3Com 3C13636 User manual

3Com Router 3000 Ethernet Family
Configuration Guide
3C13636
www.3Com.com
Part Number: 10014939 Rev. AA
February 2006

Copyright © 2006, 3Com Corporation. All rights reserved. No part of this documentation may be reproduced in any form or by
any means or used to make any derivative work (such as translation, transformation, or adaptation) without written permission
from 3Com Corporation.
3Com Corporation reserves the right to revise this documentation and to make changes in content from time to time without
obligation on the part of 3Com Corporation to provide notification of such revision or change.
3Com Corporation provides this documentation without warranty, term, or condition of any kind, either implied or expressed,
including, but not limited to, the implied warranties, terms or conditions of merchantability, satisfactory quality, and fitness for a
particular purpose. 3Com may make improvements or changes in the product(s) and/or the program(s) described in this
documentation at any time.
If there is any software on removable media described in this documentation, it is furnished under a license agreement included
with the product as a separate document, in the hard copy documentation, or on the removable media in a directory file named
LICENSE.TXT or !LICENSE.TXT. If you are unable to locate a copy, please contact 3Com and a copy will be provided to you.
UNITED STATES GOVERNMENT LEGEND
If you are a United States government agency, then this documentation and the software described herein are provided to you
subject to the following:
All technical data and computer software are commercial in nature and developed solely at private expense. Software is
delivered as “Commercial Computer Software” as defined in DFARS 252.227-7014 (June 1995) or as a “commercial item” as
defined in FAR 2.101(a) and as such is provided with only such rights as are provided in 3Com’s standard commercial license for
the Software. Technical data is provided with limited rights only as provided in DFAR 252.227-7015 (Nov 1995) or FAR
52.227-14 (June 1987), whichever is applicable. You agree not to remove or deface any portion of any legend provided on any
licensed program or documentation contained in, or delivered to you in conjunction with, this User Guide.
Unless otherwise indicated, 3Com registered trademarks are registered in the United States and may or may not be registered in
other countries.
3Com, the 3Com logo, are registered trademarks of 3Com Corporation.
Intel and Pentium are registered trademarks of Intel Corporation. Microsoft, MS-DOS, Windows, and Windows NT are
registered trademarks of Microsoft Corporation. UNIX is a registered trademark in the United States and other countries, licensed
exclusively through X/Open Company, Ltd.
All other company and product names may be trademarks of the respective companies with which they are associated.
3Com Corporation
350 Campus Drive
Marlborough, MA
01752-3064

Introduction

3Com Router 3000 Ethernet Family
Configuration Guide Table of Contents
Table of Contents
Chapter 1 v2.4x Overview.............................................................................................................1-1
1.1 Introduction........................................................................................................................1-1
1.2 Architecture of v2.4x..........................................................................................................1-1
1.3 V2.4x Functionality and Use with Products.......................................................................1-2
Chapter 2 User Configuration Interface......................................................................................2-1
2.1 Setting up Configuration Environments.............................................................................2-1
2.1.1 Setup through the Console Port..............................................................................2-1
2.1.2 Setup through Telnet...............................................................................................2-3
2.1.3 Setup through the AUX Port....................................................................................2-5
2.1.4 Setup through SSH.................................................................................................2-7
2.2 CLI .....................................................................................................................................2-8
2.2.1 Command Line Views.............................................................................................2-8
2.2.2 Online Help with Command Lines.........................................................................2-12
2.2.3 Command Line Error Information..........................................................................2-13
2.2.4 History Command .................................................................................................2-14
2.2.5 Edit Features.........................................................................................................2-14
2.2.6 Display Features ...................................................................................................2-15
2.2.7 Regular Expressions.............................................................................................2-16
2.3 Hot Keys ..........................................................................................................................2-19
2.3.1 Classifying Hot Keys.............................................................................................2-19
2.3.2 Usage of the Hot Keys ..........................................................................................2-20
2.3.3 Examples of Hot Keys in Use................................................................................ 2-21
2.3.4 Configuring Command Alias .................................................................................2-21
Chapter 3 v2.4x Basic Configurations.........................................................................................3-1
3.1.1 Entering/Exiting System View.................................................................................3-1
3.1.2 Configuring the Router Name .................................................................................3-1
3.1.3 Configuring the System Clock.................................................................................3-1
3.1.4 Configuring a Banner ..............................................................................................3-2
3.1.5 User Level Switching............................................................................................... 3-2
3.1.6 Locking User Interfaces ..........................................................................................3-3
3.1.7 Configuring Command Levels.................................................................................3-3
3.1.8 Displaying System Information................................................................................3-4

3Com Router 3000 Ethernet Family
Configuration Guide Chapter 1 v2.4x Overview
3Com Corporation
1-1
Chapter 1 v2.4x Overview
1.1 Introduction
Versatile Routing Platform (v2.4x) is the versatile operating system platform of 3Com
Technologies for data communications products. Focusing on IP services, it constructs
a componential architecture, and provides abundant functionality as well as the
application-based tailorability and scalability.
Taking the TCP/IP stack as the core, v2.4x integrates the data communications
technologies in routing, QoS, VPN, security, and VoIP into the operating system, and
offers remarkable data forwarding capability.
v2.4x is a network operating system of which 3Com Technologies owns the exclusive
intellectual property rights (IPR). It provides a uniform set of interfaces (network, user
and management) for various hardware platforms and therefore offers a variety of
flexible application solutions with hundreds of features. Moreover, as a platform of
sustainable development, it can protect network investments.
1.2 Architecture of v2.4x
Using the TCP/IP model as a reference, the architecture of v2.4x implements protocols
at layers encompassing data link, network, and application, as shown in the following
figure:
System
service
TCP/UDP
IP forwarding engine
(Unicastforwarding, multicast forwarding)
Fast forwarding IPSec, firewall QoS
Route-policy
management
RIP OSPF BGP PIM DVMRP BGMP
FTPHTTP TELNET
VPN
PPP/PPPoE Frame Relay HDLC X25 ATM
......
ÃüÁîÐÐ
SNMP
Web
¹ÜÀí
IS-IS
System
service
TCP/UDP
IP forwarding engine
(Unicast, multicast)
Fast forwarding IPSec, firewall QoS
Routing policy
management
RIP OSPF BGP PIM DVMRP MBGP
FTPHTTP TELNET
VPN
PPP/PPPoE Frame Relay HDLC X25
Configuration
management
ATM
......
Command line
SNMP
Web-based
Configuration
IS-IS
System
service
TCP/UDP
IP forwarding engine
(Unicastforwarding, multicast forwarding)
Fast forwarding IPSec, firewall QoS
Route-policy
management
RIP OSPF BGP PIM DVMRP BGMP
FTPHTTP TELNET
VPN
PPP/PPPoE Frame Relay HDLC X25 ATM
......
ÃüÁîÐÐ
SNMP
Web
¹ÜÀí
IS-IS
System
service
TCP/UDP
IP forwarding engine
(Unicast, multicast)
Fast forwarding IPSec, firewall QoS
Routing policy
management
RIP OSPF BGP PIM DVMRP MBGP
FTPHTTP TELNET
VPN
PPP/PPPoE Frame Relay HDLC X25
Configuration
management
ATM
......
Command line
SNMP
Web-based
Configuration
IS-IS
Figure 1-1 v2.4x architecture

3Com Router 3000 Ethernet Family
Configuration Guide Chapter 1 v2.4x Overview
3Com Corporation
1-2
1.3 V2.4x Functionality and Use with Products
Note:
V2.4x is the network system platform for 3Com 5000/6000 Routers.
This manual describes the functionality available with V2.4x in detail. The features and
commands restricted to the 3Com 6000 routers are declared as “Router 6000 only.”
In the examples throughout this manual, most network interfaces are represented by
interface-type slot-number/card-number/interface-number, Serial 0/0/0 for example.
This numbering convention applies to the 3Com 6000 Routers. For other routers,
network interfaces are represented by interface-type slot-number/interface-number,
Serial 0/0 for example.
The following table lists all the essential functionality provided by the router network
system platform V2.4x:
Table 1-1 V2.4x functionality
Attribute Description
LAN
protocols
Ethernet_II
Ethernet_SNAP
VLAN
Transparent bridge
Link layer
protocols
PPP, MP
SLIP
ISDN
PPPoE
IPoA
PPPoA
PPPoEoA
HDLC
Frame Relay
LAPB
X.25
ATM
Network
interconne
ctivity
VPN L2TP VPN
GRE VPN
IPSec VPN
MPLS VPN (L2/L3)
DVPN

3Com Router 3000 Ethernet Family
Configuration Guide Chapter 1 v2.4x Overview
3Com Corporation
1-3
Attribute Description
IP services
ARP, ARP proxy
Static domain name resolution
IP unnumbered
DHCP Relay
DHCP Server
DHCP Client
IGMP
Non-IP
services DLSw
IPX
Network
protocols
IP routing
Static routing management
Dynamic routing protocols:
zRIP-1/RIP-2
zOSPF
zBGP
zIS-IS
Routing policy
Policy routing
Multicast routing protocols:
zPIM-DM
zPIM-SM
zMBGP
zMSDP
MPLS
Basic MPLS features
MPLS VPN
MPLS QoS

3Com Router 3000 Ethernet Family
Configuration Guide Chapter 1 v2.4x Overview
3Com Corporation
1-4
Attribute Description
Authenticati
on,
authorizatio
n,
accounting
(AAA)
services
RADIUS
HWTACACS
CHAP authentication
PAP authentication
Firewalls
Packet filter
zInterface-based ACL
zTime-based ACL
Firewall
zPacket filtering firewall
ASPF (stateful firewall)
Data
security
Terminal access security
IPSec
IKE
Network
security
NAT
Allows LAN users to access external networks by
using the IP addresses in the address pool
Supports associations of ACL and address pool
Supports associations of ACL and interface
Allows the hosts on external networks to access the
internal server
Allows configuring valid time ranges for address
translation
Supports multiple ALGs
NAT multi-instance
Network
reliability Backup center
VRRP
Traffic policing Traffic policing
Congestion
management FIFO, PQ, CQ, WFQ, CBQ/LLQ, RTP
Congestion
avoidance WRED
Traffic shaping TS
Interface rate limit LR
FR QoS
QoS
MPLS QoS

3Com Router 3000 Ethernet Family
Configuration Guide Chapter 1 v2.4x Overview
3Com Corporation
1-5
Attribute Description
File management
File system management
FTP Server and Client for uploading and
downloading the configuration file or application
TFTP Client for uploading and downloading files
Default configuration file for auto-config
User
management
Users fall into the following categories:
zTerminal users: log onto the router from a
console, Aux, or asynchronous port
zTelnet users: telnet to the router
zSSH users: log onto the router through SSH
connections
zFTP users: FTP to the router for file transfer
zPPP users: set up PPP connections through
dial-up or PPPoA for example, with the router
for network access
zPAD users: set up PAD connections with the
router for network access
Terminal and Telnet users are classified into four
levels: visit, monitor, system, and manage
User-interface with multiple authentication and
authorization methods at login
Terminal access
services
Telnet
TTY
Remote terminal connection (RTC)
Network
management
Standard SNMPV3, compatible with SNMP V2C,
SNMP V1
Support for RMON
Support for NTP time synchronization
Network test tools such as tracert, ping,
hwping commands for diagnosing the health of
the network quickly
Detailed debugging information useful for
network troubleshooting
System
manageme
nt
Equipment
management
Hot swap of interface cards/fans/power supplies
(Router 6000 only)
Query for statistics on memory and CPU

3Com Router 3000 Ethernet Family
Configuration Guide Chapter 1 v2.4x Overview
3Com Corporation
1-6
Attribute Description
CLI
Multiple terminal services for entering the CLI:
zconsole port for local configuration
zAUX port for remote or local configuration
zTelnet or SSH for local or remote
configuration
zTelnet for logging in directly and managing
other routers
zPAD terminal service
zDumb terminal service
zRlogin terminal service
Hierarchical configuration command protection,
safeguarding the router against intrusion
Prompt and help information in both English and
Chinese
Log management
Dial-up
network DCC configuration
Modem management configuration
Basic functions of
IP voice
Voice activity detection (VAD), comfort noise,
jitter buffer and volume tuning
PBX functions, such as do-not-disturb, call
forwarding on busy, unconditional call
forwarding, alarm-call, and multiline hunt group
FXS, FXO and E&M analog interfaces
Fast connection and tunneling
Voice MPR
Calling identification delivery (CID)
Voice communication on loopback interfaces
Manual/automatic busy-tone detection
Routing policies of PSTN backup to IP and
PSTN backup to GK
Static, dynamic and combined VoIP routing
policies
Voice QoS
Fast and normal voice data
receiving/transmitting
Networking with the A8010 Refiner
Protocol and
signaling R2, Q.931, Q.SIG, digital E&M, H.323, SIP
Voice codec G.711, G.723, G.726, G.729
Voice
Fax ITU-T T.30, T.4, and T.38 recommendations Adjustment of multiple fax parameters
Fax over IP

3Com Router 3000 Ethernet Family
Configuration Guide Chapter 1 v2.4x Overview
3Com Corporation
1-7
Attribute Description
E1/T1 voice
E1 port for R2, DSS1, Q.SIG, and digital E&M
signaling
T1 port for DSS1 and Q.SIG subscriber signaling
simultaneous voice data transmission over PRI
interfaces
Voice RADIUS
Local-first authentication
Card number/password flow and calling number
flow
One-stage and two-stage dialing
GK Client
Interacts RAS messages with GK Server as GK
Client, and dynamically resolves called number
to the peer gateway address
Standby GK Server
IPHC PPP-based RTP and TCP header compressions
PPP-based STAC-LZS compression
PPP-based link fragmentation and interleave
Note:
Currently, hot swap of interface cards/fans/power supplies is restricted to the 3Com
Router 6000.

3Com Router 3000 Ethernet Family
Configuration Guide Chapter 2 User Configuration Interface
3Com Corporation
2-1
Chapter 2 User Configuration Interface
2.1 Setting up Configuration Environments
The system supports both local and remote configuration. The following subsections
tell you how to set up the configuration environments.
2.1.1 Setup through the Console Port
Step 1: To set up a local configuration environment, connect the serial port on a PC (or
terminal) to the console port on the router using a standard RS-232 cable, as shown in
Figure 2-1.
Console
cable
RS-232serialport
Console Set up a local configuration environment
PC
Router
Console
cable
RS-232serialport
Console Set up a local configuration environment
PC
Router
Figure 2-1 Set up a local configuration environment through the console port
Step 2: Run the terminal emulation program (Win9X HyperTerminal for example) on the
PC, and set the terminal communication parameters as follows:
Bits per second: 9600
Data bits: 8
Stop bits: 1
Parity: None
Flow control: None
TermType: VT100
See Figure 2-2 through Figure 2-4.

3Com Router 3000 Ethernet Family
Configuration Guide Chapter 2 User Configuration Interface
3Com Corporation
2-2
Figure 2-2 New connection
Figure 2-3 Set the connection port

3Com Router 3000 Ethernet Family
Configuration Guide Chapter 2 User Configuration Interface
3Com Corporation
2-3
Figure 2-4 Set the port communication parameters
Step 3: The router runs Power-On Self-Test (POST), and upon its completion prompts
you to press <Enter> until the command line prompt (such as <3Com>) appears.
Step 4: Enter commands to configure the router or view its running state. Whenever you
need help, enter "?” For more information about the commands, see later chapters.
2.1.2 Setup through Telnet
You may telnet to the router through a LAN or WAN, provided that:
1) This is not the first power-on of the router.
2) You have correctly configured the IP addresses of the interfaces on the router.
3) You have appropriately configured authentication at login and access control
rules.
4) At least a reachable route exists between the console terminal and the router.
Follow these steps to set up a configuration environment:
Step 1: Connect the Ethernet port on the PC to the Ethernet port on the router through
the LAN for a local environment as shown in Figure 2-5 or through the WAN for a
remote environment as shown in Figure 2-6.

3Com Router 3000 Ethernet Family
Configuration Guide Chapter 2 User Configuration Interface
3Com Corporation
2-4
Telnet-enabledPC onwhichthe router is configured
100BASE-TX
Server PC
Ethernet
Workstation
Laptop
Router
Telnet-enabledPC onwhichthe router is configured
100BASE-TX
Server PC
Ethernet
Workstation
Laptop
Router
Figure 2-5 Set up a local configuration environment through the LAN
Localrouter
WAN line
Ethernet
Telnet-enabled localPC
LocalLAN
Router tobeconfigured
Ethernet
Remote LAN
WAN
Server PC
Server
PC
Laptop
Laptop
Workstation
Workstation
Router
Router
Localrouter
WAN line
Ethernet
Telnet-enabled localPC
LocalLAN
Router tobeconfigured
Ethernet
Remote LAN
WAN
Server PC
Server
PC
Laptop
Laptop
Workstation
Workstation
Router
Router
Figure 2-6 Set up a configuration environment through the WAN
Step 2: Run the Telnet program on the PC and set its terminal type to VT100, as shown
in Figure 2-7 and Figure 2-8.
Figure 2-7 Run the Telnet program

3Com Router 3000 Ethernet Family
Configuration Guide Chapter 2 User Configuration Interface
3Com Corporation
2-5
Figure 2-8 Set up a Telnet connection with the Router
Note:
Host Name in Figure 2-8 refers to the host name or IP address of the remote router.
Step 3: Enter the IP address of the router’s Ethernet port on the local PC (or the IP
address of the router’s WAN port on the remote PC) to connect with the Router. If the
authentication succeeds, the system will display the command line prompt (<3Com>
for example). If you see the message "All user interfaces are used, please try later!" try
again later.
Step 4: Enter commands to configure the router or view its running state. Whenever you
need help, enter "?” For more information about the commands, see later chapters.
Note:
When you telnet to the router to configure it, take caution in modifying its IP address, as
such modification may result in disconnection of the Telnet link. If you must make a
modification, enter the new IP address of the router and then try for a new connection.
2.1.3 Setup through the AUX Port
To set up a configuration environment by connecting the AUX port on the router through
modem dial, you need to attach a modem to the serial port on the PC and a modem to
the AUX port on the router, as shown in Figure 2-9.
Step 1: Attach a modem to the AUX port.

3Com Router 3000 Ethernet Family
Configuration Guide Chapter 2 User Configuration Interface
3Com Corporation
2-6
Tel No.12345678
Modem
Workstation
AUX interface PST
N
Router
RS-232
Serialport
Figure 2-9 Set up a remote configuration environment
Step 2: Dial to connect the router remotely by using a terminal emulation program (such
as Windows9X HyperTerminal). In the HyperTerminal, select the RS-232 serial port of
the PC for connection, and set the terminal communication parameters similar to those
used for setting up connection through the console port:
Bits per second: 9600
Data bits: 8
Stop bits: 1
Parity: None
Flow control: None or hardware control
TermType: VT100
See Figure 2-10 and Figure 2-11.
Figure 2-10 Set the number to be dialed

3Com Router 3000 Ethernet Family
Configuration Guide Chapter 2 User Configuration Interface
3Com Corporation
2-7
Figure 2-11 Dial on the remote PC
Step 3: Enter the correct username and password. When you see the command line
prompt (<3Com> for example) in the HyperTerminal configure or manage the router.
2.1.4 Setup through SSH
Secure Shell (SSH) provides high information security and powerful authentication to
protect your router from attacks, such as, IP address spoofing or plain text password
interception. These attacks are likely to happen when users log onto the router from an
insecure remote network. The router can be connected to multiple SSH clients for
setting up connections with routers or UNIX hosts that run SSH Server. The
environment configuration procedures are similar to those of Telnet.
Step 1: To set up a local configuration environment connect the Ethernet port of the PC
to that on the router through the LAN, or construct network layer interconnection
through a Hub or Ethernet switch. To set up a remote configuration environment
connect the PC and the router over the WAN.
Step 2: Configure SSH parameters on the router. For more information, refer to the
section “Terminal Services” in the “System Management” part in V2.4x Configuration
Guide.
Step 3: Run SSH client program on the PC and set the parameters including the IP
address of the remote router, SSH version, and RSA key file. Next establish a
connection to the router for configuration.

3Com Router 3000 Ethernet Family
Configuration Guide Chapter 2 User Configuration Interface
3Com Corporation
2-8
2.2 CLI
The system provides rich configuration commands and the CLI through which users
can configure and manage their routers. The CLI supports:
zLocal and remote configuration through the AUX port.
zLocal configuration through the console port.
zLocal and remote configuration through Telnet and SSH.
zModem dialup to remotely log onto andconfigure the router from its asynchronous
serial port.
zFlexible terminal access approaches, such as dumb terminal and redirect Telnet.
zUser interface view for managing the particular configurations of different terminal
users.
zHierarchical command protection where users can only execute the commands at
their own level or lower levels.
zLocal, password, and AAA authentication modes to safeguard the router against
intrusion.
zEasy access to on-line help by entering “?”
zQuick network test tools such as tracert and ping.
zAbundant debugging information for fault diagnosis.
zTelneting to other routers for management.
zFTP and TFTP services for easy file uploading and downloading.
zSaving and executing commands that have been executed.
zMultiple intelligent command parsing methods (provided by command line
descriptor) such as fuzzy match and context association for convenience of input.
2.2.1 Command Line Views
For hierarchical protection, system commands are divided into four levels:
zVisit: involves commands for network diagnosis (such as ping and tracert),
commands for accessing an external device (such as Telnet client, SSH client,
RLOGIN). Saving the configuration file is not allowed at this level.
zMonitor: includes the display and debugging commands for system maintenance,
and service fault diagnosis. Saving the configuration file isnot allowed at this level.
zSystem: provides service configuration commands, including routing and
commands at each level of the network for providing services.
zManage: influences the basic operation of the system and the system support
modules for service support. Commands at this level involve file system, FTP,
TFTP, configuration file switch, power control, standby board control, user
management, level setting, as well as parameter setting within a system (the last
case involves those non-protocol or non RFC provisioned commands).

3Com Router 3000 Ethernet Family
Configuration Guide Chapter 2 User Configuration Interface
3Com Corporation
2-9
Login users are also classified into four levels that correspond to the four command
levels. After users at different levels log in, they can only use commands at their own
level or lower levels.
To fence off intrusion of illegitimate users, legitimate users are required to provide the
correct super password, if one has been configured using the super password
command, when they switch from a lower level to a higher level. For privacy, the
entered password is not displayed on the screen. Users have three chances to provide
the correct password. Only after the correct password is entered can they switch to the
higher level. Otherwise, the original user level remains unchanged.
The command views are implemented according to configuration requirements which
are related to one other. For example, after logging onto the router you enter user view
where you can only view state and statistic information. In user view, key in
system-view to enter system view where you can key in different configuration
commands to enter their views.
Command lines are associated with the views described in the following table.
Table 2-1 Command views
Category Views
User view ––
System
view ––
Routing
protocol
view
ospf (OSPF view), rip (RIP view), bgp (BGP view), isis (IS-IS view),
and so on.
Interface
view
ethernet (FE), gigabitethernet (GE), serial (serial interface), ce1
(cE1 interface), ce3 (E3 interface), ct1 (cT1 interface), atm (ATM
interface), pos (POS interface), virtual-template (virtual template),
virtual-ethernet (virtual Ethernet interface), loopback (loopback
interface), null (null interface), tunnel (tunnel interface).
User
interface
view ––
L2TP
group view ––
Routing
map view ––
Table 2-2 shows the functionality of each command view and the commands for
entering them.