Zte ZXR10 ZSR User manual

ZXR10ZSRV2
IntelligentIntegratedMulti-ServiceRouter
CongurationGuide(SystemManagement)
Version:2.00.10
ZTECORPORATION
No.55,Hi-techRoadSouth,ShenZhen,P .R.China
Postcode:518057
Tel:[phone]
Fax:[phone]
URL:http://ensupport.zte.com.cn
E-mail:[email protected]

LEGALINFORMATION
Copyright©2013ZTECORPORATION.
Thecontentsofthisdocumentareprotectedbycopyrightlawsandinternationaltreaties.Anyreproductionor
distributionofthisdocumentoranyportionofthisdocument,inanyformbyanymeans,withoutthepriorwritten
consentofZTECORPORATIONisprohibited.Additionally,thecontentsofthisdocumentareprotectedby
contractualcondentialityobligations.
Allcompany,brandandproductnamesaretradeorservicemarks,orregisteredtradeorservicemarks,ofZTE
CORPORATIONoroftheirrespectiveowners.
Thisdocumentisprovided“asis”,andallexpress,implied,orstatutorywarranties,representationsorconditions
aredisclaimed,includingwithoutlimitationanyimpliedwarrantyofmerchantability,tnessforaparticularpurpose,
titleornon-infringement.ZTECORPORATIONanditslicensorsshallnotbeliablefordamagesresultingfromthe
useoforrelianceontheinformationcontainedherein.
ZTECORPORATIONoritslicensorsmayhavecurrentorpendingintellectualpropertyrightsorapplications
coveringthesubjectmatterofthisdocument.ExceptasexpresslyprovidedinanywrittenlicensebetweenZTE
CORPORATIONanditslicensee,theuserofthisdocumentshallnotacquireanylicensetothesubjectmatter
herein.
ZTECORPORATIONreservestherighttoupgradeormaketechnicalchangetothisproductwithoutfurthernotice.
UsersmayvisitZTEtechnicalsupportwebsitehttp://ensupport.zte.com.cntoinquirerelatedinformation.
TheultimaterighttointerpretthisproductresidesinZTECORPORATION.
RevisionHistory
RevisionNo.RevisionDateRevisionReason
R1.02014-05-10Firstedition
SerialNumber:SJ-20140504150128-007
PublishingDate:2014-05-10(R1.0)
SJ-20140504150128-007|2014-05-10(R1.0)ZTEProprietaryandCondential

Contents
AboutThisManual.........................................................................................I
Chapter1DeviceConnectionmanagement............................................1-1
1.1ConnectingtheZXR10ZSRV2System...............................................................1-1
1.2ConguringConsolePortConnection..................................................................1-2
1.3ConguringTelnetConnection............................................................................1-2
1.4ConguringSSHConnection...............................................................................1-6
1.5FTPConnectionConguration..........................................................................1-10
1.5.1ConguringtheZXR10ZSRV2asanFTPServer....................................1-10
1.5.2ConguringtheZXR10ZSRV2asanFTPClient.....................................1-12
1.6ConguringTFTPConnection...........................................................................1-15
1.7SFTPConnectionCongration..........................................................................1-17
1.7.1ConguringtheZXR10ZSRV2asanSFTPServer.................................1-17
1.7.2ConguringtheZXR10ZSRV2asanSFTPClient...................................1-18
Chapter2FileSystemManagement.........................................................2-1
2.1FileSystemOverview.........................................................................................2-1
2.2ConguringFileSystemManagement.................................................................2-2
2.3FileSystemManagementCongurationExamples...............................................2-3
2.3.1FileSystemCongurationExample...........................................................2-3
2.3.2CongurationExampleofBackingUpaCongurationFileonaUSB
FlashDrive.............................................................................................2-4
Chapter3MIMConguration....................................................................3-1
3.1MIMOverview....................................................................................................3-1
3.2ConguringMIM.................................................................................................3-1
Chapter4UserManagement.....................................................................4-1
4.1UserManagementOverview...............................................................................4-1
4.2ConguringUserManagement............................................................................4-2
4.3UserManagementCongurationExamples.........................................................4-7
4.3.1LocalAuthenticationandAuthorizationUserCongurationExample............4-7
4.3.2RADIUS-LOCALAuthenticationandAuthorizationUserConguration
Example.................................................................................................4-8
4.3.3TACACS+AuthenticationandAuthorizationUserConguration
Example...............................................................................................4-10
4.3.4ConguringaPasswordPromptQuestionforResettingaPassword...........4-11
I
SJ-20140504150128-007|2014-05-10(R1.0)ZTEProprietaryandCondential

4.3.5ConguringOAMSecurityManagement..................................................4-13
4.3.6ConguringaPasswordValidityPeriod....................................................4-15
4.3.7ConguringFirst-LoginPasswordModication........................................4-17
4.3.8RelationsBetweenRaisingPrivilegeLevelsandtheEnableCommand......4-18
Chapter5CommandPrivilegeLevelClassication................................5-1
5.1CommandPrivilegeLevelOverview....................................................................5-1
5.2ConguringCommandPrivilege.........................................................................5-1
5.3CommandPrivilegeLevelCongurationExample.................................................5-2
Chapter6SNMPConguration.................................................................6-1
6.1SNMPBasicConguration..................................................................................6-1
6.1.1SNMPOverview.......................................................................................6-1
6.1.2ConguringSNMP....................................................................................6-1
6.1.3SNMPCongurationExample...................................................................6-6
6.2SNMPAnti-ViolenceAttack...............................................................................6-10
6.2.1SNMPAnti–BruteForceAttackOverview.................................................6-10
6.2.2ConguringSNMPAnti–BruteForceAttack..............................................6-11
6.2.3SNMPAnti–BruteForceAttackCongurationExample.............................6-13
Chapter7AlarmManagementConguration..........................................7-1
7.1AlarmOverview..................................................................................................7-1
7.2ConguringtheAlarmFunction...........................................................................7-2
7.3AlarmFunctionCongurationExample................................................................7-7
Chapter8SYSLOGConguration............................................................8-1
8.1SysLogOverview...............................................................................................8-1
8.2ConguringSyslog.............................................................................................8-1
8.3SyslogCongurationExample............................................................................8-2
Chapter9RMONConguration................................................................9-1
9.1RMONOverview................................................................................................9-1
9.2ConguringRMON.............................................................................................9-1
9.3RMONCongurationExample............................................................................9-3
Chapter10ClockandClockSynchronization.......................................10-1
10.1NTPConguration..........................................................................................10-1
10.1.1NTPOverview......................................................................................10-1
10.1.2ConguringNTP...................................................................................10-2
10.1.3NTPCongurationExamples................................................................10-4
10.2PhysicalPOSInterfaceClockConguratio.......................................................10-6
10.2.1PhysicalPOSInterfaceClock................................................................10-6
II
SJ-20140504150128-007|2014-05-10(R1.0)ZTEProprietaryandCondential

10.2.2ConguringaPhysicalPOSInterfaceClock...........................................10-7
10.2.3PhysicalPOS-InterfaceClockCongurationInstance.............................10-7
Chapter11PerformanceStatistics.........................................................11-1
11.1PerformanceManagementOverview................................................................11-1
11.2PerformanceManagementConguration..........................................................11-1
11.3PerformanceManagementCongurationExample............................................11-3
Chapter12NetFlowConguration.........................................................12-1
12.1NetFlowOverview..........................................................................................12-1
12.2ConguringNetFlow.......................................................................................12-3
12.3NetFlowCongurationExamples.....................................................................12-9
12.3.1NetFlowV5CongurationExample.......................................................12-9
12.3.2NetFlowV8CongurationExample......................................................12-11
12.3.3NetFlowV9CongurationExample......................................................12-12
Chapter13SQAConguration................................................................13-1
13.1SQAOverview...............................................................................................13-1
13.2ConguringSQA............................................................................................13-1
13.3SQACongurationExamples..........................................................................13-4
13.3.1ICMP-TypeSQACongurationExample................................................13-4
13.3.2FTP-TypeSQACongurationExample..................................................13-5
13.3.3TCP-TypeSQACongurationExample..................................................13-6
13.3.4UDP-TypeSQACongurationExample.................................................13-8
13.3.5DNS-TypeSQACongurationExample.................................................13-9
Chapter14LLDPConguration..............................................................14-1
14.1LLDPOverview..............................................................................................14-1
14.2ConguringLLDP...........................................................................................14-3
14.3LLDPCongurationExamples.........................................................................14-5
14.3.1LLDPNeighborCongurationExample..................................................14-5
14.3.2LLDPAttributeCongurationExample...................................................14-6
Chapter15NetworkLayerDetection......................................................15-1
15.1ConguringICMPFastResponse....................................................................15-1
15.2ConguringIPSourceRouteOptionProcessing...............................................15-4
15.3ConguringICMPUnreachablePacketFunction..............................................15-6
15.4EnablinganInterfacetoSendICMPUnreachablePackets...............................15-7
15.5ConguringIPPing.........................................................................................15-9
15.6ConguringIPTrace......................................................................................15-12
15.7ConguringLSPPing....................................................................................15-15
III
SJ-20140504150128-007|2014-05-10(R1.0)ZTEProprietaryandCondential

15.8ConguringLSPTrace...................................................................................15-21
15.9ConguringMulticastPing..............................................................................15-26
15.10ConguringMulticastTrace..........................................................................15-30
15.11ConguringMACPing..................................................................................15-32
15.12ConguringMACTrace................................................................................15-34
15.13IPPerformanceMaintenance.......................................................................15-37
Figures.............................................................................................................I
Glossary.........................................................................................................V
IV
SJ-20140504150128-007|2014-05-10(R1.0)ZTEProprietaryandCondential

AboutThisManual
Purpose
Thismanualdescribesfunctionalprinciples,congurationcommandsandexamples
relatedtoZXR10ZSRV2systemmanagement.
IntendedAudience
Thismanualisintendedforthefollowingengineers:
lNetworkplanningengineers
lCommissioningengineers
lMaintainingengineers
WhatIsinThisManual
Thismanualcontainsthefollowingcontents:
ChapterSummary
1,DeviceConnection
Management
Describesseveralmodes(includingthroughaConsoleport,
TELNET,SSH,FTP,TFTPandSFTP)andcongurationcommands
toconnecttoZXR10ZSRV2.
2,FileSystemManagementDescribesoperationalcommandsforthelesystemofthedevice.
3,MIMCongurationDescribesMIMprinciples,congurationcommandsand
congurationexamples.
4,UserManagementDescribesusermanagementprinciple,congurationcommandsand
congurationexamples.
5,CommandPrivilegeLevel
Classication
Describesuserandcommandprivilegelevelclassicationprinciple,
congurationcommandsandcongurationexample.
6,SNMPCongurationDescribesSNMPprinciples,congurationcommandsand
congurationexamples.
7,AlarmManagement
Conguration
Describesalarmmanagementprinciple,congurationcommands
andcongurationexample.
8,SYSLOGCongurationDescribesSYSLOGprinciple,congurationcommandsand
congurationexample.
9,RMONCongurationDescribesRMONprinciple,congurationcommandsand
congurationexample.
10,ClockandClock
Synchronization
Describesclockandclocksynchronizationprinciples,conguration
commandsandcongurationexamples.
I
SJ-20140504150128-007|2014-05-10(R1.0)ZTEProprietaryandCondential

ChapterSummary
11,PerformanceStatisticsDescribesperformancestatisticsprinciple,congurationcommands
andcongurationexample.
12,NetFlowCongurationDescribesNetFlowprinciple,congurationcommandsand
congurationexamples.
13,SQACongurationDescribesSQAprinciple,congurationcommandsandconguration
examples.
14,LLDPCongurationDescribesLLDPprinciples,congurationcommandsand
congurationexamples.
15,NetworkLayerDetectionDescribestheprinciples,congurationcommands,andconguration
examplesofthenetworklayerdetection.
Conventions
Thismanualusesthefollowingtypographicalconventions:
TypefaceMeaning
ItalicsVariablesincommands.Itmayalsorefertootherrelatedmanualsanddocuments.
BoldMenus,menuoptions,functionnames,inputelds,optionbuttonnames,checkboxes,
drop-downlists,dialogboxnames,windownames,parameters,andcommands.
Constant
width
Textthatyoutype,programcodes,lenames,directorynames,andfunctionnames.
[]Optionalparameters.
|Separatesindividualparameterinseriesofparameters.
Warning:indicatesapotentiallyhazardoussituation.Failuretocomplycanresultin
seriousinjury,equipmentdamage,orinterruptionofmajorservices.
Caution:indicatesapotentiallyhazardoussituation.Failuretocomplycanresultin
moderateinjury,equipmentdamage,orinterruptionofminorservices.
Note:providesadditionalinformationaboutacertaintopic.
II
SJ-20140504150128-007|2014-05-10(R1.0)ZTEProprietaryandCondential

Chapter1
DeviceConnection
management
TableofContents
ConnectingtheZXR10ZSRV2System.....................................................................1-1
ConguringConsolePortConnection.........................................................................1-2
ConguringTelnetConnection....................................................................................1-2
ConguringSSHConnection......................................................................................1-6
FTPConnectionConguration.................................................................................1-10
ConguringTFTPConnection..................................................................................1-15
SFTPConnectionCongration.................................................................................1-17
1.1ConnectingtheZXR10ZSRV2System
TheZXR10ZSRV2providesmultiplecongurationmodes,seeFigure1-1.
Figure1-1ZXR10ZSRV2CongurationModes
Userscanusedifferentcongurationmodesfordifferentnetworktypes.Theconguration
modesaredescribedbelow:
lConsoleportmode:Thisistheprimarycongurationmodeusedbyusers.
lTelecommunicationNetworkProtocol(TELNET)/SecureShell(SSH)mode:Users
canusethismodetoconguretheZXR10ZSRV2atanyaccessibleplaceofa
network.
1-1
SJ-20140504150128-007|2014-05-10(R1.0)ZTEProprietaryandCondential

ZXR10ZSRV2CongurationGuide(SystemManagement)
lTrivialFileTransferProtocol(TFTP)/FileTransferProtocol(FTP)mode:Users
canusethismodetodownload/uploadroutercongurationles,andupdaterouter
congurations.
1.2ConguringConsolePortConnection
ThisproceduredescribeshowtoconnecttotheZXR10ZSRV2throughtheConsoleport.
Steps
1.CongureaHyperterminal.
ForhowtocongureaHyperterminal,refertothe"ConguringtheDeviceThrougha
ConsolePort"sectionintheZXR10M6000InitialCongurationGuide.
2.(Optional)Inthecongurationmode,runtheloginauthenticationcommandtoenable
theConsoleportconnectionauthenticationfunction.
Caution!
TheConsoleportconnectionauthenticationfunctioncanbeenabledonlyaftera
usernameandpasswordarecongured.Iftheusernameandpasswordarenot
conguredproperly,afterthefunctionisenabled,youcannotentertheZXR10>CLI
whenyouconnectthedevicenexttime.
ThefollowingexampleshowshowtoenableConsoleportauthentication.
ZXR10(config)#loginauthentication
Warning:
Pleasemakesurelocalorremoteauthenticationiscorrectlyconfigured.
Areyousuretoconfigureconsoleauthentication?[yes/no]:y
ZXR10(config)#
/*EnablestheConsoleportconnectionauthenticationfunction.*/
Forhowtocongureausernameandpasswordusedinserialportauthentication,
referto4.2ConguringUserManagement.
–EndofSteps–
1.3ConguringTelnetConnection
ThisproceduredescribeshowtoconnecttotheZXR10ZSRV2throughTelnet.
Prerequisite
Thelocalterminalcanaccesstheremoterouternetwork.
1-2
SJ-20140504150128-007|2014-05-10(R1.0)ZTEProprietaryandCondential

Chapter1DeviceConnectionmanagement
Context
Telnetisusedforconguringroutersremotely.T opreventillegalusersfromaccessingthe
routerthroughTelnet,ausernameandpasswordhavetobesetontherouterforTelnet
accessing.Onlytheuserwhohasthepresetusernameandpasswordcanaccessthe
router.ForhowtocongureausernameandpasswordontheZXR10ZSRV2forTelnet
login,referto4.2ConguringUserManagement.
Steps
1.ConnecttotheZXR10ZSRV2throughTelnet.
AssumethattheIPaddressofaremoterouteris192.168.3.1andthatthelocal
terminal(conguredwiththeWindowsXPoperatingsystem,forexample)canaccess
theremoterouternetwork.Theoperationsonthelocalterminalareasfollows:
a.StarttheRunprogramonthelocalterminal,andenterthetelnet192.168.3.1
command,seeFigure1-2.
Figure1-2RunDialogBox
b.ClickOK.
Thefollowinginformationisdisplayed:
************************************************************
WelcometoZXR10IntelligentIntegratedMulti-ServiceRouter
ofZTECorporation
************************************************************
Loginat:19:46:3703-24-2014
Username:who
Password:
ZXR10>enable18
Password:
ZXR10#
c.Enterausernameandapasswordaccordingtotheprompt.Then,youcanlogin
totheremoterouter.
2.CongureaT elnetconnection.
1-3
SJ-20140504150128-007|2014-05-10(R1.0)ZTEProprietaryandCondential

ZXR10ZSRV2CongurationGuide(SystemManagement)
OntheZXR10ZSRV2,runthefollowingcommandstocongureoptionalT elnet
parameters:
CommandFunction
ZXR10(config)#lineconsoleidle-timeout<idle-time>Conguresthemaximumidle
timeoutperiodoftheserialport.
Unit:minute,range:0–1000,
default:30.
ZXR10(config)#lineconsoleabsolute-timeout<absolute-time>Conguresthemaximumonline
timeoutperiodoftheserialport.
Unit:minute,range:0–10000,
default:1440.
ZXR10(config)#linetelnetidle-timeout<idle-time>Conguresthemaximumidle
timeoutperiodofTelnet.Unit:
minute,range:0–1000,default:
120.
ZXR10(config)#linetelnetabsolute-timeout<absolute-time>Conguresthemaximumonline
timeoutperiodofTelnet.Unit:
minute,range:0–10000,default:
1440.
ZXR10(config)#linetelnetaccess-class{ipv4|ipv6}<acl-name>Conguresthenameofan
AccessControlList(ACL)bound
toTelnet.
ZXR10(config)#linetelnetmax-link<max-number>Conguresthemaximum
numberofTelnetlinks.Range:
1–15,default:15.
ZXR10#terminallength<length>Congurestheterminalwindow
height.Unit:line,range:0–24.
ZXR10#linetelnetdscp<dscp-value>SpeciestheDSCPvalueof
controlplanepacketsforthe
IPv4/IPv6Telnetserver.Range:
0–63,default:48.
ZXR10#telnet{<dest-address>[{[<source-address
>],[<port-number>],[{vrf<vrf-name>|dcn}],[dscp
<dscp-value>]}]|<domain-name>[{[<port-number>],[vrf
<vrf-name>],[dscp<dscp-value>]}]}
Enablesthisroutertologintoan
IPv4Telnetserverasaclient.
<domain-name>:domainname
(Range:1–128characters).
ZXR10#telnet6{<dest-address>[{[interface<interface-na
me>],[vrf<vrf-name>],[<port-number>],[dscp<dscp-value
>]}]|<domain-name>[{[vrf<vrf-name>],[<port-number>],[dscp
<dscp-value>]}]}
Enablesthisroutertologintoan
IPv6Telnetserverasaclient.
1-4
SJ-20140504150128-007|2014-05-10(R1.0)ZTEProprietaryandCondential

Chapter1DeviceConnectionmanagement
CommandFunction
ZXR10(config)#linetelnetserverenable[listen
{<23>|<49152-65535>}]
Allowsterminalstologinto
thisrouterinTelnetmode,and
allowsthespecicationofaport
number.
3.(Optional)RunthetelnetcommandontheZXR10ZSRV2tologintoanotherdevice
throughthelocalclient.
Fortheformatofthetelnetcommand,refertothefollowingtable:
CommandFunction
ZXR10#telnet{<dest-ipaddress>[vrf<vrf-name>][<
source-ipaddress>][<port-number>]|<domainname>[vrf<vrf-n
ame>][<port-number>]}
Conguresthisrouterasaclient
tologintoanotherdevice.
<port-number>:TransferControl
Protocol(TCP)portnumber
(range:0–65535).
4.Verifythecongurations.
CommandFunction
ZXR10#showterminalDisplaysinformationonthe
currentterminal.
ZXR10#showhistoryDisplaysthelasttenhistory
commands.
ZXR10#showusersDisplaystheloginuser
information.
ZXR10#whoDisplaystheloginuser
information.
5.MaintainT elnetconnections.
CommandFunction
ZXR10(config)#linetelnetserverdisableForbidsterminalsfromloggingin
tothisrouterinT elnetmode.
ZXR10#clearlinevty<vty-number>Forcesthevtyusertologout.
<vty-number>:speciesthe
terminalnumber(range:0–14).
–EndofSteps–
Example
ThefollowingprovidesaT elnetconnectioncongurationexample.
1-5
SJ-20140504150128-007|2014-05-10(R1.0)ZTEProprietaryandCondential

ZXR10ZSRV2CongurationGuide(SystemManagement)
lCongurationDescription
ItisrequiredtoconnectaPCtoR1throughTelnet,seeFigure1-3.
Figure1-3TelnetConnectionCongurationExample
lCongurationFlow
1.ConnectaPCtoR1.
2.CongureT elnetonR1.
3.CongureanACLonR1tolterTCPconnections.
lCongurationCommands
RunthefollowingcommandsonR1:
R1(config)#linetelnetidle-timeout120
R1(config)#linetelnetabsolute-timeout1440
R1(config)#linetelnetaccess-classipv4wd
R1(config)#ipv4-access-listwd
R1(config-ipv4-acl)#rulepermittcp169.1.108.820.0.0.0any
R1(config-ipv4-acl)#exit
lCongurationVerication
IfnoACLiscongured,aPCwhoseIPaddressisinanynetworksegmentcanbe
connectedtoR1.
IfanACLiscongured,onlyPCswhoseIPaddressesareinthePermitcolumnof
theACLcanbeconnectedtoR1.
1.4ConguringSSHConnection
ThisproceduredescribeshowtoconnecttotheZXR10ZSRV2throughSSH.
Prerequisite
Thelocalterminalcanaccesstheremoterouternetwork.
Context
SecureShell(SSH)isdenedbytheIETFNetworkWorkingGroup.Itisasecurityprotocol
establishedonthebasisoftheapplicationlayerandtransportlayer.
TraditionalnetworkserviceprogramssuchasFTP,POP,andT elnetusecleartextto
transferdata.Therefore,usernamesandpasswordsarevulnerabletoman-in-the-middle
attacks.Comparedwithtraditionalnetworkserviceprograms,SSHismorereliable.It
providessecurityforremoteloginsessionsandothernetworkservices,andhasthe
followingadvantages:
1-6
SJ-20140504150128-007|2014-05-10(R1.0)ZTEProprietaryandCondential

Chapter1DeviceConnectionmanagement
lTheSSHprotocolpreventsinformationleakageinremotemanagementprocesses.
lTheSSHprotocolencryptsalltransferreddata,andpreventsDNSspoongandIP
spoong.
lTheSSHprotocoltransferscompresseddata,acceleratingtransmission.
lTheSSHprotocolisusuallyusedtoreplaceT elnet,andprovidesasecure"channel"
forFTP ,POP ,orevenPPP.
Steps
1.CongureSSH.
StepCommandFunction
1ZXR10(config)#sshserverenable[listen
{<22>|<49152-65535>}]
EnablestheSSHserver
function,whichisdisabled
bydefault.Allowthe
specicationofaport
number.
2ZXR10(config)#sshserveraccess-class{ipv4|
ipv6}<acl-name>
BindsanACLforSSH.
3ZXR10(config)#sshserverdscp<dscp-value>SpeciestheDSCPvalue
ofcontrolplanepacketsfor
theIPv4/IPv6SSHserver.
Default:48.
4ZXR10#ssh<dest-address>encrypt{none|aes128|
blowfish|3des}compress{none|zlib}mac{none|
sha1|md5}[{[<source-address>],[<port-number>],[vrf
<vrf-name>],[dscp<dscp-value>]}]
Enablesthisroutertologin
asaclienttoanIPv4SSH
serverinSSHmode.
5ZXR10#ssh6<dest-address>encrypt{none|aes128|
blowfish|3des}compress{none|zlib}mac{none|sha1
|md5}[{[<port-number>],[vrf<vrf-name>],[interface
<interface-name>],[dscp<dscp-value>]}]
Enablesthisroutertologin
asaclienttoanIPv6SSH
serverinSSHmode.
2.MaintainSSH.
CommandFunction
ZXR10(config)#sshserverdisableDisablestheSSHserver
function.
3.CongureanSSHclient.
ThefollowingusesPuttyasanexampletodescribehowtocongureanSSHclient.
a.EnablePutty.exeontheSSHhost.TypetheIPaddressoftheremoterouter
(suchas192.168.5.3)intheHostNametextbox,seeFigure1-4.
1-7
SJ-20140504150128-007|2014-05-10(R1.0)ZTEProprietaryandCondential

ZXR10ZSRV2CongurationGuide(SystemManagement)
Figure1-4PuTTYCongurationDialogBox
b.Select2fortheSSHversion,seeFigure1-5.
1-8
SJ-20140504150128-007|2014-05-10(R1.0)ZTEProprietaryandCondential

Chapter1DeviceConnectionmanagement
Figure1-5PuTTYCongurationDialogBox
c.ClickOpen.TheLogindialogboxisdisplayed.Enterthecorrectusernameand
passwordtologintotherouter,andthenconguretherouterinthecommandline
window.
loginas:zte
Furtherauthenticationrequired
[email protected]'spassword:
************************************************************
WelcometoZXR10IntelligentIntegratedMulti-ServiceRouter
ofZTECorporation
************************************************************
ZXR10#
4.Verifythecongurations.
CommandDescription
ZXR10#showsshShowsthecongurationstateofSSH.
–EndofSteps–
1-9
SJ-20140504150128-007|2014-05-10(R1.0)ZTEProprietaryandCondential

ZXR10ZSRV2CongurationGuide(SystemManagement)
Example
ThefollowingprovidesanSSHcongurationexample.
lCongurationDescription
ItisrequiredtoconnectaPCtoR1throughSSH,seeFigure1-6.
Figure1-6SSHCongurationExample
lCongurationFlow
1.ConnectaPCtoR1.
2.CongureSSHonR1.
3.CongureanACLonR1tolterconnections.
lCongurationCommands
RunthefollowingcommandsonR1:
R1(config)#sshserverenable
R1(config)#sshserveraccess-classipv4wd
R1(config)#ipv4-access-listwd
R1(config-ipv4-acl)#rulepermittcp169.1.108.820.0.0.0any
R1(config-ipv4-acl)#exit
lCongurationVerication
IfnoACLiscongured,aPCwhoseIPaddressisinanynetworksegmentcanbe
connectedtoR1.
IfanACLiscongured,onlyPCswhoseIPaddressesareinthePermitcolumnof
theACLcanbeconnectedtoR1.
1.5FTPConnectionConguration
1.5.1ConfiguringtheZXR10ZSRV2asanFTPServer
ThisproceduredescribeshowtoconguretheZXR10ZSRV2asanFTPserver.
Prerequisite
Thelocalterminalcanaccesstheremoterouternetwork.
Steps
1.EnabletheFTPserverfunction.
1-10
SJ-20140504150128-007|2014-05-10(R1.0)ZTEProprietaryandCondential

Chapter1DeviceConnectionmanagement
CommandFunction
ZXR10(config)#ftp-serverenable[listen
<port-number>]
EnablestheFTPserverfunction,and
monitorsthespeciedport.
Theportrangeis21or2401–2420.
2.CongureotherFTPattributes.
CommandFunction
ZXR10(config)#ftp-servertop-directory
<directory>[{read-only|{[read-write],[copy]}}]
Setsthetop-leveldirectorythatthe
FTPserverallowsuserstoaccess
throughFTP .Bydefault,thedirectoryis
/datadisk0/.
ZXR10(config)#ftp-serveraccess-class
[ipv6]<acl-name>
BindsanACLtotheFTPserver.
ZXR10(config)#ftp-servermax-login<max-number>Conguresthemaximumnumberof
onlineusersoftheFTPserver.
ForhowtocongureanFTPserverusernameandpassword,referto“Chapter4User
Management”.
3.Verifythecongurations.
CommandFunction
ZXR10#showftp-serverShowsthecongurationinformationon
theFTPserver.
4.MaintaintheFTPServer.
CommandFunction
ZXR10(config)#ftp-serverkick-user<user-id>Disconnectsacurrentlyonlineuser.The
parametervalueisanonlineuserID.
–EndofSteps–
Example
ThefollowinggivesanFTPservercongurationexample.
lCongurationDescription
AsshowninFigure1-7,ZXR10ZSRV2isconnectedtoaPCandoperatesasanFTP
server.ThePCfunctionsasanFTPclientthatuploadsanddownloadsles.
1-11
SJ-20140504150128-007|2014-05-10(R1.0)ZTEProprietaryandCondential

ZXR10ZSRV2CongurationGuide(SystemManagement)
Figure1-7FTPServerCongurationExample
lCongurationFlow
1.EnabletheFTPserverfunctionandlisteningport21oftheZXR10ZSRV2.
2.SettheFTPserverrootdirectoryto/datadisk0/LOG/.
3.SetboththeFTPserverusernameandpasswordtozte.
4.UploadanddownloadlesthroughtheFTPservertoverifytheFTPserver
function.
lCongurationCommands
ThecongurationowontheZXR10ZSRV2isshownbelow.Forhowtocongure
anFTPserverusernameandpassword,referto“Chapter4UserManagement”.
R1#configureterminal
Enterconfigurationcommands,oneperline.EndwithCTRL/Z.
R1(config)#ftp-serverenable
R1(config)#ftp-servertop-directory/datadisk0/LOG/
1.5.2ConfiguringtheZXR10ZSRV2asanFTPClient
ThisproceduredescribeshowtoconguretheZXR10ZSRV2asanFTPclient.
Prerequisite
TheZXR10ZSRV2canaccesstheFTPservernetwork.
Steps
1.CongureandstartanFTPserver.
ThefollowingtakestheWFTPDFTPserversoftwareasanexampletodescribehow
tocongureanFTPserver.
a.Runwftpd32.exe.TheWFTPDwindowisdisplayed,seeFigure1-8.
1-12
SJ-20140504150128-007|2014-05-10(R1.0)ZTEProprietaryandCondential