3Com 5000/6000 User manual

Copyright © 2006, 2007 3Com Corporation. All rights reserved.
www.3Com.com
Part Number: 10016467 Rev. AA
Published: October 2007
3COM ROUTER 5000/6000 FAMILY
QUICK REFERENCE GUIDE
Overview
This Command Reference applies to the following Router 5000/6000 models running software version 3.0.
About the Command Line Interface
To use and navigate the command line interface of your unit, please refer to the following points for assistance:
■When initially accessing the command line interface, press Enter when prompted. The User View menu for the unit
displays. This is indicated by the chevron brackets around the name of the unit at the prompt, for example,
<router5000-xx> (where xx is either EI or SI).
■When in the System View menu, square brackets appear around the name of the unit at the prompt, for example,
[router5000-xx].
■You must be in the System View menu to access the configurable CLI commands.
■Some commands can be entered directly at any prompt from anywhere in the interface.
■If you enter part of a command followed by a ? (with no space between), the CLI will show you all the commands
that begin in that way.
■The term ‘view’ may be used interchangeably with the term ‘menu’.
■The undo command is placed before the command you wish to undo, for example, undo setauthentication password.
■<CTRL-A> places the cursor back to the start of the command line.
■Enter the first few characters of a command and press TAB to enter the full command without having to input the
entire command (where there is only one command that starts with the entered characters).
■Use the Up Arrow key at the prompt to repeat the previous command string.
■Use the Delete key to delete the character after the cursor; the Backspace key deletes the character before the cursor.
■When entering physical port numbers, Enter the port number as x/0/z, where x is the unit number and z is the
physical port number.
Router 5012 (3C13701)
Router 5232 (3C13751)
Router 5642 (3C13755)
Router 5682 (3C13701)
Router 6040 (3C13840)
Router 6080 (3C13880)

23Com Router 5000/6000 Family
Command Reference
Displaying Command Parameters
At the prompt, enter the name of the command followed by a space and ?. For example:
<router5000-xx>boot ?
The following parameters are displayed:
attribute-switch Exchange the file main-attribute and backup-attribute.
boot-loader Select a file to boot at the next time
bootrom Update Bootrom
web-package Set web resource package
To specify boot loader, enter the command as follows:
<router5000-xx>boot boot-loader ?
You only need to enter ? if parameters exist for the command.
Displaying Parent Menus
At the prompt, enter quit.
Displaying the User View Menu
Press <CTRL-Z>.
Obtaining Help
At the prompt, enter ?.
Further Information
For further information about how to use the command line interface, refer to the Command Reference Guide and
the Configuration Guide, which are both available as PDF documents on the CD that accompanied the unit.
Commands
l2tp-auto-client enable
Use the l2tp-auto-client enable command to enable the LAC client to set up L2TP tunnel. Virtual Template Interface view
l2tp enable
Use the l2tp enable command to enable the L2TP function. System view
l2tp-group
Use the l2tp-group command to create an L2TP group. System view
l2tpmoreexam enable
Use the l2tpmoreexam enable command to enable the multi-instance function of L2TP. System view
l2vpn-family
Use the l2vpn-family command to create or enter an L2VPN address family view. BGP view
aaa-client
Use the aaa-client command to enter Voice AAA view. Voice view

3Com Router 5000/6000 Family 3
Command Reference
abr-summary
Use the abr-summary command to configure the route aggregation on the area border router (ABR). OSPF Area view
access-limit
Use the access-limit command to configure a limit to the amount of supplicants in the current ISP domain. ISP Domain view
acl-reflect timeout
Use the acl-reflect timeout command to set the global aging time of reflexive ACLs. System view
acl
Use the acl command to create an access control list and enter ACL view. System View
acl
Use the acl command to reference an ACL to control call-in and call-out of VTY (Telnet and SSH) users. User Interface view
accounting
Use the accounting command to configure an accounting scheme for the current ISP domain. ISP Domain view
accounting
Use the accounting command to set the IP address, port number and shared key for the primary and
secondary RADIUS accounting servers. RADIUS Scheme view
accounting
Use the accounting command to set the IP address, port number and shared key for the primary and
secondary RADIUS accounting servers. RADIUS Scheme view
accounting
Use the accounting command to set the IP address, port number and shared key for the primary and
secondary TACACS+ accounting servers. TACACS+ view
accounting commands
Use the accounting commands command to enable the system to start per-command accounting for
terminal users logged into the user interface. User Interface view
accounting domain
Use the accounting domain command to enable DHCP server accounting for addresses from the global
DHCP address pools and configure a domain for DHCP accounting. DHCP Address Pool view
accounting-on
Use the accounting-on enable command to enable the user re-authentication at reboot function. RADIUS view
accounting optional
Use the accounting optional command to enable optional accounting. ISP Domain view
RADIUS view
activate
Use the activate command to activate the ADSL interface. ATM (ADSL) Interface view
activate
Use the activate command to enable the G.SHDSL interface. ATM (G.SHDSL) Interface view
activation-key
Use the activation-key command to define a shortcut key or key combination for starting a terminal
session. User Interface view
address
Use the address command to configure the voice routing policy to the peer voice gateway. Voice Entity view

43Com Router 5000/6000 Family
Command Reference
address
Use the address command to configure a route to the peer voice gateway or assign an X.121 address for
a destination host. Voice Entity view
address sip
Use the address sip command to set routing policy for reaching the remote voice gateway (VG) to SIP. Voice Entity view
adsl standard
Use the adsl standard command to set the standard applied to the ADSL interface. ATM (ADSL) Interface view
adsl tx_attenuation
Use the adsl tx_attenuation command to set attenuation value for ADSL transmit power. ATM (ADSL) Interface view
adv-factor
Use the adv-factor command to configure the advantage factor which is used to count Mos and ICPIF
value in a jitter voice test. HWPing Test Group view
aggregate
Use the aggregate command to establish an aggregated record in the BGP routing table. BGP view
aggregate
Use the aggregate command to create a multicast aggregated record in the BGP routing table.
Use the aggregate command without parameters to create one local aggregated route and set atomic
aggregation attributes. IPv4 Multicast Subaddress Family view
aging-time
Usetheaging-time commandtoconfigure SYN status waitingtimeoutvalueandFINstatuswaitingtimeout
value of TCP, session entry idle timeout value of TCP and UDP. ASPF Policy view
ah authentication-algorithm
Use the ah authentication-algorithm command to set the authentication algorithm adopted by
Authentication Header protocol in IPSec proposal.
Use the undo ah authentication-algorithm command to restore the default setting. IPSec Proposal view
ahdsl annex
Use the shdsl annex command to configure annex standard at an SHDSL interface. You cannot activate a
link with different standard types at its two ends. ATM (G.SHDSL) Interface view
alarm (CT3 Interface)
Use the alarm command to enable the CT3 interface to detect/send alarm signals. CT3 Interface view
alarm-threshold
Usethe alarm-threshold commandto configure the alarmthresholds on the CT1/PRIinterfaceasneeded.
CT1/PRI Interface view
algorithm-suite
Use the algorithm-suite command to specify the algorithm suite used when a client registers. Dvpn-Class view
allow l2tp
Use the allow l2tp command to specify the name of the peer end of the tunnel on receiving call and the
Virtual-Template it uses. L2TP Group view
annexg
Use the annexg command to enable T1.617 Annext G on the frame relay interface for data transmission. DLCI view
ani
Use the ani command to enable or disable the terminating point to send the calling party information
(service category and calling number) to the originating point during call connecting process. R2 CAS view

3Com Router 5000/6000 Family 5
Command Reference
ani-offset
Use the ani-offset command to configure the number of digits of the called number to be collected prior
to requesting the calling party information. R2 CAS view
answer
Use the answer command to configure whether the terminating point is required to send answer signal. R2 CAS view
apply access-vpn vpn-instance
Use the apply access-vpn vpn-instance command to specify to search private network forwarding routes
in vpn-name1, vpn-name2, vpn-name3, vpn-name4, vpn-name5, vpn-name6 (if they all
exist) and forward packets after policy routing is enabled to satisfy route-policy. Route-Policy view
apply as-path
Use the apply as-path command to specify the AS numbers to be added in front of the original AS path in
route-policy. Routing Policy view
apply community
Use the apply community command to set BGP community attributes in route-policy. Routing Policy view
apply cost
Use the apply cost command to set the route cost value of route information. Routing Policy view
apply cost-type
Use the apply cost-type command to set the route cost type of route information. Routing Policy view
apply default output-interface
Use the apply default output-interface command to set default forwarding interface for packets. Route-Policy view
apply ip-address
Use the apply ip-address command to set the next hop address of route information. Routing Policy view
apply ip-address default next-hop
Use the apply ip-address default next-hop command to set the default next hop of a packet. Route-Policy view
apply ip-address next-hop (for Multicast Policy Routing)
Use the apply ip-address command to configure the next hop IP address list in a route-node. Route-Policy view
apply ip-address next-hop (for Unicast Policy Routing)
Use the apply ip-address next-hop command to set the packet next hop. Route-Policy view
apply ip-dscp
Use the apply ip-dscp command to configure to modify the packet DSCP value matching the policy. Route-Policy view
apply ip-precedence
Use the apply ip-precedence command to set precedence of IP packets. Route-Policy view
apply isis
Use the apply isis command to apply the level of a matched route to be redistributed to Level-1, Level-2
or Level-1-2. Routing Policy view
apply local-preference
Use the apply local-preference command to apply the local preference of route information. Routing Policy view
apply mpls-label
Use the apply mpls-label command to assign MPLS labels for public network routes that match
route-policy filter conditions. Route-Policy view

63Com Router 5000/6000 Family
Command Reference
apply origin
Use the apply origin command to set the routing source of BGP routing information. Routing Policy view
apply output-interface (for Multicast Policy Routing)
Use the apply output-interface command to configure an outgoing interface list in a route-node. Route-Policy view
apply output-interface (for Unicast Policy Routing)
Use the apply output-interface command to set a packet forwarding interface. Route-Policy view
apply policy outbound
Use the apply policy outbound command to set the frame relay virtual circuit queuing to CBQ
(Class-Based Queuing). Frame Relay Class view
apply tag
Use the apply tag command to set the tag area of OSPF route information. Routing Policy view
area
Use the area command to enter OSPF area view. OSPF view
OSPF Area view
area
Use the area command to configure the type of busy tone detection for FXO voice subscriber-line. Voice Subscriber-line view
area-authentication-mode
Use the area-authentication-mode command to configure IS-IS to authenticate the received Level-1
routing information packets (LSP, CSNP and PSNP), according to the pre-defined mode and password. IS-IS view
area-id (Voice Entity view)
Use the area-id command to configure the area ID of voice GW. Voice Entity view
area-id (Voice GK Client view)
Use the area-id command to configure the H.323 gateway area ID. Voice GK Client view
arp check enable
Use the arp check enable command to enable ARP entry check to have the device not learn the ARP
entries with broadcast MAC addresses. System view
arp-proxy enable
Use the arp-proxy enable command to enable proxy ARP on an interface. Ethernet interface view
arp security
Use the arp security command to disable dynamic ARP learning on an Ethernet interface. Ethernet Interface view
arp security time-out
Use the arp security time-out command to configure the aging time of the authorized ARP entries. Ethernet Interface view
arp send-gratuitous-arp
Use the arp send-gratuitous-arp command to enable sending gratuitous ARP packet on this interface
periodically and set the sending period. Bridge Template view
Ethernet Interface view
Ethernet Subinterface view
Gigabit Ethernet Interface view
Gigabit Ethernet Subinterface view
Virtual Ethernet interface view
VLAN Interface view
arp static
Use the arp static command to configure ARP mapping table. System view

3Com Router 5000/6000 Family 7
Command Reference
arp timer aging
Use the arp timer aging command to set the aging timer for dynamic ARP entries. System view
asbr-summary
Use the asbr-summary command to configure summarization of redistributed routes by OSPF. OSPF view
ascii
Use the ascii command to set the type of the transmitted data to ASCII. FTP Client view
aspf-policy
Use the aspf-policy command to define an ASPF policy. For a defined policy, the policy can be invoked
through its policy number. System view
async mode
Use the async mode command to set the operating mode of the asynchronous serial interface.
Asynchronous Serial Interface view
AUX Interface view
AM Interface view
async mode padpos
Use the async mode padpos command to configure a POSPAD access port. Asynchronous Serial Interface view
AUX Interface view
async mode pos
Use the async mode pos pos-number command to create a POS access port in nontransparent
transmission and permanent TCP connection mode. Asynchronous Serial Interface view
AM Interface view
FCM Interface view
AUX Interface view
async mode posapp
Use the async mode posapp command to configure the interface to operate in POS application mode.
Asynchronous Serial Interface view
AUX Interface view
atm-class
Use the atm-class command to apply a set of parameters (which are defined in ATM-Class) to an ATM
interface or a PVC. Interface view
PVC view
atm class
Use the atm class command to create an ATM-Class and enter the ATM-Class view. System view
atm-ctt
Use the atm-ctt command to set all interfaces on a board to transparent transmission. ATM Interface view
atm-link check
Use the atm-link check command to have the protocol state of the ATM P2P subinterface changes
depending on whether the physical interface is up and whether a PVC is configured on the subinterface.
ATM P2P Subinterface view
authentication
Use the authentication command to configure an authentication scheme for the current ISP domain. ISP Domain view
authentication
Use the authentication command to set the IP address, port number and shared key for the primary and
secondary RADIUS authentication servers. RADIUS Scheme view
authentication
Use the authentication command to set the IP address, port number and shared key for the primary and
secondary TACACS+ authentication servers. TACACS+ view

83Com Router 5000/6000 Family
Command Reference
authentication
Use the authentication command to enable user authentication and authorization for the access service
number. Voice Access-Number view
authentication
Use the authentication command to set the IP address, port number and shared key for the primary and
secondary TACACS+ authentication servers. TACACS+ view
authentication-algorithm
Use the authentication-algorithm command to select the authentication algorithm for an IKE proposal. IKE Proposal view
authentication-client method
Use the authentication-client method command tospecify how the DVPNserver that applies the DVPN
policy authenticates clients. None, CHAP, and PAP are currently available. Dvpn-Policy view
authentication-did
Use the authentication-did command to enable authentication for all one-stage dial (direct dial) users. Voice AAA view
authentication-method
Use the authentication-method command to select the authentication method used by an IKE proposal. IKE Proposal view
authentication-mode
Use the authentication-mode command to set the authentication mode at login.
Use the authentication-mode none command to set the authentication mode to none, that is, no
authentication at login. User Interface view
authentication-mode
Use the authentication-mode command to configure one area of OSPF to support the authentication
attribute. OSPF Area view
authentication-server method
Use the authentication-server method command to specify a client whether or not to authenticates the
DVPN server it accesses. Dvpn-Class view
authentication super hwtacacs-scheme
Use the authentication super hwtacacs-scheme command to configure super authentication scheme for
a domain. ISP Domain view
authorization
Use the authorization command to configure an authorization scheme for the current ISP domain. ISP Domain view
authorization
Use the authorization command to set the IP address, port number and shared key for the primary and
secondary TACACS+ authorization servers. TACACS+ view
authorization-level
Use the authorization-level command to configure a local caller authorization level for the voice entity. Voice Entity view
auto-config
Use the auto-config command to implement the auto-config operation. System view
auto-config enable
Use the auto-config enable command to enable auto-config.System view
auto-execute command
Use the auto-execute command command to set a command to be automatically executed. User Interface view

3Com Router 5000/6000 Family 9
Command Reference
balance
Use the balance command to configure the number of routes participating in BGP load balancing. BGP view
band-based-sharing
Use the band-based-sharing command to enable bandwidth-based unbalanced load sharing. System view
baudrate
Use the baudrate command to set the baud rate of a serial interface. Serial Interface view
bert
Use the bert command to set test error bit for line Bit. CE3 interface view
bert (CT1/PRI Interface)
Use the bert command to start a BERT test on the CT1/PRI interface. CT1/PRI Interface view
bert (CT3 Interface)
Use the bert command to start a BERT test on the CT3 interface. CT3 Interface view
bgp
Use the bgp command to enable BGP and enter the BGP view. System view
This command is used to enable and disable BGP as well as to specify the local AS number of BGP.
bims boot request
Use the bims boot request command to enable the BIMS device to access the branch intelligent
management system (BIMS) center at startup. System view
bims device-id string
Use the bims device-id command to configure the unique identifier of the BIMS device at the BIMS center. System view
bims enable
Use the bims enable command to enable BIMS. System view
bims interval
Usethebims interval commandtoconfigure the interval for accessing the BIMS center. When theinterval
is set to 0, the BIMS device does not access the BIMS center regularly. System view
bims ip address
Use the bims ip address command to configure the IP address and port number of the BIMS center. System view
bims request
Use the bims request command to have the BIMS device access the BIMS center. System view
bims-server
Use the bims-server command to enable and configure BIMS option for a global address pool on the
DHCP server. Global DHCP Address Pool view
bims sharekey
Use the bims sharekey command to configure the shared key between the BIMS device and the BIMS
center. System view
bims source ip-address
Use the bims source ip-address command to specify a source IP address for the packets sent by the
BIMS device. It can be the IP address of a port on the router. System view
bims specify-time
Use the bims specify-time command to configure the BIMS device to access the BIMS center at the
specified time and if desired, configure the device to access the BIMS center at regular intervals from then
on during a specified period. System view

10 3Com Router 5000/6000 Family
Command Reference
binary
Use the binary command to set data type to binary for file transfer. FTP Client view
boot bootrom
Use the boot bootrom command to upgrade BootRom. System view
boot bootrom
Use the boot bootrom command to upgrade BootRom. System view
bootfile backup
Use the bootfile backup command to specify the backup boot file. System view
bootfile dir
Use the bootfile dir command to view information about all the boot files in the Flash, including file type,
date, time, file size, and file name. System view
bootfile main
Use the bootfile main command to specify the main boot file. System view
bridge aging-time
Use the bridge aging-time command to configure the aging time of the dynamic address table. System view
bridge bridge-set enable
Use the bridge bridge-set enable command to enable the specified bridge set. System view
bridge bridging
Use the bridge bridging command to enable the bridging function of a network layer protocol on a
specified bridge set. System view
bridge enable
Use the bridge enable command to enable the bridging function. System view
bridge learning
Use the bridge learning command to enable forwarding by dynamic address table. System view
bridge mac-address
Use the bridge mac-address command to manually configure a static address table entry of bridge. System view
bridge routing
Use the bridge routing command to enable the routing function of a specified bridge-set for the specified
network protocol. System view
bridge routing-enable
Use the bridge routing-enable command to enable the routing function of the bridge. System view
bridge-set
Use the bridge set command to add an interface to a bridge set. Interface view
Bridge Template view
bridge-set (Ethernet Interface view)
Use the bridge-set (in the Ethernet Interface view) command to add the Ethernet interface into the
bridge. Ethernet Interface view
bridge set (Synchronous Serial Interface view)
Use the bridge-set (in Synchronous serial interface system view) command to add the
synchronous serial interface encapsulated into SDLC into the bridge group. Synchronous Serial Interface view