Alcatel-Lucent OmniAccess 700 Cli Configuration Manual

Beta

1

2

Notes on numbered items on banner & legal pages

1

Man26801 West Agoura Road

Calabasas, CA 91301

(818) 880-3500

FAX (818) 880-3505

[email protected]

US Customer Support—(800) 995-2696

International Customer Support—(818) 878-4507

Internet—service.esd.alcatel-lucent.com

Website: www.alcatel-lucent.com

Part No: 060223-00, Rev B

For final production, import color definitions from

\\daldoc01\docteam\templates\framemaker\book-template\color-defs\ production-colors.fm.

OmniAccess 700

CLI Configuration Guide

Release Versions:

2.2

2.2-R02

2.3

Copyright

The Specifications And Information regarding the products in this manual are subject to change without

notice. All statements, information, and recommendations in this manual are believed to be accurate

but are presented without warranty of any kind, express or implied. Users must take full responsibility

for their application of any products.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET

FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED

HEREIN BY THIS REFERENCE.

This equipment has been tested and found to comply within the limits pursuant to the (Centre for

Telecom) rules. These limits are designed to provide protection against harmful interference when the

equipment is operated in a commercial environment.

The following information is for the Users of the OmniAccess 700: If it is not installed in accordance with

the installation instructions, it may not function exactly to the said specifications. Modifying the

equipment without Alcatel-Lucent’s written authorization may result in the equipment no longer

complying with the said dimensions.

registered trademarks of Alcatel-Lucent. The contents or specifications contained within this document

are subject to change without notice.

Not withstanding any other warranty herein, all hardware and software are provided "as is" with all

faults. Alcatel-Lucent disclaim all warranties, expressed or implied, including, without limitation, those

of merchantability, fitness for a particular purpose and non-infringement or arising from a course of

dealing, usage, or trade practice. In no event shall Alcatel-Lucent be liable for any indirect, special,

consequential, or incidental damages, including, without limitation, lost profits or loss or damage to data

arising out of the use or inability to use this manual, even if Alcatel-Lucent have been advised of the

possibility of such damages.

3

4

5

Table of Contents

1 Preface.............................................................................................................1

About This Guide ......................................................................................................................1

Audience...................................................................................................................................1

Organization..............................................................................................................................2

Part I - Introduction.............................................................................................................2

Part II - LAN Interfaces.......................................................................................................2

Part III- WAN Interfaces......................................................................................................3

Part IV - Packet Classification ............................................................................................4

Part V - Routing Protocols..................................................................................................4

Part VI - Network Security CLI............................................................................................5

Part VII - Quality Of Service ...............................................................................................6

Part VIII - TCP/IP Services.................................................................................................6

Part IX - License Manager..................................................................................................6

Part X - Lifeline (Dedicated Management Framework) ......................................................6

Part XI - Application Hosting (Application Services Engine - ASE)....................................6

Document Conventions.............................................................................................................7

Obtaining Documentation..........................................................................................................8

Reference Publications.............................................................................................................8

Obtaining Technical Assistance................................................................................................9

Documentation Feedback.........................................................................................................9

Part 1: Introduction

2 The Command Line Interface......................................................................13

CLI Overview...........................................................................................................................13

Introduction to CLI Modes.......................................................................................................14

CLI User Mode .................................................................................................................14

CLI Configuration Mode....................................................................................................14

CLI Sub-Configuration Mode (SCM).................................................................................14

CLI Modes...............................................................................................................................15

User Mode (UM)...............................................................................................................17

Super User Mode (SUM)..................................................................................................18

Example............................................................................................................................18

Configuration Mode (CM).................................................................................................20

Interface Configuration Mode (ICM) .................................................................................23

Sub-Interface Configuration Mode (S-ICM)......................................................................24

Router Configuration Mode (RCM)...................................................................................25

Exiting Configuration Modes.............................................................................................25

Initial Setup.......................................................................................................................26

Using the Command Line Interface.........................................................................................27

CLI Help............................................................................................................................27

Partial Help.......................................................................................................................30

Partial Commands............................................................................................................30

Command Line Editing.....................................................................................................31

Command History.............................................................................................................33

Configuring Interfaces.............................................................................................................34

Interface Configuration Commands..................................................................................34

Interface Types and Limitations........................................................................................34

Common Interface Configuration Commands..................................................................34

Interface Show Commands..............................................................................................35

Clear Interface Commands...............................................................................................39

Shutting Down and Bring Up an Interface........................................................................39

Backup Interface...............................................................................................................40

3 System Configuration and Monitoring.......................................................43

System Configuration and Monitoring Tasks..........................................................................43

Chapter Conventions........................................................................................................43

Management Plane Overview.................................................................................................44

Out of Band Management (Console or Modem)...............................................................44

Inband Management (SSH and Telnet)............................................................................46

Idle Timeout......................................................................................................................50

Example............................................................................................................................50

Ping ..................................................................................................................................50

Example............................................................................................................................50

Traceroute........................................................................................................................54

Example............................................................................................................................54

Terminal Settings....................................................................................................................57

Example............................................................................................................................57

System Name..........................................................................................................................57

Example............................................................................................................................57

AAA Configuration on OA-700................................................................................................58

To Enable AAA Services..................................................................................................58

Example............................................................................................................................58

Authentication Commands ...............................................................................................59

Show Commands.............................................................................................................76

Setting and Displaying the System Time and Date.................................................................78

Clock Set..........................................................................................................................79

Example............................................................................................................................79

Clock Synchronize............................................................................................................80

Example............................................................................................................................80

System Logging and Debugging.............................................................................................81

Example............................................................................................................................82

Example 1.........................................................................................................................83

Example 2.........................................................................................................................84

Example 3.........................................................................................................................84

Example 4.........................................................................................................................84

Rate Limiting in Statlog...........................................................................................................85

Example 1.........................................................................................................................86

Example 2.........................................................................................................................86

Example 3.........................................................................................................................86

Saving Log Messages.............................................................................................................87

Example............................................................................................................................87

Viewing Tech Support ......................................................................................................88

Example............................................................................................................................88

The File System......................................................................................................................89

Example 1.........................................................................................................................89

Example 2.........................................................................................................................90

Copying Files....................................................................................................................90

Example............................................................................................................................90

Deleting Files....................................................................................................................91

Example............................................................................................................................91

Configuration File Management .......................................................................................92

Software Package Management...........................................................................................100

Package Types...............................................................................................................100

Reloading the System...........................................................................................................106

Example..........................................................................................................................106

Managing Individual Slots...............................................................................................107

Example..........................................................................................................................107

System Monitoring and Troubleshooting...............................................................................108

Environmental Information..............................................................................................108

Example..........................................................................................................................108

System Hardware Information........................................................................................110

Example..........................................................................................................................110

System Status ................................................................................................................113

Example..........................................................................................................................113

To View the Current State Of LEDs................................................................................113

Example..........................................................................................................................113

To View Process Information..........................................................................................114

Example..........................................................................................................................114

Memory Information........................................................................................................115

Example..........................................................................................................................115

Hot Key Support.............................................................................................................116

SNMP (Simple Network Management Protocol)...................................................................118

SNMP Agent and Manager.............................................................................................119

SNMP Version................................................................................................................120

SNMPv3 Protocol Overview ...........................................................................................120

SNMP Configuration Commands ...................................................................................121

SNMP Show Commands................................................................................................125

SNMP MIB CLI...............................................................................................................129

SNMP MIB GUI ..............................................................................................................130

4 Virtual Router Redundancy Protocol........................................................131

Chapter Conventions......................................................................................................131

VRRP Overview....................................................................................................................132

VRRP Configuration..............................................................................................................133

VRRP Configuration Steps.............................................................................................133

VRRP Configuration Flow...............................................................................................135

VRRP CLI Commands....................................................................................................136

Modify Global VRRP Group Parameters........................................................................139

Monitor and Debug VRRP..............................................................................................143

VRRP Interface Tracking ......................................................................................................145

Alcatel-Lucent's Interface Tracking Design ....................................................................145

VRRP Configuration Scenario using OA-700........................................................................147

Procedure.......................................................................................................................147

VRRP Configuration .......................................................................................................148

Part 2: LAN Interfaces and Configuration

5 Ethernet Interfaces on SE..........................................................................151

Chapter Conventions......................................................................................................151

Ethernet Overview.................................................................................................................152

Ethernet Basics ..............................................................................................................152

Ethernet Terminologies ..................................................................................................153

Switched Ethernet ..........................................................................................................154

Full-duplex Ethernet .......................................................................................................154

Alcatel-Lucent Specific Overview on Ethernet Interfaces...............................................154

Ethernet Configuration..........................................................................................................155

Ethernet Interface Configuration Steps ..........................................................................155

Ethernet Interface Configuration Flow............................................................................156

Ethernet Interface Configuration Commands.................................................................157

Ethernet Interface Show Commands..............................................................................159

Ethernet Interface Clear Commands..............................................................................162

6 Layer 2 Switching Configuration ..............................................................163

Chapter Conventions......................................................................................................163

Switching Overview...............................................................................................................164

Alcatel-Lucent Specific Overview on Switching..............................................................166

L2 Switching Configuration...................................................................................................168

L2 Switching Configuration Steps...................................................................................168

L2 Switching Configuration Flow....................................................................................170

L2 Switching Commands................................................................................................171

L2 Switching Show Commands......................................................................................174

L2 Switching Clear Commands ......................................................................................179

Switching Configuration using OA-700 .................................................................................180

OA-700 as a Switch with no VLANs ...............................................................................180

OA-700 as a Switch with VLANs ....................................................................................181

7 Per VLAN Spanning Tree +........................................................................183

Chapter Conventions......................................................................................................183

Per VLAN Spanning Tree (PVST+) Overview.......................................................................184

PVST+ Configuration............................................................................................................185

PVST+ Configuration Steps............................................................................................185

PVST+ Configuration Flow.............................................................................................186

PVST+ Configuration Commands ..................................................................................187

Show Commands in PVST+...........................................................................................191

PVST+ Configuration Examples ...........................................................................................195

Example 1.......................................................................................................................195

Example 2.......................................................................................................................196

Topology.........................................................................................................................196

Procedure.......................................................................................................................197

8 Integrated Routing and Bridging ..............................................................199

Chapter Conventions......................................................................................................199

Integrated Routing and Bridging Overview ...........................................................................200

Alcatel-Lucent Specific IRB Overview............................................................................200

IRB Configuration..................................................................................................................201

IRB Configuration Steps.................................................................................................201

IRB Commands..............................................................................................................202

IRB Configuration using OA-700...........................................................................................203

Topology for IRB Configuration on OA-700....................................................................203

9 802.1X Port-Based Authentication............................................................205

Chapter Conventions......................................................................................................205

802.1X Overview...................................................................................................................206

Generic terms used in 802.1X........................................................................................207

Using 802.1X with VLAN Assignment ............................................................................209

Alcatel-Lucent Specific Overview...................................................................................209

802.1X Configuration ............................................................................................................210

802.1X Configuration Steps............................................................................................210

802.1X Configuration Flow.............................................................................................213

802.1X Configuration Commands ..................................................................................214

802.1X Show Commands...............................................................................................220

802.1X Configuration Example .............................................................................................222

10 Port Monitoring...........................................................................................227

Chapter Conventions......................................................................................................227

Port Monitoring Overview......................................................................................................228

Port Monitoring Configuration ...............................................................................................229

Port Monitoring Configuration Steps...............................................................................229

Port Monitoring Commands............................................................................................230

Port Monitoring Configuration on OA-700.............................................................................231

Part 3: WAN Interfaces and Protocols

11 T1E1 Line Card ...........................................................................................235

Chapter Conventions......................................................................................................235

T1 and E1 Overview..............................................................................................................236

E1 Interface Overview...........................................................................................................237

E1 Timeslot Functionalities.............................................................................................237

Mechanisms Supported by the E1 interface...................................................................238

E1 Modes of Operation...................................................................................................239

Alcatel-Lucent Specific Overview...................................................................................239

E1 Configuration ...................................................................................................................240

E1 Configuration Steps...................................................................................................240

E1 Configuration Flow....................................................................................................242

E1 Configuration Commands .........................................................................................243

E1 Show Commands......................................................................................................251

Troubleshooting E1 Lines...............................................................................................253

T1 Interface Overview...........................................................................................................254

Frame Formats Used in T1 Cards..................................................................................254

T1 Modes of Operation...................................................................................................255

T1 Configuration....................................................................................................................256

T1 Configuration Steps...................................................................................................256

T1 Configuration Flow ....................................................................................................258

T1 Configuration Commands..........................................................................................259

T1 Show Commands......................................................................................................267

Troubleshooting T1 Lines...............................................................................................269

12 Universal Serial Port (USP) Line Card......................................................271

Chapter Conventions......................................................................................................272

USP Line Card (V.35/X.21/RS-232) Overview......................................................................273

Alcatel-Lucent Specific Overview...................................................................................274

V.35/X.21/RS-232 Configuration...........................................................................................275

V.35/X.21/RS-232 Interface Configuration Steps...........................................................275

V.35/X.21/RS-232 Configuration Flow............................................................................276

V.35/X.21/RS-232 Configuration Commands.................................................................277

V.35/X.21/RS-232 DTE and DCE CLI Configuration Commands ..................................278

Show Command.............................................................................................................281

Clear Command .............................................................................................................282

13 High-level Data Link Control .....................................................................283

Chapter Conventions......................................................................................................283

HDLC Overview ....................................................................................................................284

HDLC Frame Structure...................................................................................................284

HDLC Frame Formats....................................................................................................285

HDLC Protocol Operation...............................................................................................285

HDLC Configuration..............................................................................................................286

HDLC Configuration Steps .............................................................................................287

HDLC Configuration Flow...............................................................................................289

HDLC Configuration Commands....................................................................................290

14 Frame Relay................................................................................................295

Chapter Conventions......................................................................................................295

Frame Relay Overview..........................................................................................................296

Frame Relay Devices .....................................................................................................296

Frame Relay Virtual Circuits...........................................................................................296

Frame Relay Network Deployments...............................................................................297

Frame Relay Configuration...................................................................................................298

Frame Relay Configuration Steps ..................................................................................299

Frame Relay Configuration Flow....................................................................................301

Frame Relay Configuration Commands.........................................................................302

15 Point-to-Point Protocol..............................................................................311

Chapter Conventions......................................................................................................311

PPP Overview.......................................................................................................................312

PPP Components...........................................................................................................312

PPP Operation................................................................................................................312

PPP Configuration.................................................................................................................313

PPP Configuration Steps................................................................................................314

PPP Configuration Flow .................................................................................................316

PPP Configuration Commands.......................................................................................317

PPP Optional Parameters ..............................................................................................318

PPP Show Commands...................................................................................................326

PPP Debug Commands .................................................................................................333

16 Point-to-Point Protocol over Ethernet (PPPoE).......................................335

Chapter Conventions......................................................................................................335

PPPoE Overview...................................................................................................................336

PPPoE Operation...........................................................................................................336

Alcatel-Lucent Specific Overview on PPPoE Features ..................................................336

PPPoE Configuration............................................................................................................337

PPPoE Configuration Steps ...........................................................................................338

PPPoE Configuration Flow.............................................................................................340

PPPoE Configuration Commands ..................................................................................341

PPPoE Optional Parameters..........................................................................................343

PPPoE Show Commands...............................................................................................346

17 Multilink Point to Point Protocol...............................................................347

Chapter Conventions......................................................................................................347

MLPPP Overview..................................................................................................................348

MLPPP Components......................................................................................................349

MLPPP Operation...........................................................................................................349

Alcatel-Lucent Specific Overview on MLPPP Features..................................................350

MLPPP Configuration............................................................................................................351

MLPPP Configuration Steps...........................................................................................352

MLPPP Configuration Flow ............................................................................................354

MLPPP Configuration Commands..................................................................................355

MLPPP Show Commands..............................................................................................357

MLPPP Configuration Example.............................................................................................358

18 Multilink Frame Relay.................................................................................361

Chapter Conventions......................................................................................................361

MLFR Overview ....................................................................................................................362

MLFR Components ........................................................................................................362

MLFR Operation.............................................................................................................362

Alcatel-Lucent Specific Overview on MLFR Features....................................................364

MLFR Configuration..............................................................................................................364

MLFR Configuration Steps.............................................................................................365

MLFR Configuration Flow...............................................................................................368

MLFR Configuration Commands....................................................................................369

MLFR Show Commands ................................................................................................373

19 Link Fragmentation and Interleaving (LFI)...............................................375

Chapter Conventions......................................................................................................375

LFI Overview.........................................................................................................................376

Alcatel-Lucent Specific Overview on LFI Features.........................................................376

Overview of LFI in MLPPP....................................................................................................377

Packet Formats ..............................................................................................................377

Configuration of LFI on MLPPP......................................................................................379

LFI Configuration on MLPPP ................................................................................................380

LFI - MLPPP Configuration Steps ..................................................................................381

LFI - MLPPP Configuration Flow....................................................................................384

LFI - MLPPP Configuration Commands.........................................................................385

LFI - MLPPP Show Commands......................................................................................388

Configuration Example of LFI on MLPPP.......................................................................389

Overview of LFI in Frame Relay............................................................................................392

End-to-End Fragmentation .............................................................................................392

Packet Formats ..............................................................................................................392

Configuration of LFI on FR (and FR Sub Interface)........................................................393

LFI Configuration on FR........................................................................................................394

LFI - FR Configuration Steps..........................................................................................395

LFI - FR Configuration Flow ...........................................................................................398

LFI-FR Configuration Commands...................................................................................399

LFI Configuration on FR Sub Interface...........................................................................401

LFI - FR Show Commands.............................................................................................402

Configuration Example of LFI on FR..............................................................................405

Part 4: Common Classification

20 Common Classifiers...................................................................................409

Chapter Conventions......................................................................................................409

CC Overview.........................................................................................................................410

Benefits of Alcatel-Lucent Devices Common Classifiers................................................411

CC Architecture..............................................................................................................411

Before you Configure CC ...............................................................................................412

CC Configuration...................................................................................................................413

CC Configuration Steps..................................................................................................413

Elements Used in Configuring CC..................................................................................414

To Configure a Match-list ...............................................................................................417

Example..........................................................................................................................417

Rules within Match-lists..................................................................................................417

To Configure Rules Using the Protocol Numbers...........................................................423

Lists in CC......................................................................................................................424

Nesting Of Match-lists ....................................................................................................426

Show commands in CC..................................................................................................428

Deletion Commands in CC.............................................................................................431

Sample examples on the usage of CC across applications..................................................433

Example 1.......................................................................................................................433

Example 2.......................................................................................................................434

Example 3.......................................................................................................................435

Part 5: Routing Protocols

21 Protocol Independent Features.................................................................439

Chapter Conventions......................................................................................................439

Protocol-Independent Configuration...............................................................................440

Protocol-Independent Configuration Commands ...........................................................441

22 Routing Information Protocol....................................................................467

Chapter Conventions......................................................................................................467

RIP Overview........................................................................................................................468

RIP Configuration..................................................................................................................469

RIP Configuration Steps.................................................................................................470

RIP Configuration Flow...................................................................................................472

RIP Configuration Commands........................................................................................473

RIP Optional Parameters................................................................................................474

RIP Show Commands ....................................................................................................487

RIP Clear Commands.....................................................................................................491

23 Border Gateway Protocol ..........................................................................493

Chapter Conventions......................................................................................................493

BGP Overview.......................................................................................................................494

BGP Configuration................................................................................................................495

BGP Configuration Steps ...............................................................................................495

BGP Configuration Flow.................................................................................................497

BGP Configuration Commands......................................................................................498

BGP Show Commands...................................................................................................500

BGP Clear Commands...................................................................................................503

A Typical BGP Example Using OA-700................................................................................506

24 Open Shortest Path First...........................................................................509

Chapter Conventions......................................................................................................509

OSPF Overview ....................................................................................................................510

OSPF Configuration..............................................................................................................511

OSPF Configuration Steps .............................................................................................511

OSFP Configuration Flow...............................................................................................513

OSPF Configuration Commands....................................................................................514

OSPF Optional Parameters............................................................................................515

Show Commands in OSPF.............................................................................................533

Clear Commands in OSPF.............................................................................................542

OSPF Configuration on OA-700............................................................................................543

Example 1.......................................................................................................................543

25 Multicast Routing .......................................................................................545

Chapter Conventions......................................................................................................545

Multicast Overview................................................................................................................546

Protocol Independent Multicast (PIM) ............................................................................546

Internet Group Management Protocol (IGMP)................................................................547

RFCs ..............................................................................................................................548

PIM Configuration .................................................................................................................549

PIM Configuration Steps.................................................................................................549

PIM Configuration Flow..................................................................................................551

PIM Configuration Commands .......................................................................................552

Show Commands in PIM................................................................................................557

Clear Commands in PIM ................................................................................................560

IGMP Configuration...............................................................................................................561

IGMP Configuration Steps..............................................................................................561

IGMP Configuration Flow ...............................................................................................563

IGMP Configuration Commands.....................................................................................564

Show Commands in IGMP.............................................................................................568

Show Commands in Multicast........................................................................................569

Clear Commands in Multicast.........................................................................................570

Multicast Configuration on OA-700.......................................................................................571

Example 1.......................................................................................................................571

Verifying Multicast Routing.............................................................................................575

26 Policy Based Routing.................................................................................577

Chapter Conventions......................................................................................................577

PBR Overview.......................................................................................................................578

Alcatel-Lucent Specific Overview...................................................................................578

PBR Configuration................................................................................................................579

PBR Configuration Steps................................................................................................579

PBR Configuration Flow.................................................................................................581

PBR Configuration Commands ......................................................................................582

Show Commands in PBR...............................................................................................585

Clear Commands............................................................................................................586

PBR Configuration Example.................................................................................................587

Configuration Steps........................................................................................................587

Show Commands...........................................................................................................588

27 Virtual Routing and Forwarding................................................................589

Chapter Conventions......................................................................................................590

VRF-CE Overview.................................................................................................................591

VRF-CE Configuration ..........................................................................................................593

VRF-CE Configuration Steps..........................................................................................593

VRF-CE Configuration Flow...........................................................................................595

VRF-CE CLI Commands ................................................................................................596

VRF Show Commands...................................................................................................605

Example..........................................................................................................................605

VRF Clear Commands ...................................................................................................610

Example..........................................................................................................................610

Part 6: Network Security

28 Network Address Translation....................................................................613

Chapter Conventions......................................................................................................613

NAT Overview.......................................................................................................................614

Types of NAT..................................................................................................................614

Benefits of NAT ..............................................................................................................616

Before You Configure NAT.............................................................................................616

Alcatel-Lucent Specific Overview...................................................................................616

Source NAT Configuration....................................................................................................617

SNAT Configuration Steps .............................................................................................618

SNAT Configuration Flow...............................................................................................620

SNAT Configuration Commands....................................................................................621

Sample Configurations of SNAT on OA-700..................................................................627

Destination NAT Configuration..............................................................................................628

DNAT Configuration Steps.............................................................................................629

DNAT Configuration Flow...............................................................................................631

DNAT Configuration Commands....................................................................................632

Sample Configuration Example of DNAT on OA-700.....................................................635

Bypass IPsec Traffic.......................................................................................................636

NAT Show Commands...................................................................................................637

NAT Clear Commands ...................................................................................................639

NAT Debug Commands .................................................................................................640

Modifying NAT Configuration................................................................................................641

Insertions........................................................................................................................641

Updations .......................................................................................................................642

NAT Deletion Commands...............................................................................................644

29 Filter and Firewall.......................................................................................647

Chapter Conventions......................................................................................................647

Network Security - An overview............................................................................................648

Network Security Terminologies.....................................................................................649

Firewall Mechanisms......................................................................................................650

Before You Configure Filters and Firewalls....................................................................651

OA-700 Specific Overview..............................................................................................651

Filter Configuration................................................................................................................652

Filter Configuration Steps...............................................................................................652

Filter Configuration Flow.................................................................................................654

Filter Configuration Commands......................................................................................655

Filter Show Commands ..................................................................................................659

Filter Deletion Commands..............................................................................................661

Filter Clear Commands...................................................................................................662

Filter Debug Commands.................................................................................................663

Sample Examples of Configuring Filters on OA-700......................................................664

Managing Security Configuration..........................................................................................665

Insertions........................................................................................................................665

Updations .......................................................................................................................666

Network Attacks - An Overview.............................................................................................668

Types of Network Attacks...............................................................................................668

Default Attacks (Rate-limiting / Stateful).........................................................................669

Default Attacks (Non-rate Limiting / Stateless)...............................................................671

Optional Attacks .............................................................................................................673

Network Attack Prevention Configuration.............................................................................675

Network Attack Prevention Configuration Steps.............................................................675

Network Attack Prevention Configuration Flow ..............................................................677

Network Attack Prevention Configuration Commands ...................................................678

Firewall Show Commands..............................................................................................688

Firewall Debug Commands ............................................................................................694

Sample Firewall Policy Configurations on OA-700.........................................................695

Zone Configuration................................................................................................................697

Trusted Zone Configuration............................................................................................697

Untrusted Zone Configuration ........................................................................................697

Semi-trusted Zone or Demilitarized Zone.......................................................................698

Three Zone Firewall Example.........................................................................................699

Example 2: Simple Zone Configuration in OA-700.........................................................707

Time-range/Timer Configuration...........................................................................................709

Time-range Configuration Commands ...........................................................................709

Time-range Show Command..........................................................................................710

ALGs Supported in OA-700..................................................................................................711

ALG Configuration Commands.......................................................................................713

Customized-service Rule Based ALG Configuration ............................................................720

Customizing ALG Commands........................................................................................720

NOE ALG Configuration........................................................................................................723

Persistent Memory..........................................................................................................723

Alcatel-Lucent Specific Overview...................................................................................723

NOE ALG Configuration Steps.......................................................................................724

NOE ALG Configuration Commands..............................................................................725

NOE Show Commands ..................................................................................................727

NOE Clear Commands...................................................................................................729

Typical Rule Based ALG and DNAT Example Using OA-700...............................................730

Security - Best Practices.......................................................................................................732

Rules for Configuring Packet Filters...............................................................................732

30 IP Security - Virtual Private Network ........................................................737

Chapter Conventions......................................................................................................738

IPsec VPN Overview.............................................................................................................739

IPsec Enabled VPN........................................................................................................741

IPsec Connection Types.................................................................................................741

IPsec Concepts ..............................................................................................................743

Benefits of IPsec Enabled VPN......................................................................................748

Default Configuration Setting on OA-700.......................................................................749

IPsec VPN Configuration......................................................................................................750

IPsec VPN Configuration Steps......................................................................................750

IPsec VPN Configuration Flow.......................................................................................752

IPsec Configuration Commands.....................................................................................753

To Configure the Match-lists...........................................................................................753

IPsec Configuration with Preshared Key........................................................................753

Example..........................................................................................................................753

IPsec Configuration with X.509 Certificates ...................................................................754

To Import a RSA Key......................................................................................................754

Example..........................................................................................................................754

Example..........................................................................................................................755

To Export RSA Keys.......................................................................................................761

Example..........................................................................................................................761

To Delete a CA Certificate..............................................................................................761

Example..........................................................................................................................761

To Delete a Signed Certificate........................................................................................762

Example..........................................................................................................................762

To Delete a Peer Certificate ...........................................................................................762

Example..........................................................................................................................762

To Delete an RSA Key Pair............................................................................................762

Example..........................................................................................................................762

Internet Key Exchange (IKE) Policy ...............................................................................763

To Configure Transform-set in IPsec..............................................................................767

To Configure IPsec Crypto Map.....................................................................................769

Example..........................................................................................................................769

To Attach Crypto Map to an Interface.............................................................................773

Dead Peer Detection (DPD)...........................................................................................774

IPsec VPN Show Commands.........................................................................................776

Clear Commands in IPsec..............................................................................................792

IPsec Scenarios on OA-700..................................................................................................793

Best Practices For Deploying IPsec VPN .............................................................................796

Identity............................................................................................................................796

IPsec Access Control .....................................................................................................797

IPsec...............................................................................................................................797

Network Address Translation .........................................................................................798

Network Access Control.................................................................................................798

Interoperability................................................................................................................798

Routing Entry..................................................................................................................799

IPsec NAT-Traversal.............................................................................................................800

Scenarios Depicting IPsec Nat-traversal...............................................................................801

IPsec Tunnel Interface..........................................................................................................803

Before You Configure IPsec Tunnel Interface................................................................803

Default Configuration......................................................................................................804

IPsec Tunnel Interface Configuration....................................................................................805

IPsec Tunnel Interface Configuration Steps...................................................................805

IPsec Tunnel Interface Configuration Flow.....................................................................807

IPsec Tunnel Interface Configuration Commands..........................................................808

IPsec Tunnel Configuration Scenarios using OA-700...........................................................815

31 Intrusion Detection System.......................................................................817

Chapter Conventions......................................................................................................817

IDS Overview........................................................................................................................818

Alcatel-Lucent Specific Overview...................................................................................818

IDS Configuration..................................................................................................................818

IDS Configuration Steps.................................................................................................819

IDS Configuration Flow...................................................................................................821

IDS Configuration Commands........................................................................................822

IDS Show Commands....................................................................................................828

IDS Clear Commands.....................................................................................................833

IDS Debug Commands...................................................................................................834

IDS Configuration Scenario Using OA-700...........................................................................835

Configuration Steps........................................................................................................835

Show Commands...........................................................................................................835

IDS Topology..................................................................................................................836

32 Generic Routing Encapsulation................................................................837

Chapter Conventions......................................................................................................837

GRE Overview ......................................................................................................................838

GRE Tunnel Setup .........................................................................................................838

GRE Tunnel Features.....................................................................................................839

Summary........................................................................................................................840

Alcatel-Lucent Specific Overview...................................................................................840

GRE Tunnel Configuration....................................................................................................841

GRE Configuration Steps ...............................................................................................841

GRE Configuration Flow.................................................................................................843

GRE Configuration Commands......................................................................................844

GRE Configuration Scenarios using OA-700........................................................................847

1. GRE Configuration .....................................................................................................847

2. GRE + IP Filters + DoS Configuration......................................................................849

3. GRE over IPsec Configuration .................................................................................851

33 Transparent Firewall ..................................................................................855

Chapter Conventions......................................................................................................855

TF Overview..........................................................................................................................856

OA-700 Specific Overview..............................................................................................856

TF Configuration...................................................................................................................857

TF Configuration Steps...................................................................................................857

TF Configuration Flow....................................................................................................858

TF Configuration Commands .........................................................................................859

Show Commands in TF..................................................................................................861

Clear Commands in TF ..................................................................................................862

TF Configuration on OA-700.................................................................................................863

Configuration Steps........................................................................................................863

Show Commands...........................................................................................................863

34 Call Admission Controller .........................................................................865

Chapter Conventions......................................................................................................865

CAC Overview.......................................................................................................................866

Measurement Based CAC..............................................................................................866

Resource Based CAC ....................................................................................................866

CAC Functionality in OA-700..........................................................................................867

CAC Configuration................................................................................................................868

CAC Configuration Steps ...............................................................................................868

CAC Configuration Flow.................................................................................................870

CAC Configuration Commands......................................................................................871

Show Commands in CAC...............................................................................................875

Clear Commands in CAC ...............................................................................................878

CAC Configuration on OA-700..............................................................................................879

Configuration Steps........................................................................................................879

Verify CAC Configuration ...............................................................................................880

35 Telephony Services....................................................................................881

Chapter Conventions......................................................................................................882

Overview...............................................................................................................................883

OA-700 in Stand-alone Mode.........................................................................................883

OA-700 in Survivability Mode .........................................................................................883

Voice Survivability Process in OA-700 ...........................................................................885

OA-700 Specific Overview..............................................................................................887

Additional Configuration on OA-700 for Enhanced Telephony Service Functionality.....888

Telephony Service Configuration..........................................................................................889

Telephony Service Configuration Steps.........................................................................889

Telephony Service Configuration Flow...........................................................................891

Telephony Service Configuration Commands................................................................892

Show Commands in Telephony Service.........................................................................902

Debug Commands..........................................................................................................907

Telephony Service Configuration Example on OA-700.........................................................908

OA-700 in Stand-alone Mode.........................................................................................908

Configuration Steps........................................................................................................909

Show Commands...........................................................................................................909

OA-700 in Survivability Mode .........................................................................................910

Configuration Steps........................................................................................................911

Show Commands...........................................................................................................912

Part 7: Quality of Service

36 Quality of Service.......................................................................................915

Chapter Conventions......................................................................................................915

QoS Overview.......................................................................................................................916

Generic terms used in QoS............................................................................................916

Alcatel-Lucent Specific Overview on QoS......................................................................918

Traffic Without Policing and Shaping..............................................................................920

Traffic with Policing.........................................................................................................921

Traffic with Shaping........................................................................................................922

Hierarchical Queuing......................................................................................................923

Bandwidth Sharing in Tunnels........................................................................................925

QoS Configuration.................................................................................................................926

QoS Configuration Steps................................................................................................926

QoS Configuration Flow .................................................................................................929

QoS Configuration Commands.......................................................................................931

Class Map Configuration................................................................................................931

Policy Map Configuration................................................................................................932

Attaching a Policy Map to an Interface...........................................................................934

Traffic Class Attributes Configuration.............................................................................935

Auto QoS Configuration..................................................................................................944

Hierarchical Policy Configuration....................................................................................946

QoS over Tunnel Interface .............................................................................................951

Example..........................................................................................................................951

QoS Show Commands...................................................................................................953

QoS Clear Commands ...................................................................................................961

QoS Debug Commands .................................................................................................961

QoS Test Scenarios on OA-780............................................................................................962

Traffic Shaping ...............................................................................................................962

Priority Queuing..............................................................................................................963

QoS on Frame Relay (Per-PVC Queuing)............................................................................965

QoS on FR and FR Sub Interface ..................................................................................965

Frame Relay Queuing and Fragmentation at the Interface............................................966

Alcatel-Lucent Specific Overview...................................................................................967

QoS on FR Configuration Steps.....................................................................................968

QoS on FR Configuration Commands............................................................................971

QoS on FR Sub Interface Configuration Commands .....................................................972

QoS on FR Show Commands........................................................................................973

Part 8: TCP/IP Services

37 DHCP (Dynamic Host Configuration Protocol) Server............................977

Chapter Conventions......................................................................................................977

DHCP Server Overview ........................................................................................................978

Alcatel-Lucent Specific Overview...................................................................................978

DHCP Server Configuration..................................................................................................979

DHCP Server Configuration Steps.................................................................................979

DHCP Server Configuration Flow...................................................................................981

DHCP Server Configuration Commands........................................................................982

DHCP Server Show Commands ....................................................................................989

DHCP Server Test Scenarios using OA-780 ........................................................................992

Configuration Steps........................................................................................................993

38 TFTP (Trivial File Transfer Protocol) Server............................................995

Chapter Conventions......................................................................................................995

TFTP Server Overview..........................................................................................................996

Alcatel-Lucent Specific Overview...................................................................................996

TFTP Server Configuration...................................................................................................997

TFTP Configuration Steps..............................................................................................997

TFTP Configuration Flow................................................................................................998

TFTP Configuration Commands.....................................................................................999

TFTP Show Commands...............................................................................................1000

39 DHCP (Dynamic Host Configuration Protocol) Relay...........................1001

Chapter Conventions....................................................................................................1001

DHCP Relay Overview........................................................................................................1002

Alcatel-Lucent Specific Overview.................................................................................1002

DHCP Relay Configuration .................................................................................................1003

DHCP Relay Configuration Steps.................................................................................1003

DHCP Relay Configuration Flow ..................................................................................1004

DHCP Relay Configuration Commands .......................................................................1005

DHCP Relay Test Scenarios using OA-780........................................................................1007

Configuration Steps......................................................................................................1007

40 DNS (Domain Name Service) Client........................................................1009

Chapter Conventions....................................................................................................1009

DNS Client Overview ..........................................................................................................1010

DNS Client Configuration....................................................................................................1010

DNS Client Configuration Steps...................................................................................1011

DNS Client Configuration Flow.....................................................................................1012

DNS Client Configuration Commands..........................................................................1013

DNS Client Test Scenario using OA-780............................................................................1017

Configuration Steps......................................................................................................1017

Part 9: License Manager

41 License Manager ......................................................................................1021

Chapter Conventions....................................................................................................1021

License Manager Overview.................................................................................................1022

Alcatel-Lucent Specific Features..................................................................................1022

To Install a License File................................................................................................1023

Example........................................................................................................................1023

To Back-up a License File............................................................................................1026

Example........................................................................................................................1026

To Remove A License File ...........................................................................................1027

Example........................................................................................................................1027

To View Details of the Licenses Installed on the System.............................................1027

Example........................................................................................................................1027

To View the List of Licensable Features on the System...............................................1029

Example........................................................................................................................1029

To View the List of License Files Installed On The System..........................................1029

Example........................................................................................................................1029

Display Messages ........................................................................................................1030

Page is loading ...

Alcatel-Lucent OmniAccess 700 Cli Configuration Manual

Alcatel-Lucent OmniAccess 700 Cli Configuration Manual

Related papers

Other documents