Page 3 - Chapter 1 CBQ Configuration Commands; Syntax; View; bandwidth; Description; qos policy 3Com; Com Router Command Reference Guide Addendum for V1.2
Chapter 1 CBQ Configuration Commands 1.1 af Syntax af bandwidth { bandwidth | pct percentage } undo af View Policy-class view Parameter bandwidth : Bandwidth in kbit/s in the range of 8 to 1000000. percentage : Percentage of available bandwidth in the range of 1 to 100. Description Using the af comm...
Page 5 - Example; type
For the related command, see qos policy , qos-class . Example Configure traffic monitoring for a class. The normal traffic of packets is 38400bit/s. Burst traffic twice of the normal traffic can pass initially and later the traffic is transmitted normally when the rate does not exceed 38400bit/s. Wh...
Page 6 - debugging qos; display qos cbq interface; type number; interface; number; display qos cbq interface; display qos cbq interface
Description Using the debugging qos command, you can enable the debugging of QoS. Using the undo debugging qos command, you can disable the debugging of Qos. By default, the debugging of QoS is disabled. Example Enable the debugging of the CBQ class information on the interface Serial0. [Router] deb...
Page 7 - display qos class; display qos class; display qos policy
1.5 display qos class Syntax display qos class [ class-name ] View All views Parameter class-name : Name of the class. By default, the information of all classes are displayed. Description Using the display qos class command, you can browse the class information concerning router configuration. Exam...
Page 8 - Using the; command, you can browse the configuration
Parameter policy-name : Name of policy. By default, the configuration information of all policies are displayed. class-name : Class name in the policy. Description Using the display qos policy command, you can browse the configuration information of the specified or all classes of the specified or a...
Page 9 - display qos policy interface; inbound; All views; Parameter; display qos policy interface; command, you can view configuration; display qos policy interface Ethernet 0
Committed Access Rate: CIR 8000 (Bps), CBS15000 (Bit), EBS 0 (Bit) Conform Action: remark mpls exp 3 and pass Exceed Action: discard Class: SHAPE Behavior(s): Traffic Shape: CIR 8000 (Bps), CBS 15000 (Bit), EBS 0 (Bit) Queue Length 1024 (Packet) 1.7 display qos policy interface Syntax display qos po...
Page 11 - ef bandwidth bandwidth; cbs; size; undo ef
General Traffic Shaping: CIR 8000 (Bps), CBS 15000 (Bit), EBS 0 (Bit) Queue Length: 1024 (Packets) Queue Size: 0 (Packets) Pass : 0/0 (Packets/Bytes) Discard : 0/0 (Packets/Bytes) Delay : 0/0 (Packets/Bytes) Interface: Serial0 Direction: Inbound Policy: test Class: default-class Matched: 0/0 (Packet...
Page 14 - qos class class1; any
View Class view Parameter access-list-number : ACL number. logic-not : Do not match the class. Description Using the if-match acl command, you can define an ACL match rule. Using the undo if-match acl command, you can delete an ACL match rule. For the related command, see qos class . Example Define ...
Page 15 - qos class
Example Define match rule for all packets. [3Com] qos class class1 [3Com-qosclass-class1] if-match any 1.12 if-match class Syntax if-match [ logic-not ] class class-name undo if-match [ logic-not ] class class-name View Class view Parameter class-name : Class name. Description Using the if-match cla...
Page 16 - criteria; acl
Example Define class2 by invoking class1. Define match rule for class2. As class1 will be invoked, you should configure class1 first.The match rule for class1 is: IP precedence is 5. [3Com] qos class class1 [3Com-qosclass-class1] if-match ip-precedence 5 Define class2 packets with the match rule as ...
Page 17 - value
1.14 if-match inbound-interface Syntax if-match [ logic-not ] inbound-interface { type number } undo if-match [ logic-not ] inbound-interface { type number } View Class view Parameter interface - type : Interface type. number : Interface number. Description Using the if-match inbound-interface comma...
Page 18 - ip-precedence value
Parameter ip-dscp value : DSCP value in the range of 0 to 63. Description Using the if-match dscp command, you can define DSCP match rule. Using the undo if-match dscp command, you can delete DSCP match rule. You can configure this command for a class for several times. When a command is configured,...
Page 21 - qmtoken token-number; undo qmtoken
1.19 if-match rtp Syntax if-match [ logic-not ] rtp start-port starting-port-number end-port end-port-number undo if-match [ logic-not ] rtp start-port starting-port-number end-port end-port-number View Class view Parameter starting-port-number : Starting RTP port number in the range of 2000 to 6553...
Page 22 - qmtoken 1; qos apply policy
View Interface view Parameter token-number : The number of sending tokens, in the range from 1 to 50. Description Using the qmtoken command, you can configure the number of QoS sending tokens. Using the undo qmtoken command, you can disable the sending token function of QoS. By default, disable QoS ...
Page 23 - qos apply policy outbound 3COM
View Interface view Parameter inbound : Inbound direction. outbound : Outbound direction. policy-name : Policy name. Description Using the qos apply policy command, you can attach an associated QoS policy to an interface. Using the undo qos apply policy command, you can delete associated QoS policy ...
Page 24 - kilobits
View System view. Parameter logic-and : Specify the relation between the rules in the class as logic AND. That is, the packet that matches all the rules belongs to this class. logic-or : Specify the relation between the rules in the class as logic OR. That is, the packet that matches any one of the ...
Page 25 - undo qos max-bandwidth; qos max-bandwidth 128; qos policy
Description Using qos max-bandwidth command, you can set the maximum bandwidth of an interface. Using undo qos max-bandwidth command, you can remove the setting of the maximum bandwidth. By default, the maximum bandwidth is not configured for all interfaces. The bandwidth set by this command is only...
Page 27 - qos reserved-bandwidth pct 70; undo
Example Set the percentage of the maximum reserved bandwidth allocated to the RTP queue application to 70% of the available bandwidth. [3Com-Serial0] qos reserved-bandwidth pct 70 1.26 qos-class Syntax qos-class class-name undo qos-class class-name View Class view Parameter class-name : Name of clas...
Page 31 - discard-probability
undo wred [ ip-dscp | ip-precedence ] View Policy-class view Parameter ip - dscp : Indicate that DSCP value is used when calculating drop proportion for a packet. ip-precedence : Indicate that IP precedence value is used when calculating drop proportion for a packet. By default, ip-precedence is con...
Page 34 - exponent
1.34 wred weighting-constant Syntax wred weighting-constant exponent undo wred weighting-constant View Policy-class view Parameter exponent : Exponential in the range of 1 to 16. It is 6 by default. Description Using wred weighting-constant command, you can set exponential for the calculation of ave...
Page 35 - Chapter 2 TACACS+ Configuration Commands; debugging hwtacacs
Chapter 2 TACACS+ Configuration Commands 2.1 debugging hwtacacs Syntax debugging hwtacacs { authentication | authorization | accounting } [ packet ] [ user user-name ][ interface interface-name ] undo debugging hwtacacs { authentication | authorization | accounting } [ packet ] [ user user-name ][ i...
Page 36 - debugging hwtacacs authentication; display hwtacacs accounting
Using debugging hwtacacs authentication command, you can display the authentication information and the authorization state of the current users. If the command is not configured with any argument, the information of all the users will be displayed. If the argument user has been configured, only the...
Page 37 - # Display the accounting information of AAA users.; display hwtacacs accounting; # Display the accounting verbose of AAA users.; display hwtacacs accounting verbose
Example # Display the accounting information of AAA users. [3Com] display hwtacacs accounting Hwtacacs Accounting Statistics Accounting Packet Wait-Queue Length: 0 Username don Accounting time=00:01:19 Accounting type=Login,Service=SHELL ----------------------------------------------------------- Us...
Page 38 - verbose; display hwtacacs server
Table 2-1 Field description of the display hwtacacs accounting command Item Description interface Interface used by a user, which can be any type of interfaces listed as follows: Physical interfaces: Synchronous serial interface, asynchronous serial interface, Ethernet interface, AUX interface, cons...
Page 39 - command, you can display the size of; reset hwtacacs server statistics; display hwtacacs server verbose; domain
AUTHENTICATION TERMINATE packets sent by the router, the received and transmitted packets, and the number of connection failures. Using the display hwtacacs server verbose command, you can display the size of the accounting, authorization and accounting queues of AAA users, whether the queue has bee...
Page 40 - hwtacacs-server template tactemplate1; time
View Hwtacacs view Parameter None Description Using domain command, you can configure a specified TACACS+ server to permit a user to directly specify the domain name when entering the user name. Using undo domain command, you can disallow a specified TACACS+ server to permit the user to directly spe...
Page 42 - ip
Each TACACS+ server group allows only one primary authentication server, one primary authorization server, and one primary accounting server. When you configure a second primary server, there will be prompt information, the previous primary AAA server will be changed into a common server, and the ne...
Page 43 - hwtacacs-server template; host; hwtacacs-server template hwtemplate1
2.6 hwtacacs-server template Syntax hwtacacs-server template template-name undo hwtacacs-server template template-name View System view Parameter template-name : The string naming a server group, which contains 1 to 20 printable characters except for the space. Description Using hwtacacs-server temp...
Page 44 - reset hwtacacs accounting statistics; reset hwtacacs server statistics
2.7 reset hwtacacs accounting statistics Syntax reset hwtacacs accounting statistics View All views Parameter None Description Using reset hwtacacs accounting statistics command, you can clear all accounting statistics for AAA users. For a related command, see display hwtacacs accounting . Example #...
Page 47 - minute; minutes
2.11 timer quiet Syntax timer quiet minute s undo timer quiet View Hwtacacs view Parameter minutes : Switchover interval, which must be in the range of 1 to 255 minutes and defaults to 5 minutes. Description Using the timer quiet command, you can configure a standby/primary server switchover interva...
Page 48 - Chapter 3 SSH Configuration Commands; debugging rsa; debugging ssh server
Chapter 3 SSH Configuration Commands 3.1 debugging rsa Syntax debugging rsa undo debugging rsa View All views Parameter None Description Using the debugging rsa command, you can enable RSA debugging and send the details of all the processes and the packet structure of the RSA algorithm to the info-c...
Page 49 - debugging ssh server vty 4
View User view Parameter VTY index : The SSH channel being debugged. Its value is a VTY number and is in the range of 0 to 4 by default. all : All the SSH channels. Description Using the debugging ssh server command, you can send the information such as the negotiation procedure provisioned in SSH1....
Page 51 - name keyname; brief; keyname
CF8EBE33 42C71357 FC241E4F DEB64C09 DA06995C 99859934 25F6800A AB8859BE 0F83FC63 15A3115C BD3A15E7 D52DCE19 324DBBF9 58DB936B 0203 010001 3.4 display rsa peer-public-key Syntax display rsa peer-public-key [ brief | name keyname ] View All views Parameter brief : Displays the brief information of all...
Page 52 - display ssh server; display ssh server status
Key Code: 308186 028180 E75E3D7C 11923D33 143FB829 470EA018 889147F6 6F27A98A D6C54A36 C7DB17E1 647DC2BE F1C54116 641CD690 E5F7B492 A059BD6A B86A7D18 1040765C 978AF7C9 12807EAE 819B4A65 787CDE9C 940F74C8 BC4EFD81 6CC3EBDA 51E75D1B D073AA69 1F646A81 035496AC 6F98A730 D8C44931 598682EF EA40DF88 5DD98D...
Page 54 - hex; hex abcdefg
View Public key edit view Parameter hex-data : Public key data, which is a hexadecimal character string coded in the public key format. Description Using the hex command, you can input the public key data. The public key that you input must be the one randomly generated by the SSH client program. Yo...
Page 55 - userid; display local-user online
[3Com-rsa-key-code] hex C7DB17E1 647DC2BE F1C54116 641CD690 E5F7B492 A 059BD6A B86A7D18 [3Com-rsa-key-code] hex 1040765C 978AF7C9 12807EAE 819B4A65 787CDE9C 9 40F74C8 BC4EFD81 [3Com-rsa-key-code] hex 6CC3EBDA 51E75D1B D073AA69 1F646A81 035496AC 6 F98A730 D8C44931 [3Com-rsa-key-code] hex 598682EF EA4...
Page 56 - kill ssh userid 36; protocol inbound; numbers; protocol inbound ssh 3
Close the SSH process of task 36 on the router. [3Com] kill ssh userid 36 3.9 protocol inbound Syntax protocol inbound { ssh | telnet } numbers [ acl acl-number ] View System view Parameter ssh : Supports SSH. telnet : Supports Telnet.. numbers : Specifies the maximum number of connections that the ...
Page 57 - rsa
3.10 public-key-code begin Syntax public-key-code begin View Public key view Parameter None Description Using the public-key-code begin command, you can access the public key edit view to input the public key data generated by the client program.. Before using this command, you must specify a key na...
Page 59 - System view; None
[3Com-rsa-public-key] public-key-code begin [3Com-rsa-key-code] hex 308186 [3Com-rsa-key-code] hex 028180 [3Com-rsa-key-code] hex E75E3D7C 11923D33 143FB829 470EA018 889147F6 6 F27A98A D6C54A36 [3Com-rsa-key-code] hex C7DB17E1 647DC2BE F1C54116 641CD690 E5F7B492 A 059BD6A B86A7D18 [3Com-rsa-key-code...
Page 62 - ssh server authentication-retries 4
When executing the undo rsa peer-public-key command to delete a specified public key, the system will prompt the following information in case the specified key does not exist. % Public key not found. For related commands, see public-key-code begin , and public-key-code end . Example Access the publ...
Page 63 - hours; ssh server rekey-interval 3; ssh server timeout
3.16 ssh server rekey-interval Syntax ssh server rekey-interval hours undo ssh server rekey-interval View System view Parameter hours : Updating interval which is in the range of 1 to 24 hours. Description Using the ssh server rekey-interval command, you can set the interval for updating the SSH ser...
Page 64 - seconds; ssh server timeout 80; username
Parameter seconds : Login timeout time, which is in the range of 1 to 120 seconds and defaults to 60 seconds. Description Using the ssh server timeout command, you can set the login authentication timeout time at the SSH server end. Using the undo ssh server timeout command, you can restore the defa...
Page 66 - Set the authentication mode to password for the user smith.
authentication-type command, you can disable the login authentication mode for the user, in which case the user will be unable to log into the system. By default, no login authentication mode is specified, that is, the user is unable to log into the system. You must specify an authentication mode fo...
Page 67 - Chapter 4 NTP Configuration Commands; User view
Chapter 4 NTP Configuration Commands 4.1 debugging ntp-service Syntax debugging ntp-service { access | adjustment | authentication | event | filter | packet | parameter | refclock | selection | synchronization | validity | all } undo debugging ntp-service { access | adjustment | authentication | eve...
Page 69 - display ntp-service status; display ntp-service status; Table 4-1 Description of the state information of the NTP server; Item
******************************************************************** [12345]127.127.1.0 LOCAL(0) 7 26 64 1 0.0 0.0 15.6 [5]10.110.101.20 0.0.0.0 16 - 64 0 0.0 0.0 0.0 note: 1 source(master),2 source(peer),3 selected,4 candidate,5 configured 4.3 display ntp-service status Syntax display ntp-service s...
Page 70 - root delay; display ntp-service trace; display ntp-service trace
Item Description root delay Total roundtrip delay to the master reference source root disper The maximum error (dispersion) relative to the master reference source peer disper The dispersion of the remote NTP server 4.4 display ntp-service trace Syntax display ntp-service trace [ X.X.X.X ] View All ...
Page 71 - ntp-service access peer 76
4.5 ntp-service access Syntax ntp-service access { query | synchronization | server | peer } acl-number undo ntp-service access { query | synchronization | server | peer } View System view Parameter query : Assigns the controlled query right. synchronization : Allows only the server to access. serve...
Page 72 - ntp-service authentication enable
4.6 ntp-service authentication enable Syntax ntp-service authentication enable undo ntp-service authentication enable View System view Parameter None Description Using the ntp-service authentication enable command, you can enable authentication of NTP services. Using the undo ntp-service authenticat...
Page 74 - interface Ethernet 1; version; version
client mode to assume the work of detecting the incoming broadcast message packets with which it can synchronize the local clock. Example Receive NTP broadcast messages on the interface Ethernet 1. [3Com] interface Ethernet 1 [3Com-Ethernet1] ntp-service broadcast-client 4.9 ntp-service broadcast-se...
Page 75 - multicast
[3Com] interface Ethernet 0 [3Com-Ethernet0] ntp-service broadcast-server authentication-key 4 version 3 4.10 ntp-service max-dynamic-sessions Syntax ntp-service max-dynamic-sessions number undo ntp-service max-dynamic-sessions View System view Parameter number : The number of sessions allowed at th...
Page 76 - interface Ethernet 0; ttl
Parameter X.X.X.X : Multicast IP address, that is, Class D address. Description Using the ntp-service multicast-client command, you can enable the NTP multicast client mode. Using the undo ntp-service multicast-client command, you can disable the NTP multicast client mode. By default, multicast clie...
Page 77 - stratum
keyid : The key ID carried in the messages transmitted to the multicast clients, which is in the range of 1 to 4294967295. ttl : Defines the Time-To-Live (TTL) period of multicast packets. ttl-number : The TTL period of multicast packets, which is in the range of 1 to 255. version : Defines an NTP v...
Page 78 - undo ntp-service reliable authentication-keyid; ntp-service reliable authentication-keyid
stratum : The stratum level at which the local clock operates, which is in the range of 1 to 15. Description Using the ntp-service refclock-master command, you can set an external reference clock or the local clock to be the NTP master clock. Using the undo ntp-service refclock-master command, you c...
Page 80 - priority
destination addresses for receiving the response messages except for the specified one. Example Specify the interface Ethernet 0 so that its IP address can be used as the source IP address carried by all the outbound NTP message packets. [3Com] ntp-service source-interface Ethernet 0 4.16 ntp-servic...
Page 82 - Ethernet 0
Example Set the peer at 128.108.22.44 to be the synchronization source of the local device, allowing the remote peer to synchronize with the local clock. In addition, version 3 is adopted, and IP address of Ethernet 0 is used as the IP source address carried by the NTP messages. [3Com] ntp-service u...
Page 84 - Chapter 5 X2T Configuration Commands; event
Chapter 5 X2T Configuration Commands 5.1 debugging x25 x2t Syntax debugging x25 x2t { all | event | packet } View All views Parameter all : Enables all X2T debugging. event : Enables the X2T event debugging. packet : Enables the X2T packet debugging. Description Using the debugging x25 x2t command, ...
Page 85 - display x25 x2t route; display x25 x2t switch-table
Description Using the display x25 x2t route command, you can display the X2T static routing table. Example Display the X2T static routing table maintained by the router. [Router] display x25 x2t route SID X.121 Ip Address ============================================== 1 12321 10.110.54.18 5.3 displa...
Page 86 - undo translate ip ip-address port port-number; translate ip
undo translate ip ip-address port port-number View System view Parameter ip-address : Local IP address. port port-number : TCP port number. x25 x.121-address : The destination X.121 address after the address translation. Description Using the translate ip command, you can configure an X2T forwarding...
Page 87 - disable the configuration that has been made.
port port-number : TCP port number. Description Using the translate x25 command, you can configure an X2T forwarding route from the X.25 network to the IP network. Using the undo translate x25 command, you can disable the configuration that has been made. Whenever receiving the X.25 packets destined...
Page 88 - isdn ignore callednum
Chapter 6 Additional ISDN Configuration Commands 6.1 isdn ignore callednum Syntax isdn ignore callednum undo isdn ignore callednum View ISDN BRI interface view, CE1/PRI interface view, CT1/PRI interface view Parameter None Description Using the isdn ignore callednum command, the user can disable the...
Page 89 - isdn ignore hlc
Example Disable the E1 0 interface on the router to send SETUP ACK messages. [3Com] controller e1 0 [3Com-E1-0] pri-set [3Com-E1-0] interface serial 2:15 [3Com-serial2:15] isdn ignore callednum 6.2 isdn ignore hlc Syntax isdn ignore hlc undo isdn ignore hlc View ISDN interface view Parameter None De...
Page 90 - isdn ignore llc; isdn waitconnectack
6.3 isdn ignore llc Syntax isdn ignore llc undo isdn ignore llc View ISDN interface view Parameter None Description Using the isdn ignore llc command, the user can configure the SETUP message to ignore the low-level compatibility information unit when a data call is initiated. Using the undo isdn ig...
Page 91 - isdn waitconnectack; display isdn spid
View ISDN BRI interface view, CE1/PRI interface view, CT1/PRI interface view Parameter None Description Using isdn waitconnectack command, the user can configure the router to wait for CONNECT ACK message replies from the connected exchange until switching to the ACTIVE state. Using undo isdn waitco...
Page 92 - interface by specifying its type and number.; Description of the SPID parameters; Item Description; isdn ignore dchan; Isdn ignore dchan
information of SPI on all the SPID-supported BRI interfaces. You may view one interface by specifying its type and number. Example Display the related information of SPID on the NI-supported interface bri 0/0/0. [3Com] display isdn spid interface bri 0 Interface bri 0/0/0: SPID Type: AUTO SPID B1: S...
Page 94 - display isdn call-info; all
Parameter dss1 : DSS1 (Digital Subscriber Signaling No.1) signaling is used. ni: National ISDN signaling is used. Description Using the isdn protocol-type command, you can configure signaling to be used at the ISDN interface. By default, DSS1 signaling is used. When this command is used in System vi...
Page 95 - Table 6-2 Description of Q931 timers; Timer
Parameter timer-name : Name of Q931 timer. Refer to the following table for a description in detail. time-interval : Interval of timer. Refer to the following table for a description in detail. all : To be used to restore the default interval values of all the Q931 timers. Description Using the isdn...
Page 97 - isdn spid timer
By default, NIT mode does not apply on BRI interfaces. Instead, static SPID or dynamic SPID negotiation is applied. On an NI-compliant BRI interface, calls can be placed only after the SPID negotiation or initialization is finished. When the router is communicating with an NI-compliant exchange that...
Page 98 - times; isdn spid resend
This command applies only on NI-compliant BRI interfaces. Example Set the duration of TSPID on the interface bri0 to 50 seconds. [3Com-bri0] isdn spid timer 50 6.12 isdn spid resend Syntax isdn spid resend times undo isdn spid resend View ISDN BRI Interface view Parameter times : An integer in the r...
Page 99 - isdn spid service
6.13 isdn spid service Syntax isdn spid service [audio | data | speech] undo isdn spid service View ISDN BRI interface view Parameter audio : Supports audio service. data : Supports data service. speech : Supports voice service. Description Using the isdn spid service command, you can configure the ...
Page 100 - isdn spid1; spid
6.14 isdn spid1 Syntax isdn spid1 spid undo isdn spid1 View ISDN BRI Interface view Parameter spid : String comprising 9 to 20 digits. Description Using the isdn spid1 command, you can configure SPID information for the B1 channel on an NI-compliant BRI interface. Using the undo isdn spid1 command, ...
Page 101 - isdn spid2
View ISDN BRI Interface view Parameter spid : String comprising 9 to 20 digits. Description Using the isdn spid2 command, you can configure SPID information for the B1 channel on an NI-compliant BRI interface. Using the undo isdn spid2 command, you can remove the SPID information from the B1 channel...
