3Com OfficeConnect Remote 812 User manual

http://www.3com.com/
®
OfficeConnect®Remote 812
ADSL Router
CLI User’s Guide
Release 2.0
Part Number 10043337 AA

ii
3Com Corporation
5400 Bayfront Plaza
Santa Clara, California
95052-8145
Copyright © 2001 3Com Corporation. All rights reserved. No part of this documentation may be reproduced
in any form or by any means or used to make any derivative work (such as translation, transformation, or
adaptation) without written permission from 3Com Corporation.
3Com Corporation reserves the right to revise this documentation and to make changes in content from
time to time without obligation on the part of 3Com Corporation to provide notification of such revision or
change.
3Com Corporation provides this documentation without warranty of any kind, either implied or expressed,
including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose.
3Com may make improvements or changes in the product(s) and/or the program(s) described in this
documentation at any time.
UNITED STATES GOVERNMENT LEGENDS:
If you are a United States government agency, then this documentation and the software described herein
are provided to you subject to the following:
United States Government Legend: All technical data and computer software is commercial in nature
and developed solely at private expense. Software is delivered as Commercial Computer Software as defined
in DFARS 252.227-7014 (June 1995) or as a commercial item as defined in FAR 2.101(a) and as such is
provided with only such rights as are provided in 3Com’s standard commercial license for the Software.
Technical data is provided with limited rights only as provided in DFAR 252.227-7015 (Nov 1995) or FAR
52.227-14 (June 1987), whichever is applicable. You agree not to remove or deface any portion of any
legend provided on any licensed program or documentation contained in, or delivered to you in conjunction
with this User’s Guide.
Unless otherwise indicated, 3Com registered trademarks are registered in the United States and may or may
not be registered in other countries.
3Com, the 3Com logo, and OfficeConnect are registered trademarks of 3Com Corporation. OfficeConnect
Remote 812 is a trademark of 3Com Corporation. 3ComFacts is a service mark of 3Com Corporation.
Artisoft and LANtastic are registered trademarks of Artisoft, Inc. Banyan and VINES are registered
trademarks of Banyan Systems Incorporated. CompuServe is a registered trademark of CompuServe, Inc.
DEC and PATHWORKS are registered trademarks of Digital Equipment Corporation. Intel and Pentium are
registered trademarks of Intel Corporation. AIX, AT, IBM, NetView, and OS/2 are registered trademarks and
Warp is a trademark of International Business Machines Corporation. Microsoft, MS-DOS, Windows, and
Windows NT are registered trademarks of Microsoft Corporation. Novell and NetWare are registered
trademarks of Novell, Inc. PictureTel is a registered trademark of PictureTel Corporation. UNIX is a registered
trademark of X/Open Company, Ltd. in the United States and other countries.
Other brand and product names may be registered trademarks or trademarks of their respective holders.

iii
Table of Contents
1
ACCESSING THE CONFIGURATION INTERFACE
Establishing Communications with the OfficeConnect Remote 812 1 -1
Local Connection 1 -1
IBM-PC Compatible Computers 1 -1
Macintosh Computers 1 -1
UNIX-Based Computers 1 -2
Remote Connection 1 -2
2
CLI COMMAND CONVENTIONS AND TERMINOLOGY
Command Structure 2 -1
Format 2 -1
Parameters 2 -1
Values 2 -1
Names or Strings 2 -2
Network Address Formats 2 -2
Abbreviation and Command Completion 2 -2
Control Characters 2 -2
Help 2 -2
Conventions 2 -3
Command Language Terminology 2 -3
3
CONFIGURATION METHODS
Quick Setup Instructions 3 -1
QuickVC Setup Instructions 3 -1
Manual Setup Instructions 3 -2
4
QUICK SETUP
CLI Quick Setup Script 4 -1
Introduction 4 -1
Restoring the OfficeConnect Remote 812 to an Unconfigured State 4 -1
Booting an OfficeConnect Remote 812 in the Unconfigured State 4 -1
Downgrading the Remote 812 Software to a Previous Version 4 -2

iv
Quick Setup Script Instructions 4 -2
Quick Setup Script 4 -2
Do you want to continue Quick Setup? 4 -2
Password Protection 4 -2
Which portions of the network do you want to configure? 4 -2
Quick Setup Identification Information 4 -3
Quick Setup Management Information 4 -3
TELNET information 4 -4
Quick Setup IP Information 4 -4
Quick Setup IPX Information 4 -5
Quick Setup Bridge Information 4 -6
Sample Identification Information 4 -6
Sample Output Display as Quick Setup Executes 4 -7
5
QUICKVC SETUP
CLI QuickVC Setup Script 5 -1
Introduction 5 -1
Instructions 5 -1
Starting QuickVC Setup 5 -1
ATM Parameters 5 -1
Network Service 5 -2
PPP Parameters 5 -2
IP Configuration (Network Service PPP) 5 -2
IP Configuration (Network Service RFC 1483) 5 -3
IPX Routing (Network Service PPP) 5 -4
IPX Routing (Network Service RFC 1483) 5 -4
Bridging 5 -4
Review 5 -4
Sample Identification Information 5 -5
Sample Output Display as Quick Setup Executes 5 -5
6
MANUAL SETUP
Configuration Overview 6 -1
Remote Site Management 6 -2
Managing a Remote Site 6 -2
Configuring Network Service Information 6 -3
Enabling a Point-to-Point Protocol 6 -4
Configuring ATM Information 6 -4

v
Setting Up a Virtual Private Network (VPN) Tunnel 6 -5
Tunnel Encryption 6 -5
VPN Tunneling Overview 6 -6
Before You Begin 6 -6
Initiating a VPN Tunnel 6 -6
Enabling and Disabling a VPN Tunnel 6 -7
Displaying VPN Tunnel Information 6 -7
Creating a VPN Tunnel Using 812 Default Values 6 -7
Tunnel Commands 6 -8
Creating a VPN Tunnel Using Non-Default Values 6 -9
Encrypting a PPTP or L2TP Tunnel 6 -9
Configuring Authentication and Encryption 6 -10
Configuring Windows 2000 Server to Support CHAP Authentication 6 -10
Configuring Windows 2000 Server to Support Encryption for L2TP Tunnels 6 -11
Configuring a Cisco Router to Support Encryption for L2TP Tunnels 6 -11
Debugging an L2TP Tunnel on a Cisco Router 6 -13
Adding a Framed Route for a VPN Tunnel 6 -14
IP Routing 6 -14
Enabling IP Routing 6 -15
Configuring an IP Network over the LAN 6 -15
Configuring IP RIP on the LAN 6 -16
Configuring IP for the Remote Site Connection 6 -16
Configuring IP RIP for a Remote Site 6 -17
Configuring Static and Framed IP Routes 6 -18
IP Tools 6 -19
Address Translation 6 -19
NAT, PAT, or Super NAT ? 6 -19
set vc <vc name> nat_option 6 -20
Port Address Translation (PAT) 6 -20
Configuring PAT 6 -21
Intelligent PAT 6 -22
Monitoring PAT 6 -23
Network Address Translation (NAT) 6 -23
Configuring NAT 6 -23
Enabling NAT 6 -23
Configuring NAT Static and Dynamic Mappings 6 -24
Monitoring NAT 6 -24
Super Network Address Translation (Super NAT) 6 -24
Configuring Super NAT 6 -24
Monitoring Super NAT 6 -25
Configuring the 812 for SIP Phone Support 6 -26
Overview 6 -26
Using a SIP Phone with the OfficeConnect Remote 812 6 -26
SIP Phone Infrastructure 6 -26
DHCP 6 -27
Configuring the DHCP Mode 6 -27
Configuring the DHCP Server 6 -28
Monitoring the DHCP Server 6 -28

vi
Configuring the DHCP Relay 6 -29
Monitoring the DHCP Relay 6 -29
DNS 6 -29
Configuring DNS 6 -30
DNS Host Entries 6 -30
Managing the DNS Proxy 6 -30
Access Lists 6 -31
IPX Routing 6 -31
Enabling IPX Routing 6 -32
Configuring IPX for the LAN 6 -32
Configuring IPX for Remote Site Connections 6 -32
Configuring IPX Static and Framed Routes 6 -33
Configuring IPX Static and Framed Services 6 -34
Configuring IPX RIP and SAP 6 -35
Bridging 6 -35
Configuring Bridging for the LAN 6 -36
Configuring Bridging for the Remote Site Connections 6 -36
Bridging IP Traffic 6 -36
Advanced Bridging Options 6 -37
MAC-Encapsulated Routing 6 -38
Configuring MAC-Encapsulated Routing 6 -38
Simultaneous Bridging and Routing 6 -38
System Administration 6 -39
Setting Date and Time 6 -39
Setting Date and Time Using Network Time Protocol (NTP) 6 -40
Network Time Protocol CLI Commands 6 -40
Displaying Date, Time, and System Uptime 6 -41
Setting System Identification 6 -42
Configuring Web Browser and TELNET Login Access 6 -42
Providing TFTP Access 6 -42
Setting Password Protection 6 -43
OfficeConnect Remote 812 Filtering Capabilities 6 -44
Data Filtering Overview 6 -44
Filter Classes 6 -45
Filter Types 6 -45
Data Filters 6 -45
Advertisement Filters 6 -45
Generic Filters 6 -46
Creating Filters Overview 6 -46
Creating Filters Using Command Line Interface 6 -46
Filter File Components in CLI 6 -47
Protocol Sections 6 -47
Protocol Rules 6 -47
Generic Filter Rule 6 -49
Applying the Rules Using CLI 6 -49
IP Source and Destination Network Filtering Using CLI 6 -50
IP Source and Destination Port Filtering Using CLI 6 -50
IP Protocol Filtering Using CLI 6 -50

vii
IP RIP Packet Filtering Using CLI 6 -50
IPX Source and Destination Network Filtering Using CLI 6 -51
IPX Source and Destination Host Filtering Using CLI 6 -51
IPX Source and Destination Socket Number Filtering Using CLI 6 -51
IPX RIP Packet Filtering Using CLI 6 -52
IPX SAP Packet Filtering Using CLI 6 -52
Bridge / Generic Filtering Using CLI 6 -52
Step by Step Guide to Creating Filter Files Using CLI 6 -53
Assigning Filters 6 -54
Interface Filters 6 -54
Input Filters 6 -54
Output Filters 6 -54
Input Filters vs. Output Filters 6 -54
VC/Remote Site Filters 6 -55
Applying Filters Using CLI 6 -55
Applying a Filter to an Interface Using CLI 6 -55
Configuring a Filter for a VC/Remote Site Using CLI 6 -55
Configuring Filters for a VPN Tunnel 6 -56
Setting Filter Access Using CLI 6 -56
Managing Filters Using CLI 6 -56
Displaying the Managed Filter List Using CLI 6 -56
Adding Filters to the Managed List Using CLI 6 -56
Removing a Filter from an Interface Using CLI 6 -57
Removing a Filter from a VC/Remote Site Profile Using CLI 6 -57
Deleting a Packet Filter Using CLI 6 -57
Deleting a Tunnel Filter Using CLI 6 -57
Verifying Filter File Syntax Using CLI 6 -57
Showing Filter File Contents Using CLI 6 -57
A
OFFICECONNECT REMOTE 812 SAMPLE CONFIGURATION
Sample Configuration Overview A -1
Configuring the Sample Network A -2
Global Configuration A -2
LAN IP Network Configuration A -2
DHCP and DNS Configuration A -2
LAN IPX Network Configuration A -3
Bridge Configuration A -3
Remote Site: Internet A -3
Remote Site: Corporate Access A -4

viii
B
CLI COMMAND DESCRIPTION
CLI Commands B -1
ADD B -1
add access <ip subnet address> B -1
add auto_filter eth_blk_dst B -1
add auto_filter vc_blk_netbios B -1
add bridge network <network_name> B -1
add dns host <host_name> address <ip_address> B -2
add dns server <domain_name> B -2
add filter <filter_name> B -2
add framed_route vc <name> B -3
add framed_route tunnel <tunnel_name> B -3
add ip defaultroute gateway <ip_address> B -3
add ip network <network_name> B -4
add ip route <ip_net_address> B -4
add ipx network <network_name> B -4
add ipx route <ipx_net_address> B -5
add ipx service [service_name] B -5
add ipx_route vc <name> B -6
add ipx_service vc <name> B -6
add network service <service_name> status B -7
Add network service example B -8
add snmp community <community_name> B -8
add snmp trap_community <name> B -9
add syslog <ip_name_or_addr> loglevel [loglevel] B -9
add tftp client <ip_name_or_addr> B -9
add tunnel <tunnel_ name> B -9
add user [name] password [password] B -10
add vc [name] B -10
ARP B -10
arp <ip_name_or_addr> B -10
DELETE B -10
delete access <ip subnet address> B -10
delete bridge network <network_name> B -10
delete configuration B -10
delete dns host <host_name> B -11
delete dns server <domain_name> B -11
delete filter <filter_name> B -11
delete file <file_name> B -11
delete framed route vc B -11
delete ip network <network_name> B -11
delete ip route <ip_address> B -11
delete ipx network <name> B -11
delete ipx route <ipx_net_address> B -11

ix
delete ipx service <service_name> B -11
delete pat tcp vc <vc_name> B -11
delete pat udp vc <vc_name> B -11
delete nat [dynamic | static ]
vc <vc name> public_pool_start <address> B -12
delete network service <service_name> B -12
delete snmp community <name> B -12
delete snmp trap_community <name> B -12
delete syslog <ip_name_or_address> B -12
delete tftp client <ip_name_or_address> B -12
delete tunnel <tunnel_name> B -12
delete user <name> B -12
delete vc <name> B -12
DIAL B -13
dial <vc_name> B -13
DISABLE B -13
disable access B -13
disable bridge network <name> B -13
disable bridge spanning_tree B -13
disable command password B -13
disable icmp B -13
disable interface <interface_name> B -13
disable ip forwarding B -13
disable ip network <network_name> B -13
disable ip rip B -13
disable ip routing B -13
disable ip static_remote_routes B -13
disable ipx network <network_name> B -13
disable lan access B -14
disable link_traps interface <interface_name> B -14
disable network service <service_name> B -14
disable security_option snmp user_access B -14
disable security_option remote_user administration B -14
disable snmp authentication traps B -14
disable telnet escape B -14
disable tunnel <tunnel_name> B -14
disable user <user_name> B -14
disable vc <user_name> B -14
DO B -14
do <command_inputfile> output [outputfile] B -14
ENABLE B -15
enable access B -15
enable bridge network <network_name> B -15
enable bridge spanning_tree B -15
enable command password <password> B -15
enable interface <interface_name> B -15
enable ip forwarding B -15
enable ip network <network_name> B -15

x
enable ip rip B -15
enable ip routing B -15
enable ipx network <network_name> B -15
enable lan access B -15
enable link_traps interface <interface_name> B -16
enable network service <service _name> B -16
enable security_option remote_user administration B -16
enable security_option snmp user_access B -16
enable snmp authentication traps B -16
enable tunnel <tunnel_name> B -16
enable telnet escape B -16
enable user <user name> B -16
enable vc <vc name> B -16
exit CLI B -16
HANGUP B -16
hangup interface <interface_name> B -16
hangup vc <vc_name> B -17
HELP B -17
help <command> B -17
HISTORY B -17
history B -17
KILL B -17
kill <“process name”>B-17
LIST B -17
list access B -17
list active interfaces B -17
list bridge forwarding B -17
list call events B -18
list call log B -18
list critical events B -18
list dns hosts B -18
list dns servers B -18
list facilities B -18
list filters B -18
list files B -18
list interfaces B -19
list ip addresses B -19
list ip arp B -19
list ip interface_block B -19
list ip networks B -19
list ip routes B -19
list ipx networks B -20
list ipx routes B -20
list ipx services B -20
list lan interfaces B -20
list networks B -20
list processes B -21
list ppp B -21

xi
list services B -21
list snmp communities or list snmp trap_communities B -21
list syslog B -21
list tcp connections B -22
list tftp clients B -22
list udp listeners B -22
list tunnel B -22
list users B -22
list vc B -22
login_required B -22
password B -22
PAUSED COMMANDS B -22
PING B -23
ping <ip_name_or_addr> B -23
QUICKVC B -23
REBOOT B -23
RENAME B -23
rename file <input_file> <output_file> B -23
RESOLVE B -23
resolve name <ip_host_name> B -23
SAVE B -24
save all B -24
SET B -24
set adsl reset B -24
set adsl wire [pair] B -24
set bridge B -24
set bridge firewall [firewall_mode] B -24
set command B -24
set date <date> B -25
set dhcp mode <mode> B -25
set dhcp relay server1 B -25
set dhcp relay server2 B -25
set dhcp server B -26
set dns B -26
set facility <facility_name> loglevel [level] B -27
set ilmi vpi <number> vci <number> B -27
set interface <interface_name> B -27
set ip network <name> B -27
set ip routing B -29
set ipx network <network_name> B -30
set ipx system B -31
set network service <admin_name> B -31
set ppp receive_authentication [ANY | ANY_EXCEPT_MSCHAP | CHAP | MSCHAPV1 | MSCHAPV2
| NONE | PAP] B -32
set tunnel <tunnel_ name>encryption_algorithm [AUTO | MICROSOFT_128BIT | MICROSOFT_40BIT |
MICROSOFT_56BIT | NONE | REQUIRED] B -33
set ppp echo_retries <number> B -33
set snmp community <community_name> B -33

xii
set system B -34
set syslog <ip_address> loglevel [level] B -34
set time <time> B -34
set tunnel <tunnel_name> B -34
set user <user_name> B -35
set vc <vc_name> B -36
set vc <vc_name> atm B -38
SHOW B -39
show access B -39
show atm status B -39
show adsl statistics B -40
show adsl performance B -40
show adsl transceiver_status B -40
show adsl version B -40
show bridge network <name> B -40
show bridge settings B -41
show call_log B -41
show command B -41
show configuration B -42
show critical_event settings B -42
show date B -42
show dhcp client <vc name> status B -42
show dhcp relay B -43
show dhcp server counters B -43
show dhcp server settings B -43
show dns counters B -44
SPECIFIC ERROR COUNTERS B -44
show dns settings B -44
show filter <filter_name> B -44
show icmp counters B -45
ICMP COUNTERS B -45
show interface <interface_name> counters B -46
INPUT COUNTERS B -46
OUTPUT COUNTERS B -46
show interface <interface_name> settings B -46
show ip counters B -47
INPUT COUNTERS B -47
OUTPUT COUNTERS B -47
show ip settings B -47
show ip network <network_name> settings B -47
show ipx counters B -48
INPUT COUNTERS B -48
OUTPUT COUNTERS B -48
show ipx network <network_name> counters B -48
show ipx network <network_name> settings B -49
show ipx rip B -49
show ipx sap B -50
show ipx settings B -50

xiii
show memory B -50
show network <name> settings B -50
show network <name> counters B -50
show ppp on vc <vc_name> counters B -51
show ppp on vc <vc_name> settings B -51
show ppp on interface <name> counters B -51
COUNTERS for PPP BUNDLE 1 B -51
COUNTERS for PPP LINK 1 - 5 B -51
show ppp on interface <name> settings B -51
SETTINGS for PPP BUNDLE 1 B -52
SETTINGS for PPP BUNDLE 1 COMPRESSION
Operational Status - Opened or Not Opened B -52
SETTINGS for PPP LINK 1 - 5 B -52
SETTINGS for PPP LINK 1 - 5 AUTHENTICATION B -53
show ppp settings B -53
show security_option settings B -53
show snmp counters B -53
INPUT COUNTERS B -53
OUTPUT COUNTERS B -54
show snmp settings B -54
show system B -54
show telnet B -55
show tcp counters B -55
TCP COUNTERS B -55
show tcp settings B -55
TCP SETTINGS B -55
show tunnel B -55
show udp B -55
INPUT COUNTERS B -55
OUTPUT COUNTERS B -55
show user <name> settings B -56
show vc <vc_name> settings B -56
TELNET B -56
telnet <ip_name_or_addr> B -56
telnet <ip_name_or_addr> TCP_port <number> B -56
VERIFY B -56
verify filter <filter_name> B -56
TELNET Commands B -56
close B -56
help B -56
send <string> B -56
set_escape <string> B -57
status B -57
CLI Exit Commands B -57
Bye, Exit, Leave, Quit B -57
Logout B -57
Command Features B -57
Command Retrieval B -57

xiv
POSITIONAL HELP B -57
Command Completion B -57
Output Pause B -58
Command Kill B -58
Comments B -58
3COM CORPORATION LIMITED WARRANTY
FCC CLASS A VERIFICATION STATEMENT
FCC CLASS B STATEMENT
FCC DECLARATION OF CONFORMITY

1ACCESSING THE CONFIGURATION
INTERFACE
This chapter explains how to attach to the configuration interface locally via the
console port or remotely via a Telnet session. This chapter also introduces you to
the capabilities and conventions associated with management of your
OfficeConnectâRemote 812.
Establishing
Communications
with the
OfficeConnect
Remote 812
Local Connection If you want to attach locally to the OfficeConnect Remote 812 (also referred to
hereafter as the OCR 812) via the console (serial) port, you will need to connect
the supplied serial cable to the Console Port located on the unit and the Serial Port
on your computer. In addition, you will also need a terminal emulation program
appropriate for your computer. See the following subsections for various
emulation options.
No matter which emulator you use, configure your settings to:
 9600 baud
 8 data bits
 no parity
 1 stop bit
 direct connect
IBM-PC Compatible Computers
Windows Terminal (included with Microsoft Windows) and ProComm Plus are
popular communications packages which support VT100 terminal emulation for
IBM-PC compatible computers. HyperTerminal, bundled with Windows 95, also
provides terminal emulation.
Macintosh Computers
ProComm, MicroPhone, White Knight, Kermit, Red Ryder, VersaTerm and ZTerm (a
shareware application available on the Internet and many online services) are
popular communications programs which carry vt100 terminal emulation service
for Macintosh computers. If you don’t have a communications package or your
program doesn’t support vt100 emulation, ZTerm will function just as well.

1-2 CHAPTER 1: ACCESSING THE CONFIGURATION INTERFACE
UNIX-Based Computers
Kermit, minicom and tip are typical terminal emulation programs for UNIX-based
computers. Depending on the platform you’re using, you may need to modify a
configuration file for vt100 settings.
Remote Connection If you want to attach to the OCR 812 via the LAN or WAN interface of the unit,
you will need to establish a Telnet connection to the unit.
The OCR 812 must have an IP address and an administrative login profile
(username and password) in order to connect to it with Telnet. The IP address and
administrative login profile are automatically created when the unit is initially
configured using the IP Wizard or in DHCP Smart Mode. The default username is
'root' and the default password is '!root'. Refer to the OCR 812 ADSL Router
Installation Guide for information on the IP Wizard or DHCP Smart Mode
initialization. Alternatively, the IP address and administrative login profile can be
created with CLI using the QuickSetup program or using individual commands.
From Windows 95, you can go to the DOS Window and run:
telnet <ip_address>
This will bring up the login prompt for the unit. Once you have successfully logged
in, the Command Line Interface presentation is the same as if you were locally
attached.
When you want to terminate your Telnet session, type quit at the CLI prompt.
Ch

2CLI COMMAND CONVENTIONS AND
TERMINOLOGY
This chapter describes the command syntax, conventions and terminology used
within the Command Line Interface. Reviewing and understanding this chapter is
essential for you to understand subsequent chapters.
Command
Structure
Format Commands can be followed by values and/or parameters and values. For example:
add ip network <network_name>
address [ip_addr]
{ interface [eth:1] }
 add ip network is the command
 <network_name> is the (required) value for the command
 address is a required parameter
 [ip_addr] is the value for the IP address parameter which you must provide
 interface is only required if you want to override the default value, which is
eth:1
Parameters
 are order independent
 {…}parameters enclosed by curly braces are required, and are provided with
default values. You do not need to specify these parameters unless you wish to
override the default.
Values
 <…>required values for a command or parameter are enclosed by arrows.
 […] range of values following parameters are enclosed in brackets. Inside the
brackets, if you see a:
 | (vertical bar) you may select only one of the displayed choices:
[FIRST | SECOND | THIRD]
 ,(comma) you can select one or more of the displayed choices:
[FIRST,SECOND,THIRD,...]

2-2 CHAPTER 2: CLI COMMAND CONVENTIONS AND TERMINOLOGY
 The type of value you enter must match the type requested. Numbers are
either decimal or hexadecimal. Text can be either a string that you create, or it
may be a list of options you must choose from. When choosing an option, type
the text of the option exactly.
Names or Strings
 “Double quotation marks”set off user-defined strings. If you want white space
or special characters in a string, it must be enclosed by “double quotation
marks”.
Network Address Formats
Many commands require a network address, to define a link to a remote host,
workstation or network. Network addresses are shown in this document using the
syntax described in the following table:
Abbreviation and
Command
Completion
 Commands can be abbreviated if arguments you write are unique.
For example, you can type se vc jay pa bird, short for: set vc jay password
bird is acceptable, but se vc jay i 222.111.111.111 isn’t unique because ican
stand for ip, ip_routing, or ip_source_validation.
 As a convention, some commands illustrated in this manual are abbreviated
and annotated as such (abbr.) for brevity.
Also, some parameters are omitted in examples because they default to
standard values and do not require entry, or are unnecessary for common
configuration. See the CLI Reference section for more details.
 Command completion finishes spelling a unique, abbreviated parameter for
you just by pressing the key. It’s handy when you’re in a hurry or uncertain
about a command. For example, if you type add ip n[ESC], it will spell out the
keyword network without losing your place in the command syntax.
Control Characters  Commands can be retrieved by typing <ctrl>p [^p] (for previous) and <ctrl>n
[^n] (for next). Command retrieval consults the history of previous fully entered
commands, defaulting at the last ten commands.
 If an error occurs while a command is processing, any partial command (up to
and including the field in error) is added to the history list.
 The current command can be killed by pressing <ctrl>c [^ c].
 A partially completed command line can be reprinted - a useful function if, due
to interrupted output, you’re unsure what the OCR 812 has “seen”up to now
- by pressing <ctrl>l [^ l] (for last).
Help Help is general or positional. Type help <any command> to get a cursory list of
associated commands and its syntax. Type <any command>? to get more
extensive, positional help for a particular field.
Address Type Format Range
IP_address a.b.c.d 0.0.0.0 to 255.255.255.255
(decimal)
ip_net_address a.b.c.d/mask 255.255.255.255/A,B,C,H
mac_address xx:xx:xx:xx:xx:xx hexadecimal digit pairs

Command Structure 2-3
Help is most useful during configuration: query the list of possible parameters by
typing ?and, when you find the value you need, type it without losing your place
in the argument. Just be sure to leave a space between the keyword and the
question mark.
Conventions  Most commands are not case sensitive. As a rule, only <name> and [password]
values require typing the correct case.
 Configuration changes occur immediately but are lost on reboot unless you
save them. The save all command places configuration changes in FLASH
ROM (permanent memory). The changes are lost if not saved to FLASH ROM or
if power is lost before you can save them.
 Commands to delete a network user, interface, route, TCP connection,
community name, network service and others cannot take place unless the
process or function has first been disabled.
 Wherever an IP address value is required, you can enter a host name provided
you have configured a DNS server or put the name and address into the DNS
Local Host table.
 Elements like vc’s and users must be disabled before changes to these
elements can be implemented.
Command Language
Terminology
The CLI command language creates, manages, displays and removes system
entities. These entities describe system and network connections and processes.
Most of the managed entities in the system are slotted in tables. Some common
examples are:
 Network - defines local and remote networks, network connections, hosts
and routers
 VC - A table of parameters that describes connection parameters associated
with a remote site. These parameters are used when establishing a network
connection over the WAN.
 User - A table of parameters that describes connection parameters associated
with Telnet users that wish to attach and remotely manage the unit.
 Filter - can be applied to interfaces, connections, and users to control access
through the system
 Interface - describes physical devices; for example, ports
 Syslog Host - receives system messages
 DNS Server - translates IP addresses to and from host names
 Route - describes a path through the network to another system or network
Table entries are created with an add command, and removed with a delete
command. The add command specifies the most important parameters of the
entry. Additional parameters are usually specified with the set command, which is
also used to change configured parameters.
The list command displays table entries. For example, list users displays all
defined administrative login profiles. The show command displays detailed
information about a specific table entry. For example, show user root displays
detailed information for the administrative login profile root.