#

# MAX System Administration

Introduction
Activating administrative permissions
System administration parameters
Terminal-server command-line interface

## Introduction

The MAX unit's VT100 interface provides a wide variety of features for monitoring and administering the unit's activities.

The initial display of the VT100 interface shows the Main Edit Menu and a group of status windows. You configure several system administration parameters from the Main Edit Menu. The status windows display a variety of information about the operation of your MAX. You also have access to DO commands, which enable you to perform additional tasks. (To perform any of the administrative tasks, you must activate administrative permissions.)

Also, the VT100 interface provides access to the terminal-server command-line interface, which features a large assortment of powerful commands. For example, you can view the MAX unit's routing tables and statistical information. You can access detailed information about the unit's IP routing table, OSPF routing table, and Frame Relay connections. You can also use the administrative commands Ping, Traceroute, Telnet, and IPXping to establish and test connectivity. You can manually add, delete or change routes in your IP routing table. Descriptions of the commands available through the terminal-server command-line interface form the major part of this chapter.

Note: You can manage the MAX from your workstation by establishing a Telnet session and logging in with sufficient administrative privileges. You can also use Telnet to manage remote Ascend units, such as Pipeline or MAX units.

## Activating administrative permissions

Before you can use the administrative commands and profiles, you must log in as a superuser by activating a Security profile that has sufficient permissions (for example, the Full Access profile.) Proceed as follows:

1. Press Ctrl-D. The DO menu appears:

    00-300 Security
    DO
    >0=ESC
      P=Password

2. Press P (or select P=Password).

3. In the list of Security profiles that opens, select Full Access.

   The MAX prompts you for the Full Access password:

       00-300 Security
       Enter Password:
         []

         Press > to accept

4. Type the password assigned to the profile, and press Enter. The default password for the Full Access login is `Ascend.`

   When you enter the correct password, the MAX displays a message informing you that the password was accepted and that the MAX is using the new security level:

       Message #119
       Password accepted.
       Using new security level.

   If the password you enter is incorrect, the MAX prompts you again for the password.

Note: The first task you should perform after logging in as the superuser is to assign a new password to the Full Access profile.

## System administration parameters

Following are the VT100 system administration parameters (shown with sample settings):

    System

          Sys Config

                Name=gateway-1

                Location=east-bay

                Contact=thf

                Date=2/20/97

                Time=10:00:29

                Term Rate=9600

                Remote Mgmt=Yes

                Auto Logout=No

                Idle Logout=0

                Edit=00-000

                Status 1=10-100

                Status 2=10-200

                Status 3=90-100

                Status 4=00-200

                Status 5=90-300

                Status 6=90-400

                Status 7=20-100

                Status 8=20-200

    Ethernet

          Mod Config

                Log...

                      Syslog=Yes

                      Log Host=10.65.212.12

                      Log Port=514

                      Log Facility=Local0

                      Log CallInfo=None

                      Log Call Progress=No

### Understanding the administrative parameters

This section provides some background information about the administrative options. For more details about the parameters, see the MAX Reference Guide. For background information about additional parameters that appear in the System profile, see the Network Configuration Guide for your MAX.

#### Name

The Name parameter specifies the system name, which can consist of up to 16 characters. Keeping the name simple (no special characters) is a good idea because it is used in negotiating bridged PPP, AIM, and BONDING connections.

#### Location and Contact

The Location and Contact settings are SNMP readable and settable. The Location parameter should specify the unit's location, and the Contact parameter should specify the name of the person to contact concerning any problems with the unit. You can enter up to 80 characters.

#### Date and Time

The Date and Time parameters set the system date and time. If you are using Simple Network Time Protocol (SNTP), the MAX can maintain its date and time by accessing the SNTP server. (For details, see the Network Configuration Guide for your MAX.)

#### Term rate

The Term Rate parameter specifies the transmission rate for communications with your terminal-emulation program. Any rate higher than 9600 can cause transmission errors.

Also verify that the data rate of your terminal-emulation program is set to 9600 bps or lower.

#### Remote Mgmt

You can set Remote Mgmt to Yes to enable management of the MAX from a WAN link.

#### Log out parameters

The Auto Logout parameter specifies whether to log out and go back to default privileges upon loss of Data Transmit Ready (DTR) from the serial port. Idle Logout specifies the number of minutes an administrative login can remain inactive before the MAX logs out and hangs up.

#### Edit and Status

The Edit and Status parameters customize the status windows in the VT100 interface so that particular screens appear at startup. For details, see the Reference Guide for your MAX.

### Configuring the basic parameters

To configure the system name and other basic parameters in the System profile:

1. Open the System profile.

2. Specify a system name up to 16 characters long, enter the physical location of the MAX unit, and indicate a person to contact in case of problems. For example:

       System
             Sys Config
                   Name=gateway-1
                   Location=east-bay
                   Contact=thf

3. If necessary, set the system date and time.

                   Date=2/20/97
                   Time=10:00:29

4. Specify the data transfer rate of the MAX control port.

                   Term Rate=9600

5. Close the System profile.

## Terminal-server command-line interface

The terminal-server command-line interface can provide commands for monitoring networks, initiating sessions, and administering the system.

### Accessing the interface

You can start a terminal-server command-line session if you have administrative privileges. (For more information, see "Activating administrative permissions" on page 1-2). You can start a session using one of the following methods:

- From the main VT100 menu, select System > Sys Diag > Term Serv, and press Enter.

- In the Main Edit Menu, press Ctrl-D to open the DO menu, and select `E=Termsrv`.

- Enter the following keystroke sequence (Escape key, left bracket, Escape key, zero) in rapid succession:

    Esc [ Esc 0

If you have sufficient privileges to invoke the command line, the MAX displays a command-line prompt. For example:

    ** Ascend Terminal Server **

    ascend%

Note: If you have a MAX running Multiband simulation, the following terminal server commands are disabled: Close, Ipxping, Open, Resume, Rlogin, Telnet.

### Displaying terminal-server commands

To display the list of terminal-server commands, enter a question mark:

    ascend% ?

or the Help command:

    ascend% help

The system responds by listing the terminal-server commands, with brief explanations:

`?` | `Displays help information`
`help` | `Displays help information`
`quit` | `Closes terminal server session`
`hangup` | `Closes terminal server session`
`test` | `test <number> frame-count.] [ <optional fields>]`
`local` | `Go to local mode`
`remote` | `remote <station>`
`set` | `Set various items. Type `set ?' for help`
`show` | `Show various tables. Type `show ?' for help`
`iproute` | `Manage IP routes. Type `iproute ?' for help`
`dnstab` | `Displays help information about the DNS table. Type 'dnstab ?' for help`
`slip` | `SLIP command`
`cslip` | `Compressed SLIP command`
`ppp` | `PPP command`
`menu` | `Host menu interface`
`telnet` | `telnet [ -a|-b|-t ] <host-name> [ <port-number> ]`
`tcp` | `tcp <host-name> <port-number>`
`ping` | `ping <host-name>`
`ipxping` | `ipxping <host-name>`
`traceroute` | `Trace route to host. Type 'traceroute -?' for help`
`rlogin` | `rlogin [ -l user -ec ] <host-name> [ -l user ]`
`open` | `open < modem-number | slot:modem-on-slot >`
`resume` | `resume virtual connect session`
`close` | `close virtual connect session`
pptp | `pptp <server-name>`
l2tp | `l2tp <server-name>`
ara | `ARA command`

### Returning to the VT100 menus

The following commands close the terminal-server command-line interface and return the cursor to the VT100 menus:

    quit 					Closes terminal server session

    hangup 										Closes terminal server session

    local 						Go to local mode

    For example:

    ascend% quit

When a dial-in user enters the Local command, a Telnet session begins.

### Commands for monitoring networks

The following commands are specific to IP or IPX routing connections:

    iproute             Manage IP routes.  Type 'iproute ?' for help

    ping                ping <host-name>

    ipxping             ipxping <host-name>

    traceroute          Trace route to host.  Type 'traceroute -?' for help

For details about each of the commands, see Chapter 5, "Network Administration."

### Commands for use by terminal-server users

The following commands must be enabled for use in Ethernet > Mod Config > TServ Options. If they are enabled, login users can initiate a session by invoking the commands in the terminal-server interface.

    slip                SLIP command

    cslip               Compressed SLIP command

    ppp                 PPP command

    menu                Host menu interface

    telnet              telnet [ -a|-b|-t ] <host-name> [ <port-number> ]

    rlogin              rlogin [ -l user -ec ] <host-name> [ -l user ]

    tcp                 tcp <hostname> <port-number>

    open                open < modem-number | slot:modem-on-slot >

    resume              resume virtual connect session

    close               close virtual connect session

These commands initiate a session with a host or modem, or toggle to a different interface that displays a menu selection of Telnet hosts.

#### SLIP, CSLIP, and PPP

The SLIP, CSLIP, and PPP commands initiate Serial Line IP, Compressed SLIP, and PPP sessions, respectively, from the terminal-server command line.

#### Menu

The Menu command invokes the terminal server's menu mode, which lists up to four hosts. The four hosts can be either Telnet hosts, raw TCP hosts or a mixture of the two types.

##### Specifying Telnet hosts

The Menu command invokes the terminal server's menu mode, which lists up to four Telnet hosts as configured in the Ethernet > Mod Config > TServ Options subprofile. For example:

    Up to 16 lines of up to 80 characters each

    will be accepted. Long lines will be truncated.

    Additional lines will be ignored

    1. host1.abc.com

    2. host2.abc.com

    3. host3.abc.com

    4. host4.abc.com

    Enter Selection (1-4, q)

This menu was configured in the Tserv Options menu by setting the Host #N Addr and Host #N Text parameters to specify the IP addresses and menu names, respectively, of the four hosts. For example, Host # 1 Addr specifies the IP address of Host1, and Host #1 Text is set to `host.abc.com`.

To return to the command-line, press 0. Terminal server security must be set up to allow the operator to toggle between the command line and menu mode, or the Menu command has no effect. Enable this function by setting the Toggle Scrn parameter (Ethernet > Mod Config > Tserv Options) to Yes. (For more information on this parameter, see the MAX Reference Guide.)

#### Specifying raw TCP hosts

To specify IP addresses or DNS names of hosts to which you establish a raw TCP connection, proceed as follows:

1. Open the Ethernet > Mod Config > TServ options menu.

2. Select one of the Host # Addr fields and enter the following:

       rawTcp host portnumber

   `rawTcp` is the required string that causes the MAX to establish a raw TCP connection when the user chooses this host number. This entry is case-sensitive and must be entered exactly as shown.

   host can be the DNS name of the host or the IP address of the host. The total number of characters, including all three strings and the delimiting spaces, must not exceed 31.

   portnumber is the number of the port on which the connection for this host is to be established.

3. Enter a description of the host in the Host # Text field.

Note: You cannot configure raw TCP hosts if you are using a RADIUS server to provide the list of hosts.

##### Example of configuration combining Telnet hosts and raw TCP hosts

Suppose you specify the following values in the TServ Options menu:

    Remote Conf=No

    Host #1 Addr=10.10.10.1

    Host #1 Text=Cleveland

    Host #2 Addr=

    Host #2 Text=

    Host #3 Addr=

    Host #3 Text=

    Host #4 Addr=rawTcp corp-host 7

    Host #4 Text=The Office - port 7

    Immed Service=None

    Immed Host=N/A

    Immed Port=N/A

    Telnet Host Auth=No

If you then execute the Menu command, the following menu appears:

    ** Ascend Pipeline Terminal Server **

         1. Cleveland

         2. The Office - port 7

         Enter Selection (1-2,q)

If you select 2, the MAX establishes raw a CP connection on port 7 to the host named `corp-host.`

If a you select 1, the MAX establishes a Telnet connection on port 23, the default Telnet port, to the host address 10.10.10.1.

#### Telnet

The Telnet command initiates a login session to a remote host. It uses the following format:

    telnet [-a|-b|-t] hostname [port-number]

where

- `-a | -b | -t` are optional arguments specifying ASCII, Binary, or Transparent mode, respectively. If one of the arguments is entered, it overrides the setting of the Telnet Mode parameter.

  In ASCII mode, the MAX uses standard 7-bit mode. In Binary mode, the MAX tries to negotiate 8-bit mode with the server at the remote end of the connection, so that the user can send and receive binary files by means of 8-bit file transfer protocols. In transparent mode, either of the other modes can be used without specifying the node.

- `hostname``` can be the remote system's DNS name if you have configured DNS. If you have not, you must specify the IP address of the remote system.

- `port-number` is an optional argument specifying the port to use for the session. The default is 23, which is the port number of the well-known port for Telnet.

For example, if your DNS table has an entry for `myhost`, you can open a telnet session with that host as follows:

    ascend% telnet myhost

If you do not configure DNS, you must specify the host's IP address instead. There are also several options in the Ethernet > Mod Config > TServ Options subprofile that affect Telnet; for example, if you set Def Telnet to Yes, you can just type a hostname to open a Telnet session with that host:

    ascend% myhost

Another way to open a session is to invoke Telnet first, then enter the Open command at the Telnet prompt. For example:

    ascend% telnet

    telnet> open myhost

When your screen displays the`telnet>` prompt, you can enter any of the Telnet commands described in "Telnet session commands" on page 1-10. You can quit the Telnet session at any time by entering the Quit command at the Telnet prompt:

    telnet> quit

Note: During an open Telnet connection, press Ctrl-] to display the`telnet>` prompt and the Telnet command-line interface. Any valid Telnet command returns you to the open session. Note that Ctrl-] does not function in binary mode Telnet. If you log into the MAX by Telnet, you might want to change the escape sequence from Ctrl-] to a different setting.

##### Telnet session commands

The commands in this section can be entered at the Telnet prompt during an open session. To display the Telnet prompt while logged in to a host, press Ctrl-] (hold down the Control key and type a right bracket). To display information about Telnet session commands, use the Help or ? command. For example:

    telnet> ?

To open a Telnet connection after invoking Telnet, use the Open command. For example:

    telnet> open myhost

To send standard Telnet commands such as Are You There or Suspend Process, use the Send command. For example:

    telnet> send susp

For a list of Send commands and their syntax, enter the Send command with a question mark:

    telnet> send ?

To specify special characters for use during the Telnet session, use the Set command. For example:

    telnet> set eof ^D

To display current settings, enter the Set All command:

    telnet> set all

To display a list of Set commands, enter the Set command with a question mark:

    telnet> set ?

To quit the Telnet session and close the connection, enter the Close or Quit command. For example:

    telnet> close

##### Telnet error messages

The MAX generates an error message for any condition that causes the Telnet session to fail or terminate abnormally. The following error messages can appear:

- `no connection: host reset-`The destination host reset the connection.

- `no connection: host unreachable-`The destination host is unreachable.

- `no connection: net unreachable`-The destination network is unreachable.

- `Unit busy. Try again later.-`The host already has open the maximum number of concurrent Telnet sessions.

#### Rlogin command

The Rlogin command initiates a login session to a remote host. The command has the following format:

    rlogin [-echar] hostname [-1username]

    where:

- -`e` `char` sets the escape character to char. For example:

      rlogin -e$ 10.2.3.4

  The default escape character is a tilde (~).

- `hostname` can be the remote system's DNS name if you have configured DNS. If you have not, you must specify the IP address of the remote system.

- `-l` `username` specifies that you log into the remote host as `username`, rather than as the name with which you logged into the terminal server. (If you logged in through RADIUS or TACACS, you must be prompted for this option.) If you can specify this option on the command line, you can enter it either before or after the hostname argument. For example, the following two lines perform identical functions:

      rlogin -l jim 10.2.3.4
      rlogin 10.2.3.4 -l jim

To terminate the remote login, choose the Exit command at the remote system's prompt. Or, you can press the Enter key, then type the escape character followed by a period.

    <CR><ESC-CHAR><PERIOD>

For example, to terminate a remote login that was initiated with the default escape character (a tilde), press the Enter key, then the ~ key, then the . key.

    ~.

#### TCP

The TCP command initiates a login session to a remote host. The command has the following format:

    tcp hostname [port-number]

where:

- `hostname` can be the remote system's DNS name if you have configured DNS. If oyu have not, you must specify the IP address of the remote system.

- `port-number` specifies the port to use for the session. The port number typically indicates a custom application that runs on top of the TCP session. For example, port number 23 starts a Telnet session. However, terminating the Telnet session does not terminate the raw TCP session.

When the raw TCP session starts running, the MAX displays the word `connected`. You can then use the TCP session to transport data by running an application on top of TCP. You can hang up the device at either end to terminate the raw TCP session. If you are using a remote terminal-server session, ending the connection also terminates raw TCP.

If a raw TCP connection fails, the MAX returns one of the following error messages:

- ```Cannot open session:``` `hostname``` `port-number``-`You entered an invalid or unknown value for `hostname`, you entered an invalid value for `port-number`, or a port number was required and you failed to enter it.

- `no connection: host reset`- The destination host reset the connection.

- `no connection: host unreachable`- The destination host is unreachable.

- `no connection: net unreachable`- The destination network is unreachable.

#### Open, Resume, and Close

If the MAX has digital modems installed and Modem Dialout is enabled in the TServ Options submenu, a local user can issue AT commands to the modem as if connected locally to the modem's asynchronous port. To set up a virtual connection to a modem, enter the Open command. Use the following format:

    open [modem number | slot:modemOnSlot]

For example:

    ascend% open 7:1

If you are unsure which slot or item number to specify, the Show Modems command displays the possible choices. If you enter the Open command without specifying any of the optional arguments, the MAX opens a virtual connection to the first available modem.

Once you have connected to the modem, you can issue AT commands to the modem and receive responses from it.

You can temporarily suspend a virtual connection by pressing Ctrl-C three times. This control sequence causes the MAX to display the terminal-server interface again. To resume a virtual connection suspended with Ctrl-C, can enter the Resume command at the terminal-server prompt:

    ascend% resume

To terminate a virtual connection, enter the Close command at the terminal-server prompt:

    ascend% close

### Administrative commands

The following commands (shown as they appear in the Help display) are useful for system administration:

`test` | `test <number> frame-count> ] [ <optional fields> ]`
`remote` | `remote <station>`
`set` | `Set various items. Type 'set ?' for help`
`show` | `Show various tables. Type 'show ?' for help`

#### Test

The MAX can use two open channels to run a self-test in which it calls itself, by placing the call on one channel and receiving it on the other channel. To run the test, execute the TEST command which has the following format:

`test phonenumber``[``frame-count``] [``optional fields``]`

where `phonenumber` is the phone number of the channel receiving the test call. This can include the numbers 0 through 9 and the characters `()[]-, but cannot` include spaces.

[`frame-count`] The optional frame-count argument is a number from 1 to 65535 specifying the number of frames to send during the test. The default is 100. The `optional fields` are the following:

- [`data-svc`=`data-svc`]

  where `data-svc` is a data service identical to any of the values available for the Data Svc parameter of the Connection profile. (For a list of valid values, see the Reference Guide for your MAX.) If you do not specify a value, the default value is the one specified for the Data Svc parameter.

- [`call-by-call`=`T1-PRI-service`]

  where `T1-PRI-service` is any value available to the Call-by-Call parameter of the Connection profile. The Call-by-Call parameter specifies the PRI service that the MAX uses when placing a PPP call. (For a list of valid values, see the Reference Guide for your MAX.) If you do not specify a value, the default is as specified for the Call-by-Call parameter.

- [`primary-number-type`=`AT&T-switch`]

  where `AT&T-switch` is any value available to the PRI # Type parameter of the Connection profile. The PRI # Type parameter specifies an AT&T switch. (For a list of valid values, see the Reference Guide for your MAX.) If you do not specify a value, the default value is the one specified for the PRI # Type parameter.

- [`transit-number`=`IEC`]

  where `IEC` is any value available to the Transit # parameter of the Connection profile. The Transit # parameter specifies the U.S. Interexchange Carrier (IEC) you use for long distance calls over a PRI line. (For a list of valid values, see the Reference Guide for your MAX.) If you do not specify a value, the default is as specified for the Transit # parameter.

Here is a simple example of entering the Test command:

    ascend% test 555-1212

You can press Ctrl-C at any time to terminate the test. While the test is running, the MAX displays the status. For example:

    calling...answering...testing...end

    200 packets sent, 200 packets received

If you enable trunk groups on the MAX, you can specify the outgoing lines to be used in the self-test. If you do not, the MAX uses the first available T1 (or E1) line. For example, if you assign trunk group 7 to line 1 on a Net/BRI module, and your PBX requires a preceding 9 for an outgoing call, the following command places the outgoing call on line 1 of the Net/BRI module:

    ascend% test 7-9-555-1212

The MAX generates an error message for any condition that causes the test to terminate before sending the full number of packets. The following error messages can appear:`

#### Message | #### Explanation
--- | ---
`bad digits in phone number` | The phone number you specified contained a character other than the numbers 0 through 9 and the characters `()[]-`
`call failed` | The MAX did not answer the outgoing call. Can indicate a wrong phone number or a busy phone number. Use the Show ISDN command to determine the nature of the failure
`call terminated` `N1``packets sent` `N2``packets received` | This message indicates the number of packets sent (N1) and received (N2).
`cannot handshake` | The MAX answered the outgoing call, but the two sides did not properly identify themselves. Can indicate that the call was routed to the wrong MAX module, or that the phone number was incorrect.
`frame-count must be in the range 1-65535` | The number of frames requested exceeded 65535.
`no phone number` | You did not specify a phone number on the command line.
`test aborted` | The test was terminated (Ctrl-C).
`unit busy` | You attempted to start another self-test when one was already in progress. You can run only one self-test at a time.
`unknown items on command-line` | The command line contained unknown items. Inserting one or more spaces in the telephone number can generate this error.
`unknown option` `option` | The command-line contained the option specified by option, which is invalid.
`unknown value` `value` | The command-line contained the value specified by value, which is invalid
`wrong phone number` | A device other than the MAX answered the call. Therefore, the phone number you specified was incorrect

`

#### Remote

After an MP+ connection has been established with a remote station (for example, by using the DO Dial command), you can start a remote management session with that station by entering the Remote command in the following format:

    remote station

For example:

    ascend% remote lab17gw

During the remote management session, the user interface of the remote device replaces your local user interface, as if you had opened a Telnet connection to the device. You can enter Ctrl-\ at any time to terminate the Remote session. Note that either end of an MP+ link can terminate the session by hanging up all channels of the connection.

The argument to the Remote command is the name of the remote station. It must match the value of a Station parameter in a Connection profile that allows outgoing MP+ calls, or the `user-id` at the start of a RADIUS profile set up for outgoing calls.

Note: A remote management session can time out because the traffic it generates does not reset the idle timer. Therefore, the Idle parameter in the Connection profile at both the calling and answering ends of the connection should be disabled during a remote management session, and restored just before exiting. Remote management works best at higher terminal speeds.

At the beginning of a remote management session, you have privileges set by the default Security profile at the remote end of the connection. To activate administrative privileges on the remote station, activate the appropriate remote Security profile by using the DO Password command (as described in "Activating administrative permissions" on page 1-2).

The MAX generates an error message for any condition that causes the test to terminate before sending the full number of packets. The following error messages can appear:

#### Message | #### Explanation
--- | ---
`not authorized` | Your current security privileges are insufficient for beginning a remote management session. To assign yourself the required privileges, log in with the DO PASSWORD command to a Security profile whose Edit System parameter is set to Yes.
`cannot find profile for <station>` | The MAX could not locate a local Connection profile containing a Station parameter whose value matched <station>.
`profile for <station> does not specify MPP` | The local Connection profile containing a Station value equal to <station> did not contain Encaps=MPP.
`cannot establish connection for <station>` | The MAX located a local Connection profile containing the proper Station and Encaps settings, but it could not complete the connection to the remote station.
`<station> did not negotiate MPP` | The remote station did not negotiate an MP+ connection. This error occurs most often when the remote station does not support MP+, but does support PPP.
`far end does not support remote management` | The remote station is running a version of MP+ that does not support remote management.
`management session failed` | A temporary condition, such as premature termination of the connection, caused the management session to fail.
`far end rejected session` | The remote station was configured to reject remote management; its Remote Mgmt parameter was set to No in the System profile.

#### Set

The Set command takes several arguments. To display them, enter the Set command with a question mark:

    ascend% set ?

    set ?               Display help information

    set all             Display current settings

    set term            Sets the telnet/rlogin terminal type

    set password        Enable dynamic password serving

The Set All command displays current settings. For example:

    ascend% set all

    term = vt100

    dynamic password serving = disabled

To specify a terminal type other than VT100, use the Set Term command.

The Set Password command puts the terminal server in password mode, in which a third-party ACE or SAFEWORD server at a secure site can display password challenges dynamically in the terminal-server interface. When the terminal server is in password mode, it passively waits for password challenges from a remote ACE or SAFEWORD server. The Set Password command applies only when using security card authentication. Enter the command as follows:

    ascend% set password

    Entering Password Mode...

    [^C to exit] Password Mode>

To return to normal terminal-server operations and thereby disable password mode, press Ctrl-C.

Note that each channel of a connection to a secure site requires a separate password challenge, so for multichannel connections to a secure site, you must leave the terminal server in password mode until all channels have been established. The APP Server utility provides an alternative way to allow users to respond to dynamic password challenges obtained from hand-held security cards. For details about dynamic password serving, see the MAX Security Supplement.

The Set FR commands enable you to bring down the nailed connection specified in the named Frame Relay profile. The connection reestablished within a few seconds. The Set Circuit commands let you activate or deactivate a Frame Relay circuit. For details, see the Network Configuration Guide for your MAX.

#### Show

The Show command takes several arguments. To display them, enter the Show command with a question mark:

    ascend% show ?

     show ?

     Display help information

     show arp

     Display the arp cache

     show icmp

     Display ICMP information

     show if

     Display Interface info. Type 'show if ?' for help

     show ip

     Display IP information. Type 'show ip ?' for help

     show udp

     Display UDP information. Type 'show udp ?' for help

     show tcp

     Display TCP information. Type 'show tcp ?' for help

     show dnstab

     Display local DNS table. Type 'show dnstab ?' for help

     show netware

     Display IPX information. Type 'show netware ? ' for help

     show isdn

     Display ISDN events.  Type 'show isdn <line number>' for help

     show uptime

     Display system uptime

     show revision

     Display system revision

     show sessid

     Display current and base session id

Note: Many of the Show commands are specific to a particular type of usage, such as, IP routing or OSPF. The chapters of this guide that relate to these types of connection and routing describe the relevant Show commands.

##### Show commands related to network information

The following Show commands are related to monitoring protocols and other network-specific information and are discussed in Chapter 5, "Network Administration":

    show arp

    show icmp

    show if

    show ip

    show udp

    show tcp

    show dnstab

    show netware

##### Show ISDN

The Show ISDN command enables the MAX to display the last 20 events that have occurred on the specified ISDN line. Enter the command in the following format:

    show isdn line-number

where `line-number` is the number of the ISDN line. (For details about how lines are numbered, see the Network Configuration Guide for your MAX.) For example, to display information about the leftmost built-in WAN port, you would enter the following command:

    ascend% show isdn 0

The MAX responds with one or more of the following messages:

    PH: ACTIVATED

    PH: DEACTIVATED

    DL: TEI ASSIGNED (BRI interfaces only)

    DL: TEI REMOVED (BRI interfaces only)

    NL: CALL REQUEST

    NL: CLEAR REQUEST

    NL: ANSWER REQUEST

    NL: CALL CONNECTED

    NL: CALL FAILED/T303 EXPIRY

    NL: CALL CLEARED/L1 CHANGE

    NL: CALL REJECTED/OTHER DEST

    NL: CALL REJECTED/BAD CALL REF

    NL: CALL REJECTED/NO VOICE CALLS

    NL: CALL REJECTED/INVALID CONTENTS

    NL: CALL REJECTED/BAD CHANNEL ID

    NL: CALL FAILED/BAD PROGRESS IE

    NL: CALL CLEARED WITH CAUSE

In some cases, the message can include a phone number (prefixed by #), a data service (suffixed by K for Kbps), a channel number, TEI assignment, and cause code. For example, the following information might appear:

    PH: ACTIVATED

    NL: CALL REQUEST: 64K, #442

    NL: CALL CONNECTED: B2, #442

    NL: CLEAR REQUEST: B1

    NL: CALL CLEARED WITH CAUSE 16 B1 #442

For information about each of the messages that can appear, see the CCITTT Blue Book Q.931 or other ISDN specifications.

##### Show Uptime

To see how long the MAX has been running, enter the Show Uptime command. For example:

    ascend% show uptime

    system uptime: up 2 days, 4 hours, 38 minutes, 43 seconds

If the MAX stays up for 1000 consecutive days with no power cycles, the number of days displayed resets to 0 and begins to increment again.

##### Show Revision

The Show Revision command displays the software load and version number currently running on the MAX. For example:

    ascend% show revision

    techpubs-lab-17 system revision: ebiom.m40 5.0A

Copyright © 1998, Ascend Communications, Inc. All rights reserved.