Nortel 3050 Operating manual

Nortel VPN Gateway
Command Reference
Release: 7.0
Document Revision: 01.01
www.nortel.com
NN46120-103 216369-E
.

Nortel VPN Gateway
Release: 7.0
Publication: NN46120-103
Document status: Standard
Document release date: 10 September 2007
Copyright © 2007 Nortel Networks
All Rights Reserved.
The information in this document is subject to change without notice. The statements, configurations, technical
data, and recommendations in this document are believed to be accurate and reliable, but are presented without
express or implied warranty. Users must take full responsibility for their applications of any products specified in this
document. The information in this document is proprietary to Nortel Networks.
*Nortel, Nortel Networks, the Nortel logo and the Globemark are trademarks of Nortel Networks.
Export
This product, software and related technology is subject to U.S. export control and may be subject to export or
import regulations in other countries. Purchaser must strictly comply with all such laws and regulations. A license to
export or reexport may be required by the U.S. Department of Commerce.
Licensing
This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (
http://www.openssl.org/)
This product includes cryptographic software written by Eric Young ([email protected]).
This product includes software written by Tim Hudson ([email protected]).
This product includes software developed by the Apache Software Foundation (http://www.apache.org/).
This product includes a TAP-Win32 driver derived from the CIPE-Win32 kernel driver, Copyright © Damion K.
Wilson, and is licensed under the GPL.
See Appendix D, "License Information", in the User’s Guide for more information.
.

3
.
Contents
Preface 5
Who Should Use This Book 6
Related Documentation 7
Product Names 8
Typographic Conventions 9
How to Get Help 10
Getting help from Nortel Web site 10
Getting help over the phone from a Nortel Solutions Center 10
Getting help from a specialist by using an Express Routing Code 10
Getting help through a Nortel distributor or reseller 10
Command Reference 11
Menu Basics 12
Global Commands 13
CommandLine History and Editing 16
Command Line Interface Shortcuts 18
Variables 22
The Main Menu 25
/info Information Menu 26
/stats Statistics Menu 42
/cfg Configuration Menu 81
/cfg/ vpn #/syslog Syslog VPN configuration 419
/boot Boot Menu 468
/maint Maintenance Menu 472
/maint/logLogging system configuration 477
/maint/log/ in-memoryInternal memory configuration 477
CLI Dumps 479
Index 495
Nortel VPN Gateway
Command Reference
NN46120-103 01.01 Standard
10 September 2007
Copyright © 2007 Nortel Networks
.

4
Nortel VPN Gateway
Command Reference
NN46120-103 01.01 Standard
10 September 2007
Copyright © 2007 Nortel Networks
.

5
.
Preface
This Command Reference lists all the CLI commands available in the
Nortel VPN Gateway (NVG) software. The software supports both SSL
Acceleration and VPN.
Nortel VPN Gateway
Command Reference
NN46120-103 01.01 Standard
10 September 2007
Copyright © 2007 Nortel Networks
.

6Preface
Who Should Use This Book
This Command Reference is intended for network installers and system
administrators engaged in configuring and maintaining a network. It
assumes that you are familiar with Ethernet concepts and IP addressing.
Nortel VPN Gateway
Command Reference
NN46120-103 01.01 Standard
10 September 2007
Copyright © 2007 Nortel Networks
.

Licensing 7
Related Documentation
For full documentation on installing, configuring and using the many
features of the SSL VPN, see the following manuals:
•VPN Gateway 7.0 User’s Guide
(part number 216368-F September 2007)
Describes the initial setup procedure, upgrades, operator user
management, certificate management, troubleshooting and other
general operations that apply to both SSL Acceleration and VPN.
•VPN Gateway 7.0 Command Reference Guide
(part number 216369-E September 2007)
Describes each command line in detail. The commands are listed per
menu according to the order listed in the Command Line Interface
(CLI).
•VPN Gateway 7.0 Application Guide for SSL Acceleration
(part number 216370-D April 2006)
Provides examples on how to configure SSL Acceleration through the
CLI.
•VPN Gateway 7.0 CLI Application Guide for VPN
(part number 216371-E September 2007)
Provides examples on how to configure VPN deployment through the
CLI.
•VPN Gateway 7.0 BBI Application Guide for VPN
(part number 217239-D, September 2007)
Provides examples on how to configure VPN deployment through the
BBI (Browser-Based Management Interface).
•VPN Gateway 7.0 VPN Administrator’s Guide
(part number 217238-D, September 2007)
VPN management guide intended for end-customers in a Secure
Service Partitioning configuration.
•VPN Gateway 3050/3070 Hardware Installation Guide
(part number 216213-B, March 2005)
Describes installation of the VPN Gateway 3050 and 3070 hardware
models.
•VPN Gateway 7.0 Release Notes
(part number 216372-P, September 2007)
Lists new features available in version 7.0 and provides up-to-date
product information.
The preceding manuals are available for download (see “How to Get
Help” (page 10)).
Nortel VPN Gateway
Command Reference
NN46120-103 01.01 Standard
10 September 2007
Copyright © 2007 Nortel Networks
.

8Preface
Product Names
The software described in this manual runs on several different hardware
models. Whenever the terms Nortel VPN Gateway,VPN Gateway or NVG
are used in the documentation, the following hardware models are implied:
•Nortel VPN Gateway 3050 (NVG 3050)
•Nortel VPN Gateway 3070 (NVG 3070)
•Nortel SSL VPN Module 1000 (SVM 1000)
The integrated SSL Accelerator (SSL processor) on the Nortel 2424-SSL
switch Similarly, all references to the old product name iSD-SSL or iSD
in commands or screen outputs should be interpreted as applying to the
preceding hardware models.
Note: Manufacturing of the Nortel SSL Accelerator (formerly Alteon
SSL Accelerator) has been discontinued.
Nortel VPN Gateway
Command Reference
NN46120-103 01.01 Standard
10 September 2007
Copyright © 2007 Nortel Networks
.

Licensing 9
Typographic Conventions
The following table describes the typographic styles used in this book.
Table 1
Typographic Conventions
Typeface or
Symbol Meaning Example
AaBbCc123 This type is used for names
of commands, files, and
directories used within the
text.
View the readme.txt file.
It also depicts on-screen
computer output and
prompts.
Main#
AaBbCc123 This bold type appears in
command examples. It
shows text that must be
typed in exactly as shown.
Main# sys
<AaBbCc123> This italicized type appears
in command examples as
a parameter placeholder.
Replace the indicated text
with the appropriate real
name or value when using
the command. Do not type
the brackets.
To establish a Telnet
session, enter: host#
telnet <IP address>
This also shows book titles,
special terms, or words to
be emphasized.
Read your User’s Guide
thoroughly.
[ ] Command items shown
inside brackets are optional
and can be used or
excluded as the situation
demands. Do not type the
brackets.
host# ls[-a]
Nortel VPN Gateway
Command Reference
NN46120-103 01.01 Standard
10 September 2007
Copyright © 2007 Nortel Networks
.

10 Preface
How to Get Help
This section explains how to get help for Nortel products and services.
Getting help from Nortel Web site
The best way to get technical support for Nortel products is from the Nortel
Technical Support Web site: www.nortel.com/support
This site provides quick access to software, documentation, bulletins, and
tools to address issues with Nortel products. From this site, you can:
•download software, documentation, and product bulletins for answers
to technical issues
•sign up for automatic notification of new software and documentation
for Nortel equipment
•open and manage technical support cases
Getting help over the phone from a Nortel Solutions Center
If you do not find the information you require on the Nortel Technical
Support web site, and have a Nortel support contract, you can also get
help over the phone from a Nortel Solutions Center.
In North America, call 1-800-4NORTEL (1-800-466-7835). Outside North
America, go to the following web site to obtain the phone number for your
region: www.nortel.com/callus
Getting help from a specialist by using an Express Routing Code
An Express Routing Code (ERC) is available for many Nortel products and
services. When you use an ERC, your call is routed to a technical support
person who specializes in supporting that product or service. To locate the
ERC for your product or service, go to:www.nortel.com/erc
Getting help through a Nortel distributor or reseller
If you purchased a service contract for your Nortel product from a
distributor or authorized reseller, contact the technical support staff for that
distributor or reseller.
Nortel VPN Gateway
Command Reference
NN46120-103 01.01 Standard
10 September 2007
Copyright © 2007 Nortel Networks
.