Nortel SMC 2450 Operating manual

Secure Multimedia Controller
Command Reference
Document Number: NN10300-091
Document Release: Standard 1.00
Date: May 2006
Year Publish FCC TM
Copyright © 2006 Nortel Networks. All rights reserved.
Produced in Canada
The information in this document is subject to change without notice. The statements, configurations, technical
data, and recommendations in this document are believed to be accurate and reliable, but are presented
without express or implied warranty. Users must take full responsibility for their applications of any products
specified in this document. The information in this document is proprietary to Nortel Networks.
Nortel, Nortel (Logo), the Globemark, SL-1, Meridian 1, and Succession are trademarks of Nortel Networks.
Title page

Page 3 of 126
Secure Multimedia Controller Command Reference
4
Revision history
May 2006
Standard 1.00. This document is a new NTP. It was created to support the
Secure Multimedia Controller 2450.

Page 4 of 126 Revision history
NN10300-091 Standard 1.00 May 2006

Page 5 of 124
Secure Multimedia Controller Command Reference
8
Contents
About this document . . . . . . . . . . . . . . . . . . . . . . . 9
Subject .. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Applicable systems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Intended audience . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Conventions .. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Related information .. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
How to get help . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Getting help from the Nortel web site .. . . . . . . . . . . . . . . . . . . . . . . . . 13
Getting help over the telephone from a Nortel
Solutions Center . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Getting help from a specialist by using an Express Routing Code . . . . 14
Getting help through a Nortel distributor or reseller .. . . . . . . . . . . . . . 14
Main menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Information menu . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Info_host menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Information_net menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Route Information menu .. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
VRRP Information menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Administration Information menu .. . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Statistics Information menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26

Page 6 of 124 Contents
NN10300-091 Standard 1.00 May 2006
Configuration menu . . . . . . . . . . . . . . . . . . . . . . . . 29
System menu .. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
Date and Time menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
DNS Servers menu .. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
Cluster menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
Access List menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39
Administrative Applications menu . . . . . . . . . . . . . . . . . . . . . . . . . 41
Platform Logging menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60
User menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68
Network Configuration menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72
Port menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74
Interface menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74
Routes menu .. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77
VRRP Settings menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77
Proxy ARP menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
Multimedia Security menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81
Security Zone menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83
Inbound Access menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85
Flow Control menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86
Outbound Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87
SMC Settings menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
UNIStim Security menu .. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100
SMC Network menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110
Service menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 112
Boot menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113
Software Management menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114
Software Patches menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115
Maintenance menu . . . . . . . . . . . . . . . . . . . . . . . . . 117
Tech Support Dump menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 118
UNIStim Flow Maintenance menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . 118
UNIStim Connection Rate menu . . . . . . . . . . . . . . . . . . . . . . . . . . . 119
UNIStim Packet Rate menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 120
UNIStim Bandwidth Rate menu . . . . . . . . . . . . . . . . . . . . . . . . . . . 120

Page 7 of 124
Secure Multimedia Controller Command Reference
Appendix A: Selected firewall attacks . . . . . . . . . . 121
SYN flooding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121
Source routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121
Mime flood . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121
FTP bounce . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 122
IP unaligned timestamp .. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 122
Sequence number prediction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 122
Sequence number out of range . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 122
ICMP redirect . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 122
IP spoofing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123
Ping of death . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123
Land attacks .. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123
IP reassembly . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123
Appendix B: Firewall limits . . . . . . . . . . . . . . . . . . 125

Page 8 of 124 Contents
NN10300-091 Standard 1.00 May 2006

Page 9 of 126
Secure Multimedia Controller Command Reference
12
About this document
This document is a global document. Contact your system supplier or your
Nortel representative to verify that the hardware and software described are
supported in your area.
Subject
This document describes Secure Multimedia Controller (SMC) 2450 system
architecture, software and hardware requirements, components, and network
connections.
Note legacy products and releases
This Nortel Technical Publication (NTP) contains information about systems,
components, and features that are compatible with Nortel Communication
Server 1000 Release 4.5 and
Nortel Multimedia Communication Server 5100 software. For more
information about legacy products and releases, click the
Technical Documentation link under Support & Training on the Nortel
home page:
www.nortel.com
Applicable systems
This document applies to the following systems:
• Communication Server 1000E (CS 1000E)
• Communication Server 1000S (CS 1000S)
• Communication Server 1000M Chassis (CS 1000M Chassis)

Page 10 of 126 About this document
NN10300-091 Standard 1.00 May 2006
• Communication Server 1000M Cabinet (CS 1000M Cabinet)
• Communication Server 1000M Half Group (CS 1000M HG)
• Communication Server 1000M Single Group (CS 1000M SG)
• Communication Server 1000M Multi Group (CS 1000M MG)
• Multimedia Communication Server 5100 Server Micro System (V100)
• Multimedia Communication Server 5100 Server Simplex System (V100)
• Multimedia Communication Server 5100 Server Redundant System
(V100)
• Multimedia Communication Server 5100 Server Large System (N240)
For more information, see the following:
•Communication Server 1000S: Upgrade Procedures (553-3031-258)
•Communication Server 1000E: Upgrade Procedures (553-3041-258)
Intended audience
This document is intended for individuals responsible for installation,
configuration, administration, and maintenance of the SMC 2450.
Conventions
Terminology
In this document, the following systems are referred to generically as system:
• Communication Server 1000E (CS 1000E)
• Communication Server 1000S (CS 1000S)
• Communication Server 1000M (CS 1000M)
•Meridian1
The following systems are referred to generically as Small System:
• Communication Server 1000M Chassis (CS 1000M Chassis)
• Communication Server 1000M Cabinet (CS 1000M Cabinet)

About this document Page 11 of 126
Secure Multimedia Controller Command Reference
• Meridian 1 PBX 11C Chassis
• Meridian 1 PBX 11C Cabinet
The following systems are referred to generically as Large System:
• Communication Server 1000M Half Group (CS 1000M HG)
• Communication Server 1000M Single Group (CS 1000M SG)
• Communication Server 1000M Multi Group (CS 1000M MG)
• Meridian 1 PBX 51C
• Meridian 1 PBX 61C
• Meridian 1 PBX 61C CP PII
•Meridian1PBX81
• Meridian 1 PBX 81C
• Meridian 1 PBX 81C CP PII
Related information
This section lists information sources that relate to this document.
NTPs
The following NTPs are referenced in this document:
•Secure Multimedia Controller: Implemention guide (553-3001-225)
•Secure Multimedia Controller: Planning and engineering guide
(NN42320-200)
Online
To access Nortel documentation online, click the Technical Documentation
link under Support & Training on the Nortel home page:
www.nortel.com

Page 12 of 126 About this document
NN10300-091 Standard 1.00 May 2006
CD-ROM
To obtain Nortel documentation on CD-ROM, contact your Nortel customer
representative.

Page 13 of 126
Secure Multimedia Controller Command Reference
14
How to get help
This chapter explains how to get help for Nortel products and services.
Getting help from the Nortel web site
The best way to get technical support for Nortel products is from the Nortel
Technical Support web site:
www.nortel.com/support
This site provides quick access to software, documentation, bulletins, and
tools to address issues with Nortel products. From this site, you can:
• download software, documentation, and product bulletins
• search the Technical Support web site and the Nortel Knowledge Base
for answers to technical issues
• sign up for automatic notification of new software and documentation for
Nortel equipment
• open and manage technical support cases
Getting help over the telephone from a Nortel
Solutions Center
If you do not find the information you require on the Nortel Technical
Support web site, and you have a Nortel support contract, you can also get
help over the telephone from a Nortel Solutions Center.
In North America, call 1-800-4NORTEL (1-800-466-7835).

Page 14 of 126 How to get help
NN10300-091 Standard 1.00 May 2006
Outside North America, go to the following web site to obtain the telephone
number for your region:
www.nortel.com/callus
Getting help from a specialist by using an Express Routing
Code
To access some Nortel Technical Solutions Centers, you can use an Express
Routing Code (ERC) to quickly route your call to a specialist in your Nortel
product or service. To locate the ERC for your product or service, go to:
www.nortel.com/erc
Getting help through a Nortel distributor or reseller
If you purchased a service contract for your Nortel product from a distributor
or authorized reseller, contact the technical support staff for that distributor
or reseller.

Page 15 of 126
Secure Multimedia Controller Command Reference
18
Main menu
After you complete the initial Secure Multimedia Controller (SMC) system
setup and perform a successful connection and logon, the Main menu of the
command line interface (CLI) appears.
For more information about the CLI and how to use it, see Secure Multimedia
Controller: Implemention guide (553-3001-225).
Table 1 identifies and describes the Main menu commands.
Table 1
Main menu commands
Command Description
info Displays information about the current status of the SMCs. For menu
items, see “Information menu” on page 19.
cfg Displays the Configuration menu, which you can use to configure the
SMCs. Some commands in the Configuration menu are available for only
the administrator user account. For menu items, see “Configuration
menu” on page 29.
boot Displays the Boot menu, which you can use to upgrade the SMC
software and reboot, if necessary. Only the administrator user account
can access the Boot menu. For menu items, see “Boot menu” on
page 113.
maint Displays the Maintenance menu, which you can use to send dump files
and log details to the servers. For menu items, see “Maintenance menu”
on page 117.

Page 16 of 126 Main menu
NN10300-091 Standard 1.00 May 2006
diff Displays the pending configuration changes. Only pending changes
made during your current administrator session are included. Pending
changes made by other CLI or browser-based interface (BBI)
administrator sessions are not included.
validate Validates pending configuration changes made during your current
administration session. This command does not include pending
changes made by other CLI or BBI administrator sessions.
When you enter the Validate command, your pending changes are
validated to ensure that they are complete and consistent. If problems
exist, warning or error messages are displayed.
•Warnings identify conditions that require special attention, but that do
not cause errors or prevent the configuration when you enter the
Apply command.
•Errors identify serious configuration problems that you must correct
before you apply the changes. Uncorrected errors cause the Apply
command to fail.
If the Validate command returns warning or error messages, heed the
messages and make any necessary configuration changes.
security Lists the status (enabled or disabled) for remote management features
such as Telnet, SSH, and BBI. The Security command also displays a list
of users still using default passwords that should be changed.
Table 1
Main menu commands
Command Description

Main menu Page 17 of 126
Secure Multimedia Controller Command Reference
apply Applies and saves configuration changes made during your current
administration session. Changes are considered pending and do not take
effect until you issue the Apply command. Pending changes made by
other CLI or BBI administrator sessions are not affected.
When issued, the Apply command first validates your session’s pending
changes. If problems exist, applicable warning and error messages are
displayed.
•Warnings identify conditions that require special attention, but that do
not cause errors or prevent the configuration when you enter the
Apply command.
•Errors identify serious configuration problems that you must correct
before you apply the changes. Uncorrected errors cause the Apply
command to fail.
If no errors exist, the changes are saved and put into effect.
If multiple CLI or BBI administrators apply changes to the same set of
parameters concurrently, the latest applied changes take precedence.
revert Cancels all pending configuration changes made during your current
administration session. The revert command does not affect:
• applied changes
• pending changes made by other CLI or BBI sessions
Table 1
Main menu commands
Command Description

Page 18 of 126 Main menu
NN10300-091 Standard 1.00 May 2006
paste [<global key
import password>]
Restores a saved configuration dump file that includes encrypted private
keys.
When you create a configuration dump using the Dump command, you
create a password to decrypt the private keys. When you enter the Paste
command, you are prompted to supply the password. The password
phrase remains in effect until cleared.
Note: To clear the password phrase, enter the Paste command again.
You can then open the configuration dump file in your text editor, copy the
information, and paste it to the CLI window. After you paste the
information, the SMC batch processes the configuration content. The
pasted configuration enters as a pending configuration, and any included
private keys are decrypted. You can use the global Diff command to view
the pending configuration changes. To apply the pending configuration
changes, use the global Apply command.
help
[<menu command>]
Provides brief information about the specified command. When used
without a parameter, the Help command displays a list of global
commands.
exit Logs off the current session and exits the CLI. Pending changes made
during your current session are lost if not applied. This command does
not affect other open CLI or BBI sessions.
Table 1
Main menu commands
Command Description

Page 19 of 126
Secure Multimedia Controller Command Reference
28
Information menu
The Information menu (/info) provides access to information about the
current status of the SMC.
Table 2 identifies and describes the Information menu commands.
Table 2
Information menu (/info)
Command Description
summary Displays runtime information for the host SMC. The runtime information
includes the host IP address, the host type, whether the host owns the
cluster Management IP (MIP) address, CPU usage, memory usage, and
operational status.
clu Displays runtime information for all SMCs in the cluster. The runtime
information includes:
•CPUusage
• hard disk usage
• status of important applications such as Web server, SNMP, and
Internet server
• secure UNIStim proxy and firewall information

Page 20 of 126 Information menu
NN10300-091 Standard 1.00 May 2006
host Displays runtime information for the specified SMC host. The runtime
information includes:
•CPUusage
• hard disk usage
• status of important applications such as Web server, SNMP, and
Internet server
• secure UNIStim proxy and firewall information
For menu items, see “Info_host menu” on page 22.
net Displays the current network configuration. This information is the same
information that the /cfg/net/cur command provides. For menu items, see
“Information_net menu” on page 23.
admin Provides access to administration menu items, such as accesslist, Telnet,
SSH, Web, and UPS configurations. For menu items, see “Administration
Information menu” on page 25.
log Displays configuration and UNIStim log archiving information, including
the e-mail address to which the SMC can send the log files upon log
rotation.
stats Displays the Statistics menu. For menu items, see “Statistics Information
menu” on page 26.
ethereal Displays the text-based interface of ethereal, which provides information
about the traffic log. It also can dump the output to the console, a USB
memory stick, or a remote device using the ftp/sftp/scp/tftp command.
sensor Displays the current status of hardware parameters such as temperature
and fan rotation per minute (RPM) status.
The sensor module generates alarm events when the fan RPM values
reach the critical level or when the temperature reaches the maximum
level.
Table 2
Information menu (/info)
Command Description