H3C MSR810-LUS, MSR810-LM-HK, MSR810-W, MSR2600-10-X1, MSR810-W-DB Command Reference Manual

...
H3C MSR Router Series
Document version: 6W200-20170608
Software version: MSR-CMW710-R0605
Comware 7 Layer 2 - WAN Access
Command Reference
Copyright © 2017, New H3C Technologies Co., Ltd. and its licensor s
All rights reserved
No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of New H3C Technologies Co., Ltd.
Trademarks
H3C, , H3CS, H3CIE, H3CNE, Aolynk, , H
3
Care, , IRF, NetPilot, Netflow, SecEngine, SecPath, SecCenter, SecBlade, Comware, ITCMM and HUASAN are trademarks of New H3C Technologies Co., Ltd.
All other trademarks that may be mentioned in this manual are the property of their respective owners
Notice
The information in this document is subject to change without notice. Every effort has been made in the preparation of this document to ensure accuracy of the contents, but all statements, information, and recommendations in this document do not constitute the warranty of any kind, express or implied.

Preface

Convention
Description
Convention
Description
This command reference describes the configuration commands for PPP, HDLC, L2TP, and so on.
This preface includes the following topics about the documentation:
Audience.
Conventions
Obtaining documentation
Technical support
Documentation feedback

Audience

This documentation is intended for:
Network planners.
Field technical support and servicing engineers.
Network administrators working with the H3C MSR Router series.

Conventions

The following information describes the conventions used in the documentation.

Command conventions

Boldface Bold
Italic
[ ] Square brackets enclose syntax choices (keywords or arguments) that are optional.
{ x | y | ... }
[ x | y | ... ]
{ x | y | ... } *
[ x | y | ... ] *
&<1-n>
# A line that starts with a pound (#) sign is comments.

GUI conventions

text represents commands and keywords that you enter literally as shown.
Italic text represents arguments that you replace with actual values.
Braces enclose a set of required syntax choices separated by vertical bars, from which you select one.
Square brackets enclose a set of optional syntax choices separated by vertical bars, from which you select one or none.
Asterisk marked braces enclose a set of required syntax choices separated by vertical bars, from which you select a minimum of one.
Asterisk marked square brackets enclose optional syntax choices separated by vertical bars, from which you select one choice, multiple choices, or none.
The argument or keyword and argument combination before the ampersand (&) sign can be entered 1 to n times.
Boldface
>
Window names, button names, field names, and menu items are in Boldface. For example, the
Multi-level menus are separated by angle brackets. For
New User
window opens; click OK.
Convention
Description
example,
File
>
Create
>
Folder
.

Symbols

Convention
Description
IMPORTANT:
TIP:
Convention
Description
T
T
T
T
WARNING!
CAUTION:
NOTE:

Network topology icons

An alert that calls attention to important information that if not understood or followed can result in personal injury.
An alert that calls attention to important information that if not understood or followed can result in data loss, data corruption, or damage to hardware or software.
An alert that calls attention to essential information.
An alert that contains additional or supplementary information.
An alert that provides helpful information.
Represents a generic network device, such as a router, switch, or firewall.
Represents a routing-capable device, such as a router or Layer 3 switch.
Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that supports Layer 2 forwarding and other Layer 2 features.
Represents an access controller, a unified wired-WLAN module, or the access controller engine on a unified wired-WLAN switch.
Represents an access point.
Wireless terminator unit.
Wireless terminator.
Represents a mesh access point.
Represents omnidirectional signals.
Represents directional signals.
Represents a security product, such as a firewall, UTM, multiservice security gateway, or load balancing device.
Represents a security module, such as a firewall, load balancing, NetStream, SSL VPN, IPS, or ACG module.

Examples provided in this document

Examples in this document might use devices that differ from your device in hardware model, configuration, or software version. It is normal that the port numbers, sample output, screenshots, and other information in the examples differ from what you have on your device.

Obtaining documentation

To a ccess the most up-to-date H3C product documentation, go to the H3C website at
http://www.h3c.com.hk
To obtain information about installation, configuration, and maintenance, click
http://www.h3c.com.hk/Technical_Documents
To obtain software version information such as release notes, click
http://www.h3c.com.hk/Software_Download

Technical support

service@h3c.com
http://www.h3c.com.hk

Documentation feedback

You can e-mail your comments about product documentation to info@h3c.com.
We appreciate your comments.

Contents

PPP and MP commands ···································································· 1
PPP commands ························································································································· 1
display ip pool ····················································································································· 1 display ppp access-user ······································································································· 3 display ppp compression iphc ································································································ 8 ip address ppp-negotiate ······································································································· 9 ip pool ····························································································································· 10 ip pool gateway ················································································································· 11 link-protocol ppp ················································································································ 12 nas-port-type ···················································································································· 12 ppp accm ························································································································· 14 ppp account-statistics enable ······························································································· 14 ppp acfc local-request ········································································································ 15 ppp acfc remote-reject ········································································································ 15 ppp authentication-mode ····································································································· 16 ppp chap password ············································································································ 17 ppp chap user ··················································································································· 18 ppp compression iphc enable ······························································································· 19 ppp compression iphc rtp-connections ··················································································· 19 ppp compression iphc tcp-connections ··················································································· 20 ppp ipcp dns ····················································································································· 21 ppp ipcp dns admit-any ······································································································· 22 ppp ipcp dns request ·········································································································· 23 ppp ipcp remote-address match ··························································································· 23 ppp ip-pool route ··············································································································· 24 ppp lcp delay ···················································································································· 25 ppp lqm ··························································································································· 25 ppp lqm lcp-echo ··············································································································· 26 ppp pap local-user ············································································································· 27 ppp pfc local-request ·········································································································· 28 ppp pfc remote-reject ········································································································· 28 ppp timer negotiate ············································································································ 29 remote address ················································································································· 29 remote address dhcp client-identifier ····················································································· 30 reset ppp compression iphc ································································································· 31 timer-hold ························································································································ 31 timer-hold retry ················································································································· 32 reset ppp access-user ········································································································ 33
MP commands ························································································································ 34
bandwidth ························································································································ 34 default ····························································································································· 34 description ······················································································································· 35 display interface mp-group ·································································································· 36 display interface virtual-access ····························································································· 39 display interface virtual-template ··························································································· 42 display ppp mp ················································································································· 44 interface mp-group ············································································································ 45 interface virtual-template ····································································································· 46 mtu································································································································· 47 ppp mp ···························································································································· 48 ppp mp binding-mode ········································································································· 48 ppp mp endpoint ··············································································································· 49 ppp mp fragment disable ····································································································· 50 ppp mp lfi delay-per-frag ····································································································· 51 ppp mp lfi enable ··············································································································· 51 ppp mp lfi size-per-frag ······································································································· 52
i
ppp mp max-bind ·············································································································· 53 ppp mp min-bind ··············································································································· 54 ppp mp min-fragment ········································································································· 54 ppp mp mp-group ·············································································································· 55 ppp mp short-sequence ······································································································ 56 ppp mp sort-buffer-size ······································································································· 56 ppp mp timer lost-fragment ·································································································· 57 ppp mp user ····················································································································· 58 ppp mp virtual-template ······································································································ 59 reset counters interface mp-group ························································································· 60 reset counters interface virtual-access ··················································································· 60 service ···························································································································· 61 service standby ················································································································· 63 shutdown ························································································································· 65
PPPoE commands ········································································· 66
PPPoE server commands ·········································································································· 66
display pppoe-server session packet ····················································································· 66 display pppoe-server session summary ·················································································· 68 display pppoe-server throttled-mac ······················································································· 70 display pppoe-server va-pool ······························································································· 71 ppp lcp echo mru verify ······································································································· 72 pppoe-server access-delay ·································································································· 73 pppoe-server access-line-id bas-info ····················································································· 73 pppoe-server access-line-id circuit-id parse-mode ···································································· 75 pppoe-server access-line-id circuit-id trans-format ···································································· 76 pppoe-server access-line-id content ······················································································ 77 pppoe-server access-line-id remote-id trans-format ·································································· 78 pppoe-server access-line-id trust ·························································································· 79 pppoe-server bind ············································································································· 80 pppoe-server session-limit ··································································································· 81 pppoe-server session-limit per-mac ······················································································· 82 pppoe-server session-limit per-vlan ······················································································· 83 pppoe-server session-limit total ···························································································· 84 pppoe-server tag ac-name ·································································································· 85 pppoe-server tag ppp-max-payload ······················································································· 86 pppoe-server tag service-name ···························································································· 87 pppoe-server throttle per-mac ······························································································ 88 pppoe-server virtual-template va-pool ···················································································· 89 reset pppoe-server ············································································································ 90
PPPoE client commands ··········································································································· 91
dialer diagnose ················································································································· 91 display pppoe-client session packet······················································································· 91 display pppoe-client session summary ··················································································· 93 pppoe-client ····················································································································· 93 reset pppoe-client ·············································································································· 94 reset pppoe-client session packet ························································································· 95
L2TP commands ············································································ 96
allow l2tp ························································································································· 96 bandwidth ························································································································ 97 default ····························································································································· 98 description ······················································································································· 98 display interface virtual-ppp ································································································· 99 display l2tp session ·········································································································· 102 display l2tp session temporary ··························································································· 103 display l2tp tunnel ············································································································ 104 display l2tp va-pool ·········································································································· 105 interface virtual-ppp ········································································································· 105 ip dscp ·························································································································· 106 l2tp enable ····················································································································· 107
ii
l2tp tsa-id ······················································································································· 107 l2tp virtual-template va-pool ······························································································· 108 l2tp-auto-client ················································································································ 109 l2tp-group ······················································································································ 110 lns-ip ···························································································································· 110 mandatory-chap ·············································································································· 111 mandatory-lcp ················································································································· 112 mtu······························································································································· 113 ppp access-control enable ································································································· 113 ppp lcp imsi accept ·········································································································· 114 ppp lcp imsi request ········································································································· 115 ppp lcp imsi string ············································································································ 115 ppp lcp sn accept ············································································································ 116 ppp lcp sn request ··········································································································· 116 ppp lcp sn string ·············································································································· 117 ppp user accept-format imsi-sn split ···················································································· 118 ppp user attach-format imsi-sn split ····················································································· 118 ppp user replace ············································································································· 119 reset counters interface virtual-ppp······················································································ 120 reset l2tp tunnel ·············································································································· 121 service ·························································································································· 121 service standby ··············································································································· 123 shutdown ······················································································································· 124 source-ip ······················································································································· 124 timer-hold ······················································································································ 125 timer-hold retry ··············································································································· 126 tunnel authentication ········································································································ 126 tunnel avp-hidden ············································································································ 127 tunnel flow-control ··········································································································· 128 tunnel name ··················································································································· 129 tunnel password ·············································································································· 129 tunnel timer hello ············································································································· 130 user ······························································································································ 131 vpn-instance ··················································································································· 131
HDLC commands ········································································· 133
link-protocol hdlc ············································································································· 133 timer-hold ······················································································································ 134 timer-hold retry ··············································································································· 135
HDLC link bundling commands ······················································· 137
bandwidth ······················································································································ 137 bundle id ······················································································································· 137 bundle load-balance ········································································································· 138 bundle max-active links ···································································································· 139 bundle member-priority ····································································································· 139 bundle min-active bandwidth ······························································································ 140 bundle min-active links ····································································································· 140 default ··························································································································· 141 description ····················································································································· 142 display bundle hdlc-bundle ································································································ 142 display interface hdlc-bundle ······························································································ 144 interface hdlc-bundle ········································································································ 148 mtu······························································································································· 148 reset counters interface ···································································································· 149 service ·························································································································· 149 service standby ··············································································································· 151 shutdown ······················································································································· 152
ISDN commands ·········································································· 154
display isdn active-channel ································································································ 154
iii
display isdn call-info ········································································································· 155 display isdn call-record ····································································································· 158 display isdn parameters ···································································································· 159 display isdn spid ·············································································································· 161 isdn bch-local-manage ····································································································· 163 isdn bch-select-way ········································································································· 164 isdn bri-slipwnd-size ········································································································· 165 isdn caller-number ··········································································································· 165 isdn calling ····················································································································· 166 isdn carry calling-name ····································································································· 167 isdn carry connected-name ······························································································· 167 isdn check-called-number ································································································· 168 isdn crlength ··················································································································· 169 isdn ignore connect-ack ···································································································· 169 isdn ignore hlc ················································································································ 170 isdn ignore llc ················································································································· 171 isdn ignore sending-complete ···························································································· 172 isdn l3-timer ··················································································································· 172 isdn leased-line ··············································································································· 174 isdn link-mode p2p ·········································································································· 174 isdn number-property ······································································································· 175 isdn overlap-sending ········································································································ 180 isdn pri-slipwnd-size ········································································································· 180 isdn progress-indicator ····································································································· 181 isdn progress-to-alerting enable ························································································· 182 isdn protocol-mode ·········································································································· 183 isdn protocol-type ············································································································ 184 isdn q921-permanent ······································································································· 185 isdn spid auto-trigger ········································································································ 186 isdn spid nit ···················································································································· 186 isdn spid resend ·············································································································· 187 isdn spid service ············································································································· 188 isdn spid timer ················································································································ 189 isdn spid1 ······················································································································ 189 isdn spid2 ······················································································································ 190 isdn two-tei ···················································································································· 191 permanent-active ············································································································ 192 power-source ················································································································· 193
ATM commands ··········································································· 194
bandwidth ······················································································································ 194 broadcast ······················································································································ 194 default ··························································································································· 195 description ····················································································································· 196 display atm map-info ········································································································ 196 display atm pvc-group ······································································································ 198 display atm pvc-info ········································································································· 202 display interface virtual-ethernet ························································································· 205 encapsulation ················································································································· 208 interface virtual-ethernet ··································································································· 209 mac-address ·················································································································· 210 map bridge ····················································································································· 210 map ip ··························································································································· 211 map ppp ························································································································ 213 mtu······························································································································· 213 oam ais-rdi ····················································································································· 214 oam loopback ················································································································· 215 oam ping ······················································································································· 216 precedence ···················································································································· 218 pvc ······························································································································· 219 pvc-group ······················································································································ 220
iv
remark atm-clp ················································································································ 221 reset atm interface ··········································································································· 222 reset counters interface virtual-ethernet ················································································ 222 service cbr ····················································································································· 223 service ubr ····················································································································· 224 service vbr-nrt ················································································································· 225 service vbr-rt ·················································································································· 226 shutdown ······················································································································· 227 shutdown ······················································································································· 228 transmit-priority ··············································································································· 228 vp limit ·························································································································· 229
Modem management commands ····················································· 231
country-code ·················································································································· 231 modem answer-timer ······································································································· 232 modem auto-answer ········································································································ 233 modem callback ·············································································································· 233 modem caller-number resolve ···························································································· 234 modem enable ················································································································ 235 sendat ··························································································································· 236
3G/4G modem management commands ··········································· 239
Common management commands ···························································································· 239
controller cellular ············································································································· 239 description ····················································································································· 239 display cellular ················································································································ 240 display controller cellular ··································································································· 251 dm-port open ·················································································································· 253 mode ···························································································································· 253 modem reboot ················································································································ 254 modem response ············································································································ 255 pin modify ······················································································································ 255 pin unlock ······················································································································ 256 pin verification enable ······································································································· 257 pin verify ························································································································ 258 plmn search ··················································································································· 259 plmn select ···················································································································· 260 reset counters controller cellular ························································································· 261 rssi ······························································································································· 261 sendat ··························································································································· 262 shutdown ······················································································································· 263 sim switch-back enable ····································································································· 263 sim switch-to ·················································································································· 264
trust-imsi ······················································································································ 265
3G modem-specific management commands ··············································································· 266
gsm band ······················································································································ 266 profile create ·················································································································· 267 profile delete ·················································································································· 268 profile main ···················································································································· 268 serial-set ······················································································································· 269 wcdma band ··················································································································· 269
4G modem-specific management commands ··············································································· 270
apn······························································································································· 270 apn-profile ····················································································································· 271 apn-profile apply ············································································································· 272 attach-format imsi-sn split ································································································· 272 authentication-mode ········································································································ 273 bandwidth ······················································································································ 274 default ··························································································································· 274 description ····················································································································· 275 display interface eth-channel ····························································································· 276
v
eth-channel ···················································································································· 279 imsi bind ························································································································ 280 interface eth-channel ········································································································ 280 ip address cellular-alloc ···································································································· 281 ipv6 address cellular-alloc ································································································· 282 lte band ························································································································· 282 mtu······························································································································· 283 pdp-type ························································································································ 284 reset counters interface ···································································································· 284 shutdown ······················································································································· 285
DDR commands ·········································································· 286
bandwidth ······················································································································ 286 default ··························································································································· 287 description ····················································································································· 287 dialer bundle enable ········································································································· 288 dialer bundle-member ······································································································ 288 dialer callback-center ······································································································· 289 dialer call-in ···················································································································· 290 dialer circular enable ········································································································ 291 dialer circular-group ········································································································· 292 dialer disconnect ············································································································· 293 dialer flow-interval ··········································································································· 293 dialer number ················································································································· 294 dialer peer-name ············································································································· 295 dialer priority ·················································································································· 295 dialer queue-length ·········································································································· 296 dialer route ····················································································································· 297 dialer threshold ··············································································································· 298 dialer timer autodial ········································································································· 299 dialer timer compete ········································································································ 300 dialer timer enable ··········································································································· 300 dialer timer idle ··············································································································· 301 dialer timer wait-carrier ····································································································· 302 dialer timer warmup ········································································································· 302 dialer-group ···················································································································· 303 dialer-group rule ·············································································································· 304 display dialer ·················································································································· 305 display interface dialer ······································································································ 306 interface dialer ················································································································ 309 mtu······························································································································· 309 ppp callback ··················································································································· 310 ppp callback ntstring ········································································································ 311 reset counters interface ···································································································· 311 service ·························································································································· 312 service standby ··············································································································· 313 shutdown ······················································································································· 315 standby routing-group ······································································································ 315 standby routing-group rule ································································································· 316 standby timer routing-disable ····························································································· 317 timer-hold ······················································································································ 317 timer-hold retry ··············································································································· 318
Frame Relay commands ································································ 320
broadcast ······················································································································ 320 display fr compression iphc ······························································································· 320 display fr compression stac ······························································································· 323 display fr fragment ··········································································································· 324 display fr inarp ················································································································ 325 display fr ipv6 map ··········································································································· 326 display fr lmi ··················································································································· 327
vi
display fr map ················································································································· 329 display fr pvc ·················································································································· 330 fr compression iphc enable ································································································ 332 fr compression iphc rtp-connections ···················································································· 333 fr compression iphc tcp-connections ···················································································· 334 fr compression stac enable ································································································ 336 fr dlci ···························································································································· 336 fr encapsulation ·············································································································· 337 fr fragment enable ··········································································································· 338 fr fragment size ··············································································································· 339 fr inarp ·························································································································· 339 fr inarp interval ················································································································ 340 fr interface-type ··············································································································· 341 fr ipv6 ind ······················································································································· 341 fr lmi n391dte ················································································································· 342 fr lmi n392dce ················································································································· 343 fr lmi n392dte ················································································································· 343 fr lmi n393dce ················································································································· 344 fr lmi n393dte ················································································································· 345 fr lmi t392dce ·················································································································· 346 fr lmi type ······················································································································· 347 fr map ··························································································································· 347 fr ipv6 ind holdtime ·········································································································· 348 fr ipv6 ind solicitation retrans-timer ······················································································ 349 link-protocol fr ················································································································· 350 reset fr compression iphc ·································································································· 350 reset fr inarp ··················································································································· 351 reset fr ipv6 ind ··············································································································· 351 reset fr pvc ····················································································································· 352 snmp-agent trap enable fr ································································································· 352 timer-hold ······················································································································ 353
Multilink Frame Relay commands ···················································· 354
bandwidth ······················································································································ 354 default ··························································································································· 354 description ····················································································································· 355 display interface mfr ········································································································· 356 display mfr ····················································································································· 359 fr mfr ····························································································································· 363 interface mfr ··················································································································· 363 link-protocol mfr ·············································································································· 364 mfr bundle-name ············································································································· 365 mfr fragment enable ········································································································· 366 mfr fragment size ············································································································ 366 mfr timer lost-fragment ····································································································· 367 mfr link-name ················································································································· 368 mfr retry ························································································································ 368 mfr timer ack ·················································································································· 369 mfr timer hello ················································································································· 370 mfr window-size ·············································································································· 371 reset counters interface ···································································································· 371 shutdown ······················································································································· 372
Index ························································································· 373
vii

PPP and MP commands

This feature is supported only on Layer 2 Ethernet ports on the following modules:
AM.
AS.
ASE.
BS.
CE3.
CPOS.
E1.
E1-F.
POS.
SAE.
T1.
T1-F.
Commands and descriptions for centralized devices apply to the following routers:
MSR810/810-W/810-W-DB/810-LM/810-W-LM/810-10-PoE/810-LM-HK/810-W-LM-HK/810-L
MS/810-LUS.
MSR2600-10-X1.
MSR 2630.
MSR3600-28/3600-51.
MSR3600-28-SI/3600-51-SI.
MSR3610-X1/3610-X1-DP/3610-X1-DC/3610-X1-DP-DC.
MSR 3610/3620/3620-DP/3640/3660.
Commands and descriptions for distributed devices apply to the following routers:
MSR5620.
MSR 5660.
MSR 5680.
IPv6-related parameters are not supported on the following routers:
MSR810/810-W/810-W-DB/810-LM/810-W-LM/810-10-PoE/810-LM-HK/810-W-LM-HK/810-L
MS/810-LUS.
MSR3600-28-SI/3600-51-SI.

PPP commands

display ip pool

Use display ip pool to display PPP address pools.
Syntax
display ip pool [ pool-name ] [ group group-name ]
1
Field
Description
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
pool-name: Specifies a PPP address pool by its name, a case-sensitive string of 1 to 31 characters.
group group-name: Displays PPP address pools in a group specified by its name, a case-sensitive
string of 1 to 31 characters.
Usage guidelines
If you do not specify any parameters, the command displays brief information about all PPP address pools.
If you specify an address pool, the command displays detailed information about the specified PPP address pool.
Examples
# Display brief information about all PPP address pools.
<Sysname> display ip pool Group name: a Pool name Start IP address End IP address Free In use aaa1 1.1.1.1 1.1.1.5 5 0 aaa2 1.1.1.6 1.1.1.10 5 0 Group name: b Pool name Start IP address End IP address Free In use bbb 1.1.2.1 1.1.2.5 4 1
2.2.2.1 2.2.2.5 5 0
# Display brief information about the PPP address pools in group a.
<Sysname> display ip pool group a Group name: a Pool name Start IP address End IP address Free In use aaa1 1.1.1.1 1.1.1.5 5 0 aaa2 1.1.1.6 1.1.1.10 5 0
# Display detailed information about PPP address pool bbb.
<Sysname> display ip pool bbb Group name: b Pool name Start IP address End IP address Free In use bbb 1.1.2.1 1.1.2.5 4 1
2.2.2.1 2.2.2.5 5 0 In use IP addresses: IP address Interface
1.1.2.1 POS2/2/0
Table 1 Command output
Free Number of free IP addresses.
In use Number of IP addresses that have been assigned.
2
Field
Description
In use IP addresses Information about the IP addresses that have been assigned.
Interface Local interface that requests the IP address for the peer interface.
Related commands
ip pool

display ppp access-user

Use display ppp access-user to display PPP user information.
Syntax
display ppp access-user { interface interface-type interface-number [ count ]
| ip-address ip-address | ipv6-address ipv6-address | username user-name | user-type { lac | lns | pppoa | pppoe } [ count ] }
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
interface interface-type interface-number: Displays brief information about PPP users on the
specified interface.
count: Displays the total number of PPP users that match the specified criteria. ip-address ip-address: Displays detailed information about the PPP user specified by its IP address. ipv6-address ipv6-address: Displays detailed information about the PPP user specified by its IPv6
address.
username user-name: Displays detailed information about the PPP user specified by its username,
a case-sensitive string of 1 to 80 characters.
user-type: Displays brief information about online users of the specified type. lac: Displays brief information about L2TP users for an LAC. lns: Displays brief information about L2TP users for an LNS. pppoa: Displays brief information about PPPoA users. pppoe: Displays brief information about PPPoE users.
Usage guidelines
Brief information about a PPP user includes the following:
Brief name of the VA interface.
Username.
MAC address.
IPv4 address, IPv6 address, or IPv6 prefix of the PPP user.
Detailed information about a PPP user includes the following:
Brief name of the VA interface.
User ID.
3
Field
Description
Username.
Authentication information.
Uplink and downlink traffic.
Access start time of the PPP user.
Examples
# Display brief information about PPP users on GigabitEthernet 1/0/1.
<Sysname> display ppp access-user interface gigabitethernet 1/0/1 Interface Username MAC address IP address IPv6 address IPv6 PDPrefix VA0 user1@h3c 0001-0101-9101 192.168.100.173 - ­VA1 user2@h3c 0001-0101-9101 192.168.80.173 2000::1 -
# Display the total number of PPP users on GigabitEthernet 1/0/1.
<Sysname> display ppp access-user interface gigabitethernet 1/0/1 count Total users: 2
Table 2 Command output
Interface Name of the VA interface corresponding to the user.
Username
MAC address
IP address
IPv6 address
IPv6 PDPrefix
Username of the user.
A hyphen (-) means that the user does not need authentication.
MAC address of the user.
A hyphen (-) means that the user is not a PPPoE user.
IP address of the user. A hyphen (-) means that no IP address is assigned to the user.
IPv6 address of the user. A hyphen (-) means that no IPv6 address is assigned to the user.
IPv6 prefix of the user. A hyphen (-) means that no IPv6 prefix is assigned to the user.
Total users Total number of PPP users.
# Display detailed information about the PPP user whose IP address is 50.50.50.3.
<Sysname> display ppp access-user ip-address 50.50.50.3 Basic: Interface: VA0 User ID: 0x28000002 Username: user1@hrss Domain: hrss Access interface: RAGG2 Service-VLAN/Customer-VLAN: -/­ MAC address: 0000-0000-0001 IP address: 50.50.50.3 IPv6 address: ­ IPv6 PD prefix: ­ VPN instance: 123 Access type: PPPoE Authentication type: CHAP
4
Field
Description
AAA: Authentication state: Authenticated Authorization state: Authorized Realtime accounting switch: Open Realtime accounting interval: 60s Login time: 2013-1-19 2:42:3:358 Accounting start time: 2013-1-19 2:42:3:382 Accounting state: Accounting Online time(hh:mm:ss): 0:7:34 Idle cut: 0 sec 0 byte Session timeout: 12000 s Time remained: 8000 s Byte remained: 20971520 bytes Redirect WebURL: http://6.6.6.6
ACL&QoS: User profile: profile123 (active) User group profile: ­ Inbound CAR: CIR 64000bps PIR 640000bps Outbound CAR: CIR 64000bps PIR 640000bps
NAT: Global IP address: 111.8.0.200 Port block: 28744-28748
Flow Statistic: IPv4 uplink packets/bytes: 7/546 IPv4 downlink packets/bytes: 0/0 IPv6 uplink packets/bytes: 0/0 IPv6 downlink packets/bytes: 0/0
ITA: Level-1 uplink packets/bytes: 100/128000 downlink packets/bytes: 200/256000 Level-2 uplink packets/bytes: 100/128000 downlink packets/bytes: 200/256000
Table 3 Command output
Basic Basic information.
Interface Brief name of the VA interface that corresponds to the user.
Username
Domain
Access interface Name of the access interface of the user.
Username of the user.
A hyphen (-) means that the user does not need authentication.
ISP domain name for authentication.
A hyphen (-) means that no ISP domain is specified for authentication.
5
Field
Description
Service-VLAN/Customer-VLAN
Service provider VLAN and customer VLAN information of the user.
A hyphen (-) means that no VLAN information is available.
IP address
IPv6 address
IPv6 PD prefix
VPN instance
Access type
Authentication type
Authentication state
IP address of the user. A hyphen (-) means that no IP address is assigned to the user.
IPv6 address of the user. A hyphen (-) means that no IPv6 address is assigned to the user.
Delegated IPv6 prefix of the user. A hyphen (-) means that no delegated IPv6 prefix is assigned to the user.
VPN instance to which the user belongs.
A hyphen (-) means that the user is not bound to any VPN instance.
Access type of the user:
PPPoE.
PPPoA.
L2TP.
Authentication type of the user:
PA P.
CHAP.
MS-CHAP.
MS-CHAP-V2.
Authentication state of the user:
Idle—The user has not been authenticated.
Authenticating—The user is being authenticated.
Authenticated—The user has been authenticated.
Authorization state of the user:
Authorization state
Realtime accounting switch
Realtime accounting interval
Login time Time when the user accessed the device through PPP.
Accounting start time
Online time(hh:mm:ss) Online duration of the current login.
Accounting state
Idle cut
Idle—The user has not been authorized.
Authorizing—The user is being authorized.
Authorized—The user has been authorized.
Open—The switch is on.
Closed—The switch is off.
Realtime accounting interval in seconds.
A hyphen (-) means that no real-time accounting interval is authorized.
Time when accounting started.
A hyphen (-) means that no accounting is performed on the user.
Accounting state of the user:
AccountingAccounting is on.
StopAccounting stops.
Traffic threshold for logging off the user in idle state.
If the traffic is less than the threshold within the specified period, the user is forcibly logged off.
6
Field
Description
Session timeout
Time remained
Byte remained
Redirect WebURL
User profile
User group profile
Authorization time for the user, in seconds.
A hyphen (-) means that no authorization time is specified for the user.
Remaining time for the user to stay online, in seconds.
A hyphen (-) means that no authorization time is specified for the user.
Remaining traffic for the user.
A hyphen (-) means that no authorization traffic is specified for the user.
Redirect Web URL address for the user.
A hyphen (-) means that no redirect Web URL address is specified for the user.
Name of the authorized user profile. The hyphen (-) means that no user profile is authorized.
The user profile has two states:
activeThe authorized user profile is successfully issued.
inactiveThe authorized user profile fails to be issued.
Name of the authorized user group profile. The hyphen (-) means that no user group profile is authorized.
The user group profile has two states:
activeThe authorized user group profile is successfully
issued.
inactiveThe authorized user group profile fails to be issued.
Inbound CAR Authorized inbound CARs, which contain the CIR and the PIR.
Outbound CAR Authorized outbound CARs, which contain the CIR and the PIR.
Global IP address
Port block
IPv4 uplink packets/bytes Number of packets and bytes for IPv4 uplink traffic.
IPv4 downlink packets/bytes Number of packets and bytes for IPv4 downlink traffic.
IPv6 uplink packets/bytes Number of packets and bytes for IPv6 uplink traffic.
IPv6 downlink packets/bytes Number of packets and bytes for IPv6 downlink traffic.
ITA
Level-n uplink packets/bytes
downlink packets/bytes
Related commands
Global IP address of the user.
This field is displayed if NAT444 is used. For information about
NAT444, see Layer 3—IP Services Co nfiguration Guide.
Port block of the user, from the start port to the end port.
This field is displayed if NAT444 is used.
ITA statistics.
ITA statistics are displayed after ITA is enabled.
traffic-separate enable
If the statistics are not included in flow statistics. For information about ITA and the
Configuration Guide. Number of packets and bytes for uplink traffic at accounting level n.
The value for n depends on the
value range is 1 to 8.
traffic-separate enable
command is configured, ITA
command, see Security
traffic level
command, and its
reset ppp access-user
7

display ppp compression iphc

Use display ppp compression iphc to display IP header compression (IPHC) statistics.
Syntax
display ppp compression iphc { rtp | tcp } [ interface interface-type interface-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
rtp: Displays IPHC RTP header compression statistics. tcp: Displays IPHC TCP header compression statistics. interface interface-type interface-number: Specifies an interface by its type and number. If you do
not specify this option, the command displays IPHC statistics on all interfaces.
Usage guidelines
When IPHC applies to an MP link:
If an MP template is used, such as a VT interface or a dialer interface, the associated VA
interface performs IPHC. You can view the compression information on the VA interface.
If an MP-group interface is used, the MP-group interface performs IPHC. You can view the
compression information on the MP-group interface.
When IPHC applies to a normal PPP link, the physical interface performs IPHC. You can view the compression information on the physical interface.
Examples
# Display IPHC RTP header compression statistics.
<Sysname> display ppp compression iphc rtp
----------------------Slot1---------------------­Interface: Virtual-Access0 Received: Compressed/Error/Total: 0/0/0 packets Sent: Compressed/Total: 0/0 packets Sent/Saved/Total: 0/0/0 bytes Packet-based compression ratio: 0% Byte-based compression ratio: 0% Connections: Rx/Tx: 16/16 Five-Minute-Miss: 0 (Misses/5Mins) Max-Miss: 0
# Display IPHC TCP header compression statistics.
<Sysname>display ppp compression iphc tcp
----------------------Slot1---------------------­Interface: Virtual-Access0
8
Field
Description
Received: Compressed/Error/Total: 0/0/0 packets Sent: Compressed/Total: 0/0 packets Sent/Saved/Total: 0/0/0 bytes Packet-based compression ratio: 0% Byte-based compression ratio: 0% Connections: Rx/Tx: 16/16 Five-Minute-Miss: 0 (Misses/5Mins) Max-Miss: 0
Table 4 Command output
Statistics for received packets:
Received:
Compressed/Error/Total
Sent:
Compressed/Total
Sent/Saved/Total
Packet-based compression ratio
Byte-based compression ratio
Compressed—Number of compressed packets.
Error—Number of error packets.
Total—Total number of received packets.
Statistics for sent packets:
Compressed—Number of compressed packets.
Total—Total number of sent packets.
Sent—Bytes of sent packets.
Saved—Bytes of saved packets.
Total—Total bytes to be sent if packets are not compressed.
Packet-based compression ratio—Ratio of compressed
packets to the total sent packets.
Byte-based compressio n ratio—Ratio of saved bytes to the
total sent bytes.
Connections:
Rx/Tx
Five-Minute-Miss
Max-Miss
Related commands
ppp compression iphc enable reset ppp compression iphc

ip address ppp-negotiate

Use ip address ppp-negotiate to enable IP address negotiation on an interface, so that the
interface can accept the IP address allocated by the server.
Use undo ip address ppp-negotiate to restore the default.
Syntax
ip address ppp-negotiate undo ip address ppp-negotiate
Number of connections.
Rx—Number of connections that the receiver can decompress.
Tx—Number of connections that the sender can compress.
Five-Minute-Miss—Number of search failures within the last 5
minutes.
Max-Miss—Maximum number of search failures within 5
minutes.
9
Default
IP address negotiation is disabled on an interface.
Views
Interface view
Predefined user roles
network-admin
Usage guidelines
If you execute the ip address ppp-negotiate and ip address commands multiple times, the most
recent configuration takes effect.
Examples
# Enable IP address negotiation on Serial 2/1/0.
<Sysname> system-view [Sysname] interface serial 2/1/0 [Sysname-Serial2/1/0] ip address ppp-negotiate
Related commands
ip address (Layer 3—IP Services Command Reference) remote address

ip pool

Use ip pool to configure a PPP address pool. Use undo ip pool to remove a PPP address pool or an IP address range of the PPP address pool.
Syntax
ip pool pool-name start-ip-address [ end-ip-address ] [ group group-name ] undo ip pool pool-name [ start-ip-address [ end-ip-address ] ]
Default
No PPP address pool is configured.
Views
System view
Predefined user roles
network-admin
Parameters
pool-name: Specifies a name for the PPP address pool to be created, a case-sensitive string of 1 to
31 characters.
start-ip-address [ end-ip-address ]: Specifies an IP address range. If you do not specify the end-ip-address argument, the PPP address pool has only the start IP address.
group group-name: Specifies a group by its name to which the PPP address pool belongs. The
group name is a c ase-sensitive string of 1 to 31 characters. If you do not specify this option, the
group name is default (the default group).
Usage guidelines
The system supports multiple address spaces that each correspond to a VPN instance. The same IP addresses can exist in different address spaces.
10
Each address space is represented by a group. One group can contain multiple PPP address pools, but one PPP address pool can belong to only one group.
One PPP address pool can contain multiple IP address ranges. You can execute this command multiple times to specify multiple IP address ranges for a PPP address pool. A PPP address pool can contain a maximum of 65535 IP addresses, and so can an IP address range.
IP address ranges in different groups can be overlapping, but those in the same group cannot.
Changes to a PPP address pool do not affect assigned IP addresses. For example, if you delete a PPP address pool from which an IP address has been assigned, the IP address can still be used.
When assigning IP address to users through a PPP address pool, make sure the PPP address pool excludes the gateway IP address of the PPP address pool.
Examples
# Configure PPP address pool aaa that contains IP addresses 129.102.0.1 through 129.102.0.10 for group a.
<Sysname> system-view [Sysname] ip pool aaa 129.102.0.1 129.102.0.10 group a
Related commands
display ip pool

ip pool gateway

Use ip pool gateway to configure a gateway address for a PPP address pool. Use undo ip pool gateway to remove the gateway address for the specified PPP address pool.
Syntax
ip pool pool-name gateway ip-address [ vpn-instance vpn-instance-name ] undo ip pool pool-name gateway
Default
A PPP address pool is not configured with a gateway address.
Views
System view
Predefined user roles
network-admin
Parameters
pool-name: Specifies an existing PPP address pool by its name, a case-sensitive string of 1 to 31
characters.
ip-address: Specifies a gateway address for the PPP address pool. vpn-instance vpn-instance-name: Specifies an existing MPLS L3VPN instance by its name, a
case-sensitive string of 1 to 31 characters. If you do not specify this option, the specified gateway belongs to the public network.
Usage guidelines
The IP pool gateway setting takes precedence over the DHCP pool gateway setting.
An interface on a BRAS must have an IP address before it can assign an IP address from a PPP or DHCP address pool to a client. This command enables interfaces that have no IP address to use a gateway address for IPCP negotiation and address allocation.
11
When you configure a gat eway address for a P PP address pool, follow these restrictions and guidelines:
If you also specify an IP address for an interface, the interface uses its own IP address to
perform IPCP negotiation.
You can specify only one gateway address for a PPP address pool. Different PPP address
pools must have different gateway addresses (different combinations of
and vpn-instance-name).
You can specify any gateway address for a PPP address pool.
Examples
# Specify gateway address 1.1.1.1 and VPN instance test for PPP address pool aaa.
<Sysname> system-view [Sysname] ip pool aaa gateway 1.1.1.1 vpn-instance test
Related commands
ip pool

link-protocol ppp

Use link-protocol ppp to enable PPP encapsulation on an interface.
Syntax
ip-address
link-protocol ppp
Default
PPP encapsulation is enabled on all interfaces except Ethernet, VLAN, and ATM interfaces.
Views
Interface view
Predefined user roles
network-admin
Examples
# Enable PPP encapsulation on Serial 2/1/0.
<Sysname> system-view [Sysname] interface serial 2/1/0 [Sysname-Serial2/1/0] link-protocol ppp

nas-port-type

Use nas-port-type to configure the nas-port-type attribute on a VT interface. Use undo nas-port-type to restore the default.
Syntax
Default
nas-port-type { 802.11 | adsl-cap | adsl-dmt | async | cable | ethernet | g.3-fax | hdlc | idsl
| isdn-async-v110 | isdn-async-v120 | isdn-sync | piafs | sdsl | sync | virtual | wireless-other | x.25 | x.75 | xdsl }
undo nas-port-type
The nas-port-type attribute is determined by the service type and link type of the PPP user, as shown in Table 5.
12
Service type
Link type
Nas-port-type attribute
Table 5 Default nas-port-type attribute
PPPoE
PPPoA Any
L2TP Any
Views
VT interface view
Predefined user roles
network-admin
Parameters
802.11: Specifies IEEE 802.11. The code value is 19. adsl-cap: Specifies asymmetric DSL, Carrierless Amplitude Phase. The code value is 12. adsl-dmt: Specifies asymmetric DSL, Discrete Multi-Tone. The code value is 13. async: Specifies async. The code value is 0. cable: Specifies cable. The code value is 17. ethernet: Specifies Ethernet. The code value is 15. g.3-fax: Specifies G.3 Fax. The code value is 10.
Layer 3 virtual Ethernet interface
Other interfaces
xdsl ethernet xdsl virtual
hdlc: Specifies HDLC Clear Channel. The code value is 7. idsl: Specifies ISDN Digital Subscriber Line. The code value is 14. isdn-async-v110: Specifies ISDN Async V.110. The code value is 4. isdn-async-v120: Specifies ISDN Async V.120. The code value is 3. isdn-sync: Specifies ISDN Sync. The code value is 2. piafs: Specifies PHS Internet Access Forum Standard. The code value is 6. sdsl: Specifies symmetric DSL. The code value is 11. sync: Specifies sync. The code value is 1. virtual: Specifies virtual. The code value is 5. wireless-other: Specifies wireless–other. The code value is 18. x.25: Specifies X.25. The code value is 8. x.75: Specifies X.75. The code value is 9. xdsl: Specifies Digital Subscriber Line of unknown type. The code value is 16.
Usage guidelines
The nas-port-type attribute is used for RADIUS authentication and accounting. For more information about the nas-port-type attribute, see RFC 2865.
Examples
# Set the nas-port-type attribute to sync for Virtual-Template 1.
<Sysname> system-view [Sysname] interface virtual-template 1 [Sysname-Virtual-Template1] nas-port-type sync
13

ppp accm

Use ppp accm to set the ACCM value sent to the peer on an interface. Use undo ppp accm to restore the default.
Syntax
ppp accm hex-number undo ppp accm
Default
The ACCM value sent to the peer is 0x000A0000 on an interface.
Views
Interface view
Predefined user roles
network-admin
Parameters
hex-number: Specifies an ACCM value in hexadecimal format, in the range of 0 to 0xFFFFFFFF.
Usage guidelines
ACCM negotiation only applies to asynchronous links.
Examples
# Set the ACCM value sent to the peer to 0x01010101 on Serial 2/1/0.
<Sysname> system-view [Sysname] interface serial 2/1/0 [Sysname-Serial2/1/0] ppp accm 01010101

ppp account-statistics enable

Use ppp account-statistics enable to enable PPP accounting on an interface. Use undo ppp account-statistics enable to disable PPP accounting on an interface.
Syntax
ppp account-statistics enable [ acl { acl-number | name acl-name } ] undo ppp account-statistics enable
Default
PPP accounting is disabled on an interface.
Views
Interface view
Predefined user roles
network-admin
Parameters
acl: Specifies an ACL to match traffic. If no ACL is specified, the device generates statistics for all
PPP traffic.
acl-number: Specifies an ACL by its number in the range of 2000 to 3999, where:
14
2000 to 2999 are numbers for basic IPv4 and IPv6 ACLs.
3000 to 3999 are numbers for advanced IPv4 and IPv6 ACLs.
If the specified ACL number corresponds to an IPv4 ACL and an IPv6 ACL, both ACLs take effect.
name acl-name: Specifies an ACL by its name, a case-insensitive string of 1 to 63 characters that start with an alphabetical character. To avoid confusion, do not use all as an ACL name.
Examples
# Enable PPP accounting on Serial 2/1/0.
<Sysname> system-view [Sysname] interface serial 2/1/0 [Sysname-Serial2/1/0] ppp account-statistics enable

ppp acfc local-request

Use ppp acfc local-request to configure an interface to send ACFC requests by including the ACFC
option in outbound LCP negotiation requests.
Use undo ppp acfc local-request to restore the default.
Syntax
ppp acfc local-request undo ppp acfc local-request
Default
An interface does not include the ACFC option in outbound LCP negotiation requests.
Views
Interface view
Predefined user roles
network-admin
Examples
# Configure Serial 2/1/0 to send ACFC requests to the peer in PPP negotiation.
<Sysname> system-view [Sysname] interface serial 2/1/0 [Sysname-Serial2/1/0] ppp acfc local-request

ppp acfc remote-reject

Use ppp acfc remote-reject to configure an interface to reject ACFC requests received from the
remote peer.
Use undo ppp acfc remote-reject to restore the default.
Syntax
Default
ppp acfc remote-reject undo ppp acfc remote-reject
An interface accepts ACFC requests received from the remote peer, and it performs ACFC on frames sent to the peer.
15
Views
Interface view
Predefined user roles
network-admin
Examples
# Configure Serial 2/1/0 to reject ACFC requests received from the remote peer.
<Sysname> system-view [Sysname] interface serial 2/1/0 [Sysname-Serial2/1/0] ppp acfc remote-reject

ppp authentication-mode

Use ppp authentication-mode to configure PPP authentication on an interface. Use undo ppp authentication-mode to restore the default.
Syntax
ppp authentication-mode { chap | ms-chap | ms-chap-v2 | pap } * [ [ call-in ] domain { isp-name | default enable isp-name } ]
undo ppp authentication-mode
Default
PPP authentication is disabled on an interface.
Views
Interface view
Predefined user roles
network-admin
Parameters
chap: Uses CHAP authentication. ms-chap: Uses MS-CHAP authentication. ms-chap-v2: Uses MS-CHAP-V2 authentication. pap: Uses PAP authentication. call-in: Authenticates the call-in users only. This keyword can be configured when the local end acts
as the receiving end of DDR calls. For more information about DDR, see Layer 2 Configuration Guide.
domain isp-name: Specifies the ISP domain name for authentication, a case-insensitive string of 1
to 255 characters.
default enable isp-name: Specifies the default ISP domain name for authentication, a
case-insensitive string of 1 to 255 characters.
WAN Access
Usage guidelines
PPP authentication includes the following categories:
PAP—Two-way handshake authentication. The password is in plain text or cipher text.
CHAP—Three-way handshake authentication. The password is in plain text or cipher text.
MS-CHAP—Three-way handshake authentication. The password is in cipher text.
MS-CHAP-V2—Three-way handshake authentication. The password is in cipher text.
16
You can configure multiple authentication modes.
In any PPP authentication mode, AAA determines whether a us er can pass the authentication through a l ocal authentication database or an AAA server. For more information about AAA
authentication, see Security Configuration Gui de. If you configure the ppp authentication-mode command with the domain keyword specified, you
must perform the following tasks:
Use the specified ISP domain to authenticate the peer.
Use a PPP address pool associated with this ISP domain for address allocation (if necessary).
You can use the display domain command to display the domain configuration.
The system can obtain ISP domains through multiple ways during user authentication. The system chooses one of the following ISP domains for authentication in descending priority order:
ISP domain specified by the domain isp-name option. Use a PPP address pool associated with
this ISP domain for address allocation (if necessary). You can use the display domain
command to display the domain configuration.
ISP domain contained in the username. If the ISP domain does not exist on the local device, the
user's access request is denied.
ISP domain specified by the default enable isp-name option.
Default ISP domain in the system. You can use the domain default command to configure the
default ISP domain. If no default ISP domain is configured, the default ISP domain (system) is
used.
For authentication on a dialup interface, configure authentication on both the physical interface and the dialer interface. When a physical interface receives a D DR call request, it first initiates PPP negotiation and authenticates the dial-in user. Then it passes the call to the upper layer protocol.
Examples
# Configure Serial 2/1/0 to authenticate the peer by using PAP.
<Sysname> system-view [Sysname] interface serial 2/1/0 [Sysname-Serial2/1/0] ppp authentication-mode pap
# Configure Serial 2/1/0 to authenticate the peer by using PAP, CHAP, and MS-C H A P.
<Sysname> system-view [Sysname] interface serial 2/1/0 [Sysname-Serial2/1/0] ppp authentication-mode pap chap ms-chap
Related commands
domain default (Security Command Reference) local-user (Security Command Refere nce ) ppp chap password ppp chap user ppp pap local-user

ppp chap password

Use ppp chap password to set the password for CHAP authentication on an interface. Use undo ppp chap password to restore the default.
Syntax
ppp chap password { cipher | simple } string
17
undo ppp chap password
Default
No password is set for CHAP authentication on an interface.
Views
Interface view
Predefined user roles
network-admin
Parameters
cipher: Specifies a password in encrypted form. simple: Specifies a password in plaintext form. For security purposes, the password specified in
plaintext form will be stored in encrypted form. string: Specifies the password. Its plaintext form is a case-sensitive string of 1 to 255 characters. Its
encrypted form is a case-sensitive string of 1 to 97 characters.
Examples
# Set the password for CHAP authentication to plaintext password sysname on Serial 2/1/0.
<Sysname> system-view [Sysname] interface serial 2/1/0 [Sysname-Serial2/1/0] ppp chap password simple sysname
Related commands
ppp authentication-mode chap

ppp chap user

Use ppp chap user to set the username for CHAP authentication on an interface. Use undo ppp chap user to restore the default.
Syntax
ppp chap user username undo ppp chap user
Default
The username for CHAP authentication is null on an interface.
Views
Interface view
Predefined user roles
network-admin
Parameters
username: Specifies the username for CHAP authentication, a case-sensitive string of 1 to 80
characters. The username is sent to the peer for the local device to be authenticated.
Usage guidelines
To pass CHAP authentication, the username/password of one side must be the local username/password on the peer.
18
Loading...
+ 359 hidden pages