command ref

1150
http://www.3com.com/ Router Command Reference Guide Router 5000 Family Version 2.1 Part No. 10014596-AA Published November 2004

Upload: gedgetsgurudk

Post on 25-Nov-2014

89 views

Category:

Documents


1 download

TRANSCRIPT

Router Command Reference Guide

Router 5000 Family Version 2.1

http://www.3com.com/ Part No. 10014596-AA Published November 2004

3Com Corporation 350 Campus Drive Marlborough, MA 01752-3064

Copyright 2004, 3Com Corporation. All rights reserved. No part of this documentation may be reproduced in any form or by any means or used to make any derivative work (such as translation, transformation, or adaptation) without written permission from 3Com Corporation. 3Com Corporation reserves the right to revise this documentation and to make changes in content from time to time without obligation on the part of 3Com Corporation to provide notification of such revision or change. 3Com Corporation provides this documentation without warranty, term, or condition of any kind, either implied or expressed, including, but not limited to, the implied warranties, terms or conditions of merchantability, satisfactory quality, and fitness for a particular purpose. 3Com may make improvements or changes in the product(s) and/or the program(s) described in this documentation at any time. If there is any software on removable media described in this documentation, it is furnished under a license agreement included with the product as a separate document, in the hard copy documentation, or on the removable media in a directory file named LICENSE.TXT or!LICENSE.TXT. If you are unable to locate a copy, please contact 3Com and a copy will be provided to you. UNITED STATES GOVERNMENT LEGEND If you are a United States government agency, then this documentation and the software described herein are provided to you subject to the following: All technical data and computer software are commercial in nature and developed solely at private expense. Software is delivered as Commercial Computer Software as defined in DFARS 252.227-7014 (June 1995) or as a commercial item as defined in FAR 2.101(a) and as such is provided with only such rights as are provided in 3Coms standard commercial license for the Software. Technical data is provided with limited rights only as provided in DFAR 252.227-7015 (Nov 1995) or FAR 52.227-14 (June 1987), whichever is applicable. You agree not to remove or deface any portion of any legend provided on any licensed program or documentation contained in, or delivered to you in conjunction with, this User Guide. Unless otherwise indicated, 3Com registered trademarks are registered in the United States and may or may not be registered in other countries. 3Com and the 3Com logo are registered trademarks of 3Com Corporation. Intel and Pentium are registered trademarks of Intel Corporation. Microsoft, MS-DOS, Windows, and Windows NT are registered trademarks of Microsoft Corporation. Novell and NetWare are registered trademarks of Novell, Inc. All other company and product names may be trademarks of the respective companies with which they are associated.

CONTENTS

ABOUT THIS GUIDEConventions 7 Related Documentation 10

1

CONFIGURATION COMMANDSBasic Configuration Commands 11

2

SYSTEM MAINTENANCE & MANAGEMENT COMMANDSDebugging 27 HWPing Commands 35 HWPing Server Commands 51 Information Processing Commands 53 System Operating Management Commands 70 Lock-Down Commands 77 File Management Commands 78 FTP Server Configuration Commands 88 FTP client module commands 91 TFTP Configuration Commands 102 Configuration Files Management Commands 103 User Interface Configuration Commands 108 debugging ntp-service 124 SNMP Configuration Commands 137 Terminal Service Commands 155 SSH Configuration Commands 157

3

INTERFACE MANAGEMENT COMMANDSInterface Management Commands 171 Fundamental Ethernet Interface Configuration Commands 176 Fundamental WAN Interface Configuration Commands 180 Fundamental CE1/PRI Interface Configuration Commands 187 Fundamental CT1/PRI Interface Configuration Commands 194 E1-F Interface Configuration Commands 200 T1-F Interface Configuration Commands 205 Fundamental CE3 Interface Configuration Commands 209 Fundamental CT3 Interface Configuration Commands 218 ATM E3/T3 Interface Configuration Commands 227 ATM OC-3c/STM-1 Interface Configuration Commands 230

ADSL Interface Configuration Commands 233 Fundamental Logical Interface Configuration Commands 239 Logic-Channel Interface 241 Configuration Command of Virtual Template and Virtual Access Interface MP-group Interface Configuration Command 244 Virtual Ethernet Interface Configuration Command 246 Configuration Command of Loopback Interface and Null Interface 248

242

4

LINK LAYER PROTOCOLPPP and MP Configuration Commands 251 PPPoE Server Configuration Commands 265 PPPoE Client Configuration Commands 268 VLAN Configuration Commands 272 ISDN Configuration Commands 276 SLIP Configuration Commands 304 HDLC Configuration Commands 305 Frame Relay Configuration Commands 307 ATM Configuration Commands 340 LAPB and X.25 Configuration Commands 366

5

NETWORK PROTOCOLIP Address Configuration Commands 413 ARP Configuration Commands 417 Static Domain Name Resolution 421 DNS Client Configuration Commands 422 DHCP Public Configuration Commands 426 DHCP Server Configuration Commands 428 DHCP Client Configuration Commands 456 DHCP Relay Configuration Commands 458 IP Performance Configuration Commands 463 IP Unicast Policy Routing Configuration Commands 490 IP Multicast Policy Routing Configuration Commands 498 IPX Configuration Commands 503 DLSw Configuration Commands 531

6

ROUTING PROTOCOLDisplay Commands of the Routing Table 559 Static Route Configuration Commands 569 RIP Configuration Commands 571 OSPF Configuration Commands 587 BGP Configuration Commands 626 MBGP Configuration Commands 665 IP Routing Policy Configuration Commands 668 Route Capacity Configuration Commands 682

7

MULTICAST COMMON CONFIGURATION COMMANDSMulticast Common Configuration Commands 687 IGMP Configuration Commands 697 PIM Configuration Commands 708 MSDP Configuration Commands 725 MBGP Multicast Extension Configuration Commands 740 Multicast Static Route Configuration Commands 753

8

MPLS BASIC CONFIGURATION COMMANDSBasic Configuration Commands 757 LDP Configuration Commands 767 BGP/MPLS VPN Configuration Commands 778 MPLS L2VPN CCC Configuration Commands 800 SVC MPLS L2VPN Configuration Commands 804 Martini MPLS L2VPN Configuration Commands 805 Kompella MPLS L2VPN Configuration Commands 806

9

SECURITYAAA Configuration Commands 813 Ethernet Type-Code Values 832 ASPF Configuration Commands 844 Firewall Configuration Commands 853 IPSec Configuration Commands 858 IKE Configuration Commands 933 PKI Configuration Commands 962 HWTACACS Configuration Commands 980

10

L2TP CONFIGURATION COMMANDSGRE Configuration Commands Dynamic VPN 1017 1010

11

TRAFFIC POLICING AND SHAPING CONFIGURATION COMMANDSTraffic Policing (TP) Configuration Commands 1029 Traffic Shaping Configuration Commands 1032 Physical Interface Rate-limit Configuration Commands 1034 FIFO Queue Configuration Commands 1035 PQ Configuration Commands 1036 CQ Configuration Commands 1041 WFQ Configuration Commands 1047 CBQ Configuration Commands 1048 RTP Priority Queue Configuration Commands 1074 Weighted Random Early Detection Configuration Commands 1077 IP Header Compression Configuration Commands 1080 MPLS QoS Configuration Commands 1105

12

BACKUP CENTER CONFIGURATION COMMANDSBackup Center Configuration Commands VRRP Configuration Commands 1116 1109

13

DCC CONFIGURATION COMMANDSDCC Configuration Commands 1123 Modem Configuration Commands 1142

Conventions

7

ABOUT THIS GUIDE

This guide describes the 3Com Router 5000 Family of routers and how to install hardware, configure and boot software, and maintain software and hardware. This guide also provides troubleshooting and support information for your router. This guide is intended for the system or network administrator who is responsible for installing, configuring, using, and managing the routers. It assumes a working knowledge of wide area network (WAN) operations and familiarity with communication protocols that are used to interconnect WANs. Always download the Release Notes for your product from the 3Com World Wide Web site for the latest updates to product documentation:http://www.3com.com

Conventions

and Table 2: list conventions that are used throughout this guide.

Table 1: Notice Icons Icon Notice Type Information note Description Information that describes important features or instructions. Information that alerts you to potential loss of data or potential damage to an application, system, or device.

Caution

8

CHAPTER : ABOUT THIS GUIDE

Table 1: Notice Icons Icon Notice Type Warning Description Information that alerts you to potential personal injury.

Table 2: Text Conventions Convention Screen displays Description This typeface represents information as it appears on the screen. If you must press two or more keys simultaneously, the key names are linked with a plus sign (+), for example: The words enter and type

Keyboard key names

Press Ctrl+Alt+D el

Conventions

9

Table 2: Text Conventions Convention When you see the word enter in this guide, you must type something, and then press Return or Enter. Do not press Return or Enter when an instruction simply says type. Italics are used to: Denote a new term at the place where it is defined in the text. Description Words in italics

Emphasize a point. Identify menu names, menu commands, and software button names. Examples: Click OK.

From the Help menu, select Contents.

10

CHAPTER : ABOUT THIS GUIDE

Table 2: Text Conventions Convention Words in bold Description Boldface type is used to highlight command names in text. For example, Use the display user-interface command to...

Related Documentation

The following manuals offer additional information necessary for managing your Router 5000:

3Com Router 5000 Family Installation Guide Provides detailed descriptions of the Router 5000 Family products. 3Com Router Configuration Guide Describes how to configure your Router 5000 using the supported protocols and CLI commands. Release Notes Contains the latest information about your product. If information in this guide differs from information in the release notes, use the information in the Release Notes.

These documents are available in Adobe Acrobat Reader Portable Document Format (PDF) on the CD-ROM that accompanies your router or on the 3Com World Wide Web site:http://www.3com.com/

1

CONFIGURATION COMMANDS

This chapter describes how to use the following commands: Basic Configuration Commands

Clock Summer Times clock datetime clock timezone command-privilege display clipboard display clock display history-command display version header3Com hotkey language-mode lock quit Reboot return super super password sysname system-view

Basic Configuration CommandsClock Summer Times SyntaxClock summer-time zone_name {absolute / recurring} HH:MM:SS YYYY/MM/DD HH:MM:SS YYYY/MM/DD HH:MM:SS Undo clock summer-time zone.

View User view

12

CHAPTER 1: CONFIGURATION COMMANDS

Parameter zone_name: Name of the summer time, which is a character string of 1 to 32 characters. absolute: Only sets the summer time of some year. recurring: Sets the summer time of every year starting from some year. HH:MM:SS: Time (hour/minute/second). YYYY/MM/DD: Date (year/month/day). Description Using the clock summer-time command, you can set the name, and the starting and ending time of the summer time. Using the undo clock summer-time command, you can remove the configuration of the summer time. After the configuration takes effect, it can be verified by using the display clock command. Beside the time of the log or debug information will be the local time on which the adjustment of the time zone and summer time has been made. For related command, see clock timezone. Example Add one hour to the clock for the summer time z2 that starts at 06:00:00 on 2002/06/08 and ends at 06:00:00 on 2002/09/01. clock summer-time z2 absolute 06:00:00 2002/06/08 06:00:00 2002/09/01 01:00:00

# Add one hour to the clock each year starting from 2002 for the summer time z2 that starts at 06:00:00 on 08/06 and ends at 06:00:00 on 01/09. clock summer-time z2 recurring 06:00:00 2002/06/08 06:00:00 2002/09/01 01:00:00

clock datetime

Syntaxclock datetime HH:MM:SS YYYY/MM/DD

View User view Parameter HH:MM:SS: Time (hour/minute/second). YYYY/MM/DD: Date (year/month/day) in the range of 1993 to 2035. Description Using the clock datetime command, you can set the date and time.

Basic Configuration Commands

13

After the configuration takes effect, it can be verified by executing the display clock command. The time applied to the log and debug information has been adjusted. Example Set the current system time to 10:20:55 2003/04/05. clock datetime 10:20:55 2003/04/05

clock timezone

Syntaxclock timezone zone_name { add | minus } HH:MM:SS undo clock timezone

View User view Parameter zone_name: Timezone name, which is a string of 1 to 32 characters. add: Adds the time on the basis of Universal Time Coordinated (UTC) timezone. minus: Reduces the time on the basis of UTC timezone. HH:MM:SS: Time (hour/minute/second). Description Using the clock timezone command, you can set the information for the local timezone. Using the undo clock timezone command, you can restore the local timezone to the default UTC timezone. After the configuration takes effect, you can view it by executing the display clock command. The time applied to the log and debug information has been adjusted according to the involved timezone and summer time. For related command, see clock summer-time. Example Set the local timezone name to Z5 and set Z5 to be five hours faster than UTC time. clock timezone z5 add 05:00:00

command-privilege

Syntaxcommand-privilege level level view view command-key undo command-privilege view view command-key

View System view Parameter level level: Command priority ranging from 0 to 3. view view: View. The command line provides the following views:

14

CHAPTER 1: CONFIGURATION COMMANDS

shell: View of current user level. system: System view Routing protocol view: Include ospf (OSPF view), rip (RIP view), bgp (BGP view), isis (IS-IS view), etc. Interface view: Include ethernet (FE), gigabitethernet (GE), serial (serial interface), ce1 (cE1 interface), ce3 (E3 interface), ct1 (cT1 interface), atm (ATM interface), pos (POS interface), virtual-template (virtual interface template), virtual-ethernet (virtual Ethernet interface), loopback (Loopback interface), null (Null interface), tunnel (Tunnel interface). user-interface: User view l2tp-group: System view of L2TP group. route-policy: Route map view

Refer to "Command Line Views" section in the Operation Manual for more details. commandkey: Command to be set. Description Using the command-privilege command, you can set the command level in the specified view. Using the undo command-privilege view command, you can remove current settings. Command priority falls into 4 levels, access, monitor, configure and manage, that are identified with 0 to 3. The administrator can grant certain rights to a user on their demand so that the user can operate in the related view. When the user logs in, the system can set the command operation rights, either, according to the rights corresponding to the user name, or based on the rights of the user-interface. If the two sets of rights conflict, the minimum rights will be adopted. By default, the command level of the ping, tracert and telnet commands is access (level 0), the command level of the display and debugging commands is monitor (level 1), that of configuration commands is system (level 2), and the commands for user key setting, FTP, XMODEM, TFTP and file system operation fit into commands of manage-level (level 3). Example Set the priority of the interface command to 0.[3Com] command-privilege level 0 view system interface

display clipboard

Syntaxdisplay clipboard

View Any view

Basic Configuration Commands

15

Parameter None Description Using the display clipboard command, you can display the contents of clipboard. Example Display the contents of clipboard. display clipboard -----------------clipboard ----------------ip route 10.1.0.0 255.0.0.0 eth 0

display clock

Syntaxdisplay clock

View Any view Parameter None Description Using the display clock command, you can display the clock status and the configuration information. Example Display the current time. display clock

display cpu-usage

Syntax display cpu-usage [ configuration | number [ offset ] [ verbose ] [ from-device ] ] View Any view Parameter configuration: Displays the configuration about CPU usage statistics, such as whether CPU usage statistics is enabled, statistic period, and CPU usage alarm thresholds. number: Number of CPU usage statistics queries. offset: Offset of the starting entry to be displayed to the last statistic entry.

16

CHAPTER 1: CONFIGURATION COMMANDS

verbose: Displays the detailed information. from-device: Displays information stored on an external storage device such as a Flash or hard disk. (Not available yet.) Description Using the display cpu-usage command, you can view statistics about CPU usage. The commands display cpu-usage and dispaly cpu-usage 1 0 verbose function the same to display detailed information on the last CPU usage measurement. Example Display detailed information on CPU usage statistics.[Router] display cpu-usage ===== Current CPU usage info ===== CPU Usage Stat. Cycle: 1 (Second) CPU Usage : 1% CPU Usage Stat. Time : 2004-09-15 15:51:48 CPU Usage Stat. Tick : 0x27(CPU Tick High) 0x88cf18e4(CPU Tick Low) Actual Stat. Cycle : 0x0(CPU Tick High) 0x2264cc2(CPU Tick Low) TaskName VIDL TICK co0 SRM ROUT SOCK VTYD IPSP TAC SC RDS ACM LSSO TRAP NTPT PIMT LSPM L2V IPS SIP DHCP HOT DHCC CPU 99% 0% 0% 0% 0% 0% 0% 0% 0% 0% 0% 0% 0% 0% 0% 0% 0% 0% 0% 0% 0% 0% 0% Runtime(CPU Tick High/CPU Tick Low) 0/ 222de39 0/ 88d8 0/ 6e5 0/ 1da 0/ 1d6c 0/ 3c65 0/ 1074 0/ 28b 0/ 15ac 0/ 10de 0/ e71 0/ 180a 0/ 3a2 0/ 2d0 0/ 1082a 0/ 2f8 0/ 90c 0/ 1066 0/ 7575 0/ 6b87 0/ 33d 0/ fca 0/ 414

display history-command

Syntaxdisplay history-command

View Any view Parameter None

Basic Configuration Commands

17

Description Using the display history-command command, you can browse the history commands. The terminal will automatically save the history commands typed by the user, that is, completely record the user's input (via keyboard) separated by "Enter". For the related command, see history-command size. Example Display history commands. display history-command show interface show interface e 1/0/0 c in e 1/0/0

display version

SyntaxDisplay version

View Any view Parameter None Description Using the display version command, you can browse system version information. Through viewing system version information, you will learn about the software version in use, rack type, and the information related to the main processing board and interface cards. Example Display system version information of a 3Com R1760 router. display version 3Com Versatile Routing Platform Software VRP(tm) software, Version 3.30 Copyright (c) 2000-2002 3Com Corporation. 3Com Serial Router R1760 System has kept running 0weeks, 0days, 0hours, 15minutes CPU type Powerpc8241 166Mhz 64M bytes SDRAM 8M bytes Flash Memory Pcb Version:001 Logic Version:001 BootROM Version:0.0 Slot0: WAN (pcb)001 (software)000 (logic)001

18

CHAPTER 1: CONFIGURATION COMMANDS

header3Com

Syntaxheader [ shell | incoming | login ] text undo header [ shell | incoming | login ]

View System view Parameter login: Greeting information when login. shell: Greeting information of the creation of a user session. incoming: Greeting information when login to the user view. text: Content of greeting information. Description Using the header command, you can set the greeting information that will be displayed. Using the undo header command, you can remove the preset greeting information. When a user is logging on to a router via a terminal line, the router prompts related information by setting the title attribute. After activating the terminal connection, the router sends the login title to the terminal. If the user logs on to the router successfully, the shell greeting information will be displayed. Text takes the first English character as the start and end characters. After the end character is input, the system will quit the interactive process automatically. If you do not want to start the interactive process, make sure that the first and last characters of the text are the same English character and press directly. Example Configure a session creation title.[3Com] header shell % Enter TEXT message. End with the character '%'. SHELL : Hello! Welcome use 3Com R1760.% # Test the configuration. [3Com] quit quit Press RETURN to get started SHELL : Hello! Welcome use 3Com R1760.

hotkey

Syntaxhotkey [ CTRL_G | CTRL_L | CTRL_O | CTRL_T | CTRL_U ] command_text undo hotkey [ CTRL_G | CTRL_L | CTRL_O | CTRL_T | CTRL_U ]

Basic Configuration Commands

19

View System view Parameter CTRL_G: Specify a command for the hotkey . CTRL_L: Specify a command for the hotkey . CTRL_O: Specify a command for the hotkey . CTRL_T: Specify a command for the hotkey . CTRL_U: Specify a command for the hotkey . command_text: The command line correlated with the hotkey. Description Using the hotkey command, you can correlate a command line with a hotkey. Using the undo hotkey command, you can recover the default value of the system. By default, CTRL_G, CTRL_L and CTRL_O correspond to the following commands respectively:display current-configuration (display current configuration); display ip routing-table (display routing table information); undo debugging all (disable the overall debugging function, that is, disable the output of all debugging information).

You can change the definitions on your demand. The default values for the other hotkeys are null. Example Correlate the display tcp status command with the hotkey CTRL_T.[3Com] hotkey ctrl_t display tcp status [3Com] display hotkey ----------------- HOTKEY ----------------=Defined hotkeys= Hotkeys Command CTRL_G display current-configuration CTRL_L display ip routing-table CTRL_O undo debug all CTRL_T display tcp status =Undefined hotkeys= Hotkeys Command CTRL_U NULL =System hotkeys= Hotkeys Function CTRL_A Move the cursor to the beginning of the current line. CTRL_B Move the cursor one character left. CTRL_C Stop current command function. CTRL_D Erase current character. CTRL_E Move the cursor to the end of the current line. CTRL_F Move the cursor one character right.

20

CHAPTER 1: CONFIGURATION COMMANDS

CTRL_H Erase the character left of the cursor. CTRL_K Kill outgoing connection. CTRL_N Display the next command from the history buffer. CTRL_P Display the previous command from the history buffer. CTRL_R Redisplay the current line. CTRL_V Paste text from the clipboard. CTRL_W Delete the word left of the cursor. CTRL_X Delete all characters up to the cursor. CTRL_Y Delete all characters after the cursor. CTRL_Z Return to the user view. CTRL_] Kill incoming connection or redirect connection. ESC_B Move the cursor one word back. ESC_D Delete remainder of word. ESC_F Move the cursor forward one word. ESC_N Move the cursor down a line. ESC_P Move the cursor up a line. ESC_< Specify the beginning of clipboard. ESC_> Specify the end of clipboard.

language-mode

Syntaxlanguage-mode { chinese | english }

View User view Parameter None Description Using the language-mode command, you can switch between different language modes of command line interface. By default, the language mode is English. The command line interface of the system also supports Chinese mode for domestic users in China. Example Switch from English mode to Chinese mode. language-mode Chinese Change language mode, confirm? [Y/N]y % Switch to Chinese mode.

lock

Syntaxlock

View User view

Basic Configuration Commands

21

Parameter None Description Using the lock command, you can lock the active user interface to prevent an unauthorized user from operating the interface. A user interface includes CON port, AUX port and VTY, etc. After inputting the lock command, the user is prompted to enter the screensaver's password and confirm the password. If the two passwords are the same, the interface will be successfully locked. To enter the system once again, you must press first, and enter the preset password following the prompt. Example Log in from the CON port and lock the active user interface. lock Password: Again:

quit

Syntaxquit

View Any view Parameter None Description Using the quit command, you can quit from the active view to a lower-level view (if the active view is user view, you will exit the system). Views fall into three levels; in ascending order:

User view (with user level as 0) System view (with user level as 3) and Configuration view (routing protocol view, interface view, VPDN group view, etc).

For the related command, see return. Example Switch from Ethernet1/0/0 interface view to system view, and then to user view.[3Com-Ethernet1/0/0] quit [3Com] quit

22

CHAPTER 1: CONFIGURATION COMMANDS

Reboot

Syntaxreboot

View User view Parameter None Description Using the reboot command, you can reboot the device. This command produces the same effect as the power being turned on and then off, but provides the user with a convenient method of rebooting the device from a remote site. The operation of this command will render the network unusable for a short period of time, so it should be used with caution. Before rebooting the Router, remember to save the configuration file if necessary, Example Reboot the device. reboot System will reboot! Continue?[Y/N]

return

Syntaxreturn

View Any view, except user view Parameter None Description Using the return command, you can return to user view from any other view. The combination key performs the same function as the return command. For the related command, see quit. Example Return to user view from system view.[3Com] return

super

Syntaxsuper [ level ]

Basic Configuration Commands

23

View User view Parameter Level: User level ranging from 0 to 3. Description Using the super command, you can switch from current user level to a specified level. User level refers to the class of a login user. There are 4 user levels corresponding to 4 command levels. After a user of certain level logs in, it can only use the commands of the same or lower level. There are 4 command levels access, monitor, configure and manage, as follows:

Access: Includes the network diagnosis tool commands (ping, tracert); commands for accessing an external device from local device (including Telnet client, SSH client, RLOGIN), etc. Commands of this level cannot perform configuration file saving operation. Monitor: Commands used for system maintenance, service fault diagnosis and so on, including the display and debugging commands. Commands of this level cannot perform configuration file saving operation. Configure: Service configuration commands, including routing commands and commands of various network layers. Commands of this level provide direct network services for users. Manage: Commands related to basic system running and system support modules. These commands provide support for various services. Commands of this level include file system, FTP, TFTP, Xmodem download and configuration file switchover commands, power control commands, standby board control commands, user management commands, level setting commands, system internal parameter setting commands (not being provided in protocols or RFC documentation), etc.

To prevent unauthorized users from intruding on the system, you must pass the authentication when you are trying to switch from current user to a higher-level user. This means that you must enter the password of the higher-level user (if the super password [ level user-level ] { simple | cipher } line command is configured). For the sake of security, your entered password is not directly displayed on the screen. If you enter the correct password, you will be able to switch to the higher-level user, or you will stay at current level. Authentication allows three trys to switch to a higher-level user. For the related command, see super password. Example super 3 Password: User privilege changes to 3 level, just equal or less this level's commands can be used. Privilege note: 0-VISIT, 1-MONITOR, 2-SYSTEM, 3-MANAGE

24

CHAPTER 1: CONFIGURATION COMMANDS

super password

Syntaxsuper password [ level user-level ] { simple | cipher } password undo super password [ level user-level ]

View System view Parameter user-level: User level ranging from 0 to 3. simple: Configure simple text password. cipher: Configure cipher text password. password: Content of password. A simple text password is a consecutive character string with the length no more than 16, such as 1234567. A cipher text password has 24 characters in length, and is in the format of "_(TT8F]Y\5SQ=^Q`MAF4 00.05.5D.85.D5.45. Offer IP=> 5.5.5.2 *0.62083366-DHCP SER-8-DHCPS_DEBUG_COMMON: DhcpServer: receive DHCPREQUEST from 00.05.5D.85.D5.45. *0.62083483-DHCP SER-8-DHCPS_DEBUG_COMMON: DhcpServer: Send DHCPACK to MAC=> 00.05.5D.85.D5.45. Offer IP=> 5.5.5.2

430

CHAPTER 5: NETWORK PROTOCOL

Enable error debugging on the DHCP server. debugging dhcp server error *0.63269475-DHCP SER-8-DHCPS_DEBUG_COMMON: DhcpServer: Icmp Packet is not EHHOREPLY!

dhcp server dns-list (in Interface View)

Syntaxdhcp server dns-list ip-address [ ip-address ] undo dhcp server dns-list { ip-address | all }

View Interface view Parameter ip-address: IP address of DNS. You can configure up to eight IP addresses separated by spaces in a command. Description Using the dhcp server dns-list command in interface view, you can configure DNS IP addresses for an interface configured with a DHCP address pool. Using the undo dns-list command in interface view, you can delete the configuration. By default, no DNS address is configured. By far, only up to eight DNS server addresses can be set in each DHCP address pool. For the related commands, see dhcp server dns-list (in system view), dhcp server ip-pool, and dns-list. Example Configure the DNS server address 1.1.1.254 for the DHCP address pool of the interface Ethernet1/0/0.[3Com] interface ethernet 1/0/0 [3Com-Ethernet 1/0/0] dhcp server dns-list 1.1.1.254

dhcp server dns-list (in System View)

Syntaxdhcp server dns-list ip-address [ ip-address ] { interface ethernet-subinterface-range | all } undo dhcp server dns-list { ip-address | all } { interface ethernet-subinterface-range | all }

View System view Parameter ip-address: IP address of DNS. You can configure up to eight IP addresses separated by spaces in a command. ethernet-subinterface-range: Includes any the subinterfaces whose interface number lies between the two given subinterface number (including these two

DHCP Server Configuration Commands

431

subinterfaces) by inserting the keyword to between these two interface numbers. all: In the undo form of the command, the first all refers to all the Gateway (GW) addresses and the second, all the interfaces. Description Using the dhcp server dns-list command in system view, you can assign DNS IP addresses to the DHCP address pool of multiple interfaces in a specified range. Using the undo dns-list command in system view, you can delete the configuration. By default, no DNS address is configured. Only up to eight DNS server addresses, by far, can be set in each DHCP address pool. For the related commands, see dhcp server dns-list (in interface view), dhcp server ip-pool, and dns-list. Example Assign the DNS server address 1.1.1.254 to the DHCP address pool of the interfaces in the range of Ethernet1/0/0.0 to Ethernet2/0/0.5.[3Com] dhcp server dns-list 1.1.1.254 interface ethernet 2/0/0.0 to ethernet 2/0/0.5

dhcp server domain-name (in Interface View)

Syntaxdhcp server domain-name domain-name undo dhcp server domain-name domain-name

View Interface view Parameter domain-name: Domain name that the DHCP server allocates to clients, which is a string comprising at least three characters and at most 50 characters. Description Using the dhcp server domain-name command in interface view, you can configure the domain name that the DHCP address pool of the current interface allocates to clients. Using the undo dhcp server domain-name command in interface view, you can delete the configured domain name. By default, no domain name has been allocated to DHCP clients and domain name is null. For the related commands, see dhcp server ip-pool, dhcp server domain-name (in system view), and domain-name. Example Configure the domain name eth1_0_0.com.cn in an interface DHCP address pool.[3Com] interface ethernet 1/0/0 [3Com-Ethernet 1/0/0] dhcp server domain-name eth1_0_0.com.cn

432

CHAPTER 5: NETWORK PROTOCOL

dhcp server domain-name (in System View)

Syntaxdhcp server domain-name domain-name { interface ethernet-subinterface-range | all } undo dhcp server domain-name domain-name { interface ethernet-subinterface-range | all }

View System view Parameter domain-name: Domain name that the DHCP server allocates to clients, which is a string comprising 3 to 50 characters. ethernet-subinterface-range: Includes any the subinterfaces whose interface number lies between two subinterface numbers (including these two subinterfaces) by inserting the keyword to between these two interface numbers. all: All the interfaces. Description Using the dhcp server domain-name command in system view, you can configure the domain name that the DHCP address pool of the interfaces in a specified range allocates to DHCP clients. Using the undo dhcp server domain-name command in system view, you can delete the configured domain name. By default, no domain name is configured for clients. After configuring this command you cannot view the configuration of the command by executing the display current-configuration command. By executing the dhcp server domain-name command respectively on the specified interfaces, you can fulfill the batch configurations of the command. For the related command, see dhcp server ip-pool. Example Configure eth2_1_5.com.cn as the domain name in the interface DHCP address pool of the interfaces Ethernet2/0/0.1 through Ethernet2/0/0.5.[3Com] dhcp server domain-name eth1_0_0.com.cn interface ethernet 2/0/0.1 to ethernet 2/0/0.5

dhcp server expired (in Interface View)

Syntaxdhcp server expired { day day [ hour hour [ minute minute ] ] | unlimited } undo dhcp server expired

View Interface view Parameter day day: Number of days in the range of 0 to 365. hour hour: Number of hours in the range of 0 to 23.

DHCP Server Configuration Commands

433

minute minute: Number of hours in the range of 0 to 59. unlimited: The valid period is unlimited. Description Using the dhcp server expired command in interface view, you can configure a valid period allowed for leasing IP addresses in the current interface DHCP address pool. Using the undo dhcp server expired command in interface view, you can restore the default setting. By default, the leasing valid period is one day. For the related commands, see dhcp server ip-pool, dhcp server expired (in system view), and expired. Example Set the valid period for leasing IP addresses in the interface address pool maintained by Ethernet1/0/0 to unlimited.[3Com] interface ethernet 1/0/0 [3Com-Ethernet 1/0/0] dhcp server expired unlimited

dhcp server expired (in System View)

Syntaxdhcp server expired { day day [ hour hour [ minute minute ] ] | unlimited } { interface ethernet-subinterface-range | all } undo dhcp server expired { interface ethernet-subinterface-range | all }

View System view Parameter day day: Number of days in the range of 0 to 365. hour hour: Number of hours in the range of 0 to 23. minute minute: Number of hours in the range of 0 to 59. unlimited: The valid period is unlimited. ethernet-subinterface-range: Includes any the subinterfaces whose interface number lies between two subinterface numbers (including these two subinterfaces) by inserting the keyword to between these two interface numbers. all: All the interfaces. Description Using the dhcp server expired command in system view, you can configure a valid period allowed for leasing IP addresses in the interface DHCP address pool of the interfaces in a specified range. Using the undo dhcp server expired command in system view, you can restore the default setting. By default, the leasing valid period is one day.

434

CHAPTER 5: NETWORK PROTOCOL

After configuring this command, you cannot view the configuration by executing the display current-configuration command. By calling the dhcp server expired command respectively on the specified interfaces, you can fulfill the batch configurations of the command. For the related commands, see dhcp server ip-pool, dhcp server expired (in interface view), and expired. Example Set the valid period for leasing IP addresses in the interface address pool of the interfaces in the range of Ethernet2/0/0.1 to Ethernet2/0/0.5 to unlimited.[3Com] dhcp server expired unlimited interface ethernet 2/0/0.1 to ethernet 2/0/0.5

dhcp server forbidden-ip

Syntaxdhcp server forbidden-ip low-ip-address [ high-ip-address ] undo dhcp server forbidden-ip low-ip-address [ high-ip-address ]

View System view Parameter low-ip-address: The low IP address that does not participate in the auto-allocation. high-ip-address: The high IP address that does not participate in the auto-allocation. It must belong to the same segment to which the low-ip-address belongs as well and must not be smaller than the low-ip-address. If this parameter is not specified, there will be only one IP address, i.e., low-ip-address. Description Using the dhcp server forbidden-ip command, you can exclude IP addresses in a specified range to participate in the auto-allocation. Using the undo dhcp server forbidden-ip command, you can delete the configuration. By default, all the IP addresses in address pools participate in the auto-allocation. You can configure multiple IP address ranges that do not participate in the auto-allocation. Before using the undo dhcp server forbidden-ip command to delete the setting, you must make sure that you are using exactly the same parameters that you have configured. In other words, you cannot delete only some addresses from the configured range. For the related commands, see dhcp server ip-pool, network, and static-bind ip-address. Example Reserve the IP addresses in the range of 10.110.1.1 to 10.110.1.63 so that these addresses will not participate in the address auto-allocation.[3Com] dhcp server forbidden-ip 10.110.1.1 10.110.1.63

dhcp server ip-pool

Syntaxdhcp server ip-pool pool-name

DHCP Server Configuration Commands

435

undo dhcp server ip-pool pool-name

View System view Parameter pool-name: Address pool name uniquely identifying an address pool, which is a string comprising at least one character and 35 characters at most. Description Using the dhcp server ip-pool command, you can create a DHCP address pool and access the DHCP address pool view. Using the undo dhcp server ip-pool command, you can delete the specified address pool. By default, no DHCP address pool is created. If the specified address pool has existed, executing the dhcp server ip-pool command will directly access the DHCP address pool view. If the address pool does not exist, the DHCP server will create it before accessing the DHCP address pool view. Each DHCP server is allowed to configure multiple address pools, but no more than 50. For the related commands, see dhcp enable, expired, and network. Example Create DHCP address pool 0.[3Com] dhcp server ip-pool 0 [3Com-dhcp-0]

dhcp server nbns-list (in Interface View)

Syntaxdhcp server nbns-list ip-address [ ip-address ] undo dhcp server nbns-list { ip-address | all }

View Interface view Parameter ip-address: IP address of NetBIOS server. You can configure up to eight IP addresses separated by spaces in a command. all: All the NetBIOS server IP addresses. Description Using the dhcp server nbns-list command in interface view, you can configure NetBIOS server addresses in the DHCP address pool of current interface. Using the undo dns-list command in interface view, you can delete the configuration. By default, no NetBIOS address is configured. By far, only up to eight NetBIOS addresses can be configured in each DHCP address pool. For the related commands, see dhcp server ip-pool, dhcp server nbns-list (in system view), nbns-list, and netbios-type.

436

CHAPTER 5: NETWORK PROTOCOL

Example In the DHCP address pool of Ethernet1/0/0, allocate the NetBIOS server at 10.12.1.99 to the clients.[3Com] interface ethernet 1/0/0 [3Com-Ethernet 1/0/0] dhcp server nbns-list 10.12.1.99

dhcp server nbns-list (in System View)

Syntaxdhcp server nbns-list ip-address [ ip-address ] { interface ethernet-subinterface-range | all } undo dhcp server nbns-list { ip-address | all } { interface ethernet-subinterface-range | all }

View System view Parameter ip-address: IP address of NetBIOS server. You can configure up to eight IP addresses separated by spaces in a command. all: In the undo form of the command, the first all refers to all the NetBIOS server addresses and the second, all the interfaces. ethernet-subinterface-range: Includes any the subinterfaces whose interface number lies between two subinterface numbers (including these two subinterfaces) by inserting the keyword to between these two interface numbers. Description Using the dhcp server nbns-list command in system view, you can configure NetBIOS server addresses for the clients that get ip address from the DHCP address pool of the interfaces in a specified range. Using the undo dhcp server nbns-list command in system view, you can delete the configuration. By default, no NetBIOS address is configured. By far, only up to eight NetBIOS addresses can be configured in each DHCP address pool. After configuring this command, you cannot view the configuration by executing the display current-configuration command. By calling the dhcp server nbns-list command respectively on the specified interfaces, you can fulfill the batch configurations of the command. For the related commands, see dhcp server ip-pool, dhcp server nbns-list (in interface view), nbns-list, and netbios-type. Example In the DHCP address pool of interfaces in the range of Ethernet2/0/0.1 to Ethernet2/0/0.5, assign the NetBIOS server at 10.12.1.99 to the clients.[3Com] dhcp server nbns-list 10.12.1.99 interface ethernet 2/0/0.1 to ethernet 2/0/0.5

DHCP Server Configuration Commands

437

dhcp server netbios-type (in Interface View)

Syntaxdhcp server netbios-type { b-node | h-node | m-node | p-node } undo dhcp server netbios-type

View Interface view Parameter b-node: Broadcast mode, i.e., hostname-IP maps are obtained by means of broadcast. p-node: Peer-to-peer mode, i.e., maps are obtained by means of communicating with the NetBIOS server. m-node: Mixed (m) mode, i.e., the mode of type b nodes running peer-to-peer communications mechanism. h-node: Hybrid (h) mode, i.e., the mode of type p nodes possessing some of the broadcast features. Description Using the dhcp server netbios-type command in interface view, you can configure the NetBIOS node type of the DHCP clients of the current interface. Using the undo dhcp server netbios-type command in interface view, you can restore the default setting. By default, clients adopt type h node (h-node). Hostname-IP maps are required in the event that DHCP clients use the NetBIOS protocol on a WAN. For the related commands, see dhcp server ip-pool, netbios-type, dhcp server netbios-type (in system view), and nbns-list. Example In the DHCP address pool of Ethernet1/0/0, set the NetBIOS node type of its clients to p-node.[3Com] interface ethernet 1/0/0 [3Com-Ethernet 1/0/0] dhcp server netbios-type p-node

dhcp server netbios-type (in System View)

Syntaxdhcp server netbios-type { b-node | h-node | m-node | p-node } { interface ethernet-subinterface-range | all } undo dhcp server netbios-type { interface ethernet-subinterface-range | all }

View System view Parameter b-node: Broadcast mode, i.e., hostname-IP maps are obtained by means of broadcast.

438

CHAPTER 5: NETWORK PROTOCOL

p-node: Peer-to-peer mode, i.e., maps are obtained by means of communicating with the NetBIOS server. m-node: Mixed (m) mode, i.e., the mode of type b nodes running peer-to-peer communications mechanism. h-node: Hybrid (h) mode, i.e., the mode of type p nodes possessing some of the broadcast features. ethernet-subinterface-range: Includes all the subinterfaces between two subinterfaces (including these two subinterfaces) by inserting the keyword to between these two interfaces. all: All the interfaces. Description Using the dhcp server netbios-type command in system view, you can configure a NetBIOS node type for the DHCP clients of the interfaces in a specified range. Using the undo dhcp server netbios-type command in system view, you can restore the default setting. By default, clients adopt type h node (h-node). Hostname-IP maps are required in the event that DHCP clients use the NetBIOS protocol on a WAN. After configuring this command, you cannot view the configuration by executing the display current-configuration command. By calling dhcp server netbios-type respectively on the specified interfaces, you can fulfill the batch configurations of the command. For the related commands, see dhcp server ip-pool, netbios-type, dhcp server netbios-type, and nbns-list. Example In the DHCP address pool of interfaces in the range of Ethernet2/0/0.1 to Ethernet2/0/0.5, set the NetBIOS node type of clients to p-node.[3Com] dhcp server netbios-type p-node interface ethernet 2/0/0.1 to ethernet 2/0/0.5

dhcp server option (in Interface View)

Syntaxdhcp server option code { ascii ascii-string | hex hex-string | ip-address ip-address } undo dhcp server option code

View Interface view Parameter code: Option value that needs to be assigned by the user. ascii ascii-string: ASCII string. hex hex-string: 2-digit or 4-digit hexadecimal string, such as hh or hhhh. ip-address ip-address: IP address.

DHCP Server Configuration Commands

439

Description Using the dhcp server option command in interface view, you can configure a DHCP self-defined option for the DHCP address pool of the current interface. Using the undo dhcp server option command in interface view, you can delete the configuration. For the related commands, see option and dhcp server option (in system view). Example Define the hexadecimal strings of the option code 100 to 0x11 and 0x22 for the DHCP address pool of the interface Ethernet1/0/0.[3Com] interface ethernet 1/0/0 [3Com-Ethernet 1/0/0] dhcp server option 100 hex 11 22

dhcp server option (in System View)

Syntaxdhcp server option code { ascii ascii-string | hex hex-string | ip-address ip-address } { interface ethernet-subinterface-range | all } undo dhcp server option code { interface ethernet-subinterface-range | all }

View System view Parameter code: Option value that needs to be assigned by the user. ascii ascii-string: ASCII string. hex hex-string: 2-digit or 4-digit hexadecimal string, such as hh or hhhh. ip-address ip-address: IP address. ethernet-subinterface-range: Includes all the subinterfaces between two subinterfaces (including these two subinterfaces) by inserting the keyword to between these two interfaces. all: All the interfaces. Description Using the dhcp server option command in system view, you can configure a DHCP self-defined option for the interfaces in a specified range. Using the undo dhcp server option command in system view, you can delete the configuration. After configuring this command, you cannot view the configuration by executing the display current-configuration command. By calling dhcp server option respectively on the specified interfaces, you can fulfill the batch configurations of the command. For the related commands, see dhcp server option (in interface view) and option.

440

CHAPTER 5: NETWORK PROTOCOL

Example Define the hexadecimal strings of the option code 100 to 0x11 and 0x22 for the interface DHCP address pool of the interfaces in the range of Ethernet2/0/0.1 to Ethernet2/0/0.5.[3Com] dhcp server option 100 hex 11 22 interface ethernet 2/0/0.1 to ethernet 2/0/0.5

dhcp server ping

Syntaxdhcp server ping { packets number | timeout milliseconds } undo dhcp server ping { packets | timeout }

View System view Parameter packets number: The maximum number of ping packets allowed to be sent, which is in the range of 0 to 10 and defaults to 2, with 0 indicating that no ping operation will be performed. timeout milliseconds: The longest time period that the DHCP server waits for the response to each ping packet, which is in the range of 0 to 10000 milliseconds and defaults to 500 milliseconds. Description Using the dhcp server ping command, you can configure the maximum number of ping packets that the DHCP server is allowed to send and the longest time period that the DHCP server should wait for the response to each ping packet. Using the undo dhcp server ping command, you can restore the default settings. To prevent the address collision resulted from repeated IP address allocation, DHCP server sends ping packets to detect that an address is available. Example Allow the DHCP server to send up to ten ping packets and wait 500 milliseconds (the default setting) for the response to each packet.[3Com] dhcp server ping packets 10

dhcp server static-bind

Syntaxdhcp server static-bind ip-address ip-address mac-address mac-address undo dhcp server static-bind { ip-address ip-address | mac-address mac-address }

View Interface view Parameter ip-address: Statically bound IP address. It must be a valid IP address selected from the current interface address pool. mac-address: Statically bound MAC address.

DHCP Server Configuration Commands

441

Description Using the dhcp server static-bind command, you can configure a static address binding in the DHCP address pool of the current interface. Using the undo dhcp server static-bind command, you can delete the configuration. By default, static address binding is not configured in any interface address pool. In all the static address binding operations performed on an interface, the IP addresses and the MAC addresses must be unique. Example Statically bind the MAC address 0000-e03f-0305 with the IP address 10.1.1.1.[3Com-Ethernet1/0/0] dhcp server static-bind 10.1.1.1 0000-e03f-0305

display dhcp server conflict

Syntaxdisplay dhcp server conflict [ ip ip-address | all ]

View Any view Parameter ip-address: A specified IP address. all: All the IP addresses. Description Using the display dhcp server conflict command, you can view the DHCP address conflict statistics, including the information in conflicted IP address, conflict detection type, conflict time, etc. If no optional parameter has been specified, the information displayed will depend on the current view:

In Ethernet interface view, the information displayed is concerned with the address pool of the current interface. In any other views, the information displayed is concerned with all the address pools.

For the related command, see reset dhcp server conflict. Example View the DHCP address conflict statistics. display dhcp server conflict Address Discover Time 10.110.1.2 Jan 11 2003 11:57: 7 PM

Table 1 Description of the information displayed by executing display dhcp server conflictMajor item Address Discover Time Description The conflicted IP address Time when the conflict is discovered

442

CHAPTER 5: NETWORK PROTOCOL

display dhcp server expired

Syntaxdisplay dhcp server expired [ ip ip-address | pool [ pool-name ] | interface [ interface-name ] all ]

View Any view Parameter ip-address: A specified IP address. pool-name: Name of a global address pool. All the global address pools will apply if no address pool has been specified. interface-name: Interface address pool. All the interface address pools will apply if no interface has been specified. all: All the IP addresses. Description Using the display dhcp server expired command, you can view the expired address leases in a DHCP address pool. In certain conditions, the addresses of the expired leases will be allocated to other DHCP clients. Example View the expired leases in DHCP address pools. display dhcp server expired all Global pool: IP address Hardware address Lease expiration Interface pool: IP address Hardware address Lease expiration

Type Type

DHCP Server Configuration Commands

443

Table 2 Description of the information displayed by executing display dhcp server expiredMajor item Global pool: Interface pool: IP address Hardware address Lease expiration Type Description Expired address leases in global address pools. Expired address leases in interface address pools. The bound IP address The bound MAC address The lease expiration time Address binding type

display dhcp server free-ip

Syntaxdisplay dhcp server free-ip

View Any view Parameter None Description Using the display dhcp server free-ip command, you can view the ranges of available addresses in DHCP address pools, i.e., information of the IP addresses that have not been allocated yet. Example View the ranges of the available addresses in DHCP address pools. display dhcp server free-ip IP Range from 1.0.0.0 to 2.2.2.1 IP Range from 2.2.2.3 to 2.255.255.255 IP Range from 4.0.0.0 to 4.255.255.255 IP Range from 5.5.5.0 to 5.5.5.0 IP Range from 5.5.5.2 to 5.5.5.255

display dhcp server ip-in-use

Syntaxdisplay dhcp server ip-in-use [ ip ip-address | pool [ pool-name ] | interface [ interface-name ] ]

View Any view Parameter ip-address: Specifies an IP address. If no IP address has been specified, information of all the bound addresses will be displayed. pool-name: Specifies a global address pool. If no global address pool has been specified, the bound addresses in all the global address pools will be displayed.

444

CHAPTER 5: NETWORK PROTOCOL

interface-name: Specifies an interface address pool. If no interface address pool has been specified, the bound addresses in all the interface address pools will be displayed. Description Using the display dhcp server ip-in-use command, you can view the address binding information of DHCP clients, such as the information in hardware address, IP address, and address lease expiration. If no optional parameter has been specified, the information output by executing the command will be:

In Ethernet interface view, the information in the address pool of the current interface. In any other views, the information in all the address pools.

For the related command, see reset dhcp server ip-in-use. Example View the DHCP address binding information. display dhcp server ip-in-use all Global pool: IP address Hardware address Lease expiration Type 2.2.2.2 44444-4444-4444 NOT Used Manual Interface pool: IP address Hardware address Lease expiration Type 5.5.5.1 0050-ba28-930a Jun 5 2003 10:56: 7 AM Auto:COMMITED

Table 3 Description of the information output by executing display dhcp server ip-in-useMajor item Global pool: Interface pool: IP address Hardware address Lease expiration Type Description Address binding information of global address pools Address binding information of interface address pools The bound IP address The bound MAC address The lease expiration time Address binding type

display dhcp server statistics

Syntaxdisplay dhcp server statistics

View Any view Parameter None Description Using the display dhcp server statistics command, you can view the statistics on the DHCP server, including such information as number of DHCP address pools, automatically or manually bound address and expired addresses, number of unknown packets, number of DHCP request packets, and number of response packets.

DHCP Server Configuration Commands

445

For the related command, see reset dhcp server statistics. Example View the statistic information on the DHCP server. display dhcp server statistics Global Pool: Pool Number: 5 Binding Auto: 0 Manual: 1 Expire: 0 Interface Pool: Pool Number: 1 Binding Auto: 1 Manual: 0 Expire: 0 Boot Request: 6 Dhcp Discover: 1 Dhcp Request: 4 Dhcp Decline: 0 Dhcp Release: 1 Dhcp Inform: 0 Boot Reply: 4 Dhcp Offer: 1 Dhcp Ack: 3 Dhcp Nak: 0 Bad Messages: 0

Table 4 Description of the information output by executing display dhcp server statisticsMajor item Global Pool: Interface Pool: Pool Number Auto Manual Expire Boot Request Description Statistics of global address pools Statistics of interface address pools Number of address pools Number of automatically bound IP addresses Number of manually bound IP addresses Number of IP addresses of expired leases Number of messages that DHCP clients sent to the DHCP server

Dhcp Discover, Dhcp Statistics of the received DHCP packets Request, Dhcp Decline, Dhcp Release, Dhcp Inform Boot Reply Number of messages that the DHCP server sent to DHCP clients

Dhcp Offer, Dhcp Ack, Statistics of the transmitted DHCP packets Dhcp Nak Bad Messages Statistics of packets containing errors

446

CHAPTER 5: NETWORK PROTOCOL

display dhcp server tree

Syntaxdisplay dhcp server tree [ pool [ pool-name ] | interface [ interface-name ] | all ]

View Any view Parameter pool-name: Name of a global address pool. All the global address pools will apply if no address pool has been specified. interface-name: Interface address pool. All the interface address pools will apply if no interface has been specified. all: All the DHCP address pools. Description Using the display dhcp server tree command, you can view the tree-structure information of DHCP address pools, including the address pool at each node, option, address lease period, and DNS server information. If no optional parameter has been specified, the information output by executing the command will be:

In Ethernet interface view, the information displayed is concerned with the address pool of the current interface. In any other views, the information in all the address pools.

Example View the tree-structure information of DHCP address pools. display dhcp server tree all Global pool: Pool name: 5 network 10.10.1.0 255.255.255.0 Child node:6 Sibling node:7 option 1 ip-address 255.0.0.0 expired 1 0 0 option 58 hex 00 00 A8 C0 option 59 hex 00 00 00 3C Pool name: 6 host 10.10.1.2 255.0.0.0 hardware-address 1111.2222.3333 ethernet Parent node:5 option 1 ip-address 255.255.0.0 expired 1 0 0 option 58 hex 00 00 A8 C0 option 59 hex 00 00 00 3C Pool name: 7 network 10.10.1.64 255.255.255.192 PrevSibling node:5 Sibling node:8 option 1 ip-address 255.0.0.0 Pool name: 8 network 20.10.1.1 255.255.255.0 Child node:9 PrevSibling node:7 option 1 ip-address 255.0.0.0 gateway-list 2.2.2.2

DHCP Server Configuration Commands

447

nbns-list 3.3.3.3 netbios-type m-node expired 2 0 0 option 58 hex 00 01 51 80 option 59 hex 00 00 00 3C Pool name: 9 network 30.10.1.64 255.255.255.0 Parent node:8 option 1 ip-address 255.0.0.0 gateway-list 2.2.2.2 dns-list 1.1.1.1 domain-name 444444 nbns-list 3.3.3.3 netbios-type m-node expired 2 0 0 option 58 hex 00 01 51 80 option 59 hex 00 00 00 3C Interface pool: Pool name: Ethernet11/2/0 network 5.5.5.0 mask 255.255.255.0 option 1 ip-address 255.255.255.0 gateway-list 5.5.5.5 expired 1 0 0 option 58 hex 00 00 A8 C0 option 59 hex 00 00 00 3C

Table 5 Description of the information output by executing display dhcp server treeMajor item Global pool: Interface pool: Pool Name: network host 10.10.1.2 255.0.0.0 child node:6 The node in this position can be: Description Global address pool information Interface address pool information Address pool name Address ranges available for allocation hardware-address 1111.2222.3333 ethernet Statically bound IP address and MAC address The child node of the current node is address pool 6. Child node, which is the child node (subnet) address pool of the current address pool

Parent node, which is Sibling node, which is the next sibling node (another subnet on the father node the same natural network segment) address pool. The order of (natural network sibling nodes depends on the order in which they are configured. segment) address pool of the current node PrevSibling node, which is the previous sibling node of the current node Self-definable DHCP option option

expired

The address lease gateway-list period that is indicated by days, hours, and minutes The egress GW router allocated to DHCP clients dns-list

448

CHAPTER 5: NETWORK PROTOCOL

Table 5 Description of the information output by executing display dhcp server treeMajor item The DNS servers allocated to DHCP clients Domain name specified for DHCP clients The NetBIOS server allocated to DHCP clients NetBIOS node type specified for DHCP clients Description domain-name

nbns-list

netbios-type

dns-list

Syntaxdns-list ip-address [ ip-address ] undo dns-list { ip-address | all }

View DHCP address pool view Parameter ip-address: IP address of the DNS. You can configure up to eight IP addresses separated by spaces in a command. Description Using the dns-list command, you can configure DNS server IP addresses in a global DHCP address pool. Using the undo dns-list command, you can delete the configuration. By default, no DNS server address is configured. By far, only up to eight DNS server addresses can be set in each DHCP address pool. For the related commands, see dhcp server dns-list interface, dhcp server dns-list, and dhcp server ip-pool. Example Specify 1.1.1.254 as a DNS server address for DHCP address pool 0.[3Com] dhcp server ip-pool 0 [3Com-dhcp-0] dns-list 1.1.1.254

domain-name

Syntaxdomain-name domain-name undo domain-name domain-name

View DHCP address pool view

DHCP Server Configuration Commands

449

Parameter domain-name: Domain name that the DHCP server allocates to clients, which is a string comprising at least three characters and at most 50 characters. Description Using the domain-name command, you can configure the domain name that a global address pool of the DHCP server allocates to clients. Using the undo domain-name command, you can delete the configured domain name. By default, no domain name has been allocated to DHCP clients and domain name is null. For the related commands, see dhcp server ip-pool, dhcp server domain-name interface, and dhcp server domain-name. Example Set the domain name of DHCP address pool 0 to mydomain.com.cn.[3Com] dhcp server ip-pool 0 [3Com-dhcp-0] domain-name mydomain.com.cn

expired

Syntaxexpired { day day [ hour hour [ minute minute ] ] | unlimited } undo expired

View DHCP address pool view Parameter day day: Number of days in the range of 0 to 365. hour hour: Number of hours in the range of 0 to 23. minute minute: Number of hours in the range of 0 to 59. unlimited: The valid period is unlimited. Description Using the expired command, you can configure a valid period allowed for leasing IP addresses in a global DHCP address pool. Using the undo expired command, you can restore the default setting. By default, the leasing valid period is one day. For the related commands, see dhcp server ip-pool, dhcp server expired, and dhcp server expired interface. Example Set the IP address lease period of global address pool 0 to three minutes, two hours, and one day.[3Com] dhcp server ip-pool 0 [3Com-dhcp-0] expired 1 2 3

450

CHAPTER 5: NETWORK PROTOCOL

gateway-list

Syntaxgateway-list ip-address [ ip-address ] undo gateway-list { ip-address | all }

View DHCP address pool view Parameter ip-address: IP address of egress GW router. You can configure up to eight IP addresses separated by spaces in a command. all: IP addresses of all the egress GW routers. Description Using the gateway-list command, you can configure IP addresses of the egress GW routers used by DHCP clients. Using the undo gateway-list command, you can delete the configuration. By default, no egress GW router is configured. For the related commands, see dhcp server ip-pool and network. Example Associate the egress GW router at 10.110.1.99 with DHCP address pool 0.[3Com] dhcp server ip-pool 0 [3Com-dhcp-0] gateway-list 10.110.1.99

nbns-list

Syntaxnbns-list ip-address [ ip-address ] undo nbns-list { ip-address | all }

View DHCP address pool view Parameter ip-address: IP address of NetBIOS server. You can configure up to eight IP addresses separated by spaces in a command. all: All the NetBIOS server IP addresses. Description Using the nbns-list command, you can configure NetBIOS server addresses in a global DHCP address pool for the clients. Using the undo nbns-list command, you can remove the configured NetBIOS server addresses. By default, no NetBIOS address is configured. By far, only up to eight NetBIOS addresses can be configured in each DHCP address pool. For the related commands, see dhcp server ip-pool, dhcp server nbns-list, dhcp server nbns-list interface, and netbios-type.

DHCP Server Configuration Commands

451

Example In the DHCP address pool 0, allocate the NetBIOS server at 10.12.1.99 to the clients.[3Com] dhcp server ip-pool 0 [3Com-dhcp-0] nbns-list 10.12.1.99

netbios-type

Syntaxnetbios-type { b-node | h-node | m-node | p-node } undo netbios-type

View DHCP address pool view Parameter b-node: Broadcast mode, i.e., hostname-IP maps are obtained by means of broadcast. p-node: Peer-to-peer mode, i.e., maps are obtained by means of communicating with the NetBIOS server. m-node: Mixed (m) mode, i.e., the mode of type b nodes running peer-to-peer communications mechanism. h-node: Hybrid (h) mode, i.e., the mode of type p nodes possessing some of the broadcast features. Description Using the netbios-type command, you can configure the NetBIOS node type of the clients of a global DHCP address pool. Using the undo netbios-type command, you can restore the default setting. By default, clients adopt type h node (h-node). For the related commands, see dhcp server ip-pool, dhcp server netbios-type (in interface view), dhcp server netbios-type (in system view), and nbns-list. Example Specify b-node as the NetBIOS node type of clients of DHCP address pool 0.[3Com] dhcp server ip-pool 0 [3Com-dhcp-0] netbios-type b-node

network

Syntaxnetwork ip-address [ mask netmask ] undo network

View DHCP address pool view

452

CHAPTER 5: NETWORK PROTOCOL

Parameter ip-address: The subnet address of an IP address pool used for dynamic allocation. mask netmask: Network mask of the IP address pool. Natural mask will be adopted if the parameter is not specified. Description Using the network command, you can configure an IP address range used for dynamic allocation. Using the undo network command, you can delete the configuration. By default, no IP address range has been configured for dynamic allocation. Each DHCP address pool can be configured with a network segment and the new configuration will replace the old one. If the system requires several such address segments, you should configure them in multiple address pools. For the related commands, see dhcp server ip-pool and dhcp server forbidden-ip. Example Use 192.168.8.0/24 as the address space for DHCP address pool 0.[3Com-dhcp-0] network 192.168.8.0 mask 255.255.255.0

option

Syntaxoption code { ascii ascii-string | hex hex-string | ip-address ip-address } undo option code

View DHCP address pool view Parameter code: Option value that needs to be assigned by the user. ascii ascii-string: ASCII string. hex hex-string: 2-digit or 4-digit hexadecimal string, such as hh or hhhh. ip-address ip-address: IP address. Description Using the option command, you can configure the self-defined options for a DHCP global address pool. Using the undo option command, you can delete the DHCP self-defined options. New options are emerging along with the development of DHCP. In order to accommodate these options, manual option addition is supported so that they can be added into the attribute list maintained by the DHCP server. For the related commands, see dhcp server option (in interface view) and dhcp server option interface (in system view).

DHCP Server Configuration Commands

453

Example Define the hexadecimal strings of the option code 100 to 0x11 and 0x22.[3Com-dhcp-0] option 100 hex 11 22

reset dhcp server conflict

Syntax reset dhcp server conflict [ ip-address | all ] View User view Parameter ip-address: A specified IP address. all: All the address pools. Description Using the reset dhcp server conflict command, you can clear the statistics about DHCP address collision. In the case that no parameter has been specified when the command is configured, the scope in which the command takes effect will depend on the view in which the command is executed:

If the command is executed in Ethernet interface view, it will take effect on the address pool of the current interface. If the command is executed in any other views, it will take effect on all the address pools.

For the related command, see display dhcp server conflict. Example Clear all the address collision statistics. reset dhcp server conflict

reset dhcp server ip-in-use

Syntaxreset dhcp server ip-in-use [ ip ip-address | pool [ pool-name ] | interface [ interface-name ] | all ]

View User view Parameter ip-address: Binding information of a specified IP address. pool-name: Specifies a global address pool. All the global address pools will apply if no address pool has been specified. interface-name: Specifies an interface address pool. If no interface has been specified, all the interface address pools will apply. all: All the address pools.

454

CHAPTER 5: NETWORK PROTOCOL

Description Using the reset dhcp server ip-in-use command, you can clear the DHCP dynamic address binding information. In the case that no parameter has been specified when the command is configured, the scope in which the command takes effect will depend on the view in which the command is executed:

If the command is executed in Ethernet interface view, it will take effect on the address pool of the current interface. If the command is executed in any other views, it will take effect on all the address pools.

For the related command, see display dhcp server ip-in-use. Example Clear the binding information of the address 10.110.1.1. reset dhcp server ip-in-use ip 10.110.1.1

reset dhcp server statistics

Syntaxreset dhcp server statistics

View User view Parameter None Description Using the reset dhcp server statistics command, you can clear the statistics on the DHCP server, including such information as number of DHCP address pools, automatically and manually bound addresses and expired addresses, number of unknown packets, number of DHCP request packets, and number of response packets. For the related command, see display dhcp server statistics. Example Clear statistic information of the DHCP server. reset dhcp server statistics

static-bind ip-address

Syntaxstatic-bind ip-address ip-address [ mask netmask ] undo static-bind ip-address

View DHCP address pool view Parameter ip-address: IP address to be bound.

DHCP Server Configuration Commands

455

netmask: Mask of the IP address to be bound. If it is not specified, the natural mask will be adopted. Description Using the static-bind ip-address command, you can bind an IP address statically. Using the undo static-bind ip-address command, you can delete the statically bound IP address. By default, no IP address is bound statically. The commands static-bind ip-address and static-bind mac-address must be used in pairs so that an IP address and a MAC address can be bound together. For the related commands, see dhcp server ip-pool, network, and static-bind mac-address. Example Bind the PC at the MAC address 0000-e03f-0305 with the IP address 10.1.1.1 using the mask 255.255.255.0.[3Com-dhcp-0] static-bind ip-address 10.1.1.1 mask 255.255.255.0 [3Com-dhcp-0] static-bind mac-address 0000-e03f-0305

static-bind mac-address

Syntaxstatic-bind mac-address mac-address undo static-bind mac-address

View DHCP address pool view Parameter mac-address: The host MAC address to be bound, which is in the format of H-H-H. Description Using the static-bind mac-address command, you can bind a MAC address statically. Using the undo static-bind mac-address command, you can delete the statically bound MAC address. By default, no MAC address is bound statically. The commands static-bind mac-address and static-bind ip-address must be used in pairs so that a MAC address and an IP address can be bound together. For the related commands, see dhcp server ip-pool, and static-bind ip-address. Example Bind the PC at the MAC address 0000-e03f-0305 with the IP address 10.1.1.1 using the mask 255.255.255.0.[3Com-dhcp-0] static-bind ip-address 10.1.1.1 mask 255.255.255.0 [3Com-dhcp-0] static-bind mac-address 0000-e03f-0305

456

CHAPTER 5: NETWORK PROTOCOL

DHCP Client Configuration Commandsdebugging dhcp client Syntaxdebugging dhcp client { event | packet | error | all } undo debugging dhcp client { event | packet | error | all }

View User view Parameter event: Protocol events of the DHCP client, which include address allocation and data updating. packet: DHCP packets received and sent by the DHCP client. error: Unknown packet information or error information. all: Enables debugging of the DHCP client in all the information (event, packet, and error). Description Using the debugging dhcp client command, you can enable debugging on the DHCP client. Using the undo debugging dhcp client command, you can disable debugging on the DHCP client. By default, DHCP client debugging is disabled. Example Enable event debugging on the DHCP client.debugging dhcp client event

display dhcp client

Syntaxdisplay dhcp client [ verbose ]

View Any view Parameter verbose: Statistic details of the DHCP client. Description Using the display dhcp client command, you can display the statistic information of the DHCP client. Executing the command attached without the keyword parameter verbose will display only the brief address allocation information on the DHCP client. Example Display the statistic details of the DHCP client.[3Com] display dhcp client verbose

DHCP Client Configuration Commands

457

DHCP client statistic infomation: Ethernet0/0: Current machine state: BOUND Alloced IP: 169.254.0.2 255.255.0.0 Alloced lease: 86400 seconds, T1: 43200 seconds, T2: 75600 seconds Lease from 2002.09.20 01:05:03 to 2002.09.21 01:05:03 Server IP: 169.254.0.1 Transaction ID = 0x3d8a7431 Default router: 2.2.2.2 DNS server: 1.1.1.1 Domain name: 3Com.com Client ID: 3Com-00e0.fc0a.c3ef-Ethernet0/0 Next timeout will happen after 0 days 11 hours 56 minutes 1 seconds. Ethernet2/0: Current machine state: HALT

The statistic information shows that two interfaces, i.e., Ethernet0/0 and Ethernet2/0, have been configured to be DHCP clients. Ethernet0/0 has been assigned with the address 169.254.0.2/16 subject to the lease expiration of 86400 seconds and the current machine state is BOUND. The renewal timer is set to 43200 seconds, the rebinding timer to 75600 seconds, and the lease expiration to the period since 2002.09.20 01:05:03 to 2002.09.21 01:05:03. The selected DHCP server is at 169.254.0.1, the GW at 2.2.2.2, and the DNS server at 1.1.1.1, given the domain name is 3Com.com. In addition, the next timeout will happen 1 second, 56 minutes, and 11 hours later. The allocation process has not been started at Ethernet2/0 yet. The current machine state is HALT, which is normally as a result of the DOWN state of the interface. Display more details of the DHCP client.[3Com]display dhcp client verbose DHCP client statistic infomation: Ethernet0/0: Current machine state: BOUND Alloced IP: 169.254.0.2 255.255.0.0 Alloced lease: 300 seconds, T1: 150 seconds, T2: 262 seconds Lease from 2002.09.15 07:11:55 to 2002.09.15 07:16:55 Server IP: 169.254.0.1 Transaction ID = 0x3d8432b1 Client ID: 3Com-00e0.fc0a.c3ef-Ethernet0/0 Next timeout will happen after 0 days 0 hours 1 minutes 36 seconds.

Table 6 Statistic information field description of DHCP clientItem Ethernet0/0 Current machine state Alloced IP lease T1 T2 Lease from.to. Server IP Transaction ID Description Interface where the client is allowed to dynamically obtain an IP address State of the client state machine IP address allocated to the client Lease period Duration of the renewal timer Duration of the rebinding timer The starting time and the end time of the lease The selected DHCP server address Transaction ID

458

CHAPTER 5: NETWORK PROTOCOL

Table 6 Statistic information field description of DHCP clientItem Client ID Default router DNS server Domain name Requested IP Offered IP Description User ID GW address DNS server address Domain name The requested IP address The provided IP address

ip address dhcp-alloc

Syntaxip address dhcp-alloc undo ip address dhcp-alloc

View Interface view Parameter None Description Using the ip address dhcp-alloc command, you can allocate local IP addresses by making use of DHCP. Using the undo ip address dhcp-alloc command, you can disable the allocation of local IP addresses via DHCP negotiation. This command must be configured and executed in Ethernet interface (including subinterface) view. By default, DHCP negotiation is not used for the allocation of local IP addresses. Example Adopt DHCP negotiation for the allocation of local IP addresses on Ethernet0/0/0.[3Com-Ethernet0/0/0] ip address dhcp-alloc

DHCP Relay Configuration Commandsdebugging dhcp relay Syntaxdebugging dhcp relay undo debugging dhcp relay

View User view Parameter None

DHCP Relay Configuration Commands

459

Description Using the debugging dhcp relay command, you can enable debugging on the DHCP-relay module. Using the undo debugging dhcp relay command, you can disable DHCP-relay module debugging. Example Enable DHCP-relay module debugging.debugging dhcp relay

dhcp relay release

Syntaxdhcp relay release { client-ip mac-address } [ server-ip ]

View Interface view System view Parameter client-ip: IP address of the DHCP client. mac-address: MAC address of the DHCP client, which is in the format of H-H-H. server-ip: IP address of the DHCP server. Description Using the dhcp relay release command, you can send an IP address releasing request to a DHCP server via the DHCP relay. Given that no IP address of DHCP server has been specified, release packets will be sent either to all the DHCP servers, if this command is configured in system view, or to all the relay addresses configured on an interface, if this command is configured in the interface view. Example Send a release packet to the DHCP server at 10.110.91.174, requesting to release the IP address 192.2.2.25, which was offered to the client whose MAC address is 0050-ba34-2000.[3Com] dhcp relay release 192.2.2.25 0050-ba34-2000 10.110.91.174

display dhcp relay address

Syntaxdisplay dhcp relay address [ interface interface-name | all ]

View Any view Parameter interface-name: Specifies an interface name, which is represented by interface type plus interface number. all: All the interfaces.

460

CHAPTER 5: NETWORK PROTOCOL

Description Using the display dhcp relay address command, you can view the DHCP relay address configuration of an interface. For the related commands, see ip relay address and ip relay address interface. Example View the DHCP relay address configurations of all the interfaces. display dhcp relay address all ** Ethernet11/2/0 DHCP Relay Address ** Relay Address [0] : 3.3.3.3

display dhcp relay statistics

Syntaxdisplay dhcp relay statistics

View Any view Parameter None Description Using the display dhcp relay statistics command, you can view the statistics of DHCP relay in packet errors, DHCP packets received from clients, DHCP packets received from and sent to servers, and DHCP packets sent to clients (including unicast and broadcast packets). Example View DHCP relay statistics. display dhcp relay statistics Bad Packets recieved: 0 DHCP packets received from clients: 0 DHCP DISCOVER packets received: 0 DHCP REQUEST packets received: 0 DHCP INFORM packets received: 0 DHCP DECLINE packets received: 0 DHCP packets received from servers: 0 DHCP OFFER packets received: 0 DHCP ACK packets received: 0 DHCP NAK packets received: 0 DHCP packets sent to servers: 0 DHCP packets sent to clients: 0 Unicast packets sent to clients: 0

ip relay address

Syntaxip relay address ip-address undo ip relay address [ ip-address ]

View Interface view

DHCP Relay Configuration Commands

461

Parameter ip-address: IP relay address in dot-deliminated decimal format. Description Using the ip relay address command, you can specify the exact location of a DHCP server by configuring an IP relay address for it. Using the undo ip relay address command, you can delete one or all relay IP addresses used by an interface. By default, no relay IP address has been configured. Executing undo ip relay address without ip-address will delete all the relay IP addresses configured on the current interface. As the packets sent by DHCP client machines in some phases of DHCP are broadcast packets, the interfaces configured with relay IP addresses must support broadcast. In other words, this command can be used on the broadcast-supported network interfaces, Ethernet interfaces for example. For the related command, see dhcp select interface. Example Add two relay IP addresses on Ethernet 0/0/0.[3Com-Ethernet0/0/0] ip relay address 202.38.1.2 [3Com-Ethernet0/0/0] ip relay address 202.38.1.3

ip relay address cycle

Syntaxip relay address cycle undo ip relay address cycle

View System view Parameter None Description Using the ip relay address cycle command, you can adopt the polling approach to relay packets, ensuring that different clients use different DHCP servers and the same clients use the same DHCP server so long as it is possible. Using the undo ip relay address cycle command, you can adopt the broadcast approach to relay packets to broadcast client requests to all the DHCP servers. By default, the broadcast approach is adopted. Suppose that there are three clients, i.e., A, B, and C, and the DHCP server has been configured with three relay addresses, i.e., S1, S2, and S3. If the polling approach is adopted to relay packets, A, B, and C will respectively use the relay addresses S1, S2, and S3. If A is shut down and restarted again, it will continue to use S1. But if a client other than these three clients started, it will use S1. Thus, the relay addresses will be used cyclically. For the related command, see ip relay address.

462

CHAPTER 5: NETWORK PROTOCOL

Example Adopt the polling approach to relay.[3Com] ip relay address cycle

ip relay address interface

Syntaxip relay address ip-address [ interface ethernet-subinterface-range | all ] undo ip relay address { ip-address | all } { interface ethernet-subinterface-range | all }

View System view Parameter ip-address: IP address of the DHCP server. ethernet-subinterface-range: Includes all the subinterfaces whose interface number lies between two subinterface numbers (including these two subinterfaces) by inserting the keyword to between these two interface numbers. all: In the undo form of the command, the first all refers to all the relay addresses and the second all, the interfaces. Description Using the ip relay address interface command, you can configure a relay address for the Ethernet interfaces in a specified range for the purpose of transparent forwarding. Using the undo ip relay address interface command, you can delete the configured relay address. By default, no relay IP address has been configured on any Ethernet interface. For the related command, see ip relay address. Example Add a relay IP address for the interfaces in the range of Ethernet2/0/0.1 to Ethernet2/0/0.5.[3Com] ip relay address 202.38.1.2 interface ethernet 2/0/0.1 to ethernet 2/0/0.5

reset dhcp relay statistics

Syntaxreset dhcp relay statistics

View User view Parameter None Description Using the reset dhcp relay statistics command, you can clear the DHCP relay statistics. For the related command, see display dhcp relay statistics.

IP Performance Configuration Commands

463

Example Clear the DHCP relay statistics. reset dhcp relay statistics

IP Performance Configuration Commandsdebugging ip Syntaxdebugging ip { icmp | packet [ acl { acl-number1 | acl-number2 } ] } undo debugging ip { icmp | packet }

View User view Parameter acl-number1: ACL based on the interface, in the range of 1000 to 1999. acl-number2: ACL in the range of 1 to 199. The ACL in the range of 1 to 99 is the basic ACL and that in the range of 100 to 199 is the advanced ACL. Description Using debugging ip icmp command, you can enable the ICMP debugging. Using the undo debugging ip icmp command, you can disable the ICMP debugging. The debugging ip packet command is used to enable the IP packet debugging. The filtration to the debugging information can be accomplished by filtering the IP packets via acl. Using the undo debugging ip packet command, you can disable the IP packet debugging. ExampleEnable the IP debugging. debugging ip packet *0.129680-IP-8-debug_case: Delivering, interface = Serial0/0/0, version = 4, headlen = 20, tos = 6,pktlen = 70, pktid = 49, offset = 0, ttl = 1, protocol = 17,checksum = 50, s = 1.1.1.2, d = 224.0.0.2 prompt: IP packet is delivering up! *0.129680-IP-8-debug_case: Sending, interface = Serial0/0/0, version = 4, headlen = 20, tos = 6,pktlen = 70, pktid = 49, offset = 0, ttl = 1, protocol = 17,checksum = 55147, s = 1.1.1.2, d = 224.0.0.2 prompt: Sending the packet from local at Serial0/0/0 debugging ip icmp *0.157090-IP-8-debug_icmp: ICMP Receive: echo(Type=8, Code=0), Src = 127.0.0.1, Dst = 1.1.1.2 *0.157090-IP-8-debug_icmp: ICMP Send: echo-reply(Type=0, Code=0), Src = 1.1.1.2, Dst = 127.0.0.1 *0.157090-IP-8-debug_icmp: ICMP Receive: echo-reply(Type=0, Code=0), Src = 1.1.1.2, Dst = 127.0.0.1

464

CHAPTER 5: NETWORK PROTOCOL

debugging tcp event

Syntaxdebugging tcp event [ task_id socket_id ] undo debugging tcp event [ task_id socket_id ]

View User view Parameter task_id: The ID of a task. socket_id: The ID of a socket. Description Using the debugging tcp event command, you can enable TCP events debugging. And using the undo debugging tcp event command, you can disable TCP events debugging. There is a limit for the number of debugging switches enabled, that is, only a fixed number of debugging switches can be enabled at one time (combination of task ID and socket ID). In addition, when TCP is enabled to receive connection request reactively, a new socket will be created to establish that connection, and some programs will create a new task to process the connection, like Telnet server. So, to view information about a connection, such parameters as task_id and socket_id cannot be used for filtering. Example Enable debugging of TCP events. debugging tcp event *0.630270-SOCKET-8-TCP EVENT: 1043494683: task = Co0(2), socketid = 0, TCPCB 0x02c6fd74 created *0.630270-SOCKET-8-TCP EVENT: 1043494683: task = Co0(2), socketid = 1, state CLOSED changed to SYN_SENT *0.630270-SOCKET-8-TCP EVENT: 1043494683: task = Co0(2), socketid = 1, sending SYN, seq = 74249530, LA = 127.0.0.1:1025, FA = 1.1.1.1:23 *0.630270-SOCKET-8-TCP EVENT: 1043494683: task = Co0(2), socketid = 1, advertising MSS = 512, LA = 127.0.0.1:1025, FA = 1.1.1.1:23 *0.630270-SOCKET-8-TCP EVENT: 1043494683: task = VTYD(9), socketid = 0, received MSS = 512, LA = 1.1.1.1:23, FA = 127.0.0.1:1025 *0.50959090-SOCKET-8-TCP EVENT: 733759463: sending RST to 2.2.2.1:11022 *0.1293330-SOCKET-8-TCP EVENT: 1043495346: task = Co0(2), socketid = 1, connection refused because remote sent RST! LA = 1.1.1.1:1026, FA = 1.