#

# MAX System Administration

This chapter covers the following topics:

Introduction
Activating administrative permissions
System administration parameters
Terminal-server command-line interface

## Introduction

The MAX unit's VT100 interface provides a wide variety of features for monitoring and administering the unit's activities.

The initial display of the VT100 interface shows the Main Edit Menu and a group of status windows. You configure several system administration parameters from the Main Edit Menu. The status windows display a variety of information about the operation of your MAX. You also have access to DO commands, which enable you to perform additional tasks. (To perform any of the administrative tasks, you must activate administrative permissions.)

Also, the VT100 interface provides access to the terminal-server command-line interface, which features a large assortment of powerful commands. For example, you can view the MAX unit's routing tables and statistical information. You can access detailed information about the unit's IP routing table, OSPF routing table, and Frame Relay connections. You can also use the administrative commands Ping, Traceroute, Telnet, and IPXping to establish and test connectivity. You can manually add, delete or change routes in your IP routing table. Descriptions of the commands available through the terminal-server command-line interface form the major part of this chapter.

Note: You can manage the MAX from your workstation by establishing a Telnet session and logging in with sufficient administrative privileges. You can also use Telnet to manage remote Ascend units, such as Pipeline or MAX units.

## Activating administrative permissions

Before you can use the administrative commands and profiles, you must log in a superuser by activating a Security profile that has sufficient permissions (for example, the Full Access profile.) Proceed as follows:

1. Press Ctrl-D. The DO menu appears:

    00-300 Security
    DO
    >0=ESC
      P=Password

2. Press P (or select P=Password).

3. In the list of Security profiles that opens, select Full Access.

   The MAX prompts you for the Full Access password:

       00-300 Security
       Enter Password:
         []

         Press > to accept

4. Type the password assigned to the profile, and press Enter. The default password for the Full Access login is `Ascend.`

   When you enter the correct password, the MAX displays a message informing you that the password was accepted and that the MAX is using the new security level:

       Message #119
       Password accepted.
       Using new security level.

   If the password you enter is incorrect, the MAX prompts you again for the password.

Note: The first task you should perform after logging in as the superuser is to assign a new password to the Full Access profile.

## System administration parameters

Following are the VT100 system administration parameters (shown with sample settings):

    System

          Sys Config

                Name=gateway-1

                Location=east-bay

                Contact=thf

                Date=2/20/97

                Time=10:00:29

                Term Rate=9600

                Console=Standard

                Remote Mgmt=Yes

                Parallel Dial=5

                Single Answer=Yes

                Auto Logout=No

                Idle Logout=0

                DS0 Min Rst=Off

                Max DS0 Mins=N/A

                High BER=10 ** -3

                High BER Alarm=No

                No Trunk Alarm=No

                Edit=00-000

                Status 1=10-100

                Status 2=10-200

                Status 3=90-100

                Status 4=00-200

                Status 5=90-300

                Status 6=90-400

                Status 7=20-100

                Status 8=20-200

    Ethernet

          Mod Config

                Log...

                      Syslog=Yes

                      Log Host=10.65.212.12

                      Log Port=514

                      Log Facility=Local0

### Understanding the administrative parameters

This section provides some background information about the administrative options. For more details about the parameters, see the MAX Reference Guide. For background information about additional parameters that appear in the System profile, see the Network Configuration Guide for your MAX.

#### Name

The Name parameter specifies the system name, which can consist of up to 16 characters. Keeping the name simple (no special characters) is a good idea because it is used in negotiating bridged PPP, AIM, and BONDING connections.

#### Location and Contact

The Location and Contact settings are SNMP readable and settable. The Location parameter should specify the unit's location, and the Contact parameter should specify the name of the person to contact concerning any problems with the unit. You can enter up to 80 characters.

#### Date and Time

The Date and Time parameters set the system date and time. If you are using Simple Network Time Protocol (SNTP), the MAX can maintain its date and time by accessing the SNTP server. (For details, see the Network Configuration Guide for your MAX.)

#### Term rate and Console

The Term Rate parameter specifies the transmission rate for communications with your terminal-emulation program. Any rate higher than 9600 can cause transmission errors.

The Console parameter lets you change the configuration interface, for example, (from Standard to MIF, for example, if you set it to MIF, the Machine Interface Format interface comes up when you power up the MAX. `Limited` brings up simplified menus for operation with the serial host ports (but not for bridging and routing). For details, see Appendix D, Machine Interface Format (MIF).

Also verify that the data rate of your terminal-emulation program is set to 9600 bps or lower.

#### Remote Mgmt

You can set Remote Mgmt to Yes to enable management of the MAX from a WAN link.

#### Dial-in and dial-out parameters

The Parallel Dial parameter specifies the number of channels that the MAX can dial simultaneously over the T1/PRI line, or that the MAX can disconnect simultaneously. Although you can specify any number of channels, the initial number of channels in a connection never exceeds the value of the Base Ch Count parameter (in the Connection profile).

The Single Answer parameter specifies whether the MAX completes the answering and routing of one call before answering and routing the next call.

#### Log out parameters

The Auto Logout parameter specifies whether to log out and go back to default privileges upon loss of DTR from the serial port. Idle Logout specifies the number of minutes an administrative login can remain inactive before the MAX logs out and hangs up.

#### DS0 minimum and maximum resets

A DS0 minute is the online usage of a single 56-Kbps or 64-Kbps switched channel for one minute. For example, a 5-minute, 6-channel call uses 30 DS0 minutes.

The DS0 Min Rst parameter specifies when the MAX should reset accumulated DS0 minutes to 0 (zero). You can also use this parameter to specify that the MAX should disable the timer altogether.

The Max DS0 Mins parameter specifies the maximum number of DS0 minutes a call can be online. When the usage exceeds the maximum specified by the Max DS0 Mins parameter, the MAX cannot place any more calls, and it takes any existing calls offline.

#### High-bit-error parameters

The High BER parameter specifies the maximum bit-error rate for any PRI line. The bit-error rate consists of the number of bit errors that occur per second. The number that comes after the double asterisks specifies the power of 10 for the current ratio of error bits to total bits.

The High BER Alarm parameter specifies whether the back-panel alarm relay closes when the bit-error rate exceeds the value specified by the High BER parameter.

#### No Trunks Alarm

The No Trunk Alarm parameter specifies whether the back-panel alarm relay closes when all T1/PRI lines (or trunks) go out of service.

#### Edit and Status

The Edit and Status parameters customize the status windows in the VT100 interface so that particular screens appear at startup. For details, see the Reference Guide for your MAX.

#### Finger requests (RFC 1288)

The MAX supports Finger remote user information protocol (RFC 1288). You can use Finger to get information about users currently logged into the MAX. The information includes the host address, name, port, and channel. For security reasons, the MAX does not forward Finger requests. For complete details of the Finger protocol, see RFC 1288.

### Configuring the basic parameters

To configure the system name and other basic parameters in the System profile:

1. Open the System profile.

2. Specify a system name up to 16 characters long, enter the physical location of the MAX unit, and indicate a person to contact in case of problems. For example:

       System
             Sys Config
                   Name=gateway-1
                   Location=east-bay
                   Contact=thf

3. If necessary, set the system date and time.

                   Date=2/20/97
                   Time=10:00:29

4. Specify the data transfer rate of the MAX control port.

                   Term Rate=9600

5. Close the System profile.

## Terminal-server command-line interface

The terminal-server command-line interface can provide commands for monitoring networks, initiating sessions, and administering the system.

### Accessing the interface

You can start a terminal-server command-line session if you have administrative privileges. (For more information, see Activating administrative permissions). You can start a session using one of the following methods:

- From the main VT100 menu, select System > Sys Diag > Term Serv, and press Enter.

- In the Main Edit Menu, press Ctrl-D to open the DO menu, and select `E=Termsrv`.

- Enter the following keystroke sequence (Escape key, left bracket, Escape key, zero) in rapid succession:

      Esc [ Esc 0

If you have sufficient privileges to invoke the command line, the MAX displays a command-line prompt. For example:

    ** Ascend Terminal Server **
    ascend%

Note: If you have a MAX running Multiband simulation, the following terminal server commands are disabled: Close, Ipxping, Open, Resume, Rlogin, Telnet.

### Displaying terminal-server commands

To display the list of terminal-server commands, enter a question mark:

    ascend% ?

or the Help command:

    ascend% help

The system responds by listing the terminal-server commands, with brief explanations:

`?` | Displays help information
`help` | Displays help information
`quit` | Closes terminal server session
`hangup` | Closes terminal server session
`test` | test <number> frame-count.] [ <optional fields>]
`local` | Go to local mode
`remote` | remote <station>
`set` | Set various items. Type `set ?' for help
`show` | Show various tables. Type `show ?' for help
`clear dnis statistics` | Clears DNIS session statistics
`iproute` | Manage IP routes. Type `iproute ?' for help
`dnstab` | Displays help information about the DNS table. Type 'dnstab ?' for help
`slip` | SLIP command
`cslip` | Compressed SLIP command
`ppp` | PPP command
`menu` | Host menu interface
`telnet` | telnet [ -a|-b|-t ] <host-name> [ <port-number> ]
`tcp` | tcp <host-name> <port-number>
`ping` | ping <host-name>
`ipxping` | ipxping <host-name>
`traceroute` | Trace route to host. Type 'traceroute -?' for help
`rlogin` | rlogin [ -l user -ec ] <host-name> [ -l user ]
`open` | open < modem-number | slot:modem-on-slot >
`resume` | resume virtual connect session
`close` | close virtual connect session
`kill` | terminate session

### Returning to the VT100 menus

The following commands close the terminal-server command-line interface and return the cursor to the VT100 menus:

    quit 					Closes terminal server session

    hangup 										Closes terminal server session

    local 						Go to local mode

    For example:

    ascend% quit

When a dial-in user enters the Local command, a Telnet session begins.

### Commands for monitoring networks

The following commands are specific to IP or IPX routing connections:

    iproute             Manage IP routes.  Type 'iproute ?' for help

    ping                ping <host-name>

    ipxping             ipxping <host-name>

    traceroute          Trace route to host.  Type 'traceroute -?' for help

For details about each of the commands, see Chapter 5, Network Administration.

### Commands for use by terminal-server users

The following commands must be enabled for use in Ethernet > Mod Config > TServ Options. If they are enabled, login users can initiate a session by invoking the commands in the terminal- server interface.

    slip                SLIP command

    cslip               Compressed SLIP command

    ppp                 PPP command

    menu                Host menu interface

    telnet              telnet [ -a|-b|-t ] <host-name> [ <port-number> ]

    rlogin              rlogin [ -l user -ec ] <host-name> [ -l user ]

    tcp                 tcp <hostname> <port-number>

    open                open < modem-number | slot:modem-on-slot >

    resume              resume virtual connect session

    close               close virtual connect session

These commands initiate a session with a host or modem, or toggle to a different interface that displays a menu selection of Telnet hosts.

#### SLIP, CSLIP, and PPP

The SLIP, CSLIP, and PPP commands initiate Serial Line IP, Compressed SLIP, and PPP sessions, respectively, from the terminal-server command line.

#### Menu

The Menu command invokes the terminal server's menu mode, which lists up to four hosts. The four hosts can be either Telnet hosts, raw TCP hosts or a mixture of the two types.

##### Specifying Telnet hosts

The Menu command invokes the terminal server's menu mode, which lists up to four Telnet hosts as configured in the Ethernet > Mod Config > TServ Options subprofile. For example:

    Up to 16 lines of up to 80 characters each
    will be accepted. Long lines will be truncated.
    Additional lines will be ignored

    1. host1.abc.com
    2. host2.abc.com
    3. host3.abc.com
    4. host4.abc.com
    Enter Selection (1-4, q)

This menu was configured in the Tserv Options menu by setting the Host #N Addr and Host #N Text parameters to specify the IP addresses and menu names, respectively, of the four hosts. For example, Host # 1 Addr specifies the IP address of Host1, and Host #1 Text is set to `host.abc.com`.

To return to the command-line, press 0. Terminal server security must be set up to allow the operator to toggle between the command line and menu mode, or the Menu command has no effect. Enable this function by setting the Toggle Scrn parameter (Ethernet > Mod Config > Tserv Options) to Yes. (For more information on this parameter, see the MAX Reference Guide.)

#### Specifying raw TCP hosts

To specify IP addresses or DNS names of hosts to which you establish a raw TCP connection, proceed as follows:

1. Open the Ethernet > Mod Config > TServ options menu.

2. Select one of the Host # Addr fields and enter the following:

       rawTcp host portnumber

   `rawTcp` is the required string that causes the MAX to establish a raw TCP connection when the user chooses this host number. This entry is case-sensitive and must be entered exactly as shown.

   host can be the DNS name of the host or the IP address of the host. The total number of characters, including all three strings and the delimiting spaces, must not exceed 31.

   portnumber is the number of the port on which the connection for this host is to be established.

3. Enter a description of the host in the Host # Text field.

Note: You cannot configure raw TCP hosts if you are using a RADIUS server to provide the list of hosts.

##### Example of configuration combining Telnet hosts and raw TCP hosts

Suppose you specify the following values in the TServ Options menu:

    Remote Conf=No
    Host #1 Addr=10.10.10.1
    Host #1 Text=Cleveland
    Host #2 Addr=
    Host #2 Text=
    Host #3 Addr=
    Host #3 Text=
    Host #4 Addr=rawTcp corp-host 7
    Host #4 Text=The Office - port 7
    Immed Service=None
    Immed Host=N/A
    Immed Port=N/A
    Telnet Host Auth=No

If you then execute the Menu command, the following menu appears:

    ** Ascend Pipeline Terminal Server **

         1. Cleveland
         2. The Office - port 7

         Enter Selection (1-2,q)

If you select 2, the MAX establishes raw a CP connection on port 7 to the host named `corp-host.`

If a you select 1, the MAX establishes a Telnet connection on port 23, the default Telnet port, to the host address 10.10.10.1.

#### Telnet

The Telnet command initiates a login session to a remote host. It uses the following format:

    where telnet [-a|-b|-t] hostname [port-number]

- `-a | -b | -t` are optional arguments specifying ASCII, Binary, or Transparent mode, respectively. If one of the arguments is entered, it overrides the setting of the Telnet Mode parameter.

  In ASCII mode, the MAX uses standard 7-bit mode. In Binary mode, the MAX tries to negotiate 8-bit mode with the server at the remote end of the connection, so that the user can send and receive binary files by means of 8-bit file transfer protocols. In transparent mode, either of the other modes can be used without specifying the node.

- `hostname``` can be the remote system's DNS name if you have configured DNS. If you have not, you must specify the IP address of the remote system.

- `port-number` is an optional argument specifying the port to use for the session. The default is 23, which is the port number of the well-known port for Telnet.

For example, if your DNS table has an entry for `myhost`, you can open a telnet session with that host as follows:

    ascend% telnet myhost

If you do not configure DNS, you must specify the host's IP address instead. There are also several options in the Ethernet > Mod Config > TServ Options subprofile that affect Telnet; for example, if you set Def Telnet to Yes, you can just type a hostname to open a Telnet session with that host:

    ascend% myhost

Another way to open a session is to invoke Telnet first, then enter the Open command at the Telnet prompt. For example:

    ascend% telnet
    telnet> open myhost

When your screen displays the`telnet>` prompt, you can enter any of the Telnet commands described in Telnet session commands. You can quit the Telnet session at any time by entering the Quit command at the Telnet prompt:

    telnet> quit

Note: During an open Telnet connection, press Ctrl-] to display the`telnet>` prompt and the Telnet command-line interface. Any valid Telnet command returns you to the open session. Note that Ctrl-] does not function in binary mode Telnet. If you log into the MAX by Telnet, you might want to change the escape sequence from Ctrl-] to a different setting.

##### Telnet session commands

The commands in this section can be entered at the Telnet prompt during an open session. To display the Telnet prompt while logged in to a host, press Ctrl-] (hold down the Control key and type a right bracket). To display information about Telnet session commands, use the Help or ? command. For example:

    telnet> ?

To open a Telnet connection after invoking Telnet, use the Open command. For example:

    telnet> open myhost

To send standard Telnet commands such as Are You There or Suspend Process, use the Send command. For example:

    telnet> send susp

For a list of Send commands and their syntax, enter the Send command with a question mark:

    telnet> send ?

To specify special characters for use during the Telnet session, use the Set command. For example:

    telnet> set eof ^D

To display current settings, enter the Set All command:

    telnet> set all

To display a list of Set commands, enter the Set command with a question mark:

    telnet> set ?

To quit the Telnet session and close the connection, enter the Close or Quit command. For example:

    telnet> close

##### Telnet error messages

The MAX generates an error message for any condition that causes the Telnet session to fail or terminate abnormally. The following error messages can appear:

- `no connection: host reset-`The destination host reset the connection.

- `no connection: host unreachable-`The destination host is unreachable.

- `no connection: net unreachable`-The destination network is unreachable.

- `Unit busy. Try again later.-`The host already has open the maximum number of concurrent Telnet sessions.

#### Rlogin command

The Rlogin command initiates a login session to a remote host. The command has the following format:

    rlogin [-echar] hostname [-1username]

    where:

- -echar sets the escape character to char. For example:

      rlogin -e$ 10.2.3.4

  The default escape character is a tilde (~).

- `hostname` can be the remote system's DNS name if you have configured DNS. If oyu have not, you must specify the IP address of the remote system.

- `-``lusername` specifies that you log into the remote host as `username`, rather than as the name with which you logged into the terminal server. (If you logged in through RADIUS or TACACS, you must be prompted for this option.) If you can specify this option on the command line, you can enter it either before or after the hostname argument. For example, the following two lines perform identical functions:

      rlogin -l jim 10.2.3.4
      rlogin 10.2.3.4 -l jim

To terminate the remote login, choose the Exit command at the remote system's prompt. Or, you can press the Enter key, then type the escape character followed by a period.

    <CR><ESC-CHAR><PERIOD>

For example, to terminate a remote login that was initiated with the default escape character (a tilde), press the Enter key, then the ~ key, then the . key.

    ~.

#### TCP

The TCP command initiates a login session to a remote host. The command has the following format:

    tcp hostname [port-number]

where:

- `hostname` can be the remote system's DNS name if you have configured DNS. If oyu have not, you must specify the IP address of the remote system.

- `port-number` specifies the port to use for the session. The port number typically indicates a custom application that runs on top of the TCP session. For example, port number 23 starts a Telnet session. However, terminating the Telnet session does not terminate the raw TCP session.

When the raw TCP session starts running, the MAX displays the word `connected`. You can then use the TCP session to transport data by running an application on top of TCP. You can hang up the device at either end to terminate the raw TCP session. If you are using a remote terminal-server session, ending the connection also terminates raw TCP.

If a raw TCP connection fails, the MAX returns one of the following error messages:

- ```Cannot open session:``hostname port-number-`You entered an invalid or unknown value for `hostname`, you entered an invalid value for `port-number`, or a port number was required and you failed to enter it.

- `no connection: host reset`- The destination host reset the connection.

- `no connection: host unreachable`- The destination host is unreachable.

- `no connection: net unreachable`- The destination network is unreachable.

#### Open, Resume, and Close

If the MAX has digital modems installed and Modem Dialout is enabled in the TServ Options submenu, a local user can issue AT commands to the modem as if connected locally to the modem's asynchronous port. To set up a virtual connection to a modem, enter the Open command. Use the following format:

    open [modem number | slot:modemOnSlot]

For example:

    ascend% open 7:1

If you are unsure which slot or item number to specify, the Show Modems command displays the possible choices. If you enter the Open command without specifying any of the optional arguments, the MAX opens a virtual connection to the first available modem.

Once you have connected to the modem, you can issue AT commands to the modem and receive responses from it.

You can temporarily suspend a virtual connection by pressing Ctrl-C three times. This control sequence causes the MAX to display the terminal-server interface again. To resume a virtual connection suspended with Ctrl-C, can enter the Resume command at the terminal-server prompt:

ascend% resume

To terminate a virtual connection, enter the Close command at the terminal-server prompt:

ascend% close

### Administrative commands

The following commands (shown as they appear in the Help display) are useful for system administration:

test | test <number> frame-count> ] [ <optional fields> ]
remote | remote <station>
set | Set various items. Type 'set ?' for help
show | Show various tables. Type 'show ?' for help
kill | terminate session

#### Test

The MAX can use two open channels to run a self-test in which it calls itself, by placing the call on one channel and receiving it on the other channel. To run the test, execute the TEST command which has the following format:

`test phonenumber``[``frame-count``] [``optional fields``]`

where `phonenumber` is the phone number of the channel receiving the test call. This can include the numbers 0 through 9 and the characters `()[]-, but cannot` include spaces.

[`frame-count`] The optional frame-count argument is a number from 1 to 65535 specifying the number of frames to send during the test. The default is 100. The `optional fields` are the following:

- [`data-svc`=`data-svc`]

  where data-svc, is a data service identical to any of the values available for the Data Svc parameter of the Connection profile. (For a list of valid values, see the Reference Guide for your MAX.) If you do not specify a value, the default value is the one specified for the Data Svc parameter.

- [`call-by-call`=`T1-PRI-service`]

  where T1-PRI-service, is any value available to the Call-by-Call parameter of the Connection profile. The Call-by-Call parameter specifies the PRI service that the MAX uses when placing a PPP call. (For a list of valid values, see the Reference Guide for your MAX.) If you do not specify a value, the default is as specified for the Call-by-Call parameter.

- [`primary-number-type`=`AT&T-switch`]

  where AT&T-switch, is any value available to the PRI # Type parameter of the Connection profile. The PRI # Type parameter specifies an AT&T switch. (For a list of valid values, see the Reference Guide for your MAX.) If you do not specify a value, the default value is the one specified for the PRI # Type parameter.

- [`transit-number`=`IEC`]

  where IEC, is any value available to the Transit # parameter of the Connection profile. The Transit # parameter specifies the U.S. Interexchange Carrier (IEC) you use for long distance calls over a PRI line. (For a list of valid values, see the Reference Guide for your MAX.) If you do not specify a value, the default is as specified for the Transit # parameter.

Here is a simple example of entering the Test command:

ascend% test 555-1212

You can press Ctrl-C at any time to terminate the test. While the test is running, the MAX displays the status. For example:

    calling...answering...testing...end
    200 packets sent, 200 packets received

If you enable trunk groups on the MAX, you can specify the outgoing lines to be used in the self-test. If you do not, the MAX uses the first available T1 (or E1) line. For example, if you assign trunk group 7 to line 1 on a Net/BRI module, and your PBX requires a preceding 9 is for an outgoing call, the following command places the outgoing call on line 1 of the Net/BRI module:

ascend% test 7-9-555-1212

The MAX generates an error message for any condition that causes the test to terminate before sending the full number of packets. The following error messages can appear:`

#### Message | #### Explanation
--- | ---
bad digits in phone number | The phone number you specified contained a character other than the numbers 0 through 9 and the characters `()[]-`
call failed | The MAX did not answer the outgoing call. Can indicate a wrong phone number or a busy phone number. Use the Show ISDN command to determine the nature of the failure
call terminated N1 packets sent N2 packets received | This message indicates the number of packets sent (N1) and received (N2).
cannot handshake | The MAX answered the outgoing call, but the two sides did not properly identify themselves. Can indicate that the call was routed to the wrong MAX module, or that the phone number was incorrect.
frame-count must be in the range 1-65535 | The number of frames requested exceeded 65535.
no phone number | You did not specify a phone number on the command line.
test aborted | The test was terminated (Ctrl-C).
unit busy | You attempted to start another self-test when one was already in progress. You can run only one self-test at a time.
unknown items on command-line | The command line contained unknown items. Inserting one or more spaces in the telephone number can generate this error.
unknown option option | The command-line contained the option specified by option, which is invalid.
unknown value value | The command-line contained the value specified by value, which is invalid
wrong phone number | A device other than the MAX answered the call. Therefore, the phone number you specified was incorrect

`

#### Remote

After an MP+ connection has been established with a remote station (for example, by using the DO Dial command), you can start a remote management session with that station by entering the Remote command in the following format:

    remote station

For example:

    ascend% remote lab17gw

During the remote management session, the user interface of the remote device replaces your local user interface, as if you had opened a Telnet connection to the device. You can enter Ctrl-\ at any time to terminate the Remote session. Note that either end of an MP+ link can terminate the session by hanging up all channels of the connection.

The argument to the Remote command is the name of the remote station. It must match the value of a Station parameter in a Connection profile that allows outgoing MP+ calls, or the `user-id` at the start of a RADIUS profile set up for outgoing calls.

Note: A remote management session can time out because the traffic it generates does not reset the idle timer. Therefore, the Idle parameter in the Connection profile at both the calling and answering ends of the connection should be disabled during a remote management session, and restored just before exiting. Remote management works best at higher terminal speeds.

At the beginning of a remote management session, you have privileges set by the default Security profile at the remote end of the connection. To activate administrative privileges on the remote station, activate the appropriate remote Security profile by using the DO Password command (as described in Activating administrative permissions).

The MAX generates an error message for any condition that causes the test to terminate before sending the full number of packets. The following error messages can appear:

#### Message | #### Explanation
--- | ---
not authorized | Your current security privileges are insufficient for beginning a remote management session. To assign yourself the required privileges, log in with the DO PASSWORD command to a Security profile whose Edit System parameter is set to Yes.
cannot find profile for <station> | The MAX could not locate a local Connection profile containing a Station parameter whose value matched <station>.
profile for <station> does not specify MPP | The local Connection profile containing a Station value equal to <station> did not contain Encaps=MPP.
cannot establish connection for <station> | The MAX located a local Connection profile containing the proper Station and Encaps settings, but it could not complete the connection to the remote station.
<station> did not negotiate MPP | The remote station did not negotiate an MP+ connection. This error occurs most often when the remote station does not support MP+, but does support PPP.
far end does not support remote management | The remote station is running a version of MP+ that does not support remote management.
management session failed | A temporary condition, such as premature termination of the connection, caused the management session to fail.
far end rejected session | The remote station was configured to reject remote management; its Remote Mgmt parameter was set to No in the System profile.

#### Set

The Set command takes several arguments. To display them, enter the Set command with a question mark:

    ascend% set ?

    set ?               Display help information
    set all             Display current settings
    set term            Sets the telnet/rlogin terminal type
    set password        Enable dynamic password serving
    set fr              Frame Relay datalink control
    set circuit         Frame Relay Circuit control

The Set All command displays current settings. For example:

    ascend% set all

    term = vt100
    dynamic password serving = disabled

To specify a terminal type other than VT100, use the Set Term command.

The Set Password command puts the terminal server in password mode, in which a third-party ACE or SAFEWORD server at a secure site can display password challenges dynamically in the terminal-server interface. When the terminal server is in password mode, it passively waits for password challenges from a remote ACE or SAFEWORD server. The Set Password command applies only when using security card authentication. Enter the command as follows:

    ascend% set password

    Entering Password Mode...

    [^C to exit] Password Mode>

To return to normal terminal-server operations and thereby disable password mode, press Ctrl-C.

Note that each channel of a connection to a secure site requires a separate password challenge, so for multichannel connections to a secure site, you must leave the terminal server in password mode until all channels have been established. The APP Server utility provides an alternative way to allow users to respond to dynamic password challenges obtained from hand-held security cards. For details about dynamic password serving, see the MAX Security Supplement.

The Set FR commands enable you to bring down the nailed connection specified in the named Frame Relay profile. The connection reestablished within a few seconds. The Set Circuit commands let you activate or deactivate a Frame Relay circuit. For details, see the Network Configuration Guide for your MAX.

#### Show

The Show command takes several arguments. To display them, enter the Show command with a question mark:

    ascend% show ?

     show ?

     Display help information

     show arp

     Display the arp cache

     show icmp

     Display ICMP information

     show if

     Display Interface info. Type 'show if ?' for help

     show ip

     Display IP information. Type 'show ip ?' for help

     show udp

     Display UDP information. Type 'show udp ?' for help

     show igmp

     Display IGMP information. Type 'show igmp ?' for help

     show mrouting

     Display MROUTING information. Type 'show mrouting ?' f ?'

     show ospf

     Display OSPF information. Type 'show ospf ?' for help.

     show tcp

     Display TCP information. Type 'show tcp ?' for help

     show dnstab

     Display local DNS table. Type 'show dnstab ?' for help

     show netware

     Display IPX information. Type 'show netware ? ' for help

     show isdn

     Display ISDN events.  Type 'show isdn <line number>' for help

     show fr

     Display Frame relay info. Type 'show fr ?' for help

     show pools

     Display the assign address pools

     show modems

     Display status of all modems

     show calls

     Display status of calls

     show pad

     Display X25/PAD information

     show uptime

     Display system uptime

     show revision

     Display system revision

     show v.110s

     Display status of all v.110 cards

     show users

     Display concise list of active users

     show x25

     Display status of X.25 stack

     show dnis session

     Display active DNIS sessions

     show dnis statistics

     Display DNIS statistics

Note: Many of the Show commands are specific to a particular type of usage, such as, IP routing or OSPF. The chapters of this guide that relate to these types of connection and routing describe the relevant Show commands.

##### Show commands related to network information

The following Show commands are related to monitoring protocols and other network-specific information and are discussed in Chapter 5, Network Administration:

    show arp

    show icmp

    show if

    show ip

    show udp

    show igmp

    show mrouting

    show ospf

    show tcp

    show dnstab

    show netware

    show fr

    show pools

    show pad

    show x25

##### Show ISDN

The Show ISDN command enables the MAX to display the last 20 events that have occurred on the specified ISDN line. Enter the command in the following format:

    show isdn line-number

where `line-number` is the number of the ISDN line. (For details about how lines are numbered, see the Network Configuration Guide for your MAX.) For example, to display information about the leftmost built-in WAN port, you would enter the following command:

    ascend% show isdn 0

The MAX responds with one or more of the following messages:

    PH: ACTIVATED
    PH: DEACTIVATED
    DL: TEI ASSIGNED (BRI interfaces only)
    DL: TEI REMOVED (BRI interfaces only)
    NL: CALL REQUEST
    NL: CLEAR REQUEST
    NL: ANSWER REQUEST
    NL: CALL CONNECTED
    NL: CALL FAILED/T303 EXPIRY
    NL: CALL CLEARED/L1 CHANGE
    NL: CALL REJECTED/OTHER DEST
    NL: CALL REJECTED/BAD CALL REF
    NL: CALL REJECTED/NO VOICE CALLS
    NL: CALL REJECTED/INVALID CONTENTS
    NL: CALL REJECTED/BAD CHANNEL ID
    NL: CALL FAILED/BAD PROGRESS IE
    NL: CALL CLEARED WITH CAUSE

In some cases, the message can include a phone number (prefixed by #), a data service (suffixed by K for Kbps), a channel number, TEI assignment, and cause code. For example, the following information might appear:

    PH: ACTIVATED
    NL: CALL REQUEST: 64K, #442
    NL: CALL CONNECTED: B2, #442
    NL: CLEAR REQUEST: B1
    NL: CALL CLEARED WITH CAUSE 16 B1 #442

For information about each of the messages that can appear, see the CCITTT Blue Book Q.931 or other ISDN specifications.

##### Show Modems

To display the status of the MAX unit's digital modems, enter the Show Modems command. For example, the following output is from a MAX with a V.34 modem slot card in slot 8:

    ascend% show modems

    slot:item    modem    status
       8:1         1       online
       8:2         2       online
       8:3         3       online
       8:4         4       idle
       8:5         5       idle
       8:6         6       idle
       8:7         7       idle
       8:8         8       idle

For 8-MOD and 12-MOD K56Flex modem slot cards, the numbering is not sequential, but the numbering does not affect functionality. For example, if you have an 8-MOD modem card in slot 8 in a MAX, the Show Modems command in the terminal- server displays the following output:

    ascend% show modems

    slot:item      modem    status
    8:0         1      idle
    8:1         2      idle
    8:2         3      idle
    8:3         4      idle
    8:6         5      idle
    8:7         6      idle
    8:10        7      idle
    8:11        8      idle

As another example, if you have a 12-MOD modem card in slot 8 in a MAX, the Show Modems command in the terminal-server displays the following output:

    ascend% show modems

    slot:item      modem    status
    8:0         1      idle
    8:1         2      idle
    8:2         3      idle
    8:3         4      idle
    8:4         5      idle
    8:5         6      idle
    8:6         7      idle
    8:7         8      idle
    8:8                  9            idle
    8:9                10            idle
    8:12              11            idle
    8:13              12            idle

Following are descriptions of the output contains these fields:

#### Field | #### Description
--- | ---
slot item | The slot and port number of the modem. For example, 8:1 indicates the first port on the digital modem card installed in slot 8.
modem | The SNMP interface number of each modem.
status | Modem status, which can be one of the following strings: `idle`-The modem is not in use. `awaiting DCD`-The call is up and waiting for DCD. `awaiting codes`-DCD is up, and the call is waiting for modem result codes. `online`-The call is up. The modem can now send and receive data. `initializing`-The modem is being reset.

##### Show Calls

The Show Calls command displays information about active calls on a German 1TR6 or Japanese NTT switch type. For example:

    ascend% show calls

    Call ID  Called Party ID Calling Party ID InOctets OutOctets

    3        5104563434      4191234567        0        0
    4        4197654321      5108888888        888888   99999

The output includes the following fields:

#### Field | #### Description
--- | ---
CallID | An identifier for the call
CalledPartyID | The telephone number of the answering device (that is, this unit). This ID is obtained from layer 3 protocol messages during call setup.
CallingPartyID | The telephone number of the caller. This ID is obtained from layer 3 protocol messages during call setup.
InOctets | The total number of octets received by the user from the moment the call begins until it is cleared.
OutOctets | The total number of octets sent by the user from the moment the call begins until it is cleared.

##### Show Uptime

To see how long the MAX has been running, enter the Show Uptime command. For example:

    ascend% show uptime

    system uptime: up 2 days, 4 hours, 38 minutes, 43 seconds

If the MAX stays up for 1000 consecutive days with no power cycles, the number of days displayed resets to 0 and begins to increment again.

##### Show Revision

The Show Revision command displays the software load and version number currently running on the MAX. For example:

    ascend% show revision

    techpubs-lab-17 system revision: ebiom.m40 5.0A

##### Show V.110s

To display the status of the MAX unit's V.110 cards, enter the Show V.110s command:

    ascend% show v.110s

    slot:item    v.110s    status
       4:1         1       in use
       4:2         2       in use
       4:3         3       in use
       4:4         4       open issued
       4:5         5       carrier detected
       4:6         6       session closed
       4:7         7       idle
       4:8         8       in use

The output includes the following fields:

#### Field | #### Description
--- | ---
slot item | The slot and port number of the V.110 port. For example, 8:1 indicates the first port on the V.110 card installed in slot 8.
v.110s | The SNMP interface number of each V.110 card.
status | V.110 port status, which can be one of the following strings: `idle`-The V.110 port is not in use. `open` `issued`-An open was issued, but the MAX has not synced up with the far end. `carrier` `detected`-A carrier was detected from the remote end. `in use`-A V.110 session is up.

##### Show Users

To display the number of active sessions, enter the Show Users command. For example:

    ascend% show users

    I  Session        Line:  Slot:  Tx        Rx        Service        Host                  User

    O  ID                  Chan    Port    Data    Rate    Type[mpID]  Address            Name

    O  231849873    1:1      9:1      56K      56K      MPP[1]          10.10.68.2      jdoe

    I  231849874    1:3      3:1      28800  33600  Termsrv        N/A                    Modem  3:1

    O 214933581    1:2      9:2      56K      56K      MPP[1]          10.10.4.9        arwp50

    O 214933582    1:6      9:3      56K      56K      MPP[1]          MPP Bundle      arwp50

The output includes the following fields:

#### Field | #### Content
--- | ---
IO | I for an incoming call or O for an outgoing call
Session ID | Unique session-ID. This is the same as Acct-Session-ID in RADIUS.
Line:Chan | Line and channel on which the session is established.
Slot: Port | Slot and port of the service being used by the session. Can indicate the number of a slot containing a modem card, and the modem on that card. Or can indicate the virtual slot of the MAX unit's bridge/router, with the port indicator showing the virtual interfaces to bridge/router starting with 1 for the first session of a multichannel session.
Tx Data | Transmit data rate in bits per second.
Rx Rate | Receive data rate in bits per second.
Service Type | Type of session, which can be Termsrv or a protocol name. For MP and MPP (MPT), shows the bundle ID shared by the calls in a multichannel session. The special values `Initial` and `Login` document the progress of a session. `Initial` identifies sessions that do not yet have a protocol assigned. `Login` identifies Termsrv sessions during the login process.
Host Address | Network address of the host originating the session. For some sessions this field is N/A. For outgoing MPP sessions only, the first connection has a valid network address associated with it. All other connections in the bundle have the network address listed as `MPP Bundle.`
User Name | The station name associated with the session. Initially, the value is `Answer`, which is usually replaced with the name of the remote host. For terminal-server sessions User Name is the login name. Before completion of login, the field contains the string `modem x:y` where `x` and `y` are the slot and port, respectively, of the modem servicing the session.

#### Kill

The Kill command enables you to disconnect a user who establishes a Telnet connection to the MAX. You can disconnect the user by specifying the session ID. The resulting disconnect code is identical to the RADIUS disconnect code, allowing you to track all administrative disconnects. To terminate a Telnet session, enter the command as follows:

    kill session ID

where `session ID` is the session ID as displayed by the Show Users command described in the preceding section. The reported disconnect cause is DIS_LOCAL_ADMIN. The active Security profile must have Edit All Calls set to Yes. If Edit All Calls=No, the following message appears when you enter the Kill command:

    Insufficient security level for that operation.

When the session is properly terminated, a message similar to the following appears:

    Session 216747095 killed.

When the session is not terminated, a caution similar to the following appears:

    Unable to kill session 216747095.

#### Show DNIS session command

To display active DNIS sessions, enter the Show DNIS Session command:

    ascend% show dnis session

                                          GLOBAL                MODEM                HDLC              V110

        DNIS#                    Used/Max            Used/Max          Used/Max      Used/Max

    0.  Unspecified          0/999                  0/1                    0/0                0/0

    1.  68149                      0/123                  0/456                0/1                0/0

    2.  8867764                  0/1                      0/1                    0/1                0/1

    3.  45566778800          0/0                      0/0                    0/0                0/0

    4.                                  0/0                      0/0                    0/0                0/0

    5.                                  0/0                      0/0                    0/0                0/0

    6.                                  0/0                      0/0                    0/0                0/0

    7.                                  0/0                      0/0                    0/0                0/0

    8.                                  0/0                      0/0                    0/0                0/0

    9.                                  0/0                      0/0                    0/0                0/0

    10.                                0/0                      0/0                    0/0                0/0

    11.                                0/0                      0/0                    0/0                0/0

    12.                                0/0                      0/0                    0/0                0/0

    13.                                0/0                      0/0                    0/0                0/0

    14.                                0/0                      0/0                    0/0                0/0

    15.                                0/0                      0/0                    0/0                0/0

    16.                                0/0                      0/0                    0/0                0/0

In the output:

- `DNIS#`-Displays the last eleven digits of the DNIS number.

- `Used`-Specifies the number of active sessions to the specified DNIS number.

- `Max`-Specifies the value specified in the Ethernet > Mod Config > DNIS options submenu.

If Ethernet > Mod Config > DNIS options > DNIS Limitation = No, and you enter the `Show DNIS Sessions` command, the MAX displays the following message:

    DNIS Inactive

#### Show DNIS statistics command

To display DNIS session statistics, enter the Show DNIS Statistics command:

    ascend% show dnis statistics

                                      GLOBAL                MODEM                HDLC              V110

        DNIS#                  Tot/Accept      Tot/Accept      Tot/Accept  Tot/Accept

    0.  Unspecified      10/9                      0/0                    0/0                0/0

    1.  68149                    0/0                      8/8                    4/4                0/0

    2.  8867764                0/0                      0/0                    0/0                0/0

    3.  45566778800        0/0                      0/0                    0/0                0/0

    4.                                0/0                      0/0                    0/0                0/0

    5.                                0/0                      0/0                    0/0                0/0

    6.                                0/0                      0/0                    0/0                0/0

    7.                                0/0                      0/0                    0/0                0/0

    8.                                0/0                      0/0                    0/0                0/0

    9.                                0/0                      0/0                    0/0                0/0

    10.                              0/0                      0/0                    0/0                0/0

    11.                              0/0                      0/0                    0/0                0/0

    12.                              0/0                      0/0                    0/0                0/0

    13.                              0/0                      0/0                    0/0                0/0

    14.                              0/0                      0/0                    0/0                0/0

    15.                              0/0                      0/0                    0/0                0/0

    16.                              0/0                      0/0                    0/0                0/0

In the output:

- `DNIS#`-Displays the last eleven digits of the DNIS number.

- `Tot`-Specifies the total number of calls received to the specified DNIS number.

- `Accept`-Specifies the total number of calls accepted to the specified DNSI number.

Note: A counter resets when it reaches 10,000, or when you enter the Clear DNIS Statistics command.

If Ethernet > Mod Config > DNIS options > DNIS Limitation = No, and you enter the `Show DNIS Statistics` command, the MAX displays the following message:

    DNIS Inactive

#### Clear DNIS statistics

To clear DNIS session statistics, enter the Clear DNIS Statistics command. The MAX displays the following message:

    Clearing all DNIS Statistics...

Copyright © 1998, Ascend Communications, Inc. All rights reserved.