Nortel Networks Contivity1510D Manual de usuario

Version 3.5Part No. 311645-A Rev 00December 2000600 Technology Park DriveBillerica, MA 01821-4130Reference for the Contivity VPN Switch Command Line I

10 Contents311645-A Rev 00enable password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

100 Chapter 2 CLI Command Summary311645-A Rev 00Next command modePrivileged ExecPrerequisitesA reload must already have been scheduled.WarningsNo curr

Chapter 2 CLI Command Summary 101Reference for the Contivity VPN Switch Command Line InterfaceExampleCES#reload at 22:00 restart boot-drive ide0 disab

102 Chapter 2 CLI Command Summary311645-A Rev 00reload inThis command sets a timer that causes the switch to reboot after a certain time has passed. O

Chapter 2 CLI Command Summary 103Reference for the Contivity VPN Switch Command Line Interfacefactory The switch should be rebooted with the reset con

104 Chapter 2 CLI Command Summary311645-A Rev 00PrerequisitesA named configuration file can only be used after it has been created.WarningsAny warning

Chapter 2 CLI Command Summary 105Reference for the Contivity VPN Switch Command Line InterfaceExampleCES#reload in 8:00 restart boot-drive ide1 power-

106 Chapter 2 CLI Command Summary311645-A Rev 00reload no-sessionsThis command causes the switch to reboot after there are no further logins. The rebo

Chapter 2 CLI Command Summary 107Reference for the Contivity VPN Switch Command Line Interfacefactory The switch should be rebooted with the reset con

108 Chapter 2 CLI Command Summary311645-A Rev 00PrerequisitesA named configuration file can only be used after it has been created.WarningsAny warning

Chapter 2 CLI Command Summary 109Reference for the Contivity VPN Switch Command Line InterfaceExampleCES#reload no-sessions restart disable-logins Rel

Contents 11Reference for the Contivity VPN Switch Command Line InterfaceCommand mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

110 Chapter 2 CLI Command Summary311645-A Rev 00server backupThis command copies the current contents of the internal switch LDAP database into an LDI

Chapter 2 CLI Command Summary 111Reference for the Contivity VPN Switch Command Line InterfaceNext command modeLDAP server configurationPrerequisitesT

112 Chapter 2 CLI Command Summary311645-A Rev 00ExampleCES(config)#ldap-server internalRouter(config-ldap)#server stopRouter(config-ldap)#server backu

Chapter 2 CLI Command Summary 113Reference for the Contivity VPN Switch Command Line Interfaceserver restoreThis command replaces the current contents

114 Chapter 2 CLI Command Summary311645-A Rev 00Next command modeLDAP server configurationPrerequisitesThe internal LDAP server must be stopped before

Chapter 2 CLI Command Summary 115Reference for the Contivity VPN Switch Command Line InterfaceExampleCES(config)#ldap-server internalRouter(config-lda

116 Chapter 2 CLI Command Summary311645-A Rev 00server startThis command starts the internal switch LDAP server after it has been stopped.Syntaxserver

Chapter 2 CLI Command Summary 117Reference for the Contivity VPN Switch Command Line InterfaceWarningsThe LDAP server is already started.Cannot start

118 Chapter 2 CLI Command Summary311645-A Rev 00Syntaxserver stopParametersNoneDefaultNoneCommand modeLDAP server configurationResponseThe switch outp

Chapter 2 CLI Command Summary 119Reference for the Contivity VPN Switch Command Line InterfaceRelated commandsldap-server internalserver backupserver

12 Contents311645-A Rev 00Next command mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73Warnings

120 Chapter 2 CLI Command Summary311645-A Rev 00show arpThis command displays the entries in the ARP table.Syntaxshow arpParametersNoneDefaultNoneComm

Chapter 2 CLI Command Summary 121Reference for the Contivity VPN Switch Command Line Interfaceshow exception backupThis command shows the current back

122 Chapter 2 CLI Command Summary311645-A Rev 00Next command modeGlobal configurationWarningsNo backup FTP servers definedRelated commandsexception ba

Chapter 2 CLI Command Summary 123Reference for the Contivity VPN Switch Command Line InterfaceExampleCES(config)#show exception backup Backup FTP Ser

124 Chapter 2 CLI Command Summary311645-A Rev 00show file systemsThis command shows the available file systems on the switch, including device size, a

Chapter 2 CLI Command Summary 125Reference for the Contivity VPN Switch Command Line Interfaceshow flash: contentsThis command shows the current setti

126 Chapter 2 CLI Command Summary311645-A Rev 00Command modeUser ExecNext command modeUser ExecRelated commandsshow version

Chapter 2 CLI Command Summary 127Reference for the Contivity VPN Switch Command Line InterfacexampleCES>show file: contentsFlash Header - copyright

128 Chapter 2 CLI Command Summary311645-A Rev 00system IP address: 10.211.4.42system IP netmask: 255.255.0.0system default gateway: 10.0.0.10checksum:

Chapter 2 CLI Command Summary 129Reference for the Contivity VPN Switch Command Line InterfaceDefaultIf a warning level is not given, then only alert

Contents 13Reference for the Contivity VPN Switch Command Line InterfaceNext command mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

130 Chapter 2 CLI Command Summary311645-A Rev 00show ip access-listThis command displays the contents of all current IP access lists. The CLI accepts

Chapter 2 CLI Command Summary 131Reference for the Contivity VPN Switch Command Line InterfaceNext command modeUser ExecExampleCES>show ip access-l

132 Chapter 2 CLI Command Summary311645-A Rev 00show ip ospfThis command displays general information about OSPF routing and the state of OSPF routing

Chapter 2 CLI Command Summary 133Reference for the Contivity VPN Switch Command Line InterfaceExampleCES>show ip ospfRouter id is 10.254.1.36Router

134 Chapter 2 CLI Command Summary311645-A Rev 00show ip ospf databaseThis command displays information related to the OSPF database for the switch. I

Chapter 2 CLI Command Summary 135Reference for the Contivity VPN Switch Command Line InterfaceExampleCES>show ip ospf databaseCES>show ip ospf d

136 Chapter 2 CLI Command Summary311645-A Rev 00show ip ospf interfaceThis command displays information about interfaces that are configured for OSPF

Chapter 2 CLI Command Summary 137Reference for the Contivity VPN Switch Command Line InterfaceRelated commandsshow ip ospfshow ip ospf databaseshow ip

138 Chapter 2 CLI Command Summary311645-A Rev 00show ip ospf neighborThis command displays information about OSPF neighbors on a per interface basis.S

Chapter 2 CLI Command Summary 139Reference for the Contivity VPN Switch Command Line InterfaceExampleCES>show ip ospf neighborOSPF Dynamic Neighbor

14 Contents311645-A Rev 00Related commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90Examples

140 Chapter 2 CLI Command Summary311645-A Rev 00show ip ripThis command displays general information about RIP routing and the state of RIP routing pr

Chapter 2 CLI Command Summary 141Reference for the Contivity VPN Switch Command Line InterfaceNext command modeUser ExecRelated commandsExampleCES>

142 Chapter 2 CLI Command Summary311645-A Rev 00show ip rip databaseThis command provides information related to the RIP database for the switch. It a

Chapter 2 CLI Command Summary 143Reference for the Contivity VPN Switch Command Line InterfaceNext command modeUser ExecRelated commandsshow ip ripsho

144 Chapter 2 CLI Command Summary311645-A Rev 00show ip rip interfaceThis command displays information about interfaces that are configured for RIP ro

Chapter 2 CLI Command Summary 145Reference for the Contivity VPN Switch Command Line InterfaceExampleCES>show ip rip interfaceThis example shows th

146 Chapter 2 CLI Command Summary311645-A Rev 00show ip routeThis command displays the current contents of the RTM routing table.Each line of the outp

Chapter 2 CLI Command Summary 147Reference for the Contivity VPN Switch Command Line InterfaceThe meaning of the authoring protocol codes shown for ea

148 Chapter 2 CLI Command Summary311645-A Rev 00ResponseSee the example for output from this command.Next command modeUser ExecRelated commandsclear i

Chapter 2 CLI Command Summary 149Reference for the Contivity VPN Switch Command Line Interfaceshow ip route-policiesThis command displays the contents

Contents 15Reference for the Contivity VPN Switch Command Line InterfaceSyntax . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

150 Chapter 2 CLI Command Summary311645-A Rev 00Next command modeUser ExecRelated commandsshow ip routeExampleCES>show ip route-policiesospf, 0, in

Chapter 2 CLI Command Summary 151Reference for the Contivity VPN Switch Command Line Interfaceshow ip trafficThis command displays statistics about IP

152 Chapter 2 CLI Command Summary311645-A Rev 00ExampleCES>show ip trafficIP statistics: total 282511 badsum 0

Chapter 2 CLI Command Summary 153Reference for the Contivity VPN Switch Command Line Interface 49825 total packets 49807 input packets

154 Chapter 2 CLI Command Summary311645-A Rev 00show ip vrrpThis command displays information about VRRP status. Syntaxshow ip vrrp [interface]Paramet

Chapter 2 CLI Command Summary 155Reference for the Contivity VPN Switch Command Line InterfaceExampleCES>show ip vrrp Slot Intf VRID Prio State A

156 Chapter 2 CLI Command Summary311645-A Rev 00show ldap-serverThis command displays the configuration settings and state for the internal and extern

Chapter 2 CLI Command Summary 157Reference for the Contivity VPN Switch Command Line InterfaceWarningsNo external LDAP servers configured.Related comm

158 Chapter 2 CLI Command Summary311645-A Rev 00show logging configThis command displays the contents of the configuration log. This log tracks all ch

Chapter 2 CLI Command Summary 159Reference for the Contivity VPN Switch Command Line InterfaceDefaultThe date value defaults to today. If the year por

16 Contents311645-A Rev 00Default . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1

160 Chapter 2 CLI Command Summary311645-A Rev 00ExampleCES#show logging config level urgent Config Log contents for Friday, July 30, 2000 *09:54:15

Chapter 2 CLI Command Summary 161Reference for the Contivity VPN Switch Command Line Interfaceshow logging eventsThis command displays the contents of

162 Chapter 2 CLI Command Summary311645-A Rev 00DefaultDropped IP and IPX packets are not tracked.Command modePrivileged ExecResponseSee the example f

Chapter 2 CLI Command Summary 163Reference for the Contivity VPN Switch Command Line InterfaceExampleCES#show logging events 09/02/1999 11:57:12 0 Pa

164 Chapter 2 CLI Command Summary311645-A Rev 00 09/02/1999 12:04:00 0 Security [13] Management: Forcing admin to re-supply userid 09/02/1999 12:04

Chapter 2 CLI Command Summary 165Reference for the Contivity VPN Switch Command Line Interface 09/02/1999 12:26:22 0 IPvfy.03739424{Prv} [00] Pkt(21-

166 Chapter 2 CLI Command Summary311645-A Rev 00Command modePrivileged ExecResponseSee the example for output from this command.Next command modePrivi

Chapter 2 CLI Command Summary 167Reference for the Contivity VPN Switch Command Line InterfaceParametersdate Specify the date for which the security l

168 Chapter 2 CLI Command Summary311645-A Rev 00ResponseSee the example below for output from this command.Next command modePrivileged ExecRelated com

Chapter 2 CLI Command Summary 169Reference for the Contivity VPN Switch Command Line InterfaceThis example shows the security log output for normal me

Contents 17Reference for the Contivity VPN Switch Command Line InterfaceDefault . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

170 Chapter 2 CLI Command Summary311645-A Rev 00urgent Display events that an administrator should be aware of immediately. In the output, these event

Chapter 2 CLI Command Summary 171Reference for the Contivity VPN Switch Command Line InterfaceRelated commandslogging historylogging facility syslogsh

172 Chapter 2 CLI Command Summary311645-A Rev 00CommentsThe amount of output from this command can be substantial. It is automatically paginated on di

Chapter 2 CLI Command Summary 173Reference for the Contivity VPN Switch Command Line InterfaceNext command modeUser ExecWarningsNo reload currently sc

174 Chapter 2 CLI Command Summary311645-A Rev 00Syntaxshow [branch-office] [ipsec] [pptp] [l2tp] [l2f] [admin] [all] sessions [detail]Parametersadmin

Chapter 2 CLI Command Summary 175Reference for the Contivity VPN Switch Command Line InterfaceResponseSee the example for output from this command.Nex

176 Chapter 2 CLI Command Summary311645-A Rev 00DefaultNoneCommand modeUser ExecNext command modeUser ExecRelated commandsshow flash: contentsExampleC

Chapter 2 CLI Command Summary 177Reference for the Contivity VPN Switch Command Line Interfacesnmp-server contactThis command sets, or clears, the Sys

178 Chapter 2 CLI Command Summary311645-A Rev 00WarningsContact string too long (must be 255 characters or less).Related commandssnmp-server location

Chapter 2 CLI Command Summary 179Reference for the Contivity VPN Switch Command Line Interfacesnmp-server locationThis command sets, or clears, the Sy

18 Contents311645-A Rev 00Response . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 129Ne

180 Chapter 2 CLI Command Summary311645-A Rev 00Related commandssnmp-server contact textsnmp-server name textExampleCS(config)#snmp-server location Bu

Chapter 2 CLI Command Summary 181Reference for the Contivity VPN Switch Command Line Interfacesnmp-server nameThis command sets, or clears, the SysNam

182 Chapter 2 CLI Command Summary311645-A Rev 00Next command modeGlobal configurationWarningsName string too long (must be 255 characters or less).Rel

Chapter 2 CLI Command Summary 183Reference for the Contivity VPN Switch Command Line Interfacesuffix removeThis command is used when configuring the L

184 Chapter 2 CLI Command Summary311645-A Rev 00ExampleCES(config)#ldap-server internalRouter(config-ldap)#no suffix removeRouter(config-ldap)#domain-

Chapter 2 CLI Command Summary 185Reference for the Contivity VPN Switch Command Line InterfacetraceThe trace command allows the administrator to deter

186 Chapter 2 CLI Command Summary311645-A Rev 00WarningsIf the system cannot map an address for a host name, it returns an "%Unknown Host" e

Chapter 2 CLI Command Summary 187Reference for the Contivity VPN Switch Command Line InterfacewhoThis command shows the active Telnet administration s

188 Chapter 2 CLI Command Summary311645-A Rev 00Illegal IP address.Related commandskillshow sessions

189Reference for the Contivity VPN Switch Command Line InterfaceChapter 3Bulk Load CommandThe bulk load command allows an administrator to send a list

Contents 19Reference for the Contivity VPN Switch Command Line InterfaceResponse . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

190 Chapter 3 Bulk Load Command311645-A Rev 00ComponentsThe bulk loading feature has two main components: the command file and the LOAD command. Load

Chapter 3 Bulk Load Command 191Reference for the Contivity VPN Switch Command Line InterfaceFile formatThe FILE_FORMAT command defines what versions o

192 Chapter 3 Bulk Load Command311645-A Rev 00User commandsUser commands allow an administrator to add or delete user records. They also allow an admi

Chapter 3 Bulk Load Command 193Reference for the Contivity VPN Switch Command Line InterfaceAdd UserADD_USER adds a user or user group. A user record

194 Chapter 3 Bulk Load Command311645-A Rev 00Delete UserThe DELETE_USER command is used to delete a specified user record from the database. You must

Chapter 3 Bulk Load Command 195Reference for the Contivity VPN Switch Command Line InterfaceCOMMAND: MODIFY_GROUPGROUP: [Group name - Required]// Conn

196 Chapter 3 Bulk Load Command311645-A Rev 00ESP_3MD5: [ESP - Triple DES with MD5 Integrity {Enable/Disable}]ESP_56SHA1: [ESP - 56-bit DES with SHA1

Chapter 3 Bulk Load Command 197Reference for the Contivity VPN Switch Command Line InterfaceREKEY_DATACNT: [Rekey datacount (in KB)]DOMAIN: [Domain na

198 Chapter 3 Bulk Load Command311645-A Rev 00Delete AllThe DELETE_ALL command deletes all users in the database.COMMAND: DELETE_ALLENDBranch office c

Chapter 3 Bulk Load Command 199Reference for the Contivity VPN Switch Command Line InterfaceAdd branch office connectionThe ADD_CONNECTION command def

2311645-A Rev 00Copyright © 2000 Nortel NetworksAll rights reserved. December 2000.The information in this document is subject to change without notic

20 Contents311645-A Rev 00Response . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 144Ne

200 Chapter 3 Bulk Load Command311645-A Rev 00MASK: [Remote Accessible Net Subnet mask - Required for Static Routing]REM_NET_COST: [Remote network cos

Chapter 3 Bulk Load Command 201Reference for the Contivity VPN Switch Command Line InterfaceLOCAL_UID: [Tunnel authentication - local user ID - (PPTP

202 Chapter 3 Bulk Load Command311645-A Rev 00Modify branch office connectionThe MODIFY_CONNECTION command is used to add a new remote accessible netw

Chapter 3 Bulk Load Command 203Reference for the Contivity VPN Switch Command Line InterfaceAdd branch office groupThe ADD_BRANCHGROUP command creates

204 Chapter 3 Bulk Load Command311645-A Rev 00NOTE: COMMAND: MODIFY_BRANCHGROUPGROUP: [Name of existing Branch Office group to modify -Required]//Conn

Chapter 3 Bulk Load Command 205Reference for the Contivity VPN Switch Command Line InterfacePFS: [Perfect forward security {Enable/Disable}]COMPRESSIO

206 Chapter 3 Bulk Load Command311645-A Rev 00OSPF_REXMIT_INT: [OSPF retransmit interval]OSPF_XMIT_DELAY: [OSPF transmission delay]OSPF_AUTH: [OSPF Au

Chapter 3 Bulk Load Command 207Reference for the Contivity VPN Switch Command Line InterfaceThe CREATE_NETWORK command is used to add a new network de

208 Chapter 3 Bulk Load Command311645-A Rev 00The CREATE_NAT command is used to create a new NAT set.COMMAND: CREATE_NATNAT_NAME: [Name of new NAT set

Chapter 3 Bulk Load Command 209Reference for the Contivity VPN Switch Command Line InterfaceThe MODIFY_NAT command is used to add a new rule to an exi

Contents 21Reference for the Contivity VPN Switch Command Line InterfaceResponse . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

210 Chapter 3 Bulk Load Command311645-A Rev 00The DELETE_POOL command is used to delete an existing address pool.COMMAND: DELETE_POOLIP_START: [Starti

Chapter 3 Bulk Load Command 211Reference for the Contivity VPN Switch Command Line InterfaceThe CREATE_FILTER command allows for the creation of a new

212 Chapter 3 Bulk Load Command311645-A Rev 00The ADD_RULE command allows an existing rule to be added to an existing filter. COMMAND: ADD_RULEFILT_NA

Chapter 3 Bulk Load Command 213Reference for the Contivity VPN Switch Command Line InterfaceThe CREATE_ADDRESS command creates a new address definitio

214 Chapter 3 Bulk Load Command311645-A Rev 00The ADD_FTPSERVER command is used to configure a new automatic backup server. COMMAND: ADD_FTPSERVERFTP_

Chapter 3 Bulk Load Command 215Reference for the Contivity VPN Switch Command Line InterfaceThe ADD_SYSLOG command is used to setup a system log forwa

216 Chapter 3 Bulk Load Command311645-A Rev 00SNMP_COMMUNITY: [SNMP Community name]SNMP_ENABLE: [Enable SNMP Host - Default:Enable]ENDThe DELETE_SNMPH

Chapter 3 Bulk Load Command 217Reference for the Contivity VPN Switch Command Line InterfaceThe CONFIG_TRAP command is used to configure which conditi

218 Chapter 3 Bulk Load Command311645-A Rev 00CACHE_SIZE: [DHCP cache size]IMMEDIATE_ADDR_REL: [Immediate address release {Enable/Disable}]ENDThe DELE

Chapter 3 Bulk Load Command 219Reference for the Contivity VPN Switch Command Line InterfacePAID_KEY: [Licensing key for the feature to be disabled]EN

22 Contents311645-A Rev 00Syntax . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

220 Chapter 3 Bulk Load Command311645-A Rev 00Group name syntaxFor many of the User and Branch Office commands, you must specify the name of the group

Index 221Reference for the Contivity VPN Switch Command Line InterfaceIndexAacronyms 30administrator privileges 33arp 41Cclear arp-cache 44clear ip ro

222 Index311645-A Rev 00server restore 113server start 116server stop 117show arp 120show exception backup 121show file systems 124show flashcontents

Contents 23Reference for the Contivity VPN Switch Command Line InterfaceWarnings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

24 Contents311645-A Rev 00Warnings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 179R

Contents 25Reference for the Contivity VPN Switch Command Line InterfaceWarnings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

26 Contents311645-A Rev 00Required fields for user and branch records . . . . . . . . . . . . . . . . . . . . . . . . . . . . 219Group name syntax .

27Reference for the Contivity VPN Switch Command Line InterfacePrefaceThis book is intended for Nortel NetworksTM ContivityTM VPN Switch managers and

28 Preface311645-A Rev 00Related publicationsThe following list shows the associated documentation that you will need to configure and manage the swit

Preface 29Reference for the Contivity VPN Switch Command Line Interfacebrackets ([ ]) Indicate optional elements in syntax descriptions. Do not type t

3Reference for the Contivity VPN Switch Command Line InterfaceFederal Communications Commission (FCC) Compliance Notice: Radio Frequency NoticeNote: T

30 Preface311645-A Rev 00AcronymsThis guide uses the following acronyms:AUI attachment unit interfaceBootP Bootstrap ProtocolBRI basic rate interfaceC

Preface 31Reference for the Contivity VPN Switch Command Line InterfaceHard-copy technical manualsYou can print selected technical manuals and release

32 Preface311645-A Rev 00Nortel Networks Customer ServiceIf you purchased a service contract for your Nortel Networks product from a distributor or au

33Reference for the Contivity VPN Switch Command Line InterfaceChapter 1IntroductionThis chapter provides an introduction to the Contivity VPN Switch

34 Chapter 1 Introduction311645-A Rev 00Access from the serial port menuYou can access the CLI through the Serial Port menu if you have a serial port

Chapter 1 Introduction 35Reference for the Contivity VPN Switch Command Line InterfaceUser Exec ModeThis is the initial command mode when the administ

36 Chapter 1 Introduction311645-A Rev 00show ip access-list Display IP access listsshow ip ospf Display IP OSPF routing detailsshow ip ospf database D

Chapter 1 Introduction 37Reference for the Contivity VPN Switch Command Line InterfacePrivileged Exec ModeThis command mode is entered from User Exec

38 Chapter 1 Introduction311645-A Rev 00Global Configuration ModeThis mode allows the administrator to make changes to the switch running configuratio

Chapter 1 Introduction 39Reference for the Contivity VPN Switch Command Line InterfaceKey bindingsYou can use the Nortel Networks CLI (NNCLI) commands

4311645-A Rev 00Règlement sur le brouillage radioélectrique du ministère des CommunicationsCet appareil numérique (Contivity Extranet Switch) respecte

40 Chapter 1 Introduction311645-A Rev 00control-D delete 1 character control-E end of line control-F forward 1 character control-H & delete cha

41Reference for the Contivity VPN Switch Command Line InterfaceChapter 2CLI Command SummaryThis chapter provides a summary of all CLI commands. The Co

42 Chapter 2 CLI Command Summary311645-A Rev 00Next command modeGlobal ConfigurationRelated commandsshow arpclear arp-cache

Chapter 2 CLI Command Summary 43Reference for the Contivity VPN Switch Command Line Interfaceaudible alarmThis command enables and disables the audibl

44 Chapter 2 CLI Command Summary311645-A Rev 00clear arp-cacheThis command deletes all dynamic entries from the ARP cache, to clear the fast-switching

Chapter 2 CLI Command Summary 45Reference for the Contivity VPN Switch Command Line Interfaceclear ip routeThis command removes a route from the route

46 Chapter 2 CLI Command Summary311645-A Rev 00Related commandsshow ip routeExampleCES>clear ip route 10.11.0.12

Chapter 2 CLI Command Summary 47Reference for the Contivity VPN Switch Command Line Interfaceclear logging eventsThis command is used to clear the con

48 Chapter 2 CLI Command Summary311645-A Rev 00configureThis command puts the CLI into global configuration mode. This allows the administrator to acc

Chapter 2 CLI Command Summary 49Reference for the Contivity VPN Switch Command Line Interfaceconsole modeThis is a mini-CLI command that allows emulat

5Reference for the Contivity VPN Switch Command Line Interfacethat cannot be reproduced with the latest Software release. These warranties do not appl

50 Chapter 2 CLI Command Summary311645-A Rev 00Parametersrestricted1 The system reset and reload commands to change the IP interface address and mask

Chapter 2 CLI Command Summary 51Reference for the Contivity VPN Switch Command Line InterfaceCES(config)#console mode restricted1CONSOLE MODE has been

52 Chapter 2 CLI Command Summary311645-A Rev 00controlThis command allows emulation of CLI commands available in earlier versions of the switch softwa

Chapter 2 CLI Command Summary 53Reference for the Contivity VPN Switch Command Line InterfaceExamplesCES(config)#control Help deleteCES(config)#contro

54 Chapter 2 CLI Command Summary311645-A Rev 00disableThis command makes the CLI parser exit from Privileged Exec mode and return to user Exec mode.Sy

Chapter 2 CLI Command Summary 55Reference for the Contivity VPN Switch Command Line InterfaceRelated commandsconfigureenableendExampleCES#disableCES&g

56 Chapter 2 CLI Command Summary311645-A Rev 00enableThis command puts the CLI parser into Privileged Exec mode, allowing the administrator to use add

Chapter 2 CLI Command Summary 57Reference for the Contivity VPN Switch Command Line InterfaceRelated commandsconfiguredisableenable passwordExampleCES

58 Chapter 2 CLI Command Summary311645-A Rev 00enable passwordThis command allows the user to change the password used by the enable command to get in

Chapter 2 CLI Command Summary 59Reference for the Contivity VPN Switch Command Line InterfaceRelated commandsconfiguredisableenableExamplesCES(config)

6311645-A Rev 00LICENSEE ACKNOWLEDGES THAT LICENSEE HAS READ THIS AGREEMENT, UNDERSTANDS IT, AND AGREES TO BE BOUND BY ITS TERMS AND CONDITIONS. LICEN

60 Chapter 2 CLI Command Summary311645-A Rev 00exception backupThis command allows the administrator to define backup FTP servers for the Contivity VP

Chapter 2 CLI Command Summary 61Reference for the Contivity VPN Switch Command Line InterfaceCommand modeGlobal configurationNext command modeGlobal c

62 Chapter 2 CLI Command Summary311645-A Rev 00exitThis command allows the administrator to exit any configuration mode or to close an active Telnet s

Chapter 2 CLI Command Summary 63Reference for the Contivity VPN Switch Command Line InterfaceRelated commandsendExampleCES(config)#exitCES#exitCES>

64 Chapter 2 CLI Command Summary311645-A Rev 00helpThis command displays a message about how to use the Help system.SyntaxhelpParametersNoneCommand mo

Chapter 2 CLI Command Summary 65Reference for the Contivity VPN Switch Command Line Interfacehost addressThis command establishes the IP address, port

66 Chapter 2 CLI Command Summary311645-A Rev 00bind_dn_value The bind distinguished name (DN) used to connect to the LDAP server. This is the equivale

Chapter 2 CLI Command Summary 67Reference for the Contivity VPN Switch Command Line InterfacehostnameThis command allows the administrator to specify

68 Chapter 2 CLI Command Summary311645-A Rev 00Related commandsno hostnameip domain-nameip name-serverinterface managementExampleCES(config)#hostname

Chapter 2 CLI Command Summary 69Reference for the Contivity VPN Switch Command Line Interfaceinterface managementThis command is used to specify the I

Contents 7Reference for the Contivity VPN Switch Command Line InterfaceContentsPreface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

70 Chapter 2 CLI Command Summary311645-A Rev 00Related commandsip http serverExampleCES(config)#interface managementRouter(config-if)#ip address 10.0.

Chapter 2 CLI Command Summary 71Reference for the Contivity VPN Switch Command Line Interfaceip http serverThis command allows the administrator to en

72 Chapter 2 CLI Command Summary311645-A Rev 00Related commandsinterface loopbackExampleCES(config)#no ip http serverThis command disables management

Chapter 2 CLI Command Summary 73Reference for the Contivity VPN Switch Command Line InterfacekillThis command terminates an identified Telnet session.

74 Chapter 2 CLI Command Summary311645-A Rev 00Related commandswhoshow sessionsExampleCES# who121: From 116.102.4.45213: From 116.102.12.23217: From 1

Chapter 2 CLI Command Summary 75Reference for the Contivity VPN Switch Command Line InterfaceldapThis is a mini-CLI command to allow emulation of CLI

76 Chapter 2 CLI Command Summary311645-A Rev 00stop Stop the LDAP server running. This command cannot be Executed unless the LDAP server is actually r

Chapter 2 CLI Command Summary 77Reference for the Contivity VPN Switch Command Line Interfaceldap-serverThis command is used to configure the settings

78 Chapter 2 CLI Command Summary311645-A Rev 00Related commandsldap-server sourceshow ldap-serverExampleCES(config)#ldap-server source internalCES(con

Chapter 2 CLI Command Summary 79Reference for the Contivity VPN Switch Command Line Interfaceldap-server sourceThis command sets the source of the LDA

8 Contents311645-A Rev 00Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43De

80 Chapter 2 CLI Command Summary311645-A Rev 00WarningsExternal LDAP server not configured.Cannot reach external LDAP server.Related commandsldap-serv

Chapter 2 CLI Command Summary 81Reference for the Contivity VPN Switch Command Line InterfaceloadThis is a mini-CLI command to allow emulation of CLI

82 Chapter 2 CLI Command Summary311645-A Rev 00PrerequisitesThe LDAP server must be running.Related commandsldapExampleCES(config)#load /ide0/system/t

Chapter 2 CLI Command Summary 83Reference for the Contivity VPN Switch Command Line Interfacelogging historyThis command determines what types of mess

84 Chapter 2 CLI Command Summary311645-A Rev 00Command modeGlobal configurationNext command modeGlobal configurationWarningsDoes not agree with syslog

Chapter 2 CLI Command Summary 85Reference for the Contivity VPN Switch Command Line InterfacelogoutThis is a mini-CLI command to allow emulation of CL

86 Chapter 2 CLI Command Summary311645-A Rev 00moreThis command displays a readable file on the switch. The file is displayed on Telnet screen at a ti

Chapter 2 CLI Command Summary 87Reference for the Contivity VPN Switch Command Line InterfacePrintable characters are characters whose character codes

88 Chapter 2 CLI Command Summary311645-A Rev 00ExampleCES#more disk0:system/config/CFG01022.DAT+AccessLst[abc]AccessLst[abc].Name=abc+AccessLst[abc].R

Chapter 2 CLI Command Summary 89Reference for the Contivity VPN Switch Command Line InterfacepingThe ping (packet internet groper function) command pr

Contents 9Reference for the Contivity VPN Switch Command Line InterfaceNext command mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

90 Chapter 2 CLI Command Summary311645-A Rev 00WarningsIf the system cannot map an address for a host name, it returns a "%Unknown Host" err

Chapter 2 CLI Command Summary 91Reference for the Contivity VPN Switch Command Line InterfacereloadThis command forces the switch to reboot immediatel

92 Chapter 2 CLI Command Summary311645-A Rev 00latest The switch should be rebooted with the latest configuration file.factory The switch should be re

Chapter 2 CLI Command Summary 93Reference for the Contivity VPN Switch Command Line InterfaceNext command modePrivileged ExecPrerequisitesA named conf

94 Chapter 2 CLI Command Summary311645-A Rev 00ExampleCES#reload restart boot-drive ide0 config-file factory disable-after-restart Upgrade software Re

Chapter 2 CLI Command Summary 95Reference for the Contivity VPN Switch Command Line Interfacereload atThis command sets a time in the future at which

96 Chapter 2 CLI Command Summary311645-A Rev 00factory The switch should be rebooted with the reset configuration file. This file sets the switch to b

Chapter 2 CLI Command Summary 97Reference for the Contivity VPN Switch Command Line InterfacePrerequisitesA named configuration file can only be used

98 Chapter 2 CLI Command Summary311645-A Rev 00ExampleCES#reload at 22:00 restart boot-drive ide0 disable-after-restart Backup LDAP database Reload Sc

Chapter 2 CLI Command Summary 99Reference for the Contivity VPN Switch Command Line Interfacereload cancelThis command cancels any pending reload comm