet interface
Other interfaces
xdsl
ethernet
xdsl
virtual
hdlc: Specifies HDLC Clear Channel. The code value is 7.
idsl: Specifies ISDN Digital Subscriber Line. The code value is 14.
isdn-async-v110: Specifies ISDN Async V.110. The code value is 4.
isdn-async-v120: Specifies ISDN Async V.120. The code value is 3.
isdn-sync: Specifies ISDN Sync. The code value is 2.
piafs: Specifies PHS Internet Access Forum Standard. The code value is 6.
sdsl: Specifies symmetric DSL. The code value is 11.
sync: Specifies sync. The code value is 1.
virtual: Specifies virtual. The code value is 5.
wireless-other: Specifies wireless–other. The code value is 18.
x.25: Specifies X.25. The code value is 8.
x.75: Specifies X.75. The code value is 9.
xdsl: Specifies Digital Subscriber Line of unknown type. The code value is 16.
Usage guidelines
The nas-port-type attribute is used for RADIUS authentication and accounting. For more information
about the nas-port-type attribute, see RFC 2865.
Examples
# Set the nas-port-type attribute to sync for Virtual-Template 1.
Use ppp accm to set the ACCM value sent to the peer on an interface.
Use undo ppp accm to restore the default.
Syntax
ppp accm hex-number
undo ppp accm
Default
The ACCM value sent to the peer is 0x000A0000 on an interface.
Views
Interface view
Predefined user roles
network-admin
Parameters
hex-number: Specifies an ACCM value in hexadecimal format, in the range of 0 to 0xFFFFFFFF.
Usage guidelines
ACCM negotiation only applies to asynchronous links.
Examples
# Set the ACCM value sent to the peer to 0x01010101 on Serial 2/1/0.
<Sysname> system-view
[Sysname] interface serial 2/1/0
[Sysname-Serial2/1/0] ppp accm 01010101
ppp account-statistics enable
Use ppp account-statistics enable to enable PPP accounting on an interface.
Use undo ppp account-statistics enable to disable PPP accounting on an interface.
acl: Specifies an ACL to match traffic. If no ACL is specified, the device generates statistics for all
PPP traffic.
acl-number: Specifies an ACL by its number in the range of 2000 to 3999, where:
14
• 2000 to 2999 are numbers for basic IPv4 and IPv6 ACLs.
• 3000 to 3999 are numbers for advanced IPv4 and IPv6 ACLs.
If the specified ACL number corresponds to an IPv4 ACL and an IPv6 ACL, both ACLs take effect.
nameacl-name: Specifies an ACL by its name, a case-insensitive string of 1 to 63 characters that
start with an alphabetical character. To avoid confusion, do not use all as an ACL name.
Examples
# Enable PPP accounting on Serial 2/1/0.
<Sysname> system-view
[Sysname] interface serial 2/1/0
[Sysname-Serial2/1/0] ppp account-statistics enable
ppp acfc local-request
Use ppp acfc local-request to configure an interface to send ACFC requests by including the ACFC
option in outbound LCP negotiation requests.
Use undo ppp acfc local-request to restore the default.
chap: Uses CHAP authentication.
ms-chap: Uses MS-CHAP authentication.
ms-chap-v2: Uses MS-CHAP-V2 authentication.
pap: Uses PAP authentication.
call-in: Authenticates the call-in users only. This keyword can be configured when the local end acts
as the receiving end of DDR calls. For more information about DDR, see Layer 2
Configuration Guide.
domain isp-name: Specifies the ISP domain name for authentication, a case-insensitive string of 1
to 255 characters.
defaultenableisp-name: Specifies the default ISP domain name for authentication, a
case-insensitive string of 1 to 255 characters.
—
WAN Access
Usage guidelines
PPP authentication includes the following categories:
• PAP—Two-way handshake authentication. The password is in plain text or cipher text.
• CHAP—Three-way handshake authentication. The password is in plain text or cipher text.
• MS-CHAP—Three-way handshake authentication. The password is in cipher text.
• MS-CHAP-V2—Three-way handshake authentication. The password is in cipher text.
16
You can configure multiple authentication modes.
In any PPP authentication mode, AAA determines whether a us er can pass the authentication
through a l ocal authentication database or an AAA server. For more information about AAA
authentication, see Security Configuration Gui de.
If you configure the ppp authentication-mode command with the domain keyword specified, you
must perform the following tasks:
• Use the specified ISP domain to authenticate the peer.
• Use a PPP address pool associated with this ISP domain for address allocation (if necessary).
You can use the display domain command to display the domain configuration.
The system can obtain ISP domains through multiple ways during user authentication. The system
chooses one of the following ISP domains for authentication in descending priority order:
•ISP domain specified by the domain isp-name option. Use a PPP address pool associated with
this ISP domain for address allocation (if necessary). You can use the display domain
command to display the domain configuration.
•ISP domain contained in the username. If the ISP domain does not exist on the local device, the
user's access request is denied.
• ISP domain specified by the default enable isp-name option.
• Default ISP domain in the system. You can use the domain default command to configure the
default ISP domain. If no default ISP domain is configured, the default ISP domain (system) is
used.
For authentication on a dialup interface, configure authentication on both the physical interface and
the dialer interface. When a physical interface receives a D DR call request, it first initiates PPP
negotiation and authenticates the dial-in user. Then it passes the call to the upper layer protocol.
Examples
# Configure Serial 2/1/0 to authenticate the peer by using PAP.
<Sysname> system-view
[Sysname] interface serial 2/1/0
[Sysname-Serial2/1/0] ppp authentication-mode pap
# Configure Serial 2/1/0 to authenticate the peer by using PAP, CHAP, and MS-C H A P.
<Sysname> system-view
[Sysname] interface serial 2/1/0
[Sysname-Serial2/1/0] ppp authentication-mode pap chap ms-chap
Related commands
domain default (Security Command Reference)
local-user (Security Command Refere nce )
ppp chap password
ppp chap user
ppp pap local-user
ppp chap password
Use ppp chap password to set the password for CHAP authentication on an interface.
Use undo ppp chap password to restore the default.
Syntax
ppp chap password { cipher | simple } string
17
undo ppp chap password
Default
No password is set for CHAP authentication on an interface.
Views
Interface view
Predefined user roles
network-admin
Parameters
cipher: Specifies a password in encrypted form.
simple: Specifies a password in plaintext form. For security purposes, the password specified in
plaintext form will be stored in encrypted form.
string: Specifies the password. Its plaintext form is a case-sensitive string of 1 to 255 characters. Its
encrypted form is a case-sensitive string of 1 to 97 characters.
Examples
# Set the password for CHAP authentication to plaintext password sysname on Serial 2/1/0.
<Sysname> system-view
[Sysname] interface serial 2/1/0
[Sysname-Serial2/1/0] ppp chap password simple sysname
Related commands
ppp authentication-mode chap
ppp chap user
Use ppp chap user to set the username for CHAP authentication on an interface.
Use undo ppp chap user to restore the default.
Syntax
ppp chap user username
undo ppp chap user
Default
The username for CHAP authentication is null on an interface.
Views
Interface view
Predefined user roles
network-admin
Parameters
username: Specifies the username for CHAP authentication, a case-sensitive string of 1 to 80
characters. The username is sent to the peer for the local device to be authenticated.
Usage guidelines
To pass CHAP authentication, the username/password of one side must be the local
username/password on the peer.
18
Loading...
+ 359 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.