HP A-MSR Router Series Layer 2 - WAN. Command Reference. Abstract

Transcription

1 HP A-MSR Router Series Layer 2 - WAN Command Reference Abstract This document describes the commands and command syntax options available for the HP A Series products. This document is intended for network planners, field technical support and servicing engineers, and network administrators who work with HP A Series products. Part number: Software version: CMW520-R2207P02 Document version: 6PW

2 Legal and notice information Copyright 2011 Hewlett-Packard Development Company, L.P. No part of this documentation may be reproduced or transmitted in any form or by any means without prior written consent of Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. HEWLETT-PACKARD COMPANY MAKES NO WARRANTY OF ANY KIND WITH REGARD TO THIS MATERIAL, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. Hewlett-Packard shall not be liable for errors contained herein or for incidental or consequential damages in connection with the furnishing, performance, or use of this material. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein.

3 Contents SLIP configuration commands 1 link-protocol slip 1 PPP and MP configuration commands 2 PPP configuration commands 2 ip address ppp-negotiate 2 ip pool 2 link-protocol ppp 3 ppp accm 4 ppp account-statistics enable 4 ppp acfc local 5 ppp acfc remote 6 ppp authentication-mode 6 ppp chap password 8 ppp chap user 8 ppp ipcp dns 9 ppp ipcp dns admit-any 10 ppp ipcp dns request 11 ppp ipcp remote-address forced 11 ppp lqc 12 ppp pap local-user 13 ppp pfc local 14 ppp pfc remote 15 ppp timer negotiate 15 remote address 16 timer hold 17 MP configuration commands 18 bandwidth 18 broadcast-limit link 18 default 19 description 20 display interface mp-group 20 display interface virtual-template 23 display ppp mp 25 display virtual-access 26 interface mp-group 28 interface virtual-template 28 mtu 29 ppp mp 29 ppp mp binding-mode 30 ppp mp endpoint 31 ppp mp fragment enable 32 ppp mp max-bind 32 ppp mp min-bind 33 ppp mp min-fragment 34 ppp mp mp-group 35 ppp mp short-sequence 35 ppp mp sort-buffer-size 36 iii

4 ppp mp user 37 ppp mp virtual-template 38 reset counters interface mp-group 38 reset counters interface virtual-template 39 shutdown 39 PPP link efficiency mechanism configuration commands 40 display ppp compression iphc rtp 40 display ppp compression iphc tcp 41 display ppp compression stac-lzs 43 ip tcp vjcompress 44 ppp compression iphc 44 ppp compression iphc rtp-connections 45 ppp compression iphc tcp-connections 46 ppp compression stac-lzs 47 ppp mp lfi 48 ppp mp lfi delay-per-frag 48 ppp mp lfi size-per-frag 49 reset ppp compression iphc 49 reset ppp compression stac-lzs 50 PPPoE configuration commands 51 PPPoE server configuration commands 51 display pppoe-server session 51 pppoe-server abnormal-offline-count threshold 52 pppoe-server abnormal-offline-percent threshold 53 pppoe-server bind 54 pppoe-server log-information off 54 pppoe-server max-sessions local-mac 55 pppoe-server max-sessions remote-mac 55 pppoe-server max-sessions total 56 pppoe-server normal-offline-percent threshold 57 reset pppoe-server 57 PPPoE client configuration commands 58 display pppoe-client session 58 pppoe-client 59 reset pppoe-client 61 ISDN configuration commands 62 deactive-protect (isdn bri interface view) 62 dialer isdn-leased (isdn bri interface view) 62 display isdn active-channel 63 display isdn call-info 64 display isdn call-record 67 display isdn parameters 68 display isdn spid 69 isdn bch-local-manage 71 isdn bch-select-way 72 isdn bri-slipwnd-size 72 isdn caller-number 73 isdn calling 74 isdn carry calling-name 74 isdn carry connected-name 75 isdn carry channel-id once-only 75 isdn check-called-number 76 isdn check-time 77 isdn crlength 77 iv

5 isdn ignore connect-ack 78 isdn ignore hlc 80 isdn ignore llc 80 isdn ignore sending-complete 81 isdn l3-timer 82 isdn link-mode 83 isdn number-property 84 isdn overlap-sending 88 isdn pri-slipwnd-size 89 isdn progress-indicator 90 isdn protocol-mode 91 isdn protocol-type 91 isdn q921-permanent 92 isdn q931-traditional 93 isdn send-restart 93 isdn service 94 isdn spid auto_trigger 95 isdn spid nit 95 isdn spid timer 96 isdn spid service 97 isdn spid resend 98 isdn spid1 98 isdn spid2 99 isdn statistics 100 isdn two-tei 101 isdn message-conversion progress-to-alerting enable 102 permanent-active 102 power-source 103 Frame relay configuration commands 105 Basic frame relay configuration commands 105 annexg 105 display fr dlci-switch 105 display fr inarp-info 106 display fr interface 107 display fr lmi-info 108 display fr map-info 110 display fr pvc-info 111 display fr statistics 112 display x25 template 114 fr dlci 115 fr dlci-switch 116 fr inarp 117 fr interface-type 118 fr lmi n391dte 119 fr lmi n392dce 119 fr lmi n392dte 120 fr lmi n393dce 121 fr lmi n393dte 122 fr lmi t392dce 123 fr lmi type 123 fr map ip 124 fr switch 125 fr switching 126 interface serial 127 v

6 link-protocol fr 127 remark fr-de 128 reset fr inarp 129 reset fr pvc 129 shutdown 130 timer hold 130 x25-template 131 x25 template 132 Frame relay compression configuration commands 132 display fr compress 132 display fr iphc 133 fr compression frf9 135 fr compression iphc 136 fr iphc 137 MFR configuration commands 138 display interface mfr 138 display mfr 141 interface mfr 144 link-protocol fr mfr 145 mfr bundle-name 146 mfr fragment 146 mfr fragment-size 147 mfr link-name 148 mfr retry 148 mfr timer ack 149 mfr timer hello 150 mfr window-size 151 reset counters interface 151 PPPoFR and MPoFR configuration commands 152 display fr map-info pppofr 152 fr map ppp 153 DCC configuration commands 154 dialer bundle 154 dialer bundle-member 154 dialer callback-center 155 dialer call-in 156 dialer circular-group 157 dialer disconnect 158 dialer enable-circular 158 dialer flow-interval 159 dialer isdn-leased (physical interface view) 160 dialer number 161 dialer overlap-receiving 161 dialer priority 162 dialer queue-length 163 dialer route 163 dialer threshold 165 dialer timer autodial 166 dialer timer compete 166 dialer timer enable 167 dialer timer idle 168 dialer timer wait-carrier 168 dialer timer warmup 169 dialer user 170 vi

7 dialer-group 171 dialer-rule 171 display dialer 172 display interface dialer 174 interface dialer 176 ppp callback 177 ppp callback ntstring 178 reset counters interface 179 standby routing-group 179 standby routing-rule 180 standby timer routing-disable 181 Modem management configuration commands 182 modem 182 modem auto-answer 182 modem caller-number resolve 183 modem timer answer 184 sendat 185 service modem-callback 187 ATM configuration commands 189 atm class 189 atm-class 189 atm-link check 190 bandwidth 190 clock 191 default 192 description 192 display atm class 193 display atm interface 194 display atm map-info 195 display atm pvc-group 197 display atm pvc-info 198 display interface virtual-ethernet 201 encapsulation 204 eoapad enable 205 interface atm 205 ip-precedence 206 mac-address 207 map bridge 208 map ip 209 map ppp 210 mtu 211 oam ais-rdi 211 oam frequency 212 oamping interface 213 pvc 214 pvc-group 215 pvc max-number 216 pvp limit 217 reset counters interface virtual-ethernet 217 remark atm-clp 218 service cbr 219 service ubr 220 service vbr-nrt 220 service vbr-rt 221 vii

8 shutdown 222 transmit-priority 223 tx-bd-limit 224 HDLC configuration commands 225 display hdlc compression stac 225 hdlc compression stac 226 link-protocol hdlc 226 reset hdlc compression stac 227 timer hold 227 DLSw configuration commands 229 code 229 display dlsw circuits 229 display dlsw information 230 display dlsw remote 232 display dlsw reachable-cache 233 display llc2 235 dlsw bridge-set 236 dlsw enable 236 dlsw ethernet-frame-filter 237 dlsw local 238 dlsw reachable 239 dlsw reachable-cache 240 dlsw remote 240 dlsw reverse 242 dlsw max-transmission 243 dlsw multicast 243 dlsw timer 244 idle-mark 245 link-protocol sdlc 246 llc2 max-ack 246 llc2 max-pdu 247 llc2 max-send-queue 247 llc2 max-transmission 248 llc2 modulo 248 llc2 receive-window 249 llc2 timer ack 250 llc2 timer ack-delay 250 llc2 timer busy 251 llc2 timer detect 252 llc2 timer poll 252 llc2 timer reject 253 reset dlsw circuits 253 reset dlsw reachable-cache 254 reset dlsw tcp 254 sdlc controller 255 sdlc enable dlsw 256 sdlc mac-map local 257 sdlc mac-map remote 258 sdlc max-pdu 259 sdlc max-send-queue 259 sdlc max-transmission 260 sdlc modulo 260 sdlc sap-map local 261 sdlc sap-map remote 262 viii

9 sdlc simultaneous 263 sdlc status 263 sdlc timer ack 264 sdlc timer lifetime 265 sdlc timer poll 265 sdlc window 266 sdlc xid 267 L2TP configuration commands 268 allow l2tp 268 display l2tp session 269 display l2tp tunnel 270 interface virtual-template 271 l2tp enable 271 l2tp sendaccm enable 272 l2tp-auto-client enable 272 l2tp-group 273 l2tpmoreexam enable 274 mandatory-chap 274 mandatory-lcp 275 reset l2tp tunnel 276 start l2tp 277 tunnel authentication 277 tunnel avp-hidden 278 tunnel flow-control 279 tunnel name 279 tunnel password 280 tunnel timer hello 281 L2TP-based EAD commands 282 display ppp access-control interface 282 ppp access-control enable 283 ppp access-control match-fragments 284 Bridging configuration commands 286 bandwidth 286 bridge aging-time 286 bridge bridge-set enable 287 bridge bridging 288 bridge enable 288 bridge learning 289 bridge mac-address 289 bridge routing 290 bridge routing-enable 291 bridge vlanid-transparent-transmit enable 292 bridge-set 292 default 293 description 293 display bridge address-table 294 display bridge information 295 display bridge traffic 297 display interface bridge-template 298 fr map bridge 301 interface bridge-template 302 mac-address (bridge-template interface view) 303 map bridge-group 303 ix

10 reset bridge address-table 304 reset bridge traffic 304 reset counters interface 305 shutdown 306 x25 map bridge 306 EtoPPP and EtoFR configuration commands 308 EtoPPP configuration commands 308 display etoppp translate 308 etoppp translate 309 reset etoppp translate 310 EtoFR configuration commands 311 display etofr translate 311 etofr translate 312 reset etofr translate 313 LAPB and X.25 configuration commands 314 LAPB configuration commands 314 lapb max-frame 314 lapb modulo 315 lapb pollremote 316 lapb retry 316 lapb timer 317 lapb window-size 318 link-protocol lapb 319 reset lapb statistics 319 X.25 configuration commands 320 channel 320 display x25 alias-policy 321 display x25 cug 322 display x25 hunt-group-info 323 display x25 map 324 display x25 pad 325 display x25 switch-table pvc 326 display x25 switch-table svc 327 display x25 vc 328 display x25 x2t switch-table 331 display x25 xot 332 link-protocol x pad 334 reset x reset xot 335 translate ip 335 translate x x25 add-facility 337 x25 alias-policy 338 x25 call-facility 339 x25 cug-service 340 x25 default-protocol 341 x25 flowcontrol 342 x25 hunt-group 342 x25 ignore called-address 343 x25 ignore calling-address 344 x25 local-cug 345 x25 map 346 x25 modulo 348 x

11 x25 packet-size 349 x25 pvc 349 x25 queue-length 351 x25 receive-threshold 352 x25 remove-facility 353 x25 response called-address 353 x25 response calling-address 354 x25 reverse-charge-accept 355 x25 roa-list 355 x25 switch pvc 356 x25 switch svc 358 x25 switch svc hunt-group 360 x25 switch svc xot 361 x25 switching 363 x25 timer hold 363 x25 timer idle 364 x25 timer tx0 365 x25 timer tx1 365 x25 timer tx2 366 x25 timer tx3 367 x25 vc-per-map 368 x25 vc-range 368 x25 window-size 369 x25 x121-address 370 x25 xot pvc 371 x29 timer inviteclear-time 372 Support and other resources 373 Contacting HP 373 Subscription service 373 Related information 373 Documents 373 Websites 373 Conventions 374 Index 376 xi

12 SLIP configuration commands link-protocol slip Use the link-protocol slip command to enable SLIP encapsulation on an interface. You can enable SLIP encapsulation only on asynchronous interfaces. For a synchronous/asynchronous interface, you can switch it to the asynchronous mode and then enable SLIP encapsulation on it. Some asynchronous interfaces do not support the SLIP protocol, but you can still configure the linkprotocol slip command on it. When you do that, the system informs you that the operation of SLIP encapsulation fails. By then, no encapsulation is enabled on the interface. You must use the link-protocol ppp command to enable PPP encapsulation on the interface to make it available again. link-protocol slip Interface view None # Enable SLIP encapsulation on synchronous/asynchronous interface Serial 2/0. [Sysname] interface serial 2/0 [Sysname-Serial2/0] physical-mode async [Sysname-Serial2/0] async mode protocol [Sysname-Serial2/0] link-protocol slip 1

13 PPP and MP configuration commands PPP configuration commands ip address ppp-negotiate ip pool Use the ip address ppp-negotiate command to enable IP address negotiation on the local interface, so that the local interface can accept the IP address allocated by the peer end. Use the undo ip address ppp-negotiate command to disable IP address negotiation. By default, IP address negotiation is disabled. Related commands: remote address and ppp ipcp remote-address forced. ip address ppp-negotiate undo ip address ppp-negotiate Interface view None # Enable IP address negotiation on Serial 2/0. [Sysname] interface serial 2/0 [Sysname-Serial2/0] ip address ppp-negotiate Use the ip pool command to configure an address pool for assigning IP addresses to PPP users. Use the undo ip pool command to remove an address pool. By default, no IP address pool is configured for PPP users. IP address pools configured in system view are for PPP users that do not need authentication. To configure an IP address pool for the peer PPP users, use the remote address command in a specified interface view. 2

14 IP address pools configured in ISP domain view are for PPP users that need authentication in the specified ISP domain. These IP address pools apply to the interfaces that connect to a larger number of PPP users than those the interfaces can assign IP addresses for. For example, an Ethernet interface running PPPoE can accommodate up to 4096 users, but you can configure only one address pool containing up to 1024 addresses on the virtual template of the Ethernet interface. This cannot satisfy the demand. However, IP address pools configured in ISP domains can solve the problem. Related commands: remote address ip pool pool-number low-ip-address [ high-ip-address ] undo ip pool pool-number System view, ISP domain view pool-number: Specifies the number of the address pool, ranging from 0 to 99. low-ip-address: Specifies the start address of the address pool. high-ip-address: Specifies the end IP address of the address pool. An address pool can contain up to 1024 IP addresses. If the end IP address is not specified, the address pool has only one IP address, which is the start IP address. # Configure IP address pool 0, with the IP addresses ranging from to [Sysname] domain test [Sysname-isp-test] ip pool link-protocol ppp Use the link-protocol ppp command to enable PPP encapsulation on an interface. By default, PPP encapsulation is enabled on all the interfaces except the Ethernet interface. link-protocol ppp Interface view None 3

15 ppp accm # Enable PPP encapsulation on Serial 2/0. [Sysname] interface serial 2/0 [Sysname-Serial2/0] link-protocol ppp Use the ppp accm command to configure the ACCM value sent to the peer. Use the undo ppp accm command to restore the default. By default, the ACCM value sent to the peer is 0x000A0000. ACCM negotiation only applies on asynchronous links. ppp accm hex-number undo ppp accm Interface view Parameter hex-number: Specifies the ACCM value in hexadecimal format, ranging from 0 to 0xFFFFFFFF. # Set the ACCM value sent to the peer on Serial 2/0 to 0x [Sysname] interface serial 2/0 [Sysname-Serial2/0] ppp accm ppp account-statistics enable Use the ppp account-statistics enable command to enable PPP traffic statistics collection. Use the undo ppp account-statistics enable command to disable PPP traffic statistics collection. By default, PPP traffic statistics collection is disabled. ppp account-statistics enable [ acl { acl-number name acl-name } ] undo ppp account-statistics enable 4

16 Interface view acl: Generates PPP accounting statistics for traffic that matches the configured ACL. acl-number: Specifies the ACL number, ranging from 2000 to 3999, where: 2000 to 2999 are numbers for basic IPv4 ACLs to 3999 are numbers for advanced IPv4 ACLs. name acl-name: Specifies an ACL by its name. The acl-name represents the name of an IPv4 ACL, a casesensitive string that starts with an English letter and contains 1 to 63 characters. To avoid confusion, do not use the English word all as an IPv4 ACL name. # Enable PPP traffic statistics collection on interface Serial 2/0. [Sysname] interface serial 2/0 [Sysname-Serial2/0] ppp account-statistics enable ppp acfc local Parameter Use the ppp acfc local command to configure the local end to send ACFC requests, that is, configure the local end to include the ACFC option in its outbound LCP negotiation requests. Use the undo ppp acfc local command to restore the default. By default, the local end does not include the ACFC option in its outbound LCP negotiation requests. ppp acfc local request undo ppp acfc local Interface view request: Specifies that the local end includes the ACFC option in its transmitted LCP negotiation requests. # Configure port Serial 2/0 to send ACFC requests to its peer in PPP negotiation. [Sysname] interface serial 2/0 5

17 [Sysname-Serial2/0] ppp acfc local request ppp acfc remote Use the ppp acfc remote command to configure how the local end handles the ACFC requests received from the remote peer. Use the undo ppp acfc remote command to restore the default. By default, the device accepts ACFC requests received from a remote peer, but does not perform ACFC on frames sent to the peer. ppp acfc remote { apply ignore reject } undo ppp acfc remote Interface view apply: Configures the local end to accept ACFC requests received from the remote peer and to perform ACFC on frames sent to the peer. ignore: Configures the local end to accept ACFC requests received from the remote peer, but not to perform ACFC on frames sent to the peer. reject: Configures the local end to reject ACFC requests sent from the remote peer. # Configure port Serial 2/0 to accept ACFC requests received from the remote peer and to perform ACFC on frames sent to the peer. [Sysname] interface serial 2/0 [Sysname-Serial2/0] ppp acfc remote apply ppp authentication-mode Use the ppp authentication-mode command to configure the PPP authentication mode. Use the undo ppp authentication-mode command to disable PPP authentication. By default, PPP authentication is disabled. If you run the ppp authentication-mode command with the domain keyword specified, you must configure an address pool in the corresponding domain. You can use the display domain command to display the domain configuration. 6

18 If you configure the ppp authentication-mode command without specifying the domain name, the system checks the username for domain information. If the username contains a domain name, the domain will be used for authentication. If the domain does not exist, the user s access request will be denied. If not, the default domain is used. You can use the domain default command to configure the default domain. If no default domain is configured, the default domain system is used by default. PPP authentication falls into PAP, CHAP, MS-CHAP, and MS-CHAP-V2 authentication. s PAP authentication is two-way handshake authentication. The password used is in plain text. CHAP authentication is three-way handshake authentication. The password is in cipher text. MS-CHAP is a three-way handshake authentication. The password is in cipher text. MS-CHAP-V2 is a three-way handshake authentication. The password is in cipher text. You can configure several authentication modes simultaneously. In addition, you can also use the AAA authentication algorithm list, if defined, to authenticate users. In any PPP authentication mode, AAA determines whether a user can pass the authentication through a local authentication database or an AAA server. For more information about creating a local user account, configuring its attributes, creating a domain, and configuring domain attributes, see Security Configuration Guide. For authentication on a dial-up interface, configure authentication on both the physical interface and the dialer interface. Because when a physical interface receives a DCC call request, it first initiates PPP negotiation and authenticates the dial-in user, and then passes the call to the upper layer protocol. Related commands: ppp chap user, ppp pap local-user, and ppp chap password; local-user and domain default (Security Command Reference). ppp authentication-mode { chap ms-chap ms-chap-v2 pap } * [ [ call-in ] domain isp-name ] undo ppp authentication-mode Interface view chap: Uses CHAP authentication. ms-chap: Uses MS-CHAP authentication. ms-chap-v2: Uses MS-CHAP-V2 authentication. pap: Uses PAP authentication. call-in: Authenticates the call-in users only. domain isp-name: Specifies the domain name for authentication, a string of 1 to 24 characters. # Configure interface Serial 2/0 to authenticate the peer device by using PAP. [Sysname] interface serial 2/0 7

19 [Sysname-Serial2/0] ppp authentication-mode pap domain system # Configure interface Serial 2/0 to authenticate the peer device by using PAP, CHAP, and MS-CHAP. [Sysname] interface serial 2/0 [Sysname-Serial2/0] ppp authentication-mode pap chap ms-chap domain system ppp chap password Use the ppp chap password command to set the default password for CHAP authentication. Use the undo ppp chap password command to cancel the configuration. Related commands: ppp authentication-mode chap. ppp chap password { cipher simple } password undo ppp chap password Interface view cipher: Displays the password in cipher text. simple: Displays the password in plain text. password: Specifies the default password for CHAP authentication, a string of 1 to 48 characters. When the simple keyword is used, this password is in plain text. When the cipher keyword is used, this password can either be in cipher text or in plain text. A password in plain text is a string of no more than 48 characters, such as aabbcc. A password in cipher text has a fixed length of 24 or 64 characters, such as _(TT8F]Y\5SQ=^Q`MAF4<1!! and VV-F]7R%,TN$C1D*)O<- ;<IX)aV\KMFAM(0=0\)*5WWQ=^Q`MAF4<<"TX$_S#6.N. # Set the default password for CHAP authentication to sysname, which is to be displayed in plain text. [Sysname] interface serial 2/0 [Sysname-Serial2/0] ppp chap password simple sysname ppp chap user Use the ppp chap user command to set the username for CHAP authentication. Use the undo ppp chap user command to cancel the configuration. By default, the username for CHAP authentication is null. 8

20 To pass CHAP authentication, the username/password of one side must be the local username/password of the peer. Related commands: ppp authentication-mode. ppp chap user username undo ppp chap user Parameter Interface view username: Specifies the username for CHAP authentication, a case-sensitive string of 1 to 80 characters. The username is sent to the peer device for the local device to be authenticated. # Set the username for CHAP authentication as Root on interface Serial 2/0. [Sysname] interface serial 2/0 [Sysname-Serial2/0] ppp chap user Root ppp ipcp dns Use the ppp ipcp dns command to configure the primary and secondary DNS server IP addresses to be used in PPP negotiation. Use the undo ppp ipcp dns command to cancel the configuration. By default, a device does not allocate DNS server IP addresses for its peer. When connected through PPP, a device can assign DNS server IP addresses to its peer during PPP negotiation, if the peer requests, for the peer to access the network by domain names. If a PC is connected to the device through PPP, you can execute the winipcfg command or the ipconfig /all command on the PC to check the DNS server IP addresses assigned by the device. A device can provide a primary DNS server IP address and a secondary DNS server IP address to its peer. ppp ipcp dns primary-dns-address [ secondary-dns-address ] undo ppp ipcp dns primary-dns-address [ secondary-dns-address ] Interface view 9

21 primary-dns-address: Specifies the primary DNS server IP address to be set. secondary-dns-address: Secondary DNS server IP address to be set. # Set the primary DNS server IP address to and the secondary DNS server IP address to on interface Serial 2/0. [Sysname] interface serial 2/0 [Sysname-Serial2/0] ppp ipcp dns ppp ipcp dns admit-any Use the ppp ipcp dns admit-any command to configure the device to accept the DNS server IP addresses assigned by the peer even though it does not request the peer for the DNS server IP addresses. Use the undo ppp ipcp dns admit-any command to configure the device to deny the DNS server IP addresses assigned by the peer if it does not request the peer for the DNS server IP addresses. By default, a device does not accept the DNS server IP addresses assigned by the peer if it does not request the peer for the DNS server IP addresses. You can configure a device to accept the DNS server IP addresses assigned by the peer, through which domain names can be resolved for the device. ppp ipcp dns admit-any undo ppp ipcp dns admit-any Interface view None # Configure interface Serial 2/0 of the local device to accept the DNS server IP addresses allocated by the peer. [Sysname] interface serial 2/0 [Sysname-Serial2/0] ppp ipcp dns admit-any 10

22 ppp ipcp dns request Use the ppp ipcp dns request command to enable a device to request its peer for the DNS server IP address actively through a port. Use the undo ppp ipcp dns request command to restore the default. By default, a device does not request its peer for the DNS server IP address actively. You can configure a device to request its peer (especially in cases where a device is connected to the operator s access server through a dial-up link) for the DNS server address during PPP negotiation to enable domain names to be resolved for the device. You can check the DNS server IP addresses of a port by displaying the information about the port. ppp ipcp dns request undo ppp ipcp dns request Interface view None # Enable the device to request its peer for the DNS server IP address actively through interface Serial 2/0. [Sysname] interface serial 2/0 [Sysname-Serial2/0] ppp ipcp dns request ppp ipcp remote-address forced Use the ppp ipcp remote-address forced command to configure a device to assign an IP address to the peer by force. This command also disables the peer from using a locally configured IP address. Use the undo ppp ipcp remote-address forced command to cancel the configuration. By default, the peer is allowed to use its locally configured IP address. The local end assigns an IP address to the peer only when being explicitly requested to do so. In case the peer already has an IP address, the local end will not assign one to the peer. To disable the peer from using a locally configured IP address, perform the ppp ipcp remote-address forced command. Related commands: remote address. 11

23 ppp ipcp remote-address forced undo ppp ipcp remote-address forced s Interface view None ppp lqc # Configure an optional IP address on interface Serial 2/0 for the peer. [Sysname] interface serial 2/0 [Sysname-Serial2/0] remote address # Configure IP address on interface Serial 2/0 for the peer and assign the IP address to the peer by force. [Sysname] interface serial 2/0 [Sysname-Serial2/0] remote address [Sysname-Serial2/0] ppp ipcp remote-address forced Use the ppp lqc command to enable PPP LQC and set the PPP LQC close-percentage and PPP LQC resume-percentage. Use the undo ppp lqc command to disable PPP LQC. By default, PPP LQC is disabled. By default, PPP LQC close-percentage and PPP LQC resume-percentage are the same. When enabling PPP LQC by executing the ppp lqc command, make sure the close-percentage parameter is not larger than the resume-percentage parameter. PPP LQC monitors the quality of PPP links in real time, including those in MP bundles. With PPP LQC enabled, a link is disabled when its quality drops down below the PPP LQC close-percentage and is enabled when its quality recovers above the PPP LQC resume-percentage. To prevent a PPP link from being disabled/enabled frequently, the PPP link undergoes a delay before it is enabled by PPP LQC. If PPP LQC is not enabled, each end of a PPP link sends keepalive packets to its peer periodically. After you enable PPP LQC, LQRs packets replace keepalive packets to monitor the link. With PPP LQC enabled, the system determines the link quality by processing LQR packets received and disables the link if two successive link quality samples are below the PPP LQC close-percentage. After a PPP link is disabled by PPP LQC, the system samples the link quality once in each period ten times of LQR packet sending intervals, and enables the link up if three successive link quality samples are higher than 12

24 the PPP LQC resume-percentage. A disabled link must experience at least 30 keepalive periods before it can be enabled again. Therefore, make sure the keepalive period is proper in order that PPP links can be enabled timely. For a PPP link with PPP LQC enabled on both sides, the PPP LQC settings of the both sides must be the same. Normally, it is not recommended to enable PPP LQC on both sides of a PPP link. As DCC tears down a dial-up line when the link established on the line is disabled, PPP LQC cannot operate properly on dial-up lines and, thus, is not recommended on dial-up links. ppp lqc close-percentage [ resume-percentage ] undo ppp lqc Interface view close-percentage: Specifies the PPP LQC close-percentage, ranging from 0 to 100. resume-percentage: Specifies the PPP LQC resume-percentage, ranging from 0 to 100. # Enable PPP LQC on interface Serial 2/0, setting the PPP LQC close-percentage to 90 and resumepercentage to 95. [Sysname] interface serial 2/0 [Sysname-Serial2/0] ppp lqc ppp pap local-user Use the ppp pap local-user command to set the local username and password for PAP authentication. Use the undo ppp pap local-user command to cancel the local username and password configured. By default, the username and the password for PAP authentication are not set. For the local device to pass PAP authentication on the remote device, make sure that the same username and password configured for the local device are also configured on the remote device with the commands local-user username and password { cipher simple } password. Related commands: local-user and password (Security Command Reference). ppp pap local-user username password { cipher simple } password undo ppp pap local-user Interface view 13

25 username: Specifies the username of the local device for PAP authentication, a case-sensitive string of 1 to 80 characters. cipher: Displays the password in cipher text. simple: Displays the password in plain text. password: Specifies the password of the local device for PAP authentication, a case-sensitive string of 1 to 48 characters. When the simple keyword is specified, provide this parameter in plain text. When the cipher keyword is specified, provide this password in either cipher text or plain text. When provided in plain text, the password can contain no more than 48 characters (such as aabbcc); when provided in cipher text, the password must be fixed to 24 or 64 characters, such as _(TT8F]Y\5SQ=^Q`MAF4<1!! and VV-F]7R%,TN$C1D*)O<-;<IX)aV\KMFAM(0=0\)*5WWQ=^Q`MAF4<<"TX$_S#6.N. # Configure the local username and password for PAP authentication as user1 and pass1 (in plain text). [Sysname] interface serial 2/0 [Sysname-Serial2/0] ppp pap local-user user1 password simple pass1 ppp pfc local Parameter Use the ppp pfc local command to configure the local end to send PFC requests, that is, configure the local end to include the PFC option in its outbound LCP negotiation requests. Use the undo ppp pfc local command to configure the local end to exclude the PFC option from its outbound LCP negotiation requests. By default, the local end does not include the PFC option in its outbound LCP negotiation requests. ppp pfc local request undo ppp pfc local Interface view request: Specifies that the local end includes the PFC option in its outbound LCP negotiation requests. # Configure port Serial 2/0 to send PFC requests during PPP negotiation. 14

26 [Sysname] interface serial 2/0 [Sysname-Serial2/0] ppp pfc local request ppp pfc remote Use the ppp pfc remote command to configure how the local end handles the PFC requests received from the remote peer. Use the undo ppp pfc remote command to restore the default. By default, the device accepts PFC requests received from a remote peer, but does not perform PFC on frames sent to the peer. ppp pfc remote { apply ignore reject } undo ppp pfc remote Interface view apply: Configures the local end to accept PFC requests received from the remote peer and to perform PFC on frames sent to the peer. ignore: Configures the local end to accept PFC requests received from the remote peer, but not to perform PFC on frames sent to the peer. reject: Configures the local end to reject PFC requests sent from the remote peer. # Configure port Serial 2/0 to accept PFC requests received from the remote peer and to perform PFC on frames sent to the peer. [Sysname] interface serial 2/0 [Sysname-Serial2/0] ppp pfc remote apply ppp timer negotiate Use the ppp timer negotiate command to set the PPP negotiation timeout time. Use the undo ppp timer negotiate command to restore the default. By default, the PPP negotiation timeout time is three seconds. ppp timer negotiate seconds undo ppp timer negotiate 15

27 Parameter Interface view seconds: Specifies the negotiation timeout time to be set, ranging from 1 to 10 (in seconds). In PPP negotiation, if the local device receives no response from the peer during this period after it sends a packet, the local device sends the last packet again. # Set the PPP negotiation timeout time to five seconds. [Sysname] interface serial 2/0 [Sysname-Serial2/0] ppp timer negotiate 5 remote address Use the remote address command to set the IP address to be assigned to the peer device or specify the address pool used for assigning an IP address to the peer device. Use the undo remote address to cancel the IP address configured to be assigned to the peer device. By default, an interface does not assign IP addresses to the peer device. The remote address command can be used when the local device is configured with an IP address, but the peer has no IP address. To enable the peer device to accept the IP address assigned to it by the local device, you must configure the ip address ppp-negotiate command on the peer device in addition to configuring the remote address command on the local device. The IP address assigned to the peer device by the local device is not mandatory on the peer device, or the peer device can still use a locally configured IP address even if the local device assigned one to it. To make the IP address assigned by the local device mandatory, you must configure the ppp ipcp remoteaddress forced command. After you use the remote address command to assign an IP address for the peer device, you cannot configure the remote address/undo remote address command for the peer again unless the peer releases the assigned IP address. Shut down the port to release the assigned IP address before you configure the remote address/undo remote address command for the peer. However, after you use the command to assign an IP address to the peer from the address pool of the specified domain through AAA authentication, you can configure the command for the peer again. In this case, the original assigned IP address can still work, and the newly assigned IP address is used when the original one is released or used by a new PPP access. This command does not take effect until the next IPCP negotiation. To make the remote address command take effect, configure the remote address command before the ip address command. Related commands: ip address ppp-negotiate, and ppp ipcp remote-address forced. remote address { ip-address pool [ pool-number ] } 16

28 undo remote address Interface view timer hold Parameter ip-address: Specifies the IP address to be assigned to the peer device. pool [ pool-number ]: Specifies the number of the address pool used for assigning an IP address to the peer. The pool-number parameter ranges from 0 to 99 and defaults to 0. # Specify the IP address to be assigned to the peer device through interface Serial 2/0 as [Sysname] interface serial 2/0 [Sysname-Serial2/0] remote address Use the timer hold command to set the interval for sending keepalive packets. Use the undo timer hold command to restore the default, or 10 seconds. Because a slow link takes long to transmit large packets, the sending and receiving of keepalives may be delayed so long that one end cannot receive keepalive packets from the peer for a specific number of keepalive periods and shuts down the link. To prevent the situation, set the interval for sending keepalive packets relatively longer. timer hold seconds undo timer hold Interface view seconds: Specifies the interval (in seconds) for sending keepalive packets, in the range 0 to 32,767. A value of 0 disables keepalive packet sending. # Set the interval for sending keepalive packets to 20 seconds on interface Serial 2/0. [Sysname] interface serial 2/0 [Sysname-Serial2/0] timer hold 20 17

29 MP configuration commands bandwidth Parameter s Use the bandwidth command to set the intended bandwidth for an interface. Use the undo bandwidth command to restore the default. You can get the intended bandwidth of an interface by using third-party software to query the value of the MIB ifspeed. The intended bandwidth of an interface is for the network management system to monitor the interface bandwidth, and does not affect the actual bandwidth of the interface. bandwidth bandwidth-value undo bandwidth VT interface view, MP-group interface view bandwidth-value: Specifies the intended bandwidth, ranging from 1 to 4,294,967,295 kbps. # Set the intended bandwidth to 1000 kbps for interface VT 10. [Sysname] interface virtual-template 10 [Sysname-Virtual-Template10] bandwidth 1000 # Set the intended bandwidth to 1000 kbps for interface MP-group 3. [Sysname] interface mp-group 3 [Sysname-Mp-group3] bandwidth 1000 broadcast-limit link Use the broadcast-limit link command to set the maximum number of links that can be used for transmitting multicast packets or broadcast packets for the VT. Use the undo broadcast-limit link command to restore the default. By default, the maximum number of links that can be used for transmitting multicast or broadcast packets is 30 for a VT. 18

30 For a VT containing multiple links, the system performance may decrease if all the links of the VT are engaged in multicast or broadcast packet transmission. You can use the broadcast-limit link command to limit the number of links that are capable of multicast or broadcast packet transmission. broadcast-limit link number undo broadcast-limit link Parameter default s VT view number: Specifies the maximum number of links that can be used for transmitting multicast or broadcast packets, ranging from 0 to 128. A value of 0 indicates that the transmission of multicast or broadcast packets is not supported. # Set the maximum number of links that are capable of multicast or broadcast packets transmission to 100 for VT 1. [Sysname] interface virtual-template 1 [Sysname-Virtual-Template1] broadcast-limit link 100 Use the default command to restore the default setting of the VT or MP-group interface. default VT interface view, MP-group interface view None # Restore the default setting of interface VT 10. [Sysname] interface virtual-template 10 [Sysname-Virtual-Template10] default This command will restore the default settings. Continue? [Y/N]:y 19

31 description Parameter s # Restore the default setting of interface MP-group 3. [Sysname] interface mp-group 3 [Sysname-Mp-group3] default This command will restore the default settings. Continue? [Y/N]:y Use the description command to set the description for the VT or MP-group interface. Use the undo description command to restore the default. By default, a VT or MP-group interface is described in the form of interface name Interface, for example, Virtual-Template1 Interface. description text undo description VT interface view, MP-group interface view text: Describes the interface, a case-sensitive character string of 1 to 80 characters. # Set the description for interface VT 10 to virtual-interface. [Sysname] interface virtual-template 10 [Sysname-Virtual-Template10] description virtual-interface # Set the description for interface MP-group 3 to mpgroup-interface. [Sysname] interface mp-group 3 [Sysname-Mp-group3] description mpgroup-interface display interface mp-group Use the display interface mp-group command to display information about the specified MP-group interface or all existing MP-group interfaces. If you do not specify the mp-group keyword, this command displays information about interfaces on the device. If you specify the mp-group keyword without the mp-number parameter, this command displays information about all existing MP-group interfaces. 20

32 display interface mp-group mp-number [ brief ] [ { begin exclude include } regular-expression ] display interface [ mp-group ] [ brief [ down ] ] [ { begin exclude include } regular-expression ] s Any view 1: Monitor level mp-number: Specifies the number of an existing multilink point to point protocol group (MP-group) interface. brief: Displays brief interface information. If you do not specify this keyword, this command displays detailed interface information. down: Displays information about interfaces in DOWN state and the causes. If you do not specify this keyword, this command displays information about interfaces in all states. : Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. # Display detailed information about interface MP-group 12. <Sysname> display interface mp-group 12 Mp-group12 current state: DOWN Line protocol current state: DOWN : Mp-group12 Interface The Maximum Transmit Unit is 1500, Hold timer is 10(sec) Internet protocol processing : disabled Link layer protocol is PPP LCP initial Physical is MP Output queue : (Urgent queue : Size/Length/Discards) 0/50/0 Output queue : (Protocol queue : Size/Length/Discards) 0/500/0 Output queue : (FIFO queuing : Size/Length/Discards) 0/75/0 Last clearing of counters: Never Last 300 seconds input: 0 bytes/sec 0 packets/sec Last 300 seconds output: 0 bytes/sec 0 packets/sec 0 packets input, 0 bytes, 0 drops 0 packets output, 0 bytes, 0 drops # Display brief information about interface MP-group12. <Sysname> display interface mp-group 12 brief 21

33 The brief information of interface(s) under route mode: Link: ADM - administratively down; Stby - standby Protocol: (s) - spoofing Interface Link Protocol Main IP MP12 DOWN DOWN -- # Display brief information about all MP-group interfaces in DOWN state. <Sysname> display interface mp-group brief down The brief information of interface(s) under route mode: Link: ADM - administratively down; Stby - standby Interface Link Cause MP1 ADM Administratively MP12 DOWN Not connected Table 1 Output description Field current state Line protocol current state The Maximum Transmit Unit Hold timer Internet protocol processing LCP initial Physical Physical state of the interface, which can be one of the following: DOWN (Administratively) Interface was shut down with the shutdown command, that is, it is down administratively. DOWN Interface is up administratively, but down physically. UP Interface is up both administratively and physically. Data link layer state (UP or DOWN). string of the interface. MTU of the interface. Interval at which the current interface sends keepalive packets. Network layer state (enabled or disabled). LCP negotiation is complete. Physical type of the interface. Output queue : (Urgent queue : Size/Length/Discards) Output queue : (Protocol queue : Size/Length/Discards) Traffic statistics of the interface output queues. Output queue : (FIFO queuing : Size/Length/Discards) Last clearing of counters: Never Last 300 seconds input: 0 bytes/sec 0 packets/sec Last 300 seconds output: 0 bytes/sec 0 packets/sec 0 packets input, 0 bytes, 0 drops Time when statistics on the interface were last cleared. Never indicates that statistics on the interface were never cleared. Average rate of input packets and output packets in the last 300 seconds. Total amount of the inbound packets of the interface (in the number of packets and in bytes), and the number of packets dropped among the inbound packets. 22

34 Field 0 packets output, 0 bytes, 0 drops The brief information of interfaces under route mode Link: ADM - administratively down; Stby - standby Protocol: (s) - spoofing Interface Link Protocol Main IP Cause Total amount of outbound packets of the interface (in the number of packets and in bytes), and the number of packets dropped among the outbound packets. Brief information about Layer 3 interfaces. Link status: ADM Interface has been shut down administratively. To recover its physical state, perform the undo shutdown command. Stby Interface is operating as a backup interface. To see the primary interface, use the display standby state command in High Availability Command Reference. If the network layer protocol state of an interface is shown as UP, but its link is an on-demand link or not present at all, its protocol attribute includes the spoofing flag (an s in parentheses). Abbreviated interface name. Physical link state of the interface, which can be: UP Link is up. ADM Link has been shut down administratively. To recover its physical state, perform the undo shutdown command. Protocol connection state of the interface, which can be UP, DOWN, or UP(s). Main IP address of the interface. of the interface. Cause of a DOWN physical link. If the port has been shut down with the shutdown command, this field displays Administratively. To restore the physical state of the interface, use the undo shutdown command. display interface virtual-template Use the display interface virtual-template command to display the information about a VT. If you do not specify the virtual-template keyword, this command displays information about all interfaces on the device. If you specify the virtual-template keyword without the number parameter, this command displays information about all existing VTs. Related commands: interface virtual-template. display interface virtual-template number [ brief ] [ { begin exclude include } regular-expression ] display interface [ virtual-template ] [ brief [ down ] ] [ { begin exclude include } regular-expression ] 23

35 s Any view 1: Monitor level number: Specifies the number of an existing VT. brief: Displays brief interface information. If you do not specify this keyword, this command displays detailed interface information. down: Displays information about interfaces in DOWN state and the causes. If you do not specify this keyword, this command displays information about interfaces in all states. : Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. # Display detailed information about VT 1. <Sysname> display interface virtual-template 1 Virtual-Template1 current state: UP Line protocol current state: UP (spoofing) : Virtual-Template1 Interface The Maximum Transmit Unit is 1500, Hold timer is 10(sec) Internet Address is /8 Primary Link layer protocol is PPP LCP initial, MP opened Physical is None, baudrate: bps Output queue : (Urgent queuing : Length) 100 Output queue : (Protocol queuing : Length) 500 Output queue : (FIFO queuing : Length) 75 Last clearing of counters: Never Last 300 seconds input: 0 bytes/sec 0 packets/sec Last 300 seconds output: 6 bytes/sec 0 packets/sec 512 packets input, bytes, 0 drops 614 packets output, bytes, 0 drops # Display brief information about VT 1. <Sysname> display interface virtual-template 1 brief The brief information of interface(s) under route mode: Link: ADM - administratively down; Stby - standby Protocol: (s) - spoofing Interface Link Protocol Main IP VT1 UP UP(s) -- 24

36 For the output description, see Table 1. display ppp mp Use the display ppp mp command to display the information about an MP interface. Related commands: link-protocol ppp and ppp mp. display ppp mp [ interface interface-type interface-number ] [ { begin exclude include } regularexpression ] Any view 1: Monitor level interface interface-type interface-number: Specifies an interface by its type and number. : Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. # Display the information about all the MP interfaces. <Sysname> display ppp mp Mp-group is Mp-group0 max-bind: 20, fragment: enable, min-fragment: 128,LFI max-delay: 100 Bundle Multilink, 6 members, Master link is Mp-group0 Peer's endpoint descriptor: 1e9935f57c85 Sequence format: short/long rcv/sent Bundle Up Time: 2005/03/13 19:54:23:60 0 lost fragments, 0 reordered, 0 unassigned, 0 interleaved, sequence 0/0 rcvd/sent The member channels bundled are: Serial2/1:15 Up-Time:2005/03/13 19:54:23:60 Serial2/1:16 Up-Time:2005/03/13 19:54:23:60 Serial2/1:17 Up-Time:2005/03/13 19:54:23:60 Serial2/1:18 Up-Time:2005/03/13 19:54:23:60 Serial2/1:19 Up-Time:2005/03/13 19:54:23:60 Serial2/1:20 Up-Time:2005/03/13 19:54:23:60 Inactive member channels: 4 members 25