This document describes the configuration process and includes the following sections:
What is CONFIG?
Using Quick Config
Using Config-only
Configuring User Access
Using CONFIG
CONFIG Commands
What is CONFIG?
The Configuration process (CONFIG) lets you configure router parameters for
Figure 1 CONFIG in the Router Software Structure
The CONFIG process (Config> prompt) is made up of lower-level processes. Each lower-level process has its own prompt.
If you want to know where you are, press enter to display the prompt. Some commands, event, network, and protocol, allow you to access the various lower-level processes in CONFIG.
Using Quick Config
Quick Configuration (Quick Config) is part of the Command Line Interface and is a question and answer script that allows you to configure basic information without having to enter and exit the different configuration processes.
Whatever parameters or options you cannot configure with Quick Config you can configure using the Command Line Interface's configuration processes after exiting Quick Config.
You cannot delete Quick Config information from within Quick Config; but you can correct it by exiting and returning to Quick Config or by typing r for restart as a response to a Quick Config question.
Entering the Quick Config Mode
If you are configuring your router for the first time and you are using the Command Line Interface, the router enters Quick Config automatically the first time you boot it.
To run Quick Config after you have initially configured your router, follow these steps:
* prompt, enter config to display the Config> prompt.
* config
Config>
Config> prompt to begin Quick Config.
Config (only)> prompt or the Config> prompt.
Using Config-only
Configuration only (Config-only) mode is provided only for getting a subset of configuration commands when a configuration problem causes the router to crash during startup or to display panic, check, fatal, or bughlt (bughalt) messages. Do not use Config-only for general router configuration. Not all commands execute exactly as they do in CONFIG mode.
Note:
This mode is a feature of larger Nx Networks routers. If you enter this mode, enter restart yes at the Config only> prompt to resume normal router operation.
For more information, see add user.
Technical Support Access
When you add a new user for the first time, the router asks if you want to add technical support access. Technical support access has the same privileges as administrator access. It permits a customer service representative to operate at the Administration level.
The software automatically sets the password for technical support access and customer service knows the password. You can change this password using the change user command. If you do this, customer service is not able to help you remotely. For more information, see the Change command.
Using CONFIG
The following sections provide information on entering and exiting CONFIG and using the system-level configuration commands.
Entering and Exiting CONFIG
To enter CONFIG from the * prompt, enter config.
The* config
Config>
Config> prompt appears. If the prompt does not appear, press Enter again. You can now enter CONFIG commands.
To exit CONFIG and return to the * prompt, enter the intercept character (the default is Ctrl P).
Restarting the Router
Some changes to the router's parameters made while in OPCON take effect immediately without requiring re-initializing of the router. If the changes do not take effect, restart the router by entering restart at the * prompt.
* restart
Are you sure you want to restart the router? (Yes or No): yes
| Command | Function |
|---|---|
| Add | Adds a device, an interface, a stack, or a user to the router configuration. |
| Authentication |
Enters a sub-menu process (Auth Config>) for configuring authentication parameters. |
| Boot |
Enters a sub-menu process (Boot Config>) for configuring Boot parameters. |
| Change | Changes the current router configuration for a device, an interface, a password, a stack, or a user. |
| Clear | Clears configuration information. |
| Delete | Deletes a device, an interface, a stack, a user, or utilization information from the router configuration. |
| Disable | Disables a device, an interface, or other system options. |
| Enable | Enables a device, an interface, or other system options. |
| Event |
Enters the Event Logging System configuration process ( ELS config>). |
| Feature | Provides access to configuration commands for independent router features outside the usual protocol and network interface configuration processes. |
| HTTP | Enters the HTTP configuration process. |
| List | Displays the router's system parameters, devices, interfaces, services, stacks, users, or utilization information. |
| Network |
Enters a sub-menu process (such as, ETH config>) for configuring the parameters of a particular interface. |
| Patch | Modifies the router's global configuration. |
| Protocol | Enters the command environment of the specified protocol. |
| Qconfig | Initiates the Quick Config process. |
| Set | Sets system-wide parameters for buffers, hostname, inactivity timer, logging disposition and level, packet size, restart count, utilization, the router's location, and a contact-person. |
| Time | Sets up system time and displays it. |
| Unpatch | Restores variables of the patches to default values. |
| Update | Updates the configuration. |
| Voice | Enters the voice configuration process. |
Add
Adds a device, an interface, a stack, and user access to the router.
Note: This command is not available on all router platforms. It is only available on those routers that have expansion slots, such as the GlobeTrotter Access Manager (GTAM).
Syntax: add device device type slot number device name Example:add device quad-serial
Device Slot # (0-4) [2]? 1
Device Name [SL1-2]?
Adding device SL1-2 as interface 7
Defaulting Data-link protocol to PPP
The router must be restarted before the new device can be used.
Since OpenROUTE automatically installs an interface for each physical device, the only type of interface that you can add is one that provides a dial or virtual circuit.
Enter list interfaces to see a list of interfaces on the router.
Adding interface 4 linked to base device WAN.
Syntax: add stack stack name stack service-list
Example:add stack
Stack Name? invmux
Stack Service-List? int1:ppp:(sl:wan1)&(sl:wan2)
user
Adds a user access to the router. To add a user, you
must have administrative permission. When you add the first user, the router automatically
enables console login. When you first configure
user access, you must restart the router.
If you have the GTSecure Login utility, you can set up a user account so that the router requires a challenge handshake before a user can access the router operating system. The challenge handshake uses a secret based on the RSA Data Security, Inc. MD5 Message-Digest Algorithm. The secret is never sent over the LAN or WAN.
You can add up to 50 users. Assign each user one of the permission levels in the following table.
| Level of Access | Access Functionality |
| Administrator (A) | Can access any router function. Displays configuration and user information, adds/modifies/deletes configuration and user information. |
| Operator (O) | Cannot modify the permanent router configuration. Views router configuration and statistics, runs potentially disruptive tests, dynamically changes router operation, and restarts the router. All operator actions are undone with a system restart. |
| Monitor (M) | Cannot modify or disrupt the operation of the router. Views router configuration and statistics. |
| Tech Support | Allows a Technical Support engineer to gain access to the router if a user forgets a password. Cannot be assigned to users. |
Enter user name: ? irene
Enter authentication type: (N)one, (P)assword, (C)hallenge, or (Q)uit [P]? p
Enter password:
Enter password again:
Enter permission: (A)dmin, (O)perations, (M)onitor, or (Q)uit [A]? a
User 'irene' has been added
Do you want to add Technical Support access? (Y)es, (N)o, or (Q)uit [Y]? y
Enter authentication type: (N)one, (P)assword, (C)hallenge, or (Q)uit [P]? n
Technical Support access has been added
|
Enter user name
| The name that identifies the user. Each user name is eight characters and is case-sensitive. You may enter more than eight characters but the router only retains eight. |
|
Enter authentication type
|
The type of authentication for the user: N (None), P (Password), or C (Challenge). Note: You can respond to the authentication type of Challenge only if you have the GTSecure Login utility. If you add only one user with an authentication type of Challenge, you cannot access the router configuration unless you have the GTSecure Login utility. |
|
Password
| If the authentication type is Password, prompts for the user's password. The password is limited to 80 characters and is case-sensitive. |
|
Enter password again
| If the authentication type is Password, confirms the password for the user. |
|
Enter MD5 secret
| If the authentication type is Challenge, prompts for the MD5 secret for the user. |
|
Enter MD5 secret again
| If the authentication type is Challenge, confirms the MD5 secret. |
|
Enter permission
|
Specifies the access permission for the user: A, O, or M. (See Table 2.) |
|
Do you want to add Technical Support access?
|
See Table 2. |
Authentication
Displays the Auth Config> prompt, where you can configure authentication parameters in the Remote Authentication Dial-In User Service (RADIUS) environment.
RADIUS is a security system that uses a client-server approach to authenticate remote users. RADIUS authenticates users through a series of challenges and responses that the client relays between the server and the user.
See the GTSecure RADIUS Authentication Guide available on the Nx Networks Web Site at www.nxnetworks.com for information about RADIUS.
Example:authentication
Auth Config>
Commands to permanently configure authentication parameters.
All operations are saved, but do not take effect until a
reboot or entry of the 'revert' command in GwCon.
The choices/prefixes are (a complete list):
add -- Add a RADIUS server.
delete (disabled) -- Delete a RADIUS server.
set (disabled) -- Set authentication parameters.
enable (disabled) -- Enable router authentication features.
disable (disabled) -- Disable router authentication features.
list -- List authentication parameters.
exit -- Exit authentication configuration.
Boot Config>)
command menu. For Boot CONFIG information, see What
is Boot CONFIG?.
Example: boot
TFTP Boot/dump configuration
Boot config>
Note: This command is not available on all router platforms.
Syntax: change device device type old name new slot numberchange device token-ring
Device Name? Servers
Device Slot # (0-4) [2]? 3New Device Name [Servers]? Clients
Changing device Servers to Clients
Interface number [0]? 4
Restart the router, and then use the "network 4"
command to configure interface parameters.
change interface null
Interface number [0]? 3
Enter current password:
Enter new password:
Enter new password again:
stack
Changes a protocol stack definition. See the Using Protocol Stacks document.
Syntax: change stack stack name stack service-list
Example:change stack
Stack Name? invmux
Stack Service List? [int1:ppp:(sl:wan1)&(sl:wan2)]?int1:ppp:(sl:wan3)&(sl:wan4)
You can use the change stack command to modify the configuration of a stack that you created manually or the router created automatically. OpenROUTE software first searches memory for the stack specified by you and modifies any definition found there. If OpenROUTE does not find a user-defined definition for this stack in memory, then it searches the list of stacks that the router created automatically. If it finds a match, you can modify that stack definition, and OpenROUTEs writes that modified stack definition to memory as a user-defined stack. This allows you to modify a stack that the router created and save it as if you created it originally.
user
Modifies any user information configured with add user. To change a user, you must have administrative permission.
Enter user name: []? rjones
Change password? (Yes or [No]): yes
Password:
Enter password again:
Change permission? (Yes or [No]): yes
Enter permission: (A)dmin, (O)perations, or (M)onitor [A]? a
To clear a protocol from memory, enter clear and the protocol name. To clear all information, except device information, enter clear all. To clear all information including the device information, use the clear all and then clear device commands.
The clear netbios command clears the NETBIOS cache and filtering configuration that is accessible under bridging.
The clear user command clears all user information except the router console login information. This is left as enabled (if configured as such) even though the default is disabled. To clear user information, you need administrative permission.
The clear utilization command deletes all utilization information for all interfaces.
CAUTION:
Use this command only after calling your
Customer Service representative.
clear all
You are about to clear all non Device configuration information
Are you sure you want to do this (Yes or [No]):
clear stack
You are about to clear all Stack configuration information
Are you sure you want to do this (Yes or [No]):
Note: This command is not available on all router platforms.
Syntax: delete device device name Example:delete device
Device Name? clients
Are you sure you want to delete this interface?(Y / N)
Syntax: delete stack stack name
Example:delete stack
Stack Name? invmux
user user_name
Removes the specified user.
Enter user name: []? mary
Delete 'mary'? (Yes or [No]): y
User 'mary' has been deleted
Interface Number [0]?
Example: disable command-completion
console-login
Prevents prompts for user name and password. The default is disable. By disabling the console login, you prevent a lock out situation.
Example: disable console-login
device
Disables a selected physical device. A disabled physical device does not pass packets for any of its client interfaces. For example, if interfaces 1 and 2 share device 1, when device 1 is disabled, interfaces 1 and 2 are both inactive.
Note: Unlike WAN interfaces, there is a fixed one-to-one mapping between LAN devices and interfaces such as the Ethernet. Disable interface and disable device are synonymous on LAN devices.
Example:disable device
Device Name? TKR1-0
Device name? wan2-0
Interface number [1]? 1
Example: disable lan-emulation
Interface Number [0]? 4
If you disable local access, you can still configure and monitor the router remotely by running Telnet or QuickWeb to one of the router's interfaces.
Example:disable local-console
This will disable local access via the console on a restart.
Access to the router will only be via telnet.
Do you really want to do this? (Yes, No): yes
Example: disable modem-control
ppp-over-frvc
Disables the feature that lets you send PPP data over a Frame Relay Virtual Circuit (FRVC).
Note: If you disable PPP over FRVC on this router, make sure it is also disabled on the router at the other end of the FRVC.
Example:disable ppp-over-frvc
Interface Number [0]? 2
Example: enable command-completion
console-login
Enables prompts for login of user name and password. This is useful for security situations. There must be at least one administrative user defined on the system for this command to work.
device
Enables a device.
Note: After a restart, each interface that shares the device can forward packets unless the interface itself is disabled.
Syntax: enable device device name Example:enable device
Device Name? TKR1-0
Syntax: enable dial device name
Example:enable dial
Device name? wan2-0
Interface number [0]? 2
lan-emulation
Enables Frame Relay LAN emulation on the selected device.
Syntax: enable lan-emulation interface #
Example:enable lan-emulation
Interface Number [0]? 4
Set your modem for auto-answer.
Verify that the terminal's baud rate is equal to the modem baud rate.
Verify that the cable connecting the modem to the router is configured correctly.
Turn echo off by using the ATE0 command.
Run in quiet mode by using the ATQ1 command.
enable modem-controlThe router automatically hangs up the modem when you log out. Also, if your modem becomes disconnected from the router while you are using it, the router logs you out.
ppp-over-frvc
Allows you to run PPP over a Frame Relay Virtual Circuit (FRVC). By also turning on PPP data compression, you can compress data that the router sends over Frame Relay.
Note: If you enable PPP over FRVC on this router, make sure it is also enabled on the router at the other end of the FRVC.
Example:enable ppp-over-frvc
Interface Number [0]? 2
Config> prompt,
enter exit.
Example: event
Event Logging System user configuration
ELS config>
Config>feature
The choices/prefixes are (a complete list):
WRR
MCF
|
Feature Number |
Feature Name |
Accesses the Feature |
| 0 | WRR | Using WAN Reroute |
| 2 | MCF | Using MAC Filtering |
Syntax: feature feature# or feature-name
Example:feature wrr
WAN Reroute user configuration
WRR Config>
To return to the Config> prompt, enter exit at the feature's prompt.
HTTP
Takes you to the HTTP configuration prompt.
http
Http Config>
Config> prompt, enter exit at the Http Config> prompt.
List
Displays configuration information for all network interfaces or for the router.
Hostname: westbranch
Hostname as part of prompt: enabled
Maximum packet size: [autoconfigured]
Maximum number of global buffers: [autoconfigured]
Number of Restarts before a Reload/Dump: 64
Logging disposition: detached
Console baudrate: 9600
Console inactivity timer (minutes): 0
Physical console login: disabled
Command completion: enabled
Modem Control: Disabled
Remote and Local Console Allowed
Contact person for this node: [none]
Location of this node:
Configurable Protocols:
Num Name Protocol
0 IP DOD-IP
3 ARP Address Resolution
9 DVM Distance Vector Multicast Routing Protocol
10 BGP Border Gateway ProtocolV
11 SNMP Simple Network Management Protocol
12 OSPF Open SPF-Based Routing Protocol
27 XTP X.25 Transport ProtocolV
Configurable Features:
Num Name Feature
0 WRR WAN ReRouteV
35260 bytes of configuration memory free
ETH0-0 slot 0 port 0 Ethernet/802.3
TKR1-0 slot 1 port 0 ProNET-4
TKR1-1 slot 1 port 1 ProNET-4
WAN2-0 slot 2 port 0 Quad Serial Line
WAN2-1 slot 2 port 1 Quad Serial Line
WAN2-2 slot 2 port 2 Quad Serial Line
WAN2-3 slot 2 port 3 Quad Serial Line
Ifc 0, Ethernet/IEEE 802.3 (via device ETH0-0)
Ifc 1, Token-Ring/802.5 (via device TKR1-0)
Ifc 2, Token-Ring/802.5 (via device TKR1-1)
Ifc 3, Point to Point (via device WAN2-0, with Dialer)
Ifc 4, Frame Relay (via device WAN2-1)
Ifc 5, Point to Point (via device WAN2-3)
patches
Displays the patches and their variables added with the patch command.
Patched variable Value
ping-size 60
ping-ttl 59
ip-default-ttl 60
ethernet-security 3
rip-static-suppress 3
Service Description
------- -----------
DIAL Dial Serial Interface
FRLANE Frame Relay LAN Emulation
FRMGR Frame Relay Manager
FRVC Frame Relay Virtual Circuit
HSSI High-Speed Serial Interface
INT3 Interface 3
INT4 Interface 4
INT5 Interface 5
INT6 Interface 6
PPP Point-to-Point Protocol
SL Serial Line
Stack Creator State ID Service List
----- ------- ----- -- ------------
BASE-3 Router Open 3 SL:SL2-0
FRAME-3 Router Closed 3 FRMGR:BASE-3
invmux User Closed 128 int1:ppp:(sl:wan1)&(sl:wan2)
NET-3 Router Closed 3 INT3:FRVC:FRAME-3
NET-4 Router Open 4 INT4:PPP:BASE-3
USER PERMISSION
joe operations
mary administrative
peter monitor
Transmit Receive
Interface Interval Utilization % Utilization % Traps
--------- -------- ------------- ------------- -----
0 60 100 100 1
To get the interface number, at the Config> prompt, enter list interfaces.
network
What is the network number [0]?
Ethernet interface configuration
ETH config>
That network is not configurable.
The patches documented and supported for your current release.
patch
Variable to patch []? ping-size
New value [0]?
ethernet-security new value
When set to a nonzero value, zeros the padding that is applied to Ethernet packets whose data portion is less than the physical minimum of 60 bytes. This may be required for security reasons. Default: 0.
Example: patch ethernet-security
New value [0]? 30
IP config> enable send static command for the interface. This changes the semantics of the enable send static command. When rip-static-suppress is equal to 0 (the default), the list of the routes that RIP advertises is the union of those that the interface's RIP flags specify.
Example: patch rip-static-suppress
New value [0]?
IP>ping command. Default is 56 bytes.
New value [0]?
IP>ping command. Default is 60.
New value [0]?
New value [0]?
New value [0]?
New value [0]?
New value [0]?
From the prompt, you can enter commands for the specified protocol.
|
Protocol Number |
Protocol Name | Accesses the Following Protocol Prompt |
| 0 | IP |
IP Config> for IP (Internet Protocol) configuration |
| 3 | ARP |
ARP Config> for ARP (Address Resolution Protocol) configuration |
| 7 | IPX |
IPX Config> IPX (Novell NetWare Internetwork Packet Exchange) configuration |
| 9 | DVMRP |
DVMRP Config> for DVMRP (Distance Vector Multicast Routing Protocol) configuration |
| 10 | BGP |
BGP Config> for BGP (Border Gateway Protocol) configuration |
| 11 | SNMP |
SNMP Config> for SNMP (Simple Network Management Protocol) configuration |
| 12 | OSPF |
OSPF Config> for OSPF (Open Shortest Path First) configuration |
| 22 | AP2 |
AP2 config> for AppleTalk Phase 2 configuration |
| 23 | BRIDGE |
Bridge Config> for Transparent Bridge configuration |
| 24 | HST |
TCP/IP Host config> for TCP/IP Host Services configuration |
| 27 | XTP |
XTP config> for X.25 Transport Protocol configuration |
To go to a protocol configuration prompt,
IP
ARP
SNMP
Protocol name or number [IP]?
Protocol name or number [IP]? ip
Internet protocol user configuration
IP config>
Config> prompt, enter exit Syntax: protocol protocol# or protocol name Example:IP Config>exit
Config>
protocol snmp
SNMP user configuration
SNMP config>
qconfig
Set
Configures various system-wide parameters.
Console baudrate (0 = Autobaud) [0]?
Contact person for this node [Jane Marshall]? Paul Jones
Interface Number [0]? 2
Note: If you use set down-notify on one end of a serial link, use it at the other end of the link too, or the link may not come up and stay up.
The list interfaces command shows any changed value for the down notification time, if it has been changed from the default.
Interface number [0]? 4
Down notification time (1 to 300, 0 to restore default ) [0]? 3
global-buffers max#
Sets the maximum number of global packet buffers, which are the packet buffers used for packets originating locally. The default is to autoconfigure for the maximum number of buffers (up to 1000). To restore the default, set the value to 0.
What is the maximum number of global packet buffers [0]? 30
hostname
Sets the local router's name. The local router uses this name when it is authenticated by a remote router. It also uses the name to find the local ISDN telephone number that the telephone company assigns.
You have the option of setting up your router to display the router's hostname as part of the CLI prompts. To do so, enter the set hostname command and answer yes when prompted on whether you want the hostname as part of the prompt. The name you assigned appears in front of all router prompts.
What is the new host name [ ]? Westbranch
Do you want hostname as part of the prompt?(Yes or [No]):[no]? yes
Westbranch Config>
Console inactivity timer in minutes [0]? 3
The memory allocation strategy changes to conserve buffers when the number of free buffers is equal to or less than the low or low-water-mark value. When a packet is received, and the current value of the interface is less than the low water value, then that packet is eligible for flow control (dropping).
The range of values and the default is both platform- and device-specific. Setting the value to 0 restores the auto-configured default
Lowering the value makes it less likely that packets from this interface are dropped when sent on congested networks. It can affect performance negatively, if it drops packets to the extent that the receive queue is frequently empty. Raising the value has the opposite effect.
To show the low setting, enter queue or buffer at the Monitor> prompt.
Interface Number [0]?
Receive low water (1-50, 0 to restore default) [0]?
|
Interface Number
| The number of the interface you are configuring. |
|
Receive low water
| The low water value. |
location sysLocation
The physical location of an SNMP node. There is a limit of 80 characters for the sysLocation name length. Location is for information only and does not affect or change router operation. It is useful for SNMP management identification of the system.
Location of this node [Test Lab]? atlantis
The logging disposition settings do the following:
If you have a printing terminal attached to the router's console port, you can get a hard copy of the startup messages by setting the logging disposition to console and restarting the router.
Example: set logging disposition console
logging level #
Controls the output of messages not yet converted to the ELS. Takes effect when you restart the router. The default logging level is 76. Set logging level to 0 for no logging level.
packet-size max packet size in bytes
The maximum size of a packet.
CAUTION:
Use this command only under direct instructions from your Customer Service representative. Use it only to increase packet size.
What is the maximum packet size (in bytes) [0]?
Use set receive-buffers to increase the receive performance of an interface and to reduce flow control drops when the router is forwarding many packets from a fast interface to a slow interface. To see the maximum numbers, enter list buffer at the Monitor> prompt.
*monitor
Monitor>list buffer
CAUTION:
Use this command only under direct instructions from your Customer Service representative.
Interface number [0]?
Receive buffers (5-255, 0 to restore default) [0]? 20
How many times should the gateway restart before reloading [64]?
Interface Number [0]?
Measurement interval [60]?
Percentage of transmit utilization [100]?
Percentage of receive utilization [100]?
Number of traps [1]?
Time
Sets the router system clock and date and displays them. You can use the clock and date to timestamp ELS messages.
Example: time host 131.210.4.1
list
Displays the current time (if set) and the source of the time "operator" or IP address which last sent the time.
05:20:27 Wednesday April 7, 1997
Set by: operator
Time Host: 131.210.4.1 Sync Interval: 10 seconds
GMT Offset: -300 minutes
minutes from GMT (-720 to 720) [0]? -300
year [1995]? 1996
month [12]?
date [6]? 7
hour [11]? 12
minute [3]?
second [2]?
seconds between time syncs [0]? 300
Note: You must specify the complete name of the patch that you want to change. You cannot use an abbreviated syntax for the patch name.
Syntax: unpatch variable name Example:unpatch ethernet-security
Update
Updates the configuration memory when you receive a new software load. Follow the instructions on the release notice sent with the software. Update is the last command that you type when loading new software. The screen displays a message indicating configuration memory is being updated.
Syntax: update version-of-SRAM
Example:update version-of-SRAM
to Netrix Corp. GTX-SECA 5.2.0
voice
VOICE Config>
Config> prompt, enter exit at the VOICE Config> prompt.