[Top][Contents][Prev][Next][Last]Search


MAX System Administration


Introduction
Activating administrative permissions
System administration parameters
Terminal-server command-line interface

Introduction

The MAX unit's VT100 interface provides a wide variety of features for monitoring and administering the unit's activities.

The initial display of the VT100 interface shows the Main Edit Menu and a group of status windows. You configure several system administration parameters from the Main Edit Menu. The status windows display a variety of information about the operation of your MAX. You also have access to DO commands, which enable you to perform additional tasks. (To perform any of the administrative tasks, you must activate administrative permissions.)

Also, the VT100 interface provides access to the terminal-server command-line interface, which features a large assortment of powerful commands. For example, you can view the MAX unit's routing tables and statistical information. You can access detailed information about the unit's IP routing table, OSPF routing table, and Frame Relay connections. You can also use the administrative commands Ping, Traceroute, Telnet, and IPXping to establish and test connectivity. You can manually add, delete or change routes in your IP routing table. Descriptions of the commands available through the terminal-server command-line interface form the major part of this chapter.


Note: You can manage the MAX from your workstation by establishing a Telnet session and logging in with sufficient administrative privileges. You can also use Telnet to manage remote Ascend units, such as Pipeline or MAX units.

Activating administrative permissions

Before you can use the administrative commands and profiles, you must log in as a superuser by activating a Security profile that has sufficient permissions (for example, the Full Access profile.) Proceed as follows:

  1. Press Ctrl-D. The DO menu appears:

  2. Press P (or select P=Password).

  3. In the list of Security profiles that opens, select Full Access.

    The MAX prompts you for the Full Access password:

  4. Type the password assigned to the profile, and press Enter. The default password for the Full Access login is Ascend.

    When you enter the correct password, the MAX displays a message informing you that the password was accepted and that the MAX is using the new security level:

    If the password you enter is incorrect, the MAX prompts you again for the password.


Note: The first task you should perform after logging in as the superuser is to assign a new password to the Full Access profile.

System administration parameters

Following are the VT100 system administration parameters (shown with sample settings):

System
Sys Config
Name=gateway-1
Location=east-bay
Contact=thf
Date=2/20/97
Time=10:00:29
Term Rate=9600
Remote Mgmt=Yes
Auto Logout=No
Idle Logout=0
Edit=00-000
Status 1=10-100
Status 2=10-200
Status 3=90-100
Status 4=00-200
Status 5=90-300
Status 6=90-400
Status 7=20-100
Status 8=20-200
Ethernet
Mod Config
Log...
Syslog=Yes
Log Host=10.65.212.12
Log Port=514
Log Facility=Local0
Log CallInfo=None
Log Call Progress=No

Understanding the administrative parameters

This section provides some background information about the administrative options. For more details about the parameters, see the MAX Reference Guide. For background information about additional parameters that appear in the System profile, see the Network Configuration Guide for your MAX.

Name

The Name parameter specifies the system name, which can consist of up to 16 characters. Keeping the name simple (no special characters) is a good idea because it is used in negotiating bridged PPP, AIM, and BONDING connections.

Location and Contact

The Location and Contact settings are SNMP readable and settable. The Location parameter should specify the unit's location, and the Contact parameter should specify the name of the person to contact concerning any problems with the unit. You can enter up to 80 characters.

Date and Time

The Date and Time parameters set the system date and time. If you are using Simple Network Time Protocol (SNTP), the MAX can maintain its date and time by accessing the SNTP server. (For details, see the Network Configuration Guide for your MAX.)

Term rate

The Term Rate parameter specifies the transmission rate for communications with your terminal-emulation program. Any rate higher than 9600 can cause transmission errors.

Also verify that the data rate of your terminal-emulation program is set to 9600 bps or lower.

Remote Mgmt

You can set Remote Mgmt to Yes to enable management of the MAX from a WAN link.

Log out parameters

The Auto Logout parameter specifies whether to log out and go back to default privileges upon loss of Data Transmit Ready (DTR) from the serial port. Idle Logout specifies the number of minutes an administrative login can remain inactive before the MAX logs out and hangs up.

Edit and Status

The Edit and Status parameters customize the status windows in the VT100 interface so that particular screens appear at startup. For details, see the Reference Guide for your MAX.

Configuring the basic parameters

To configure the system name and other basic parameters in the System profile:

  1. Open the System profile.

  2. Specify a system name up to 16 characters long, enter the physical location of the MAX unit, and indicate a person to contact in case of problems. For example:

  3. If necessary, set the system date and time.

  4. Specify the data transfer rate of the MAX control port.

  5. Close the System profile.

Terminal-server command-line interface

The terminal-server command-line interface can provide commands for monitoring networks, initiating sessions, and administering the system.

Accessing the interface

You can start a terminal-server command-line session if you have administrative privileges. (For more information, see "Activating administrative permissions" on page 1-2). You can start a session using one of the following methods:

Esc [ Esc 0
If you have sufficient privileges to invoke the command line, the MAX displays a command-line prompt. For example:

** Ascend Terminal Server **
ascend%

Note: If you have a MAX running Multiband simulation, the following terminal server commands are disabled: Close, Ipxping, Open, Resume, Rlogin, Telnet.

Displaying terminal-server commands

To display the list of terminal-server commands, enter a question mark:

ascend% ?
or the Help command:

ascend% help
The system responds by listing the terminal-server commands, with brief explanations:
?

Displays help information

help

Displays help information

quit

Closes terminal server session

hangup

Closes terminal server session

test

test <number> frame-count.] [ <optional fields>]

local

Go to local mode

remote

remote <station>

set

Set various items. Type `set ?' for help

show

Show various tables. Type `show ?' for help

iproute

Manage IP routes. Type `iproute ?' for help

dnstab

Displays help information about the DNS table. Type 'dnstab ?' for help

slip

SLIP command

cslip

Compressed SLIP command

ppp

PPP command

menu

Host menu interface

telnet

telnet [ -a|-b|-t ] <host-name> [ <port-number> ]

tcp

tcp <host-name> <port-number>

ping

ping <host-name>

ipxping

ipxping <host-name>

traceroute

Trace route to host. Type 'traceroute -?' for help

rlogin

rlogin [ -l user -ec ] <host-name> [ -l user ]

open

open < modem-number | slot:modem-on-slot >

resume

resume virtual connect session

close

close virtual connect session

pptp

pptp <server-name>

l2tp

l2tp <server-name>

ara

ARA command

Returning to the VT100 menus

The following commands close the terminal-server command-line interface and return the cursor to the VT100 menus:

quit 					Closes terminal server session
hangup Closes terminal server session
local Go to local mode
For example:
ascend% quit
When a dial-in user enters the Local command, a Telnet session begins.

Commands for monitoring networks

The following commands are specific to IP or IPX routing connections:

iproute             Manage IP routes.  Type 'iproute ?' for help
ping ping <host-name>
ipxping ipxping <host-name>
traceroute Trace route to host. Type 'traceroute -?' for help
For details about each of the commands, see Chapter 5, "Network Administration."

Commands for use by terminal-server users

The following commands must be enabled for use in Ethernet > Mod Config > TServ Options. If they are enabled, login users can initiate a session by invoking the commands in the terminal-server interface.

slip                SLIP command
cslip Compressed SLIP command
ppp PPP command
menu Host menu interface
telnet telnet [ -a|-b|-t ] <host-name> [ <port-number> ]
rlogin rlogin [ -l user -ec ] <host-name> [ -l user ]
tcp tcp <hostname> <port-number>
open open < modem-number | slot:modem-on-slot >
resume resume virtual connect session
close close virtual connect session
These commands initiate a session with a host or modem, or toggle to a different interface that displays a menu selection of Telnet hosts.

SLIP, CSLIP, and PPP

The SLIP, CSLIP, and PPP commands initiate Serial Line IP, Compressed SLIP, and PPP sessions, respectively, from the terminal-server command line.

Menu

The Menu command invokes the terminal server's menu mode, which lists up to four hosts. The four hosts can be either Telnet hosts, raw TCP hosts or a mixture of the two types.

Specifying Telnet hosts
The Menu command invokes the terminal server's menu mode, which lists up to four Telnet hosts as configured in the Ethernet > Mod Config > TServ Options subprofile. For example:

Up to 16 lines of up to 80 characters each
will be accepted. Long lines will be truncated.
Additional lines will be ignored

1. host1.abc.com
2. host2.abc.com
3. host3.abc.com
4. host4.abc.com
Enter Selection (1-4, q)
This menu was configured in the Tserv Options menu by setting the Host #N Addr and Host #N Text parameters to specify the IP addresses and menu names, respectively, of the four hosts. For example, Host # 1 Addr specifies the IP address of Host1, and Host #1 Text is set to host.abc.com.

To return to the command-line, press 0. Terminal server security must be set up to allow the operator to toggle between the command line and menu mode, or the Menu command has no effect. Enable this function by setting the Toggle Scrn parameter (Ethernet > Mod Config > Tserv Options) to Yes. (For more information on this parameter, see the MAX Reference Guide.)

Specifying raw TCP hosts

To specify IP addresses or DNS names of hosts to which you establish a raw TCP connection, proceed as follows:

  1. Open the Ethernet > Mod Config > TServ options menu.

  2. Select one of the Host # Addr fields and enter the following:

    rawTcp is the required string that causes the MAX to establish a raw TCP connection when the user chooses this host number. This entry is case-sensitive and must be entered exactly as shown.

    host can be the DNS name of the host or the IP address of the host. The total number of characters, including all three strings and the delimiting spaces, must not exceed 31.

    portnumber is the number of the port on which the connection for this host is to be established.

  3. Enter a description of the host in the Host # Text field.


Note: You cannot configure raw TCP hosts if you are using a RADIUS server to provide the list of hosts.

Example of configuration combining Telnet hosts and raw TCP hosts
Suppose you specify the following values in the TServ Options menu:

Remote Conf=No           
Host #1 Addr=10.10.10.1
Host #1 Text=Cleveland
Host #2 Addr=
Host #2 Text=
Host #3 Addr=
Host #3 Text=
Host #4 Addr=rawTcp corp-host 7
Host #4 Text=The Office - port 7
Immed Service=None
Immed Host=N/A
Immed Port=N/A
Telnet Host Auth=No
If you then execute the Menu command, the following menu appears:

** Ascend Pipeline Terminal Server **

1. Cleveland
2. The Office - port 7

Enter Selection (1-2,q)
If you select 2, the MAX establishes raw a CP connection on port 7 to the host named corp-host.

If a you select 1, the MAX establishes a Telnet connection on port 23, the default Telnet port, to the host address 10.10.10.1.

Telnet

The Telnet command initiates a login session to a remote host. It uses the following format:

telnet [-a|-b|-t] hostname [port-number]
where

For example, if your DNS table has an entry for myhost, you can open a telnet session with that host as follows:

ascend% telnet myhost
If you do not configure DNS, you must specify the host's IP address instead. There are also several options in the Ethernet > Mod Config > TServ Options subprofile that affect Telnet; for example, if you set Def Telnet to Yes, you can just type a hostname to open a Telnet session with that host:

ascend% myhost
Another way to open a session is to invoke Telnet first, then enter the Open command at the Telnet prompt. For example:

ascend% telnet
telnet> open myhost
When your screen displays the telnet> prompt, you can enter any of the Telnet commands described in "Telnet session commands" on page 1-10. You can quit the Telnet session at any time by entering the Quit command at the Telnet prompt:

telnet> quit

Note: During an open Telnet connection, press Ctrl-] to display the telnet> prompt and the Telnet command-line interface. Any valid Telnet command returns you to the open session. Note that Ctrl-] does not function in binary mode Telnet. If you log into the MAX by Telnet, you might want to change the escape sequence from Ctrl-] to a different setting.

Telnet session commands
The commands in this section can be entered at the Telnet prompt during an open session. To display the Telnet prompt while logged in to a host, press Ctrl-] (hold down the Control key and type a right bracket). To display information about Telnet session commands, use the Help or ? command. For example:

telnet> ?
To open a Telnet connection after invoking Telnet, use the Open command. For example:

telnet> open myhost
To send standard Telnet commands such as Are You There or Suspend Process, use the Send command. For example:

telnet> send susp
For a list of Send commands and their syntax, enter the Send command with a question mark:

telnet> send ?
To specify special characters for use during the Telnet session, use the Set command. For example:

telnet> set eof ^D
To display current settings, enter the Set All command:

telnet> set all
To display a list of Set commands, enter the Set command with a question mark:

telnet> set ?
To quit the Telnet session and close the connection, enter the Close or Quit command. For example:

telnet> close
Telnet error messages
The MAX generates an error message for any condition that causes the Telnet session to fail or terminate abnormally. The following error messages can appear:

Rlogin command

The Rlogin command initiates a login session to a remote host. The command has the following format:

rlogin [-echar] hostname [-1username]
where:
To terminate the remote login, choose the Exit command at the remote system's prompt. Or, you can press the Enter key, then type the escape character followed by a period.

<CR><ESC-CHAR><PERIOD>
For example, to terminate a remote login that was initiated with the default escape character (a tilde), press the Enter key, then the ~ key, then the . key.

~.

TCP

The TCP command initiates a login session to a remote host. The command has the following format:

tcp hostname [port-number]
where:

When the raw TCP session starts running, the MAX displays the word connected. You can then use the TCP session to transport data by running an application on top of TCP. You can hang up the device at either end to terminate the raw TCP session. If you are using a remote terminal-server session, ending the connection also terminates raw TCP.

If a raw TCP connection fails, the MAX returns one of the following error messages:

Open, Resume, and Close

If the MAX has digital modems installed and Modem Dialout is enabled in the TServ Options submenu, a local user can issue AT commands to the modem as if connected locally to the modem's asynchronous port. To set up a virtual connection to a modem, enter the Open command. Use the following format:

open [modem number | slot:modemOnSlot]
For example:

ascend% open 7:1
If you are unsure which slot or item number to specify, the Show Modems command displays the possible choices. If you enter the Open command without specifying any of the optional arguments, the MAX opens a virtual connection to the first available modem.

Once you have connected to the modem, you can issue AT commands to the modem and receive responses from it.

You can temporarily suspend a virtual connection by pressing Ctrl-C three times. This control sequence causes the MAX to display the terminal-server interface again. To resume a virtual connection suspended with Ctrl-C, can enter the Resume command at the terminal-server prompt:

ascend% resume
To terminate a virtual connection, enter the Close command at the terminal-server prompt:

ascend% close

Administrative commands

The following commands (shown as they appear in the Help display) are useful for system administration:
test

test <number> frame-count> ] [ <optional fields> ]

remote

remote <station>

set

Set various items. Type 'set ?' for help

show

Show various tables. Type 'show ?' for help

Test

The MAX can use two open channels to run a self-test in which it calls itself, by placing the call on one channel and receiving it on the other channel. To run the test, execute the TEST command which has the following format:

test phonenumber [frame-count] [optional fields]

where phonenumber is the phone number of the channel receiving the test call. This can include the numbers 0 through 9 and the characters ()[]-, but cannot include spaces.

[frame-count] The optional frame-count argument is a number from 1 to 65535 specifying the number of frames to send during the test. The default is 100. The optional fields are the following:

Here is a simple example of entering the Test command:

ascend% test 555-1212
You can press Ctrl-C at any time to terminate the test. While the test is running, the MAX displays the status. For example:

calling...answering...testing...end
200 packets sent, 200 packets received
If you enable trunk groups on the MAX, you can specify the outgoing lines to be used in the self-test. If you do not, the MAX uses the first available T1 (or E1) line. For example, if you assign trunk group 7 to line 1 on a Net/BRI module, and your PBX requires a preceding 9 for an outgoing call, the following command places the outgoing call on line 1 of the Net/BRI module:

ascend% test 7-9-555-1212
The MAX generates an error message for any condition that causes the test to terminate before sending the full number of packets. The following error messages can appear:

Message

Explanation

bad digits in phone number

The phone number you specified contained a character other than the numbers 0 through 9 and the characters ()[]-

call failed

The MAX did not answer the outgoing call. Can indicate a wrong phone number or a busy phone number. Use the Show ISDN command to determine the nature of the failure

call terminated N1 packets sent N2 packets received

This message indicates the number of packets sent (N1) and received (N2).

cannot handshake

The MAX answered the outgoing call, but the two sides did not properly identify themselves. Can indicate that the call was routed to the wrong MAX module, or that the phone number was incorrect.

frame-count must be in the range 1-65535

The number of frames requested exceeded 65535.

no phone number

You did not specify a phone number on the command line.

test aborted

The test was terminated (Ctrl-C).

unit busy

You attempted to start another self-test when one was already in progress. You can run only one self-test at a time.

unknown items on command-line

The command line contained unknown items. Inserting one or more spaces in the telephone number can generate this error.

unknown option option

The command-line contained the option specified by option, which is invalid.

unknown value value

The command-line contained the value specified by value, which is invalid

wrong phone number

A device other than the MAX answered the call. Therefore, the phone number you specified was incorrect

Remote

After an MP+ connection has been established with a remote station (for example, by using the DO Dial command), you can start a remote management session with that station by entering the Remote command in the following format:

remote station
For example:

ascend% remote lab17gw
During the remote management session, the user interface of the remote device replaces your local user interface, as if you had opened a Telnet connection to the device. You can enter Ctrl-\ at any time to terminate the Remote session. Note that either end of an MP+ link can terminate the session by hanging up all channels of the connection.

The argument to the Remote command is the name of the remote station. It must match the value of a Station parameter in a Connection profile that allows outgoing MP+ calls, or the user-id at the start of a RADIUS profile set up for outgoing calls.


Note: A remote management session can time out because the traffic it generates does not reset the idle timer. Therefore, the Idle parameter in the Connection profile at both the calling and answering ends of the connection should be disabled during a remote management session, and restored just before exiting. Remote management works best at higher terminal speeds.

At the beginning of a remote management session, you have privileges set by the default Security profile at the remote end of the connection. To activate administrative privileges on the remote station, activate the appropriate remote Security profile by using the DO Password command (as described in "Activating administrative permissions" on page 1-2).

The MAX generates an error message for any condition that causes the test to terminate before sending the full number of packets. The following error messages can appear:

Message

Explanation

not authorized

Your current security privileges are insufficient for beginning a remote management session. To assign yourself the required privileges, log in with the DO PASSWORD command to a Security profile whose Edit System parameter is set to Yes.

cannot find profile for <station>

The MAX could not locate a local Connection profile containing a Station parameter whose value matched <station>.

profile for <station> does not specify MPP

The local Connection profile containing a Station value equal to <station> did not contain Encaps=MPP.

cannot establish connection for <station>

The MAX located a local Connection profile containing the proper Station and Encaps settings, but it could not complete the connection to the remote station.

<station> did not negotiate MPP

The remote station did not negotiate an MP+ connection. This error occurs most often when the remote station does not support MP+, but does support PPP.

far end does not support remote management

The remote station is running a version of MP+ that does not support remote management.

management session failed

A temporary condition, such as premature termination of the connection, caused the management session to fail.

far end rejected session

The remote station was configured to reject remote management; its Remote Mgmt parameter was set to No in the System profile.

Set

The Set command takes several arguments. To display them, enter the Set command with a question mark:

ascend% set ?
set ?               Display help information
set all Display current settings
set term Sets the telnet/rlogin terminal type
set password Enable dynamic password serving
The Set All command displays current settings. For example:

ascend% set all
term = vt100
dynamic password serving = disabled
To specify a terminal type other than VT100, use the Set Term command.

The Set Password command puts the terminal server in password mode, in which a third-party ACE or SAFEWORD server at a secure site can display password challenges dynamically in the terminal-server interface. When the terminal server is in password mode, it passively waits for password challenges from a remote ACE or SAFEWORD server. The Set Password command applies only when using security card authentication. Enter the command as follows:

ascend% set password
Entering Password Mode...

[^C to exit] Password Mode>
To return to normal terminal-server operations and thereby disable password mode, press Ctrl-C.

Note that each channel of a connection to a secure site requires a separate password challenge, so for multichannel connections to a secure site, you must leave the terminal server in password mode until all channels have been established. The APP Server utility provides an alternative way to allow users to respond to dynamic password challenges obtained from hand-held security cards. For details about dynamic password serving, see the MAX Security Supplement.

The Set FR commands enable you to bring down the nailed connection specified in the named Frame Relay profile. The connection reestablished within a few seconds. The Set Circuit commands let you activate or deactivate a Frame Relay circuit. For details, see the Network Configuration Guide for your MAX.

Show

The Show command takes several arguments. To display them, enter the Show command with a question mark:

ascend% show ? 
show ?

Display help information

show arp

Display the arp cache

show icmp

Display ICMP information

show if

Display Interface info. Type 'show if ?' for help

show ip

Display IP information. Type 'show ip ?' for help

show udp

Display UDP information. Type 'show udp ?' for help

show tcp

Display TCP information. Type 'show tcp ?' for help

show dnstab

Display local DNS table. Type 'show dnstab ?' for help

show netware

Display IPX information. Type 'show netware ? ' for help

show isdn

Display ISDN events. Type 'show isdn <line number>' for help

show uptime

Display system uptime

show revision

Display system revision

show sessid

Display current and base session id


Note: Many of the Show commands are specific to a particular type of usage, such as, IP routing or OSPF. The chapters of this guide that relate to these types of connection and routing describe the relevant Show commands.

Show commands related to network information
The following Show commands are related to monitoring protocols and other network-specific information and are discussed in Chapter 5, "Network Administration":

show arp
show icmp
show if
show ip
show udp
show tcp
show dnstab
show netware
Show ISDN
The Show ISDN command enables the MAX to display the last 20 events that have occurred on the specified ISDN line. Enter the command in the following format:

show isdn line-number
where line-number is the number of the ISDN line. (For details about how lines are numbered, see the Network Configuration Guide for your MAX.) For example, to display information about the leftmost built-in WAN port, you would enter the following command:

ascend% show isdn 0
The MAX responds with one or more of the following messages:

PH: ACTIVATED
PH: DEACTIVATED
DL: TEI ASSIGNED (BRI interfaces only)
DL: TEI REMOVED (BRI interfaces only)
NL: CALL REQUEST
NL: CLEAR REQUEST
NL: ANSWER REQUEST
NL: CALL CONNECTED
NL: CALL FAILED/T303 EXPIRY
NL: CALL CLEARED/L1 CHANGE
NL: CALL REJECTED/OTHER DEST
NL: CALL REJECTED/BAD CALL REF
NL: CALL REJECTED/NO VOICE CALLS
NL: CALL REJECTED/INVALID CONTENTS
NL: CALL REJECTED/BAD CHANNEL ID
NL: CALL FAILED/BAD PROGRESS IE
NL: CALL CLEARED WITH CAUSE
In some cases, the message can include a phone number (prefixed by #), a data service (suffixed by K for Kbps), a channel number, TEI assignment, and cause code. For example, the following information might appear:

PH: ACTIVATED
NL: CALL REQUEST: 64K, #442
NL: CALL CONNECTED: B2, #442
NL: CLEAR REQUEST: B1
NL: CALL CLEARED WITH CAUSE 16 B1 #442
For information about each of the messages that can appear, see the CCITTT Blue Book Q.931 or other ISDN specifications.

Show Uptime
To see how long the MAX has been running, enter the Show Uptime command. For example:

ascend% show uptime
system uptime: up 2 days, 4 hours, 38 minutes, 43 seconds
If the MAX stays up for 1000 consecutive days with no power cycles, the number of days displayed resets to 0 and begins to increment again.

Show Revision
The Show Revision command displays the software load and version number currently running on the MAX. For example:

ascend% show revision
techpubs-lab-17 system revision: ebiom.m40 5.0A































































[Top][Contents][Prev][Next][Last]Search

techpubs@ascend.com

Copyright © 1998, Ascend Communications, Inc. All rights reserved.