H3C WA Series WLAN Access Points. Layer 2 WAN Command Reference. Hangzhou H3C Technologies Co., Ltd.

Transcription

1 H3C WA Series WLAN Access Points Layer 2 WAN Command Reference Hangzhou H3C Technologies Co., Ltd. Document Version: 6W

2 Copyright 2010, Hangzhou H3C Technologies Co., Ltd. and its licensors All Rights Reserved No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of Hangzhou H3C Technologies Co., Ltd. Trademarks H3C,, Aolynk,, H 3 Care,, TOP G,, IRF, NetPilot, Neocean, NeoVTL, SecPro, SecPoint, SecEngine, SecPath, Comware, Secware, Storware, NQA, VVG, V 2 G, V n G, PSPT, XGbus, N-Bus, TiGem, InnoVision and HUASAN are trademarks of Hangzhou H3C Technologies Co., Ltd. All other trademarks that may be mentioned in this manual are the property of their respective owners. Notice The information in this document is subject to change without notice. Every effort has been made in the preparation of this document to ensure accuracy of the contents, but all statements, information, and recommendations in this document do not constitute the warranty of any kind, express or implied.

3 Preface The H3C WA documentation set includes 10 command references, which describe the commands and command syntax options available for the H3C WA series WLAN access points. The Layer 2 WAN Command Reference describes PPP configuration commands. This preface includes: Audience Conventions About the H3C WA Documentation Set Obtaining Documentation Documentation Feedback Audience This documentation is intended for: Network planners Field technical support and servicing engineers Network administrators working with the WA series Conventions This section describes the conventions used in this documentation. Command conventions Convention Boldface italic [ ] { x y... } [ x y... ] { x y... } * [ x y... ] * &<1-n> Bold text represents commands and keywords that you enter literally as shown. Italic text represents arguments that you replace with actual values. Square brackets enclose syntax choices (keywords or arguments) that are optional. Braces enclose a set of required syntax choices separated by vertical bars, from which you select one. Square brackets enclose a set of optional syntax choices separated by vertical bars, from which you select one or none. Asterisk marked braces enclose a set of required syntax choices separated by vertical bars, from which you select at least one. Asterisk marked square brackets enclose optional syntax choices separated by vertical bars, from which you may select multiple choices or none. The argument or keyword and argument combination before the ampersand (&) sign can be entered 1 to n times. # A line that starts with a pound (#) sign is comments.

4 GUI conventions Boldface > Convention Window names, button names, field names, and menu items are in Boldface. For example, the New User window appears; click OK. Multi-level menus are separated by angle brackets. For example, File > Create > Folder. Symbols Convention Means reader be extremely careful. Improper operation may cause bodily injury. Means reader be careful. Improper operation may cause data loss or damage to equipment. Means an action or information that needs special attention to ensure successful configuration or good performance. Means a complementary description. Means techniques helpful for you to make configuration with ease. About the H3C WA Documentation Set The H3C WA documentation set includes: Category Documents Purposes Product description and specifications Hardware specifications and installation Software configuration Operations and maintenance Marketing brochures Technology white papers Compliance and safety manual Quick start Installation guide Getting started guide Configuration guides Command references User FAQ Release notes Describe product specifications and benefits. Provide an in-depth description of software features and technologies. Provides regulatory information and the safety instructions that must be followed during installation. Guides you through initial installation and setup procedures to help you quickly set up and use your AP with the minimum configuration. Guides you through hardware specifications and installation methods to help you install your AP. Guides you through the main functions of your AP, and describes how to install and log in to your AP, perform basic configurations, maintain software, and troubleshoot your AP. Describe software features and configuration procedures. Provide a quick reference to all available commands. Provides answers to some of the most frequently asked questions on how to troubleshoot your AP. Provide information about the product release, including the version history, hardware and software compatibility matrix, version upgrade information, technical support information, and software upgrading.

5 Obtaining Documentation You can access the most up-to-date H3C product documentation on the World Wide Web at Click the links on the top navigation bar to obtain different categories of product documentation: [Technical Support & Documents > Technical Documents] Provides hardware installation, software upgrading, getting started, and software feature configuration and maintenance documentation. [Products & Solutions] Provides information about products and technologies, as well as solutions. [Technical Support & Documents > Software Download] Provides the documentation released with the software version. Documentation Feedback You can your comments about product documentation to We appreciate your comments.

6 Table of Contents 1 Applicable Models and Software Versions Feature Matrix Command/Parameter Matrix PPP Configuration Commands 4-1 PPP Configuration Commands 4-1 ip address ppp-negotiate 4-1 link-protocol ppp 4-2 mtu 4-2 ppp account-statistics enable 4-3 ppp authentication-mode 4-3 ppp chap password 4-4 ppp chap user 4-5 ppp ipcp remote-address forced 4-6 ppp pap local-user 4-6 ppp timer negotiate 4-7 remote address 4-8 timer hold PPPoE Configuration Commands 5-1 PPPoE Client Configuration Commands 5-1 display pppoe-client session 5-1 pppoe-client 5-2 reset pppoe-client 5-4 DCC Configuration Commands 5-4 dialer bundle 5-4 dialer-group 5-5 dialer-rule 5-6 dialer user Index 6-1 i

7 The models listed in this document are not applicable to all regions. Please consult your local sales office for the models applicable to your region. Read this chapter before using an H3C WA series WLAN access point. 1 Applicable Models and Software Versions H3C WA series WLAN access points include the WA2200 series and WA2600 series. Table 1-1 shows the applicable models and software versions. Table 1-1 Applicable models and software versions Series Model Software version WA2200 series WA2200 series access points (indoors) WA2200 series access points (outdoors) WA2210-AG WA2220-AG WA2210X-G WA2220X-AG R 1115 WA2600 series WA2600 series access points (indoors) WA2610-AGN WA2612-AGN WA2620-AGN R 1106 WA2600 series access points (enhanced) WA2610E-AGN WA2620E-AGN R

8 2 Feature Matrix Support of the H3C WA series WLAN access points for features, commands and parameters may vary by device model. See this document for more information. For information about feature support, see Table 2-1. For information about command and parameter support, see Table 3-1. The term AP in this document refers to common APs, wireless bridges, or mesh APs. Table 2-1 Feature matrix Document Feature WA2200 series WA2600 series Fundamentals Configuration Guide WLAN Configuration Guide Layer 2 LAN Switching Configuration Guide Layer 3 IP Services Configuration Guide IP Multicast Configuration Guide Security Configuration Guide HTTPS Not supported Supported n radio mode Not supported Supported n bandwidth mode Not supported Supported n rate configuration Not supported Supported Optical Ethernet interface Supported on WA2210X-G/WA2220X- AG only Not supported GE interface Not supported Supported DHCP server configuration Not supported Supported DHCPv6 configuration Not supported Supported IGMP snooping configuration Not supported Supported MLD snooping configuration Not supported Supported SSH2.0 Not supported Supported 2-1

9 3 Command/Parameter Matrix Table 3-1 Command/Parameter matrix Document Module Command/Parameter WA2200 series WA2600 series display ip https Not supported Supported Fundamentals Command Reference HTTP commands ip https acl Not supported Supported ip https certificate access-control-policy Not supported Supported ip https enable Not supported Supported a-mpdu enable Not supported Supported a-msdu enable Not supported Supported channel band-width Not supported Supported client dot11n-only Not supported Supported WLAN service commands preamble { long short } Only APs that support the b/g radio mode support this command. Only APs that support the b/g radio mode support this command. WLAN Command Reference radio-type Keywords dot11an and dot11gn not supported Supported short-gi enable Not supported Supported dot11a { disabled-rate mandatory-rate supported-rate } rate-value Only APs that support a radio mode support this command. Only APs that support a radio mode support this command. WLAN RRM commands dot11n mandatory maximum-mcs dot11n support maximum-mcs Not supported Not supported Supported Supported power-constraint power-constraint Only APs that support the a radio mode support this command. Only APs that support the a radio mode support this command. 3-1

10 Document Module Command/Parameter WA2200 series WA2600 series The maximum number of broadcast packets that can be forwarded on an Ethernet interface per second broadcast-suppression { ratio pps max-pps } pps max-pps ranges from 1 to pps max-pps ranges from 1 to Layer 2 LAN Switching Command Reference The maximum number of multicast packets allowed on an Ethernet interface per second multicast-suppression { ratio pps max-pps } pps max-pps ranges from 1 to pps max-pps ranges from 1 to The maximum number of unknown unicast packets allowed on an Ethernet interface per second unicast-suppression { ratio pps max-pps } pps max-pps ranges from 1 to pps max-pps ranges from 1 to DHCP commands DHCP server configuration commands Not supported Supported display ipv6 dhcp client [ interface interface-type interface-number ] Not supported Supported Layer 3 - IP Services Command Reference DHCPv6 commands display ipv6 dhcp client statistics [ interface interface-type interface-number ] Not supported Supported display ipv6 dhcp duid Not supported Supported reset ipv6 dhcp client statistics [ interface interface-type interface-number ] Not supported Supported 3-2

11 The models listed in this document are not applicable to all regions. Please consult your local sales office for the models applicable to your region. Support of the H3C WA series WLAN access points (APs) for commands may vary by AP model. For more information, see Feature Matrix. The interface types and the number of interfaces vary by AP model. 4 PPP Configuration Commands PPP Configuration Commands ip address ppp-negotiate ip address ppp-negotiate undo ip address ppp-negotiate Dialer interface view None Use the ip address ppp-negotiate command to enable IP address negotiation on the local interface, so that the local interface can accept the IP address allocated by the peer end. Use the undo ip address ppp-negotiate command to disable IP address negotiation. By default, IP address negotiation is disabled. Related commands: remote address and ppp ipcp remote-address forced. # Enable IP address negotiation on Dialer 1. [Sysname] interface Dialer 1 [Sysname-Dialer1] ip address ppp-negotiate 4-1

12 link-protocol ppp link-protocol ppp Dialer interface view None Use the link-protocol ppp command to enable PPP encapsulation on an interface. By default, PPP encapsulation is enabled is enabled on dialer interfaces. # Enable PPP on Dialer 2. [Sysname] interface Dialer 2 [Sysname-Dialer2] link-protocol ppp mtu mtu size undo mtu Dialer interface view size: MTU in bytes, in the range of 128 to Use the mtu command to set the MTU size of the interface. Use the undo mtu command to restore the default. By default, the MTU of an interface is 1500 bytes. # Set the MTU of Dialer 1 to 1200 bytes. [Sysname] interface Dialer 1 [Sysname-Dialer1] mtu

13 ppp account-statistics enable ppp account-statistics enable undo ppp account-statistics enable Interface view None Use the ppp account-statistics enable command to enable the generating of PPP accounting statistics. Use the undo ppp account-statistics enable command to disable the generating of PPP accounting statistics. By default, the generating of PPP accounting statistics is disabled. # Enable the generating of PPP accounting statistics on interface Dialer 2. [Sysname] interface Dialer2 [Sysname-Dialer2] ppp account-statistics enable ppp authentication-mode ppp authentication-mode { chap pap } [ [ call-in ] domain isp-name ] undo ppp authentication-mode Interface view chap: Adopts CHAP authentication. pap: Adopts PAP authentication. call-in: Authenticates the call-in users only. domain isp-name: Specifies the domain name for authentication, a string of 1 to 24 characters. Use the ppp authentication-mode command to configure the PPP authentication mode. Use the undo ppp authentication-mode command to disable PPP authentication. By default, PPP authentication is disabled. 4-3

14 If you run the ppp authentication-mode command with the domain keyword specified, you need to configure an address pool in the corresponding domain. (You can use the display domain command to display the domain configuration.) If you configure the ppp authentication-mode command without specifying the domain name, the system checks the username for domain information. If the username carries a domain name, the domain will be used for authentication (If the domain does not exist, the user s access request will be denied). If not, the default domain is used (you can use the domain default command to configure the default domain; if no default domain is configured, the default domain system is used by default). There are two types of PPP authentication: PAP authentication and CHAP authentication. PAP authentication is two-way handshake authentication. The password used is in plain text. CHAP authentication is three-way handshake authentication. The password is in cipher text. In addition, you can also adopt the AAA authentication algorithm list (if defined) to authenticate users. In either PPP authentication mode, AAA determines whether a user can pass the authentication through a local authentication database or an AAA server. For more information about creating a local user account, configuring local user attributes, creating a domain, and configuring domain attributes, see AAA in the Security Configuration Guide. For authentication on a dial-up interface, it is recommended that you configure authentication on both the physical interface and the dialer interface. Because when a physical interface receives a DCC call request, it first initiates PPP negotiation and authenticates the dial-in user, and then passes the call to the upper layer protocol. Related commands: ppp chap user, ppp pap local-user, and ppp chap password (PPP in the Layer 2 WAN Command Reference); local-user and domain default enable (AAA in the Security Command Reference). # Configure to authenticate the peer by using PAP on interface Dialer 1. [Sysname] interface Dialer1 [Sysname-Dialer1] ppp authentication-mode pap domain system ppp chap password ppp chap password { cipher simple } password undo ppp chap password Interface view 4-4

15 cipher: Specifies to display the password in cipher text. simple: Specifies to display the password in plain text. password: Default password for CHAP authentication, a string of 1 to 48 characters. When the simple keyword is used, this password is in plain text. When the cipher keyword is used, this password can either be in cipher text or in plain text. A password in plain text is a string of no more than 48 characters, such as aabbcc. A password in cipher text has a fixed length of 24 or 64 characters. For example, _(TT8F]Y\5SQ=^Q`MAF4<1!! or VV-F]7R%,TN$C1D*)O<-;<IX)aV\KMFAM(0=0\)*5WWQ=^Q`MAF4<<"TX$_S#6.N. Use the ppp chap password command to set the default password for CHAP authentication. Use the undo ppp chap password command to cancel the configuration. Related commands: ppp authentication-mode chap. # Set the default password for CHAP authentication to sysname, which is to be displayed in plain text. [Sysname] interface Dialer1 [Sysname-Dialer1] ppp chap password simple sysname ppp chap user ppp chap user username undo ppp chap user Interface view username: Username for CHAP authentication, a string of 1 to 80 characters, which is the one sent to the peer for the local AP to be authenticated. Use the ppp chap user command to set the username for CHAP authentication. Use the undo ppp chap user command to cancel the configuration. By default, the username for CHAP authentication is null. To pass CHAP authentication, the username/password of one side needs to be the local username/password of the peer. Related commands: ppp authentication-mode. # Set the username for CHAP authentication as Root on Dialer

16 [Sysname] interface Dialer1 [Sysname-Dialer1] ppp chap user Root ppp ipcp remote-address forced ppp ipcp remote-address forced undo ppp ipcp remote-address forced Interface view None Use the ppp ipcp remote-address forced command to configure the AP to assign IP addresses to the peer by force. This command also disables the peer from using locally configured IP addresses. Use the undo ppp ipcp remote-address forced command to cancel the configuration. By default, the peer can use locally configured IP address in PPP IPCP negotiation. That is, the AP assigns an IP address to its peer when the latter requests explicitly. It does not assign IP addresses to the peer when the latter already has IP addresses configured. To disable the peer from using locally configured IP addresses, execute the ppp ipcp remote-address forced command on the local interface. Related commands: remote address. # Configure an optional IP address on interface Dialer 1 for the peer. [Sysname] interface Dialer1 [Sysname-Dialer1] remote address # Configure IP address on interface Dialer 1 for the peer and assign the IP address to the peer by force. [Sysname] interface Dialer1 [Sysname-Dialer1] remote address [Sysname-Dialer1] ppp ipcp remote-address forced ppp pap local-user ppp pap local-user username password { cipher simple } password undo ppp pap local-user Interface view 4-6

17 username: Username of the local AP for PAP authentication, a string of 1 to 80 characters. cipher: Displays the password in cipher text. simple: Displays the password in plain text. password: Password of the local AP for PAP authentication, a string of 1 to 48 characters. When the simple keyword is specified, provide this argument in plain text. When the cipher keyword is specified, provide this password in either cipher text or plain text. When provided in plain text, the password must be a continuous string that contains no more than 48 characters, aabbcc for example; when provided in cipher text, the password must be fixed to 24 or 64 characters. For example, _(TT8F]Y\5SQ=^Q`MAF4<1!! or VV-F]7R%,TN$C1D*)O<-;<IX)aV\KMFAM(0=0\)*5WWQ=^Q`MAF4<<"TX$_S#6.N. Use the ppp pap local-user command to set the local username and password for PAP authentication. Use the undo ppp pap local-user command to cancel the local username and password configured. By default, the username and the password for PAP authentication are not set. For the local AP to pass PAP authentication on the remote device, make sure that the same username and password configured for the local AP are also configured on the remote device with the commands local-user username and password { cipher simple } password. Related commands: local-user and password (AAA in the Security Command Reference). # Set the local username and password for PAP authentication to user1 and pass1 (in plain text). [Sysname] interface Dialer1 [Sysname-Dialer1] ppp pap local-user user1 password simple pass1 ppp timer negotiate ppp timer negotiate seconds undo ppp timer negotiate Interface view seconds: Negotiation timeout time to be set, in the range 1 to 10 (in seconds). In PPP negotiation, if the local AP receives no response from the peer during this period after it sends a packet, the local AP sends the last packet again. 4-7

18 Use the ppp timer negotiate command to set the PPP negotiation timeout time. Use the undo ppp timer negotiate command to restore the default. By default, the PPP negotiation timeout time is three seconds. # Set the PPP negotiation timeout time to five seconds. [Sysname] interface Dialer1 [Sysname-Dialer1] ppp timer negotiate 5 remote address remote address { ip-address pool [ pool-number ] } undo remote address Interface view ip-address: IP address to be assigned to the peer. pool [ pool-number ]: Specifies the number of the address pool that assigns IP addresses to the peer. The pool-number argument ranges from 0 to 99 and defaults to 0. Use the remote address command to set the IP address to be assigned to the peer or specify the address pool that assigns IP addresses to the peer. Use undo remote address to cancel the IP address assigned to the peer. By default, the AP does not assign IP addresses to the peer. You can use the remote address command to configure the AP to assign IP addresses for the peer if the local AP is configured with an IP address, while the peer has no IP address. To enable the peer to accept the IP address assigned to it by the AP, configure the ip address ppp-negotiate command on the peer, and configure the remote address command on the AP. 4-8

19 The IP address assigned to the peer by the local AP is not mandatory on the peer. That is, the peer can still use a locally configured IP address even if the local AP assigned one to it. To make the IP address assigned by the local AP mandatory, configure the ppp ipcp remote-address forced command. After you use the remote address command to assign an IP address for the peer, you cannot configure the remote address/undo remote address command for the peer again unless the peer releases the assigned IP address. Therefore, it is recommended that you shut down the port to release the assigned IP address before you configure the remote address/undo remote address command for the peer. However, after you use the command to assign an IP address to the peer from the address pool of the specified domain through AAA authentication, you can configure the command for the peer again. In this case, the original assigned IP address can still work, and the newly assigned IP address is adopted when the original one is released or adopted by a new PPP access. This command takes effect until the next IPCP negotiation. To make the remote address command take effect, it is recommended that you configure the remote address command before the ip address command. Related commands: ip address ppp-negotiate and ppp ipcp remote-address forced. # Set the IP address to be assigned to the peer through interface Dialer 1 as [Sysname] interface Dialer 1 [Sysname-Dialer1] remote address timer hold timer hold seconds undo timer hold Interface view seconds: Interval (in seconds) for sending keepalive packets, in the range 0 to A value of 0 disables keepalive packet sending. Use the timer hold command to set the interval for sending keepalive packets. Use the undo timer hold command to restore the default interval, 10 seconds. When the interval for sending keepalive packets is set to 0, no keepalive packet is sent. 4-9

20 As on slow links, it takes long to transmit large packets (this may cause the sending and receiving of keepalive packet to be postponed) and a link is considered to be fail If an interface on one side receives no keepalive packet from the peer for a specific number of keepalive periods, set the interval for sending keepalive packets properly for slow links to prevent the links from being torn down by mistake. On a PPP link, make sure the settings of the interval for sending keepalive packets on both sides are the same. # Set the interval for sending keepalive packets to 20 seconds on interface Dialer 1. [Sysname] interface Dialer 1 [Sysname-Dialer1] timer hold

21 5 PPPoE Configuration Commands PPPoE Client Configuration Commands display pppoe-client session display pppoe-client session { packet summary } [ dial-bundle-number number ] Any view 1: Monitor level packet: Displays the packet statistics on PPPoE sessions. summary: Displays PPPoE session summary. dial-bundle-number number: Displays the statistics on a PPPoE session. The number argument ranges from 1 to 255. If this keyword-argument combination is not specified, this command displays the statistics on all the PPPoE sessions. Use the display pppoe-client session command to display the information about a PPPoE session. # Display PPPoE session summary. <Sysname> display pppoe-client session summary PPPoE Client Session: ID Bundle Dialer Intf RemMAC LocMAC State Eth1/0/1 00e e PPPUP Eth1/0/2 00e e PPPUP Table 5-1 display pppoe-client session summary command output description Field ID Bundle Dialer Intf RemMAC LocMAC State PPPoE session ID Dialer bundle to which the PPPoE session belongs Dialer interface corresponding to the PPPoE session Ethernet interface on which the PPPoE session is based Remote MAC address Local MAC address PPPoE session state 5-1

22 # Display the packet statistics on PPPoE sessions. <Sysname> display pppoe-client session packet PPPoE Client Session: ID Intf InP InO InD OutP OutO OutD 1 Eth1/ Eth1/ Table 5-2 display pppoe-client session packet command output description Field ID Intf InP InO InD OutP OutO OutD PPPoE session ID Ethernet interface on which the PPPoE session is based Number of the packets received Size of the received packets (in bytes) Number of the received packets discarded Number of the packets sent Size of the sent packets (in bytes) Number of the sent packets discarded pppoe-client pppoe-client dial-bundle-number number [ no-hostuniq ] [ idle-timeout seconds [ diagnose [ interval seconds ] queue-length packets ] ] undo pppoe-client dial-bundle-number number VLAN interface view dial-bundle-number number: Specifies the dialer bundle number corresponding to a PPPoE session, in the range 1 to 255. A dialer bundle number uniquely identifies a PPPoE session, and it can also be used as a PPPoE session ID. no-hostuniq: Specifies not to carry the Host-Uniq field. By default, the Host-Uniq field is carried. diagnose: Specifies the working mode of the PPPoE session to diagnose. interval seconds: Specifies the interval (in seconds) between two PPPoE diagnose sessions. The seconds argument ranges from 5 to The default value is 120. idle-timeout seconds: Specifies the PPPoE session idle time. The seconds argument ranges from 1 to If this keyword-argument combination is specified, the PPPoE session works in packet trigger mode; if this keyword-argument combination and the diagnose keyword are not specified, the PPPoE session established works in permanent online mode. 5-2

23 queue-length packets: Specifies the number of the packets that can be cached before the PPPoE session is established. The packets argument ranges from 1 to 100 and defaults to 10. This keyword-argument combination becomes valid only when the idle-timeout keyword is configured. Use the pppoe-client command to establish a PPPoE session and specify the dialer bundle corresponding to the session. Use the undo pppoe-client command to remove a PPPoE session. By default, no PPPoE session is established. You can establish multiple PPPoE sessions on a VLAN interface. That is, a VLAN interface can belong to multiple dialer bundles. However, a dialer bundle can corresponds to only one VLAN interface. Each PPPoE session uniquely corresponds to a dialer bundle. If a VLAN interface in a dialer bundle of a dialer interface is used to establish a PPPoE session, you cannot add any interfaces to the dialer bundle. A PPPoE session works in one of these three modes: permanent online mode, packet trigger mode, and diagnose mode. Permanent online mode: If you execute the pppoe-client command without specifying the idle-timeout seconds keyword-argument combination, the AP initiates a PPPoE call to establish a PPPoE session immediately if the physical line is up. After the PPPoE session is established, it can only be terminated by the undo pppoe-client command. Packet trigger mode: If you execute the pppoe-client command with the idle-timeout seconds keyword-argument combination specified, the AP tries to establish the PPPoE session only when it has data to transmit. For a PPPoE session working in this mode, if no data is transmitted across it within the period specified by the seconds argument, the PPPoE session will be terminated automatically. Diagnose mode: If you execute the pppoe-client command with the diagnose keyword specified, the AP initiates a PPPoE call to establish a PPPoE session immediately after this command is configured, and terminates the current PPPoE session and then establishes another PPPoE session each time the interval specified by interval seconds expires. By periodically establishing and terminating PPPoE sessions, this function can be used to detect whether the PPPoE link is normal. Each AP supports only one PPPoE diagnose session at any given point in time. Related commands: reset pppoe-client. The difference between the reset pppoe-client and undo pppoe-client commands lies in that the former only temporarily terminates a PPPoE session, while the latter permanently removes a PPPoE session. After you execute the undo pppoe-client command, the PPPoE session identified by the number argument is removed permanently, regardless of the working mode of the PPPoE session. To use the PPPoE session again, you need to re-establish it all over again. 5-3

24 # Establish a PPPoE session on VLAN-interface 1. [Sysname] interface Vlan-interface 1 [Sysname-Vlan-interface1] pppoe-client dial-bundle-number 1 reset pppoe-client reset pppoe-client { all dial-bundle-number number } User view all: Clears all the PPPoE sessions. dial-bundle-number number: Specifies a dialer bundle by its number. The number argument ranges from 1 to 255. Use the reset pppoe-client command to reset a PPPoE session corresponding to a dialer bundle for the PPPoE session to be initiated again. A PPPoE session in permanent on-line mode and terminated by this command will be established again in 16 seconds. A PPPoE session in packet-triggered mode and terminated by this command will be established again only when there is a need for data transmission. Related commands: pppoe-client. The difference between the reset pppoe-client command and the undo pppoe-client command lies in: the former only temporarily terminates a PPPoE session, while the latter permanently removes a PPPoE session. # Reset all the PPPoE sessions. <Sysname> reset pppoe-client all DCC Configuration Commands dialer bundle dialer bundle number 5-4

25 undo dialer bundle Dialer interface view number: Dialer bundle number, in the range 1 to 255. Use the dialer bundle command to associate a dialer bundle with a dialer interface in RS-DCC. Use the undo dialer bundle command to remove the association. By default, dialer interfaces are not associated with any dialer bundle in RS-DCC. This command applies only to dialer interfaces. In addition, a dialer interface can be associated with only one dialer bundle. # Associate dialer bundle 3 with interface Dialer 1. [Sysname] interface dialer 1 [Sysname-Dialer1] dialer bundle 3 dialer-group dialer-group group-number undo dialer-group Dial interface (physical or dialer) view group-number: Number of a dialer access group, in the range 1 to 255. You may define it with the dialer-rule command. Use the dialer-group command to assign the interface to a dialer access group. Use the undo dialer-group command to remove the interface from the dialer access group. A DCC dial interface can belong to only one dialer access group. Configuring this command can overwrite the previous dialer access group setting for the interface, if any. 5-5

26 In the default configuration of the interface, the dialer-group command is not configured. You must configure this command for DCC to send packets. Related commands: dialer-rule. # Add interface Dialer 1 to dialer access group 1. [Sysname] dialer-rule 1 acl 3101 [Sysname] interface dialer1 [Sysname-Dialer1] dialer-group 1 dialer-rule dialer-rule group-number { protocol-name { deny permit } acl acl-number name acl-name } undo dialer-rule group-number System view group-number: Number of a dialer access group, the same as the group-number argument in the dialer-group command. It ranges from 1 to 255. protocol-name: Network protocol, which can take ip or ipx. deny: Denies packets of the specified protocol. permit: Permits packets of the specified protocol. acl acl-number: Specifies an ACL by its ACL number. The acl-number argument ranges from 2000 to An ACL number in the range 2000 to 2999 identifies a basic ACL; an ACL number in the range 3000 to 3999 identifies an advanced ACL. name acl-name: Specifies an ACL by its name. Use the dialer-rule command to set the condition for a DCC call to be placed for a dialer access group either by directly configuring a rule or by referencing an ACL. Use the undo dialer-rule command to remove the setting. You may configure a dial ACL to filter traffic that traverses a dial interface. Packets fall into two categories, depending on whether they are in compliance with the permit or deny statements in the dial ACL. 5-6

27 Packets that match a permit statement or that do not match any deny statements. When receiving such a packet, DCC either sends it out if a link is present and resets the idle-timeout timer or originates a new call to set up a link if no link is present. Packets that do not match any permit statements or that match a deny statement. When receiving such a packet, DCC either sends it out without resetting the idle-timeout timer if a link is present, or drops it without originating calls for link setup if no link is present. For DCC to send packets normally, you must configure a dial ACL and associate it with the concerned dial interface (physical or dialer) by using the dialer-group command. If no dial ACL is configured for the dialer access group associated with a dial interface, DCC will drop received packets on the interface as uninteresting ones. Related commands: dialer-group. # Define dialer-rule 1 and apply it to interface Dialer 1. [Sysname] dialer-rule 1 ip permit [Sysname] interface Dialer1 [Sysname-Dialer1] dialer-group 1 dialer user dialer user username undo dialer user Dialer interface view username: Remote username for PPP authentication, a string of 1 to 80 characters. Use the dialer user command to add a remote username for authenticating incoming calls. Use the undo dialer user command to remove the remote username. By default, no remote username is set. This command is only valid on dialer interfaces in RS-DCC. On a dialer interface encapsulated with PPP, DCC identifies which dialer interface is to be used for receiving calls based on the remote username obtained through PPP authentication. You may configure multiple dialer users (up to 255) on a dialer interface. This allows DCC to provide accesses to multiple dial interfaces by using one dialer interface. Use this command on a C-DCC enabled dialer interface with caution. It enables RS-DCC and can remove the C-DCC configurations on the interface. Performing the undo dialer user command on a dialer interface can clear all configurations on it. Related commands: ppp pap local-user and ppp chap user. 5-7

28 # Add a remote username routerb. [Sysname] interface dialer 1 [Sysname-Dialer1] dialer user routerb 5-8

29 6 Index D I L M P R T D dialer bundle 5-4 dialer user 5-7 dialer-group 5-5 dialer-rule 5-6 display pppoe-client session 5-1 I ip address ppp-negotiate 4-1 L link-protocol ppp 4-2 M mtu 4-2 P ppp account-statistics enable 4-3 ppp authentication-mode 4-3 ppp chap password 4-4 ppp chap user 4-5 ppp ipcp remote-address forced 4-6 ppp pap local-user 4-6 ppp timer negotiate 4-7 pppoe-client 5-2 R remote address 4-8 reset pppoe-client 5-4 T timer hold