Home

MC ASN-GW System Manual, Ver.3.5

1. Command Global configuration mode Modes 3 3 10 1 7 Creating a Collected System Logs File To create a collected system log file that contains all current logs status and configuration files of the system run the following command npu collect logs The name of the file is system_logs_ lt Date amp Time gt tar Command npu collect logs Syntax Privilege 10 Level Command Global command mode Modes 3 3 10 1 8 Transferring Files from the NPU Flash to a TFTP Server To transfer files from the NPU flash to a TFTP server run the following command npu transfer logs server ip lt ip addr gt file lt file name tar gt All Latest Command npu transfer logs server ip lt ip addr gt file lt file name tar gt All Syntax Latest BreezeMAX Mini Centralized ASN GW System Manual D Chapter 3 Operation and Administration Using the CLI Unit Configuration Privilege 10 Level Syntax Deactipse Parameter Description Presence Default Possible Values A Value lt ip addr gt Indicates the IP address of the Mandatory N A IP address destination TFTP server lt file name The file s to be transferred Mandatory N A E lt file name A tar gt none a lt file name gt tar A selected file a Ai j eee that exists in the flash E Latest All All files in the flash Latest The latest created file Command Global command mode Modes 3 3 10 1 9 Displaying Lo
2. Command npu config log destination file server lt IP address gt Syntax Privilege 10 Level Syntax Descriptio Parameter Description Presence Default Possible Values a Value file server Indicates whether logs are to Mandatory N A E file lt IP address gt be written to a file or server E server lt IP file Indicates that logs are to Bones be written to a file Logs written to file are not maintained after system reset periodically save the log file to flash For details refer to Section 3 3 10 1 5 server Indicates that logs are to be written to an external server Specify the server IP address of the server in the format XXX XXX XXX XXX Command Global configuration mode Modes 3 3 10 1 2 Disabling Logging to File or Server To disable logging to file or server run the following command npu config no log destination file server lt IP address gt NOTE An error may occur if E Logging is already disabled for the requested destination file or server E An internal error has occurred The server IP address that you have specified does not exist Command Syntax npu config no log destination file server lt IP address gt BreezeMAX Mini Centralized ASN GW System Manual Privilege Level Syntax Descriptio n Command Modes 3 3 10 1 3 Chapter 3 Operation and Administration Using the CLI Unit Configuration 10 Parameter Description Presence
3. if alias lt string gt Indicates the Reference Name for an existing QinQ service interface Applicable only if the assigned Service Group is of type VPWS QinQ in a VLANCS Service Flow of the Default Service Profile Mandatory when creating a new flow only if the type of the specified grp alias is VPWS QinQ N A An existing QinQ Service Interface BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration 3 3 9 11 3 3 2 Specifying Service Flow Configuration Parameters Command Service profile configuration mode Modes After enabling the service flow configuration mode run the following command to configure the parameters for this service flow npu config srvcprfl flow config flow type lt type 1 gt cs type lt type 1 4 gt media type lt string gt uldatadlvry type lt type 0 lt UGS gt 1 lt RTVR gt 2 lt NRTVR gt 3 lt BE gt 4 lt ERTVR gt 255 lt ANY gt gt ulgqos maxsustainedrate lt value 10000 40000000 gt ulqos trafficpriority lt value 0 7 gt dldatadlvry type lt type 0 lt UGS gt 1 lt RTVR gt 2 lt NRTVR gt 3 lt BE gt 4 lt ERTVR gt 255 lt ANY gt gt dlqos maxsustainedrate lt value 10000 40000000 gt dlgos trafficpriority lt value 0 7 gt ul rsrv rate min lt integer 0 40000000 gt ul latency max lt integer g
4. Chapter 3 Operation and Administration Using the CLI Unit Configuration Display lt Port Number gt lt up down gt line protocol is lt up down gt connected MTU lt value Format gt bytes Physical lt Full half gt duplex Interfaces lt value gt Mbps Auto Negotiation Octets lt value gt Unicast Packets lt value gt Broadcast Packets lt value gt Multicast Packets lt value gt Discarded Packets lt value gt Error Packets lt value gt Unknown Packets lt value gt Octets lt value gt Unicast Packets lt value gt Broadcast Packets lt value gt Multicast Packets lt value gt Discarded Packets lt value gt Error Packets lt value gt Display lt IP Interface Name gt lt up down gt MTU lt value gt bytes Format IP lt value gt InBytes Interfaces lt value gt InUnicast Packets lt value gt InDiscarded Packets lt value gt InError Packets lt value gt OutBytes lt value gt OutUnicast Packets Display lt Virtual Interface Name gt interfac Format Virtual Acls attached lt A list of attached ACLs according to order of priority gt Interfaces BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Command Global command mode Modes 3 3 3 Managing the Configuration File Configuration parameters are stored in a default configuration file that resides in th
5. Managing the Session on page 42 Accessing the CLI You can access the CLI locally via an ANSI ASCII terminal or PC that is connected via the Monitor MON port You can also use Telnet SSH to remotely access the CLI This section describes the procedures for M Accessing the CLI from a Local Terminal on page 24 M Accessing the CLI From a Remote Terminal on page 24 BreezeMAX Mini Centralized ASN GW System Manual 23 3 1 1 1 _ Chapter 3 Operation and Administration Using the CLI Using the Command Line Interface CLI Accessing the CLI from a Local Terminal To access the CLI via the MON connector 1 Use the MON cable to connect the MON connector of the unit to the COM port of your ASCII ANSI terminal or PC The COM port connector of the Monitor cable is a 3 pin to 9 pin D type plug 2 Runa terminal emulation program such as HyperTerminal 3 Set the communication parameters listed in the following table Table 3 1 COM Port Configuration Parameter Value Baud rate 115200 Data bits 8 Stop bits 1 Parity None Flow control Xon Xoff Port Connected COM port 4 The login prompt is displayed Press Enter if the login prompt is not displayed Enter your login ID and password to log in to the CLI INFORMATION The default login ID and password for administrator privileges are Login ID admin Password admin123 After you provide you
6. Tr datin BreezeMAX Mini Centralized ASN GW System Manual Release Version 3 5 December 2011 P N 215971 Document History Document History Topic Description Date Issued BreezeMAX Mini Centralized This is the document s first release November 2009 ASN GW Using the History Feature Updated up to 14 previously executed February 2010 Section 3 1 4 3 commands can be displayed Configuring the MTU for physical interfaces Section 3 3 2 1 2 5 Updated default values Adding a Static Route Section 3 3 7 1 Updated description of ip_nexthop Managing AAA Client Configuration Section 3 3 9 9 1 Added support for AAA server redundancy Managing Global RADIUS Configuration Parameters Section 3 3 9 9 2 Added alrmAaaSwitchoverRetryFailThrshld Configuring the DHCP Relay Option 82 Parameters Section 3 3 9 10 4 4 2 Added new option to Suboptivalue and Subopt2value Managing Service Interfaces Section 3 3 9 8 removed mtu changed to vendor parameter Configuring IP Interfaces Section 3 3 2 3 removed mtu changed to vendor parameter Managing the Time Settings Parameters Section 3 3 12 3 Updated to reflect support of managing SNTP parameters and daylight saving parameters Managing the Data Path Function Section 3 3 9 3 Updated to reflect the ability to configure the throughput threshold parameter Managing the Context Function S
7. lt network s rc ip gt lt mask gt Indicates that incoming traffic is to be permitted or denied for a particular source IP address and subnet mask npu config std nacl permit ip 1 1 1 0 255 255 255 0 npu config std nacl deny ip 1 1 1 0 255 255 255 0 BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Table 3 19 Parameters for Configuring Permit Deny Rules for Traffic from to Specific IP Addresses Parameter Description Example Destination any Indicates that traffic to any npu config std nacl IP address destination IP address is permit ip host 1 1 1 1 permitted or denied any is the any default destination IP address npu config std nacl deny ip host 1 1 1 1 any host Indicates that traffic destined to npu config std nacl lt dst ip ad a specific destination IP address permit ip any host dress gt is permitted or denied 1 1 1 1 npu config std nacl deny ip any host 1 1 1 1 lt network d Indicates that traffic destined to npu config std nacl st ip gt a particular subnet is to be permit ip any 1 1 1 0 lt mask gt permitted or denied 255 255 255 0 npu config std nacl deny ip any 1 1 1 0 255 255 255 0 Command npu config ext nacl permit ip ospf pim lt protocol type 1 255 gt Syntax any host lt src ip address gt
8. Managing the Configuration File on page 80 Batch processing of CLI Commands on page 89 Configuring the CPU on page 91 Configuring QoS Marking Rules on page 96 a a E E E E HM Configuring Static Routes on page 110 E Configuring ACLs on page 114 H Configuring the ASN GW Functionality on page 147 H Configuring Logging on page 308 M Configuring Performance Data Collection on page 321 M Configuring the SNMP Trap Manager on page 324 a Managing General Unit Parameters on page 338 Managing the IP Connectivity Mode The following are the various types of traffic originating or terminating from to the unit E Subscriber data flows E ASN CSN control messages M Network Management System NMS traffic external management traffic E Local management traffic Separate IP domains are defined for each traffic type BreezeMAX Mini Centralized ASN GW System Manual amp Chapter 3 Operation and Administration Using the CLI Unit Configuration E Bearer IP domain Enables connectivity between ASN GW Base Station BS AAA server and the Home Agent HA for managing transport for subscriber data and the ASN CSN control traffic E NMS IP domain external management IP domain Defines the connectivity between NMS agent of the unit and external NMS server E Local management IP domain Defines the connectivity between the NMS agent of the unit and IP ba
9. OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration nasid Denotes the unique identifier Optional null String up to 64 lt nas identifie of the ASNGW NAS Sent in characters r gt Access Request message only if configured Should be in FQDN format timezone offs Denotes the time zone offset Optional 0 0 86400 et in seconds from GMT at the lt time offset 0 NAS 86400 gt mtu lt framed Denotes the MTU to be used Optional 2000 1020 2000 mtu for the AAA client size 1020 2000 functionality gt RadiusAtrbtTy Denotes the RADIUS attribute Optional 11 1 255 peServiceProfi in which the ASN GW shall leName expect to get the service lt AtrbtTypeId 1 profile name For example 255 gt configure 11 if AAA uses Filter ID as the container of service profile name Use only unassigned freetext type RADIUS attributes alrmAaaSwitch Threshold to set alarm when Optional 250 1 250 overRetryFailT the number of AAA hrshld 1 250 gt switchover unsuccessful access to primary secondary failed events for a measured period PM interval of 15 minutes exceeds the provisioned number BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration vlan classf b Defines how to transfer VLAN Optional msbShift it align ID between R3 and R6 msbShift lsb If
10. After the system is reset and boots up you can use the CLI to retrieve the reason for the last system reset For more information about using the CLI to display the reason for system reset refer to Displaying the Reason for the Last System Reset on page 49 Resetting the System NOTE Before resetting the system it is recommended that you E Save the configuration file For more information about saving the current configuration refer to Section 3 3 3 1 E Periodically make a backup of log files on the flash if you have configured logs to be written to file This file does not store log messages after the system is reset or shut down For details refer to Section 3 3 10 1 5 Command Syntax Privilege Level Command Modes 3 2 2 2 To reset the system run the following command npu reset A few seconds after you run this command the system is shut down and then boots up with the last saved configuration npu reset 10 Global command mode Displaying the Reason for the Last System Reset The system may be reset because of any of the following reasons E Software upgrade Health failure an internal module does not respond to the periodic health messages sent by the system BreezeMAX Mini Centralized ASN GW System Manual Q Chapter 3 Operation and Administration Using the CLI Shutting Down Resetting the System E Internal error A system module did not initialize correctly T
11. ReadWriteComm The SNMP Read Write Optional private String up to 10 unity Community string allowing characters and lt string gt execution of SNMP Set and Get case sensitive operations Command Global configuration mode Modes 3 3 12 1 2 Deleting an Entry for the SNMP Manager To delete an SNMP Manager entry run the following command npu config no snmp mgr index lt integer gt NOTE s o An error may occur if you provide an incorrect index number for the SNMP Manager to be deleted To display the index numbers for configured SNMP Managers refer Section 3 3 12 1 3 Command npu config no snmp mgr index lt integer gt Syntax Privilege 10 Level BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration Syntax pescnpto Parameter Description Presence Default Possible Values n Value lt integer gt Indicates the index number of Mandatory N A 1 5 the SNMP Manager to be deleted Should be an index of an existing SNMP Manager Command Global configuration mode Modes 3 3 12 1 3 Displaying Configuration Information for SNMP Managers To display configuration information for all SNMP Managers run the following command npu show snmp mgr NOTE An error may occur if there is no existing SMNP Manager entry Command Syntax Privilege Level Display Format Command Modes 3 3 12 2 npu show sn
12. i ee o You can restore the configuration from any of the backup configuration files residing in the flash For details refer to Section 3 3 3 4 5 Command npu config auto backup time lt hh mm gt Syntax Privilege 10 Level Syntax peseriptio Parameter Description Presence Default Possible Values Value lt hh mm gt Indicates the time at which the Mandatory 00 00 HH MM system should automaticall i 7 1 Enter the time create a backup of the current configuration everyda nine oe I sa format Command Global configuration mode Modes 3 3 3 4 4 Displaying the Automatic Backup Time To display the current time configured for the automatic backup procedure run the following command BreezeMAX Mini Centralized ASN GW System Manual OQ s5 Chapter 3 Operation and Administration Using the CLI Unit Configuration npu show auto backup time Command npu show auto backup time Syntax Privilege 10 Level Display Automatic Backup time is lt value gt hrs Format Command Global command mode Modes 3 3 3 4 5 Restoring the Configuration Defined in the Backup Configuration File You can at any time restore configuration from the backup configuration file To display a list of currently stored backup files refer to Section 3 3 3 4 9 Run the following command to specify the backup file to be restored npu restore from local backup lt filename gt NOTE i After ex
13. ping lt ip address gt timeout lt seconds 1 15 gt count lt count 1 32767 gt run script lt script file gt lt output file gt M In addition any user can switch to privilege level O no user name This privilege level allows maintaining an open session while enabling for security reasons a very limited set of general commands The available EXEC commands are clear screen enable lt 0 15 gt Enable Level exit help command logout show privilege The default admin user can execute certain additional commands for managing users and enabling passwords for privilege levels up to and including privilege level 10 Currently all privilege levels between 2 to 9 provide functionality that is the same as privilege level 1 For more information about managing users and privileges refer to Section 3 1 5 Privilege levels above 10 are manageable only by the root vendor user Managing Users and Privileges To enable multi level access to the CLI you can create and manage multiple users and assign privilege levels for each user The privilege level determines whether a user is authorized to execute a particular command The privilege level is pre configured for each command and can be between 1 and 10 where 1 is the lowest and 10 is the highest The user can execute all commands for which the privilege level is equal to or lower than the default privilege level assigned to the user BreezeMAX Mini Cen
14. Command Modes 3 3 8 1 3 2 2 Chapter 3 Operation and Administration Using the CLI Unit Configuration any host Indicates the destination IP Mandatory N A For details refer lt dest ip addre address subnet for which Table 3 20 ss gt TCP UDP traffic is lt dest ip addre permitted denied SS gt lt dest mask gt gt Indicates the destination port Optional 0 65535 For details refer lt port number to which TCP UDP traffic is Table 3 20 1 65535 gt permitted denied lt lt port number 1 65535 gt eq lt port number 1 65535 gt range lt port number 1 65535 gt lt port number 1 65535 gt Extended ACL configuration mode Deleting a Permit Deny Rule for TCP UDP Traffic Extended Mode Run the following commands to delete a Permit rule for TCP UDP traffic from to a specific IP address port npu config ext nacl no permit tcp any host lt src ip address gt lt src ip address gt lt src mask gt gt lt port number 1 65535 gt It lt port number 1 65535 gt eq lt port number 1 65535 gt range lt port number 1 65535 gt lt port number 1 65535 gt any host lt dest ip address gt lt dest ip address gt lt dest mask gt gt lt port number 1 65535 gt lt lt port number 1 65535 gt eq lt port number 1 65535 gt range lt port number 1 65535 gt lt port number 1 65535 gt npu config ext nacl no
15. Displaying Packets Discarded Via Rate Limiting on page 349 Displaying the Current Status of Shelf Components You can view the current status of the following components Mm NPU E Fans To view the current status of unit s components run the following command npu show shelf status NPU Fan lt fan_num 1 4 gt For example run the following command to view the status of the NPU npu show shelf status PIU To view the status of all components run the following command npu show shelf status npu show shelf status NPU Fan lt fan_num 1 4 gt 1 BreezeMAX Mini Centralized ASN GW System Manual CQ 47 Chapter 3 Operation and Administration Using the CLI Monitoring Hardware and Software Perfor Syntax Deschiple Parameter Description Presence Default Possible Values n Value NPU Fan Indicates the shelf components Optional N A E NPU lt fan_num for which you want to display E Fan lt 1 4 gt 1 4 gt the current status Do not specify any component to view the status of all components The displayed information includes the following details mM NPU HWVersion HWRevision SerialNum E FAN FAN 1 4 HlthState Healthy Faulty 3 5 1 2 Displaying the Temperature of the Shelf To view the current temperature inside the unit run the following command npu show shelf temperature Command npu show shelf temperature Syntax Privilege 1 Le
16. Enabling the Interface configuration mode To configure a physical interface run the following command to enable the interface configuration mode npu config interface lt interface type gt lt interface id gt external mgmt bearer local mgmt npu host BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Table 3 11 Parameters for Configuring the Interface Configuration Mode Ethernet Interfaces Interface Parameter Example Fast Ethernet lt interface t npu config interface fastethernet 0 8 ype lt interface i d gt Gigabit lt interface t npu config interface gigabitethernet 0 9 Ethernet ype gt lt interface i d gt npu config interface gigabitethernet 0 10 NOTE To enable the interface configuration mode for physical interfaces specify values for the interface type and interface id parameters only The external mgmt bearer local mgmt parameters are used for enabling the interface configuration mode for IP interfaces the npu host parameter is used for enabling the interface configuration mode for the virtual interface For more information about configuring IP interfaces refer to Section 3 3 2 3 refer to Section 3 3 2 4 for configuring the virtual interface NOTE An error may occur if the interface type and ID that you have specified is in an invalid format or does not exist
17. If you use this command to create a new QoS marking rule the configuration mode for this rule is automatically enabled after which you can execute any of the following tasks HM Configure the output parameters for bearer plane QoS marking rules refer to Section 3 3 9 7 2 M Restore the default parameters for bearer plane QoS marking rules refer to Section 3 3 9 7 3 After executing the above tasks you can terminate the bearer plane QoS marking rules configuration mode refer to Section 3 3 9 7 4 and return to the global configuration mode INFORMATION The granularity of the QoS definition to be applied to packets transmitted on the bearer plane depends upon the number of parameters that you specify If any parameter is to be excluded from the definition specify the value 255 for that parameter Command npu config bearergos lt qos alias gt lt intf type 1 lt R3 gt O0 lt R6 gt 255 lt ANyY gt gt Syntax lt srvc type 0 lt UGS gt 1 lt RIVR gt 2 lt NRTVR gt 3 lt BE gt 4 lt ERTVR gt 255 lt ANY gt gt lt trfc priority 0 7 255 gt lt media type gt Privilege 10 Level BreezeMAX Mini Centralized ASN GW System Manual O Chapter 3 Operation and Administration Using the CLI Unit Configuration Syntax Bescuipion Parameter Description Presence Default Possible Values Value lt qos alias gt Denotes the QoS alias of the Mandatory N A String 1 to 30 QoS marking rule for w
18. Tracing Removed Section 3 310 3 8 10 1 1 3580 0 158 2 2 1S TOG 323123 Dek Updated Sections 3 2 1 3 2 2 1 Tracing is managed only by the vendor Configuring Parameters for the AAA Client Section 3 3 9 9 1 2 Updated configuration rules for aaaRedundancy If enabled the ip address of the active server primary or alternate cannot be modified Upgrading the NPU Step 2 Triggering Software Download Section A 2 1 2 Added more possible reasons for error Configuring the External Ether type Section 3 3 2 2 1 Updated default value to 8100 Managing Service Groups Section 3 3 9 10 Added support for a new type of service group VPLS Hub and Spoke Total number of service groups updated to 80 total number of IP and VPWS service groups is limited to a maximum of 10 July 2011 BreezeMAX Mini Centralized ASN GW System Manual Document History Topic Description Date Issued Managing Service Interfaces Added support for a new type of service July 2011 Section 3 3 9 8 interface VPLS Trunk Total number of service interfaces updated to 80 total number of IP IP VLAN and QinQ service interfaces is limited to a maximum of 10 Configuring the Parameter for the Updated default value of Data Path Function throughput threshold to 500 Section 3 3 9 3 1 Configuring the Parameter for the Updated default value of Context Functio
19. eq lt port number 1 65535 gt range lt port number 1 65535 gt lt port number 1 65535 gt any host lt dest ip address gt lt dest ip address gt lt dest mask gt gt lt port number 1 65535 gt lt lt port number 1 65535 gt eq lt port number 1 65535 gt range lt port number 1 65535 gt lt port number 1 65535 gt npu config ext nacl deny udp any host lt src ip address gt lt src ip address gt lt src mask gt gt lt port number 1 65535 gt It lt port number 1 65535 gt eq lt port number 1 65535 gt range lt port number 1 65535 gt lt port number 1 65535 gt any host lt dest ip address gt lt dest ip address gt lt dest mask gt gt lt port number 1 65535 gt lt lt port number 1 65535 gt eq lt port number 1 65535 gt range lt port number 1 65535 gt lt port number 1 65535 gt In the above commands it is mandatory to specify the source and destination IP address for which the Permit Deny rule is to be created NOTE Po gi eo To increase the granularity of the Permit Deny rule you are creating specify the source and destination port numbers for the source and destination IP addresses The following table lists the parameters and their descriptions in these commands BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Table 3
20. lt protocol type is to be deleted 1 255 gt any host Indicates the source IP Mandatory N A For details refer lt src ip addres address subnet for which the Table 3 19 s gt Permit Deny rule is to be lt src ip addres deleted s gt lt mask gt any host Indicates the destination IP Optional any For details refer lt dest ip addre address subnet for which the Table 3 19 sq gt Permit Deny rule is to be lt dest ip addre deleted ss gt lt mask gt Command Extended ACL configuration mode Modes 3 3 8 1 3 2 Configuring Permit Deny Rules for TCP UDP Traffic After you have created an ACL you can configure Permit Deny rules for TCP and UDP traffic from to specific source and destination IP address and port NOTE You cannot configure Permit or Deny rules for an ACL that is associated with a Qos marking rule You can either associate QoS marking rules or permit deny rules with an ACL 3 3 8 1 3 2 1 This section describes the commands to be used for Creating a Permit Deny Rule for TCP UDP Traffic Extended Mode on page 127 HM Deleting a Permit Deny Rule for TCP UDP Traffic Extended Mode on page 134 Creating a Permit Deny Rule for TCP UDP Traffic Extended Mode Run the following commands to specify the Permit rule for TCP UDP traffic from to a specific source destination IP address port npu config ext nacl permit tcp any lt src ip address gt lt src mask gt 1
21. Other context function parameters are configurable only by the vendor This section describes the commands to be used for HM Configuring the Parameter for the Context Function on page 154 M Restoring the Default Configuration Parameter for the Context Function on page 155 M Displaying Configuration Information for the Context Function on page 155 3 3 9 4 1 Configuring the Parameter for the Context Function To configure the parameter for the context function run the following command npu config contextfn ms capacity threshold lt integer 1 3000 gt NOTE An error may occur if you provide an invalid value for the ms capacity threshold parameter Refer to the e syntax description for more information about the appropriate values configuring this parameter The ms capacity threshold parameter must be specified the value is optional The command npu config contextfn will return an Incomplete Command error BreezeMAX Mini Centralized ASN GW System Manual Q Chapter 3 Operation and Administration Using the CLI Unit Configuration Command npu config contextfn ms capacity threshold lt integer 1 3000 gt Syntax Privilege 10 Level Syntax Desciiptle Parameter Description Presence Default Possible Values n Value ms capacity th Maximal number of active MS Optional 3000 1 3000 reshold that can be served by ASN GW lt integer Used as threshold for no 1 3000
22. Refer to the syntax description for more information about the correct format for specifying the interface type and name Command Syntax Privilege Level Syntax Descriptio n After enabling the interface configuration mode you can modify the physical properties of an interface refer to Section 3 3 2 1 2 npu config interface lt interface type gt lt interface id gt external mgmt bearer local mgmt npu host 10 Parameter Description Presence Default Possible Values Value lt interface type gt Indicates the type of physical Mandatory N A E fastethernet interface Gigabit Ethernet E gigabitethernet or Fast Ethernet for which the configuration mode is to be enabled BreezeMAX Mini Centralized ASN GW System Manual OQ o Command Modes 3 3 2 1 2 Chapter 3 Operation and Administration Using the CLI Unit Configuration lt interface id gt Indicates the port number of Mandatory N A Fast Ethernet the physical interface for E 0 8 which the configuration mode is to be enabled Gigabit Ethernet E 0 9 E 0 10 Global configuration mode Configuring the Properties of the Physical Interface After you enable the interface configuration mode you can configure the following properties for this interface E Auto negotiation mode Duplex full half mode E Port speed E MTU This section describes the commands to be used for E Shutt
23. Run the following command to switch between servers npu config aaa aaaSwitchOver This command is applicable only when aaa redundancy is enabled If you execute this command when the active server is the primary server the unit will attempt connecting to the alternate server and vice versa Command npu config aaa aaaSwitchOver Syntax Privilege 10 Level BreezeMAX Mini Centralized ASN GW System Manual Command Modes 3 3 9 9 1 5 Command Syntax Privilege Level Command Modes 3 3 9 9 1 6 Command Syntax Privilege Level Chapter 3 Operation and Administration Using the CLI Unit Configuration AAA client configuration mode Terminating the AAA Client Configuration Mode Run the following command to terminate the AAA client configuration mode npu config aaa exit npu config aaa exit 10 AAA client configuration mode Displaying Configuration and Status Information for the AAA Client To display one or all AAA clients run the following command npu show aaa client lt client alias gt In the current release a single AAA client is supported The client alias is default npu show aaa client lt client alias gt BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration Syntax Bercnipuen Parameter Description Presence Default Possible Values Value lt client alia
24. Section 3 3 9 10 8 3 define the VLAN translation for Ethernet frame received or forwarded via the service interface Table 3 22 Translation of VLAN ID on VPLS trunk Service Interface Encapsulation Outer VLANID Own Action Mode of VLAN ID of VLAN ID Service of Service of Service Interface Service Interface Group Interface VLAN N A X No translation of VID Stacked VLAN Z X X No translation of VID On egress Outer VLAN tag is added SVID Z On ingress Outer VLAN tag is removed VLAN N A X Y On egress VID Y changed to VID X On ingress VID X changed to VID Y Stacked VLAN Z X Y On egress VID Y changed to VID X Outer VLAN tag is added SVID Z On ingress VID X changed to VID Y Outer VLAN tag is removed VLAN N A X Untagged On egress VLAN tag is added VID X On ingress VLAN tag is removed Stacked VLAN Z X Untagged On egress VLAN tag is added VID X Outer VLAN tag is added SVID Z On ingress VLAN tag is removed Chapter 3 Operation and Administration Using the CLI Unit Configuration 3 3 9 8 2 4 1 Configuring the Common Parameters of a VPLS_trunk Service Interface Command Syntax Privilege Level Syntax Description Command Modes 3 3 9 8 2 4 2 Configuring the Encapsulation Mode of a VPLS_trunk Service Interface After enabling the VPLS_trunk Service Interface configuration mode run the following command to configure the common parameters of th
25. a ALVARION SHALL NOT BE LIABLE TO THE PURCHASER OR TO ANY THIRD PARTY FOR ANY LOSS OF PROFITS LOSS OF USE INTERRUPTION OF BUSINESS OR FOR ANY INDIRECT SPECIAL INCIDENTAL PUNITIVE OR CONSEQUENTIAL DAMAGES OF ANY KIND WHETHER ARISING UNDER BREACH OF CONTRACT TORT INCLUDING NEGLIGENCE STRICT LIABILITY OR OTHERWISE AND WHETHER BASED ON THIS AGREEMENT OR OTHERWISE EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES b TO THE EXTENT PERMITTED BY APPLICABLE LAW IN NO EVENT SHALL THE LIABILITY FOR DAMAGES HEREUNDER OF ALVARION OR ITS EMPLOYEES OR AGENTS EXCEED THE PURCHASE PRICE PAID FOR THE PRODUCT BY PURCHASER NOR SHALL THE AGGREGATE LIABILITY FOR DAMAGES TO ALL PARTIES REGARDING ANY PRODUCT EXCEED THE PURCHASE PRICE PAID FOR THAT PRODUCT BY THAT PARTY EXCEPT IN THE CASE OF A BREACH OF A PARTY S CONFIDENTIALITY OBLIGATIONS Radio Frequency Interference Statement The Base Transceiver Station BTS equipment has been tested and found to comply with the limits for a class A digital device pursuant to ETSI EN 301 489 1 rules and Part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in commercial business and industrial environments This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instruction manual may cause harmful interference to radio communications Operation of this equip
26. and premium video services in a variety of wireless fashions fixed portable and mobile that increase revenue and reduce subscriber churn WiMAX technology is the solution for many types of high bandwidth applications at the same time across long distances and will enable service carriers to converge the all IP based network for triple play services data voice and video WiMAX with its QoS support longer reach and high data capacity is positioned for fixed broadband access applications in rural areas particularly when distance is too large for DSL and cable as well as in urban suburban areas of developing countries Among applications for residential are high speed Internet Voice Over IP telephony and streaming video online gaming with additional applications for enterprise such as Video conferencing Video surveillance and secured Virtual Private Network with need for high security WiMAX technology allows covering applications with media content requesting more bandwidth WiMAX allows portable and mobile access applications with incorporation in notebook computers and PDAs allowing for urban areas and cities to become metro zones for portable and mobile outdoor broadband wireless access As such WiMAX is the natural complement to 3G networks by offering higher bandwidth and to Wi Fi networks by offering broadband connectivity in larger areas The WiMAX Forum is an organization of leading operators and communications component a
27. and two Gigabit Ethernet interfaces DATA and CSCD ports Each of these interfaces is a member of BreezeMAX Mini Centralized ASN GW System Manual OQ 3 3 2 1 1 Chapter 3 Operation and Administration Using the CLI Unit Configuration one or more VLANs The following table lists the physical interfaces and their type port numbers and member VLANs Table 3 10 Ethernet Interfaces Types Port Numbers and Member VLANs Interface Type Physical Interfaces Port Member VLANs Number Fast Ethernet MGMT 0 8 E Local management in the in band or unified connectivity modes E External management only in the out of band connectivity mode Gigabit Ethernet CSCD 0 9 E Local management DATA 0 10 E Bearer E External management only in band connectivity mode E Multiple Service VLAN To configure a physical interface 1 Enable the interface configuration mode refer to Section 3 3 2 3 1 2 You can now enable any of the following tasks Modify the physical properties of an interface refer to Section 3 3 2 1 2 Manage VLAN translation refer to Section 3 3 2 1 3 Terminate the interface configuration mode refer to Section 3 3 2 1 4 You can at any time display VLAN membership information refer to Section 3 3 2 1 5 VLAN Configuration Information for a Physical Interfaces refer to Section 3 3 2 1 6 and VLAN translation entries for the DATA port refer to Section 3 3 2 1 7
28. associated the associated source source address is address is ignored while enabled disabled classifying the packet addr mask Denotes the mask field Optional 255 255 255 25 Valid address lt value gt that is used to specify a 5 mask range of source addresses Command L3 Classification rules source address configuration mode Modes 3 3 9 11 4 5 3 Disabling the Source Address You can run the following command to disable the source address that is currently enabled npu config clsfrule srcaddr no addr enable BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration NOTE To enable this source address run the following command e npu config clsfrule srcaddr config addr enable addr mask lt value gt l For details refer to Enabling the Source Address and Configuring the Address Mask on page 269 Command npu config clsfrule srcaddr no addr enable Syntax Privilege 10 Level Command L3 Classification rules source address configuration mode Modes 3 3 9 11 4 5 4Terminating the Source Address Configuration Mode Run the following command to terminate the source address configuration mode npu config clsfrule srcaddr exit Command npu config clsfrule srcaddr exit Syntax Privilege 10 Level Command L3 Classification rule source address configuration mode Modes 3 3 9 11 4 5 5 Deleting Source Address You can at any
29. config srvc grp lt grp alias gt ServiceGrpType IP VPWS QinQ VPWS Transparent VPWS Mapped vplsHubAndSpoke If you use this command to create a new service group the configuration mode for this group is automatically enabled after which you can configure or restore the default parameters for this service group After enabling the service group configuration mode you can execute any of the following tasks M Configure the common parameters for an IP service group refer to Section 3 3 9 10 2 E Enable Disable the VLAN Interface of an IP Service Group refer to Section 3 3 9 10 3 M Enable the service group operation mode and configure the DHCP server proxy relay specific parameters refer to Section 3 3 9 10 4 Configure the parameters of a VPWS Transparent Service Group refer to Section 3 3 9 10 5 Configure the parameters of a VPWS Transparent Service Group refer to Section 3 3 9 10 6 Configure the parameters of a VPWS Transparent Service Group refer to Section 3 3 9 10 7 Configure the parameters of a vplsHubAndSpoke Service Group refer to Section 3 3 9 10 8 After executing these tasks you can terminate the service group configuration mode refer to Section 3 3 9 10 9 INFORMATION You can display configuration information for specific or all service groups For details refer to Section 3 3 9 11 2 Command Syntax Privilege Level npu config srvc grp lt grp alias gt ServiceGrpType I
30. internal and external interfaces lt trfc priority Denotes the traffic priority of Mandatory N A E 0 7 where 7 0 7 255 gt the service flow see when is highest Specifying Service Flow creating a E 255 ANY Configuration Parameters new Bearer Indicates that on page 245 provided asan Plane QoS the input classification parameter Rule oe for the bearer plane QoS rule ignored for This parameter is used to packets match the outer DSCP and transmitted VLAN priority values for a on both service flow internal and external interfaces lt media type gt Denotes the media type of Mandatory N A E String 1 to the service flow see when 30 Specifying Service Flow creating a characters Configuration Parameters new Bearer E ANY on page 245 provided asan Plane QoS Indicates that input classification parameter Rule the for the bearer plane QoS rule aloe we should be This parameter is used to ignored for match the outer DSCP and packets VLAN priority values for a transmitted service flow on both internal and external interfaces BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Command Global configuration mode Modes 3 3 9 7 2 Configuring the Output Parameters for Bearer Plane QoS Marking Rules After enabling the bearer plane QoS marking rules configuration mode you can configure the output parameters that should be ap
31. is zero and there is no Acct Interim Interval in Access Accept interim updates should be deactivated acctInterimTm Applicable only if acct see Optional 5 Eo r above mode is set to time The E 5 1600 lt integer 0 5 1 default interval in minutes for 600 gt Accounting Interim reports to be used if Acct Interim Interval is not received from the AAA server Value 0 means interim reports are deactivated unless Acct Interim Interval is sent by the AAA server in Access Accept messages Command _ VPWS Transparent Service group configuration mode Modes 3 3 9 10 6 Configuring the Parameters of a VPWS QinQ Service Group After enabling the service group configuration mode for a VPWS QinQ service group run the following command to configure the accounting parameters for the service group npu config srvcgrp VPWS config acct none time acctInterimTmr lt integer 0 5 1600 gt BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration INFORMATION You can display configuration information for the service group For details refer to Section 3 3 9 11 2 Command npu config srvcgrp config acct none time acctInterimTmr Syntax lt integer 0 5 1600 gt Privilege 10 Level Syntax Descriptio n BreezeMAX Mini Centralized ASN GW System Manual 220 Chapter 3 Operation and Admini
32. it boots up using the last saved configuration To ensure that the downloaded configuration is used to boot up the system after reset save the downloaded configuration using the following command npu write For more information about saving configuration refer to Section 3 3 3 1 BreezeMAX Mini Centralized ASN GW System Manual B Chapter 3 Operation and Administration Using the CLI Unit Configuration Run the following command to download the configuration vendor file from an external server npu configfile download tftp lt ip address gt lt filename gt Reset the unit after you run this command The system boots up with the downloaded configuration To reset the system run the following command npu config reset For more information about resetting the unit refer to Section 3 2 2 1 INFORMATION An error may occur if E The file to be downloaded is not present in the appropriate path on the TFTP server E The file name that you have provided is in an invalid format The file to be downloaded should be a compressed xml file with the xml gz extension Command npu configfile download tftp lt ip address gt lt filename gt Syntax Privilege 10 Level Syntax peseriptio Parameter Description Presence Default Possible Values n Value lt ip address gt Indicates the IP address of the Mandatory N A Valid IP address TFTP server lt filename gt Indicates the name of the Mandatory N A lt file
33. j fastethernet 0 8 lt interface type gt lt interface id gt Gigabit Ethernet npu show interfaces gigabitethernet 0 9 lt interface type gt lt interface id gt npu show interfaces gigabitethernet 0 10 IP Interfaces external mgmt npu show interfaces external mgmt bearer npu show interfaces bearer local mgmt npu show interfaces local mgmt Virtual Interfaces npu host npu show interfaces npu host NOTE An error may occur if Q E The interface type or ID that you have specified does not exist E The IP interface does not exist for the configured connectivity BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Command npu show interfaces lt interface type gt lt interface id gt external mgmt Syntax bearer local mgmt npu host Privilege 1 Level Syntax Desciiptle Parameter Description Presence Default Possible 4 Value Values lt interface type gt Indicates the type of interface Optional N A Refer to lt interface id gt physical IP or virtual for Table 3 13 external mgmt which configuration bearer local mgmt information is to be displayed npu host Do not specify any value for this parameter if you want to display configuration information for all physical IP and virtual interfaces BreezeMAX Mini Centralized ASN GW System Manual OQ
34. lt src ip address gt lt mask gt any host lt dest ip addresq gt lt dest ip address gt lt mask gt npu config ext nacl deny ip ospf pim lt protocol type 1 255 gt any host lt src ip address gt lt src ip address gt lt mask gt any host lt dest ip addresq gt lt dest ip address gt lt mask gt Privilege 10 Level Syntax Description rae Seen Parameter Description Presence Default Possible Values Value ip osp Indicates the type of protocol Mandatory N A For details refer pim for which incoming traffic is Table 3 19 lt protocol type permitted 1 255 gt BreezeMAX Mini Centralized ASN GW System Manual Command Modes 3 3 8 1 3 1 2 Command Syntax Privilege Level Chapter 3 Operation and Administration Using the CLI Unit Configuration any host Indicates the source IP Mandatory N A For details refer lt src ip addres address subnet for which Table 3 19 s gt incoming traffic is lt src ip addres permitted denied s gt lt mask gt any host Indicates the destination IP Optional any For details refer lt dest ip addre address subnet for which traffic Table 3 19 sq gt is permitted denied lt dest ip addre ss gt lt mask gt Extended ACL configuration mode Deleting a Permit Deny Rule for Specific Protocols IP Addresses Extended Mode Run the follow
35. not dependent on license Configuring Performance Data Collection Section 3 3 11 Updated Added AAAClient to NPU Counters Managing QoS Classification Rules Section 3 3 6 2 Added rule in two places Default pre configured QoS classification rules cannot be deleted Assigning an IP address to an interface Section 3 3 2 3 3 Updated configuration rules Configuring Static Routes Section 3 3 7 Added caution note related to routes for SNMP Trap Managers TFTP Servers created by a management system Configuring the Trap Manager Section 3 3 12 2 Added note recommended to manage Trap Managers from the management system Enabling System level Logging Section 3 3 10 1 1 Added note recommended to manage Log TFTP Server from the management system July 2011 BreezeMAX Mini Centralized ASN GW System Manual Document History Topic Description Date Issued Upgrading the NPU Section A 2 1 1 Added note recommended to manage TFTP Server IP Address from the management system Configuring the SNTP Server s Section 3 3 12 3 2 Added note recommended to manage SNTP Server s IP Address from the management system Commissioning Completing the Site Configuration Using AlvariSTAR Section 2 2 Added full details Commissioning Connectivity Mode Section 2 1 3 1 Updated Commissioning Static Route Definition Section 2 1 4 Updated
36. npu config hotlinig filter rule destination port start lt port number 0 65535 gt stop lt port number 0 65535 gt If you do not configure destination port parameters for the filter rule the default values will be used meaning that destination port is ignored Command __ npu config hotlinig filter rule destination port start lt port number 0 65535 gt stop Syntax lt port number 0 65535 gt Privilege 10 Level Syntax Pesctipue Parameter Description Presence Default Possible Values n Value start The minimum value of Optional 0 0 65535 lt port number 0 destination TCP UDP port stop The maximum value of Optional 65535 0 65535 lt port number 0 destination TCP UDP port Command hotlining filter rule configuration mode Modes 3 3 9 13 2 4 5 Configuring DSCP Range Parameters for the Filter Rule Command Syntax Privilege Level After enabling the filter rule configuration mode run the following command to configure the DSCP parameters of the filter rule npu config hotlinig filter rule dscp start lt dscp value 0 63 gt stop lt dscp value 0 63 gt If you do not configure DSCP parameters for the filter rule the default values will be used meaning that DSCP is ignored npu config hotlinig filter rule dscp start lt dscp value 0 63 gt stop lt dscp value 0 63 gt 10 BreezeMAX Mini Centralized ASN GW System Manual 299 Chapter 3 Operation and Administration Using the
37. 0 0 0 0 may be created The Next Hop IP address of this route must be in the same subnet with one of the NPU IP interfaces according to specific network topology and needs NOTE When using AlvariSTAR AlvariCRAFT to manage the device automatic routes are created for SNMP Trap managers SNTP server s Log server and TFTP SW Upgrade server provided proper configuration i procedure is being followed These routes should not be modified or deleted using CLI 3 3 7 1 Adding a Static Route To add a static route run the following command npu config ip route lt ip_address gt lt ip_mask gt lt ip_nexthop gt INFORMATION Refer to Section 3 3 7 3 to display the IP routing table For example run the following command to add an entry for a static route with the destination IP address 11 0 0 2 and the address mask 255 255 255 255 and next hop IP address 192 168 10 1 npu config ip route 11 0 0 2 255 255 255 255 192 168 10 1 NOTE An error may occur if Q E The IP address address mask or the next hop IP address are invalid E A route with the parameters that you have specified already exists E The IP address that you have specified is being used for another interface E The next hop IP address that you have specified is either unreachable or is down Command Syntax Privilege Level npu config ip route lt ip_address gt lt ip_mask gt lt ip_nexthop gt 10 BreezeMAX Mini Centralized ASN GW System Ma
38. 14 for details on these class maps and the QoS classification rules to which they are associated NOTE If you want to modify the 802 1p VLAN priority and or DSCP values for a class map that is already associated with a QoS classification rule first disable the QoS classification rule For more information about disabling QoS classification rules refer to Section 3 3 6 3 INFORMATION The QoS class map number is used to reference the QoS class map that you want to associate with a QoS classification rule which defines the classification rule to be applied for host originating traffic For more information about creating QoS classification rules refer Section 3 3 6 2 After you enable the QoS class map configuration mode you can M Configure the 802 1p VLAN priority and or DSCP for this class map refer to Section 3 3 6 1 2 M Delete the 802 1p VLAN priority and or DSCP for this QoS class map refer to Section 3 3 6 1 3 M Terminate the QoS class map configuration mode refer to Section 3 3 6 1 4 NOTE An error may occur if E You specify a class map number that is not within the range 1 65535 E The class map configuration mode for the class map you have specified is already enabled Command Syntax Privilege Level Syntax Descriptio n npu config class map lt class map number 1 65535 gt 10 Parameter Description Presence Default Possible Values Value lt clas
39. 199 gt name lt string gt 10 Parameter Description Presence Default Possible Values Value standard Denotes the number of the Mandatory N A E standard lt access list n standard or extended ACL that 1 99 umber 1 99 gt is to be created for which the E extended extended ACL configuration mode is to 100 198 lt access list n be enabled If you are creating umher a new ACL the ACL 100 199 gt configuration mode is automatically enabled when you execute this command Note ACL 199 is reserved for QoS classification rules and cannot be used for creating Permit Deny rules name lt string gt Indicates the name of the ACL Optional ACL String upto 20 to be created for which the name characters ACL configuration mode is to be enabled Global configuration mode BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration 3 3 8 1 2 Configuring ACLs in the Standard Mode After you have enabled the standard ACL configuration mode you can create or delete the Permit Deny rules for forwarding traffic from to a particular source destination IP address NOTE o You cannot create Permit or Deny rules for an ACL that is associated with a Qos marking rule You can either associate QoS marking rules or permit deny rules with an ACL This section describes the commands for Creating a Per
40. 20 Parameters for Configuring Permit Deny Rules for TCP UDP Traffic lt src ip ad dress gt TCP UDP traffic from a specific source IP address is permitted or denied Parameter Description Example Source IP any Indicates that incoming npu config ext nacl address TCP UDP traffic from any permit tcp any any source IP address is permitted npu config ext nacl or denied deny udp any host Indicates that incoming npu config ext nacl permit tcp host 1 1 1 any npu config ext nacl deny udp host 1 1 1 1 lt network s rc ip gt lt mask gt Indicates that incoming TCP UDP traffic is to be permitted or denied for a particular subnet npu config ext nacl permit tcp 1 1 1 0 255 255 255 0 any npu config ext nacl deny udp 1 1 1 0 255 255 255 0 BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Table 3 20 Parameters for Configuring Permit Deny Rules for TCP UDP Traffic Parameter Description Example Source port gt lt port numb Indicates that incoming TCP UDP traffic is to be permitted or npu config ext nacl permit tcp 1 1 1 0 er denied from the source port for 255 255 255 0 gt 1111 1 65535 gt which the port number is ve k 1 i npu conrig ext nac greater than the value of this p 2 deny udp host 1 1 1 1 gt
41. 3 Operation and Administration Using the CLI Monitoring Hardware and Software Perfor Command npu show rate limit counters ftp telnet tftp ssh icmp snmp Syntax R4 R6 igmp eap arp all others lt user defined app gt all Privilege 1 Level Syntax Descriptio n Parameter Description Presence Default Possible Values Value ftp telnet Indicates the application for Optional N A tftp ssh which packets discarded by icmp snmp rate limiting are to be R4 R6 igmp displayed eap arp all others lt user defined ftp telnet tftp ssh icmp snmp R4 R6 igmp eap app gt all arp all others Refers to all other applications that may send packets to the CPU and are not in the list of pre defined or user defined applications E lt user defined gt E all Refers to all applications that may attempt to send packets to the CPU BreezeMAX Mini Centralized ASN GW System Manual CQ 250 Display Format Command Modes 3 5 2 Chapter 3 Operation and Administration Using the CLI Monitoring Hardware and Software Perfor RATELIMIT COUNTERS Pre defined applications Application Packets discarded lt Application gt lt Number of Packets Discarded gt lt Application gt lt Number of Packets Discarded gt SSH lt Application gt lt Number of Packets Discarded gt SNMP RATELIMIT COUNTERS User define
42. 3 Operation and Administration Using the CLI Unit Configuration srvcif alias lt string gt Denotes the pre defined Mandatory N A A previously VPLS_trunk Service Interface when defined alias of alias to be used as the data creating a a VPLS_trunk path for traffic towards the new VPLS service interface core network Service Group Note that a Service Interface alias can be associated only to a single Service Group The srvcif alias associated with an existing service group cannot be changed Command VPLS Service group configuration mode Modes 3 3 9 10 8 2 Configuring the Multicast Parameters of a VPLS Service Group After enabling the service group configuration mode for a VPLS service group run the following command to configure the Multicast Downlink Service Flow parameters for the service group npu config srvcgrp VPLS config multicast delivery type lt type 0 lt UGS gt 1 lt RTVR gt 2 lt NRTVR gt 3 lt BE gt 4 lt ERTVR gt 255 lt ANY gt gt max sustained rate lt value 0 5000000 gt traffic priority lt value 0 7 gt min reserved rat lt value 0 5000000 gt max latency lt integer gt max jitter lt integer gt media type lt string 15 gt Command npu config srvcgrp VPLS config multicast delivery type lt type 0 lt UGS gt 1 lt RTVR gt 2 lt NRTVR gt Syntax 3 lt BE gt 4 lt ERTVR gt 255 lt ANY gt gt max sustained rate lt value 0
43. 3 9 12 1 Command Syntax Privilege Level Syntax Descriptio n Command Modes Chapter 3 Operation and Administration Using the CLI Unit Configuration You can at any time display configuration information refer to Section 3 3 9 12 5 or delete an existing PHS rules refer to Section 3 3 9 12 4 The following example illustrates the sequence of commands for enabling the PHS rules configuration mode configuring the parameters of a PHS rule and then terminating the PHS configuration mode should be executed as shown in the example below npu config phs rule phs rulel npu config phsrule config field 000000000000000000000000FFFFFFFF00000000 mask 000F00 verify 0 size 20 npu config phsrule exit Enabling the PHS Rules Configuration Mode Creating a New PHS Rule To configure the parameters for a PHS rule first enable the PHS rules configuration mode Run the following command to enable the PHS rules configuration mode You can also use this command to create a new PHS rule npu config phs rule lt rulename gt If you use this command to create a new PHS rule the configuration mode for this PHS rule is automatically enabled after which you can configure the parameters for the PHS rule refer to Section 3 3 9 12 2 You can then terminate the PHS rules configuration mode refer to Section 3 3 9 12 3 and return to the global configuration mode npu config phs rule lt rulename gt 10 Paramete
44. 313 a E E E Making a Backup of Log Files on the Flash on page 314 HM Deleting Backup Log Files from the Flash on page 315 HM Creating a Collected System Logs File on page 316 M Transferring Files from the NPU Flash to a TFTP Server on page 316 a Displaying Log Files Residing on the Flash on page 317 BreezeMAX Mini Centralized ASN GW System Manual ae Chapter 3 Operation and Administration Using the CLI Unit Configuration 3 3 10 1 1 Enabling System level Logging You can enable logging for the entire system and specify the destination where logs should be written The destination can be either written to E File M External server Log files are sent to the external server in the Syslog log format The Syslog daemon on the external server can save these log messages in the appropriate format depending upon the server configuration By default system level logging is enabled To view whether the system level logging is enabled disabled for logging to file or server refer to Section 3 3 10 1 4 The system maintains a maximum of 1000 log messages The system stores log messages using the cyclic buffer method That is when there are more than 1000 messages the system overwrites the oldest log messages NOTE If you have enabled writing of log messages to file it is recommended that you periodically make a backup of this log file This is because log messages that are written to file are
45. 65535 gt 1 65535 gt lt port number lt port number 1 65535 gt BreezeMAX Mini Centralized ASN GW System Manual gt lt port number eq lt port number 1 65535 gt any lt dest ip address gt lt dest mask gt gt lt port number host lt src ip address gt 1 65535 gt lt range lt port number host lt dest ip address gt 1 65535 gt 1t Chapter 3 Operation and Administration Using the CLI Unit Configuration lt port number 1 65535 gt eq lt port number 1 65535 gt range lt port number 1 65535 gt lt port number 1 65535 gt npu config ext nacl permit udp any host lt src ip address gt lt src ip address gt lt src mask gt gt lt port number 1 65535 gt It lt port number 1 65535 gt eq lt port number 1 65535 gt range lt port number 1 65535 gt lt port number 1 65535 gt any host lt dest ip address gt lt dest ip address gt lt dest mask gt gt lt port number 1 65535 gt lt lt port number 1 65535 gt eq lt port number 1 65535 gt range lt port number 1 65535 gt lt port number 1 65535 gt Run the following commands to specify the Deny rule for TCP UDP traffic from to a specific source destination IP address port npu config ext nacl deny tcp any host lt src ip address gt lt src ip address gt lt src mask gt gt lt port number 1 65535 gt It lt port number 1 65535 gt
46. Administration Using the CLI Unit Configuration npu config no log level StartupMgr SWDownload FaultMgr PerfMgr ShelfMgr SIGASN UserIF 10 Parameter Description Presence Default Possible Values Value StartupMgr S Indicates the name of the Optional N A StartupMgr WDownload Faul module for which logging is to tMgr PerfMgr S be disabled helfMgr SIGASN UserIF If you do not specify any value for this parameter logging is disabled for all parameters For more information about these modules refer Table 3 23 SWDownload FaultMgr ShelfMgr SIGASN E E E E PerfMgr E E Oo UserlF Global configuration mode Configuring Performance Data Collection You can configure the unit to periodically collect and store performance counters You can specify the group for which performance data is to be stored and collected For details on the counters groups and the counters in each group refer to the relevant 4Motion Performance Management document The data is stored in an XML file called prf_ lt SitelD gt _yyyymmddhhmm xml gz in the path tftpboot management performance The system maintains this data for a maximum of 24 hours after which it is deleted It is recommended that you periodically make a backup of these files on an external server You can enable disable collection of performance data for each group separately This section describes HM Enabling Collectio
47. CLI Unit Configuration Syntax pescnpto Parameter Description Presence Default Possible Values j Value start The minimum value of DSCP Optional 0 0 63 lt dscp value 0 63 gt stop The minimum value of DSCP Optional 63 0 63 lt dscp value 0 63 gt Command hotlining filter rule configuration mode Modes 3 3 9 13 2 4 6 Configuring IP Protocol Parameter for the Filter Rule After enabling the filter rule configuration mode run the following command to configure the IP protocol parameter of the filter rule npu config hotlinig filter rule ip protocol lt protocol number 0 255 gt If you do not configure the IP protocol parameter for the filter rule the default value 255 will be used meaning that IP protocol is ignored Command ___ npu config hotlinig filter rule ip protocol lt protocol number 0 255 gt Syntax Privilege 10 Level Syntax Pescriptig Parameter Description Presence Default Possible Values Value lt protocol numb The IP protocol number Optional 255 0 255 er 0 255 gt 255 means any ignore this condition Command hotlining filter rule configuration mode Modes BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration 3 3 9 13 2 4 7Restoring the Default Values of Filter Rule Components Run the following command to restore the default values o
48. CLI Unit Configuration Command L3 Classification rules IP protocol configuration mode Modes 3 3 9 11 4 4 3 Disabling Protocol Lists After enabling the protocol configuration mode run the following command to disable IP protocol classification npu config clsfrule protocol no protocol enable lt number of protocols 1 gt lt protocol gt Command npu config clsfrule protocol no protocol enable lt number of protocols 1 gt Syntax lt protocoll gt Privilege 10 Level Syntax Desctipue Parameter Description Presence Default Possible Values Value lt number of Indicates the number of Mandatory N A 1 protocols 1 gt protocol lists to be disabled In the current release only one protocol can be enabled per classification rule lt protocol gt Indicates the protocol to be Mandatory N A 0 255 disabled Command L3 Classification rules IP protocol configuration mode Modes 3 3 9 11 4 4 4Terminating the Protocol Configuration Mode Run the following command to terminate the IP protocol configuration mode npu config clsfrule protocol exit Command _ npu config clsfrule protocol exit Syntax BreezeMAX Mini Centralized ASN GW System Manual QO Chapter 3 Operation and Administration Using the CLI Unit Configuration Privilege 10 Level Command L3 Classification rule IP protocol configuration mode Modes 3 3 9 11 4 4 5 Deleting the IP Protocol Classifier You
49. Chapter 3 Operation and Administration Using the CLI Unit Configuration 3 3 9 7 3 Restoring the Default Configuration Parameters for the Bearer Plane QoS Output Marking Rules Run the following command to restore the default configuration for this bearer plane QoS marking rule npu config bqos no outer dscp vlan priority qos enable When you execute this command it automatically disables this QoS marking rule INFORMATION a Refer to Section 3 3 9 7 2 for a description and default values of these parameters Command npu config bqos no outer dscp vlan priority qos enable Syntax Privilege 10 Level Command Bearer plane QoS marking rules configuration mode Modes 3 3 9 7 4 Terminating the QoS Marking Rules Configuration Mode Run the following command to terminate the marking rules configuration mode npu config bqos exit Command npu config bqos exit Syntax Privilege 10 Level Command Bearer plane QoS marking rules configuration mode Modes 3 3 9 7 5 Deleting Bearer Plane QoS Marking Rules Run the following command to delete the a QoS marking rule npu config no bearerqos lt qos alias gt BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration CAUTION Specify the QoS alias if you want to delete a specific bearer plane qoS marking rule Otherwise all the A configured bearer plane QoS marking rules are deleted except int_
50. Configuration Mode on page 179 E Terminating the VLAN Service Interface Configuration Mode on page 179 Terminating the QinQ Service Interface Configuration Mode on page 180 Terminating the IP IP Service Interface Configuration Mode Run the following command to terminate the IP IP service interface configuration mode npu config srvcif ipip exit npu config srvcif ipip exit IP IP Service interface configuration mode Terminating the VLAN Service Interface Configuration Mode Run the following command to terminate the vian service interface configuration mode npu config srvcif vlan exit npu config srvcif vlan exit BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration Privilege 10 Level Command _ VLAN Service interface configuration mode Modes 3 3 9 8 4 3 Terminating the QinQ Service Interface Configuration Mode Run the following command to terminate the QinQ service interface configuration mode npu config srvcif QinQ exit Command npu config srvcif QinQ exit Syntax Privilege 10 Level Command _ QinQ Service interface configuration mode Modes 3 3 9 8 5 Deleting a Service Interface You can at any time run the following command to delete service interface npu config no srvc intf lt intf alias gt INFORMATION ne A Service Interface cannot be deleted if it is assigned to any Service Gro
51. Default Possible Values Value file server Indicates whether the Mandatory N A E file lt IP address gt system level logs are to be E server lt ipa disabled for a file or server ddress gt file Indicates that system level logging to a file is to be disabled server lt ipaddress gt Indicates that system level logging to a server is to be disabled Specify the IP address if you want to disable logging to a specific server Otherwise logging is disabled for the server that was last enabled for logging Provide the IP address in the format XXX XXX XXX XXX Global configuration mode Displaying System level Logs To display system level logs run the following commana npu show logs When you run this command all the log messages are displayed the unit maintains a maximum of 1000 log messages If you want to filter log messages to be displayed run the following command to specify the filter criteria npu show logs grep lt string gt For example if you want to view log messages pertaining to only Error logs run the following command npu show logs grep ERROR BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration NOTE An error may occur if i E There are no logs to be displayed The log files are inaccessible or an internal error occurred while processing the result Command npu show
52. Downlink subscriber s packet that does not match any DL filter rule shall be dropped DHCP traffic in UL and DL direction is always passed Anti spoofing function filtering of UL traffic is performed before the hot lining filtering Hot Lining is not applied on an MS with VLAN or Ethernet Services If the ASN GW receives Access Accept message which includes any Hot Lining attributes and the subject MS is granted at least one flow with CS type of VLAN or Ethernet the ASN GW shall initiate De registration of the MS Hot Lining is supported only for IP CS services using IP in IP tunnel or VLAN interface connectivity towards the CSN When Hot Lining is disabled in ASN GW it shall not include Hot Lining Capabilities attributes in any Access Request messages If AAA replies with Access Accept message which includes any Hot Lining attributes ASN GW shall initiate De registration of the MS The following sections describe the following tasks Enabling Disabling the Hot Lining Feature on page 292 Managing Hot Lining Profiles on page 293 a a HM Deleting Hot Lining Profiles on page 303 H Displaying Configuration Information for Hot Lining Profiles on page 303 a Displaying the Status of the Hot Lining Feature on page 305 3 3 9 13 1 Enabling Disabling the Hot Lining Feature To enable the hot lining feature run the following command npu config config hotlining enable To disable hot lining run the followin
53. IP address Refer the syntax description for more information about the appropriate values and format for configuring this parameter Command npu config clsfrule dstaddr lt ipv4addr gt Syntax Privilege 10 Level Syntax Besctipye Parameter Description Presence Default Possible Values a Value lt ipv4addr gt Denotes the IPv4 address of the Mandatory N A Valid IP Address destination address for which the configuration mode is to be enabled The destination address configuration mode is automatically enabled Command L3 Classification rules configuration mode Modes 3 3 9 11 4 6 2 Enabling the Destination Address and Configuring the Address Mask Run the following command to enable the destination address classifier and configure the address mask for the destination address npu config clsfrule dstaddr config addr enable addr mask lt value gt You can also run this command to enable a destination address that is currently disabled For details refer to Disabling the Destination Address on page 273 BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration NOTE An error may occur if you provide an invalid address mask Refer the syntax description for more information about the appropriate values and format for configuring this parameter Command npu config clsfrule dstaddr con
54. If you have enabled writing of logs to file it is recommended that you periodically make a backup of log messages on the flash NOTE mer e You can display a list of log files that are currently residing on the flash For details refer Section 3 3 10 1 9 When you make a backup of log files on the flash the last 1000 log messages are stored in a compressed file which is saved on the flash There is no limit on the number of log files that can be saved unless there is inadequate space on the flash Run the following command to make a backup of the log messages written to file on the flash npu config save log file lt file name gz gt When you run this command the last 1000 log messages are stored in the compressed file which is saved on the flash NOTE An error may occur if E You have specified the file name in an invalid format Because the backup log file is a compressed l file always suffix the file name with gz E The length of the file name has exceeded 255 characters E The system was unable to compress the file or save the compressed file to flash A processing error has occurred Command npu config save log file lt file name gt Syntax BreezeMAX Mini Centralized ASN GW System Manual D Chapter 3 Operation and Administration Using the CLI Unit Configuration Privilege 10 Level Syntax Deschiptlo Parameter Description Presence Default Possibl
55. Indicates that TCP UDP traffic npu config ext nacl IP address to all NPU interface IP addresses permit tep 1 1 1 1 host is permitted or denied any npu config ext nacl deny udp any any host Indicates that TCP UDP traffic npu config ext nacl permit tcp any host 1 1 1 1 host host 1 1 1 1 npu config ext nacl deny udp any host 1 1 1 1 lt network s rc ip gt lt mask gt Indicates that TCP UDP traffic is to be permitted or denied for a particular NPU interface subnet npu config ext nacl permit tcp any host 1 1 1 0 255 255 255 0 npu config ext nacl deny udp any host 1 1 1 0 255 255 255 0 BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Table 3 20 Parameters for Configuring Permit Deny Rules for TCP UDP Traffic Parameter Description Example Destination gt Indicates that TCP UDP traffic npu config ext nacl port lt port numb is to be permitted or denied to permit tcp host 1 1 1 1 er the NPU interface source port host any gt 8080 1 65535 gt for which the port number is i 1 4 P npu conr g ext nac greater than the value of this R J deny udp any any parameter 1t Indicates that TCP UDP traffic npu config ext nacl lt port numb is to be permitted or denied to permit tcp host 1 1 1 0 er the NPU interface source port 255
56. System Manual Chapter 3 Operation and Administration Using the CLI Managing MS in ASN GW Display MS context Info Format NAT R lt value Detailed MS ID lt value gt for each registered Serving BS ID lt value gt MS if requested for all MSs for each Service Flow Serving Flow ID lt gt lt value gt Serving Flow GRE key lt value gt Serving Flow Direction lt Uplink Downlink gt MS Flow Service Group IP lt value gt gt Service Group Name lt value gt Service Group Type lt value gt Display MS ID Serving BS ID Auth Mode UL Flows DL Flows Format P a table for each registered MS Brief Command Global command mode Modes BreezeMAX Mini Centralized ASN GW System Manual OQ 3 5 3 5 1 3 5 1 1 Command Syntax Privilege Level Chapter 3 Operation and Administration Using the CLI Monitoring Hardware and Software Perfor Monitoring Hardware and Software Performance This section describes the procedures for H Monitoring Hardware Components on page 347 HM Displaying System Files on page 351 Monitoring Hardware Components You can use the CLI to monitor performance of the following hardware components with respect to HM Displaying the Current Status of Shelf Components on page 347 HM Displaying the Temperature of the Shelf on page 348 HM Displaying Utilization of CPU and Memory Resources for the NPU on page 349 HM
57. System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration 4 Run the following command to delete the ACL npu config no ip access list standard lt access list number 1 99 gt extended lt access list number 100 199 gt NOTE An error may occur if E The ACL you are trying to delete is INACTIVE E The ACL number you have specified does not exist Command npu config no ip access list standard lt access list number 1 99 gt Syntax extended lt access list number 100 199 gt Privilege 10 Level Syntax Descriptio Parameter Description Presence Default Possible Values j Value standard Indicates the ACL number of Mandatory N A E Standard lt access list n the standard or extended ACL 1 99 umber 1 99 gt to be deleted extended E Extended lt access list n 100 199 umber 100 199 gt Command Global configuration mode Modes NOTE The default pre configured and automatically created ACLs cannot be deleted and should not be modified 3 3 8 3 Attaching De attaching ACLs to from the NPU host Virtual Interface You can attach or de attach an ACL to from the NPU host virtual interface When an ACL is attached to the NPU host virtual interface it is in the ACTIVE state it is in the INACTIVE state when it is de attached from the NPU host virtual interface BreezeMAX Mini Centralized ASN GW
58. System Manual OQ 3 3 8 3 1 3 3 8 3 2 Chapter 3 Operation and Administration Using the CLI Unit Configuration To attach de attach an ACL 1 Enable the NPU host virtual interface configuration mode refer to Section 3 3 8 3 1 2 You can now execute either of the following tasks Attach an ACL to the NPU host virtual interface refer to Section 3 3 8 3 2 De attach an ACL from the NPU host virtual interface refer to Section 3 3 8 3 3 3 Terminate the interface configuration mode refer to Section 3 3 8 3 4 Enabling the Interface Configuration Mode ACLs are applied on traffic received from the DATA MGMT or CSCD ports and destined towards the NPU host virtual interface Run the following command to enable the interface configuration mode for the NPU host virtual interface npu config interface npu host After you have enabled the interface configuration mode you can M Attach an ACL to the NPU host virtual interface Section 3 3 8 3 2 M De attach an ACL from the NPU host virtual interface Section 3 3 8 3 3 Attaching an ACL to the NPU host Virtual interface After you have enabled the interface configuration mode run the following command to attach an ACL to the NPU host virtual interface npu config if ip access group lt access list number 1 199 gt lt access list name gt NOTE An error may occur if the ACL number name that you have specified does not exist or
59. Using the CLI Unit Configuration lt rulename gt Indicates the name of the uplink downlink classification rule to be linked to this service flow Use the classification rule name to reference the appropriate classification rule For IPCS service flows only L3 classification rules are applicable For VLAN CS service flows only L2 classification rules are applicable For VLANCS service flows the linked uplink and downlink classification rules should be the same This is because the VLANCS classification rules define the CVID Customer VLAN ID that should be the same for uplink and downlink flows The number of rule name entries must match the number defined in num_of_rule_names For more information about creating classification rules refer to Section 3 3 9 11 4 1 Mandatory N A Valid classification rule name Command Modes Service profile service flow configuration mode 3 3 9 11 3 3 5Deleting Uplink Downlink Classification Rule Names After enabling the service flow configuration mode run the following commands to delete uplink downlink classification rules npu config srvcprfl flow no ulclsf rulename lt num_of_rul lt rulename gt lt rulename gt npu config srvcprf1l flow no dlclsf rulename lt num_of_rul lt rulename gt lt rulename gt lenames 1 6 gt lenames 1 6 gt After you have executed these commands you can termi
60. Using the CLI Unit Configuration npu config srvcif VPLS_trunk config interface encapsulation vlan stacked_vian npu config srvcif vlan config interface encapsulation vlan stacked_vlan 10 Parameter Description Presence Default Possible Values Value interface The encapsulation mode of Optional vlan E vlan encapsulation vlan applicable traffic VLAN or E stacked_vian stacked_vlan Stacked VLAN QinQ VPLS Trunk Service Interface configuration mode Configuring the Outer VLAN ID of a VPLS_trunk Service Interface After enabling the VPLS_trunk Service Interface configuration mode run the following command to configure the outer VLAN ID parameter of the service interface npu config srvcif VPLS_trunk config outervlanid lt integer 0 4094 gt The outer VLAN ID is mandatory when creating a new service interface with stacked vlan encapsulation mode npu config srvcif vlan config outervianid lt integer 0 4094 gt 10 BreezeMAX Mini Centralized ASN GW System Manual Syntax Description Command Modes 3 3 9 8 3 Chapter 3 Operation and Administration Using the CLI Unit Configuration Parameter Description Presence Default Value Possible Values outervlanid lt integer o 4094 gt The Service Interface Outer VLAN ID Applicable only for Stacked VLAN Encapsulation Mode A Service Interface Outer VLAN ID shall not conflict with ot
61. acct see Optional 5 Eo r above mode is set to either E 5 1600 lt integer 0 5 1 time or volumeTime The 600 gt default interval in minutes for Accounting Interim reports to be used if Acct Interim Interval is not received from the AAA server Value 0 means interim reports are deactivated unless Acct Interim Interval is sent by the AAA server in Access Accept messages Command IP Service group configuration mode Modes 3 3 9 10 3 Enabling Disabling VLAN Service Interface for an IP Service Group This command is applicable only for an IP service group associated with a VLAN service interface Run the following commands to enable disable the creation of a data path for a VLAN Service To enable npu config srvcgrp set vlan enable To disable npu config srvegrp no vilan enable NOTE Q The default is disabled Command Syntax Privilege Level Command Modes npu config srvcgrp set vlan enable npu config srvcgrp no vlan enable IP Service group configuration mode BreezeMAX Mini Centralized ASN GW System Manual 3 3 9 10 4 gt Chapter 3 Operation and Administration Using the CLI Unit Configuration Configuring the DHCP Server Proxy Relay To configure the DHCP server proxy relay 1 Enable the service group operation mode for DHCP server relay proxy refer to Section 3 3 9 10 4 1 2 You can now execute one of the following tasks according to the s
62. authenticator Command npu show authenticator Syntax Privilege 1 Level BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Display Authenticator Function Configuration Format f eapTimerIdReq lt value gt eapCounterIdReqMax lt value gt authTimerNtwEntryHold lt value gt eapTimerTransfer lt value gt eapCounterTransferMax lt value gt eapCounterReAuthAttemptMax lt value gt authTimerReauthCmpltHold lt value gt eapCounterRndTripsMax lt value gt authTimerPmkLifetime lt value gt authTimerPmkGaurd lt value gt authCounterNtwEntryMax lt value gt authTimerAuthFailureHold lt value gt Command Global command mode Modes The following table provides some details about these parameters Parameter Description eapTimerIdReq The period in milliseconds the unit waits for the EAP Transfer response eapCounterIdReqMax The period in milliseconds for which the unit should wait for the response to the request for the EAP ID authTimerNtwEntryHold The period in seconds within which the MS should be authenticated for initial entry into the network If the MS is not authenticated within this period the unit terminates the request for network entry eapTimerTransfer The maximum number of times the MS can attempt for initial entry to the network If the number of EAP transfers exceeds the value of
63. by the SNMP manager run the command npu config snmp mgr ReadCommunity public ReadWriteCommunity private For more details refer to Adding an SNMP Manager on page 324 For proper operation of the manager you should configure also the Trap Manager parameters and enable sending traps to the defined Trap Manager this can also be done later via the management system 1 npu config trap mgr ip source x x x x port 162 TrapCommunity public x x x x is the IP address of the EMS server For more details refer to Adding Modifying a Trap Manager Entry on page 327 2 npu config trap mgr enable ip source x x x x Note that if the management system is behind a NAT router the NAT Outside IP address the IP of the router s interface connected in the direction of the managed device LAN must be defined in the device as a Trap Manager with traps sending enabled In the NAT router Port Forwarding NAT Traversal must be configured for UDP and TCP ports 161 and 162 from Outside IP connected to the managed device s LAN to Inside IP connected to the management system s LAN BreezeMAX Mini Centralized ASN GW System Manual Gm 2 1 6 2 1 7 2 2 Chapter 2 Commissioning Completing the Configuration Using AlvariSTAR Site ID Definition To define the site ID Site Number npu config site identifier x x is the unique site identifier a number in the range from 1 to 999999 For more details refer to Configuring the Un
64. can at any time run the following command to delete the IP protocol classifier npu config clsfrule no ip protocol Command npu config clsfrule no ip protocol Syntax Privilege 10 Level Command L3 Classification rule IP protocol configuration mode Modes 3 3 9 11 4 5 Managing Source Address Configuration for the L3 Classification Rule Classification rules can classify the packet based on the source address of the packet You can configure the value of source address for a given classification rule mo To configure a source address classifier 1 Enable the source address configuration mode refer to Section 3 3 9 11 4 5 1 2 You can now execute any of the following tasks Configure the address mask refer to Section 3 3 9 11 4 5 2 Disable the source address refer to Section 3 3 9 11 4 5 3 3 Terminate the source address configuration mode refer to Section 3 3 9 11 4 5 4 You can at any time delete an existing source address refer to Section 3 3 9 11 4 5 5 The following example illustrates the sequence of commands for enabling the source address configuration mode enabling the source address classifier configuring the address mask and then terminating the source address configuration mode npu config clsfrule srcaddr 10 203 155 20 BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration npu config clsfrule srcaddr config
65. commands that require higher privilege levels If the admin user has configured a password for that level see Assigning a Password for a Privilege Level on page 35 you can use that password to enable higher privilege levels For example if your privilege level is 1 you can provide the password configured for privilege level 10 to execute all commands that require privilege level 10 This section describes the commands for M Enabling a Higher Privilege Level on page 37 M Returning to the Default Privilege Level on page 38 Enabling a Higher Privilege Level To enable a higher privilege level 1 Login to the CLI 2 Run the following command to specify the privilege level and password npu enable lt 0 15 gt Enable Level For example if are logged in with privilege level 1 and you want to switch to privilege level 10 for which a password has been assigned run the command npu enable 10 3 At the password prompt specify the password configured for the privilege level that you have specified If you specify the correct password you are logged in to the CLI with the privilege level that you had specified You can now execute all commands that require the current privilege level INFORMATION You can display your current privilege level using the following command npu show privilege You can at any time return to your default privilege level For details refer Section 3 1 5 3 2 I
66. configuration E bearer local mgmt information is to be E local mgmt displayed Do not specify any value for this parameter if you want to view configuration information for all IP interfaces lt Interface Name gt is lt up down gt Internet Address is lt value gt Broadcast Address lt value gt BreezeMAX Mini Centralized ASN GW System Manual OQ B Chapter 3 Operation and Administration Using the CLI Unit Configuration Command Global command mode Modes 3 3 2 3 8 Testing Connectivity to an IP Interface To test connectivity to an IP interface perform a ping test using the following command npu ping lt ip address gt timeout lt seconds 1 15 gt count lt count 1 20 gt NOTE An error may occur if the specified IP address does not match any of the available IP interfaces Command Syntax Privilege Level Syntax Descriptio n Command Modes 3 3 2 4 npu ping lt ip address gt timeout lt seconds 1 15 gt count lt count 1 20 gt 10 Parameter Description Presence Default Possible Values Value lt ip address gt Indicates the interface for Mandatory N A IP address of an which a ping connectivity host IP interface test should be performed timeout The maximum time in Optional 5 1 15 lt seconds 1 15 gt seconds to wait for a response before sending another packet or terminating the test count The number of packets to be Optiona
67. current characters and privilege level case sensitive BreezeMAX Mini Centralized ASN GW System Manual QO 35 Chapter 3 Operation and Administration Using the CLI Using the Command Line Interface CLI Command Global configuration mode Modes 3 1 5 2 2 Deleting a Password for a Privilege Level NOTE e Only users who have logged in as admin can execute this command To delete a password for a privilege level run the following command npu config no enable password Level lt 1 15 gt For example to delete a previously assigned password for privilege level 10 run the command npu config no enable password level 10 NOTE An error may occur if E The privilege level that you have specified is not within the range 1 10 Command Syntax Privilege Level Syntax Descriptio n Command Syntax npu config no enable password Level lt 1 15 gt 10 Parameter Description Presence Default Possible Values Value lt 1 10 gt Indicates the privilege level for Optional 10 1 10 password which a password is to be cannot be disabled defined for Global configuration mode BreezeMAX Mini Centralized ASN GW System Manual privilege levels higher than 10 3 1 5 3 3 1 5 3 1 gt Chapter 3 Operation and Administration Using the CLI Using the Command Line Interface CLI Enabling Disabling Higher Privilege Levels You can execute
68. data delivery type NRTVR RTVR BE ERTVR ANY 0 bps BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration ulqos traffic Denotes the traffic priority to Optional 0 0 7 where 0 is priority be applied to the uplink traffic lowest and 7 is lt value 0 7 gt carried by the service flow highest Although available for all service flows not applicable for service flows with UGS uplink data delivery type dldatadlvry t Denotes the data delivery type Optional 3 BE E 0 UGS ype for the downlink traffic carried E 1 RTVR lt type 0 lt UGS gt by the service flow 1 lt RTVR gt E 2 NRTVR 2 lt NRTVR gt E 3 BE 3 lt BE gt E 4 ERTVR 4 lt ERTVR gt 255 lt ANY gt gt E 255 ANY dlqos maxsust Denotes the maximum Optional 250000 10000 4000000 ainedrate sustained traffic rate in bps 0 bps lt value 10000 4 for the downlink traffic carried 0000000 gt by the service flow Although available for all service flows applicable only for service flows with the appropriate downlink data delivery type NRTVR RTVR BE ERTVR ANY dlqos traffic Denotes the traffic priority to Optional 0 0 7 where 7 is priority be applied to the downlink highest lt value 0 7 gt traffic carried by the service flow Although available for all service flows not applicable for servic
69. datapath will return an Incomplete Command error Command npu config datapath throughput threshold lt integer 1 500 gt Syntax BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration Privilege 10 Level Syntax Descriptio Parameter Description Presence Default Possible Values n Value throughput thr Maximal total throughput in Optional 500 1 500 eshold Mbps via ASN GW UL DL lt integer 1 500 Used as threshold for no gt resource reject and relevant alarm Command Global configuration mode Modes 3 3 9 3 2 Restoring the Default Parameter for the Data Path Function To restore the default configuration for the data path function run the following command npu config no datapath throughput threshold INFORMATION Refer to Section 3 3 9 3 1 for a description and default value of this parameter Command npu config no datapath throughput threshold Syntax Privilege 10 Level Command Global configuration mode Modes 3 3 9 3 3 Displaying Configuration Information for the Data Path Function To display configuration information for the Data Path function run the following command npu show datapath BreezeMAX Mini Centralized ASN GW System Manual Q Chapter 3 Operation and Administration Using the CLI Unit Configuration Command npu show datapath Syntax Privilege 1 L
70. disclosed to any person or firm or reproduced by any means electronic and mechanical without the express prior written permission of Alvarion Ltd E The text and graphics are for the purpose of illustration and reference only The specifications on which they are based are subject to change without notice M The software described in this document is furnished under a license The software may be used or copied only in accordance with the terms of that license E Information in this document is subject to change without notice Corporate and individual names and data used in examples herein are fictitious unless otherwise noted Alvarion Ltd reserves the right to alter the equipment specifications and descriptions in this publication without prior notice No part of this publication shall be deemed to be part of any contract or warranty unless specifically incorporated by reference into such contract or warranty E The information contained herein is merely descriptive in nature and does not constitute an offer for the sale of the product described herein M Any changes or modifications of equipment including opening of the equipment not expressly approved by Alvarion Ltd will void equipment warranty and any repair thereafter shall be charged for It could also void the user s authority to operate the equipment Some of the equipment provided by Alvarion and specified in this manual is manufactured and warranted by third parties A
71. gt resource reject and relevant alarm Command Global configuration mode Modes 3 3 9 4 2 Restoring the Default Configuration Parameter for the Context Function To restore the default configuration for the context function run the following command npu config no contextfn ms capacity threshold INFORMATION Refer to Section 3 3 9 4 1 for a description and default value of this parameters Command npu config no contextfn ms capacity threshold Syntax Privilege 10 Level Command Global configuration mode Modes 3 3 9 4 3 Displaying Configuration Information for the Context Function To display configuration information for the context function run the following command BreezeMAX Mini Centralized ASN GW System Manual e Chapter 3 Operation and Administration Using the CLI Unit Configuration npu show contextfn Command npu show contextfn Syntax Privilege 1 Level Command Global command mode Modes Display Asn gateway Context config Format or ctxtfnTimerContextReq lt value gt ctxtfnCounterContextReqMax lt value gt ctxtfnTimerContextRprt lt value gt ctxtfnCOUNTerContextRprtMax lt value gt ctxtfnMsCapacityThreshold lt value gt Command Global command mode Modes The following table provides some details on the read only parameters that are configurable only by the vendor Parameter Description ctxtfnTimerContextReq The period in milliseconds for whi
72. hotlining profile lt profilename gt If you use this command to specify a new profile the configuration mode for the newly created profile is automatically enabled after which you can configure the profile s filtering rules refer to Configuring Hot Lining Filter Rules on page 295 or delete filter rules refer to Deleting Filter Rules on page 302 You can then terminate the hot lining profile configuration mode refer to Terminating the Profile Configuration Mode on page 302 and return to the global configuration mode npu config hotlining profile lt profilename gt 10 BreezeMAX Mini Centralized ASN GW System Manual OQ 293 Chapter 3 Operation and Administration Using the CLI Unit Configuration Syntax pescnptio Parameter Description Presence Default Possible Values j Value profilename Denotes the name of the Mandatory N A String 1 to 30 hot lining profile for which the configuration mode is to be enabled Must be unique per BTS If you are creating a new hot lining profile specify the name of the new profile The configuration mode is automatically enabled for the new profile Command Global configuration mode Modes 3 3 9 13 2 2 Enabling Disabling the Profile characters After enabling the hot lining profile configuration mode run the following command to enable disable the profile npu config hotlinig profile set profile enabled disabled
73. info detailed nai msid lt string gt hotlined NOTE ipa i BERE o An error may occur if invalid NAI or invalid MSID is provided Refer to the syntax description for more information about the appropriate values and format for configuring this parameter Command Syntax Privilege Level npu show ms info detailed nai msid lt string gt hotlined BreezeMAX Mini Centralized ASN GW System Manual Syntax Descriptio n Chapter 3 Operation and Administration Using the CLI Managing MS in ASN GW Parameter Description Presence Default Possible Values Value detailed Defines the type of information Optional N A E Null nai msid lt strin to be displayed E detailed g gt hotlined Null the command show ms E detailed nai info Displays brief info for all lt string gt MSs E detailed msid lt string gt detailed the command show l E hotlined ms info detailed Displays detailed info for all MSs detailed nai lt string gt the command show ms info detailed nai lt string gt Displays detailed info for the MS with the specified NAI detailed msid lt string gt the command show ms info detailed msid lt string gt Displays detailed info for the MS with the specified MSID MAC address The MSID format iS XX XX XX XX XX XX hotlined the command show ms info hotlined Displays brief info for all hotlined MSs BreezeMAX Mini Centralized ASN GW
74. information for all class maps is displayed BreezeMAX Mini Centralized ASN GW System Manual e for Chapter 3 Operation and Administration Using the CLI Unit Configuration NOTE fui eo An error may occur if you specify a class map number that does not exist or is not within the range tl 1 65535 Command npu show class map lt class map num 1 65535 gt Syntax Privilege 1 Level Syntax PERDURE Parameter Description Presence Default Possible Values n Value lt class map nu Indicates the identifier of the Optional N A m 1 65535 gt class map for which configuration information is to be displayed Do not specify a 1 65535 value for this parameter if you want to view the configuration information for all class maps Display Class map lt class map number gt Format for each class mapif CoS Value lt value gt requested forall DSCP Value lt value gt class maps Command Global command mode Modes 3 3 6 2 Managing QoS Classification Rules QoS classification rules classify packets into flows based on the following parameters E P address of the host originating the traffic the IP address assigned to the bearer or external management interface E Layer 3 protocol indicating either TCP or UDP BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration Layer 4 sou
75. is automatically enabled Privilege 10 Level Command L3 Classification rules configuration mode Modes BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration 3 3 9 11 4 5 2Enabling the Source Address and Configuring the Address Mask After enabling the source address configuration mode run the following command to enable the source address and configure the address mask for the source address npu config clsfrule srcaddr config addr enable addr mask lt value gt You can also run this command to enable a source address that is currently disabled For details refer to Disabling the Source Address on page 269 NOTE An error may occur if you provide an invalid address mask for the source address Refer the syntax description for more information about the appropriate value and format for this parameter Command npu config clsfrule srcaddr config addr enable addr mask lt value gt Syntax Privilege 10 Level Syntax Deschiptle Parameter Description Presence Default Value Possible Values n addr enable Indicates that the use of Optional By default the The the associated source use of the presence absenc address is enabled for the associated e of this flag classification rule that you source address is indicates that are configuring If the use disabled the use of the of this address is disabled
76. logs grep lt string gt Syntax Privilege 1 Level Syntax Descriptio Parameter Description Presence Default Possible Values M Value grep Indicates the criteria for Optional N A String lt string gt filtering the log messages to be displayed Command Global command mode Modes 3 3 10 1 4 Displaying the Current Log Destination To view the current log destination that is whether logs are written to file or an external server run the following command npu show log destination NOTE e An error may occur if an internal error occurs when you execute this command Command npu show log destination Syntax Privilege 1 Level BreezeMAX Mini Centralized ASN GW System Manual eo Chapter 3 Operation and Administration Using the CLI Unit Configuration Display Format Log File lt Enabled Disabled gt Log Server lt Enabled Disabled gt ServerIP lt IP address gt Command Global command mode Modes 3 3 10 1 5 Making a Backup of Log Files on the Flash The system stores a maximum of 1000 log messages in the log file after which the oldest messages are overwritten This log file resides in the TFTP boot directory tftpboot management system_logs of the NPU You can TFTP this file from the flash You can display the list of log files residing on the flash For details refer Section 3 3 10 1 9 In addition logs written to file are not maintained after system reset
77. mode for the newly created source port is automatically enabled after which you can enable disable the source port range refer to Section 3 3 9 11 4 7 2 Section 3 3 9 11 4 7 3 You can then terminate the source port configuration mode refer to Section 3 3 9 11 4 7 4 and return to the classification rules configuration mode Command npu config clsfrule sreport lt start port gt lt end port gt Syntax Privilege 10 Level Syntax Bescripse Parameter Description Presence Default Possible Values n Value lt start port gt Denotes the starting value of Mandatory N A 1 65535 port range to be configured Cannot be higher than end port lt end port gt Denotes the end value of port Mandatory N A 1 65535 range to be configured Cannot be lower than start port Command L3 Classification rules configuration mode Modes 3 3 9 11 4 7 2 Enabling the Source Port Range Run the following command to enable the source port range npu config clsfrule srcport port enable You can also run this command to enable a source port range that is currently disabled For details refer to Disabling the Source Port Range on page 277 BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration NOTE If source port range is enabled then IP protocol protocol enable is set to enabled l Protocol can be either 6 TC
78. more information about resetting the system refer to Section 3 2 2 1 Command npu restore factory default Syntax Privilege 10 Level Command Global command mode Modes 3 3 3 4 7 Restoring the Factory Default Configuration With Connectivity You can at any time run the following command to restore factory default configuration without changing any of the parameters required for maintaining management connectivity to the unit BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration npu restore factory default with connectivity NOTE i i o After executing this command reset the system to apply the configuration change For more information about resetting the system refer to Section 3 2 2 1 The parameters that are maintained without any change include Physical interfaces MGMT CSCD DATA configurations IP interfaces local management external management bearer configurations IP route configurations SNMP Managers configurations Trap Managers configurations Site ID Command npu restore factory default with connectivity Syntax Privilege 10 Level Command Global command mode Modes 3 3 3 4 8 Displaying Failures in Configuration Restore Operations When some configurations cannot be applied during configuration restore process the unit will not reset Instead it will report the Configurations Applied Succe
79. msbShift is selected a When transferring classifier VID value from R3 side to R6 side the binary value of the 12 least significant bits in R3 TLV will be copied and pasted as most significant bits in R6 TLV b When transferring classifier VID value from R6 to R3 the binary value of the 12 the most significant bits in R6 TLV will be copied and pasted as the 12 least significant bits in R3 TLV if Isb is selected The whole 16 bit value of the relevant TLV will be transferred without any change when transferring classifier VID value from R3 side to R6 side and from R6 to R3 Command Global configuration mode Modes 3 3 9 9 2 2 Restoring the Default Global RADIUS Configuration Parameters To restore the default global RADIUS configuration used for AAA clients run the following command npu config no radius accessreq retries accessreq interval nasid timezone offset mtu vlan classf bit align INFORMATION Refer Section 3 3 9 9 2 1 for a description and default values of these parameters Command npu config no radius accessreq retries accessreq interval nasid Syntax timezone offset mtu vlan classf bit align BreezeMAX Mini Centralized ASN GW System Manual Privilege Level Command Modes 3 3 9 9 2 3 Command Syntax Privilege Level Display Format Command Modes 3 3 9 10 Chapter 3 Operation and Administration Using the CLI U
80. of the Optional N A String bearer QoS marking rule that you want to display Specify a value for this parameter if you want to display a specific bearer QoS marking rule Do not specify a value for this parameter if you want to display all bearer QoS marking rules Display Bearer QoS Configuration Format gqos alias intf type srvc type trfc priority media type inner dscp outer dscp vlan priority status voip lt value gt lt value gt lt value gt lt value gt lt value gt lt value gt enabled Command Global command mode Modes 3 3 9 8 Managing Service Interfaces A Service Interface defines the parameters of the interface used by the ASN GW on the network side for services specified in the applicable Service Group The following types of Service Interface are available IP IP The Service Interface defines the parameters on the ASN GW side of a point to point tunnel to be used for the applicable traffic M VLAN The Service Interface defines the VLAN ID to be added removed by the ASN GW to from the applicable traffic BreezeMAX Mini Centralized ASN GW System Manual e Chapter 3 Operation and Administration Using the CLI Unit Configuration HM QinQ Applicable only for special applications requiring local support of unauthenticated mode The QinQ Service Interface is applicable only for supporting VLAN CS Service Flows associated with a QinQ Service Group E VPLS Trunk The Service Interface defi
81. or name configuration information is displayed for all ACLs Display Standard IP Access List lt ACL number gt Format Standard BreezeMAX Mini Centralized ASN GW System Manual Access List Name Alias Interface List Status Source IP address Source IP address mask Destination IP address Destination IP address mask Rule Action Packet Match Count Rule Row Status lt ACL Name gt lt Interface Name gt lt value gt lt value gt lt value gt lt value gt lt value gt lt value gt lt value gt lt value gt lt Interface Name gt Chapter 3 Operation and Administration Using the CLI Unit Configuration Display Extended IP Access List lt ACL Number gt Format Extended Access List Name Alias lt ACL Name gt Interface List lt Interface gt lt Interface gt Status lt value gt Filter Protocol Type lt value gt Source IP address lt value gt Filter Source Port lt value gt Rule Action lt value gt QoS Classifier ID lt value gt Marking rule status lt value gt Command Global command mode Modes 3 3 9 Configuring the ASN GW Functionality The ASN GW functionality indicates that the unit executes the following functions M Network Decision Point NWDP Includes the following non bearer plane functions Implementation of EAP Authenticator and AAA client Termination of RADIUS protocol against the select
82. parameter 1010 1t Indicates that incoming TCP npu config ext nacl lt port numb UDP traffic is to be permitted or permit tcp 1 1 1 0 er denied from the source port for 255 255 255 0 lt 1111 1 65535 gt which the port number is less z E 1 4 r npu conr g ext nac than the value of this deny udp host 1 1 1 1 1t parameter 1010 eq Indicates that incoming TCP npu config ext nacl lt port numb UDP traffic is tobe permitted or permit tcp 1 1 1 0 er denied from the source port for 255 255 255 0 eq 8080 1 65535 gt which the port number is equal npu config ext nacl to the value of this parameter deny udp host 1 1 1 1 eq 4040 range Indicates that incoming TCP npu config ext nacl lt port numb er 1 65535 gt lt port numb er 1 65535 gt UDP traffic is to be permitted or denied from the source port for which the port number is within the range specified by this parameter permit tcp 1 1 1 0 255 255 255 0 range 1010 8080 npu config ext nacl deny udp host 1 1 1 1 range 1010 4040 BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Table 3 20 Parameters for Configuring Permit Deny Rules for TCP UDP Traffic lt src ip ad dress gt to a specific NPU interface IP address is permitted or denied Parameter Description Example Destination any
83. pass redirect If you use this command to specify a new filter rule the configuration mode for the newly created filter rule is automatically enabled after which you can configure the filter rule s parameters You can then terminate the filter rule configuration mode and return to the profile configuration mode The priority of checking for a match in filter rules is applied with respect to the sequence in which these filter rules were defined The first found match is applied Command npu config hotlinig profile filter rule lt string gt direction uplink Syntax downlink action drop pass redirect Privilege 10 Level Syntax Beschipla Parameter Description Presence Default Possible Values n Value filter rule lt string gt Denotes the unique per BTS Mandatory N A String 1 to 30 name of the filter rule for characters which the configuration mode is to be enabled If you are creating a new filter rule specify the name of the new rule The configuration mode is automatically enabled for the new filter rule direction uplink The direction for which the rule Optional uplink E uplink downlink should be applied E downlink BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration action drop pass Action to be performed on Optional pass E drop redirect packets that mat
84. permit udp any host lt src ip address gt lt src ip address gt lt src mask gt gt lt port number 1 65535 gt It lt port number 1 65535 gt eq lt port number 1 65535 gt range lt port number 1 65535 gt lt port number 1 65535 gt any host lt dest ip address gt lt dest ip address gt lt dest mask gt gt lt port number 1 65535 gt lt lt port number 1 65535 gt eq lt port number 1 65535 gt range lt port number 1 65535 gt lt port number 1 65535 gt BreezeMAX Mini Centralized ASN GW System Manual oe OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration Run the following commands to delete a Deny rule for TCP UDP traffic from to a specific IP address port npu config ext nacl no deny tcp any host lt src ip address gt lt src ip address gt lt src mask gt gt lt port number 1 65535 gt It lt port number 1 65535 gt eq lt port number 1 65535 gt range lt port number 1 65535 gt lt port number 1 65535 gt any host lt dest ip address gt lt dest ip address gt lt dest mask gt gt lt port number 1 65535 gt lt lt port number 1 65535 gt eq lt port number 1 65535 gt range lt port number 1 65535 gt lt port number 1 65535 gt npu config ext nacl no deny udp any host lt src ip address gt lt src ip address gt lt src mask gt gt lt port number 1 65535 gt It lt po
85. service Optional null String up to 70 interface characters vlan id A Service Interface VLAN ID Optional 0 1 9 11 4094 lt size 1 9 11 409 shall not conflict with other 4 gt instances of Service Interface VLAN ID any instance of Service Interface Outer VLAN ID with VLAN IDs of Bearer Local Management and External Management interfaces and with any VID Map Range of a VPWS Mapped Service Group Must be set to a valid value other than the default 0 The VLAN ID of an existing Service Interface cannot be changed BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration dflt gw ip lt ip The IP Address and subnet Optional 0 0 0 0 valid IP address address gt mask of the Default Gateway 255 255 and mask lt mask gt 255 0 The IP address shall be unique among all the Host Interfaces IP s Bearer Local Management External Management and existing instances of Service Interface s Tunnel Destination IP Address and Default Gateway IP Address Interface mask should be configured in such a way that the resulting subnet should not overlap with an existing Interface subnet host interfaces other service interfaces Should be in the same subnet with the IP Address of the DHCP server proxy relay to be assigned to a service group using this service interface Must be changed from the default value The
86. session the default timeout 1800 seconds will apply BreezeMAX Mini Centralized ASN GW System Manual eo aa Command Syntax Privilege Level Syntax Descriptio n Command Modes 3 1 7 2 3 Command Syntax Privilege Level Command Modes 3 1 7 2 4 Command Syntax Chapter 3 Operation and Administration Using the CLI Using the Command Line Interface CLI npu config line exec timeout lt integer 1 18000 gt 10 Parameter Description Presence Default Possible Values Value lt integer The session timeout in Mandatory N A 1 18000 1 18000 gt seconds seconds Line configuration mode Restoring the Default Value of the Session Timeout To restore the default value of 1800 seconds for the current session timeout run the following command npu config line no exec timeout npu config line no exec timeout 10 Line configuration mode Displaying a Session Timeout To display the current configuration of a session timeout run the following command npu show line console vty lt line gt npu show line console vty lt line gt BreezeMAX Mini Centralized ASN GW System Manual OQ as Chapter 3 Operation and Administration Using the CLI Using the Command Line Interface CLI Privilege 1 Level Syntax Descriptio parameter Description Presence Default Possible Values n Value console v
87. table of the VPLS instance If the Destination address appears in the MAC table of the VPLS instance and it is associated with the same ingress MS specific port the ASN GW shall discard the frame i e the ASN GW shall never forward frames back to the ingress port Otherwise the ASN GW shall proceed to the next step If the Destination address appears in the MAC table of the VPLS instance the ASN GW shall forward the frame via that egress port it means that the frame shall be checked against the classification rules that are associated with all the DL Service Flows included in the MS specific port of this VPLS instance Ifthe value of Destination MAC address is not found in the MAC address table of the VPLS instance the ASN GW shall forward the frame to the VPLS trunk i e Frame Flooding towards Downlink is always disabled 4 If VPLS_Local Switching Disable then regardless of the value of Destination MAC address Destination MAC is either multicast or a unicast address the ASN GW shall forward the frame to the VPLS trunk of the VPLS instance The ASN GW shall perform egress VLANID translation if it is required see Table 3 22 3 3 9 10 10 3 Displaying MAC Address Tables Information The following information related to MAC address tables can be displayed upon request E Aging Timer refer to Displaying the Aging Timer on page 234 E Maximum Number of MAC Addresses per MS ID refer to Displaying the Maximum Numb
88. that you have configured manually The RTC time is used for creating the timestamp for log messages performance data collection files and for managing the interval after which a backup of the configuration file should be maintained and performance data should be collected Execute the following command to configure the date and time parameters If the system is configured to use SNTP and an SNTP server is available the UTC time is provided by the SNTP server Otherwise the UTC time that you configure is used instead To configure the date and time parameters run the following command npu config set date UTC lt HH MM SS DD MM YYYY gt LocalUTCDiff lt HH MM gt DST lt 0 2 gt NOTE An error may occur if 1 UTC time is not in the valid format i e hh mm ss dd mm yyyy l 2 Local UTCDiff is not valid format i e hh mm 3 Local UTC Diff is out of the range between 12 to 13 or it is not in steps of 30 minutes 4 DST is out of range i e between 0 to 2 Command npu config set date UTC lt HH MM SS DD MM YYYY gt LocalUTCDiff Syntax lt HH MM gt DST lt 0 2 gt Privilege 10 Level BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration Syntax pescnptio Parameter Description Presence Default Possible Values n Value UTC Indicates the UTC time to be Optional N A Use the format TA se for NAA not
89. the CLI BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Using the Command Line Interface CLI Table 3 5 Control Characters for Using the CLI Press To Up Down arrow keys Scroll the previously executed CLI commands Press Enter if you want to select and execute a particular command Right Left arrow keys Navigate to the right left of the selected character in a command Home key Navigate to the first character of a command End key Navigate to the last character of a command Backspace key Delete the characters of a command TAB key Prompt the CLI to complete the command for which you have specified a token command Remember that the CLI that is the nearest match to the token command that you have specified is displayed key View the list of commands available in the current mode If you press after a command a list of parameters available for that command is displayed 3 1 4 2 Using the CLI Help The CLI provides help that you can access while using the CLI Execute the following command to obtain help for a specific command help lt text gt Specify the command name as the parameter to view help for this command For example to obtain help for the show resource limits command run the following command npu help show resource limits The help for the show resource limits command is displayed
90. the backbone differs from the value configured for the external management interface the external management VLAN ID should be translated accordingly It is recommended to configure also VLAN translation for the bearer interface To enable VLAN translation and configure the required VLANs translation run the following commands the examples are for backhaul Data VLAN ID 30 and Management VLAN ID 31 assuming the default VLAN IDs for external management and bearer interfaces 1 Enable the Data port configuration mode for details refer to Enabling the Interface configuration mode on page 56 npu config interface gigabitethernet 0 10 2 Enable VLAN translation for details refer to Enabling Disabling VLAN Translation on page 63 npu config if vlan mapping enable 3 Translate management VLAN 12 to the backhaul management VLAN 31 npu config if vlan mapping 12 31 for details refer to Creating a VLAN Translation Entry on page 63 4 Translate data VLAN 11 to the backhaul data VLAN 30 npu config if vlan mapping 11 30 5 Exit the interface configuration mode npu config if exit To view the VLAN mapping parameters run the command npu show interface gigabitethernet 0 10 vlan mapping External Management Interface To configure the necessary parameters of the External Management interface used for connectivity with the EMS system run the following commands 1 Enable the External Management interface configurati
91. the hard coded maximum rate at which the device can send traps To display the trap rate limit run the following commana npu show trap rate limit BreezeMAX Mini Centralized ASN GW System Manual OQ Command Syntax Privilege Level Display Format Command Modes 3 3 12 2 6 Command Syntax Privilege Level Display Format Command Modes 3 3 12 3 Chapter 3 Operation and Administration Using the CLI Unit Configuration npu show trap rate limit Maximum number of traps sent is 20 traps per second Global command mode Displaying the Active Clear Timer and Event Rate Limit The Active Clear Timer parameter indicates the hard coded value for the suppression interval aimed at preventing too fast repetitions of alarm active clear alarm toggling The Event Rate Limit is practically identical to the trap rate limit parameter see previous section indicating the hard coded value for the maximum number of traps per second To display one of these parameters run the following command npu show activeClearTimer eventRateLimit npu show activeClearTimer eventRateLimit activeClearTimer lt value gt Ors eventRateLimit lt value gt Global command mode Managing the Time Settings Parameters The time settings parameters enable viewing updating the date and time setting for the device The time settings parameters enable also viewing updating SNTP parameters to support automatic clock
92. time run the following command to delete the source address classifier npu config clsfrule no srcaddr lt ip Addr gt Command npu config clsfrule no sreaddr lt ip Addr gt Syntax Privilege 10 Level BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration Syntax Deschiple Parameter Description Presence Default Possible Values n Value lt ip Addr gt Denotes the IPv4 address of the Optional N A Valid IP Address source address that you want to delete from a classification rule Command L3 Classification rules configuration mode Modes 3 3 9 11 4 6 Managing Destination Address Configuration for the L3 Classification Rule Classification rules can classify the packet based on the destination address of the packet You can configure the value of destination address for a given classification rule To configure a destination address classifier 1 Enable the destination address configuration mode refer to Section 3 3 9 11 4 6 1 2 You can now execute any of the following tasks Configure the address mask refer to Section 3 3 9 11 4 6 2 Disable the destination address refer to Section 3 3 9 11 4 6 3 3 Terminate the destination address configuration mode refer to Section 3 3 9 11 4 6 4 In addition you can at any time delete an existing destination address refer to Section 3 3 9 11 4 6 5 The foll
93. up the NPU A 2 1 1 Executing the Upgrade Procedure To execute the upgrade procedure Step 1 Configuring the TFTP Server Step 2 Triggering Software Download E M Step 3 Resetting and Booting the NPU Using the Shadow Image E Step 4 Making the Shadow Version Operational Step 1 Configuring the TFTP Server To initiate the NPU software upgrade procedure start with configuring the TFTP server to be used for the software version download To configure the TFTP server run the following command npu config software version server lt server ip gt NOTE E itis highly recommended to manage the SW Upgrade TFTP Server s IP address via AlvariSTAR AlvariCRAFT The management system supports automatic creation of IP routes for the TFTP Server provided proper configuration procedure is being followed E An error may occur if you execute this command when another software download is already in progress Command Syntax npu config software version server lt server ip gt BreezeMAX Mini Centralized ASN GW System Manual OQ s6 Chapter A Software Upgrade Upgrading the NPU Syntax Deschiple Parameter Description Presence Default Possible Values n Value lt server ip gt Denotes the IP address of the Mandatory N A Valid IP address TFTP server to be used for the software version download Command Global configuration mode Modes INFORMATION After you have
94. 1 99 gt utilization When this limit is memory reached the system raises a utilization Minor or Major alarm hardlimit Indicates the hard limit as a Optional 90 for 1 99 lt integer percentage for CPU memory CPU and 1 99 gt utilization When this limit is memory reached the system raises a utilization Critical alarm The value of this parameter should always be greater than the softlimit parameter BreezeMAX Mini Centralized ASN GW System Manual 92 Chapter 3 Operation and Administration Using the CLI Unit Configuration Command Global configuration mode Modes 3 3 5 1 2 Displaying CPU and Memory Utilization Limits To display the configured CPU and memory utilization limits run the following command npu show resource limits INFORMATION a To configure the CPU and memory utilization limits refer to Section 3 3 5 1 2 Command npu show resource limits Syntax Privilege 1 Level Display Resource softlimit hardlimit Format i ak oe CPU lt limit gt lt limit gt Memory lt limit gt lt limit gt Command Global configuration mode Modes 3 3 5 2 Rate Limiting The rate limiting feature enables limiting the type and rate of traffic destined towards the unit This feature is used to protect the unit from hostile applications or Denial of Service DoS attacks because packets that exceed an allowed rate are dropped and not queued to the unit The default rate limits that a
95. 15 gt BreezeMAX Mini Centralized ASN GW System Manual 22 Chapter 3 Operation and Administration Using the CLI Using the Command Line Interface CLI NOTE An error may occur if i E You are not logged in as the admin E The username or password that you have specified is more than 20 characters E The privilege level that you have specified is not within the range 1 10 Command npu config username lt user name gt password lt passwd gt privilege lt 1 15 gt Syntax Privilege 10 Level Syntax Deschptio Parameter Description Presence Default Possible Values n Value username Indicates the user name of the Mandatory N A String up to 20 lt user name gt user to be added characters and case sensitive password Indicates the password to be Optional password String up to 20 lt passwd gt assigned to the user to be characters and added case sensitive privilege Indicates the privilege level to Mandatory N A 1 15 privilege lt 1 10 gt be assigned to a user The user levels higher will be permitted to execute all than 10 are commands for which the available only privilege level is equal to or for root user lower than the value of this parameter Command Global configuration mode Modes 3 1 5 1 2 Deleting a User NOTE e Only users who have logged in as admin can execute this task To delete a user run the following command BreezeMAX Mini Centralized ASN GW Syst
96. 2 82 is enabled or disabled pt82 E DisableOpts2 Command Service group DHCP relay configuration mode Modes 3 3 9 10 4 4 2 Configuring the DHCP Relay Option 82 Parameters If Option 82 for the DHCP Relay is enabled run the following command to configure suboptions of option 82 of DHCP messages npu config srvcgrp dhcprelay Opt82 config Subopt1value Default MSID BSID NASID NASIP Full NAI Domain asciiMsID asciiBsID asciiBsMac AsciiFrStrng lt string 32 gt BinFrStrng lt string 32 gt Subopt2value Default MSID BSID NASID NASIP Full NAl Domain asciiMsID asciiBsID asciiBsMac AsciiFrStrng lt string 32 gt BinFrStrng lt string 32 gt Subopt6value Default MSID BSID NASID NASIP Full NAl Domain AsciiFrStrng lt string 32 gt BinFrStrng lt string 32 gt Subopt7value service type vendor specific session timeout EnableUnicast DisableUnicast oO NOTE E For DhcpRlOpt82SubOpt1BinFrstrng value enter hex string without spaces e E if Opt82Unicast is enabled then DHCP relay agent appends option 82 to all DHCP messages unicast l and broadcast E if Opt82Unicast is disabled default then DHCP relay agent appends option 82 only to broadcast DHCP request messages BreezeMAX Mini Centralized ASN GW System Manual Command Syntax Privilege Level Syntax Descriptio n Chapter 3 Operation and Administration Using the CLI Unit Configuration npu config srvcg
97. 2 3 3 SFA Page Classification Rules Tab This page is not applicable if Service Profiles Service Flows and Classification Rules are defined in the AAA Server Create the necessary Classification Rule s according to the relevant type of traffic and click Apply BreezeMAX Mini Centralized ASN GW System Manual OQ 20 Chapter 2 Commissioning Completing the Configuration Using AlvariSTAR 2 2 3 4 Service Profiles Configuration of Service Profiles is not applicable if Service Profiles Service Flows and Classification Rules are defined in the AAA Server Otherwise at least one Service Profile must be defined and associated with an already defined Service Group 1 Right click on the Service Profile node and select Create The New Service Profile window is displayed 2 Define the Name of the New Service Profile and click Apply 3 The new Service Profile added to the list of available Service Profiles in the navigation tree Select it to continue the configuration process 4 Click Add in the Service Flow area 5 Configure the applicable general parameters of the Service Flow 6 Configure the applicable QoS parameters of Service Flow for UL and DL for example for Data delivery type BE it will be Maximum Sustained Traffic Rate and Traffic Priority 7 Associate this Service Flow with previously created Classification Rule s 8 Change the Profile Status to Enable 9 Click Apply for the device to accept the configuration B
98. 2 3 CSMA CD Speed amp Data Port 10 100 1000 Mbps Full Duplex with Auto Negotiation Duplex Management Port 10 100 Mbps Half Full Duplex with Auto Negotiation Cascade Port 10 100 1000 Mbps Full Duplex with Auto Negotiation 1 4 2 Configuration and Management Table 1 2 Configuration and Management Item Description Out Of Band OOB Management Telnet via Management port SSH via Management port SNMP via Management port Telnet via Cascade port SSH via Cascade port SNMP via Cascade port Monitor port serial interface In Band IB Management via Data Port SNMP Telnet SSH SNMP Agents SNMP ver 2 client MIB Il RFC 1213 Private MIBs Software Upgrade Using TFTP Configuration Upload Download Using TFTP BreezeMAX Mini Centralized ASN GW System Manual Chapter 1 System Description Specifications 1 4 3 Standards Compliance General Table 1 3 Standards Compliance General Type Standard EMC E ETSI EN 301 489 1 4 E FCC Part 15 Safety E EN60950 1 E UL 60950 1 Lightning Protection EN61000 4 5 Environmental ETS 300 019 E Part 2 1 T 1 2 E Part 2 2 T 2 3 E Part 2 3 T 3 2 1 4 4 Environmental Table 1 4 Environmental Specifications Type Details Operating Temperature 5 C to 50 C Operating Humidity 5 95 BreezeMAX Mini Centralized ASN GW System Manual O Cha
99. 255 255 0 any 1t 1111 1 65535 gt for which the port number is 2 n 1 4 y n n n less than the value of this eaten wanes deny udp any host 1 1 1 1 parameter lt 1010 eq Indicates that TCP UDP traffic npu config ext nacl lt port numb is to be permitted or denied to permit tcp any 1 1 1 0 er the NPU interface source port 255 255 255 0 eq 8080 1 65535 gt for which the port number is npu config ext nacl equal to the value of this deny udp any host 1 1 1 1 parameter eq 4040 range Indicates that TCP UDP traffic npu config ext nacl lt port numb er 1 65535 gt lt port numb er 1 65535 gt is to be permitted or denied the NPU interface source port for which the port number is within the range specified by this parameter permit tcp host 1 1 1 1 host 1 1 1 0 255 255 255 0 range 1010 8080 npu config ext nacl deny udp host 1 1 1 1 any range 1010 4040 BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Command npu config ext nacl deny tcp any host lt src ip address gt Syntax lt src ip address gt lt src mask gt gt lt port number 1 65535 gt It lt port number 1 65535 gt eq lt port number 1 65535 gt range lt port number 1 65535 gt lt port number 1 65535 gt any host lt dest ip address gt lt dest ip address gt l
100. 3 Operation and Administration Using the CLI Unit Configuration EnableUnicast Disa Indicates whether the Unicast Optional Disable E Enable bleUnicast parameter is enabled or E Disable disabled Command Service group DHCP relay option 82 configuration mode Mode 3 3 9 10 4 4 3 Removing the DHCP Relay suboption values Run the following command to remove one several or all of the Suboption values configured by the user for DHCP Option 82 npu config srvcgrp dhcprelay opt82 no Subopt1 value Subopt2value Subopt6value Subopt7value Command _ npu config srvcgrp dhcprelay opt82 no Subopt1 value Subopt2value Subopt6value Subopt7 value Syntax Privilege 10 Level Syntax Descriptio Parameter Description Presence Default Possible Values Value no Subopt1value Indicates the removal status of Optional N A N A Subopt2value DHCP Option 82 suboptions Subopt6value suboptvalue If no suboption is specified the values of all suboptions will be removed Command Service group DHCP relay Option 82 configuration mode Mode 3 3 9 10 4 4 4Terminating the DHCP Relay Configuration Mode Run the following command to terminate the DHCP relay configuration mode for this service group npu config srvcgrp dhcprelay exit Command npu config srvegrp dhcprelay exit Syntax BreezeMAX Mini Centralized ASN GW System Manual oe Chapter 3 Operatio
101. 3 6 1 4 Terminating the QoS Class map Configuration Mode To terminate the QoS class map configuration mode run the following command npu config cmap exit Command npu config cmap exit Syntax BreezeMAX Mini Centralized ASN GW System Manual eo Chapter 3 Operation and Administration Using the CLI Unit Configuration Privilege 10 Level Command Qos class map configuration mode Modes 3 3 6 1 5 Deleting a QoS Class map Run the following command to delete an existing QoS class map npu config no class map lt class map number 1 65535 gt NOTE aie o An error may occur if you specify a class map number that does not exist or is not within the range 1 65535 Command npu config no class map lt class map number 1 65535 gt Syntax Privilege 10 Level Syntax Descriptio Parameter Description Presence Default Possible Values a Value lt class map num Indicates the identifier of the Mandatory N A ber 1 65535 gt QoS class map number to be 1 65535 deleted Command Global configuration mode Modes 3 3 6 1 6 Displaying Configuration Information for a Class map Run the following command to view the configuration information for a class map npu show class map lt class map num 1 65535 gt Specify the class map number if you want to view configuration information for a specific class map If you do not specify the class map number configuration
102. 3 9 11 3 5 Displaying Configuration Information for Service Profiles To display all or specific service profiles run the following command npu show srvc profile lt profile name gt Specify the profile name if you want to display configuration information for a particular service profile Do not specify a value for this parameter if you want to view configuration information for all service profile NOTE i nae o An error may occur if you provide an invalid service profile name Refer the syntax description for more information about the appropriate values and format for configuring this parameter Command npu show srvc profile lt profile name gt Syntax Privilege 1 Level BreezeMAX Mini Centralized ASN GW System Manual eo P55 Chapter 3 Operation and Administration Using the CLI Unit Configuration Syntax Deschiple Parameter Description Presence Default Possible Values n Value lt profile name Indicates the name of the Optional N A String gt service profile for which configuration information is to be displayed If you do not specify a value for this parameter configuration information is displayed for all service profiles BreezeMAX Mini Centralized ASN GW System Manual CQ Display Format Command Modes 3 3 9 11 3 6 Chapter 3 Operation and Administration Using the CLI Srvc Profile lt value gt status lt value gt flo
103. 5000000 gt traffic priority lt value O 7 gt min reserved rate lt value 0 5000000 gt max latency lt integer gt max jitter lt integer gt media type lt string 15 gt Privilege 10 Level Syntax Description Parameter Description Presence Default Possible Values Value BreezeMAX Mini Centralized ASN GW System Manual O Chapter 3 Operation and Administration Using the CLI Unit Configuration delivery type Denotes the data delivery type Optional 3 BE 0 4 or 255 for lt type O lt UGS gt for downlink traffic carried by ANY 1 lt RTVR gt the service flow used for 2 lt NRTVR gt 3 lt BE gt multicasts A lt ERTVR gt 255 lt ANY gt gt max sustained rate Denotes the maximum Optional 100000 0 5000000 bps lt value O 5000000 sustained traffic rate in bps gt for downlink traffic carried by the service flow used for multicasts Although available for all service flows not applicable for service flows with UGS uplink data delivery type traffic priority lt valu Denotes the traffic priority to Optional 0 0 7 where 0 is e 0 7 gt be applied to the downlink lowest and 7 is traffic carried by the service highest flow used for multicasts Although available for all service flows not applicable for service flows with UGS uplink data delivery type min reserved rate the minimum rate in bps Optional 100000 0 5000000 lt value 0 5000000 g
104. 65535 gt lt port number 1 65535 gt BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration Command npu config ext nacl no deny tcp any host lt src ip address gt Syntax lt src ip address gt lt src mask gt gt lt port number 1 65535 gt It for Deny lt port number 1 65535 gt eq lt port number 1 65535 gt range lt port number Rule 1 65535 gt lt port number 1 65535 gt any host lt dest ip address gt lt dest ip address gt lt dest mask gt gt lt port number 1 65535 gt It lt port number 1 65535 gt eq lt port number 1 65535 gt range lt port number 1 65535 gt lt deny number 1 65535 gt npu config ext nacl no deny udp any host lt src ip address gt lt src ip address gt lt src mask gt gt lt port number 1 65535 gt It lt port number 1 65535 gt eq lt port number 1 65535 gt range lt port number 1 65535 gt lt port number 1 65535 gt any host lt dest ip address gt lt dest ip address gt lt dest mask gt gt lt port number 1 65535 gt It lt port number 1 65535 gt eq lt port number 1 65535 gt range lt port number 1 65535 gt lt port number 1 65535 gt Privilege 10 Level Syntax PePcHpHon Parameter Description Presence Default Possible Values Value any host Indicates the source host for M
105. 86400 gt mtu lt framed mtu size 1020 2000 gt RadiusAtrbtTypeServiceProfileName lt AtrbtTypelId 1 255 gt alrmAaaSwitchoverRetryFailThrshld 1 250 gt talrmAaaSwitchoverRetryFailThrshld 1 250 gt vlan classf bit align msbShift lsb gt INFORMATION You can display configuration information for global RADIUS parameters For details refer to Section 3 3 9 9 2 3 NOTE An error may occur if you provide an invalid value for any of these parameters Refer the syntax e description for more information about the appropriate values and format for configuring these parameters Command Syntax Privilege Level Syntax Description npu config radius lt accessreq retries lt retransmissions gt accessreq interval lt timeout gt nasid lt nas identifier gt timezone offset lt time offset 0 86400 gt mtu lt framed mtu size 1020 2000 gt RadiusAtrbtTypeServiceProfileName lt AtrbtTypeId 1 255 gt vlan classf bit align msbShift 1lsb gt 10 Parameter Description Presence Default Possible Values Value accessreq ret Denotes the maximum Optional 3 0 5 ries number of times the AAA lt retransmissio client can resend the access ns gt request accessreq int Denotes the interval in Optional 500 10 100000 erval seconds after which the AAA lt timeout gt client can resend the access request BreezeMAX Mini Centralized ASN GW System Manual
106. ACL 196 can be created These automatically created deleted ACLs allow Ping and DHCP traffic on the DHCP Own IP Address interface of the applicable VLAN service Table 3 17 Rules of Default VLAN Service Interfaces ACL 187 196 Rule Action Source IP Source Destination IP Destination Protocol Address Port Address Port Permit Any Any DHCP Own IP Address Any ICMP 1 defined for the applicable Service Group Permit Any Any DHCP Own IP Address 67 68 used UDP 17 defined for the for DHCP applicable Service traffic Group NOTE The default pre configured and automatically created ACLs cannot be deleted and should not be modified 3 3 8 1 This section describes the commands for M Configuring an ACL in the Standard Extended Mode on page 116 M Deleting an ACL on page 141 M Attaching De attaching ACLs to from the NPU host Virtual Interface on page 142 M Displaying ACL Configuration Information on page 145 Configuring an ACL in the Standard Extended Mode You can configure an ACL in either of the following modes M Standard mode Use this mode if you want to create Permit or Deny rules for traffic based on source and destination IP addresses M Extended mode Use this mode if you want to create Permit or Deny rules based on source and destination IP addresses source and destination ports protocol To configure an ACL 1 Enable the standard or extended ACL configura
107. Bug fixes temporary patches and or workarounds may be supplied as Firmware updates Additional hardware if required to install or use Firmware updates must be purchased by the Customer Alvarion will be obligated to support solely the two 2 most recent Software major releases ALVARION SHALL NOT BE LIABLE UNDER THIS WARRANTY IF ITS TESTING AND EXAMINATION DISCLOSE THAT THE ALLEGED DEFECT IN THE PRODUCT DOES NOT EXIST OR WAS CAUSED BY PURCHASER S OR ANY THIRD PERSON S MISUSE NEGLIGENCE IMPROPER INSTALLATION OR IMPROPER TESTING UNAUTHORIZED ATTEMPTS TO REPAIR OR ANY OTHER CAUSE BEYOND THE RANGE OF THE INTENDED USE OR BY ACCIDENT FIRE LIGHTNING OR OTHER HAZARD Disclaimer BreezeMAX Mini Centralized ASN GW System Manual Legal Rights a The Software is sold on an AS IS basis Alvarion its affiliates or its licensors MAKE NO WARRANTIES WHATSOEVER WHETHER EXPRESS OR IMPLIED WITH RESPECT TO THE SOFTWARE AND THE ACCOMPANYING DOCUMENTATION ALVARION SPECIFICALLY DISCLAIMS ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE AND NON INFRINGEMENT WITH RESPECT TO THE SOFTWARE UNITS OF PRODUCT INCLUDING ALL THE SOFTWARE DELIVERED TO PURCHASER HEREUNDER ARE NOT FAULT TOLERANT AND ARE NOT DESIGNED MANUFACTURED OR INTENDED FOR USE OR RESALE IN APPLICATIONS WHERE THE FAILURE MALFUNCTION OR INACCURACY OF PRODUCTS CARRIES A RISK OF DEATH OR BODILY INJURY OR SEVERE PHYSICAL OR ENVIRONMENTAL DAMAGE
108. Command npu config hotlinig profile set profile enabled disabled Syntax Privilege 10 Level Syntax pesctipue Parameter Description Presence Default Possible Values i Value set profile enabled Defines whether the profile is Optional enabled E enabled disabled enabled or disabled E disabled Command hot lining profile configuration mode Modes BreezeMAX Mini Centralized ASN GW System Manual 3 3 9 13 2 3 Command Syntax Privilege Level Syntax Descriptio n Command Modes 3 3 9 13 2 4 Chapter 3 Operation and Administration Using the CLI Unit Configuration Configuring the HTTP Redirect URL for the Profile After enabling the hot lining profile configuration mode run the following command to configure the HTTP redirect address if required npu config hotlinig profile redirect address lt http redirect address gt npu config hotlinig profile redirect address lt http redirect address gt 10 Parameter Description Presence Default Possible Values Value redirect address The HTTP redirect URL to be Optional N A URL in ASCII lt http redirect addre used by uplink filter rules with string format ss gt redirect action see Section 3 3 9 13 2 4 Redirection location to be used in Http Redirection message hot lining profile configuration mode Configuring Hot Lining Filter Rules Up to 16 filter rules can be defined for each
109. Configuring the DHCP Server After enabling the service group operation mode for the DHCP server you can execute any of the following tasks E Configuring DHCP Server Parameters on page 202 M Restoring Configuration Parameters for the DHCP Server on page 206 M Configuring Exclude IP Addresses for the DHCP Server on page 206 M Deleting Exclude IP Addresses for the DHCP Server on page 207 INFORMATION Before executing these tasks ensure that you have enabled the DHCP server configuration mode For details refer to Enabling the Service Group Operation Mode for DHCP Server Proxy Relay on page 201 3 3 9 10 4 2 1 Configuring DHCP Server Parameters Run the following command to configure the DHCP server npu config srvcgrp dhcpserver config pool minaddr lt string gt pool maxaddr lt string gt pool subnet lt string gt dflt gwaddr lt string gt lease interval lt integer 24 4294967295 gt renew interval lt integer gt rebind interval lt integer gt dnssrvr addr lt string gt offerreuse holdtime lt integer gt opt60 lt string 30 gt opt43 Name lt string 64 gt Value lt string 64 gt Sname lt string 64 gt File lt string 128 gt dnssrvr addr2 lt string gt NOTE An error may occur if you provide an invalid value for any of these parameters Refer the syntax description for more information about the appropriate values and format for configuri
110. Default Gateway IP Address of an existing service interface cannot be changed The Subnet Mask of a service interface associated to a service group cannot be changed Command _ VLAN Service Interface configuration mode Modes 3 3 9 8 2 3 Configuring Parameter for QinQ Service Interface After enabling the QinQ Service Interface configuration mode run the following command to configure the QinQ service interface parameters This command shall configure one or more parameters of the QinQ Service Interface npu config srvcif QinQ config descr lt string gt vlan id lt size 1 4094 gt BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration NOTE An error may occur if you provide an invalid value for any of these parameters Refer to the syntax e description for more information about the appropriate values and format for configuring these ll parameters At least one parameter must be specified the value is optional The command npu config srvcif QinQ config will return an Incomplete Command error Command npu config srvcif QinQ config descr lt string gt vlan id lt size 1 4094 gt Syntax Privilege 10 Level Syntax Beschiption Parameter Description Presence Default Possible Values Value descr lt string gt A description of the service Optional null String up to 70 interface characters vlan
111. Deny rules for ICMP traffic from to specific a source and destination IP address subnet NOTE 7 i You cannot configure Permit or Deny rules for an ACL that is associated with a Qos marking rule You can either associate QoS marking rules or permit deny rules with an ACL 3 3 8 1 3 3 1 This section describes the commands to be used for HM Creating a Permit Deny Rule for ICMP Traffic Extended Mode on page 137 M Deleting a Permit Deny Rule for ICMP Traffic Extended Mode on page 140 Creating a Permit Deny Rule for ICMP Traffic Extended Mode Run the following commands to specify the Permit Deny rule for ICMP traffic from to a specific source destination IP address subnet npu config ext nacl permit icmp any host lt src ip address gt lt src ip address gt lt mask gt any host lt dest ip address gt lt dest ip address gt lt mask gt BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration npu config ext nacl deny icmp any host lt src ip address gt lt src ip address gt lt mask gt any host lt dest ip address gt lt dest ip address gt lt mask gt In the above commands it is mandatory to specify the source IP address for which the Permit Deny rule is to be created If you do not specify the destination IP address subnet mask by default traffic to all destination IP address
112. Ent ryMax The maximum number of times that the unit may handle a network entry request from an MS after prior attempts for that MS has already failed After the unit has handled max ntwentry number of attempts and its value is 0 the MS is assigned the unauthenticated mode 3 3 9 3 Managing the Data Path Function The Data Path function controls the creation maintenance and deletion of data paths within the NPU You can specify the throughput threshold parameter that is used to define the upper limit for the throughput that can be provided by the ASN GW Other data path function parameters are configurable only by the vendor This section describes the commands to be used for M Configuring the Parameter for the Data Path Function on page 151 M Restoring the Default Parameter for the Data Path Function on page 152 H Displaying Configuration Information for the Data Path Function on page 152 3 3 9 3 1 Configuring the Parameter for the Data Path Function To configure the parameter for the data path function run the following commana npu config datapath throughput threshold lt integer 1 500 gt NOTE An error may occur if you provide an invalid value for the throughput threshold parameter Refer to the e syntax description for more information about the appropriate values configuring this parameter ll The throughput threshold parameter must be specified the value is optional The command npu config
113. HH MM SS gt available fro DD MM YYYY LocalUTC Diff The local offset from UTC Optional 00 00 HH MM HH MM j HH 12 to 13 MM 00 or 30 DST lt 0 2 gt Daylight Saving Time offsetof Optional 0 0 2 the local clock Command Global configuration mode Modes 3 3 12 3 4 Configuring the Daylight Saving Parameters To configure the daylight saving parameters run the following command npu config set daylight saving mode Enable Disable start date lt DD MM gt stop date lt DD MM gt NOTE Q An error may occur if any of the configured value is not in a valid format Command npu config set daylight saving mode Enable Disable start date Syntax lt DD MM gt stop date lt DD MM gt Privilege 10 Level BreezeMAX Mini Centralized ASN GW System Manual 235 Chapter 3 Operation and Administration Using the CLI Unit Configuration Syntax Deschiple Parameter Description Presence Default Possible Values n Value mode Enable Enables disables the daylight Optional Disable E Enable Disable saving feature When enabled E Disable the feature will be activated using the parameters defined below start date Applicable only of Mode is set Optional 27 3 DD MM lt DD MM gt to Enable The date for starting DD day in the daylight saving feature At a month 1 31 the beginning of this date midnight the cl
114. HIGH RISK ACTIVITIES HIGH RISK ACTIVITIES MAY INCLUDE BUT ARE NOT LIMITED TO USE AS PART OF ON LINE CONTROL SYSTEMS IN HAZARDOUS ENVIRONMENTS REQUIRING FAIL SAFE PERFORMANCE SUCH AS IN THE OPERATION OF NUCLEAR FACILITIES AIRCRAFT NAVIGATION OR COMMUNICATION SYSTEMS AIR TRAFFIC CONTROL LIFE SUPPORT MACHINES WEAPONS SYSTEMS OR OTHER APPLICATIONS REPRESENTING A SIMILAR DEGREE OF POTENTIAL HAZARD ALVARION SPECIFICALLY DISCLAIMS ANY EXPRESS OR IMPLIED WARRANTY OF FITNESS FOR HIGH RISK ACTIVITIES b PURCHASER S SOLE REMEDY FOR BREACH OF THE EXPRESS WARRANTIES ABOVE SHALL BE REPLACEMENT OR REFUND OF THE PURCHASE PRICE AS SPECIFIED ABOVE AT ALVARION S OPTION TO THE FULLEST EXTENT ALLOWED BY LAW THE WARRANTIES AND REMEDIES SET FORTH IN THIS AGREEMENT ARE EXCLUSIVE AND IN LIEU OF ALL OTHER WARRANTIES OR CONDITIONS EXPRESS OR IMPLIED EITHER IN FACT OR BY OPERATION OF LAW STATUTORY OR OTHERWISE INCLUDING BUT NOT LIMITED TO WARRANTIES TERMS OR CONDITIONS OF MERCHANTABILITY FITNESS FOR A PARTICULAR PURPOSE SATISFACTORY QUALITY CORRESPONDENCE WITH DESCRIPTION NON INFRINGEMENT AND ACCURACY OF INFORMATION GENERATED ALL OF WHICH ARE EXPRESSLY DISCLAIMED ALVARION WARRANTIES HEREIN RUN ONLY TO PURCHASER AND ARE NOT EXTENDED TO ANY THIRD PARTIES ALVARION NEITHER ASSUMES NOR AUTHORIZES ANY OTHER PERSON TO ASSUME FOR IT ANY OTHER LIABILITY IN CONNECTION WITH THE SALE INSTALLATION MAINTENANCE OR USE OF ITS PRODUCTS Limitation of Liability
115. IF Specify the module for which you want to view the configured severity level If you do not specify the name of the module the log level configured for all modules is displayed npu config show log level StartupMgr SWDownload FaultMgr PerfMgr ShelfMgr SIGASN UserIF Parameter Description Presence Default Possible Values Value StartupMgr S Indicates the name of the Optional N A E StartupMgr WDownload Faul module for which you want to tMgr PerfMgr S view the configured severity E SWDownload helfMgr SIGASN level For more information E FaultMgr lUserIF about these parameters refer Table 3 23 E PerfMgr If you do not specify any value E ShelfMgr for this parameter the severity level is displayed for all E SIGASN modules E UserlF Module Name Log level lt Module Name gt lt Log Level gt Global configuration mode Disabling Module level Logging To disable logging for one or all system modules run the following command npu config no log level StartupMgr SWDownload FaultMgr PerfMgr ShelfMgr SIGASN UserIF Specify the name of the module if you want to disable logging for a specific module If you do not specify the module name logging is disabled for all modules BreezeMAX Mini Centralized ASN GW System Manual 20 Command Syntax Privilege Level Syntax Descriptio n Command Modes 3 3 11 Chapter 3 Operation and
116. If you do not provide the command name as the parameter all commands that can be executed in the current command mode are displayed 3 1 4 3 Using the History Feature The history feature of the CLI maintains a sequential list of all previously executed commands The following table lists the commands that you can run to access edit or execute a command from the command history list BreezeMAX Mini Centralized ASN GW System Manual 29 Chapter 3 Operation and Administration Using the CLI Using the Command Line Interface CLI Table 3 6 Commands for Using the History Feature Run the command To show history Obtain a list of previously executed commands up to 14 Execute the last command displayed in the list of previously executed commands I lt n gt Execute the nth command in the list of previously executed commands l lt string gt Execute the most recent command in the CLI history that starts with the string entered as the value for the st ring parameter 3 1 4 4 Using Miscellaneous Commands The following table lists other miscellaneous commands that you can execute in any mode using any privilege level Table 3 7 Miscellaneous Commands Enter the command To exit Exit the current configuration mode In global command mode this command will cause termination of the session clear screen Clear the screen 3 1 4 5 Privilege Level
117. Interface CLI 3 1 5 2 1 Assigning a Password for a Privilege Level NOTE Only users who have logged in as admin can execute this command To assign a password for a privilege level run the following command npu config enable password Level lt 1 15 gt lt LINE enable password gt For example run the following command to assign the password ten for privilege level 10 npu config enable password level 10 ten NOTE After you execute this command any user can use this password to enable the higher privilege level for which you have configured the password For more information about using passwords for enabling higher privilege levels refer Section 3 1 5 3 An error may occur if E You are trying to configure a password for a privilege level that is higher than your default privilege level admin user can configure password for privilege levels up to 10 M The password that you have specified is more than 20 characters Command npu config enable password Level lt 1 15 gt lt LINE enable password gt Syntax Privilege 10 Level Syntax Deactipue Parameter Description Presence Default Possible Values s Value lt 1 15 gt Indicates the privilege level for Optional 10 1 10 password which a password is to be cannot be enabled defined for privilege levels higher than 10 lt password gt Denotes the password to be Mandatory N A String up to 20 assigned for the
118. M Qos classification rules Classify packets into flows based on the IP address of the host interface transport protocol and the source port number of the application traffic A class map can be associated with each flow to define separate DSCP and or VLAN priority bits for QoS handling of each flow Extended ACL 199 is used for configuring QoS classification rules and associating each rule with a class map BreezeMAX Mini Centralized ASN GW System Manual OQ 95 Chapter 3 Operation and Administration Using the CLI Unit Configuration NOTE By default QoS marking rules are disabled You are required to enable a QoS marking rule before it is applied on host originating traffic matching the QoS classification rules 3 3 6 1 3 3 6 1 1 To configure QoS marking rules 1 Create one or more class maps refer to Section 3 3 6 1 2 Use extended ACL 199 to configure QoS classification rules and apply the appropriate class map for each classification rule refer to Section 3 3 6 2 3 Enable the QoS marking rule to classify packets based on the QoS classification criteria and apply the appropriate class map refer to Section 3 3 6 3 You can at any time display configuration information for a particular class map refer to Section 3 3 6 1 6 Managing Class maps A class map refers to the DSCP and or 802 1p VLAN priority bits to be applied on host originating traffic that match the criteria defined by the applicable Qo
119. MAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration VID Map Range parameters see Section 3 3 9 10 7 2 3 3 9 10 7 1 Configuring the Accounting Parameters of a VPWS Mapped Service Group run the following command to configure the accounting parameters for the service group npu config srvcgrp VPWS Mapped config acct none time acctInterimTmr lt integer 0 5 1600 gt INFORMATION You can display configuration information for the service group For details refer to Section 3 3 9 11 2 Command npu config srvcgrp VPWS Mapped config acct none time acctInterimTmr Syntax lt integer 0 5 1600 gt Privilege 10 Level BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Syntax Descriptio n Parameter Description Presence Default Possible Values Value acct The Accounting mode for the Optional time E none none time service interface E time none No accounting support time The ASN GW send RADIUS Accounting Start Stop Requests The ASN GW shall also send Interim Accounting requests to AAA server using RADIUS Accounting Interim messages on a preconfigured or negotiated interval AAA server can send negotiated time interval in Access Accept message If ASN GW defined value see acctInterimTmr below is zero and there is no Acct Interi
120. MAX Mini Centralized ASN GW System Manual OQ Display Format Command Modes 3 3 8 Chapter 3 Operation and Administration Using the CLI Unit Configuration lt IP address mask gt is directly connected lt IP address mask gt is directly connected lt IP address mask gt is directly connected lt IP address mask gt via lt Next hop IP address gt lt IP address mask gt via lt Next hop IP address gt lt IP address mask gt via lt Next hop IP address gt lt IP address mask gt via lt Next hop IP address gt lt IP address mask gt via lt Next hop IP address gt Global command mode Configuring ACLs ACLs are applied on traffic received from the physical interfaces DATA MGMT or CSCD ports and destined towards the NPU host virtual interface Several default ACLs are created automatically to allow some restricted traffic towards the unit These ACL rules are applied automatically at the time of unit startup or upon a change of IP address of various interfaces You can use the CLI to configure additional ACLs for permitting or denying specific traffic destined towards the unit You can create the following types of ACLs M Standard Allows you to filter traffic based on the source and destination IP addresses M Extended Allows you to filter traffic based on the source and destination IP addresses source and destination ports and protocol NOTE You can use extended ACL 199 to co
121. Manual eo 3 3 9 10 8 3 3 9 10 8 1 Chapter 3 Operation and Administration Using the CLI Unit Configuration Configuring the Parameters of a vplsHubAndSpoke Service Group After enabling the service group configuration mode for a vplsHubAndSpoke service group you can execute the following configuration options for the service group M Associating a Service Interface with the Service Group refer to Section 3 3 9 10 8 1 Mandatory when creating a new VPLS service group Configuring the Multicast Parameters of a VPLS Service Group refer to Section 3 3 9 10 8 2 Configuring the VLAN ID Parameter of a VPLS Service Group refer to Section 3 3 9 10 8 3 Configuring the Local Switching Parameter of a VPLS Service Group refer to Section 3 3 9 10 8 4 Configuring the Accounting Parameters of a VPLS Service Group refer to Section 3 3 9 10 8 5 Associating a Service Interface with the Service Group run the following command to associate a service interface with the service group npu config srvcgrp VPLS config srvcif alias lt string gt NOTE When creating a new VPLS service group the associated service interface must be configured Command npu config srvcgrp VPLS config srvcif alias lt string gt Syntax Privilege 10 Level Syntax Description Parameter Description Presence Default Possible Values Value BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter
122. N A 1 999999 lt 1 999999 gt gt Command Global configuration mode Modes 3 3 13 2 2 Displaying the Unique Identifier To display the unique identifier run the following commana npu show site identifier Command npu show site identifier Syntax Privilege 1 Level BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Display Site Id Format Command Global command mode Modes 3 3 13 3 Displaying the Vendor Identifier The Vendor Identifier used as a unique identifier of the equipment vendor can be configured only by the vendor To display the vendor identifier run the following command npu show vendor identifier Command npu show vendor identifier Syntax Privilege 1 Level Display Vendor Id Format Command Global command mode Modes BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Managing MS in ASN GW 3 4 Managing MS in ASN GW This section describes the MS level commands Manual MS De registration HM Displaying MS Information 3 4 1 Manual MS De registration Run the following command to initiate the de registration process of the MS with a specified NAI or MSID MAC address value all MSs served by a specific BS or all the MSs served by the unit npu config de reg ms nai lt nai string gt bs lt 1 to 16777215 Ste
123. NFORMATION An error may occur if j E You have specified an incorrect password Remember that all passwords are case sensitive E No password is configured for the privilege level you are trying to access Command npu enable lt 0 15 gt Enable Level Syntax BreezeMAX Mini Centralized ASN GW System Manual 37 Chapter 3 Operation and Administration Using the CLI Using the Command Line Interface CLI Privilege 0 Level Syntax Deachipsle Parameter Description Presence Default Possible Values n Value lt 0 15 gt Indicates the privilege level you Optional 10 0 15 want to enable Command Global configuration mode Modes INFORMATION oe a The command npu enable lt 0 15 gt can be used for switching to any privilege level either higher or lower than your current privilege level including privilege level 0 A password is required only for switching to a higher privilege level 3 1 5 3 2 Returning to the Default Privilege Level Run the following command to disable the current privilege level and return to your default privilege level npu disable lt 0 15 gt After you run this command you automatically return to your default privilege level You can display your current privilege level using the following command npu show privilege Command npu disable lt 0 15 gt Privilege level to go to Syntax Privilege 1 Level BreezeMAX Mini Centralized ASN GW System Manual
124. O 38 Chapter 3 Operation and Administration Using the CLI Using the Command Line Interface CLI Syntax pescnptio Parameter Description Presence Default Possible Values n Value lt 0 15 gt Indicates the privilege level you Optional 1 0 9 want to witch to Must be lower than your current privilege level Command Global command mode Modes INFORMATION The command npu disable lt 0 15 gt can be used also for switching to any privilege level lower than your current privilege level including privilege level 0 3 1 5 4 Displaying Active Users To display all active users run the following command npu show users Command npu show users Syntax Privilege 1 Level Display Line User Peer Address Format 0 con lt user name gt lt value gt Command Global command mode Syntax Possible values for Line entry are con console via the MON port tel telnet and ssh 3 1 5 5 Displaying All Users To display all users run the following commana BreezeMAX Mini Centralized ASN GW System Manual OQ 39 Command Syntax Privilege Level Display Format Command Syntax 3 1 5 6 Command Syntax Privilege Level Display Format Command Syntax 3 1 6 Chapter 3 Operation and Administration Using the CLI Using the Command Line Interface CLI npu listuser npu listuser User Mode User 1 lt value gt User 2 lt value gt User 3 lt value gt G
125. P VPWS QinoO VPWS Transparent VPWS Mapped vplsHubAndSpoke BreezeMAX Mini Centralized ASN GW System Manual Syntax Descriptio n Command Modes 3 3 9 10 2 Chapter 3 Operation and Administration Using the CLI Unit Configuration Parameter Description Presence Default Possible Values Value srvc grp Denotes the group alias of the Mandatory N A String 1 to 30 lt grp alias gt service group for which the characters service group configuration mode is to be enabled If you want to create a new service group specify the group alias to be assigned to the service group ServiceGrpTyp The Service group s type Optional IP E IP e IP E VPWS QinQ VPWS QinQ E VPWS Transpa VPWS Transpare rent nt E VPWS Mappe VPWS Mapped d lsHubAnds i ci aa E vplsHubAndSp oke Global configuration mode Configuring Common Parameters of an IP Service Group After enabling the service group configuration mode for an IP service group run the following command to configure common parameters for the service group npu config srvcgrp config srvcif alias lt service interface gt waitdhcp holdtime lt timeout gt dhcp ownaddr lt ipv4addr gt server proxy relay lt acct none time volumeTime gt lt ms loop enable disable gt acctInterimTmr lt integer 0 5 1600 gt This commands comprises 5 sub commands 1 npu config srvcgrp config srvc
126. P or 17 UDP For details on these parameters refer to Section 3 3 9 11 4 4 2 Command npu config clsfrule srcport port enable Syntax Privilege 10 Level Command L3 Classification rules source port configuration mode Modes 3 3 9 11 4 7 3 Disabling the Source Port Range Run the following command to disable the source port range that is currently enabled npu config clsfrule srcport no port enable NOTE To enable this source port range run the following command npu config clsfrule srcport port enable l For details refer to Enabling the Source Port Range on page 276 Command npu config clsfrule srcport no port enable Syntax Privilege 10 Level Command L3 Classification rules source port configuration mode Modes 3 3 9 11 4 7 4Terminating the Source Port Configuration Mode Run the following command to terminate the source port configuration mode npu config clsfrule srcport exit Command npu config clsfrule srcport exit Syntax BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration Privilege 10 Level Command L3 Classification rule source port configuration mode Modes 3 3 9 11 4 7 5 Deleting Source Ports Range Run the following command to delete the source ports range classifier npu config clsfrule no srcport lt start port gt lt end port gt NOTE An error may occur if you p
127. S classification rules Each class map is assigned a class identifier which you can use to reference a class map while associating it with the QoS classification rule To configure a class map 1 Enable the QoS class map configuration mode refer to Section 3 3 6 1 1 2 You can now Configure the 802 1p VLAN priority and or DSCP for this class map refer to Section 3 3 6 1 2 Delete the 802 1p VLAN priority and or DSCP for this QoS class map refer to Section 3 3 6 1 3 Terminate the QoS class map configuration mode refer to Section 3 3 6 1 4 You can at any time delete an existing class map refer to Section 3 3 6 1 5 or view the configuration information for an existing class map refer to Section 3 3 6 1 6 Se the QoS Class map Configuration Mode Creating a New Class ap To specify the 802 1p VLAN priority and or DSCP values for a class map first enable the QoS class map configuration mode Run the following command to enable the QoS class map configuration mode You can use this command to create a new QoS class map npu config class map lt class map number 1 65535 gt BreezeMAX Mini Centralized ASN GW System Manual 97 Chapter 3 Operation and Administration Using the CLI Unit Configuration If you run the above command to create a new QoS class map the configuration mode for this QoS class map is automatically enabled By default class maps 1 8 are pre configured Refer to Table 3
128. SN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration Syntax Bescpuon Parameter Description Presence Default Possible Values Value outer dscp Denotes the Differentiated Optional 0 0 63 lt integer 0 63 gt Service Code Point DSCP value to be used for marking the packets if the packet complies with the marking rules specified in Section 3 3 9 7 1 vlan priority Denotes the VLAN priority to Optional 0 0 7 where 7 is lt integer 0 7 gt be assigned to the packets if the highest the packet meets the requirements of the marking rules specified in Section 3 3 9 7 1 qos enable Indicates whether this QoS Optional By The marking rule should be default presence absenc enabled The absence of this the QoS e of this flag flag indicates that this QoS marking indicates that flag is disabled By default a rule is this QoS flag is bearer plane QoS marking disabled enabled disable rule is disabled d If you enable this QoS marking rule packets on bearer plane that were created using the parameters in Section 3 3 9 7 1 the Outer DSCP and VLAN Priority fields in the IP header and Ethernet header respectively are populated with the values you specify for the outer dscp and vlan priority parameters Command Bearer plane QoS marking rules configuration mode Modes BreezeMAX Mini Centralized ASN GW System Manual OQ
129. Service Tunnel Interface is this e of this flag enabled feature is indicates that disabled this feature is enabled disabled Command IP IP Service Interface configuration mode Modes 3 3 9 8 2 2 Configuring Parameters for VLAN Service Interface After enabling the VLAN Service Interface configuration mode run the following command to configure the VLAN service interface parameters This command shall configure one or more parameters of the VLAN Service Interface npu config srvcif vlan config descr lt string gt vlan id lt size 1 9 11 4094 gt dflt gw ip lt ipaddress gt lt mask gt NOTE An error may occur if you provide an invalid value for any of these parameters Refer to the syntax e description for more information about the appropriate values and format for configuring these parameters At least one parameter must be specified the value is optional The command npu config srvcif vlan config will return an Incomplete Command error Command Syntax Privilege Level npu config srvcif vlan config descr lt string gt vlan id lt size 1 9 11 4094 gt dflt gw ip lt ip address gt lt mask gt 10 BreezeMAX Mini Centralized ASN GW System Manual e 71 Chapter 3 Operation and Administration Using the CLI Unit Configuration Syntax Descupton Parameter Description Presence Default Possible Values Value descr lt string gt Aa description of the
130. Timeout on page 45 Enabling the Line Configuration Mode To enable the line configuration mode run the following command BreezeMAX Mini Centralized ASN GW System Manual a3 Chapter 3 Operation and Administration Using the CLI Using the Command Line Interface CLI npu config line console vty NOTE An error will occur if you select console when using Telnet SSH or vice versa In this case the following error message will be displayed l Cannot configure for other terminals After enabling the line configuration mode you can execute any of the following tasks HM Configuring the Session Timeout on page 44 M Restoring the Default Value of the Session Timeout on page 45 Command npu config line console vty Syntax Privilege 10 Level Syntax Descriptio Parameter Description Presence Default Possible Values n Value console vty The terminal running the Mandatory N A E console session to be managed E vty Select console if you are connected via the MON port Select vty if you are connected via Telnet SSH Command Global configuration mode Modes 3 1 7 2 2 Configuring the Session Timeout To configure the session timeout run the following command npu config line exec timeout lt integer 1 18000 gt NOTE pe e For Telnet SSH sessions the modified timeout is applicable only for the current session Whenever you start a new
131. To specify the severity level for each module for which logs are to be created run the following command npu config log level StartupMgr SWDownload FaultMgr PerfMgr ShelfMgr SIGASN UserIF ALERT ERROR INFO The parameters in this command correspond to the system modules procedures listed in the following table Table 3 23 Modules for which Logging can be Enabled Parameter Refers to StartupMgr System startup procedures SWDownload Software upgrade procedures FaultMgr Fault management procedures PerfMgr Performance management procedures ShelfMgr Shelf management procedures SIGASN WiMAX signaling protocols UserlIF User initiated procedures Specify the module name if you want to configure the severity level separately for this module If you do not specify the name of the module the severity level that you configure in this command is applied to all modules For example run the following command if you want logs to be created for WiMAX signaling protocols when the severity level is Error or higher npu config log level SIGASN ERROR BreezeMAX Mini Centralized ASN GW System Manual amp D Chapter 3 Operation and Administration Using the CLI Unit Configuration Or run the following command to set the severity level to Error for all modules npu config log level ERROR INFORMATION You can display the currently configured severity levels for
132. Upgrading the NPU Syntax Deactipue Parameter Description Presence Default Possible Values Value lt shadow image Denotes the name of the Mandatory N A lt Valid shadow name gt shadow image that is to be image downloaded to the NPU flash name gt tgz The name of this file should always be suffixed with tgz Command Global configuration mode Modes INFORMATION After you have triggered the download procedure you can at any time obtain information about the p download status For more details refer to Displaying the Download Status Information on page 361 A 2 1 3 Step 3 Resetting and Booting the NPU Using the Shadow Image After the shadow image is downloaded to the NPU flash run the following command to reboot the NPU with the downloaded shadow image npu config reboot from shadow lt shadow image name gt In the above command you can specify the shadow image name that is to be used for NPU reboot If you do not specify a value for the shadow image name parameter the shadow image that was last downloaded is used for rebooting the NPU Command npu config reboot from shadow lt shadow image name gt Syntax BreezeMAX Mini Centralized ASN GW System Manual Chapter A Software Upgrade Upgrading the NPU Syntax pescnpto Parameter Description Presence Default Possible Value j Value lt shadow image Denotes the name of the Opti
133. Value lt string gt The Service Interface alias of Mandatory N A String 1 to 30 the Service Interface for which characters you want to enable the configuration mode If you want to create a new Service Interface specify a new alias and define the type of service interface see below IP IP VLAN Q The Service Interface s type Optional IP IP E IP IP inQ VPLS_trunk E VLAN E QinQ E VPLS_trunk Command Global configuration mode Modes BreezeMAX Mini Centralized ASN GW System Manual O Chapter 3 Operation and Administration Using the CLI Unit Configuration 3 3 9 8 2 Configuring Service Interface Parameters This section describes the commands for Configuring Parameters for IP IP Service Interface on page 170 M Configuring Parameters for VLAN Service Interface on page 171 HM Configuring Parameters for VPLS_trunk Service Interface on page 175 3 3 9 8 2 1 Configuring Parameters for IP IP Service Interface After enabling the IP IP Service Interface configuration mode run the following command to configure the IP IP service interface parameters This command shall configure one or more parameters of the IP IP Service Interface npu config srvcif ipip config tunnel descr lt string gt srcaddr lt ip4addr gt dstaddr lt ipv4addr gt chksm NOTE An error may occur if you provide an invalid value for any of these parameters Refer to the syntax e description for more
134. Values local switching If set to enable uplink Optional enable E enable enable disable multicast frames will be E disable forwarded to both the Multicast port and the VPLS trunk port of the VPLS instance If set to disable multicast frames will be forwarded only to the VPLS trunk port BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Command VPLS Service group configuration mode Modes 3 3 9 10 8 5 Configuring the Accounting Parameters of a VPLS Service Group After enabling the service group configuration mode for a VPLS service group run the following command to configure the accounting parameters for the service group npu config srvcgrp VPLS config acct none time acctInterimTmr lt integer 0 5 1600 gt Command npu config srvcgrp VPLS config acct none time acctInterimTmr lt integer 0 5 1600 gt Syntax Privilege 10 Level Syntax Description Parameter Description Presence Default Possible Values Value acct none time The Accounting mode for the Optional time E none service interface E time none No accounting support time The ASN GW sends RADIUS Accounting Start Stop Requests The ASN GW also sends Interim Accounting requests to AAA server using RADIUS Accounting Interim messages on a preconfigured or negotiated interval AAA server can send negotiated time interval
135. a lt enable disable gt period lt integer 10 1000 gt rtx ent lt integer 1 10 gt rtx time lt integer 5000 10000 gt NOTE An error may occur if you provide an invalid value for any of these parameters Refer to the syntax e description for more information about the appropriate values and format for configuring these parameters An error may occur if you provide configuration values that do not satisfy following condition period 1000 gt rtx time rtx cnt 1 At least one parameter must be specified the value is optional The command npu config keep alive will return an Incomplete Command error Command Syntax Privilege Level npu config keep alive asn ka lt enable disable gt period lt integer 10 1000 gt rtx ent lt integer 1 10 gt rtx time lt integer 5000 10000 gt 10 BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration Syntax pescnptio Parameter Description Presence Default Possible Values n Value asn ka Enable Disable the ASN GW Optional disable E enable lt enable disabl keep alive mechanism E disable e gt period The period in seconds between Optional 60 10 1000 lt integer polling sessions 10 1000 gt l l period x 1000 value in milliseconds cannot be lower than rtx time x rtx cnt 1 rtx cnt Maximum number of retries if Opt
136. aces that are configured are displayed BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration Display Format Asn gateway Srvc Intf config IP IP Service Interface if alias lt string gt if descr lt string gt intf type IP IP tun src ip lt IP address gt tun dst ip lt IP address gt tun chksum lt Enable Disable gt Display Format Asn gateway Srvc Intf config VLAN Service Interface if alias lt string gt if descr lt string gt intf type VLAN if vlan id lt value gt if dflt gw ip lt value gt if dflt gw netmask lt value gt vlan mtu lt value gt Display Format Asn gateway Srvc Intf config QinQ Service Interface if alias lt value gt if descr lt value gt intf type QinQ if vlan id lt value gt Command Global command mode Modes 3 3 9 9 Configuring the AAA Client Functionality The AAA client functionality enables configuration of one RADIUS client The RADIUS client encapsulates the messages destined for the AAA server in RADIUS messages or decapsulates messages sent by the AAA server for the MS In addition you can also configure certain RADIUS parameters such as the NAS ID and the time zone offset that are applicable for all AAA clients In the current release a single AAA client is supported This section describes the commands for HM Managing AAA Client Configur
137. addr enable addr mask 255 255 0 0 npu config clsfrule srcaddr exit 3 3 9 11 4 5 1 Enabling the Source Address Configuration Mode Creating a New Source Address To configure the parameters for a source address first enable the source address configuration mode Run the following command to enable the source address configuration mode This command also creates the source address classifier npu config clsfrule srcaddr lt ipv4addr gt The configuration mode for the newly created source address is automatically enabled after which you can execute any of the following tasks M Configure the address mask refer to Section 3 3 9 11 4 5 2 HM Disable the source address refer to Section 3 3 9 11 4 5 3 After you have executed these tasks terminate the source address configuration mode to return to the service classification rule configuration mode refer to Section 3 3 9 11 4 5 4 NOTE An error may occur if you provide an invalid source IP address Refer the syntax description for more information about the appropriate value and format for configuring this parameter Command npu config clsfrule srcaddr lt ipv4addr gt Syntax Syntax Desciiple Parameter Description Presence Default Possible Values n Value lt ipv4addr gt Denotes the IPv4 address of the Mandatory N A Valid IP Address source address for which the configuration mode is to be enabled The source address configuration mode
138. address Command hotlining filter rule configuration mode Modes 3 3 9 13 2 4 3 Configuring Source Port Range Parameters for the Filter Rule After enabling the filter rule configuration mode run the following command to configure the source port parameters of the filter rule npu config hotlinig filter rule source port start lt port number 0 65535 gt stop lt port number 0 65535 gt If you do not configure source port parameters for the filter rule the default values will be used meaning that source port is ignored Command __ npu config hotlinig filter rule source port start lt port number 0 65535 gt stop Syntax lt port number 0 65535 gt Privilege 10 Level Syntax Descriptio Parameter Description Presence Default Possible Values n Value start The minimum value of source Optional 0 0 65535 lt port number 0 TCP UDP port range 65535 gt stop The maximum value of source Optional 65535 0 65535 lt port number 0 TCP UDP port range 6553 5 gt Command hotlining filter rule configuration mode Modes 3 3 9 13 2 4 4Configuring Destination Port Range Parameters for the Filter Rule After enabling the filter rule configuration mode run the following command to configure the destination port parameters of the filter rule BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration
139. address subnet for which ICMP Table 3 21 ss gt traffic is permitted denied lt dest ip addre ss gt lt mask gt Command Global command mode Modes 3 3 8 1 3 3 2 Deleting a Permit Deny Rule for ICMP Traffic Extended Mode Run the following commands to delete a Permit Deny rule for ICMP traffic from to a specific IP address subnet npu config ext nacl no permit icmp any host lt src ip address gt lt src ip address gt lt mask gt any host lt dest ip address gt lt dest ip address gt lt mask gt npu config ext nacl no deny icmp any host lt src ip address gt lt src ip address gt lt mask gt any host lt dest ip address gt lt dest ip address gt lt mask gt Command npu config ext nacl no permit icmp any host lt src ip address gt Syntax lt src ip address gt lt mask gt any host lt dest ip address gt lt dest ip address gt lt mask gt npu config ext nacl no deny icmp any host lt src ip address gt lt src ip address gt lt mask gt any host lt dest ip address gt lt dest ip address gt lt mask gt Privilege 10 Level Syntax Descripti za Pacupuo Parameter Description Presence Default Possible Values n Value any host Indicates the source IP Mandatory N A For details lt src ip addres address subnet for which the Table 3 21 s gt Permit Deny rule for incoming lt src ip addres CMP traffic is to
140. al Command Syntax Privilege Level Command Modes 3 3 2 2 3 3 2 2 1 Command Syntax Privilege Level Syntax Descriptio n Chapter 3 Operation and Administration Using the CLI npu show vlan mapping npu show vlan mapping Global command mode Managing the External Ether Type Unit Configuration The External Ether Type parameter defines the EtherType in outer VLAN header of uplink Q in Q traffic The External Ether Type parameter is not applicable if the device operates in Transparent Centralized ASN Topology mode This section includes MH Configuring the External Ether type HM Displaying the Ether Type Configuring the External Ether type To configure the Ether Type run the following command npu config config npuEtherType 8100 88A8 9100 9200 npu config config npuEtherType 8100 88A8 9100 9200 10 Parameter Description Presence Default Possible Values Value 8100 88A8 Indicates the type of Ether Mandatory 8100 E 8100 9100 9200 Type E 8848 E 9100 BreezeMAX Mini Centralized ASN GW System Manual E 9200 Chapter 3 Operation and Administration Using the CLI Unit Configuration Command Global configuration mode Modes 3 3 2 2 2 Displaying the Ether Type Run the following command to display the current Ether Type value npu show npuetherType Command npu show npuetherType Syntax Privilege 1 Level Display Ethe
141. al management interface For this execute the following procedure Refer Table 3 8 for more information about the IP interface to be configured for the connectivity mode you have selected a Run the following command to enable the interface connectivity mode for the external management interface npu config interface external mgmt b Run the following command to assign an IP address to this interface npu config if ip address lt ip address gt lt subnet mask gt 2 Connect the Ethernet cable to the DATA connector on the front panel of the unit Refer Table 3 8 for more information about the Ethernet port to be used for the connectivity mode you have selected 3 To enable exchange of packets create IP level connectivity between the remote machine and the external management interface Typically the DATA port should be connected to a switch port operating in trunk mode and the remote machine is connected to another port of the same switch that is configured to operate in access mode with the external management VLAN ID default is 12 4 From the remote terminal execute the following command to use Telnet SSH to access the IP address of the external management interface telnet lt ip address of external management interface gt ssh lt ip address of external management interface gt Refer to Managing Secure Shell SSH Parameters on page 40 for details on managing SSH parameter 5 At the prompt enter your login ID an
142. andatory N A For details refer lt src ip addres which the Permit Deny rule for Table 3 20 s gt incoming TCP UDP traffic is to lt src ip addres be deleted s gt lt src mask gt igt Indicates the source port for Optional 1 65535 For details refer lt port number which the Permit Deny rule for Table 3 20 1 65535 gt incoming TCP UDP traffic is to it be deleted lt port number 1 65535 gt eq lt port number 1 65535 gt range lt port number 1 65535 gt lt port number 1 65535 gt BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration any host Indicates the NPU IP Mandatory N A For details refer lt dest ip addre address subnet for which the Table 3 20 ss gt Permit Deny rule for TCP UDP lt dest ip addre traffic is to be deleted SS gt lt dest mask gt Ligt Indicates the NPU interface Optional 1 65535 For details refer lt port number port for which the Permit Deny Table 3 20 1 65535 gt rule for incoming TCP UDP lt traffic is to be deleted lt port number 1 65535 gt eq lt port number 1 65535 gt range lt port number 1 65535 gt lt port number 1 65535 gt Command Extended ACL configuration mode Modes 3 3 8 1 3 3 Configuring Permit Deny Rules for ICMP Traffic After you have created an ACL you can configure Permit
143. art vlan id Syntax lt size 1 4094 gt npu config srvcgrp VPWS Mapped config vid map range end vlan id lt size 1 4094 gt Privilege 10 Level BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration Syntax Descriptio n Parameter Description Presence Default Possible Values Value vid map range The start value of the range of Mandatory N A 1 4094 start vlan id VLAN IDs for mapping lt size 1 4094 gt ie None of the value within the range shall overlap with any instance of Service Interface VLAN ID any instance of Service Interface Outer VLAN ID with VLAN IDs of Bearer Local Management External Management and AU Maintenance interfaces and with any VID Map Range of other existing VPWS Mapped Service Group vid map range The start value of the range of Mandatory N A 1 4094 end vlan id VLAN IDs for mapping lt size 1 4094 gt Cannot be lower than vid map range start vlan id None of the value within the range shall overlap with any instance of Service Interface VLAN ID any instance of Service Interface Outer VLAN ID with VLAN IDs of Bearer Local Management External Management and AU Maintenance interfaces and with any VID Map Range of other existing VPWS Mapped Service Group Command _ VPWS Mapped Service group configuration mode Modes BreezeMAX Mini Centralized ASN GW System
144. articular physical interface run the following command npu show vlan port config port lt interface type gt lt interface id gt Do not specify the port number and type if you want to display configuration information for all physical interfaces BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration NOTE An error may occur if you specify an interface type or ID that does not exist Command npu show vlan port config port lt interface type gt lt interface id gt Syntax Privilege 1 Level Syntax Descriptio Parameter Description Presence Default Possible Values n Value lt interface type gt Indicates the type of physical Optional N A E fastethernet membership information is to be displayed lt interface id gt Indicates the ID of the Optional N A Fast Ethernet physical interface for which E o8 VLAN membership KONE information is to be Gigabit Ethernet displayed E 0 9 E 0 10 Display Vlan Port configuration table Format Port lt port number gt Port Vlan ID lt value gt Port Acceptable Frame Typ lt value gt Port Ingress Filtering lt Enabled Disabled gt Command Global command mode Modes 3 3 2 1 7 Displaying the VLAN Translation Entries Run the following command to display VLAN translation entries for the Data port BreezeMAX Mini Centralized ASN GW System Manu
145. at is connected via the DATA port when the system is operating in the in band connectivity mode or via MGMT port when the system is operating in the out of band connectivity mode E Bearer Used for enabling bearer IP domain connectivity When the Unified connectivity mode is selected the NMS server is also connected using bearer interface You can configure the IP address and MTU for bearer external management and local management interfaces You can also modify the VLAN ID for bearer and external management interfaces The following table lists the default VLAN IDs assigned to pre configured IP interfaces Table 3 9 Default VLAN IDs Interface Default VLAN ID Local management 9 Bearer 11 External management 12 In addition to the physical and IP interfaces the unit defines the NPU host virtual interface This interface is used only for applying Access Control Lists ACLs for filtering traffic destined towards the unit This section describes the commands for Configuring Physical Interfaces on page 55 Managing the External Ether Type on page 68 E E Configuring IP interfaces on page 69 M Configuring the Virtual Interface on page 76 E Displaying Status and Configuration Information for Physical IP and Virtual Interfaces on page 77 Configuring Physical Interfaces The unit contains three Ethernet interfaces on the front panel one Fast Ethernet interface MGMT port
146. ate self shutdown if an internal error has occurred NOTE Before shutting down the system it is recommended that you E Save the configuration file The last saved configuration is used for rebooting the system For more information about saving the current configuration refer to Section 3 3 3 1 E Periodically make a backup of log files on the flash if you have configured logs to be written to file This file does not store log messages after the system is reset or shut down For details refer to Section 3 3 10 1 5 To shut down the system run the following command npu npu shutdown A few seconds after you run this command the system is shut down CAUTION The system does not display any warning or request for verification it immediately shuts down after you execute this command To start up the system after shut down switch off disconnect and then switch on reconnect the 48V power supply Command npu npu shutdown Syntax Privilege 10 Level Command Global command mode Modes BreezeMAX Mini Centralized ASN GW System Manual as 3 2 2 3 2 2 1 Chapter 3 Operation and Administration Using the CLI Shutting Down Resetting the System Managing System Reset System reset refers to a complete shutdown and reboot of the system You can use the CLI to manually reset the system It is also possible that the system may be reset because of an internal or external error or after the unit is upgraded
147. ation on page 183 BreezeMAX Mini Centralized ASN GW System Manual 3 3 9 9 1 _ 3 3 9 9 1 1 Command Syntax Privilege Level Chapter 3 Operation and Administration Using the CLI Unit Configuration HM Managing Global RADIUS Configuration Parameters on page 188 Managing AAA Client Configuration To configure the AAA client 1 Enable the AAA client configuration mode refer to Section 3 3 9 9 1 1 2 You can now execute any of the following tasks Configure the AAA client parameters refer to Section 3 3 9 9 1 2 Restore the default configuration of the Alternate Server refer to Section 3 3 9 9 1 3 Switch between the Primary and Alternate Servers refer to Section 3 3 9 9 1 4 Terminate the AAA client configuration mode refer to Section 3 3 9 9 1 5 In addition you can at any time display the AAA client configuration information refer to Section 3 3 9 9 1 6 The AAA client cannot be deleted Enabling the AAA Client Configuration Mode To configure the AAA client parameters first enable the AAA client configuration mode Run the following command to enable the AAA client configuration mode npu config aaa client lt client alias gt The system is supplied with a pre configured AAA client with the following properties that cannot be modified client alias default src intf Bearer After enabling the AAA client configuration mode you can execute any of the following tasks HM Confi
148. ault Default MSID B Agent Remote ID of DHCP E MSID SID NASID NAS option 82 E BSID M PUNA Pori For AsciiFrStrng string enter PL PARRA up to 32 ae i Sn sciiBsID asciiBs p E NASIP Mac AsciiFrStrn For BinFrStrng string enter a E Full NAI g string of up to 32 hexadecimal E Domain lt string 32 gt Bi digits no l string 32 gt Bin igits no spaces E asciiMsID FrStrng 7 lt string 32 gt E asciiBsID E asciiBsMac E AsciiFrStrng string32 E BinFrStrng string32 Subopt6value Configures the suboption 6 Optional Not Set E Default Default MSID B Agent Subscriber ID of DHCP E MSID SID NASID NAS option 82 E BSID or bo For AsciiFrStrng string enter jl eau es up to 32 renee Bi lt string 32 gt Bin P i E NASIP FrStrng For BinFrStrng string enter a E Full NAI lt string 32 gt string of up to 32 hexadecimal E Domain digits no spaces 7 igi p E AsciiFrStrng string32 E BinFrStrng string32 Subopt7value Configures the suboption 7 of Optional service type vendor specific session timeout DHCP option 82 Allows enabling disabling the use of suboption 7 by specifying it In addition allows enabling disabling the following attributes by specifying attributes to be enabled if suboption 7 is enabled E service type attribute 6 E vendor specific attribute 26 E session timeout attribute 27 BreezeMAX Mini Centralized ASN GW System Manual Chapter
149. be deleted s gt lt mask gt BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration any host Indicates the destination IP Optional any For details lt dest ip addre address subnet for which the Table 3 21 ss gt Permit Deny rule for ICMP lt dest ip addre traffic is to be deleted ss gt lt mask gt Command Extended ACL configuration mode Modes 3 3 8 1 4 Terminating the ACL Configuration Mode To terminate the standard ACL configuration mode and return to the global configuration mode run the following command npu config std nacl exit To exit the extended ACL configuration mode and return to the global configuration mode run the following command npu config ext nacl exit Command npu config std nacl exit Syntax npu config ext nacl exit Privilege 10 Level Command _ Standard Extended ACL configuration mode Modes 3 3 8 2 Deleting an ACL gt To delete an ACL 1 Check if the ACL is attached to the NPU host virtual interface For more information about this command refer Section 3 3 8 4 2 Enable the NPU host virtual interface configuration mode and de attach the ACL For details refer Section 3 3 8 3 3 Terminate the interface configuration mode to return to the global configuration mode refer Section 3 3 8 3 4 BreezeMAX Mini Centralized ASN GW
150. be discovered by AlvariSTAR Since the Site Identifier is used by AlvariSTAR to identify the device it is highly recommended not to modify it If necessary you must follow the Site Number Change process described in the AlvariSTAR Device Manager User Manual This section describes the commands used for Configuring the Unique Identifier on page 340 Displaying the Unique Identifier on page 341 Configuring the Unique Identifier To configure a unique identifier run the following command npu config site identifier lt site id lt 1 999999 gt gt BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration NOTE You must save the configuration run the command npu write for a change in site identifier to take e effect after next reset ll Since the site identifier Site Number is used by AlvariSTAR management system to identify the device it is highly recommended not to modify it If necessary you must follow the Site Number Change process described in the Device Driver Manual INFORMATION To display the shelf identifier refer to Displaying the Unique Identifier on page 341 Command npu config site identifier lt site id lt 1 999999 gt gt Syntax Privilege 10 Level Syntax Deaciipue Parameter Description Presence Default Possible Values j Value lt site id Indicates the ID of the unit Mandatory
151. bility with both SSH version 1 and SSH version 2 cipher The encryption algorithm used Optional des cbc E des cbc des cbc by the SSH protocol E 3des cbc 3des cbc DES CCBC or 3DES CBC auth The authentication mechanism OPtional hmac sha Ml hmac md5 hmac md5 used by the SSH protocol 1 E hmac sha1 hmac sha1 HMAC MD5 or HMAC SHA1 Command Global configuration mode Modes BreezeMAX Mini Centralized ASN GW System Manual 3 1 6 2 Command Syntax Privilege Level Command Modes 3 1 6 3 Command Syntax Privilege Level Display Format Command Modes 3 1 7 Chapter 3 Operation and Administration Using the CLI Using the Command Line Interface CLI Restoring the Default Values of SSH Parameters To restore the default value of one or more SSH parameters run the following command npu config no ip ssh version compatibility cipher des cbc 3des cbc auth hmac md5 hmac shal To restore the default values of all SSH parameters run the following command npu config no ip ssh npu config no ip ssh version compatibility cipher des cbc 3des cbc auth hmac md5 hmac sha1 10 Global configuration mode Displaying the SSH Parameters To display the current configuration of the SSH parameters run the following command npu show ip ssh npu show ip ssh Version lt value gt Cipher Algorithm lt value gt Authentication lt value g
152. both R3 and R6 traffic and the translated VLAN ID will be used for both R3 and R6 traffic Before starting VLAN translation first enable VLAN translation and then create one or more VLAN translation entries This section describes the commands for M Enabling Disabling VLAN Translation on page 63 HM Creating a VLAN Translation Entry on page 63 HM Deleting a VLAN Translation Entry on page 64 BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration 3 3 2 1 3 1 Enabling Disabling VLAN Translation By default VLAN translation is disabled Run the following command to enable disable VLAN translation on the DATA gigabitethernet 0 10 interface npu config if vlan mapping enable disable ya An error may occur when you run this command For an interface other than the DATA port 0 10 Command npu config if vlan mapping enable disable Syntax Privilege 10 Level Syntax Descriptio Parameter Description Presence Default Possible Values a Value enable disabl Indicates whether VLAN Mandatory disable E enable e translation should be enabled E disable or disabled for this interface Command Interface configuration mode Modes 3 3 2 1 3 2 Creating a VLAN Translation Entry A VLAN translation entry contains a mapping between the original and translated VLANs To create a VLAN translation entry run the follo
153. cates the transport Mandatory N A E tcp protocol E udp srcport lt short Indicates the source port Mandatory N A 1 65535 gt number of the application traffic for which this QoS 1 65535 classification rule is to be deleted qosclassifier Indicates the identifier of the Mandatory N A lt class map num QoS class map associated with ber 1 65535 gt the classification rule to be 1 65535 deleted For more information about class maps refer Section 3 3 6 1 Command Extended ACL configuration mode Modes 3 3 6 2 4 Terminating the ACL Configuration Mode To terminate the ACL configuration mode run the following command npu config ext nacl exit BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Command npu config ext nacl exit Syntax Privilege 10 Level Command Extended ACL configuration mode Modes 3 3 6 3 Enabling Disabling QoS Marking for ACL 199 You can enable disable the QoS marking for the ACL The class map is applied on traffic matching a QoS classification rule only after you enable the QoS marking for the ACL INFORMATION _ If you want to modify a QoS class map first disable the QoS marking rules for the associated ACL By p default QoS marking is disabled for the ACL Run the following command to enable disable the QoS marking for the specified ACL npu config set qos enable disable 199 Command npu con
154. cceecsstensdenneesecntemesencceeseseenwenereseunenetes 11 1 4 3 Standards Compliance General sisciccesacesiecteeerstestees este dacenteiee arses 12 L44 SENViIFOnMeOntall seoa e avedadeued ee ia caveuasiueditadtavesasivedeeetiavdvadinaten 12 1 4 5 Mechanical and El ctrical ccccceccesssececceeceeceecueceeseeeaeseeceusaeeeeceenaeseesaesarseesansaes 13 Chapter 2 lt COMMISSIONING risaie iE E aE E 14 2 1 Initial Unit Configuration iecccesiscupoteesccelinte eccededlenieniosteastendenmnedcedduturnetieedccsenenicen 15 2 1 1 Imtrodu ctiOn soeren a aaa a aa aaa addaa 15 2 1 2 Clearing Previous Configuration s sssesssssssssesunnnenrnnnunnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnn 15 21 37 Site COIS EVI ercsi a aa aE RE 15 2 1 4 Static Route DefiN tO Meccan a N 17 2 1 5 SNMP Manager and Trap Manager Definition cccceeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee 17 2 1 60 Site lD Definition erasaten aTa AKANE 18 2 1 7 Saving the Configuratio a a 18 2 2 Completing the Configuration Using AlvariSTAR cceceeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeees 18 2 2 1 Connectivity Config ra tiOn 5 sisi centasadanatcmaninapdeacuieamantadeenctaraananmpnganieevantanenatenceenian 18 2 22 Equipment Configuration GPS sssressssisnisn saa a N 19 2 2 3 ASNGW Configuratio siii keiskis ini a aaa aE aa na ak osaa 19 BreezeMAX Mini Centralized ASN GW System Manual amp amp Contents Chapter 3 Operation and Administration Using the CLI c
155. ccept opt60 Configures option 60 Optional Null String up to 30 TA B characters string 30 gt The Vendor Class Identifier i VCI indicating the type of hardware firmware used by relevant CPEs An empty string null means that DHCP Option 60 is disabled If the value is other than null the value configured in the CPE must match this value for proper allocation of IP parameters BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration opt43 Name Configures option 43 Name Optional InternetG String up to 64 lt string 64 gt atewayD characters evice Ma nagemen tServer U RL Value Configures option 43 Value Optional empty String up to 64 lt string 64 gt string characters Sname Configures the proxy host Optional empty String up to 64 lt string 64 gt name This parameter is string characters sent in dhcp offer dhcp ack messages and may be used by certain CPEs File Configures the boot file Optional empty String up to lt string 128 gt name This parameter is string 128 characters sent in dhcp offer dhcp ack messages and may be used by certain CPEs dnssrvr addr2 IP Address of the second Optional 0 0 0 0 Valid IP address lt string gt DNS Server to be none provisioned to MS from this Group In the Proxy mode this value is used if appropriat
156. ceeeeeeeeeeeeeeneneeeesenesenanseeeneneeenneneeenes 89 33 5 COT UII the OP ase sca nrcasta ee n T 91 3 3 6 Configuring QoS Marking Rules cscs sce cescdecccecexesixecdeances mds stentencricidiedemmnmendecees 96 33 7 Config ring Static ROUTES sepsis ds wnccsstrcncssnmcnaciesdeaunsasnnssaneneshisanccusteae macndaaanenaeenes 110 33 8 ENTICING sc clea etincteareslan eaa aaa a aA 114 3 3 9 Configuring the ASN GW Functionality s ssssssssssssnsnunnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnne 147 3 23 10 Configuring LOS RING essa E E ANNA 308 3 3 11 Configuring Performance Data Collection s sessssssssssrnrsrnrensunrnnnnnnnnnnnnnnnnnnnnne 321 3 3 12 Configuring the SNMP Trap Managel ccccceeeeeeeeeeeeeeeeeeeeeaeeaeeaaeeeeneeeeeeeeeeees 324 3 3 13 Managing General Unit Parameters c cccceceeeeeeeeeeeeeeeeeeeeeeeeeeeeeseeesseaeeesanaees 338 3 4 Managing MS in ASN GW iecciccicsececescncncns sepnacueerenanexenccenemesnectweseeecaveareeieenecneacuene 343 3 4 1 Manual MS De registration s ss ssssssssssrnsrsunnnerunrnnnnnrrunnnnnnnnennnnnnnnnnnnnnnnnnnnnnnnnne 343 3 4 2 Displaying MS INPONMaHON ssctcctetecciccssecccsrantclencharidenteteiueenamniaiectaedntaaendeiicds 344 3 5 Monitoring Hardware and Software Performance 0 cccceeeeeeeeeeeeeeeeeeeeeeeeeeeeeees 347 3 5 1 Monitoring Hardware COMPONeNs cceccceeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeaeeeeeeeeesenes 347 3 5 2 Displaying System Files srisrissecses sean nay E 351 BreezeMAX Mini Ce
157. ceived via MSID specific port 1 The ASN GW shall identify the VPLS instance which is bound with this port 2 The ASN GW shall create update the MAC address entry by associating the value of Source MAC address of the frame with the ingress port i e all the DL Service Flows of that MSID that are associated with this VPLS instance The ASN GW shall reset the aging timer of the entry each new MAC address entry shall exist until the entry specific aging timer expires The initial value for aging timeout is globally pre configured in ASN GW If the aging timeout O then the aging mechanism will be disabled 3 The ASN GW shall validate the value of the Local Switching parameter of the related VPLS Service Group If VPLS Local Switching Enable then the following steps will take place a If the value of Destination MAC address has the multicast bit set the ASN GW shall create two copies of the frame and forward one copy to the Multicast port of the VPLS instance and the other copy to the VPLS trunk of the VPLS instance The ASN GW shall perform egress VLAN ID translation if required see Table 3 22 Otherwise i e if Destination MAC is a unicast address the ASN GW shall proceed to the next step BreezeMAX Mini Centralized ASN GW System Manual OQ 233 Chapter 3 Operation and Administration Using the CLI Unit Configuration b The ASN GW shall check whether the Destination MAC address of the received frame appears in the MAC address
158. ch the NPU waits for a response to the context request If the NPU does not receive a response to this request within the period specified by this timer the NPU retransmits this request ctxtfnCounterContextReqMax The maximum number of times the NPU will retransmit a context request ctxtfnTimerContextRprt The period in milliseconds for which the NPU waits for the context report acknowledgement At the end of this period the NPU retransmits the context report ctxtfnCOUNTerContextRprtMax The maximum number of times the NPU retransmits the context report 3 3 9 5 Managing the MS State Change Functionality The MS state change functionality manages MS states within an MS context BreezeMAX Mini Centralized ASN GW System Manual eo Chapter 3 Operation and Administration Using the CLI Unit Configuration MS State Change parameters can be configured only by the vendor To display configuration information for the MS state change functionality run the following command npu show msscfn Command npu show msscfn Syntax Privilege 1 Level Display MS State Change Function Configuration Format a msscfnTimerMsscRsp lt value gt msscfnCounterMsscRspMax lt value gt msscfnTimerSbcHold lt value gt msscfnTimerRegHold lt value gt msscfnTimerMsscDrctvReq lt value gt msscfnCounterMsscDrctvReqMax lt value gt Command Global command mode Modes The following table
159. ch the rule E pass redirect is applicable only if E redirect direction is uplink If set to redirect then redirect address see Section 3 3 9 13 2 3 must be defined Command hot lining profile configuration mode Modes 3 3 9 13 2 4 2 Configuring IP Address Parameters for the Filter Rule After enabling the filter rule configuration mode run the following command to configure the IP address parameters of the filter rule npu config hotlinig filter rule ip address lt ipV4Addr gt lt netMask gt If you do not configure IP address parameters for the filter rule the default IP address 0 0 0 0 and subnet mask 0 0 0 0 will be used meaning that IP address is ignored Command ___ npu config hotlinig filter rule ip address lt ipV4Addr gt lt netMask gt Syntax Privilege 10 Level Syntax pescriptc Parameter Description Presence Default Possible Values n Value lt ipV4Addr gt If direction is downlink then Optional 255 255 ip address this is the downlink Source IP 255 255 Address If direction is uplink then this is the uplink Destination IP Address 255 255 255 255 means not applicable ignore this condition BreezeMAX Mini Centralized ASN GW System Manual e 297 Chapter 3 Operation and Administration Using the CLI Unit Configuration lt netMask gt Defines Subnet Mask Optional 255 255 subnet mask associated with the configured 255 255 IP
160. command to view the operational shadow and running versions of the NPU software npu show software version npu INFORMATION The operational version is the default software version that is used for rebooting the NPU after system reset The shadow version is the downloaded software version that you can use to boot up the NPU However it is the operational software version that is used to boot up the NPU after the next system reset The running version is the software version can be either the operational or shadow version that is currently running on the system Command npu show software version npu Syntax Display Mananged Object NPU Format Operational Version lt Operational Version gt Shadow Version lt Shadow Version gt Running Version lt Running Version gt Command Global command mode Modes A 2 3 Displaying the TFTP Configuration Information You can at any time during or after the download procedure run the following command to view the configuration information about the TFTP server that is used for the NPU software upgrade npu show software version server NOTE An error may occur if configuration information is requested for a TFTP server that is not configured For more information about configuring the TFTP server to be used for software download refer to Step 1 Configuring the TFTP Server on page 356 Command Syntax npu show software version server BreezeMAX Mini Centralized ASN GW S
161. configuration is used during system startup Unsaved configuration is lost after system reset shutdown For more information about shutting down resetting the system refer to Section 3 2 Command npu write Syntax Privilege 10 Level Command Global command mode Mode 3 3 3 2 Downloading a Configuration File Vendor Startup File from an External Server NOTE Before downloading a file from an external server you are required to configure the IP interfaces e external management bearer and local management For more information about configuring IP interfaces refer the section Configuring Static Routes on page 110 You can download a file from an external server and use this file for booting up the unit After downloading this file reset the system The system boots up with the downloaded configuration In addition to the regular Operator configuration file typically a backup file previously uploaded from either the same or another unit this command can also be used to download a Vendor Startup file supplied by the vendor that contains parameters that can be configured only by the vendor The default name of the Vendor Startup file is vendor_startup xml gz NOTE As soon as the system boots up with the downloaded configuration the downloaded configuration file is deleted from the flash The system continues to operate using the downloaded configuration until the next system reset After the system is reset
162. configuration mode Modes 3 3 2 1 3 3 Deleting a VLAN Translation Entry To delete an existing VLAN translation entry run the following command npu config if no vlan mapping all lt integer 9 11 100 110 4094 gt lt integer 9 11 100 110 4094 gt Specify a11 if you want to delete all the VLAN translation mapping entries Specify the VLAN identifiers of the translation entry if you want to delete a specific VLAN entry NOTE An error may occur if E The VLAN ID or mapping that you have specified is not within the allowed range or it does not exist E You are trying to delete a VLAN translation entry for a VLAN that is not a member of this physical interface BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Command npu config if no vlan mapping all lt integer 9 11 100 110 4094 gt Syntax lt integer 9 11 100 110 4094 gt Privilege 10 Level Syntax Descriptio Parameter Description Presence Default Possible Values a Value all Indicates the VLAN Mandatory N A E all Indicates that all lt integer 9 11 100 1 translation entry to VLAN translation 10 4094 gt be deleted entries are to be lt integer 9 11 100 1 deleted 10 4094 gt lt integer 9 11 100 11 0 4094 gt lt integer 9 11 100 1 10 4094 gt Indicates the original and translated VLAN IDs for the translation entry to be deleted Comma
163. configured the TFTP server you can at any time view the TFTP server configuration _ information For more details refer to Displaying the TFTP Configuration Information on page 360 A 2 1 2 Step 2 Triggering Software Download After the TFTP server is configured run the following command to trigger the download of the shadow image to be used for software upgrade npu config load to shadow lt shadow image name gt After you execute this command the shadow image is downloaded to the NPU flash and the shadow image that is currently residing in the flash is overwritten NOTE An error may occur if you execute this command when Q E Another software download is already in progress E The shadow image to be downloaded is already residing in the NPU flash as the shadow or operational image E The TFTP server is not configured For more information about configuring the TFTP server refer to Step 1 Configuring the TFTP Server on page 356 E The name of the shadow image to be downloaded is incorrect or the format of the file name is incorrect Because the file to be downloaded is a compressed file always be suffix the file name with tgz M The NPU is running with the shadow image The system does not have enough memory available for software download Command Syntax npu config load to shadow lt shadow image name gt BreezeMAX Mini Centralized ASN GW System Manual eo 57 Chapter A Software Upgrade
164. cular shadow image It is mandatory to specify a value for the shadow image name parameter otherwise an error is raised by the system The value of this parameter is not a discrete value you are required to specify a value for this parameter Indicates the OR conditional npu config pm group enable npu operator that is used between two R6InterfaceTotal or more parameters The presence R6InterfaceBs ProvisionedQoOs of this parameter indicates that R3Interface InitialNe only one of the parameters ServiceFlow separated by the conditional P Pe This command is used to specify the group parameter should be specified in hecommana for which performance data collection and l storage is to be enabled The conditional operator indicates that only one parameter should be specified INFORMATION A In this document all discrete values are specified in boldface and all user defined values are not bold 3 1 4 Using the CLI To help you use the CLI this section provides information about M Using Control Characters on page 28 M Using the CLI Help on page 29 M Using the History Feature on page 29 M Using Miscellaneous Commands on page 30 M Privilege Levels on page 30 3 1 4 1 Using Control Characters Control characters refer to special characters that you can use to recall or modify previously executed commands The following table lists the control characters to be used for executing commands on
165. d applications Application Packets discarded lt Application gt lt Number of Packets Discarded gt Global command mode Displaying System Files The following system files reside in the TFTP boot directory of the NPU E Performance data files Contain performance counters for system modules For more information about the modules for which you can configure collection and storage of performance data refer Section 3 3 11 These files are available in the path tftpboot management performance M System log Contain log messages For more information about configuring logging refer Section These files are available in the path tftpboot management system_logs M User history files Contain information about the commands tasks executed by the user These files are available in the path tftpboot management user_log In addition Collected System Logs files with complete status and configuration details may also be available for details refer to Creating a Collected System Logs File on page 316 To display a list of performance data system log active alarms or user history files run the following command npu show saved Performance Active alarm Log User history files recent lt 1 65535 gt For example if you want to view the 30 most recently saved log files residing in the TFTP boot directory of the NPU run the following command npu show saved Log files recent 30 BreezeMAX Mini Central
166. d password INFORMATION The default login ID and password for administrator privileges are Login ID admin g i Password admin123 BreezeMAX Mini Centralized ASN GW System Manual O 25 Chapter 3 Operation and Administration Using the CLI Using the Command Line Interface CLI After you provide your login information the following command prompt is displayed npu This is the global command mode For more information about different command modes refer to Section 3 1 2 3 1 2 Command Modes The CLI provides a number of command modes some of which are listed in the following table for executing different types of commands Table 3 2 CLI Command Modes such as show commands and some general unit management commands Mode Used for Command Prompt Global configuration mode Executing configuration npu config commands Global command mode Executing all other commands npu Interface configuration mode Executing all commands for configuring physical and IP interfaces npu config if Standard extended ACL mode Executing commands for configuring standard and extended ACLs npu config std nacl npu config ext nacl The following table lists the commands to be executed for entering exiting a particular command mode Table 3 3 Commands to Enter Exit a Command Mode To Run the Command The Command Mode is Now Enter th
167. d to terminate the DHCP server configuration mode npu config srvcgrp dhcpserver exit Command npu config srvcgrp dhepserver exit Syntax Privilege 10 Level Command Service group DHCP server configuration mode Modes BreezeMAX Mini Centralized ASN GW System Manual amp Chapter 3 Operation and Administration Using the CLI Unit Configuration 3 3 9 10 4 3 Configuring the DHCP Proxy After enabling the service group operation mode for the DHCP proxy you can execute the following tasks M Specifying DHCP Proxy Configuration Parameters on page 209 M Restoring the Default Configuration Parameters for the DHCP Proxy on page 212 E Terminating the DHCP Proxy Configuration Mode on page 213 3 3 9 10 4 3 1 Specifying DHCP Proxy Configuration Parameters Run the following command to configure the DHCP proxy npu config srvcgrp dhcpproxy config offerreuse holdtime lt integer gt lease interval lt integer gt dnssrvr addr lt string gt pool subnet lt string gt dflt gwaddr lt string gt renew interval lt integer gt rebind interval lt integer gt opt60 lt string 30 gt opt43 Name lt string 64 gt Value lt string 64 gt Sname lt string 64 gt File lt string 128 gt dnssrvr addr2 lt string gt NOTE An error may occur if you provide an invalid value for any of these parameters Refer the syntax description for more information about the appropriate value
168. default and ext_default Command npu config no bearerqos lt qos alias gt Syntax Privilege 10 Level Syntax Description Parameter Description Presence Default Possible Values Value lt qos alias gt Denotes the QoS alias of the Optional N A String bearer QoS marking rule that you want to delete Specify a value for this parameter if you want to delete a specific bearer QoS marking rule Do not specify a value for this parameter if you want to delete all bearer QoS marking rules except int_default and ext_default Command Global configuration mode Modes 3 3 9 7 6 pn sia Configuration Information for the Bearer Plane QoS Marking ules To display configuration information for specific or all bearer plane QoS marking rules run the following command npu show bearergos lt qos alias gt Specify the QoS alias if you want to display configuration information for a particular bearer plane QoS marking rule Do not specify a value for this parameter if you want to view configuration information for all bearer plane QoS marking rules BreezeMAX Mini Centralized ASN GW System Manual QO Chapter 3 Operation and Administration Using the CLI Unit Configuration Command npu show bearergos lt qos alias gt Syntax Privilege 1 Level Syntax Pesciption Parameter Description Presence Default Possible Values Value lt qos alias gt Denotes the QoS alias
169. deleted after system reset For more information about making backups of log files on the flash refer to Section 3 3 10 1 5 To enable system level logging run the following command npu config log destination file server lt IP address gt NOTE It is highly recommended to manage the Log Server s IP address via AlvariSTAR AlvariCRAFT The management system supports automatic creation of IP routes for the Log Server provided proper configuration procedure is being followed INFORMATION After you execute this command logging is enabled for the entire system You may also configure logging separately for each system module For details refer to Section 3 3 10 2 NOTE An error may occur if E Logging is already enabled for the requested destination file or server E Logging is enabled to a server with a different IP address Because logging can be enabled to only one external server you can specify another server IP address after you disable logging to the existing server IP address For more information about disabling logging to server refer Disabling Logging to File or Server on page 311 E An internal error has occurred You have specified the IP address in an invalid format Specify the IP address in the format XXX XXX XXX XXX BreezeMAX Mini Centralized ASN GW System Manual amp D Chapter 3 Operation and Administration Using the CLI Unit Configuration
170. dhcpserver exclude addr lt no of Addrs 1 9 gt lt ipv4addr gt lt ipv4addr gt In each command you may add up to 9 IP addresses to be excluded The total number of excluded IP addresses is up to a maximum of 16384 NOTE An error may occur if you provide an invalid IP address Refer the syntax description for more information about the appropriate values and format for configuring this parameters Command Syntax npu config srvcgrp dhcpserver exclude addr lt no of Addrs 1 9 gt lt ipv4addr gt lt ipv4addr gt BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration Privilege 10 Level Syntax Deschiptie Parameter Description Presence Default Possible Values A Value lt no of Addrs The number of IP addresses to Mandatory N A 1 9 1 9 gt be excluded lt ipv4addr gt Denotes the exclude IP address Mandatory N A Valid IP address that will not be assigned to an MS by the DHCP server The number of IP address entries must match the value defined by the no of Addrs parameter Command Service group DCHP server configuration mode Modes 3 3 9 10 4 2 4Deleting Exclude IP Addresses for the DHCP Server Command Syntax Privilege Level Run the following command to delete one or several excluded IP addresses for the DHCP server npu config srvcgrp dhcpserver no exclude addr lt no of Add
171. e and Time on page 333 ocal Time UTC Time socal UTC Offset Daylight Saving Time Global command mode In addition to the configurable parameters the calculated Local Time is also displayed Displaying the Daylight Saving Parameters To display the current daylight saving parameters run the following command npu show daylight saving BreezeMAX Mini Centralized ASN GW System Manual OQ 37 Command Syntax Privilege Level Display Format Command Modes 3 3 13 3 3 13 1 3 3 13 1 1 Chapter 3 Operation and Administration Using the CLI Unit Configuration npu show daylight saving Saving mode lt enabled disabled gt Start date lt value or not configured gt Stop date lt value or not configured gt Global command mode Managing General Unit Parameters This section describes the commands to be used for HM Managing the Site General Information on page 338 HM Managing the Unique Identifier for the Unit on page 340 HM Displaying the Vendor Identifier on page 342 Managing the Site General Information The site general parameters provide general information on the site This section describes the commands used for HM Configuring the Site General Information on page 338 HM Displaying the Site General Information Parameters on page 339 Configuring the Site General Information Run the following command to configure the name and location informat
172. e parameter is not received in RADIUS Access Accept Command Service group DHCP proxy configuration mode Modes 3 3 9 10 4 3 2Restoring the Default Configuration Parameters for the DHCP Proxy Run the following command to restore the default values of one or several DHCP proxy parameters This command can also be used to delete the configured DNS server address if specified npu config srvcgrp dhcpproxy no offerreuse holdtime lease interval dnssrvr addr renew interval rebind interval dnssrvr addr2 Specify one or several parameters to restore the specified parameters to their default values Do not specify any parameter to restore all of these parameters to their default values BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration INFORMATION Refer Section 3 3 9 10 4 3 1 for a description and default values of these parameters Command npu config srvcgrp dhcpproxy no offerreuse holdtime lease interval Syntax dnssrvr addr renew interval rebind interval dnssrvr addr2 Privilege 10 Level Command Service group DHCP proxy configuration mode Modes 3 3 9 10 4 3 3 Terminating the DHCP Proxy Configuration Mode Run the following command to terminate the DHCP proxy configuration mode npu config srvcgrp dhcpproxy exit Command _ npu config srvegrp dhcpproxy exit Syntax Priv
173. e IEEE 802 16e standard A BS operates on one frequency assignment and incorporates scheduler functions for uplink and downlink resources The basic functionality of the BS includes IEEE 802 16e OFDMA PHY MAC entity R6 and R8 functionality according to NWG definitions Extensible Authentication Protocol EAP relay fl E E HM Control message authentication E User traffic authentication and encryption M Handover management Oo QoS service flow management entity ASN Gateway ASN GW The ASN GW is a network entity that acts as a gateway between the ASN and CSN The ASN functions hosted in an ASN GW may be viewed as consisting of two groups the decision point DP and enforcement point EP The EP includes bearer plane functions and the DP includes non bearer plane functions The basic DP functionality of the ASN GW includes H Implementation of EAP Authenticator and AAA client MH Termination of RADIUS protocol against the selected CSN AAA server home or visited AAA server for MS authentication and per MS policy profile retrieval Storage of the MS policy profile Generation of authentication key material QoS service flow authorization entity AAA accounting client BreezeMAX Mini Centralized ASN GW System Manual Chapter 1 System Description WiMAX Network Reference Model The basic EP functionality of the ASN GW includes E Classification of downlink data into generic routing encapsulation GRE tunne
174. e Mini Centralized ASN GW may complement both indoor and outdoor BTS systems i e BreezeMAX 4Motion Indoor and Outdoor systems and BreezeMAX Extreme systems while operating concurrently with integrated ASN GW instances The Mini Centralized ASN GW supports stackable solution with additional features such as load balancing and various redundancy configurations The main functions of the Mini Centralized ASN GW are HM Connectivity Functions Traffic VLAN encapsulation QoS marking Local and remote extensive management support via CLI Telnet SSH and SNMP including software download fault and performance management Security functionalities such as rate limiting and access control lists Connection to a cascaded unit future feature BreezeMAX Mini Centralized ASN GW System Manual amp Chapter 1 System Description The Mini Centralized ASN GW E ASN GW Functions EAP authenticator RADIUS AAA client AAA accounting client MS policy profile storage QoS service flow authorization Classification of downlink data into service flows Packet header suppression functionality Multiple service provider support multihost for improved security and wholesale model DHCP functionality internal server DHCP proxy DHCP relay with Option 82 support Handover functionality GRE encapsulation decapsulation gt IP in IP encapsulation decapsulation Transparent VLAN single tag and Q
175. e Values n Value lt file name gt Indicates the name of the Mandatory N A lt file name gt gz compressed file that contains file name string the last 1000 log messages can contain 1 to Always suffix the file name 50 printable with gz characters Command Global configuration mode Modes 3 3 10 1 6 Deleting Backup Log Files from the Flash You can delete the backup log files from the flash It is recommended that you periodically make a backup of these log files and delete these from the flash To delete log backup files from the flash run the following command npu config erase log file lt file name gt CAUTION Specify the file name if you want to delete a specific backup file Otherwise all the backup files residing A in the flash are deleted NOTE An error may occur if E The file name that you have specified does not exist A processing error has occurred Command Syntax Privilege Level npu config erase log file lt file name gt 10 BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Syntax pescnptio Parameter Description Presence Default Possible Values n Value lt file name gt Indicates the name of the Optional N A lt file name gt gz compressed log file to be deleted If you do not specify the file name all the log files residing in the flash are deleted Always suffix the file name with gz
176. e flash When you start the unit for the first time after installation the system boots up with the factory default configuration After the system boots up you can use the CLI to modify the values of parameters for which default values exist and specify values for the remaining parameters NOTE You can at any time restore factory default configuration parameters If you have not saved configuration since the first time the system was started after installation the system boots up with the factory default parameters at the next system reset You can also download the configuration file from an external TFTP server and use the configuration parameters in this file to boot up the system In addition you can batch process commands NOTE It is recommended that you periodically save changes to configuration The saved configuration is written to a file that resides in the flash If you have modified any configuration parameters at runtime it is recommended that you save configuration before resetting shutting down the unit Unsaved configuration is lost after system reset or shut down 3 3 3 1 It is recommended that you make periodic backups of the configuration file You can either manually make a backup of this file or configure the system to automatically make a daily backup You can at any time restore the configuration specified in the backup file or the factory default configuration This section describes the com
177. e flows with UGS uplink data delivery type BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration ul rsrv rate min lt integer 0 400 00000 gt The minimum rate in bps reserved for this uplink service flow Although available for all service flows applicable only for service flows with the appropriate uplink data delivery type UGS NRTVR RTVR ERTVR For NRTVER RTVR and ERTVR cannot be higher than ulqos maxsustainedrate Optional 250000 0 40000000 ul latency ma x lt integer gt The maximum latency in ms allowed in the uplink Although available for all service flows applicable only for service flows with the appropriate uplink data delivery type UGS RTVR ERTVR If uplink data delivery type is ERTVR or UGS the default value should be 90ms Optional 500 0 4294967295 ul tolerated jitter lt integer gt the maximum delay variation jitter in milliseconds for this uplink service flow Although available for all service flows applicable only for service flows with the appropriate uplink data delivery type UGS ERTVR Optional 0 0 4294967295 ful unsol intr vl lt integer 0 655 35 gt The nominal interval in ms between successive data grant opportunities for this uplink service flow Although available for all service flows applicable only fo
178. e global configuration mode npu config terminal npu config Enter the interface configuration mode npu config interface lt interface type gt lt interface id gt external mgmt bearer local mgmt npu host npu config if BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Using the Command Line Interface CLI Table 3 3 Commands to Enter Exit a Command Mode mode Exit the configuration mode and enter the global command npu config end npu npu config if end npu Exit the current configuration mode by one level npu config if exit npu config 3 1 3 Interpreting the Command Syntax The following table lists the conventions used in the command syntax for all commands Table 3 4 Conventions Used in the Command Syntax Convention Description Example i Indicates that the parameters enclosed in these brackets are mandatory and only one of these parameters should be specified npu config limit cpu memory softlimit lt limit gt hardlimit lt limit gt This command is used for specifying the soft and hard limits for memory and CPU utilization The cou memory parameters are enclosed within brackets indicating that their presence is mandatory and that only one of these parameters is required Indicates that one or all parameters enclo
179. e name gt 10 BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Syntax peseriptio Parameter Description Presence Default Possible Values n Value lt ip address gt Indicates the IP address of the Mandatory N A Valid IP address TFTP server to be used for batch processing commands to be used for configuring and monitoring the unit lt file name gt Indicates the configuration file Mandatory N A lt filename gt txt to be used for batch processing the CLI commands Always suffix the file name with text Command Global configuration mode Modes 3 3 5 Configuring the CPU To ensure optimal utilization of the unit s resources you are required to configure the thresholds for the CPU and memory utilization for the unit In addition to protect the from hostile applications the type and rate of traffic destined towards the unit is limited by default This section describes the commands to be executed for M Configuring CPU and Memory Utilization Thresholds on page 91 E Rate Limiting on page 93 3 3 5 1 Configuring CPU and Memory Utilization Thresholds This section describes the commands for M Specifying Thresholds for CPU and Memory Utilization on page 91 HM Displaying CPU and Memory Utilization Limits on page 93 3 3 5 1 1 Specifying Thresholds for CPU and Memory Utilization You can use the CLI to configu
180. e reserved A host interface VLAN ID shall not conflict with other interfaces VLAN IDs with any instance of Service Interface VLAN ID with any instance of Service Interface Outer VLAN ID and with any VID Map Range of a VPWS Mapped Service Group Command Interface Configuration mode Modes 3 3 2 3 6 Terminating the Interface Configuration Mode To terminate the interface configuration mode run the following command npu config if exit Command npu config if exit Syntax Privilege 10 Level BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration Command Interface configuration mode Modes 3 3 2 3 7 Displaying IP Interface Status and Configuration Information To display the status and configuration information for an IP interface run the following commana npu show ip interface external mgmt bearer local mgmt Do not specify the interface if you want to view configuration information for all IP interfaces NOTE Q An error may occur if the IP interface does not exist for the configured connectivity Command Syntax Privilege Level Syntax Descriptio n Display Format npu show ip interface external mgmt bearer local mgmt 1 Parameter Description Presence Default Possible Values Value external mgmt Indicates the interface for Optional N A E external mgmt bearer which
181. e service interface npu config srvcif VPLS_trunk config descr lt string gt vlan id lt size 2 4094 gt The VLAN ID is mandatory when creating a new VPLS_trunk service interface npu config srvcif vlan config descr lt string gt vlan id lt size 2 4094 gt Parameter Description Presence Default Value Possible Values descr lt string gt A description of the service interface Optional null String up to 70 characters vlan id lt size 2 4094 gt A Service Interface VLAN ID shall not conflict with other instances of Service Interface VLAN ID any instance of Service Interface Outer VLAN ID with VLAN IDs of Bearer Local Management and External Management interfaces and with any VID Map Range of a VPWS Mapped Service Group Must be set to a valid value other than the default 0 The VLAN ID of an existing Service Interface cannot be changed Mandatory when creating a new service interface 2 4094 VPLS Trunk Service Interface configuration mode After enabling the VPLS_trunk Service Interface configuration mode run the following command to configure the encapsulation mode parameter of the service interface BreezeMAX Mini Centralized ASN GW System Manual Command Syntax Privilege Level Syntax Description Command Modes 3 3 9 8 2 4 3 Command Syntax Privilege Level Chapter 3 Operation and Administration
182. e the classification rule configuration mode Run the following command to enable the classification rule configuration mode You can also use this command to create a new classification rule npu config clsf rule lt rulename gt clsfRuleType L2 L3 If you use this command to create a new classification rule the configuration mode for this rule is automatically enabled After enabling the classification rule configuration mode for an L3 rule you can execute any of the following tasks M Configure the parameters for this classification rule refer to Section 3 3 9 11 4 2 Restore the default parameters for this classification rule refer to Section 3 3 9 11 4 3 Manage protocol configuration refer to Section 3 3 9 11 4 4 Manage source address configuration refer to Section 3 3 9 11 4 5 Manage destination address configuration refer to Section 3 3 9 11 4 6 Manage source port configuration refer to Section 3 3 9 11 4 7 Manage destination port configuration refer to Section 3 3 9 11 4 8 After you have executed these tasks you can terminate the classification rules configuration mode refer to Section 3 3 9 11 4 9 After enabling the classification rule configuration mode for an L2 rule you can execute any of the following tasks E Configure the parameters for this classification rule refer to Section 3 3 9 11 4 10 M Clear the current configuration of this classification rule refer to Section 3 3 9 11 4 11 Bre
183. each module For details refer Section 3 3 10 2 2 Command npu config log level Syntax StartupMgr SWDownload FaultMgr PerfMgr ShelfMgr SIGASN UserIF AUMgr ALERT ERROR INFO Privilege 10 Level Syntax Pesaipue Parameter Description Presence Default Possible Values n Value StartupMgr S Indicates the name of the Optional N A E StartupMgr WDownload Faul module for which the severity tMgr PerfMgr S level is to be specified m OMDoWnees helfMgr SIGASN UserIF If you do not specify any value E FaultMgr for this parameter the severity E PerfMgr level that you specify is applied for all modules For more E ShelfMgr information about these parameters refer Table 3 23 E SIGASN E UserlF ALERT ERROR I_ Indicates the severity level to be Mandatory Error E ALERT NFO applied to a particular or all modules a ERRUR E INFO Command Global configuration mode Modes 3 3 10 2 2 Displaying Configuration Information for Module level Logging BreezeMAX Mini Centralized ASN GW System Manual To display the log level configured for one or all modules run the following command Command Syntax Privilege Level Syntax Descriptio n Display Format Command Modes 3 3 10 2 3 Chapter 3 Operation and Administration Using the CLI Unit Configuration npu config show log level StartupMgr SWDownload FaultMgr PerfMgr ShelfMgr SIGASN User
184. ecsseeeeeeeeeeeeeeeeeeees 22 3 1 Using the Command Line Interface CLI cccceeeeeeeeeceeeeeeeeeeeseeceeeeenseeeeeneanenees 23 3 1 1 Accessing the CLlsopri a E R a a 23 SW Command MOdESes iair i E sie bee made nadaunne suabeeemanantiien 26 3 1 3 Interpreting the Command SyNtax ccccceceeeeeeeeeeeeeeeeeeeeeeeeaeeeeeeaeeeseaaeeeseaeeeeeees 27 314 Usine the CN is csasss ratancdneravanvtenseaa T r E E bees 28 3 1 5 Managing Users and Privileges ss ssssssssnssnrrssrnnruunnnnnnnrunnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnn 31 3 1 6 Managing Secure Shell SSH Parameters ceeeeeeeeteeeeeeteeeeeeeeeeeeeeeees 40 3 1 7 Ma a ging the SESSION sissit aa Ea a 42 3 2 Shutting Down Resetting the System s s ssssssssnunsnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnn nnnm 48 3 2 1 Shutting Down the System s sssssssssussssrrnrrunnnerunrnnnnnnnnnnennnnnnunnnennnnennnnennnnneenn 48 3 2 2 Managing System Reset giccpcsscaebnravettnntencntaest nade aon aan 49 3 3 Unit C nfigs ra tiom ississos esve cater eee ties eee cousi pi eet adedeeetemeeacotunstienbddeuebeesguass 51 3 3 1 Managing the IP Connectivity Mode sssssssssssssssnnrnnnrnnnnnrnnnnnnnunnnnnnnnnnnnnnnnnnnnn nnn 51 3 3 2 Configuring Physical and IP INGGraCeS wrccisccsccnsasstensscaenccsasntnnnnnacecsmnessnnsiannnanenenes 54 3 3 3 Managing the Configuration File s sssssssssssssssnssuunnnnnnrnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnn 80 3 3 4 Batch processing of CLI COoMmmandS ccccc
185. ection 3 3 9 4 Updated to reflect the ability to configure the ms capacity threshold parameter Managing the Hot Lining Feature Section 3 3 9 13 New Manual MS De registration Section 3 4 1 Updated added the options to de register am MS by its MSID MAC address and de register all MSs served by a specified BS BreezeMAX Mini Centralized ASN GW System Manual Document History Section 3 3 10 logging Alert Error and Info levels are supported Displaying the Current Log Destination Section 3 3 10 1 4 Updated display format Displaying the Current Status of Trace Destinations Section 3 6 1 1 3 Updated display format Topic Description Date Issued Displaying MS Information New display option February 2010 Section 3 4 2 Configuring Parameters for IP IP Updated Description Presence and Default Service Interface Value for srcaddr and dstaddr Section 3 3 9 8 2 1 Configuring Parameters for VLAN Updated Description Presence and Default Service Interface Value for vlan id and dflt gw ip Section 3 3 9 8 2 2 Configuring DHCP Server Updated default value of opt60 Parameters Section 3 3 9 10 4 2 1 Specifying DHCP Proxy Updated default value of opt60 Configuration Parameters Section 3 3 9 10 4 3 1 Configuring the DHCP Relay Updated Description Presence and Default Parameters Value of server addr Section 3 3 9 10 4 4 1 Configuring Classifica
186. ecuting this command reset the system to restore configuration from the backup configuration file For more information about resetting the system refer to Section 3 2 2 1 If you have stored the backup file on an external server you can download the backup file from the external server and reset the system to apply the configuration defined in the downloaded file For details about downloading the configuration file from an external server refer Section 3 3 3 2 Command Syntax Privilege Level npu restore from local backup lt filename gt 10 BreezeMAX Mini Centralized ASN GW System Manual OQ 26 Chapter 3 Operation and Administration Using the CLI Unit Configuration Syntax Desctiptie Parameter Description Presence Default Possible Values n Value lt filename gt Indicates the name of the Mandatory N A Valid file name backup configuration file to be used for restoring configuration The format of the backup configuration file name is YYYYMMDDHHMM xml gz where YYYYMMDDHHMM indicates the creation date and time of the zipped XML configuration file Command Global command mode Modes 3 3 3 4 6 Restoring the Factory Default Configuration You can at any time run the following command to restore factory default configuration npu restore factory default NOTE o After executing this command reset the system to apply the configuration change For
187. ed ASN GW System Manual Display Format Command Modes 3 3 6 Chapter 3 Operation and Administration Using the CLI Unit Configuration CPU Rate Limiting Status Enabled PRE DEFINED RATELIMIT CONFIGURATION Application DestPort Rate Kbps Status lt Application gt lt Port Number gt lt Configured Rate gt lt Current Status gt lt Application gt lt Port Number gt lt Configured Rate gt lt Current Status gt lt Application gt lt Port Number gt lt Configured Rate gt lt Current Status gt USER DEFINED RATELIMIT CONFIGURATION Application Srcport Dstport Proto SrcIPAddr DstIPAddr L2type Rate lt Application gt lt Port Number gt lt Port Number gt lt Protocol gt IP address gt lt IP Address gt lt value gt lt Configured Rate gt Global command mode Configuring QoS Marking Rules QoS marking rules refer to the classification of traffic originating from the unit into different flows You can then apply DiffServ Code Points DSCP and or 802 1p priority bits for appropriate QoS handling of each flow The unit generates the following types of traffic M R4 R6 control traffic R3 control traffic such as RADIUS or MIP HM Management traffic To define QoS marking for traffic generated by NPU you are required to configure E Class maps Define the DSCP and or VLAN priority bits to be applied for signaling and management traffic originating from the NPU
188. ed CSN AAA server home or visited AAA server for MS authentication and per MS policy profile retrieval Storage of the MS policy profile for as long as the MS is authenticated authorized and remains in the ASN controlled by the specific ASN GW Generation of authentication key material QoS service flow authorization entity AAA accounting client BreezeMAX Mini Centralized ASN GW System Manual eo OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration M Network Enforcement Point NWEP functions Includes the following bearer plane functions Classification of downlink data into generic routing encapsulation GRE tunnels Packet header suppression functionality DHCP functionality Handover functionality The following are the tasks for configuring the ASN GW functionality Managing the ASN Interface on page 148 Managing the Authenticator Function on page 149 Managing the Data Path Function on page 151 Managing the Context Function on page 154 Managing the MS State Change Functionality on page 156 Managing the Connectivity Service Network Interface on page 158 Managing Service Interfaces on page 167 Configuring the AAA Client Functionality on page 182 Managing Service Groups on page 192 Configuring the Service Flow Authorization Functionality on page 238 a E E E E E HM Configuring Bearer Plane QoS Marking Rules o
189. efer to Section 3 3 9 11 3 3 3 Configure uplink downlink classification rule names refer to Section 3 3 9 11 3 3 4 3 Terminate the service flow configuration mode refer to Section 3 3 9 11 3 3 6 You can at any time delete an existing service flow refer to Section 3 3 9 11 3 3 7 3 3 9 11 3 3 1Enabling the Service Flow Configuration Mode Creating a New Service Flow To configure the parameters for a service flow first enable the service flow configuration mode Run the following command to enable the service flow configuration mode You can also use this command to create a new service flow npu config srvcprfl flow lt flow id 1 255 grp alias lt srvc grp alias gt if alias lt string gt mcast sfid lt integer 0 65535 gt mcastipv4add lt string 15 gt lt string gt INFORMATION The mcast sfid and mcastipv4add parameter are for future use with a DGW profile not a supported in the current release Do not use these parameters In the following sections these parameters will be ignored If you use this command to create a new service flow the configuration mode for this service flow is automatically enabled after which you can execute any of the following tasks M Configure the parameters for this service flow refer to Section 3 3 9 11 3 3 2 E Restore the default parameters for this service flow refer to Section 3 3 9 11 3 3 3 M Configure uplink downlink classification rule names refer to Sectio
190. efer to Section 3 3 9 11 3 6 Enabling the Service Profile Configuration Mode Creating a New Service Profile To configure the parameters for a service profile first enable the service profile configuration mode Run the following command to enable the service profile configuration mode You can also use this command to create a new service profile npu config srvc profile lt profile name gt dgwPrfl BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration INFORMATION The dgwPrfl option is for future use Do not use this option In the rest of this section this option will be ignored If you use this command to create a new service profile the configuration mode for this rule is automatically enabled after which you can execute any of the following tasks HM Configure the parameters for this service profile refer to Section 3 3 9 11 3 2 M Manage service flow configuration for this service profile refer to Section 3 3 9 11 3 3 M Delete service flows refer to Section 3 3 9 11 3 3 7 After you have executed these tasks terminate the service profile configuration mode refer to Section 3 3 9 11 3 4 to return to the service group configuration mode Command npu config srvc profile lt profile name gt Syntax Privilege 10 Level Syntax Descriptio Parameter Description Presence Default Possible Values n Value lt pro
191. ege 10 Level Syntax Descriptio Parameter Description Presence Default Possible Values a Value cvid Denotes the Customer VLAN ID Mandatory N A 1 4094 lt value 1 4094 value to be assigned to the 7 classification rule Command L2 Classification rules configuration mode Modes 3 3 9 11 4 11 Clearing the configuration of the L2 Classification Rule Run the following command to clear the configuration of this classification rule removing the configured cvid npu config clsfrule L2 no cvid After clearing the configuration you can define a new cvid for this classification rule Command npu config clsfrule L2 no cvid Syntax Privilege 10 Level Command L2 Classification rules configuration mode Modes 3 3 9 11 4 12 Terminating the L2 Classification Rule Configuration Mode Run the following command to terminate the L2 classification rules configuration mode npu config clsfrule L2 exit BreezeMAX Mini Centralized ASN GW System Manual eS OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration Command npu config clsfrule L2 exit Syntax Command L2 Classification rules configuration mode Modes 3 3 9 11 4 13 Displaying Configuration Information for Classification Rules To display all or specific classification rules run the following commana npu show clsf rule lt rulename gt Specify the classification rule name if you want to display configuration infor
192. elected DHCP mode Configure the DHCP server refer to Section 3 3 9 10 4 2 Configure the DHCP proxy refer to Section 3 3 9 10 4 3 Configure the DHCP relay refer to Section 3 3 9 10 4 4 3 3 9 10 4 1 Enabling the Service Group Operation Mode for DHCP Server Proxy Relay Run the following command enable the DHCP server relay proxy configuration mode npu config srvcgrp config server proxy relay When you run this command the DHCP server proxy relay configuration mode is enabled after which you can execute the following tasks M Configure the DHCP server refer to Section 3 3 9 10 4 2 M Configure the DHCP proxy refer to Section 3 3 9 10 4 3 HM Configure the DHCP relay refer to Section 3 3 9 10 4 4 INFORMATION You cannot modify the configured DHCP mode To change the DHCP mode you should first delete the Service Group and configure it again Command npu config srvcgrp config server proxy relay Syntax Privilege 10 Level BreezeMAX Mini Centralized ASN GW System Manual O Chapter 3 Operation and Administration Using the CLI Unit Configuration Syntax peseriptio Parameter Description Presence Default Possible Values n Value server proxy Indicates whether the service Mandatory N A E server relay group operation mode is to be E proxy enabled for the DHCP server E relay proxy or relay Command Service group configuration mode Modes 3 3 9 10 4 2
193. em Manual Chapter 3 Operation and Administration Using the CLI Using the Command Line Interface CLI npu config no user lt username gt NOTE An error may occur if E You are not logged in as admin user E The username that you have specified does not exist Remember that user names are case sensitive E You are trying to delete an active user or the admin user Command npu config no user lt username gt Syntax Privilege 10 Level Syntax Boachipyle Parameter Description Presence Default Possible Values n Value username Indicates the username of the Mandatory N A String up to 20 lt name gt user to be deleted characters and case sensitive Command Global configuration mode Modes 3 1 5 2 Managing Privileges To enable users to execute commands that require a higher privilege level than their currently configured default level you can configure a password for each privilege level Other users can then use the password you have specified to enable a higher privilege level NOTE Only users who have logged in as admin can assign or delete passwords for any privilege level This section describes the commands for M Assigning a Password for a Privilege Level on page 35 M Deleting a Password for a Privilege Level on page 36 BreezeMAX Mini Centralized ASN GW System Manual O 34 Chapter 3 Operation and Administration Using the CLI Using the Command Line
194. er of MAC Addresses per MS ID on page 235 E Maximum Number of MAC Addresses per Service Group refer to Displaying the Maximum Number of MAC Addresses per Service Group on page 235 Details of entries in a MAC Addresses table to Displaying the Details of entries in a MAC Addresses Table on page 235 3 3 9 10 10 3 1Displaying the Aging Timer The Aging Timer is a vendor parameter To display the Aging Timer run the following command npu show vpls aging timer Command npu show vpls aging timer Syntax Privilege 1 Level BreezeMAX Mini Centralized ASN GW System Manual CO Chapter 3 Operation and Administration Using the CLI Unit Configuration Command Global command mode Modes 3 3 9 10 10 3 2Displaying the Maximum Number of MAC Addresses per MS ID The Maximum Number of MAC Addresses per MS ID is a vendor parameter To display the Maximum Number of MAC Addresses per MS ID run the following command npu show vpls max mac num per msport Command npu show vpls max mac num per msport Syntax Privilege 1 Level Command Global command mode Modes 3 3 9 10 10 3 3Displaying the Maximum Number of MAC Addresses per Service Group The Maximum Number of MAC Addresses per Service Group is a vendor parameter To display the Maximum Number of MAC Addresses per Service Group run the following command npu show vpls max mac num per srvc grp Command npu show vpls max mac num per srvc grp Syntax Privi
195. erface of an IP Service Group refer to Section 3 3 9 10 3 Enable the service group DHCP operation mode and configure the DHCP server proxy relay specific parameters refer to Section 3 3 9 10 4 Configure the parameters of a VPWS Transparent Service Group refer to Section 3 3 9 10 5 Configure the parameters of a VPWS QinQ Service Group refer to Section 3 3 9 10 6 Configure the parameters of a VPWS Mapped Service Group refer to Section 3 3 9 10 7 Configure the parameters of a vplsHubAndSpoke Service Group refer to Section 3 3 9 10 8 Terminate the service group configuration mode refer to Section 3 3 9 10 9 In addition you can at any time display configuration information refer to Section 3 3 9 10 12 or delete an existing service group refer to Section 3 3 9 10 11 BreezeMAX Mini Centralized ASN GW System Manual O 3 3 9 10 1 Chapter 3 Operation and Administration Using the CLI Unit Configuration In addition Section 3 3 9 10 10 provides details on handling uplink downlink traffic in VPLS Hub and Spoke services and describes how to view relevant MAC Address tables information and how to clear these tables Enabling the Service Group Configuration Mode Creating a New Service roup To configure the parameters for the service group first enable the service group configuration mode Run the following command to enable the service group configuration mode or create the service group npu
196. ervice Service Groups VPWS Transparent This type of service group is used only for VLAN CS flows Once service group is configured as VPWS Transparent type IP allocation configuration is not required This type of service group is not associated with any R3 service interface as vlan tagged MS traffic is transferred transparently on the on the R3 interface A VPWS Transparent service group can be configured to support time based accounting VPWS QinQ This type of service group is used only for VLAN CS flows Once service group is configured as type VPWS QinQ type IP allocation configuration is not required This type of service group is not associated with any R3 service interface as double tagged MS traffic is transferred transparently on the on the R3 interface The QinQ VLAN used by the MS should be received from the AAA server in Access Accept messages A VPWS QinQ service group can be configured to support time based accounting VPWS Mapped This type of service group is intended for special needs were VLAN CS service flows from multiple MSs use the same VLAN ID Once service group is configured as VPWS Mapped type IP allocation configuration is not required This type of service group makes the mapping between a unique MS flow VLAN ID used on R3 interface and a CVID The CVID can be missing For this service group type a VLAN pool need to configured The ASNGW will uniquely allocate a VLAN from the configured pool to each MS flow t
197. es is permitted denied The following table lists the parameters and their descriptions in these commands Table 3 21 Parameters for Configuring Permit Deny Rules for ICMP Traffic Parameter Description Example Source IP any Indicates that incoming ICMP npu config ext nacl perm traffic from any source IP it icmp any address is permitted or denied npu config ext nacl deny icmp any host Indicates that incoming ICMP npu config ext nacl perm lt src ip ad traffic from a specific source IP it icmp host 1 1 1 1 dress gt address is permitted or denied npu config ext nacl deny icmp host 1 1 1 1 lt network s Indicates that incoming ICMP npu config ext nacl perm rc ip gt traffic is to be permitted or it icmp 1 1 1 0 lt mask gt denied for a particular subnet 255 255 255 0 npu config ext nacl deny icmp host 1 1 1 0 255 255 255 0 BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Table 3 21 Parameters for Configuring Permit Deny Rules for ICMP Traffic destined to the NPU interface destination IP address is permitted or denied lt src ip ad dress gt Parameter Description Example Destination any Indicates that ICMP traffic npu config ext nacl perm IP address destined to the NPU interface IP it icmp host 1 1 1 1 any address is permitted or denied npu c
198. estore to factory default and reboot using the following command npu restore factory default The system will reset automatically Site Connectivity Connectivity Mode The connectivity mode determines how traffic is to be routed between the unit and external servers AAA server and Management System servers The default connectivity mode is In Band IB Alternatively the unit can be managed Out Of Band OOB or Unified Connectivity Mode To view the current and configured connectivity mode use the command npu show connectivity mode To change the connectivity mode to Out Of Band use the command npu config connectivity mode outband BreezeMAX Mini Centralized ASN GW System Manual OQ 2 1 3 2 2 1 3 3 Chapter 2 Commissioning Initial Unit Configuration To change the connectivity mode to Unified use the command npu config connectivity mode unified For details refer to Configuring the IP Connectivity Mode on page 53 VLANs Translation Inband Connectivity Mode The Data port operates in VLAN aware bridging mode tagged trunk mode The values configured for VLAN ID s used on this port are the VLAN IDs used internally These are the VLAN ID for the bearer IP interface the default is 11 and in In Band Connectivity mode the VLAN ID of the external management IP interface the default is 12 When using In Band connectivity via the Data port if the value of the VLAN ID used for management in
199. evel Display Asn gateway datapath config Format l dpTimerInitPathRegReq lt value gt dpCounterInitPathRegReqMax lt value gt dpTimerMsDeregReq lt value gt dpCounterMsDeregReqMax lt value gt dpTimerPathRegReq lt value gt dpCounterPathRegReqMax lt value gt dpTimerPathRegRsp lt value gt dpCounterPathRegRspMax lt value gt dpTimerPathRegStart lt value gt dpTimerMipWaitDhcp lt value gt dpTotalThroughputThreshold lt value gt Command Global command mode Modes The following table provides some details on the read only parameters that can be configured only by the vendor Parameter Description dpTimerInitPathRegReg The interval in milliseconds after which the request for initial path registration should be complete If the initial path registration request is not completed within this period the NPU may retransmit the initial path registration request dpCounterInitPathRegReqMax The maximum number of initial path registration request retransmissions that may be sent by the NPU After the number of retransmissions has exceeded the value of this parameter the MS de registration procedure is initiated dpTimerMsDeregRegq The MS deregistration response timeout in milliseconds BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration dpCounterMsDeregReqMax The maximum number of MS dereg
200. ezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration After you have executed these tasks you can terminate the classification rules configuration mode refer to Section 3 3 9 11 4 12 Command npu config clsf rule lt rulename gt dlsfRuleType L2 1L3 Syntax Privilege 10 Level Syntax Descriptio Parameter Description Presence Default Possible Values n Value lt rulename gt Denotes the name of the Mandatory N A String 1 to 30 classification rule characters clsfRuleType The type of classifier L2 or L3 Optional L3 E 2 L2 L3 when BH 3 creating a new rule Command Global configuration mode Modes 3 3 9 11 4 2 Specifying Configuration Parameters for the L3 Classification Rule After enabling the classification rules configuration mode for an L3 classification rule run the following command to configure the parameters for this classification rule npu config clsfrule config priority lt priority 0 255 gt phs rulename lt rulename gt iptos low lt value 0 63 gt iptos high lt value 0 63 gt iptos mask lt value 0 63 gt iptos enable INFORMATION You can display configuration information for specific or all classification rules For details refer to gt Section 3 3 9 11 4 13 Command npu config clsfrule config priority lt priority 0 255 gt phs rulename Syntax lt r
201. f the IP address parameters npu config hotlinig filter rule no ip address Run the following command to restore the default values of the source port parameters npu config hotlinig filter rule no source port Run the following command to restore the default values of the destination port parameters npu config hotlinig filter rule no destination port Run the following command to restore the default values of the DSCP range parameters npu config hotlinig filter rule no dscp range Run the following command to restore the default value of the IP protocol parameters npu config hotlinig filter rule no ip protocol Command __ npu config hotlinig filter rule no ip address syntax npu config hotlinig filter rule no source port npu config hotlinig filter rule no destination port npu config hotlinig filter rule no dscp range npu config hotlinig filter rule no ip protocol Privilege 10 Level Command hotlining filter rule configuration mode Modes 3 3 9 13 2 4 8 Terminating the Filter Rule Configuration Mode Run the following command to terminate the filter rule configuration mode npu config hotlinig filter rule exit Command npu config hotlinig filter rule exit Syntax Privilege 10 Level BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration Command hotlining filter rule configuration mode Modes 3 3 9 13 2 5 De
202. face lt access list n ame gt Command Interface configuration mode Modes BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration 3 3 8 3 4 Terminating the Interface Configuration Mode To exit the interface configuration mode and return to the global configuration mode run the following command npu config if exit Command npu config if exit Syntax Privilege 10 Level Command Interface configuration mode Modes 3 3 8 4 Displaying ACL Configuration Information Run the following command to display the configuration information for a specific ACL npu show access lists lt access list number 1 199 gt lt access list name NOTE An error may occur if the ACL number name you have specified does not exist Command Syntax Privilege Level npu show access lists lt access list number 1 199 gt lt access list name 1 BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration Syntax Descriptio parameter Description Presence Default Possible Values n Value lt access list Indicates the number or name Optional N A E 1 199 number of the ACL for which E String 1 199 gt configuration information is to lt access list n be displayed If you do not ame provide the ACL number
203. faceTotal R6InterfaceBs ProvisionedQOs R3Interface InitialNe Privilege 10 Level Command Global configuration mode Modes 3 3 11 3 Displaying the Status of Performance Data Collection To display whether collection and storage of performance data is enabled disabled for a group run the following command To display the status for a counters group npu show npu pm group status BckhlPort CascPort ExtMgmtIf BearerIf AaaClient R6InterfaceTotal R6InterfaceBs ProvisionedQOs R3Interface InitialNe Command npu show npu pm group status BckhlPort CascPort ExtMgmtIf BearerIf Syntax AaaClient R6InterfaceTotal R6InterfaceBs ProvisionedQos R3Interface InitialNe Privilege 1 Level BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration Display lt Group Name gt lt Status gt Format Command Global command mode Modes 3 3 12 Configuring the SNMP Trap Manager This section describes the commands for M Configuring the SNMP Manager on page 324 M Configuring the Trap Manager on page 326 3 3 12 1 Configuring the SNMP Manager To enable configuration over SNMP you are required to first configure the SNMP Manager You can configure up to five SNMP Manager entries for the system where each entry is uniquely identified by the pair of values for the Read Community and Write Community This section describes the co
204. fig srvc intf lt string gt IP IP VLAN QinQ VPLS_trunk For example to define a new IP IP Service Interface named SI1 run the following command npu config srvc intf SI1 IP IP To enable the configuration mode for an existing Service Interface named SI1 run the following command npu config srvc intf SI1 If you use this command to create a new Service Interface the configuration mode for this Service Interface is automatically enabled BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration INFORMATION The Bearer IP Interface refer to Configuring IP interfaces on page 69 must be configured prior to creating IP IP or VLAN service interfaces Command Syntax Privilege Level Syntax Description After enabling the configuration mode for a Service Interface you can execute any of the following tasks E Configure one or more of the Service Interface parameters refer to Section 3 3 9 8 2 M Restore the default values of non mandatory parameters of the Service Interface refer to Section 3 3 9 8 3 After executing the above tasks you can terminate the Service Interface configuration mode refer to Section 3 3 9 8 4 and return to the global configuration mode npu config srvc intf lt string gt IP IP VLAN QinQ VPLS_trunk 10 Parameter Description Presence Default Possible Values
205. fig set qos enable disable 199 Syntax Privilege 10 Level Syntax Descripti Parameter Description Presence Default Possible Values n Value enable Indicates whether QoS marking Mandatory disable E enable disable should be enabled or disabled E disable for a specific ACL 199 Indicates the identifier of the Mandatory N A 199 ACL for which the QoS marking is to be activated You must specify 199 BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Command Global configuration mode Modes 3 3 6 4 Displaying ACL 199 Configuration Information Run the following command to display the configuration information for ACL 199 npu show access lists 199 lt access list 199 name NOTE An error may occur if the ACL name you have specified does not exist Command Syntax Privilege Level Syntax Descriptio n BreezeMAX Mini Centralized ASN GW System Manual npu show access lists 199 lt access list 199 name 1 Parameter Description Presence Default Possible Values Value 199 To view configuration Mandatory N A E 199 lt access list 1 information for ACL 199 for viewing E String the 99 name specify 199 or the name information name configured for this ACL for ACL 199 configured for ACL 199 Chapter 3 Operation and Administration Using the CLI Unit Configu
206. fig addr enable addr mask lt value gt Syntax Privilege 10 Level Syntax Deschiptlo Parameter Description Presence Default Value Possible Values n addr enable Indicates that the use of Optional By default the The the associated use of the presence absenc destination address is associated e of this flag enabled for the destination indicates that classification rule that address is the use of the you are configuring If disabled associated the use of this address is destination disabled the associated address is destination address is enabled disable ignored while classifying d the packet addr mask Denotes the mask field Optional 255 255 255 255 Valid address lt value gt that is used to specify a mask range of destination addresses Command L3 Classification rules destination address configuration mode Modes 3 3 9 11 4 6 3 Disabling the Destination Address Run the following command to disable the destination address that is currently enabled Command Syntax npu config clsfrule dstaddr no addr enable npu config clsfrule dstaddr no addr enable BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Privilege 10 Level Command L3 Classification rules destination address configuration mode Modes 3 3 9 11 4 6 4Terminating the Destination Address Configuration Mode Run the following command to terminate the de
207. figuring Classification Rules on page 258 3 3 9 11 1 Configuring the SFA PHS Functionality To configure the SFA functionality with respect to PHS Rules run the following command To enable PHS npu config sfa phs enable To disable PHS npu config no sfa phs enable The default configuration is PHS Disable INFORMATION You can display configuration information for the SFA functionality For details refer Section 3 3 9 11 2 p For details on PHS Rules refer to Configuring PHS Rules on page 286 Command npu config sfa phs enable Syntax npu config no sfa phs enable Privilege 10 Level Command Global configuration mode Modes 3 3 9 11 2 Displaying Configuration Information for the SFA PHS Functionality To display the current configuration information for the SFA PHS functionality run the following command npu show sfa Command npu show sfa Syntax Privilege 1 Level Display SFA Configuration Format PHS lt Enable Disable gt BreezeMAX Mini Centralized ASN GW System Manual 239 Command Modes 3 3 9 11 3 3 3 9 11 3 1 Chapter 3 Operation and Administration Using the CLI Unit Configuration Global command mode Configuring Service Profiles The unit allows for guaranteed end to end QoS for user traffic across the ASN The QoS approach is connection oriented whereby user traffic is classified into service flows A service flow is a unidirectional stream of packets either in the d
208. file name gt Denotes the name of the Mandatory N A String 1 to 30 service profile for which the characters configuration mode is to be enabled If you are creating a new service profile specify the name of the new service profile The configuration mode is automatically enabled for the new service profile Command Global configuration mode Modes 3 3 9 11 3 2 Enabling Disabling the Service Profile After enabling the service profile configuration mode run the following command to enable this service profile BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration npu config srvcprfl config profile enable A service profile can be enabled only if at least one service flow is configured To disable this service profile run the following command npu config srvcprfl no profile enable The default mode is Disabled INFORMATION You can display configuration information for specific or all service profiles For details refer to Section 3 3 9 11 3 5 Command Syntax Privilege Level Command Modes 3 3 9 11 3 3 npu config srvcprfl config profile enable npu config srvcprfl no profile enable 10 Service profile configuration mode Configuring Service Flows Service flows are unidirectional stream of packets either in the downlink or uplink direction associated with a certain set of QoS requirements such as ma
209. following table lists the parameters and their descriptions in these commands BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Table 3 19 Parameters for Configuring Permit Deny Rules for Traffic from to Specific IP lt src ip ad dress gt from a specific source IP address is permitted or denied Addresses Parameter Description Example Protocol ip Indicates that the Permit Deny npu config ext nacl rule to be created is to be permit ip any applied for the IP in IP packets ospf Indicates that the Permit Deny npu config ext nac1 rule to be created is to be permit ospf any applied to OSPF packets pim Indicates that the Permit Deny npu config ext nac1 rule to be created is to be permit pim any applied to the PIM packets lt protocol Indicates that the Permit Deny npu config ext nacl type rule to be created is to be permit 11 any 1 255 gt applied to traffic from to any protocol including IP OSPF PIM Use standard IANA values to specify the values of these protocols Source IP any Indicates that incoming traffic npu config std nacl address from any source IP address is permit ip any permitted or denied npu config std nacl deny ip any host Indicates that incoming traffic npu config std nacl permit ip host 1 1 1 1 npu config std nacl deny ip host 1 1 1 1
210. g Files Residing on the Flash You can display a list of log files that are residing on the flash For details refer Section 3 5 2 3 3 10 2 Configuring Module level Logging You can configure logging enable disable separately for the following modules and define the severity level for which logging is required M System startup procedures NPU upgrade procedures Fault management procedures System performance procedures Shelf management procedures WiMAX signaling protocols User interface This section describes the commands to be used for M Configuring the Log Severity Level on page 318 HM Displaying Configuration Information for Module level Logging on page 319 HM Disabling Module level Logging on page 320 BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration 3 3 10 2 1 Configuring the Log Severity Level You can configure the severity level for logs to be generated for each module This means that if an event occurs for a module for which the severity level is equal to or higher than the configured level a log is generated The following are the severity levels highest to lowest that can be configured for each module E Alert E Error E Information NOTE ae o By default logging is enabled for all modules and the severity level is Error The severity levels recorded in log messages are defined in RFC 3164
211. g SNTP To enable disable using SNTP server s as the time source run the following command npu config sntp lt Enable Disable gt Command npu config sntp lt Enable Disable gt Syntax Privilege 10 Level Syntax Descriptio n Parameter Description Presence Default Possible Values Value lt Enable Indicates whether to use SNTP__ Mandatory Enable E Enable Disable gt server s as the time source E Disable BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration Command Global configuration mode Modes 3 3 12 3 2 Configuring the SNTP Server s To configure the SNTP server s run the following commana npu config sntp server Primary lt ip address gt Secondary lt ip address gt NOTE It is highly recommended to manage the SNTP Server s IP addresses via AlvariSTAR AlvariCRAFT The e management system supports automatic creation of IP routes for the Trap Managers provided proper configuration procedure is being followed Command npu config sntp server Primary lt ip address gt Secondary lt ip address gt Syntax Privilege 10 Level Syntax Descriptio n Parameter Description Presence Default Possible Values Value Primary The IP address of the primary Optional 0 0 0 0 IP address lt ip address gt SNTP
212. g command npu config no hotlining enable NOTE The unit must be reset after enabling disabling hot lining Command Syntax Privilege Level npu config config hotlining enable npu config no hotlining enable BreezeMAX Mini Centralized ASN GW System Manual e 292 Command Modes 3 3 9 13 2 3 3 9 13 2 1 Command Syntax Privilege Level Chapter 3 Operation and Administration Using the CLI Unit Configuration Global configuration mode Managing Hot Lining Profiles Up to 10 hot lining profiles can be defined Each profile can include up to 16 filter rules and if applicable an HTTP redirect URL To manage hot lining profiles first enable the configuration mode for the profile refer to Enabling the Profile Configuration Mode Creating a New Profile on page 293 You can then execute the following Enabling Disabling the Profile on page 294 Configuring the HTTP Redirect URL for the Profile on page 295 Configuring Hot Lining Filter Rules on page 295 Deleting Filter Rules on page 302 Terminating the Profile Configuration Mode on page 302 Enabling the Profile Configuration Mode Creating a New Profile To configure the parameters for a hot lining profile first enable the hot lining profile configuration mode Run the following command to enable the hot lining profile configuration mode You can also use this command to create a new profile npu config
213. g connectivity with external entities E DATA port A Gigabit Ethernet interface that connects the unit with the operator network M CSCD port A Gigabit Ethernet interface that provides a dedicated Ethernet connectivity to the local management NMS Server or supports concatenation of two or more units Concatenation is not supported in the current release MGMT port A Fast Ethernet interface that provides a dedicated Ethernet interface for external EMS server connectivity In some configurations the MGMT port is used for connecting the local NMS server IP based craft terminal BreezeMAX Mini Centralized ASN GW System Manual 3 3 2 1 Chapter 3 Operation and Administration Using the CLI Unit Configuration You can configure the speed duplex and MTU for these interfaces For the DATA port you can also configure VLAN translation mapping Based on the connectivity mode the unit initializes the following pre configured IP interfaces E Local management Used for enabling connectivity with the local NMS server that is connected via either the MGMT port or the CSCD port when the unit is operating in the in band connectivity mode or via CSCD port when the unit is operating in the out of band connectivity mode The IP address used for the local management interface is intended for back to back connection between the unit and Local NMS Server E External management Used for enabling connectivity with the NMS server th
214. g std nacl no deny any host lt src ip address gt lt network src ip gt lt mask gt any host lt dest ip address gt lt network dest ip gt lt mask gt Command npu config std nacl no permit any host lt src ip address gt Syntax lt network src ip gt lt mask gt any host lt dest ip address gt lt network dest ip gt lt mask gt npu config std nacl no deny any host lt src ip address gt lt network src ip gt lt mask gt any host lt dest ip address gt lt network dest ip gt lt mask gt Privilege 10 Level BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration Syntax Descriptio parameter Description Presence Default Possible Values n Value any host Indicates the source IP Mandatory N A For details refer lt src ip addres address subnet for which the Table 3 18 s gt Permit Deny rule is to be lt network srce i deleted p gt lt mask gt any host Indicates the destination IP Optional any For details refer lt dest ip addre address subnet for which the Table 3 18 ss gt Permit Deny rule is to be lt network dest deleted ip gt lt mask gt Command Standard ACL configuration mode Modes 3 3 8 1 3 Configuring ACLs in the Extended Mode After you have enabled the extended ACL configuration mode y
215. g the Connectivity Service Network Interface The Connectivity Service Network CSN interface provides IP connectivity services for a set of subscribers The gateway uses the CSN interface for R3 control traffic and R3 data traffic towards the core network You can configure the parameters for the IP interface to be used as the network interface for R3 control traffic CSN parameters can be configured only by the vendor To display configuration information for the CSN interface run the following command npu show csnif Command npu show csnif Syntax Privilege 1 Level Display CSN Interface Configuration Format 1 Alias bearer CSNIF IPAddr lt value gt CSNIF Mtu lt value gt UNNEL CheckSum lt Enabled Disabled gt TunIpipMtu lt value gt Command Global command mode Modes BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration The following table provides some details about these parameters Parameter Description Alias A pre defined IP interface to be used as a network interface for R3 control traffic and R3 data traffic Must be the Bearer CSNIF IPAddr The IP address of the Alias interface Bearer CSNIF Mtu The MTU of the Alias interface Bearer UNNEL Indicates if the tunnel checksum feature is enabled or disabled If this feature is enabled the CheckSum checksum of the inne
216. gotiate Enter the following command if you want to disable the auto negotiation mode npu config if no auto negotiate After you disable auto negotiation you can manually configure the port speed and duplex status For details refer to Section 3 3 2 1 2 3 and Section 3 3 2 1 2 4 npu config if auto negotiate npu config if no auto negotiate 10 Interface configuration mode BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration 3 3 2 1 2 3 Specifying the Duplex Status The duplex status for an interface can be either full duplex or half duplex If you have disabled the auto negotiation feature specify whether data transmission should be half or full duplex NOTE e By default full duplex is enabled if auto negotiation is disabled Run the following command to configure the full duplex mode for this interface npu config if full duplex Run the following command to configure the half duplex mode for this interface npu config if half duplex NOTE An error may occur if you run this command when Auto negotiation is enabled Command npu config if full duplex Syntax npu config if half duplex Privilege 10 Level Command Interface configuration mode Modes 3 3 2 1 2 4 Specifying the port speed If you have disabled the auto negotiation feature you can run the following command configure the port s
217. group and with ip addresses of host interfaces Bearer External mgmt and Local mgmt BreezeMAX Mini Centralized ASN GW System Manual OQ 203 Chapter 3 Operation and Administration Using the CLI Unit Configuration pool subnet lt string gt The IP subnet mask to be provided by local DHCP Service with IP address for MSs from this Service Group Optional 255 255 255 255 IP subnet df1lt gwaddr lt string gt IP address of Default Gateway to be provided by local DHCP Service with IP address for MS from this Service Group Optional 0 0 0 0 none Valid IP Address lease interval lt integer 24 4294 967295 gt Lease time in seconds of IP address allocated for MS from this Service Group Optional 86400 24 4294967295 renew interval lt integer gt Denotes the period after which the MS can request for renewal of the lease which has expired Specify the value of this parameter as a percentage of the lease interval parameter The renew interval must be lower than rebind interval Optional 50 1 100 rebind interval lt integer gt Denotes the rebind interval maintained as a percentage of the lease interval This is passed to the MS DHCP client Optional 75 1 99 dnssrvr addr lt string gt IP Address of the first DNS Server to be provisioned to MS from this Group Optional 0 0 0 0
218. guration Privilege 10 Level Syntax Descriptio Parameter Description Presence Default Possible Values n Value external mgmt Indicates the IP interface for Mandatory N A E external mgmt bearer which the configuration E bearer local mgmt mode is to be enabled E local mgmt Command Global configuration mode Modes 3 3 2 3 2 Shutting down Enabling an IP Interface To shut down an IP interface run the following command npu config if shutdown Run the following command to enable the interface npu config if no shutdown Command npu config if shutdown Syntax npu config if no shutdown Privilege 10 Level Command Interface configuration mode Modes 3 3 2 3 3 Assigning an IP address to an interface Run the following command to assign an IP address and subnet mask for an IP interface npu config if ip address lt ip address gt lt subnet mask gt BreezeMAX Mini Centralized ASN GW System Manual em Chapter 3 Operation and Administration Using the CLI Unit Configuration NOTE The bearer interface IP address is used also in other interfaces such as the ASN and CSN interfaces If you change the bearer interface IP address you must save the configuration run the command npu write and reboot the unit to apply changed IP address on other relevant interfaces The bearer interface IP address cannot be modified if used as the Tunnel Source IP in any Serv
219. gure the AAA client parameters refer to Section 3 3 9 9 1 2 E Restore the default configuration of the Alternate Server refer to Section 3 3 9 9 1 3 M Switch between the Primary and Alternate Servers refer to Section 3 3 9 9 1 4 Terminate the AAA client configuration mode and return to the global configuration mode refer to Section 3 3 9 9 1 5 npu config aaa client lt client alias gt 10 BreezeMAX Mini Centralized ASN GW System Manual O Chapter 3 Operation and Administration Using the CLI Unit Configuration Syntax Descnipuon Parameter Description Presence Default Possible Values Value lt client alias gt Denotes the client alias of Mandatory N A default the AAA client for which the configuration mode is to be enabled In the current release a single AAA client is supported with client alias default Command Global configuration mode Modes 3 3 9 9 1 2 Configuring Parameters for the AAA Client After enabling the AAA client configuration mode run the following command to configure the parameters for the AAA client npu config aaa config src intf lt ip intf gt primary serveraddr lt ipv4addr gt alternate serveraddr lt ipv4addr gt rad sharedsecret lt string gt aaaRedundancy Enable Disable rad CallingStationId Binary UTF 8 NOTE An error may occur if you provide an invalid value for any of these parameters Refer the syntax e de
220. he ASN GW assumes failure of the polled BS and clears the contexts of all MS s served by that BS In addition the ASN GW verifies that for each polled entity that the Last Reset Time UTC value of poll N 1 is equal to the value of poll N If the Last Reset Time UTC value of poll N 1 is higher than the value of poll N this mean that the BS went through reset state during the interval between two consecutive polls In this case the ASN GW shall clear all MS s contexts served by that specific BS that are older than BS life after reset through calculation of difference between polled entity Last Reset Time received on poll N 1 and MS network entry time stamp on ASNGW If the ASN GW is the authenticator for the MS s the failing BS served then in addition to context clearance it also sends R3 Accounting Request Stop message including a release indication to AAA When keep alive fails ASN GW generates an event Regardless of the enable disable status of the keep alive mechanism in the ASN GW it replies to ASN_Keep_Alive_Req received from other BSs with ASN_Keep_Alive_Rsp that includes also its Last Reset Time It responds only if all its functions operate properly In case one of the functions fails the ASN GW shall not respond to the keep alive poll 3 3 9 14 1 Configuring ASN GW Keep Alive Parameters To configure one or several keep alive parameters run the following command npu config keep alive asn k
221. he appropriate class maps npu config ip access list standard lt access list number 1 99 gt extended lt access list number 100 199 gt name lt string gt BreezeMAX Mini Centralized ASN GW System Manual ae Chapter 3 Operation and Administration Using the CLI Unit Configuration Privilege 10 Level Syntax Deschiptie Parameter Description Presence Default Possible Values n Value extended Indicates the identifier of the Mandatory N A lt access list n extended ACL for which the umber ACL configuration mode is to 199 100 199 gt be enabled You must specify 199 to enable configuration of QoS classification rules name Indicates the name of the ACL Optional N A String upto 20 lt string gt for which the ACL characters configuration mode is to be enabled Note If you do not specify the ACL name the ACL number is used as the default ACL name Command Global configuration mode Modes 3 3 6 2 2 Configuring a QoS Classification Rule You can configure the QoS classification rules for the ACL with respect the following parameters E Source IP address for the host originating application traffic Application protocol TCP or UDP L4 source port of the application traffic M QoS class map identifier By default there are 8 pre configured QoS classification rules associated with the 8 pre configured QoS class maps Table 3 14 Pre Configured QoS Classifica
222. he software image to be used for rebooting the system is invalid or inaccessible M System initialization failure after last reboot E User initiated system reset M Generic unknown error To display the reason for the last system reset run the following commana npu show reset reason After you run this command the reason for the last system reset is displayed Command npu show reset reason Syntax Privilege 1 Level Display Reset reason lt Reason For Last Reset gt Format Command Global command mode Modes BreezeMAX Mini Centralized ASN GW System Manual 50 3 3 Chapter 3 Operation and Administration Using the CLI Unit Configuration Unit Configuration After installing commissioning and powering up the unit you can use the CLI to configure and make it completely operational in the network Configuration information is stored in a configuration file that resides in the flash When you power up the unit for the first time after installation the system boots up using the factory default configuration You can then use the CLI to modify these configuration parameters INFORMATION For more information about accessing the CLI from a local terminal or remotely via Telnet SSH refer to Section 3 1 1 3 3 1 This section provides information about the following configuration specific tasks Managing the IP Connectivity Mode on page 51 Configuring Physical and IP Interfaces on page 54
223. her instances of Service Interface Outer VLAN ID any instance of Service Interface VLAN ID with VLAN IDs of Bearer Local Management and External Management interfaces and with any VID Map Range of a VPWS Mapped Service Group The Outer VLAN ID of an existing Service Interface cannot be changed In Stacked VLAN Encapsulation Mode the default value 0 must be replaced by a valid value Mandatory when interface encapsulation is set to stacked_vlan N A 1 4094 0 is not a legitimate value VPLS Trunk Service Interface configuration mode Restoring the Default Configuration Parameters for an IP IP Service Interface Run the following command to restore the default configuration for the IP IP service interface chksm parameter npu config srvcif ipip no tunnel chksm INFORMATION Refer to Section 3 3 9 8 2 1 for a description and default value of this parameter BreezeMAX Mini Centralized ASN GW System Manual Command Syntax Privilege Level Command Modes 3 3 9 8 4 3 3 9 8 4 1 Command Syntax Privilege Level Command Modes 3 3 9 8 4 2 Command Syntax Chapter 3 Operation and Administration Using the CLI Unit Configuration npu config srvcif ipip no tunnel chksm IP IP Service Interface configuration mode Terminating a Service Interface Configuration Mode This section describes the commands for HM Terminating the IP IP Service Interface
224. hich characters you want to enable the bearer plane QoS marking rules configuration mode If you want to create a new QoS marking rule specify a new alias and define the type of interface service and traffic priority that is applicable for that rule lt intf type 1 lt Denotes the type of interface Mandatory N A E 0 Indicates R3 gt 0 lt R6 gt for which you are defining the when the R6 255 lt ANY gt gt bearer plane QoS rule creating a internal new Bearer interface Plane QoS E 1 Indicates the R3 external interface E 255 Indicates that the parameter should be ignored for packets transmitted on both internal and external interfaces Rule BreezeMAX Mini Centralized ASN GW System Manual OQ 61 Chapter 3 Operation and Administration Using the CLI Unit Configuration lt srvc type 0 lt U_ Denotes the service type of Mandatory N A E 0 UGS GS gt 1 lt RTVR gt the service flow see when E 1 RTVR ied Specifying Service Flow creating a E 2 NRTVR lt BE gt Configuration Parameters new Bearer a ae on page 245 provided asan Plane QoS E 3 BE Ce gt input classification parameter Rule mM 4ERTVR for the bearer plane QoS rule E 255 ANY This parameter is used to Indicates that match the outer DSCP and the f arameter VLAN priority values for a ee be service flow ignored for packets transmitted on both
225. his value is used if appropriate parameter is not received in RADIUS Access Accept Optional 0 0 0 0 none Valid IP Address pool subnet lt string gt The IP subnet mask to be provided by local DHCP Service with IP address for MSs from this Service Group In the Proxy mode this value is used if appropriate parameter is not received in RADIUS Access Accept Optional 255 255 255 255 IP subnet BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration df1t gwaddr IP address of Default Optional 0 0 0 0 Valid IP Address lt string gt Gateway to be provided by none local DHCP Service with IP address for MS from this Service Group In the Proxy mode this value is used if appropriate parameter is not received in RADIUS Access Accept renew interval Denotes the period after Optional 50 1 100 lt integer gt which the MS can request for renewal of the lease which has expired Specify the value of this parameter as a percentage of the lease interval parameter This value is used if appropriate parameter Is not received in RADIUS Access Accept rebind interval Denotes the rebind interval Optional 75 1 99 lt integer gt maintained as a percentage of the lease interval This is passed to the MS DHCP client This value is used if appropriate parameter is not received in RADIUS Access A
226. hot lining profile To manage a filter rule first enable the hot lining configuration mode for the filter rule refer to Enabling the Filtering Rule Configuration Mode Creating a New Filtering Rule on page 296 You can then execute the following Configuring IP Address Parameters for the Filter Rule on page 297 Configuring Source Port Range Parameters for the Filter Rule on page 298 Configuring Destination Port Range Parameters for the Filter Rule on page 298 Configuring DSCP Range Parameters for the Filter Rule on page 299 Configuring IP Protocol Parameter for the Filter Rule on page 300 Restoring the Default Values of Filter Rule Components on page 301 You can then terminate the filter configuration mode refer to Terminating the Filter Rule Configuration Mode on page 301 and return to the hotlining profile configuration mode BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration 3 3 9 13 2 4 1 Enabling the Filtering Rule Configuration Mode Creating a New Filtering Rule To configure the parameters for a filter rule first enable the filter rule configuration mode Run the following command to enable the filter rule configuration mode You can also use this command to create a new filter rule npu config hotlinig profile filter rule lt string gt direction uplink downlink action drop
227. ice Interface For example run the following command to assign the IP address 172 10 1 0 and subnet mask 255 255 255 0 to the external management interface npu config if ip address 172 10 1 0 255 255 255 0 NOTE An error may occur if the IP address you have specified is already configured for another interface Command Syntax Privilege Level Syntax Descriptio n npu config if ip address lt ip address gt lt subnet mask gt 10 Parameter Description Presence Default Possible Values Value lt ip address gt Indicates the IP address to be Mandatory Depends Valid IP address assigned to this IP interface on interface The defaults are type External Management 192 168 1 1 Bearer 172 16 0 1 Local Management 172 31 0 1 The Bearer Interface subnet should not overlap with External Management or Local Management subnets lt subnet mask gt Indicates the subnet mask to Mandatory 255 255 Valid subnet be assigned to this IP interface 255 0 mask BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration Command Interface configuration mode Modes 3 3 2 3 4 Removing an IP Address from an Interface To remove an IP address from an interface run the following command npu config if no ip address NOTE r o An error may occur if you try removing IP address from the bearer interface
228. id A Service Interface VLAN ID Optional 0 1 9 11 4094 lt size 1 4094 gt shall not conflict with other instances of Service Interface VLAN ID any instance of Service Interface Outer VLAN ID with VLAN IDs of Bearer Local Management and External Management interfaces and with any VID Map Range of a VPWS Mapped Service Group Note that the default 0 is not a valid value The VLAN ID of an existing Service Interface cannot be changed Command QinQ Service Interface configuration mode Modes BreezeMAX Mini Centralized ASN GW System Manual 3 3 9 8 2 4 BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Configuring Parameters for VPLS_trunk Service Interface After enabling the VPLS_trunk Service Interface configuration mode you can execute the following configuration options for the service interface Configuring the Common Parameters of a VPLS_trunk Service Interface refer to Section 3 3 9 8 2 4 1 Configuring the Encapsulation Mode of a VPLS_trunk Service Interface refer to Section 3 3 9 8 2 4 2 HM Configuring the Outer VLAN ID of a VPLS_trunk Service Interface refer to Section 3 3 9 8 2 4 3 The VPLS_trunk service interface parameters together with the VLAN ID of the service group to which the service interface is associated refer to Configuring the VLAN ID Parameter of a VPLS Service Group
229. if alias lt service interface gt waitdhcp holdtime lt timeout gt dhcp ownaddr lt ipv4addr gt 2 npu config srvcgrp config server proxy relay 3 npu config srvcgrp config lt acct none time volumeTime gt 4 npu config srvcgrp config lt ms loop enable disable gt BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI 5 npu config srvcgrp config acctInterimTmr lt integer 0 5 1600 gt Unit Configuration INFORMATION a You can display configuration information for the service group For details refer to Section 3 3 9 11 2 NOTE An error may occur if you provide an invalid value for any of these parameters Refer the syntax description for more information about the appropriate values and format for configuring these parameters Command Syntax Privilege Level Syntax Descriptio n npu config srvcgrp waitdhcp holdtime lt timeout gt server proxy relay enable disable gt lt acct interface gt config srvcif alias lt servic dhcp ownaddr lt ipv4addr gt none time volumeTime gt lt ms loop facctInterimTmr lt integer 0 5 1600 gt 10 Parameter Description Presence Default Possible Values Value srvcif alias Denotes the pre defined IP or Mandatory N A String lt service VLAN service interface alias to interface gt be used as the data path for t
230. ile configuration mode Modes 3 3 9 13 4 Displaying Configuration Information for Hot Lining Profiles To display all or specific profiles run the following commana npu show hotlining profile lt profilename gt Specify the rule name if you want to display configuration information for a particular profile Do not specify a value for this parameter if you want to view configuration information for all profiles Command npu show hotlining profile lt profilename gt Syntax Privilege 1 Level BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration Syntax pescnptio Parameter Description Presence Default Possible Values n Value lt profilename gt Denotes the profile name of Optional null String the profile that you want to display Specify a value for this parameter if you want to display the parameters of a specific profile Do not specify a value for this parameter if you want to display all profiles Display Asn gw hotlining profile configuration Format PEN f For each displayed profile specific or all the following will be displayed Hotlining profile lt name gt Redirection address lt address gt Status lt Disabled Enabled gt for each displayed profile all defined filter rules will be displayed For each rule the following details will be displayed Filter r
231. ilege 1 Level Syntax Desctiptle Parameter Description Presence Default Possible Values a Value lt rulename gt Denotes the rule name of the Optional N A String PHS rule that you want to display Specify a value for this parameter if you want to display the parameters of a specific PHS rule Do not specify a value for this parameter if you want to display all PHS rules Display PHS Configuration Format rulename field mask verify size lt value gt lt value gt lt value gt lt value gt lt value gt Command Global command mode Modes 3 3 9 13 Managing the Hot Lining Feature Hot Lining provides a WiMAX operator with the capability to efficiently address issues with users that would otherwise be unauthorized to access packet data services When Hot Lining is enabled the ASN GW implements UL DL traffic filters These traffic filters are dynamically applied and removed per MSID Triggers for filter application removal are relevant RADIUS messages from the AAA server Filter s action on traffic shall be one of the following pass drop or HTTP redirect the traffic The ASN GW shall apply the pre configured profile according to the Hotline Profile ID as delivered from the AAA server BreezeMAX Mini Centralized ASN GW System Manual e Chapter 3 Operation and Administration Using the CLI Unit Configuration If filtering is applied uplink subscriber s packet that does not match any UL filter rule shall be dropped
232. ilege 10 Level Command Service group DHCP proxy configuration mode Modes 3 3 9 10 4 4 Configuring the DHCP Relay After enabling the service group operation mode for the DHCP relay you can execute any of the following tasks M Configuring the DHCP Relay Parameters on page 213 E Terminating the DHCP Relay Configuration Mode on page 217 3 3 9 10 4 4 1 Configuring the DHCP Relay Parameters Run the following command to configure the DHCP server address for the DHCP relay npu config srvcgrp dhcprelay config server addr lt ipV4Addr gt EnableOpt82 DisableOptsz2 BreezeMAX Mini Centralized ASN GW System Manual OQ 13 Chapter 3 Operation and Administration Using the CLI Unit Configuration NOTE An error may occur if you provide an invalid value for the DHCP server address Refer the syntax e description for more information about the appropriate values and format for configuring this ll parameters Command npu config srvcgrp dhcprelay config server addr lt ipV4Addr gt Syntax EnableOpt82 DisableOpts2 Privilege 10 Level Syntax Deschiptie Parameter Description Presence Default Possible Values n Value server addr Denotes the IP address of the Optional 0 0 0 0 Valid IP Address lt ipv4addr gt external DHCP server Must be configured to a valid IP address EnableOpt82 Denotes whether DHCP option Optional DisableO HM EnableOpt82 DisableOpt8
233. ill represent two characters when used as string like in xml file BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Indicates the PHSM which contains the bit mask of the PHSF with the bits set that is to be suppressed mask lt value gt Mandatory N A String This parameter is of format Ox000000 Here Octet x x 3 bytes each Byte will represent two characters when used as string like in xml file Indicates whether the PHS header is to be verified verify Optional 0 No lt value gt E 0 Indicates that the PHS header should not be verified E 1 Indicates that the PHS header should be verified Indicates the size in bytes of the header to be suppressed Mandatory N A size lt value gt 0 20 Command Modes PHS rules configuration mode 3 3 9 12 3 Terminating the PHS Rules Configuration Mode Run the following command to terminate the PHS rules configuration mode npu config phsrule exit Command Syntax npu config phsrule exit Privilege 10 Level Command Modes PHS rules configuration mode 3 3 9 12 4 Deleting PHS Rules Run the following command to delete one or all PHS rules BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration npu config no
234. in Access Accept message If ASN GW defined value see acctInterimTmr below is zero and there is no Acct Interim Interval in Access Accept interim updates should be deactivated BreezeMAX Mini Centralized ASN GW System Manual Command Modes 3 3 9 10 9 Command Syntax Privilege Level Command Modes Chapter 3 Operation and Administration Using the CLI Unit Configuration acctInterimTmr Applicable only if acct see Optional 5 lt integer 0 5 1600 gt above mode is set to time The default interval in minutes for Accounting Interim reports to be used if Acct Interim Interval is not received from the AAA server Value 0 means interim reports are deactivated unless Acct Interim Interval is sent by the AAA server in Access Accept messages moO E 5 1600 VPLS Service group configuration mode Terminating the Service Group Configuration Mode Run the following command to terminate the service group configuration mode npu config srvcgrp exit npu config srvcgrp VPWS exit npu config srvcgrp VPWS Mapped exit npu config srvcgrp VPLS exit npu config srvcgrp exit npu config srvcgrp VPWS exit npu config srvcgrp VPWS Mapped exit 10 IP VPWS Transparent VPWS QinQ VPWS Mapped Service group configuration mode 3 3 9 10 1LOHandling Traffic in a VPLS Hub and Spoke Service Group This section includes Handling of down
235. inQ dual tag encapsulation Fragmentation reassembly R6 R3 interfaces implementation Keep alive signaling towards the relevant BSs for enhanced management of service availability The Mini Centralized ASN GW is supplied with a built in license for up to 500 registered subscribers Using add as you grow license based pricing model the number of registered subscribers can be increased in increments of 500 up to a total of 3000 registered subscribers per unit The unit can support an aggregate throughput of up to 200 Mbps An SNMP agent in the unit implements proprietary MIBs for remote setting of operational modes and parameters Security features incorporated in the equipment restrict the access for management purposes The Mini Centralized ASN GW can be managed by AlvariSTAR Element Management System EMS used for managing the BTS equipment of the system providing the network Operation Administration and Maintenance OA amp M staff and managers with all the network surveillance monitoring and configuration and service provisioning capabilities required to effectively manage the network while keeping the resources and expenses at a minimum BreezeMAX Mini Centralized ASN GW System Manual O 10 Chapter 1 System Description 1 4 Specifications Specifications 1 4 1 Data Communication Ethernet Interfaces Table 1 1 Data Communication Ethernet Interfaces Item Description Standard Compliance IEEE 80
236. information about the appropriate values and format for configuring these parameters At least one parameter must be specified the value is optional The command npu config srvcif ip ip config tunnel will return an Incomplete Command error Command Syntax Privilege Level Syntax Description npu config srvcif ip ip config tunnel deser lt string gt sreaddr lt ip4addr gt dstaddr lt ipv4addr gt chksm 10 Parameter Description Presence Default Possible Values Value descr lt string gt A description of the Service Optional null String up to 70 Interface characters srcaddr The source IP address that Optional 0 0 0 0 IP Address of lt ip4addr gt indicates the point of Bearer Interface origination of the tunnel for the service interface Must be set to the same address as the NPU Bearer IP Address BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration dstaddr The destination IP address that Optional 0 0 0 0 Valid IP Address lt ipv4addr gt indicates the point of termination of the tunnel for the service interface Must be set to a valid IP address The destination IP address of an existing Service Interface if already configured to a valid value cannot be changed chksm Indicates that end to end Optional By The checksumming mechanism on default presence absenc
237. ing commands to delete the Permit Deny rule for traffic from to a specific IP address subnet for a particular protocol npu config ext nacl no permit ip ospf pim lt protocol type 1 255 gt any host lt src ip address gt lt src ip address gt lt mask gt any host lt dest ip address gt lt dest ip address gt lt mask gt npu config ext nacl no deny ip ospf pim lt protocol type 1 255 gt any host lt src ip address gt lt src ip address gt lt mask gt any host lt dest ip address gt lt dest ip address gt lt mask gt npu config ext nacl no permit ip ospf pim lt protocol type 1 255 gt any host lt src ip address gt lt src ip address gt lt mask gt any host lt dest ip addresq gt lt dest ip address gt lt mask gt npu config ext nacl no deny ip ospf pim lt protocol type 1 255 gt any host lt src ip address gt lt src ip address gt lt mask gt any host lt dest ip addresq gt lt dest ip address gt lt mask gt 10 BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Syntax Descriptio parameter Description Presence Default Possible Values n Value ip osp Indicates the type of protocol Mandatory N A For details refer pim for which the Permit Deny rule Table 3 19
238. ing down the interface on page 58 Defining the auto negotiation mode on page 59 Specifying the Duplex Status on page 60 Specifying the port speed on page 60 Configuring the MTU for physical interfaces on page 61 INFORMATION y There is no need to shut down the interface for configuring its parameters 3 3 2 1 2 1 Shutting down the interface Run the following command to shut down this physical interface npu config if shutdown NOTE Beware from shutting down the interface you use for accessing the device BreezeMAX Mini Centralized ASN GW System Manual 58 Chapter 3 Operation and Administration Using the CLI Unit Configuration Run the following command to enable this physical interface npu config if no shutdown Command npu config if shutdown Syntax npu config if no shutdown Privilege 10 Level Command Interface configuration mode Modes 3 3 2 1 2 2 Defining the auto negotiation mode The auto negotiation feature enables the system to automatically negotiate the port speed and the duplex half or full status with the link partner If you disable auto negotiation you are required to manually configure the port speed and duplex status NOTE By default auto negotiation is enabled Command Syntax Privilege Level Command Modes Run the following command to enable the auto negotiation mode npu config if auto ne
239. ion For all connectivity modes the DATA port operates in VLAN aware bridging mode tagged trunk mode For more information about the VLANs that are configured refer the section Configuring Physical and IP Interfaces on page 54 The following table lists the physical interface and VLAN configuration of bearer local management and external management IP domains with respect to the connectivity mode Table 3 8 Ethernet and IP Domain VLAN to Connectivity Mode Configuration Connectivity Bearer IP Domain External Management IP Local management IP Mode Domain Domain Out of band E DATA port E MGMT port E CSCD port E Bearer VLAN E External management E Local management VLAN VLAN BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Table 3 8 Ethernet and IP Domain VLAN to Connectivity Mode Configuration Connectivity Bearer IP Domain External Management IP Local management IP Mode Domain Domain In band E DATA port E DATA port E CSCD and MGMT E Bearer VLAN E External management ports VLAN E Local management VLAN Unified E DATA port E DATA port E CSCD and MGMT E Bearer VLAN E Bearer VLAN ports E Local management VLAN This section describes the commands for M Configuring the IP Connectivity Mode on page 53 M Displaying the IP connectivity Mode on page 54 3 3 1 1 Co
240. ion such as the rack number and address npu config site Name lt name 32 gt Address lt address 70 gt RackLocation lt rack no position in rack 32 gt ContactPerson lt name 32 gt For example run the following command if you want to specify the site name npu config site name Site 12 BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration NOTE An error may occur if the length of any of these parameters exceeds the specified range Refer the syntax description for more information about the appropriate values and format for configuring these parameters Command npu config site Name lt name 32 gt Address lt address 70 gt RackLocation Syntax lt rack no position in rack 32 gt ContactPerson lt name 32 gt Privilege 10 Level Syntax Deachptio Parameter Description Presence Default Possible Values A Value Name lt name Indicates the name of the site Optional N A String up to 32 256 gt characters Address Indicates the address of the Optional N A String up to 70 lt address site characters 256 gt RackLocation Indicates the rack number and Optional N A String up to 32 lt rack no location of the unit characters position in rack 256 gt ContactPerson Indicates the name of person Optional String up to 32 lt name 256 gt who is admin
241. ional 3 1 10 lt integer rtx time has expired without 1 10 gt getting a response rtx time Time in milliseconds to wait for Optional 5000 5000 10000 lt integer a response before initiating 5000 10000 gt another polling attempt or reaching a decision that the polled entity has failed if the maximum number of retries set by rtx cnt has been reached Command Global configuration mode Modes 3 3 9 14 2 Displaying Configuration Information for ASN GW Keep Alive Parameters To display the ASN GW keep alive parameters run the following command npu show keep alive Command npu show keep alive Syntax Privilege 1 Level BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Display Asn gateway Keep Alive Configuration Format asn ka lt enable disable gt period lt value gt rtx cnt lt value gt rtx time lt value gt Command Global command mode Modes 3 3 10 Configuring Logging Logs can be generated to record events that occur with respect to the following system modules System startup procedures Refers to all procedures events that occur during system startup NPU upgrade procedures Refers to all the procedures executed while upgrading the unit Fault management procedures Refers to internal processes that are executed for monitoring erroneous conditions or fault conditions System performance procedures Refers to i
242. ique Identifier on page 340 Saving the Configuration To save the configuration run the command npu write otherwise after the next time reset you will lose the configuration changes Completing the Configuration Using AlvariSTAR After completion of the initial configuration you should be able to manage the unit using AlvariSTAR and continue configuring necessary parameters to enable the necessary services For details on how to use AlvariSTAR for managing the unit refer to the AlvariSTAR and Device Manager User Manuals Verify that the unit is included in the list of devices that can be managed by AlvariSTAR It can be added to the list of managed devices either through the Equipment Manager by creating a New managed device or through the Task Manager using either Network Discovery Task or Range Discovery Task INFORMATION l The site s configuration can also be completed using a pre prepared file For details refer to the Offline Configuration Tool or Duplicate Site sections in the Device Manager User Manual 2 2 1 2 2 1 1 To complete the minimal configuration open the Site s Device Manager from the Equipment Manager and perform the following configuration steps HM Connectivity Configuration M Equipment Configuration GPS HM ASNGW Configuration Connectivity Configuration Connectivity ASN GW Bearer Interface Page Configure the IP parameters of the Bearer interface 1 Change the Source IP Address Subne
243. is already attached to this interface Command Syntax Privilege Level npu config if ip access group lt access list number 1 199 gt lt access list name gt 10 BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration Syntax Besctiptle Parameter Description Presence Default Possible Values n Value lt access list Indicates the number or name Mandatory N A E 1 199 number of the ACL to be attached to E String 1 199 gt this interface lt access list n ame gt Command Interface configuration mode Modes 3 3 8 3 3 Deattaching an ACL from the NPU host Virtual Interface Run the following command to de attach an ACL from the NPU host virtual interface npu config if no ip access group lt access list number 1 199 gt lt access list name gt NOTE as i e An error may occur if the ACL number name that you have specified does not exist or is already attached to this interface Command npu config if no ip access group lt access list number 1 199 gt Syntax lt access list name gt Privilege 10 Level Syntax Deschiptie Parameter Description Presence Default Possible Values n Value lt access list Indicates the number name of Mandatory N A E 1 199 number the ALL to be detached from E String 1 199 gt this inter
244. ist number 1 99 gt extended lt access list number 100 199 gt name lt string gt When you run this command the ACL configuration mode for the newly created ACL is automatically enabled If the name is not specified when creating a new ACL the default name will be the specified ACL number For example run the following command to create ACL 22 in the standard mode npu config ip access list standard 22 Standard ACL 22 will be created with the default name 22 For example run the following command to create ACL 111 in the extended mode with the name ACL 111 npu config ip access list extended 111 ACL 111 After you create an ACL or enable the ACL configuration mode you can BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration M Configure the ACL in the standard mode refer Section 3 3 8 1 2 M Configuring the ACL in the extended mode refer Section 3 3 8 1 3 NOTE An error may occur if E You specify an invalid ACL number The ACL number should be between 1 and 99 in the standard mode and between 100 and 199 in the extended mode E The ACL name you have specified is already used for another ACL or is more than 20 characters Command Syntax Privilege Level Syntax Descriptio n Command Modes npu config ip access list standard lt access list number 1 99 gt extended lt access list number 100
245. istering the unit characters Command Global configuration mode Modes 3 3 13 1 2 Displaying the Site General Information Parameters BreezeMAX Mini Centralized ASN GW System Manual To display configuration information for the site general information parameters run the following command npu show site Name Address RackLocation ContactPerson ProductType In addition to the configurable parameter see Section 3 3 13 1 1 you can also display the Product Type If you want to display configuration information for one parameter specify only the required parameter If you want to display configuration information for all dry contact alarms run the following command Command Syntax Privilege Level Display Format for all parameter s Command Modes 3 3 13 2 3 3 13 2 1 Chapter 3 Operation and Administration Using the CLI Unit Configuration npu show site npu show site Name Address RackLocation ContactPerson ProductType Name Address Rack Location Contact Person Product Type Global command mode Managing the Unique Identifier for the Unit The Site Identifier Site ID is used by the management system as identifier of the unit and must be unique in the managed network The default value 0 is not a valid Site Identifier it indicates that the Site Identifier was not configured and a valid Site Identifier must be configured A unit with Site Identifier O will not
246. istration request retransmissions after which the MS is de registered dpTimerPathRegReg The period in milliseconds with which the NPU should wait for the path registration response If a response is not received within this period the NPU retransmits the request dpCounterPathRegReqMax The maximum number of times the NPU may retransmit the path registration request dpTimerPathRegRsp The period in milliseconds within which the NPU should wait for an acknowledgement for the registration response If a response is not received within this period the NPU retransmits the response dpCounterPathRegRspMax The maximum number of times the NPU may retransmit the path response pdpTimerPathRegStart Indicates the period in milliseconds within which the path registration procedure is initiated after the path pre registration procedure is complete If the path registration procedure is not completed within the period specified by this parameter the MS is de registered dpTimerMipWaitDhcp The period in seconds for allocating the IP address after the path registration procedure is complete 3 3 9 4 Managing the Context Function The context function manages the contexts of various authenticated MSs including parameters pertaining to context creation and reports You can specify the ms capacity threshold parameter that is used to define the upper limit for the number of MSs that can be served by the ASN GW
247. ized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration Privilege 10 Level Command Service profile service flow configuration mode Modes 3 3 9 11 3 3 7 Deleting Service Flows You can at any time run the following command to delete one or all service flows npu config srvcprfl no flow lt flow id gt CAUTION Specify the flow ID if you want to delete a specific service flow Otherwise all the configured service A flows are deleted Command npu config srvcprfl no flow lt flow id gt Syntax Privilege 10 Level Command npu config srvcprfl no flow lt flow id gt Syntax Syntax pestniptio Parameter Description Presence Default Possible Values n Value lt flow id gt Denotes the flow ID of the Optional N A 0 255 service flow to be deleted If you do not specify a value for this parameter all the service flows are deleted Command Service profile configuration mode Modes 3 3 9 11 3 4 Terminating the Service Profile Configuration Mode Run the following command to terminate the service profile configuration mode BreezeMAX Mini Centralized ASN GW System Manual QO Chapter 3 Operation and Administration Using the CLI Unit Configuration npu config srvcprfl exit Command npu config srvcprfl exit Syntax Privilege 10 Level Command Service profile configuration mode Modes 3
248. ized ASN GW System Manual eo 51 Chapter 3 Operation and Administration Using the CLI Monitoring Hardware and Software Perfor Command npu show saved Performance Active alarm Log User history files Syntax recent lt 1 65535 gt Privilege 1 Level Syntax Desctiptle Parameter Description Presence Default Possible Values n Value Performance Ac_ Indicates the type of system Mandatory N A E Performance tive alarm Log files that are to be displayed E Active alarm User history E Log E User history recent Indicates the number of files to Optional N A 1 65355 lt 1 65535 gt be displayed The most recently saved files are displayed If you do not specify a value for this parameter all the files of a particular type are displayed Command Global command mode Modes To display a list of collected system logs files run the following command npu show saved system logs Command npu show saved system logs Syntax Privilege 1 Level Command Global command mode Modes BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Monitoring Hardware and Software Perfor BreezeMAX Mini Centralized ASN GW System Manual a Appendix A Software Upgrade In This Appendix M Before You Start on page 355 M Upgrading the NPU on page 356 HM Downgrading the NPU on page 363 Chapter A Soft
249. l 5 1 20 lt count 1 20 gt Global command mode sent Configuring the Virtual Interface In addition to physical and IP interfaces the system defines the NPU host virtual interface All ACLs configured for filtering traffic destined towards the unit are attached to this interfaces BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration For more information about attaching ACLs to the NPU host interface refer to the section Attaching De attaching ACLs to from the NPU host Virtual Interface on page 142 3 3 2 5 Displaying Status and Configuration Information for Physical IP and Virtual Interfaces To display the status and configuration information for physical IP and or virtual interfaces run the following command npu show interfaces lt interface type gt lt interface id gt external mgmt bearer local mgmt npu host To display the configuration information for all interfaces do not specify a value for any parameter The following table lists parameters to be specified with respect to the type of interface for which configuration information is to be displayed Table 3 13 Parameters for Displaying Configuration Information for Physical IP and Virtual Interfaces Interface Parameters Example All Interfaces None npu show interfaces Physical Interfaces Fast Ethernet npu show interfaces
250. lege 1 Level Command Global command mode Modes 3 3 9 10 10 3 4Displaying the Details of entries in a MAC Addresses Table To display the content of a MAC Address table run the following commana npu show vpls mac entries grp alias lt grp alias gt ms id lt string gt BreezeMAX Mini Centralized ASN GW System Manual amp OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration Command npu show vpls mac entries grp alias lt grp alias gt ms id lt string gt Syntax Privilege 1 Level Syntax Bescon Parameter Description Presence Default Possible Values Value grp alias lt grp alias gt Denotes the group alias for Mandatory N A String which the MAC Address to be displayed ms id lt string gt Denotes the MS ID for which Mandatory N A String the MAC Address to be displayed Command Global command mode Modes For each entry in the specified entry the following details will be displayed E MAC Address E Port M Service Group VLAN ID M Service Group ID 3 3 9 10 10 4 Cleaning the MAC Address Tables To clear the MAC Addresses table of one or all VPLS Service Groups run the following command npu config vpls flush fdb grp alias lt string gt Command npu config vpls flush fdb grp alias lt string gt Syntax Privilege 10 Level BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configu
251. les Configuring the DHCP Server Updated default value of Opt60 Section 3 3 9 10 4 2 Privilege Levels Improved Section 3 1 4 5 Managing Users and Privileges Corrected and improved Section 3 1 5 Terminating the Session New section Section 3 1 7 3 BreezeMAX Mini Centralized ASN GW System Manual Oe Legal Rights Legal Rights Copyright 2011 Alvarion Ltd All rights reserved The material contained herein is proprietary privileged and confidential and owned by Alvarion or its third party licensors No disclosure thereof shall be made to third parties without the express written permission of Alvarion Ltd Alvarion Ltd reserves the right to alter the equipment specifications and descriptions in this publication without prior notice No part of this publication shall be deemed to be part of any contract or warranty unless specifically incorporated by reference into such contract or warranty Trade Names Alvarion BreezeCOM WALKair WALKnet BreezeNET BreezeACCESS BreezeMAX BreezeLITE 4Motion and or other products and or services referenced here in are either registered trademarks trademarks or service marks of Alvarion Ltd All other names are or may be the trademarks of their respective owners WiMAX Forum is a registered trademark of the WiMAX Forum WiMAX the WiMAX Forum logo WiMAX Forum Certified and the WiMAX Forum Certified logo are tradema
252. les configuration mode refer to Section 3 3 9 7 4 In addition you can at any time display configuration information refer to Section 3 3 9 7 6 or delete an existing bearer plane QoS marking rule refer to Section 3 3 9 7 5 BreezeMAX Mini Centralized ASN GW System Manual 3 3 9 7 1 Chapter 3 Operation and Administration Using the CLI Unit Configuration Enabling the Bearer Plane QoS Marking Rule Configuration Mode Creating a Bearer Plane QoS Marking Rule To configure the parameters for the bearer plane QoS marking rules first enable the bearer plane QoS marking rule configuration mode Run the following command to enable the bearer plane QoS marking rules configuration mode You can also use this command to create and enable the configuration mode for a new bearer plane QoS marking rule npu config bearergos lt qos alias gt lt intf type 1 lt R3 gt 0 lt R6 gt 255 lt ANY gt gt lt srvce type 0 lt UGS gt 1 lt RTVR gt 2 lt NRTVR gt 3 lt BE gt 4 lt ERTVR gt 255 lt ANY gt gt lt trfc priority 0 7 255 gt lt media type gt INFORMATION You can display configuration information for the bearer plane QoS marking rules For details refer to Section 3 3 9 7 6 An error may occur if you provide an invalid value for any of these parameters Refer the syntax description for more information about the appropriate values and format for configuring these parameters
253. les with an ACL 3 3 8 1 3 1 1 This section describes the commands to be used for HM Creating a Permit Deny Rule for Specific Protocols IP Addresses Extended Mode on page 123 M Deleting a Permit Deny Rule for Specific Protocols IP Addresses Extended Mode on page 126 Creating a Permit Deny Rule for Specific Protocols IP Addresses Extended Mode You can create the Permit or Deny rule for traffic from to a source destination IP address subnet with respect to the following protocols E P E OSPF HM Protocol Independent Multicast PIM E Any other protocol Run the following commands to create the Permit Deny rule for traffic from and to a specific IP address subnet for a particular protocol npu config ext nacl permit ip ospf pim lt protocol type 1 255 gt any host lt src ip address gt lt src ip address gt lt mask gt any host lt dest ip address gt lt dest ip address gt lt mask gt npu config ext nacl deny ip ospf pim lt protocol type 1 255 gt any host lt src ip address gt lt src ip address gt lt mask gt any host lt dest ip address gt lt dest ip address gt lt mask gt In the above commands it is mandatory to specify the protocol and source IP address for which the Permit Deny rule is to be created If you do not specify the destination IP address subnet mask by default traffic to all destination IP addresses is permitted denied The
254. leting Filter Rules Run the following command to delete a filter rule of the profile npu config hotlinig profile no filter rule lt filter rule name gt Command __ npu config hotlinig profile no no filter rule lt filter rule name gt Syntax Privilege 10 Level Syntax Descriptio Parameter Description Presence Default Possible Values n Value lt filter rule n Denotes the rule name of the Mandatory N A String ame gt filter rule that you want to delete Command hotlining profile configuration mode Modes 3 3 9 13 2 6 Terminating the Profile Configuration Mode Run the following command to terminate the profile configuration mode npu config hotlinig profile exit Command __ npu config hotlinig profile exit Syntax Privilege 10 Level Command hotlining profile configuration mode Modes BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration 3 3 9 13 3 Deleting Hot Lining Profiles Run the following command to delete a profile npu config no hotlining profile lt profilename gt Command npu config no hotlining profile lt profilename gt Syntax Privilege 10 Level Syntax Deschipto Parameter Description Presence Default Possible Values n Value lt profilename gt Denotes the profile name of Mandatory N A String the profile that you want to delete Command hotlining prof
255. link frames on page 233 Handling of uplink frames on page 233 BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration M Displaying MAC Address Tables Information on page 234 M Cleaning the MAC Address Tables on page 236 3 3 9 10 10 1 Handling of downlink frames If a frame is received via the VPLS trunk port 1 The ASN GW shall identify the VPLS instance which is bound with this trunk port and perform ingress VLAN ID translation if required see Table 3 22 2 If the value of Destination MAC address has the multicast bit set the ASN GW shall forward the frame to the Multicast port of the VPLS instance Otherwise the ASN GW shall proceed to the next step 3 The ASN GW shall check whether the Destination MAC address of the received frame appears in the MAC Address table of the VPLS instance a If the Destination address appears in the MAC Address table of the VPLS instance the ASN GW shall forward the frame via that egress port which means that the frame shall be checked against the classification rules that are associated with all the DL Service Flows included in the MS specific port of this VPLS instance b If the value of Destination MAC address is not found in the MAC Address table of the VPLS instance the ASN GW shall discard the frame i e Frame Flooding is always disabled 3 3 9 10 10 2 Handling of uplink frames If a frame is re
256. ll such equipment must be installed and handled in full compliance with the instructions provided by such manufacturers as attached to this manual or provided thereafter by Alvarion or the manufacturers Non compliance with such instructions may result in serious damage and or bodily harm and or void the user s authority to operate the equipment and or revoke the warranty provided by such manufacturer BreezeMAX Mini Centralized ASN GW System Manual Q About This Manual About This Manual This manual describes the Mini Centralized ASN GW and details how to operate and manage it This manual is intended for technicians responsible for setting and operating the Mini Centralized ASN GW equipment and for system administrators responsible for managing the system For details on installing the equipment refer to the relevant Installation Manual This manual contains the following chapters and appendices Chapter 1 System description Describes the Mini Centralized ASN GW and its functionality Chapter 2 Commissioning Describes how to configure basic parameters and validate units operation Chapter 3 Operation and Administration Using the CLI Describes how to use the Command Line Interface CLI for configuring parameters checking system status and monitoring performance Appendix A Software Upgrade Describes how to load new software files using TFTP and how to switch to a new software version BreezeMAX Mini Cent
257. lobal command mode Displaying the Privilege Level To display your current privilege level run the following command npu show privilege npu show privilege Current privilege level is lt value gt Global command mode Managing Secure Shell SSH Parameters The SSH parameters define the parameters used for establishing remote secure access to the device using SSH protocol rather than the plaintext based insecure Telnet protocol BreezeMAX Mini Centralized ASN GW System Manual Q Chapter 3 Operation and Administration Using the CLI This section includes M Configuring SSH Parameters on page 41 Using the Command Line Interface CLI M Restoring the Default Values of SSH Parameters on page 42 M Displaying the SSH Parameters on page 42 3 1 6 1 Configuring SSH Parameters To configure SSH parameters run the following command npu config ip ssh version compatibility cipher des cbc 3des chbc auth hmac md5 hmac shal Command npu config ip ssh version compatibility cipher des cbc 3des cbc Syntax auth hmac md5 hmac shal Privilege 10 Level Syntax Descnipue Parameter Description Presence Default Possible Values n Value version The SSH version that can be Optional SSH2 version compatibility used The default is SSH version compatibility 2 Run the command npu config ip ssh version compatibility to enable compati
258. lood packets among different pseudowires at the hub PE router Each of the VPLS Service Groups is associated with a separate VPLS Trunk service interface BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration NOTE i o You can configure up to 80 different service groups However the total number of IP and VPWS Transparent QinQ Mapped service groups is limited to a maximum of 10 service groups Each of the IP Service Groups is E Associated with a separate service IP or VLAN service interface E Configured as any one of the following DHCP server that allocates an IP address to the MS from the local pool in the non HA mode DHCP relay that obtains the IP address using an external DHCP server in the non HA mode DHCP proxy for either of the following boot modes Non HA mode The DHCP proxy assigns the MS the IP address that was received from AAA in the MS profile in FRAMED IP attribute or R3 Descriptors or HA mode The DHCP proxy assigns the MS the IP address received in the MS profile or obtains the IP address from HA using the mobile IP gt To configure a service group 1 Enable the service group configuration mode refer to Section 3 3 9 10 1 2 You can now execute any of the following tasks Configure the common parameters of an IP service group refer to Section 3 3 9 10 2 Enable Disable the VLAN Int
259. ls M Packet header suppression functionality M DHCP functionality M Handover functionality The WIMAX Forum NWG has adopted two different approaches for ASN architecture centralized and distributed In the centralized approach there is at least one central ASN GW and the NPU operates in transparent mode as shown in Figure 1 3 Router NPU transparent mode lagu WG Dy AU BS BTS BTS BTS BTS BTS BTS Eml Figure 1 3 Centralized Network Reference Model In the distributed approach the NPU Network Processing Unit of the BTS operates in ASN GW mode as shown in Figure 1 4 BreezeMAX Mini Centralized ASN GW System Manual Chapter 1 System Description WiMAX Network Reference Model fF gt C internet NPU ASN GW mode AU BS m E E Figure 1 4 Distributed Network Reference Model Alvarion believes in providing operators with the flexibility to select the mobile WiMAX network topology that best suits their needs and existing network architecture Therefore its WiMAX solutions are designed to support both distributed and centralized topology approaches according to WiMAX Forum NWG profile C 1 2 7 Reference Points E Reference point R1 consists of the protocols and procedures between the MS and ASN as per the air interface PHY and MAC specifications IEEE 802 16e E Reference point R2 consists of protocols and procedures between the MS and CSN associated with authentication services autho
260. m Interval in Access Accept interim updates should be deactivated acctInterimTm Applicable only if acct see Optional 5 Eo r above mode is set to time The E 5 1600 lt integer 0 5 1 default interval in minutes for 600 gt Accounting Interim reports to be used if Acct Interim Interval is not received from the AAA server Value 0 means interim reports are deactivated unless Acct Interim Interval is sent by the AAA server in Access Accept messages Command VPWS Mapped Service group configuration mode Modes BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration 3 3 9 10 7 2 Configuring the VID Map Range Parameters of a VPWS Mapped Service Group run the following commands to configure the vid map range parameters for the service group To configure the start vlan id run the command npu config srvcegrp VPWS Mapped config vid map range start vlan id lt size 1 4094 gt To configure the end vlan id run the command npu config srvcgrp VPWS Mapped config vid map range end vlan id lt size 1 4094 gt NOTE When creating a new VPWS Mapped service group both start vlan id and end vian id must be defined Q INFORMATION j You can display configuration information for the service group For details refer to Section 3 3 9 11 2 Command npu config srvcgrp VPWS Mapped config vid map range st
261. mands for HM Saving the Current Configuration on page 80 HM Downloading a Configuration File Vendor Startup File from an External Server on page 81 HM Displaying the Status of the last File Download Operations on page 82 HM Making a Backup Restoring the Configuration File on page 83 Saving the Current Configuration When you reset the system it always boots up using the last saved configuration If you are starting the unit for the first time after installation and commissioning it boots up using the factory default configuration Thereafter any changes to configuration made at runtime using the CLI should be saved all unsaved changes are lost after system reset NOTE You can at any time revert to the factory default configuration For more information about restoring factory default configuration refer to Section 3 3 3 4 6 If you do not save configuration after first time start up of the unit it boots up with the factory default configuration the next time the system is reset BreezeMAX Mini Centralized ASN GW System Manual 20 Chapter 3 Operation and Administration Using the CLI Unit Configuration Run the following command to save the current configuration npu write The next time you reset the system it boots up with the last saved configuration NOTE It is recommended that you save the current configuration before shutting down or resetting the system The last saved
262. mation for a particular rule Do not specify a value for this parameter if you want to view configuration information for all classification rules NOTE An error may occur if you provide an invalid value for the rulename parameter Refer the syntax description for more information about the appropriate values and format for configuring this parameters Command npu show clsf rule lt rulename gt Syntax Privilege 1 Level Syntax Descriptio Parameter Description Presence Default Possible Values a Value lt rulename gt Denotes the name of the Optional N A String classification rule that you want to display Specify this parameter only if you want to display a specific classification rule If you do not specify a rule name it displays all configured classification rules BreezeMAX Mini Centralized ASN GW System Manual OQ Display Format for each L3 rule Display Format for each L2 rule Command Modes Chapter 3 Operation and Administration Using the CLI Unit Configuration Classification Rule Configuration lsfRulename lt value gt clsfRuleType L3 Priority lt value gt Phs rulename lt value gt IpTosLow lt value gt IpTosHigh lt value gt IpTosMask lt value gt IpTosEnable lt 0 1 gt clsfRuleSrcAddr lt value gt clsfRuleMask lt value gt SrcAddrEnable lt 0 1 gt clsfRuleDstAddr lt value gt clsfRuleAddrMask lt val
263. ment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at the user s own expense R amp TTE Compliance Statement BreezeMAX Mini Centralized ASN GW System Manual amp B Legal Rights This equipment complies with the appropriate essential requirements of Article 3 of the R amp TTE Directive 1999 5 EC Lithium Battery The battery on the NPU card is not intended for replacement Caution To avoid electrical shock do not perform any servicing unless you are qualified to do so Line Voltage Before connecting this instrument to the power line make sure that the voltage of the power source matches the requirements of the instrument Disposal of Electronic and Electrical Waste T Disposal of Electronic and Electrical Waste Pursuant to the WEEE EU Directive electronic and electrical waste must not be disposed of with unsorted waste m Please contact your local recycling authority for disposal of this product BreezeMAX Mini Centralized ASN GW System Manual O Important Notice Important Notice This user manual is delivered subject to the following conditions and restrictions This manual contains proprietary information belonging to Alvarion Ltd Such information is supplied solely for the purpose of assisting properly authorized users of the respective Alvarion products E No part of its contents may be used for any other purpose
264. mit any lt network src ip gt lt mask gt any lt network dest ip gt lt mask gt npu config std nacl deny any lt network src ip gt lt mask gt any lt network dest ip gt lt mask gt BreezeMAX Mini Centralized ASN GW System Manual host lt src ip address gt host lt dest ip address gt host lt src ip address gt host lt dest ip address gt Chapter 3 Operation and Administration Using the CLI Unit Configuration Syntax Besctipte Parameter Description Presence Default Possible Values n Value any host Indicates the source IP Mandatory N A For details refer lt src ip addres address subnet for which Table 3 18 s gt incoming traffic is lt network src i permitted denied p gt lt mask gt any host Indicates the destination IP Optional any For details refer lt dest ip addre address subnet for which traffic Table 3 18 ss gt is permitted denied lt network dest ip gt lt mask gt Command Standard ACL configuration mode Modes 3 3 8 1 2 2 Deleting a Permit Deny Rule Standard Mode Run the following commands to delete the Permit Deny rule for incoming traffic from to a specific IP address subnet npu config std nacl no permit any host lt src ip address gt lt network src ip gt lt mask gt any host lt dest ip address gt lt network dest ip gt lt mask gt npu confi
265. mit Deny Rule Standard Mode on page 119 HM Deleting a Permit Deny Rule Standard Mode on page 121 NOTE After you have configured the rules to be applied on an ACL you can attach the ACL to the NPU host interface The ACL enables filtering of traffic destined to this interface For more information refer to ll Section 3 3 8 3 3 3 8 1 2 1 Creating a Permit Deny Rule Standard Mode Run the following commands to create the Permit Deny rules for forwarding traffic from to a particular source destination IP address npu config std nacl permit any host lt src ip address gt lt network src ip gt lt mask gt any host lt dest ip address gt lt network dest ip gt lt mask gt npu config std nacl deny any host lt src ip address gt lt network src ip gt lt mask gt any host lt dest ip address gt lt network dest ip gt lt mask gt NOTE In the above commands it is mandatory to specify the source IP address for which the Permit Deny rule e is to be created If you do not specify the destination IP address subnet mask by default traffic to all destination IP addresses configured for the NPU is permitted denied The following table lists the parameters and their descriptions in these commands BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration Table 3 18 Parameters for Configuring Pe
266. mmands to be executed for mM Adding an SNMP Manager on page 324 M Deleting an Entry for the SNMP Manager on page 325 H Displaying Configuration Information for SNMP Managers on page 326 INFORMATION An existing SNMP Manager entry cannot be modify To modify the parameters of an SNMP Manager p delete the entry and add a new entry with the required parameters 3 3 12 1 1 Adding an SNMP Manager You can configure upto five SNMP Managers To add an SNMP Manager run the following command npu config snmp mgr ReadCommunity lt string gt ReadWriteCommunity lt string gt You can display configuration information for existing SNMP Managers For details refer Section 3 3 12 1 3 NOTE An error may occur if you have specified Q E More than five entries for the SNMP Manager Duplicate entries an snmp mgr entry is uniquely identified by values for ReadCommunity and WriteCommunity BreezeMAX Mini Centralized ASN GW System Manual e Chapter 3 Operation and Administration Using the CLI Unit Configuration Command npu config snmp mgr ReadCommunity lt string gt ReadWriteCommunity Syntax lt string gt Privilege 10 Level Syntax Desctiptle Parameter Description Presence Default Possible Values n Value ReadCommunity The SNMP Read Community Optional public String up to 10 lt string gt string allowing execution of characters and SNMP Get operations case sensitive
267. mode Modes 3 3 6 2 3 Deleting a QoS Classification Rule NOTE The default pre configured QoS classification rules cannot be deleted or modified You can delete a Qos classification rule only if the associated ACL is INACTIVE For more information refer Section 3 3 8 3 To delete a Qos classification rule for an ACL run the following command npu config ext nacl no qos mark host lt src ip address gt srcport lt short When you execute this command the Qos classification rule is deleted from the ACL 1 65535 gt qosclassifier lt short BreezeMAX Mini Centralized ASN GW System Manual 1 65535 gt tcp udp Chapter 3 Operation and Administration Using the CLI Unit Configuration NOTE An error may occur if you specify a combination of parameters that do not match any of the existing QoS classification rules Command npu config ext nacl no gos mark host lt src ip address gt tep udp Syntax sreport lt short 1 65535 gt qosclassifier lt short 1 65535 gt Privilege 10 Level Syntax Deschiptie Parameter Description Presence Default Possible Values n Value host Indicates the IP address of the Mandatory N A Valid IP address lt src ip addres host interface that generates assigned to the s gt the traffic for which this external manag classification rule is to be ement or bearer deleted IP interface tcp udp Indi
268. moving parts of the packet header that remain constant along the traffic session PHS operates by allowing the MS and ASN GW to associate PHS rules to each service flow When PHS is enabled a repetitive portion of the payload headers of higher layers is suppressed in the MAC SDU by the sending entity and restored by the receiving entity At the uplink the sending entity is the MS and the receiving entity is the NPU At the downlink the sending entity is the NPU and the receiving entity is the MS If PHS is enabled at the MAC connection each MAC SDU is prefixed with a PHSI which references the Payload Header Suppression Field PHSF For instance the ASN GW will associate a PHS rule to each provisioned service flow intended for VoIP traffic that will suppress the IP address field from the IP header and other unvarying fields e g protocol version from the IP and RTP headers The PHS rules are provisioned on a per service profile name basis For details refer Section 3 3 9 11 4 PHS rules define M Header fields that need to be suppressed M Static values that can be configured for the suppressed header fields _ To configure one or more PHS rules 1 Enable the PHS rules configuration mode refer to Section 3 3 9 12 1 2 Configure the parameters for the PHS rule refer to Section 3 3 9 12 2 3 Terminate the PHS rules configuration mode refer to Section 3 3 9 12 3 BreezeMAX Mini Centralized ASN GW System Manual 3
269. mp mgr Snmp Manager Table Manager Index 1 Read Only Community lt value gt Read WriteCommunity lt value gt Global command mode Configuring the Trap Manager The SNMP Agent can send traps to multiple Trap Managers for which an entry exists in the system After you have created an entry for a Trap Manager you are required to enable the Trap Manager You can at any time disable a Trap Manager for the system BreezeMAX Mini Centralized ASN GW System Manual amp eo Chapter 3 Operation and Administration Using the CLI Unit Configuration NOTE It is highly recommended to add delete Trap Managers or modify the Trap Manager s IP address via AlvariSTAR AlvariCRAFT The management system supports automatic creation of IP routes for the Trap Managers provided proper configuration procedure is being followed This section describes the commands for E Adding Modifying a Trap Manager Entry on page 327 M Deleting an Entry for the Trap Manager on page 328 E Enabling Disabling the Trap Manager on page 329 MH Displaying Configuration Information for Trap Managers on page 330 Displaying the Trap Rate Limit on page 330 3 3 12 2 1 Adding Modifying a Trap Manager Entry You can configure up to five Trap Manager entries for the system To add a Trap Manager entry or to modify an existing entry run the following command npu config trap mgr ip source lt ip_addr gt Port l
270. must be defined If a dedicated management station for CPEs is being used a suitable Service Interface for management must also be defined A Service Interface must be defined before configuring a Service Group associated with it BreezeMAX Mini Centralized ASN GW System Manual OQ 19 Chapter 2 Commissioning Completing the Configuration Using AlvariSTAR 1 Click on the Add Service Interface button and configure the following mandatory parameters Service Interface Name Type Tunnel Destination IP IP in IP Service Interface Service VLAN ID VLAN or QinQ Service Interface Default Gateway IP Address VLAN Service Interface 2 Click Apply for the device to accept the configuration 2 2 3 2 2 Service Groups Tab At least one Service Group associated with a defined Service Interface for data must be defined If a dedicated management station for CPEs is being used a suitable Service Group associated with the defined Service Interface for management must also be defined 1 Click on the Add Service Group button and configure at least the following mandatory parameters Name Type Service Interface Name DHCP Function Mode DHCP Own IP Address External DHCP Server IP Address Relay mode IP Address Pool From Server mode IP Address Pool To Server mode Subnet Mask Server mode DNS Server IP Address Proxy mode 2 Click Apply for the device to accept the configuration 2
271. n Command npu config clsfrule no dstport lt start port gt lt end port gt Syntax Privilege 10 Level Syntax Descriptio Parameter Description Presence Default Possible Values a Value lt start port gt Denotes the starting value of Optional N A 1 65535 port range to be deleted lt end port gt Denotes the end value of port Optional N A 1 65535 range to be deleted Command L3 Classification rules configuration mode Modes 3 3 9 11 4 9 Terminating the L3 Classification Rule Configuration Mode Run the following command to terminate the L3 classification rules configuration mode npu config clsfrule exit Command npu config clsfrule exit Syntax Command L3 Classification rules configuration mode Modes 3 3 9 11 4 10 Specifying Configuration Parameters for the L2 Classification Rule After enabling the classification rules configuration mode for an L2 classification rule run the following command to configure the parameters for this classification rule npu config clsfrule L2 cvid lt value 1 4094 gt INFORMATION You can display configuration information for specific or all classification rules For details refer to p Section 3 3 9 11 4 13 BreezeMAX Mini Centralized ASN GW System Manual e Chapter 3 Operation and Administration Using the CLI Unit Configuration Command npu config clsfrule L2 cvid lt value 1 4094 gt Syntax Privil
272. n 3 3 9 11 3 3 4 After you have executed these tasks you can terminate the service flow configuration mode and return to the service profile configuration mode refer to Section 3 3 9 11 3 3 6 Command npu config srveprfl flow lt flow id 1 255 grp alias lt srvc grp alias gt Syntax if alias lt string gt Privilege 10 Level BreezeMAX Mini Centralized ASN GW System Manual eo 243 Syntax Descriptio n Chapter 3 Operation and Administration Using the CLI Unit Configuration Parameter Description Presence Default Value Possible Values flow lt flow id 1 255 Denotes the flow ID of the service flow for which the service flow configuration mode is to be enabled If you are creating a new service flow specify the service flow ID of the new service flow The configuration mode is automatically enabled for the new service flow Mandatory N A 1 255 grp alias lt srvc grp alia s gt Indicates the Reference Name for an existing IP or VPWS service group to be used by the service flow VPWS Service Groups are applicable only for VLAN CS Service Flows of the Default Service Profile IP Service Groups are applicable only for IP CS Service Flows VPLS Service Groups are not applicable VPLS Service Profiles and their components can be defined only by an external AAA server Mandatory when creating a new flow N A An existing Service Group Alias
273. n and Administration Using the CLI Unit Configuration Privilege 10 Level Command Service group DHCP relay configuration mode Modes 3 3 9 10 5 Configuring the Parameters of a VPWS Transparent Service Group After enabling the service group configuration mode for a VPWS Transparent service group run the following command to configure the accounting parameters for the service group npu config srvcgrp VPWS config acct none time acctInterimTmr lt integer 0 5 1600 gt INFORMATION You can display configuration information for the service group For details refer to Section 3 3 9 11 2 Command npu config srvcgrp config acct none time acctInterimTmr Syntax lt integer 0 5 1600 gt Privilege 10 Level Syntax Descriptio n Parameter Description Presence Default Possible Values Value BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration acct The Accounting mode for the Optional time E none none time service interface E time none No accounting support time The ASN GW send RADIUS Accounting Start Stop Requests The ASN GW shall also send Interim Accounting requests to AAA server using RADIUS Accounting Interim messages on a preconfigured or negotiated interval AAA server can send negotiated time interval in Access Accept message If ASN GW defined value see acctInterimTmr below
274. n and Storage of Historical Performance Data on page 322 HM Disabling Collection and Storage of Performance Data on page 322 HM Displaying the Status of Performance Data Collection on page 323 BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration 3 3 11 1 Enabling Collection and Storage of Historical Performance Data The unit collects and stores performance data for the a number of system groups refer to Section 3 3 11 To enable collection and storage of performance data for a group run the following command To enable collection and storage of performance data for a counters group npu config pm group enable npu BckhlPort CascPort ExtMgmtIf BearerIf f AaaClient R6InterfaceTotal R6InterfaceBs ProvisionedQOs R3Interface InitialNe INFORMATION Using this command you can enable collection of performance data for only one group at a time For example run the following command if you want to enable performance data collection and storage for the Data Backhaul Port npu config pm group enable npu BckhlPort You can display whether performance data collection is currently enabled or disabled for a particular group For details refer to Section 3 3 11 3 INFORMATION When you enable collection of performance data collection the data is stored in a file called prf_ lt SitelD gt _yyyymmddhhmm xml g
275. n ms capacity threshold to 3000 Section 3 3 9 4 1 Configuring Parameters for VLAN Updated configuration rules for vlan id Service Interface Section 3 3 9 8 2 2 Configuring Parameter for QinQ Updated configuration rules for vian id Service Interface Section 3 3 9 8 2 3 Configuring Modifying the VLAN Updated configuration rules for VLAN IDs ID for an IP Interface of IP interfaces Section 3 3 2 3 5 Configuring DHCP Server Updated default value and improved Parameters description for opt60 Section 3 3 9 10 4 2 1 Specifying DHCP Proxy Configuration Parameters Section 3 3 9 10 4 3 1 Configuring Service Flows Updated configuration rules for grp alias Section 3 3 9 11 3 3 Configuring Uplink Downlink Updated configuration rules for rulename Classification Rule Names Section 3 3 9 11 3 3 4 Specifying the port speed The default for all ports including Data Section 3 3 2 1 2 4 and CSCD ports is 100 Mbps Configuring the Local Switching Added parameter September 2011 Parameter of a VPLS Service Group Section 3 3 9 10 8 4 BreezeMAX Mini Centralized ASN GW System Manual Document History Topic Description Date Issued Handling Traffic in a VPLS Hub and New section that provides details on September 2011 Spoke Service Group handling uplink downlink traffic in VPLS Section 3 3 9 10 10 Hub and Spoke services and describes how to view relevant MAC Address tables information and how to clear these tab
276. n page 159 E E E E M Configuring PHS Rules on page 286 a Managing the ASN GW Keep Alive Functionality on page 305 3 3 9 1 Managing the ASN Interface The ASN interface is the interface that is exposed towards the BS or another ASN gateway For the current release the bearer interface IP address is used as the value of the ip int parameter ASN Interface parameters can be configured only by the vendor To display the parameters of the IP interface R4 R6 of the ASN interface run the following command npu show asnif Command npu show asnif Syntax BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Privilege 1 Level Display Format Asn gateway ASNIF config Alias bearer ASNIF IPAddr lt value gt ASNIF Mtu lt value gt Command Global command mode Modes 3 3 9 2 Managing the Authenticator Function The Authenticator function manages MS authentication for accessing WiMAX network resources It also maintains context information for each MS that has accessed or is trying to access the network For this it handles all key derivations and distribution In addition it uses AAA client functions to send RADIUS messages on the R3 interface Authenticator function parameters can be configured only by the vendor To display configuration information for the Authenticator function run the following commana npu show
277. name gt xml configuration file to be gz downloaded using the TFTP server The file to be downloaded should be a compressed xml file in the format is lt name gt xml gz Command Global command mode Modes 3 3 3 3 Displaying the Status of the last File Download Operations To display the status of the last file download operations run the following command npu show file download status BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Command npu show file download status Syntax Privilege 10 Level Display The status of File Download operation for Operator file is lt status gt Format The status of File Download operation for Vendor file is lt status gt Command Global command mode Modes 3 3 3 4 Making a Backup Restoring the Configuration File You can make a backup of the current system configuration You can either manually make a backup or configure the system to automatically make a daily backup of the current configuration You can at any time restore configuration from the backup configuration file or revert to the factory default configuration INFORMATION The system makes a backup automatic daily backups or manual backup of the current configuration The backup files are stored in the path tftpboot management configuration The naming convention used for the backup co
278. nate the service flow configuration mode and return to the service profile configuration mode refer to Section 3 3 9 11 3 3 6 BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Command npu config srveprf1l flow no ulclsf rulename lt num_of_rulenames 1 6 gt Syntax lt rulename gt lt rulename gt npu config srvcprf1l flow no dlclsf rulename lt num_of_rulenames 1 6 gt lt rulename gt lt rulename gt Privilege 10 Level Syntax Descriptio Parameter Description Presence Default Possible Values n Value lt num_of_rulen Indicates the number of Mandatory N A 1 6 ames 1 6 gt uplink downlink classification rules to be deleted lt rulename gt Indicates the name of the Mandatory N A Valid uplink downlink classification classification rule to be deleted from to this rule name service flow Use the classification rule name to reference the appropriate classification rule The number of rule name entries must match the number defined in num_of_rule_names Command Service profile service flow configuration mode Modes 3 3 9 11 3 3 6 Terminating the Service Flow Configuration Mode Run the following command to terminate the service flow configuration mode npu config srvcprf1l flow exit Command npu config srveprf1 flow exit Syntax BreezeMAX Mini Central
279. nce Model Access Service Network ASN An ASN is defined as a complete set of network functions needed to provide radio access to a WiMAX subscriber The ASN provides the following mandatory functions M WiMAX Layer 2 L2 connectivity with WiMAX mobile station MS E Transfer of AAA messages to the WiMAX subscriber s home network service provider H NSP for authentication authorization and session accounting for subscriber sessions Network discovery and selection of the WiMAX subscriber s preferred NSP Relay functionality for establishing Layer 3 L3 connectivity with a WiMAX MS i e IP address allocation M Radio resource management M ASN CSN tunneling E ASN anchored mobility An ASN is comprised of network elements such as one or more base transceiver stations and one or more ASN gateways An ASN may be shared by more than one connectivity service network CSN Connectivity Service Network CSN A CSN is defined as a set of network functions that provide IP connectivity services to WiMAX subscribers A CSN may offer the following functions M MS IP address and endpoint parameter allocation for user sessions Internet access AAA proxy or server Policy and admission control based on user subscription profiles ASN CSN tunneling support WiMAX subscriber billing and inter operator settlement WiMAX services such as location based services connectivity for peer to peer services provisioning authorization and or connectivi
280. nd equipment companies The WiMAX Forum s charter is to promote and certify the compatibility and interoperability of broadband wireless access equipment that conforms to the Institute for Electrical and Electronics Engineers IEEE 802 16 and ETSI HiperMAN standards The ultimate goal of the WiMAX Forum is to accelerate the introduction of cost effective broadband wireless access services into the marketplace Standards based interoperable solutions enable economies of scale that in turn drive price and performance levels unachievable by proprietary approaches making WiMAX Forum Certified products BreezeMAX Mini Centralized ASN GW System Manual amp Chapter 1 System Description WiMAX Network Reference Model 1 2 WiMAX Network Reference Model Figure 1 2 show the basic mobile WiMAX network architecture with a single ASN GW and with multiple ASN GWs as defined by the WiMAX Forum NWG a Visited NSP Home NSP ASP Network or ASP Network or Internet Internet Figure 1 1 Mobile WiMAX Network Reference Model Another ASN NAP ASN 1 Gateway Decision amp Enforcement Points ASN n Gateway Decision amp Enforcement Points Figure 1 2 ASN Reference Model containing Multiple ASN GWs The various components and entities involved in the networking architecture are BreezeMAX Mini Centralized ASN GW System Manual amp 1 2 1 1 2 2 1 2 3 Chapter 1 System Description WiMAX Network Refere
281. nd Global command mode Modes 3 3 2 1 4 Terminating the Interface Configuration Mode To terminate the interface configuration mode run the following command npu config if exit Command npu config if exit Syntax Privilege 10 Level Command Interface configuration mode Modes BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration 3 3 2 1 5 Displaying VLAN Membership Information Run the following command to display Ethernet interfaces that are members of a particular or all VLAN npu show vlan id lt vlan id 11 4094 gt Do not specify the VLAN ID if you want to view membership information for all VLANs Command npu show vlan id lt vlan id 11 4094 gt Syntax Privilege 1 Level Syntax Descriptio Parameter Description Presence Default Possible Values n Value id Indicates the VLAN ID for Mandatory N A 11 4096 lt vlan id 11 40 which membership information 94 gt is to be displayed Do not specify any value for this parameter if you want to view VLAN membership information for all VLANS Display Vlan Name Ports Format a a lt VLAN ID lt gt VLAN Name gt lt member ports gt lt VLAN ID lt gt VLAN Name gt lt member ports gt Command Global command mode Modes 3 3 2 1 6 Displaying VLAN Configuration Information for Physical Interfaces To display the configuration information for a VLAN that is bound to a p
282. nd accounting mistakes The keep alive mechanism should be used to clear MS context from all network entities when it is de attached from the BS and de register MS from the network when its context becomes unavailable in one of its serving function locations When the keep alive mechanism is enabled the ASN GW periodically polls other ASN entities of interest BSs and waits for their responses In case of no keep alive response the ASN GW shall make further actions such as clearing the applicable MS s context The ASN GW builds a list of BS of interest which it must poll The list shall be dynamically updated the ASN GW tracks all BSID s in all MS s contexts it holds and dynamically updates the list of BSs of interest When a new MS is attached to a BS that does not exist in the list it will be added it to the list When the last MS s with specific BSID makes network exit the ASN GW shall remove the BS from the list if there is no other MS attached The ASN GW periodically polls the BS s for keep alive The polling mechanism is independent and unrelated for every BS of interest the ASN GW polls BreezeMAX Mini Centralized ASN GW System Manual e Chapter 3 Operation and Administration Using the CLI Unit Configuration The keep alive mechanism uses configurable retry timer and retries counter Upon expiration of the retry timer the ASN GW resends the ASN Keep Alive request message Upon expiration of the retries counter t
283. nd port gt 10 BreezeMAX Mini Centralized ASN GW System Manual eo Chapter 3 Operation and Administration Using the CLI Unit Configuration Syntax pescnptio Parameter Description Presence Default Possible Values j Value lt start port gt Denotes the starting value of Mandatory N A 1 65535 port range to be configured Cannot be higher than end port lt end port gt Denotes the end value of port Mandatory N A 1 65535 range to be configured Cannot be lower than start port Command L3 Classification rules configuration mode Modes 3 3 9 11 4 8 2 Enabling the Destination Port Range You can run the following command to enable the destination port range npu config clsfrule dstport port enable You can also run this command to enable a destination port range that is currently disabled For details refer to Disabling the Destination Port Range on page 280 NOTE If destination port range is enabled then Q IP protocol protocol enable is set to enabled l Protocol can be either 6 TCP or 17 UDP For details on these parameters refer to Section 3 3 9 11 4 4 2 Command npu config clsfrule dstport port enable Syntax Privilege 10 Level Command L3 Classification rules destination port configuration mode Modes 3 3 9 11 4 8 3 Disabling the Destination Port Range You can run the following command to disable the destination port range that is curren
284. nes the VLAN ID s to be added removed by the ASN GW to from the applicable traffic The VPLS Trunk Service Interface is applicable only for supporting Service Flows associated with a VPLS Service Group NOTE You can configure up to 80 different service interfaces However the total number of IP IP VLAN and QinQ service interfaces is limited to a maximum of 10 service interfaces 3 3 9 8 1 To configure a Service Interface 1 Enable the Service Interface configuration mode for the selected Service Interface refer to Section 3 3 9 8 1 2 You can now execute any of the following tasks Configure one or more of the parameters of the Service Interface refer to Section 3 3 9 8 2 Restore the default values of the Service Interface parameters refer to Section 3 3 9 8 3 Terminate the Service Interface configuration mode refer to Section 3 3 9 8 4 In addition you can at any time display configuration information for one or all existing Service Interfaces refer to Section 3 3 9 8 6 or delete an existing Service Interface refer to Section 3 3 9 8 5 Enabling the Service Interface Configuration Mode Creating a Service Interface To configure the parameters of a Service Interface first enable the Service Interface configuration mode for the specific Service Interface Run the following command to enable the Service Interface configuration mode You can also use this command to create a new Service Interface npu con
285. nfig trap mgr disable ip source lt ip_addr gt INFORMATION These enable disable commands have functionality that is identical to the EnableFlag parameter see Adding Modifying a Trap Manager Entry on page 327 NOTE An error may occur if the IP address that you ave specified does not exist in the Trap Manager index Command Syntax Privilege Level npu config trap mgr enable ip source lt ip_addr gt npu config trap mgr disable ip source lt ip_addr gt 10 BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Syntax Deschiple Parameter Description Presence Default Possible Values n Value lt ip_addr gt Indicates the IP address of the Mandatory N A Valid IP Address Trap Manager to be enabled disabled Command Global configuration mode Modes 3 3 12 2 4 Displaying Configuration Information for Trap Managers To display configuration information for the configured Trap Managers run the following command npu show trap mgr NOTE An error may occur if no Trap Manager has been configured Command Syntax Privilege Level Display Format Command Modes 3 3 12 2 5 npu show trap mgr 10 Trap Manager Table Trap Manager Ip 10 203 153 149 Port 162 Community public Control Register Enable Global command mode Displaying the Trap Rate Limit The Trap Rate Limit is
286. nfiguration files is YYYYMMDDHHMM cfg gz You can display the three most recent backup configuration files residing in the flash For details refer to Section 3 3 3 4 9 This section describes the commands for M Making a Manual Backup of the Current Configuration on page 83 HM Displaying the Status of the Manual Backup Procedure on page 84 HM Making Automatic Backups of the Current Configuration on page 85 HM Displaying the Automatic Backup Time on page 85 M Restoring the Configuration Defined in the Backup Configuration File on page 86 M Restoring the Factory Default Configuration on page 87 M Restoring the Factory Default Configuration With Connectivity on page 87 HM Displaying Failures in Configuration Restore Operations on page 88 HM Displaying the Currently Stored Backup Configuration Files on page 89 3 3 3 4 1 Making a Manual Backup of the Current Configuration To manually make a backup of the current configuration run the following command BreezeMAX Mini Centralized ASN GW System Manual 83 Chapter 3 Operation and Administration Using the CLI Unit Configuration npu manual backup You can at any time view the status of the manual backup procedure For details refer to Section 3 3 3 4 2 NOTE To enable the system to automatically make a backup of the current configuration everyday refer to Section 3 3 3 4 3 Command Syntax Command M
287. nfigure QoS classification rules for classifying traffic originating from the NPU into different flows For details refer Configuring QoS Marking Rules on page 96 You can create the following types of rules for an ACL M Permit Indicates that traffic matching the filter criteria is allowed to reach the unit E Deny Indicates that traffic matching the filter criteria is dropped and not allowed to reach the unit You can configure multiple rules for each ACL the priority for these rules is applied with respect to the sequence in which these rules are configured The first configured rule is the first one to be checked for a match and so on After you configure an ACL you can attach the ACL to the NPU host virtual interface BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration All ACLs are either in the ACTIVE or INACTIVE state The ACTIVE state indicates that the ACL is attached to the virtual interface the INACTIVE state indicates that the ACL is not attached to the interface The priority of checking for a match in active ACL is applied with respect to the sequence in which these ACLs were attached to the interface The first found match is applied To change the priories of ACLs you need to de attach them from the interface and then re attach them in the required order To see the current order of ACLs attached to the interface run the command
288. nfiguring the IP Connectivity Mode To configure the IP connectivity mode run the following command npu config connectivity mode inband outband unified In band is the default connectivity mode You can display the currently configured connectivity mode For details refer Section 3 3 1 2 NOTE You must save the configuration run the command npu write for a change in connectivity mode to take effect after next reset Command Syntax Privilege Level npu config connectivity mode inband outband unified 10 BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Syntax Descriptio Parameter Description Presence Default Possible Values n Value inband Indicates the connectivity mode Mandatory inband E inband outband to be configured E outband unified i E unified Command Global configuration mode Modes 3 3 1 2 Displaying the IP connectivity Mode To display the IP connectivity mode run the following command npu show connectivity mode Command npu show connectivity mode Syntax Privilege 1 Level Display Current connectivity mode lt value gt Next Boot connectivity mode lt value gt Format Command Global command mode Modes 3 3 2 Configuring Physical and IP Interfaces The following Ethernet interfaces are provided on the front panel of the unit for enablin
289. ng these parameters BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration Command npu config srvcgrp dhcpserver config pool minaddr lt string gt Syntax pool maxaddr lt string gt pool subnet lt string gt dflt gwaddr lt string gt lease interval lt integer 24 4294967295 gt renew interval lt integer gt rebind interval lt integer gt dnssrvr addr lt string gt offerreuse holdtime lt integer gt opt60 lt string 30 gt opt43 Name lt string 64 gt Value lt string 64 gt Sname lt string 64 gt File lt string 128 gt dnssrvr addr2 lt string gt Privilege 10 Level Syntax Descriptio Parameter Description Presence Default Possible Values n Value pool minaddr Denotes the minimum Optional 0 0 0 0 Valid IP Address lt string gt lowest IP address of the address pool to be used for address allocation for MSs from this Service Group DHCP address in the pool shall not overlap with the DHCP address pool defined in an existing service group and with ip addresses of host interfaces Bearer External mgmt Local mgmt pool maxaddr Denotes the maximum Optional 255 255 Valid IP Address lt string gt highest IP address of the 255 255 address pool configuration DHCP address in the pool shall not overlap with the DHCP address pool defined in an existing service
290. nit Configuration Global configuration mode Displaying Global RADIUS Configuration Parameters To display global RADIUS configuration parameters used for all AAA clients run the following command npu show radius npu show radius TimeOut lt value gt accessReq retries lt value gt NAS ID lt value gt TimeZone Offset lt value gt framed MtuSize lt value gt Profile AtrbtType lt value gt alrmAaaSwitchoverRetryFailThrshld lt value gt VLAN Bit Alignment lt value gt Global command mode Managing Service Groups A service group is a group of MSs that are served by the same service provider or service flows that belong to the same service class The following service group types are supported IP This type of service group is used only for IP CS flows Once service group is configured as type IP additional IP allocation configuration is also required such as DHCP mode IP pool IP Subnet etc This type of service group must be associated with either IP IP encapsulated IP packets or VLAN type BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration of R3 service interface An IP service group can be configured to support time based or volume and time based accounting In addition an IP service group can be configured to support direct communication between MSs belonging to the service group HM VPWS Virtual Private Wire S
291. nk data is classified by the MS into 802 16e connections and with respect to classification rules defined in the service profile provisioned in the ASN GW and downloaded to the MS when establishing a connection For instance you can define an L3 downlink classification rule that will classify traffic to a certain MS with a DSCP value of 46 into a UGS connection and all other traffic to the MS into a best effort connection In addition an uplink L3 classification rule can be defined that will classify traffic from this MS with a UDP destination port higher than 5000 into a UGS connection and all other traffic from the MS into a best effort connection Up to a maximum of 100 classification rules can be created gt To configure one or more L3 classification rules 1 Enable the L3 classification rules configuration mode refer to Section 3 3 9 11 4 1 2 You can now execute any of the following tasks Configure the parameters for this classification rule refer to Section 3 3 9 11 4 2 Restore the default parameters for this classification rule refer to Section 3 3 9 11 4 3 Manage protocol configuration refer to Section 3 3 9 11 4 4 Manage source address configuration seeSection 3 3 9 11 4 5 Manage destination address configuration refer to Section 3 3 9 11 4 6 Manage source port configuration refer to Section 3 3 9 11 4 7 Manage destination port configuration refer to Section 3 3 9 11 4 8 3 Terminate the L3 cla
292. nlink classification rules npu config srvcprf1l flow ulclsf rulename lt num_of_rule_names 1 6 gt lt rulename gt lt rulename gt waal npu config srvcprfl flow dlclsf rulename lt num_of_rule_names 1 6 gt lt rulename gt lt rulename gt saa NOTE If no classifier is associated with the service flow for one or both directions it means any traffic After you have executed these tasks you can terminate the service flow configuration mode and return to the service profile configuration mode Section 3 3 9 11 3 3 6 For more information about configuring classification rules refer Configuring Classification Rules on page 258 BreezeMAX Mini Centralized ASN GW System Manual OQ Command Syntax Privilege Level Syntax Descriptio n Chapter 3 Operation and Administration Using the CLI Unit Configuration npu config srvcprf1l flow ulclsf rulename lt num_of_rule_names 1 6 gt lt rulename gt lt rulename gt npu config srvcprfl flow dlclsf rulename lt num_of_rule_names 1 6 gt lt rulename gt lt rulename gt 10 Parameter Description Presence Default Possible Values Value lt num_of_rule_nam Indicates the number of Mandatory N A 1 6 es 1 6 gt uplink downlink classification rules to be created BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration
293. none Valid IP Address offerreuse hold time lt integer gt Denotes the Offer Reuse time in seconds of IP address offered to MS from this Service Group Optional 1 120 BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration opt 60 Configures option 60 Optional Null String up to 30 lt string 30 gt The Vendor Class characters Identifier VCI indicating Null empty string the type of disables Option 60 hardware firmware used by relevant CPEs An empty string null means that DHCP Option 60 is disabled If the value is other than null the value configured in the CPE must match this value for proper allocation of IP parameters opt43 Name Configures option 43 Optional Internet String up to 64 lt string 64 gt Name Gateway characters Device M anageme ntServer URL Value Configures option 43 Optional empty String up to 64 lt string 64 gt Value string characters Sname Configures the server host Optional empty String up to 64 lt string 64 gt name This parameter is string characters sent in dhcp offer dhcp ack messages and may be used by certain CPEs File Configures the boot file Optional empty String up to 128 lt string 128 gt name This parameter is string characters sent in dhcp offer dhcp ack messages and may be used by certain CPEs dnssr
294. npu show interface npu host The following automatically created standard default ACLs are attached to the NPU host virtual interface and include a single Permit rule Table 3 15 Default Standard ACLs ACL Number Rule Action Source IP Address Destination IP Address ACL 97 Permit Any External Management IP address ACL 98 Permit Any Local Management IP address The default Extended ACL 186 attached to the NPU host virtual interface includes the following Permit rules allowing certain traffic towards the Bearer interface Table 3 16 Rules of Default ACL 186 Destination IP Destination Protocol Address Port Source IP Source Address Port Rule Action Permit Any Any Bearer IP address Any ICMP 1 2231 used for WiMAX ASN Control Plane Protocol Permit Any Any Bearer IP address UDP 17 1812 1813 used for RADIUS Authenticatio n and Accounting Permit Any Any Bearer IP address UDP 17 Bearer IP address 69 used for TFTP Permit Any Any UDP 17 1022 1023 used for software download Permit Any Any Bearer IP address UDP 17 BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Additional Extended ACLs are created automatically for every Service Group that is associated with a VLAN Service Interface and an enabled VLAN Service Up to 10 ACLs numbered ACL 187 to
295. ntax Descriptio n Display Format 3 3 9 11 To display configuration information for one service group or for all service groups run the following command npu show srvc grp lt grp alias gt npu show srvc grp lt grp alias gt Parameter Description Presence Default Possible Values Value lt grp alias gt Denotes the group alias for Optional N A String which the service group to be displayed If no grp alias is specified the parameters of all service groups will be displayed According to Service Group type and for IP Service Group the configured DHCP mode Configuring the Service Flow Authorization Functionality The Service Flow Authorization SFA functionality handles creation maintenance of pre provisioned service flows for MS It maps the AAA parameters service profile name received from the AAA server to pre configured WiMAxX specific QoS parameters in the unit The SFA functionality enables you to configure multiple service profiles with multiple service flows and classification rules This section describes the commands to be used for Configuring the SFA PHS Functionality on page 239 H Displaying Configuration Information for the SFA PHS Functionality on page 239 M Configuring Service Profiles on page 240 BreezeMAX Mini Centralized ASN GW System Manual CO 238 Chapter 3 Operation and Administration Using the CLI Unit Configuration Con
296. nternal processes that are executed for monitoring system performance Shelf management procedures Refers to internal processes that are executed for monitoring the health and temperature of all hardware components other than the NPU such as the power supply and fans WiMAX signaling protocols Refers to all the protocols that implement the ASN GW functionality User interface Refers to the command line or remote management interface used for executing all user initiated events such as system shut down or reset NOTE The Syslog utility is used to implement the logging feature You can specify the severity level for which log messages are to be generated for each module Logs are generated for events for which the severity level is equal to or higher than the configured level The following are the severity levels that you can configure for each module Alert Error Information BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration By default system level logging is enabled The system stores a maximum of 1000 log messages The system stores log messages using the cyclic buffer method That is when there are more than 1000 messages the system overwrites the oldest log messages NOTE It is recommended that you periodically make backups of log messages before these are overwritten For details refer to Making a Backup of Log Files
297. ntralized ASN GW System Manual CQ Chapter 3 Operation and Administration Using the CLI Unit Configuration Privilege 10 Level Command L3 Classification rules configuration mode Modes 3 3 9 11 4 4 2 Enabling IP Protocol Classifier After enabling the IP protocol configuration mode run the following command to enable the IP protocol classifier and define the Protocol number npu config clsfrule protocol protocol enable lt number of protocols 1 gt lt protocol gt NOTE If source port range see Section 3 3 9 11 4 7 2 or destination port range see Section 3 3 9 11 4 8 2 is o enabled then l IP protocol protocol enable must be set to enabled Protocol can be either 6 TCP or 17 UDP Command npu config clsfrule protocol protocol enable lt number of protocols 1 gt Syntax lt protocol gt Privilege 10 Level Syntax Descriptio Parameter Description Presence Default Possible Values n Value lt number of Indicates the number of Mandatory N A 1 protocols 1 gt protocol lists to be enabled In the current release only one protocol can be enabled per classification rule lt protocol gt Indicates the IP protocol to be Mandatory N A 0 255 Using enabled In the current release standard IANA only one protocol can be protocol values enabled per classification rule BreezeMAX Mini Centralized ASN GW System Manual O Chapter 3 Operation and Administration Using the
298. ntralized ASN GW System Manual O Q Contents Appendix A Software Upgrade cecssnerseceesececeecesseceeceneseueeseececnscenesaeeneneceeas 354 A 1 Before You Start Scccccscscceccettedenredincacvexnceanencttesnesantnececaansacnnaccenonsaneneremaeenanenencee 355 A 2 Upgrading the NPU oie cesses nee estes 356 A 2 1 Executing the Upgrade Procedure sssssssssssssesrnrsuurnnrnnnrunnnnnunnnnnnnnnnnnnnnnnnnn nnne 356 A 2 2 Displaying the Operational Shadow and Running Versions eeeeeeeeeeeeee 360 A 2 3 Displaying the TFTP Configuration Information ccccceeeeeeeeeeeeeeeeeeeeeeeeeeenaees 360 A 2 4 Displaying the Download Status INfFOrMatiOn ccceceeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee 361 A 3 Downgrading the NPU eee ee ee ee eee ee ee 363 BreezeMAX Mini Centralized ASN GW System Manual amp Q Chapter 1 System Description In This Chapter About WiMAX on page 2 WiMAX Network Reference Model on page 3 The Mini Centralized ASN GW on page 9 Specifications on page 11 Chapter 1 System Description About WiMAX Lol About WiMAX Emanating from the broadband world and using all IP architecture mobile WiMAX is the leading technology for implementing personal broadband services With huge market potential and affordable deployment costs mobile WiMAX is on the verge of a major breakthrough No other technology offers a full set of chargeable and differentiated voice data
299. nual eo OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration Syntax Besctiptle Parameter Description Presence Default Possible Values n Value lt ip_address gt Indicates the destination host Mandatory N A Valid IP address or network IP address for which the route is to be added lt ip_mask gt Indicates the address mask for Mandatory N A Valid address the static route to be added mask lt ip_nexthop gt Indicates the next hop IP Mandatory N A Valid IP address address for the route to be added Must be in the subnet of one of the NPU IP interfaces Command Global configuration mode Modes INFORMATION Kernel route is added automatically for default gateway network address of service interface of VLAN type when service interface is attached to a service group and vlan enable is set for the service group pes This route is deleted when vlan is disabled for service group Also kernel route is added automatically for relay server IP address when service interface of type VLAN is attached to a service group and vlan enable is set for the service group This route is deleted when vlan is disabled for the service group These routes are not displayed by the show ip route command 3 3 7 2 Deleting a Static Route To delete a static route run the following command npu config no ip route lt ip_address gt lt ip_mask gt lt ip_nexthop gt For example run the follo
300. o n Chapter 3 Operation and Administration Using the CLI Unit Configuration Parameter Description Presence Default Possible Values Value flow type Denotes the type of flow that Optional 1 E 1 Indicates lt type 1 gt is bi directional 1 or multicast bi directional 2 multicast 2 is not supported in current release cs type lt type Convergence Sublayer Type Optional 1 E 1 Pv4cs 1 4 gt This parameter is applied to IPv4CS 4 VLANCS both UL and DL Service Flows Must match the type of service group referenced by ServiceGrpAlias during creation of the flow IPv4CS should be selected if the assigned Service Group is of type IP VLANCS should be selected if the assigned Service Group is of type VPWS media type Describes the type of media Optional Null String up to 15 lt string gt carried by the service flow characters uldatadlvry t Denotes the data delivery type Optional 3 BE 0 4 or 255 for ype for uplink traffic carried by the ANY lt type 0 lt UGS gt service flow 1 lt RTVR gt 2 lt NRTVR gt 3 lt BE gt 4 lt ERTVR gt 255 lt ANY gt gt ulqos maxsust Denotes the maximum Optional 250000 10000 4000000 ainedrate lt value 10000 4 0000000 gt sustained traffic rate in bps for uplink traffic carried by the service flow Although available for all service flows applicable only for service flows with the appropriate uplink
301. o be used on R3 interface A VPWS Mapped service group can be configured to support time based accounting E VPLS Hub and Spoke This type of service group supports the VPLS hub and spoke model Virtual Private LAN Services VPLS provide connectivity between geographically dispersed customer sites as if they were connected using a LAN transporting Ethernet 802 3 and VLAN 802 1Q traffic across multiple sites that belong to the same L2 broadcast domain Sites that belong to the same broadcast domain expect broadcast multicast and unicast traffic to be forwarded to the proper location s This requires MAC address learning aging on a per pseudowire basis and packet replication across pseudowires for multicast broadcast traffic and for flooding of unknown unicast destination traffic In a hub and spoke model one PE Provider Edge router that is acting as a hub connects all other PE routers that act as spokes in a given VPLS domain The virtual switch on a spoke PE router has exactly one pseudowire connecting to the virtual switch on the hub PE router No pseudowire interconnects the virtual switches on spoke PE routers A hub and spoke topology by definition is loop free so it does not need to enable spanning tree protocols or split horizon on pseudowires To provide Layer 2 connectivity among the virtual switches on spoke PE routers the hub PE router must turn off split horizon on the pseudowires When split horizon is disabled you can forward or f
302. ock will be MM month in advanced by the amount of year 1 12 hours specified by the Advance Factor parameter Stop date Applicable only of Mode is set Optional 28 11 DD MM lt DD MM gt to Enable The date for l DD day in stopping the daylight saving anil ea feature At the end of this date l midnight plus the amount of MM month in hours specified by the Advance year 1 12 Factor parameter the clock will be set back to midnight 00 00 Command Global configuration mode Modes 3 3 12 3 5 Displaying the SNTP Configuration Parameters To display the SNTP configuration parameters run the following command npu show gps sntp Command npu show sntp Syntax Privilege 1 Level BreezeMAX Mini Centralized ASN GW System Manual Display Format Command Modes 3 3 12 3 6 Command Syntax Privilege Level Syntax Descriptio n Display Format Command Modes 3 3 12 5 7 Chapter 3 Operation and Administration Using the CLI Unit Configuration Sntp Status lt nable Disable gt Sntp Primary Server Ip Address lt value gt Sntp Secondary Server Ip Address lt value gt Global command mode Displaying the Date and Time Parameters To display the current date parameters run the following command npu show date Local UTC LocalUTCDiff DST npu show date Local UTC LocalUTCDiff DST For a detailed description of each parameter in this command refer the section Configuring the Dat
303. ode for a VPLS service group run the following command to configure the VLAN ID parameter for the service group npu config srvcgrp VPLS config vlanid lt integer 0 4094 gt Untagged Command npu config srvcgrp VPLS config vlanid lt integer 0 4094 gt Untagged Syntax Privilege 10 Level Syntax Description BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration Different VPLS Service Groups may have the sane value of their own VLAN ID including multiple VLAN untagged VPLS Service Groups Parameter Description Presence Default Possible Values Value vlanid The own VLAN ID of the Optional 0 0 4094 or lt integer 0 4094 gt Service Group Untagged Untagged Command VPLS Service group configuration mode Modes 3 3 9 10 8 4 Configuring the Local Switching Parameter of a VPLS Service Group The Local Switching parameter defines how to handle uplink multicast frames After enabling the service group configuration mode for a VPLS service group run the following command to configure the Local Switching parameter for the service group npu config srvcgrp VPLS config local switching enable disable Command __ npu config srvcgrp VPLS config local switching enable disable Syntax Privilege 10 Level Syntax Description Parameter Description Presence Default Possible Value
304. odes 3 3 3 4 2 Command Syntax Privilege Level Display Format Command Modes npu manual backup Global command mode Displaying the Status of the Manual Backup Procedure To display the current status of the manual backup procedure run the following commana npu show manual backup status npu show manual backup status 10 The Status of the File Backup operation is lt status value gt Where lt status value gt may be any of the following Generating 1 Copying 2 Compressing 3 Compression Failure 4 Copying Failed 5 Completed 6 Global command mode BreezeMAX Mini Centralized ASN GW System Manual amp Chapter 3 Operation and Administration Using the CLI Unit Configuration 3 3 3 4 3 Making Automatic Backups of the Current Configuration You can enable the system to automatically make daily backups of the current configuration at a specific time You can also manually make a backup of the configuration For details refer to Section 3 3 3 4 1 INFORMATION N By default the system makes a daily backup of the current configuration at 00 00 hours To enable the system to make automatic backups of the current configuration run the following command npu config auto backup time lt hh mm gt Specify the time in the 24 hour format The system will automatically make a backup of the current configuration everyday at the time that you have specified NOTE
305. ommunication between the BS and ASN GW The bearer plane consists of an intra ASN data path between the BS and ASN gateway The control plane includes protocols for data path establishment modification and release control in accordance with the MS mobility events E Reference point R8 consists of the set of control plane message flows and optional bearer plane data flows between the base stations to ensure a fast and seamless handover The bearer plane consists of protocols that allow data transfer between base stations involved in the handover of a certain MS It is important to note that all reference points are logical and do not necessarily imply a physical or even direct connection For instance the R4 reference point between ASN GWs might be implemented across the NAP internal transport IP network in which case R4 traffic might traverse several routers from the source to the destination ASN GW BreezeMAX Mini Centralized ASN GW System Manual amp Chapter 1 System Description The Mini Centralized ASN GW 1 3 The Mini Centralized ASN GW The Mini Centralized ASN GW provides ASN GW functions in a small package simplifying implementation of various deployment scenarios where a single ASN GW serves several BTSs Specifically it targets high speed transport locations which wouldn t normally host BTSs allowing optimal flexible and scalable network design significantly raising traffic bandwidth and reducing CAPEX and OPEX Th
306. on refer to Section 3 3 9 11 4 8 5 The following example illustrates the sequence of commands for enabling the destination port configuration mode enabling the destination port range and then terminating the destination port configuration mode npu config clsfrule dstport 50 400 npu config clsfrule dstport port enable npu config clsfrule dstport exit 3 3 9 11 4 8 1 Enabling the Destination Port Configuration Mode Creating a New Destination Port To configure the parameters for a destination port first enable the destination port configuration mode Run the following command to enable the destination port configuration mode This command also creates the new destination ports range classifier npu config clsfrule dstport lt start port gt lt end port gt The configuration mode for the newly created destination ports range is automatically enabled after which you can enable disable the destination port range refer to Section 3 3 9 11 4 8 2 Section 3 3 9 11 4 8 3 After executing these tasks you can terminate the destination port configuration mode refer to Section 3 3 9 11 4 8 4 NOTE An error may occur if you provide an invalid value for the start port and end port parameters Refer the syntax description for more information about the appropriate values and format for configuring these parameters Command Syntax Privilege Level npu config clsfrule dstport lt start port gt lt e
307. on mode for details refer to Enabling the Interface configuration mode on page 56 npu config interface external mgmt there is no need to shut down the interface for configuring its parameters BreezeMAX Mini Centralized ASN GW System Manual OQ 2 1 3 4 2 1 4 2 15 Chapter 2 Commissioning Initial Unit Configuration 2 Configure the IP address x x x x and subnet mask y y y y For details refer to Assigning an IP address to an interface on page 71 npu config if ip address x x x x y y y y 3 Exit the interface configuration mode npu config if exit 4 Exit the configuration mode npu config exit Save and Apply Changes in Site Connectivity Configuration 1 Save the configuration npu write otherwise after the next time reset you will lose the configuration changes 2 If you changed the Connectivity Mode reset the system to apply the changes npu reset Static Route Definition Static Route must be configured whenever the EMS server and the managed unit are on different subnets For more details refer to Adding a Static Route on page 111 Run the following command npu config ip route x x x x y y y y Z Z Z Z x x x x is the IP address of the EMS server y y y y is the network mask of the EMS server z z z z is the next hop IP address that should be in the segment of the external management interface SNMP Manager and Trap Manager Definition To define the communities to be used
308. on the Flash on page 314 3 3 10 1 To configure logging first specify system level logging that is applicable across the entire system You can then configure logging individually for each system module This section describes the commands to be used for HM Managing System level Logging on page 309 H Configuring Module level Logging on page 317 Managing System level Logging System level logging refers to all the procedures to be executed for managing logging for the entire system To manage system level logging HM Enable disable logging across the entire system and specify the destination a file on the local system or on an external server where logs are to be maintained Make periodic backups of log files You can at any time view the current log destination or delete log files from the flash After you have enabled disabled system level logging and specified the destination for storing log messages you can configure logging separately for each module You can also transfer log files from the NPU file system to an external TFTP server To support debugging you can create a collect logs file that contains the also all status and configuration files This section describes the commands to be used for Enabling System level Logging on page 310 Disabling Logging to File or Server on page 311 Displaying System level Logs on page 312 Displaying the Current Log Destination on page
309. onal N A Valid shadow name gt shadow image that is to be image name used for rebooting the NPU If you do not specify a value for this parameter the last downloaded shadow image is used for rebooting the NPU Command Global configuration mode Modes A 2 1 4 Step 4 Making the Shadow Version Operational After you reset the NPU with the shadow image and ensure that the NPU is functioning correctly with the shadow image you can make the shadow version as the operational version The next time you reset the system the shadow image that you make operational is used for rebooting the NPU To make the shadow version as the operational version run the following command npu config switchover npu After you run this command the operational image is swapped with the shadow image The next time you reset the NPU the system boots up with the swapped image NOTE E if you reset the NPU before running this command the NPU boots up with the image that is currently e the operational image E An error may occur if you run this command when the NPU is not running with the shadow image Command Syntax Command Modes npu config switchover npu Global configuration mode BreezeMAX Mini Centralized ASN GW System Manual Q Chapter A Software Upgrade Upgrading the NPU A 2 2 Displaying the Operational Shadow and Running Versions You can at any time during or after the software download procedure run the following
310. onfig std nacl deny host 1 1 1 1 host any host Indicates that ICMP traffic npu config std nacl permit host any host 1 1 1 1 npu config ext nacl deny icmp any host 1 1 1 1 Indicates that ICMP traffic to the NPU interface subnet is to be permitted or denied lt network s rc ip gt lt mask gt npu config ext nacl perm it icmp host any host 1 1 1 0 255 255 255 0 npu config ext nacl deny icmp host any host 1 1 1 0 255 255 255 0 Command npu config ext nacl permit icmp any host lt src ip address gt Syntax lt src ip address gt lt mask gt any host lt dest ip address gt lt dest ip address gt lt mask gt npu config ext nacl deny icmp any host lt src ip address gt lt src ip address gt lt mask gt any host lt dest ip address gt lt dest ip address gt lt mask gt Privilege 10 Level Syntax Descripti reer eectipne Parameter Description Presence Default Possible Values n Value any host Indicates the source IP Mandatory N A For details lt src ip addres address subnet for which Table 3 21 s gt incoming ICMP traffic is lt src ip addres permitted denied s gt lt mask gt BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration any host Indicates the destination IP Optional any For details lt dest ip addre
311. ory N A E enable disable should be enabled or disabled E disable Command Global configuration mode Modes 3 3 5 2 2 Displaying the Rate Limiting Configuration Information for an Application To display rate limiting parameters that are configured for specific or all user defined and pre defined applications run the following command npu show rate limit config ftp telnet tftp ssh icmp snmp R4 R6 igmp eap arp all others lt user defined app gt all NOTE An error may occur if you want to run this command to display configuration information for an Q application for which rate limiting is disabled BreezeMAX Mini Centralized ASN GW System Manual Command Syntax Privilege Level Syntax Descriptio n Chapter 3 Operation and Administration Using the CLI Unit Configuration npu show rate limit config ftp telnet tftp ssh icmp snmp R4 R6 igmp eap arp all others lt user defined app gt all 1 Parameter Description Presence Default Possible Values Value ftp telnet Indicates the Optional N A E ftp tftp ssh application for which E telnet icmp snmp rate limiting is to be E if R4 R6 igmp displayed ad eap arp E ssh lt user defined icmp gt TL AEA ane E snmp E R4 R6 E igmp E ceap E arp E user defined app Refers to user defined applications for which rate limiting is to be displayed E oll BreezeMAX Mini Centraliz
312. ost IP address or class map identifier that you have specified do not exist Command npu config ext nacl qos mark host lt src ip address gt tep udp Syntax srcport lt short 1 65535 gt qosclassifier lt short 1 65535 gt Privilege 10 Level BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration Syntax peseriptio Parameter Description Presence Default Possible Values n Value host Indicates the IP address of the Mandatory N A lt src ip add i a ip addres host interface that generates Valid IP address the traffic for which this assigned to the classification rule is to be external manag configured Specify the IP ement address that you have assigned local manageme to the external management nt or bearer IP interface local management or bearer IP interface tcp udp Indicates the transport Mandatory N A E tcp protocol E udp srcport lt short Indicates the source port Mandatory N A 1 65535 gt number of the application traffic for which this QoS 1 65535 classification rule is to be applied qosclassifier Indicates the identifier of the Mandatory N A lt class map num QoS class map to be associated ber 1 65535 gt with this classification rule For 1 65535 more information about configuring class maps refer Section 3 3 6 1 Command Extended ACL configuration
313. ou can create Permit Deny rules based on source destination IP address protocol and source destination port numbers NOTE i You cannot create Permit or Deny rules for an ACL that is associated with a Qos marking rule You can either associate QoS marking rules or permit deny rules with an ACL This section describes the commands to be used for M Configuring Permit Deny Rules from to a Specific Protocol and Source Destination IP Addresses on page 122 Configuring Permit Deny Rules for TCP UDP Traffic on page 127 E Configuring Permit Deny Rules for ICMP Traffic on page 137 NOTE After you have configured the rules to be applied on an ACL you can attach the ACL to the NPU host interface The ACL enables filtering of traffic destined to this interface For more information refer to ji Section 3 3 8 3 3 3 8 1 3 1 Configuring Permit Deny Rules from to a Specific Protocol and Source Destination IP Addresses After you have created an ACL you can configure Permit Deny rules to be applied for traffic from to a particular source destination IP address subnet with respect to a specific protocol BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration NOTE You cannot configure Permit or Deny rules for an ACL that is associated with a Qos marking rule You can either associate QoS marking rules or permit deny ru
314. owing example illustrates the sequence of commands for enabling the source address configuration mode enabling the destination address classifier configuring the address mask and then terminating the destination address configuration mode npu config clsfrule dstaddr 10 203 155 22 npu config clsfrule dstaddr config addr enable addr mask 0 0 255 255 npu config clsfrule srcaddr exit a ble the Destination Address Configuration Mode Creating a New Destination ddress To configure the parameters for a destination address first enable the destination address configuration mode Run the following command to enable the destination address configuration mode This command also creates a new destination address classifier BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration npu config clsfrule dstaddr lt ipv4addr gt The configuration mode for the newly created destination address is automatically enabled after which you can execute any of the following tasks M Configure the address mask refer to Section 3 3 9 11 4 6 2 k HM Disable the destination address refer to Section 3 3 9 11 4 6 3 After you execute these tasks you can terminate the destination address configuration mode refer to Section 3 3 9 11 4 6 4 and return to the classification rules configuration mode NOTE An error may occur if you provide an invalid destination
315. ownlink or uplink direction associated with a certain set of QoS requirements such as maximum latency The QoS requirements for service flows are derived from service profiles defined by the operator A service profile is a set of attributes shared by a set of service flows For instance an operator might define a service profile called Internet Gold that will include QoS and other definitions to be applied to service flows associated with users subscribed to the operator s Internet Gold service package The factory default configuration includes an empty no defined Service Flows Service Profile with the name Default If enabled it will be used if profile descriptor is missing in service provisioning or if received profile descriptor is disabled unauthenticated mode Up to 63 additional Service Profiles may be created To configure one or more service profiles 1 Enable the service profile configuration mode refer to Section 3 3 9 11 3 1 2 You can now execute any of the following tasks Configure the parameters for this service profile refer to Section 3 3 9 11 3 2 Manage service flow configuration for this service profile refer to Section 3 3 9 11 3 3 Delete service flows refer to Section 3 3 9 11 3 3 7 3 Terminate the service profile configuration mode refer to Section 3 3 9 11 3 4 You can at any time display configuration information refer to Section 3 3 9 11 3 5 or delete an existing service profile r
316. ownload Bytes lt Bytes Downloaded gt Command Global command mode Modes BreezeMAX Mini Centralized ASN GW System Manual Chapter A Software Upgrade Downgrading the NPU A 3 Downgrading the NPU You can only downgrade your unit to the former version from which you upgraded and only if you did not remove the shadow version Otherwise the original configuration cannot be restored To downgrade to the former version 1 run the command npu allow migration Command npu allow migration Syntax Command Global command mode Modes This command will allow you to upgrade again after downgrading to the same version while keeping your changes in the downgraded version Without this command any changes to the configuration made after downgrading will not be saved If you do not intend to upgrade again to the current higher version you do not need to run this command NOTE The allow migration command deletes the current version s configuration file 2 Downgrade the NPU by rebooting from shadow version see Section A 2 1 3 and switching between shadow and operational versions see Section A 2 1 4 BreezeMAX Mini Centralized ASN GW System Manual
317. pSize 1 gt msid lt msid string gt all NOTE An error may occur if NAI or MSID value is not specified Refer to the syntax description for more e information about the appropriate values and format for configuring this parameter An error may occur also for MS not found in case no MS with the specified NAI or MSID is registered at the ASN GW Command npu config de reg ms nai lt nai string gt bs lt 1 to 16777215 StepSize 1 gt msid Syntax lt msid string gt all Privilege 10 Level BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Managing MS in ASN GW Syntax Descriptio parameter Description Presence Default Possible Values n Value nai lt nai string gt Initiates the de registration of Mandatory N A String bs lt 1 to one or several MSs 16777215 ree l StepSize 1 gt nai lt nai string gt de register msd the MS with the specified NAI lt msid string gt value all bs lt 1 to 16777215 StepSize 1 gt de register all MSs served by the specified BS msid lt msid string gt de register the MS with the specified MSID MAC address value The format iS XX XX XX XX XX XX all de register all MSs served by the unit Command Global configuration mode Modes 3 4 2 Displaying MS Information Run the following command to view the MS context information of all MSs or a single MS npu show ms
318. peed to be used for this physical interface npu config if speed 10 100 1000 By default the port speed for all Ethernet interfaces is 100 Mbps NOTE An error may occur if you run this command when E Auto negotiation is enabled E The interface does not support the specified speed BreezeMAX Mini Centralized ASN GW System Manual OQ 60 Chapter 3 Operation and Administration Using the CLI Unit Configuration Command npu config if speed 10 100 1000 Syntax Privilege 10 Level Syntax Descriptio Parameter Description Presence Default Possible Values n Value 10 100 Indicates the speed in Mbps Mandatory N A E 10 1000 to be configured for this E 100 physical interface E 1000 A value of 1000 is not applicable for Fast Ethernet interface Command Interface configuration mode Modes 3 3 2 1 2 5 Configuring the MTU for physical interfaces You can configure the MTU for the physical interface If the port receives packets that are larger than the configured MTU packets are dropped Run the following command to configure the MTU of the physical interface npu config if mtu lt frame size 1518 9000 gt Command npu config if mtu lt frame size 1518 9000 gt Syntax Privilege 10 Level BreezeMAX Mini Centralized ASN GW System Manual eo B Syntax Descriptio n Command Modes 3 3 2 1 3 Chapter 3 Operation and Administration U
319. phs rule lt rulename gt CAUTION Specify the rule name if you want to delete a specific PHS rule Otherwise all the configured PHS rules A are deleted Command npu config no phs rule lt rulename gt Syntax Privilege 10 Level Syntax Peactipie Parameter Description Presence Default Possible Values n Value lt rulename gt Denotes the rule name of the Optional N A String PHS rule that you want to delete Specify a value for this parameter if you want to delete a specific PHS rule Do not specify a value for this parameter if you want to delete all PHS rules Command Global configuration mode Modes 3 3 9 12 5 Displaying Configuration Information for PHS Rules To display all or specific PHS rules run the following command npu show phs rule lt rulename gt Specify the rule name if you want to display configuration information for a particular PHS rule Do not specify a value for this parameter if you want to view configuration information for all PHS rule NOTE An error may occur if you provide an invalid value for the rulename parameter Refer the syntax description for more information about the appropriate values and format for configuring this parameter BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Command npu show phs rule lt rulename gt Syntax Priv
320. plied on packets that are created using the parameters specified in Section 3 3 9 7 1 Output parameters are a combination of the Outer DSCP and VLAN priority values These are populated in the outer DSCP and VLAN priority fields in the IP and Ethernet headers of these packets INFORMATION Note that for traffic associated with a VLAN Service Interface only the VLAN Priority marking is applicable NOTE 3 i Enable the bearer plane QoS marking rule that you are configuring By default all bearer plane QoS marking rules are disabled Run the following command to configure the output parameters for this bearer plane QoS marking rule npu config bqos config outer dscp lt integer 0 63 gt vlan priority lt integer 0 7 gt qos enable INFORMATION You can display configuration information for the bearer plane QoS marking rules For details refer to y Section 3 3 9 7 6 NOTE An error may occur if you provide an invalid value for any of these parameters Refer the syntax e description for more information about the appropriate values and format for configuring these parameters At least one parameter must be specified the value is optional The command npu config bqos config will return an Incomplete Command error Command Syntax Privilege Level npu config bqos config outer dscp lt integer 0 63 gt vlan priority lt integer 0 7 gt qos enable 10 BreezeMAX Mini Centralized A
321. profile lt profile name gt Syntax Privilege 10 Level Syntax Peschiple Parameter Description Presence Default Possible Values n Value lt profile name Denotes the name of the Optional N A String gt service profile you want to delete Specify this parameter only if you want to delete a specific service profile Command Global configuration mode Modes 3 3 9 11 4 Configuring Classification Rules Classification rules are user configurable rules that are used to classify packets transmitted on the bearer plane You can associate one or more classification rules with a particular service profile For details refer to Section 3 3 9 11 3 3 4 You can define an L3 classification rule with respect to the following criteria HIP ToS DSCP HIP protocol such as UDP or TCP P source address an address mask can be used to define a range of addresses or subnet E IP destination address an address mask can be used to define a range of addresses or subnet BreezeMAX Mini Centralized ASN GW System Manual e Chapter 3 Operation and Administration Using the CLI Unit Configuration M Source port range HM Destination port range You can define an L2 classification rule based on the Customer VLAN ID CVID Classification rules can be specified for M Downlink data is classified by the ASN GW into GRE tunnels which in turn are mapped into 802 16e connections in the air interface M Upli
322. provides some details on these parameters Parameter Description msscfnTimerMsscRsp The period in milliseconds for which the unit waits for an acknowledgement for the MS state change response If the unit does not receive an acknowledgement within this period it retransmits the MS state change response msscfnCounterMsscRspMax The maximum number of times the unit retransmits the MS state change response msscfnTimerSbcHold The period in milliseconds within which the basic capabilities negotiation procedure should be completed At the end of this period the unit starts the authentication registration procedure for the MS depending on accepted authentication policy BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration msscfnTimerRegHold The interval in seconds for the MS registration procedure timeout After this interval the unit changes the MS state to the registered state and initiates the data path creation procedure for authenticated MSs msscfnTimerMsscDrctvReq The period in milliseconds for which the unit waits for an acknowledgement for the MS state change directive If the unit does not receive an acknowledgement within this period it retransmits the state change directive msscfnCounterMsscDrct vReqMax The maximum number of times the unit may retransmit the MS state change directive 3 3 9 6 Managin
323. pter 1 System Description Specifications 1 4 5 Mechanical and Electrical Table 1 5 Mechanical amp Electrical Specifications Item Description Dimensions 1U high ETSI type shelf 1U x 43 2 x 45 cm Weight 3 4 Kg Power Source 36 to 60 VDC typical 48 VDC Power Consumption 100W maximum BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 2 Commissioning In This Chapter H Initial Unit Configuration on page 15 E Completing the Configuration Using AlvariSTAR on page 18 2k 2 1 1 2 1 2 2 1 3 2 1 3 1 Chapter 2 Commissioning Initial Unit Configuration Initial Unit Configuration Introduction After completing the installation process some basic parameters must be configured locally using the CLI via the MON port of the unit Refer to Using the Command Line Interface CLI on page 23 for information on how to access the CLI either via the MON port or via Telnet and how to use it The following sections describe the minimum mandatory configuration actions required to allow remote configuration of the site and to enable discovery by the EMS system 1 Clearing Previous Configuration 2 Site Connectivity Static Route Definition NR WwW SNMP Manager and Trap Manager Definition 5 Site ID Definition 6 Saving the Configuration Clearing Previous Configuration Clear existing site configuration must be executed for used units R
324. pter 3 Operation and Administration Using the CLI Unit Configuration acct The Accounting mode for the Optional time E none none time vol service interface E time umeTime f f none No accounting support E volumeTime time The ASN GW send RADIUS Accounting Start Stop Requests The ASN GW shall also send Interim Accounting requests to AAA server using RADIUS Accounting Interim messages on a preconfigured or negotiated interval AAA server can send negotiated time interval in Access Accept message If ASN GW defined value see acctInterimTmr below is zero and there is no Acct Interim Interval in Access Accept interim updates should be deactivated volumeTime Same as for time option above In addition this mode supports postpaid accounting by supporting IP Session Volume Based Accounting The ASN GW will report the cumulative volume counters for each MS IP Session The counters will be collected per MS Service Flow and will be cumulated in order to get the MS IP Session counters ms loop Denotes whether MS loopback Optional Disable E Enable enable direct communication E Disable disable between two MSs belonging to the same service group is enabled or disabled for the service interface BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration acctInterimTm Applicable only if
325. r Description Presence Default Possible Values Value lt rulename gt Denotes the PHS rule for which Mandatory N A String 1 to 30 the PHS configuration mode is characters to be enabled Global configuration mode BreezeMAX Mini Centralized ASN GW System Manual OQ g Chapter 3 Operation and Administration Using the CLI Unit Configuration 3 3 9 12 2 Configuring Parameters for the PHS Rule Run the following command to configure the parameters of the PHS rule npu config phsrule config lt field lt value gt mask lt value gt verify lt value gt size lt value gt gt INFORMATION You can display configuration information for specific or all PHS rules For details refer p Section 3 3 9 12 5 NOTE An error may occur if you provide an invalid value for any of these parameters Refer the syntax description for more information about the appropriate values and format for configuring these ll parameters Command npu config phsrule config lt field lt value gt mask lt value gt verify Syntax lt value gt size lt value gt gt Privilege 10 Level Syntax TERRENS Parameter Description Presence Default Possible Values n Value field Denotes the PHSF value that is Mandatory N A String This lt value gt the header string to be parameter is of suppressed format 0x0000000000 000000000000 000000000000 000000 Here Octet x x 20 bytes each Byte w
326. r header is to be verified TunIpipMtu The MTU for the IP in IP tunnel used for R3 data traffic on this interface 3 3 9 7 Configuring Bearer Plane QoS Marking Rules The Bearer Plane QoS Marking Rules enables defining QoS marking rules for the bearer plane traffic based on parameters such as traffic priority the type of service media and interface R3 or R6 For each marking rule you can define the output parameters outer DSCP and VLAN priority values to be applied on service flows using best match logic For example if we have the following two marking rules for BE traffic Traffic Type set to BE A Interface Type set to Internal R6 interface All other parameters set to ANY B All other parameters including interface type are set to ANY Than Rule A will apply to all BE traffic transmitted on the internal R6 interface Rule B will apply to all other BE traffic meaning traffic transmitted on the external R3 interface Up to a maximum of 20 Bearer Plane QoS Marking Rules can be defined To configure one or more QoS bearer plane marking rules 1 Enable the bearer plane QoS marking rules configuration mode refer to Section 3 3 9 7 1 2 You can now execute any of the following tasks Configure the output parameters for bearer plane QoS marking rules refer to Section 3 3 9 7 2 Restore the default parameters for bearer plane QoS marking rules refer to Section 3 3 9 7 3 3 Terminate the bearer plane QoS marking ru
327. r login information the following command prompt is displayed npu This is the global command mode For more information about different command modes refer to Section 3 1 2 3 1 1 2 Accessing the CLI From a Remote Terminal The procedure for accessing the CLI from a remote terminal differs with respect to the IP connectivity mode The Ethernet port and IP interface you are required to configure for enabling remote connectivity is different for each connectivity mode For more information about connectivity modes and Ethernet ports and IP interface used for operating the system refer Managing the IP Connectivity Mode on page 51 BreezeMAX Mini Centralized ASN GW System Manual OQ 24 Chapter 3 Operation and Administration Using the CLI Using the Command Line Interface CLI _ To access the CLI from a remote terminal execute the following procedure NOTE The in band connectivity mode is the default connectivity mode the DATA port and e external management VLAN are the default Ethernet port and IP interface that are configured for the ll in band connectivity mode The following procedure can be used for accessing the CLI when the in band connectivity mode is selected This procedure is identical for all other connectivity modes However the Ethernet port VLAN and IP interface to be configured will differ for the out of band and unified connectivity modes as listed in Table 3 8 1 Assign an IP address to the extern
328. r service flows with the appropriate uplink data delivery type UGS ERTVR Must be lower than ul latency max Optional 20 0 65535 BreezeMAX Mini Centralized ASN GW System Manual Command Modes 3 3 9 11 3 3 3Restoring the Default Service Flow Configuration Parameters Chapter 3 Operation and Administration Using the CLI Unit Configuration dl rsrv rate min lt integer 0 400 00000 gt The minimum rate in bps reserved for this downlink service flow Although available for all service flows applicable only for service flows with the appropriate downlink data delivery type UGS NRTVR RTVR ERTVR For NRTVER RTVR and ERTVR cannot be higher than diqos maxsustainedrate Optional 250000 0 40000000 dl latency ma x lt integer gt The maximum latency in ms allowed in the downlink Although available for all service flows applicable only for service flows with the appropriate downlink data delivery type UGS RTVR ERTVR If uplink data delivery type is ERTVR or UGS the default value should be 90ms Optional 500 0 4294967295 dl tolerated jitter lt integer gt the maximum delay variation jitter in milliseconds for this downlink service flow Although available for all service flows applicable only for service flows with the appropriate downlink data delivery type UGS ERTVR Optional 0 4294967295 Se
329. raffic towards the core network Note that a Service Interface alias can be associated only to a single Service Group waitdhcp hold Denotes the period in seconds Optional 0 0 86400 time lt timeout gt for which the unit waits for an IP address allocation trigger MIP registration request DHCP discover from the MS If you specify the value of this parameter as 0 no timer is started and the unit will wait infinitely for the IP address allocation trigger BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration dhcp ownaddr Denotes the IPv4 address of the Mandatory N A Valid IP Address lt ipv4addr gt DHCP server relay proxy Must be unique in the network For a service group using a VLAN service interface should be in same subnet with the Default Gateway configured for the service interface associated with the service group Subnet mask is taken as the default subnet mask i e 255 255 255 0 Note In DHCP Server mode the DHCP server IP address must be in the same subnet but outside the range allocated for users address pool as provisioned in the DHCP Server server proxy Mode of IP address allocation Mandatory N A E dhcp server relay used for subscribers DHCP E dhcp proxy Server Proxy Relay E dhcp relay BreezeMAX Mini Centralized ASN GW System Manual Cha
330. ralized ASN GW System Manual s0 Chapter 3 Operation and Administration Using the CLI Unit Configuration NOTE Before initiating batch processing of commands remember that E if an error occurs while executing any command the batch processing operation is aborted all subsequent commands are not executed E if you want to execute a command that requires system reset specify the save configuration and system reset commands at the end of the batch file For more details about saving configuration and resetting the system refer to Saving the Current Configuration on page 80 and Resetting the System on page 49 Command Syntax Privilege Level To batch process CLI commands 1 Ensure that the text file comprising the commands to be batch processed is present on the TFTP server to be used for downloading the batch file 2 Run the following command to download the text file and initiate batch processing of commands specified in this file npu batch run tftp lt ip address gt lt file name gt After you execute this command the file is downloaded from the TFTP server and the commands in the file are executed sequentially After batch processing of all commands in this file is complete the downloaded file is deleted from the system The following is a sample text file that contains a list of commands to be batch processed npu batch run tftp lt ip address gt lt fil
331. ralized ASN GW System Manual O i Contents Contents Chapter 1 System Description scccsccsciacccsiccsterccesccevissescaciateteaonteecnbidecsieanciemsncdarabin 1 1 1 About WIMAX cicvsiecsciscccidccndessncccasccerseasceaisedenscgactweseerceusesseateateseedvaseeateneudvetaesesuenaen 2 1 2 WiMAX Network Reference Model cccccceceeceeeeeeceeeeecenceneeneenaeeaenaseaeeneeneeeeseeneenes 3 1 2 1 Access Service Network ASN siscisricsanicesirersiudsawereistersnadaasneduneadunedeinesiavdaneccuduateae 4 1 2 2 Connectivity Service Network CSN sssessssssssessssnrnrnsnnnnnnreennnnnnenrnrnnnrnennnnnnnennnn 4 1 2 3 Network Access Provider NAP vscscssi candice videticsciasicansdesdawcdancdanddessnscenwadadbcendnesiawssene 4 1 2 4 Network Service Provider NSP cccccccscescceseceesessseeseeseesseeeaueeeeueeeseeeaeeeauseeneeees 5 1 25 Base Station BS ti snc vecdsaccssessetuicauncaetsaraeanaeiaidemdtbeinabaticamueinaetanes aroniedeoaaeiarsesiees 5 1 2 6 ASN Gateway ASNHGW iccsicscscsdavescoaaussnadimencsunsrtiaalasnsiasaeseeeniedsasenestazeeneenensauadneate 5 1 2 7 Refere ce POINTS oeer ennnen narani aena a a a aA AEN 7 1 3 The Mini Centralized ASN GW ccccccccceceeeeeseeneeneeneeneeneeeeeeeceneeaeeaeeneeeeaeeneennaneaneas 9 Dl SPS CUR aT ONS soos cnet sae ect ew eee 11 1 4 1 Data Communication Ethernet Interfaces ccccccccsssseesseeeesseeseeeseeeeeeeeesaeeeees 11 1 4 2 Configuration and Management ccisecesiccccsc
332. ration Display Extended IP Access List 199 Format i Standard Access List Name Alias 199 Interface List NIL Status lt Active Inactive gt Admin Status lt Up Down gt Filter Protocol Type lt UDP TCP gt Source IP address lt IP address gt Filter Source Port lt value gt Rule Action QoS Marking QoS Classifier ID lt value gt Marking rule status lt ACTIVE INACTIVE gt 3 3 7 Configuring Static Routes Command Global command mode Modes Using the CLI you can configure the static routes for traffic originating from the NPU For each static route you can configure the destination IP address address mask and the next hop IP address The following are the types of traffic originating from the NPU M R4 R6 control traffic M R3 control traffic such as RADIUS or MIP BH NMS traffic This section describes the commands for M Adding a Static Route on page 111 HM Deleting a Static Route on page 112 HM Displaying the IP Routing Table on page 113 There are three automatically created static route with the IP addresses of the directly connected Bearer External Management and Local Management interfaces These routes cannot be modified or deleted BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration In addition the default Any Destination entry with destination 0 0 0 0 and mask
333. ration Syntax Penpopuon Parameter Description Presence Default Possible Values Value grp alias lt string gt Denotes the group alias of the Optional N A String Service Group for which the MAC Address table is to be deleted Do not specify any group alias to clear tables of all VPLS Service Groups Command Global configuration mode Modes 3 3 9 10 11Deleting a Service Group You can at any time run the following command to delete a service group npu config no srvc grp lt grp alias gt INFORMATION A Service Group cannot be deleted if it is assigned to a Service Flow For details refer to Configuring Service Flows on page 242 y To delete a VLAN service group associated with a VLAN service interface first execute the no vlan enable command refer to Section 3 3 9 10 3 Command npu config no srvc grp lt grp alias gt Syntax Privilege 10 Level Syntax Besttiptle Parameter Description Presence Default Possible Values n Value lt grp alias gt Denotes the group alias for Mandatory N A String which the service group to be deleted BreezeMAX Mini Centralized ASN GW System Manual OQ 237 Command Modes Chapter 3 Operation and Administration Using the CLI Unit Configuration Global configuration mode 3 3 9 10 12Displaying Configuration Information for the Service Group Command Syntax Privilege Level Sy
334. rce port for the application that needs to be marked for example FTP Telnet SNMP MIP or RADIUS A class map can be associated with each flow to define separate DSCP and or VLAN priority bits for QoS handling of each flow To configure a QoS classification rule 1 Enable the ACL configuration mode for ACL 199 refer to Section 3 3 6 2 1 NOTE QoS classification rules can be associated only with ACL 199 2 You can now Configure one or more QoS classification rules refer to Section 3 3 6 2 2 Delete one or more QoS classification rules refer to Section 3 3 6 2 3 Terminate the ACL configuration mode refer to Section 3 3 6 2 4 You can at any time enable disable QoS marking refer to Section 3 3 6 3 or view the configuration information for ACL 199 refer to Section 3 3 6 4 3 3 6 2 1 Enabling the ACL Configuration Mode for ACL 199 To configure QoS classification rules for host originating traffic first enable the extended ACL 199 configuration mode NOTE Qos classification rules can be added only to extended ACL 199 Command Syntax Run the following command to enable the extended ACL configuration mode for ACL 199 npu config ip access list standard lt access list number 1 99 gt extended lt access list number 100 199 gt name lt string gt After you enable the ACL 199 configuration mode you can configure one or several Qos classification rules and associate them with t
335. re preconfigured in the device provide all the functionality necessary for proper operation of the system You can at any time M Enable or disable rate limiting refer to Section 3 3 5 2 1 E Display configuration information for the rate limiting feature refer to Section 3 3 5 2 2 BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration 3 3 5 2 1 Enabling Disabling the Rate Limiting You can disable or enable the rate limiting feature When this feature is disabled rate limiting for all applications is in the not in service state When you enable this feature the last saved configuration parameters for all applications pre defined user defined and all others is used By default this feature is enabled CAUTION A When you disable rate limiting for the entire system it is disabled for all applications pre defined user defined and all others and any application can use 100 of the NPU s capacity thereby making it vulnerable to attack from hostile applications To enable disable the rate limiting feature run the following command npu config set cpu rate limit enable disable Command npu config set cpu rate limit enable disable Syntax Privilege 10 Level Syntax Descriptio Parameter Description Presence Default Possible Values Value enable Indicates whether this feature Mandat
336. re the thresholds soft and hard limits for CPU and memory utilization for the unit When the soft or hard limit for either CPU or memory utilization is reached an alarm is raised INFORMATION To display the current thresholds that are configured for CPU and memory utilization refer to y Section 3 3 5 1 2 BreezeMAX Mini Centralized ASN GW System Manual eo 91 Chapter 3 Operation and Administration Using the CLI Unit Configuration To configure the thresholds soft and hard limits for CPU and memory utilization run the following command npu config limit cpu memory softlimit lt limit gt hardlimit lt limit gt For example run the following command if you want to configure the soft and hard limits for CPU utilization to be 80 and 85 percent respectively npu config limit cpu softlimit 80 hardlimit 85 INFORMATION An error may occur if the value of the softlimit parameter is higher than the hardlimit pa parameter Command npu config limit cpu memory softlimit lt integer 1 99 gt hardlimit Syntax lt integer 1 99 gt Privilege 10 Level Syntax pescnptio Parameter Description Presence Default Possible Values n Value cpu memory Indicates whether the threshold Mandatory N A cpu memory is to be specified for CPU or memory utilization softlimit Indicates the soft limit as a Optional 70 for 1 99 lt integer percentage for CPU memory CPU and
337. reezeMAX Mini Centralized ASN GW System Manual ae 21 Chapter 3 Operation and Administration Using the CLI In This Chapter Using the Command Line Interface CLI on page 23 Shutting Down Resetting the System on page 48 Unit Configuration on page 51 Managing MS in ASN GW on page 343 Monitoring Hardware and Software Performance on page 347 3 1 3 1 1 Chapter 3 Operation and Administration Using the CLI Using the Command Line Interface CLI Using the Command Line Interface CLI The following system management options using CLI are available M Accessing the Command Line Interface CLI locally via the MON port M Using Telnet Secure Shell SSH to access the CLI The CLI is a configuration and management tool that you can use to configure and operate the unit either locally or remotely via Telnet SSH The following are some administrative procedures to be executed using the CLI Selecting the connectivity mode Shutting down resetting the unit Configuring and operating the unit Monitoring hardware and software components Executing debug procedures Executing software upgrade procedures This section provides information about Accessing the CLI on page 23 Command Modes on page 26 Interpreting the Command Syntax on page 27 Using the CLI on page 28 Managing Users and Privileges on page 31 Managing Secure Shell SSH Parameters on page 40
338. rization and IP host configuration management This reference point is logical in that it does not reflect a direct protocol interface between the MS and CSN The authentication part of reference point R2 runs between the MS and CSN operated by the home NSP however the ASN and CSN operated by the visited NSP may partially process the aforementioned procedures and mechanisms Reference point R2 might support IP host configuration management running between the MS and CSN operated by either the home NSP or visited NSP E Reference point R3 consists of the set of control plane protocols between the ASN and CSN to support AAA policy enforcement and mobility management capabilities It also encompasses the bearer plane methods e g tunneling to transfer user data between the ASN and CSN E Reference point R4 consists of the set of control and bearer plane protocols originating terminating in various functional entities of an ASN that coordinate MS mobility between ASNs and ASN GWs R4 is the only interoperable reference point between similar or heterogeneous ASNs BreezeMAX Mini Centralized ASN GW System Manual O Chapter 1 System Description WiMAX Network Reference Model E Reference point R5 consists of the set of control plane and bearer plane protocols for internetworking between the CSN operated by the home NSP and that operated by a visited NSP E Reference point R6 consists of the set of control and bearer plane protocols for c
339. rks of the WiMAX Forum Statement of Conditions The information contained in this manual is subject to change without notice Alvarion Ltd shall not be liable for errors contained herein or for incidental or consequential damages in connection with the furnishing performance or use of this manual or equipment supplied with it Warranties and Disclaimers All Alvarion Ltd Alvarion products purchased from Alvarion or through any of Alvarion s authorized resellers are subject to the following warranty and product liability terms and conditions Exclusive Warranty a Alvarion warrants that the Product hardware it supplies and the tangible media on which any software is installed under normal use and conditions will be free from significant defects in materials and workmanship for a period of fourteen 14 months from the date of shipment of a given Product to Purchaser the Warranty Period Alvarion will at its sole option and as Purchaser s sole remedy repair or replace any defective Product in accordance with Alvarion standard R amp R procedure b With respect to the Firmware Alvarion warrants the correct functionality according to the attached documentation for a period of fourteen 14 month from invoice date the Warranty Period During the Warranty Period Alvarion may release to its Customers firmware updates which include additional performance improvements and or bug fixes upon availability the Warranty
340. rmit Deny Rules in the Standard ACL Mode lt src ip ad dress gt a specific destination IP address is permitted or denied Parameter Description Example Source IP any Indicates that incoming traffic npu config std nacl from any source IP address is permit any permitted or denied npu config std nacl deny any host Indicates that incoming traffic npu config std nacl lt src ip ad from a specific source IP permit host 1 1 1 1 dress gt address is permitted or denied npu config std nacl1 deny host 1 1 1 1 lt network s Indicates that incoming trafficis npu config std nac1 rc ip gt to be permitted or denied fora permit 1 1 1 0 lt mask gt particular subnet 255 255 255 0 npu config std nacl1 deny 1 1 1 0 255 255 255 0 Destination any Indicates that traffic destined to npu config std nac1 IP address all NPU IP addresses is permit host 1 1 1 1 any permitted or denied npu config std nacl deny host 1 1 1 1 any host Indicates that traffic destined to npu config std nacl permit any host 1 1 1 1 npu config std nacl deny any host 1 1 1 1 lt network s rc ip gt lt mask gt Indicates that traffic destined to a particular subnet is to be permitted or denied npu config std nacl permit any 1 1 1 0 255 255 255 0 npu config std nacl deny any 1 1 1 0 255 255 255 0 Command Syntax npu config std nacl per
341. rovide an invalid value for the start port and end port parameters Q Refer the syntax description for more information about the appropriate values and format for configuring these parameters Command npu config clsfrule no sreport lt start port gt lt end port gt Syntax Privilege 10 Level Syntax Bescripsle Parameter Description Presence Default Possible Values a Value lt start port gt Denotes the starting value of Optional N A 1 65535 port range to be deleted lt end port gt Denotes the end value of port Optional N A 1 65535 range to be deleted Command L3 Classification rules configuration mode Modes 3 3 9 11 4 8 Managing Destination Ports Range Configuration for the L3 Classification Rule Classification can be based on the destination port of the packet You can configure the range of destination ports for a given classification rule ko To configure a destination ports range classifier BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration 1 Enable the destination port configuration mode refer to Section 3 3 9 11 4 8 1 2 Enable disable the destination port range refer to Section 3 3 9 11 4 8 2 Section 3 3 9 11 4 8 3 3 Terminate the destination port configuration mode refer to Section 3 3 9 11 4 8 4 In addition you can at any time delete an existing destination port configurati
342. rp dhcprelay Opt82 config Suboptlvalue Default MSID BSID NASID NASIP Full NAI Domain asciiMsID asciiBsID asciiBsMac AsciiFrStrng lt string 32 gt BinFrStrng lt string 32 gt Subopt2value Default MSID BSID NASID NASIP Full NAI Domain asciiMsID asciiBsID asciiBsMac AsciiFrStrng lt string 32 gt BinFrStrng lt string 32 gt Suboptovalue Default MSID BSID NASID NASIP Full NAI Domain AsciiFrStrng lt string 32 gt BinFrStrng lt string 32 gt Subopt7value service type vendor specific session timeout EnableUnicast DisableUnicast 10 Parameter Description Presence Default Possible Values Value Suboptlvalue Configures the suboption 1 Optional Not Set E Default Default MSID B Agent Circuit ID of DHCP E MSID SID NASID NAS option 82 E BSID a yet Dow For AsciiFrStrng string enter pen ecg Ne up to 32 etna i SA sciiBsID asciiBs i E NASIP Mac AsciiFrStrn For BinFrStrng string enter a E Full NAI g string of up to 32 hexadecimal E Domain Zst Bi P string 32 gt Bin digits no spaces E asciiMsID FrStrng lt string 32 gt E asciiBsID E asciiBsMac E AsciiFrStrng string32 E BinFrStrng string32 BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration Subopt2value Configures the suboption 2 Optional Not Set E Def
343. rs 1 9 gt lt ipv4addr gt lt ipv4addr gt Run the following command without specifying the parameters to delete all excluded IP addresses for the DHCP server npu config srvcgrp dhcpserver no exclude addr The deleted exclude IP addresses are no longer excluded when the DHCP server allocates the IP addresses That is the server may allocate these IP addresses to the MS npu config srvcgrp dhcpserver no exclude addr no of Addrs 1 9 gt lt ipv4addr gt lt ipv4addr gt 10 BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration Syntax peseriptio Parameter Description Presence Default Possible Values j Value lt no of Addrs The number of excluded IP Optional N A 1 9 1 9 gt addresses to be deleted Do not specify any value if you want to remove all the exclude IP addresses specified for that DHCP server lt ipv4addr gt Denotes an IP address that you Optional N A Valid IP address want to remove from the list of exclude IP addresses The number of IP address entries must match the value defined by the no of Addrs parameter Do not specify any value if you want to remove all the exclude IP addresses specified for that DHCP server Command Service group DHCP server configuration mode Modes 3 3 9 10 4 2 5 Terminating the DHCP Server Configuration Mode Run the following comman
344. rt number 1 65535 gt eq lt port number 1 65535 gt range lt port number 1 65535 gt lt port number 1 65535 gt any host lt dest ip address gt lt dest ip address gt lt dest mask gt gt lt port number 1 65535 gt lt lt port number 1 65535 gt eq lt port number 1 65535 gt range lt port number 1 65535 gt lt port number 1 65535 gt Command npu config ext nacl no permit tcp any host lt src ip address gt Syntax lt src ip address gt lt src mask gt gt lt port number 1 65535 gt It for lt port number 1 65535 gt eq lt port number 1 65535 gt range lt port number Permit 1 65535 gt lt port number 1 65535 gt any host lt dest ip address gt Rule lt dest ip address gt lt dest mask gt gt lt port number 1 65535 gt It lt port number 1 65535 gt eq lt port number 1 65535 gt range lt port number 1 65535 gt lt port number 1 65535 gt npu config ext nacl no permit udp any host lt src ip address gt lt src ip address gt lt src mask gt gt lt port number 1 65535 gt It lt port number 1 65535 gt eq lt port number 1 65535 gt range lt port number 1 65535 gt lt port number 1 65535 gt any host lt dest ip address gt lt dest ip address gt lt dest mask gt gt lt port number 1 65535 gt It lt port number 1 65535 gt eq lt port number 1 65535 gt range lt port number 1
345. rtype lt value gt Format Command Global command mode Modes 3 3 2 3 Configuring IP interfaces The following IP interfaces are pre configured in the system E Local management E External management M Bearer gt To configure an IP interface 1 Enable the interface configuration mode refer Section 3 3 2 3 1 2 You can now Shut down Enable the Interface refer to Section 3 3 2 3 2 Assign an IP address to an interface refer to Section 3 3 2 3 3 Remove an IP address associated with an interface refer to Section 3 3 2 3 4 3 Modify the VLAN ID refer to Section 3 3 2 3 5 BreezeMAX Mini Centralized ASN GW System Manual OQ 69 Chapter 3 Operation and Administration Using the CLI Unit Configuration 4 Terminate the interface configuration mode refer to Section 3 3 2 3 6 You can at any time display configuration information for an IP interface refer to Section 3 3 2 3 7 You can also execute a ping test for testing connectivity with an IP interface refer to Section 3 3 2 3 8 INFORMATION n There is no need to shut down the interface for configuring its parameters 3 3 2 3 1 Enabling the Interface Configuration Mode To configure an IP interface run the following command to enable the interface configuration mode npu config interface lt interface type gt lt interface id gt external mgmt bearer local mgmt npu host The following table lists the IP interfaces tha
346. rveraddr and alternate serveraddr cannot have IP address assigned to NPU IP interfaces alternate ser Denotes IPv4 address of the Optional 0 0 0 0 Valid IP veraddr alternate secondary AAA Address lt ipv4 addr gt server 0 0 0 0 means no alternate server Must be set to a valid IP address if aaaRedundancy is enabled rad sharedsec Denotes the shared secret Optional default String 1 to ret lt string gt between the AAA client and 49 the AAA server characters aaaRedundancy Indicates whether AAA server Optional Disable E Enable Enable Disabl redundancy is supported E Disable BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration rad Callingst The format of the MAC Optional UTF 8 E Binary ationId address used to define the E UTF 8 Binary Calling Station ID UTF 8 Command AAA client configuration mode Modes 3 3 9 9 1 3 Restoring the Default Value of the Alternate Server Run the following command to restore the default value 0 0 0 0 Of the alternate server npu config aaa no alternate serveraddr NOTE The alternate server cannot be cleared restored to the default value id aaaRedundancy is enabled Command npu config aaa no alternate serveraddr Syntax Privilege 10 Level Command AAA client configuration mode Modes 3 3 9 9 1 4 Switching between the Primary and Alternate Servers
347. rvice profile service flow configuration mode Run the following command to restore the default values of one or several parameters for this service flow npu config srvcprf1 flow ulqos maxsustainedrate dlqos maxsustainedrate BreezeMAX Mini Centralized ASN GW System Manual no cs type media type ulqos trafficpriority uldatadlvry type dldatadlvry type dlqos trafficpriority ul rsrv rate min Chapter 3 Operation and Administration Using the CLI Unit Configuration ul latency max ul tolerated jitter ul unsol intrvl dl rsrv rate min dl latency max dl tolerated Jjitter Do not specify any parameter to restore all parameters to their default values INFORMATION A Refer to Section 3 3 9 11 3 3 2 for a description and default values of these parameters Command npu config srvcprfl flow no cs type media type uldatadlvry type Syntax ulqos maxsustainedrate ulqos trafficpriority dldatadlvry type dlqos maxsustainedrate dlqos trafficpriority ul rsrv rate min ul latency max ul tolerated jitter ul unsol intrvl1 dl rsrv rate min dl latency max dl tolerated Jjitter Privilege 10 Level Command Service profile service flow configuration mode Modes 3 3 9 11 3 3 4Configuring Uplink Downlink Classification Rule Names After enabling the service flow configuration mode run the following commands to configure up to a maximum of 6 uplink and 6 dow
348. s All commands that can be executed using the CLI are assigned privilege levels between 0 and 15 where O is the lowest and 15 is the highest In addition each user is assigned a privilege level the user can access only those commands for which the privilege level is the same or lower than the user s privilege level The system is supplied with the following default users E Maximum privilege user default user name is root with privilege level 15 The root user is reserved for the vendor Privilege level 15 enables executing all commands including commands associated with configuration of vendor parameters M Administrator user default user is admin default password is admin123 with privilege level 10 Privilege level 10 enables executing all commands excluding commands associated with configuration of vendor parameters BreezeMAX Mini Centralized ASN GW System Manual QO Q 3 1 5 Chapter 3 Operation and Administration Using the CLI Using the Command Line Interface CLI M Guest user default user name is guest default password is guest123 with privilege level 1 Privilege level 1 enables executing a minimal set of general commands and viewing configuration details through the show commands The EXEC commands available for users with privilege level 1 are clear screen disable lt 0 15 gt Privilege level to go to enable lt 0 15 gt Enable Level exit help command logout
349. s Denotes the client alias for Optional N A default or null gt which the associated AAA client information is to be displayed In the current release the client alias of the supported client is default Display AAA client Format Src intf IP Primary ServerAddr Alternate ServerAddr Radius Shared Secret lt not available for display gt Active AAA server AAA Redundancy Station ID Format Command Global command mode Modes In addition to configurable parameters the currently Active AAA server Primary Alternate is also displayed 3 3 9 9 2 Managing Global RADIUS Configuration Parameters Global RADIUS configuration parameters for AAA clients determine how AAA clients should send access requests This section describes the commands to be used for M Configuring Global RADIUS Parameters on page 188 HM Restoring the Default Global RADIUS Configuration Parameters on page 191 Displaying Global RADIUS Configuration Parameters on page 192 3 3 9 9 2 1 Configuring Global RADIUS Parameters To configure the global RADIUS configuration parameters to be used for all AAA clients run the following command BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration npu config radius lt accessreq retries lt retransmissions gt accessreq interval lt timeout gt nasid lt nas identifier gt timezone offset lt time offset 0
350. s and format for configuring these parameters Command npu config srvcgrp dhcpproxy config offerreuse holdtime lt integer gt Syntax lease interval lt integer gt dnssrvr addr lt string gt pool subnet lt string gt dflt gwaddr lt string gt renew interval lt integer gt rebind interval lt integer gt opt60 lt string 30 gt opt43 Name lt string 64 gt Value lt string 64 gt Sname lt string 64 gt File lt string 128 gt dnssrvr addr2 lt string gt Privilege 10 Level BreezeMAX Mini Centralized ASN GW System Manual OQ Syntax Descriptio n Chapter 3 Operation and Administration Using the CLI Unit Configuration Parameter Description Presence Default Value Possible Values offerreuse holdt ime lt integer gt Denotes the duration in seconds within which the MS should send a DHCP request to accept the address sent by the unit If the MS does not accept the address within this period the MS is deregistered Optional 5 0 120 lease interval lt integer gt Lease time in seconds of IP address allocated for MS from this Service Group In the Proxy mode this value is used if appropriate parameter is not received in RADIUS Access Accept Optional 86400 24 4294967295 dnssrvr addr lt string gt IP Address of the first DNS Server to be provisioned to MS from this Group In the Proxy mode t
351. s map num Indicates the identifier of the Mandatory N A ber 1 65535 gt QoS class map for which the QoS class map configuration mode is to be enabled 1 65535 BreezeMAX Mini Centralized ASN GW System Manual 98 Chapter 3 Operation and Administration Using the CLI Unit Configuration Command Global configuration mode Modes 3 3 6 1 2 Specifying 802 1p VLAN priority and or DSCP for a Class map NOTE If you are modifying the 802 1p VLAN priority and or DSCP for a class map that is associated with a QoS classification rule first disable the Qos classification rules for that ACL For details refer to Section 3 3 6 3 Command Syntax Privilege Level Syntax Descriptio n Command Modes After enabling the QoS class map configuration mode you can configure one or both of the following values for this QoS class map M DSCP value in the IPv4 packet header to indicate a desired service M 802 1p VLAN priority in the MAC header of the packet Run the following command to configure the 802 1p VLAN priority and or DSCP npu config cmap set cos lt new cos 0 7 gt ip dscp lt new dscp 0 63 gt npu config cmap set cos lt new cos 0 7 gt ip dscp lt new dscp 0 63 gt 10 Parameter Description Presence Default Possible Values Value cos Indicates the 802 1p VLAN Optional N A 0 7 where 0 is lt new cos 0 7 gt priority value to be applied for the lo
352. scription for more information about the appropriate values and format for configuring these i parameters NOTE If the bearer interface IP address is being modified after aaa client configuration you must re configure i the src intf parameter to bearer so that the aaa client will attach itself to the new bearer interface IP address Command npu config aaa config sre intf lt ip intf gt primary serveraddr Syntax lt ipv4addr gt alternate serveraddr lt ipv4addr gt rad sharedsecret lt string gt aaaRedundancy Enable Disable rad CallingStationId Binary UTF 8 Privilege 10 Level BreezeMAX Mini Centralized ASN GW System Manual OQ Syntax Description Chapter 3 Operation and Administration Using the CLI Unit Configuration e If enabled the ASN GW will try switching to the alternate server if the primary server does not respond and vide versa If enabled the ip address of the active server primary or alternate cannot be modified Parameter Description Presence Default Possible Value Values src intf Indicates the interface Optional bearer bearer lt ip intf gt providing RADIUS client functionality Must be the bearer interface primary serve Denotes IPv4 address of the Mandatory 172 16 0 10 Valid IP raddr primary AAA server Address lt ipv4addr gt f primary serveraddr and alternate serveraddr cannot be the same primary se
353. se sensitive EnableFlag lt in Indicates whether traps Optional 1 E 1 Indicates teger 1 for sending to the Trap Manager is enable enable 2 for to be enabled or disabled E 2 Indicates disable gt disable Command Global configuration mode Modes NOTE A route to forward traps to a configured Trap Manager IP address must exist For details refer to Configuring Static Routes on page 110 3 3 12 2 2 Deleting an Entry for the Trap Manager To delete a Trap Manager run the following command npu config no trap mgr ip source lt ip_addr gt NOTE An error may occur if the IP address you have specified does not exist Command Syntax npu config no trap mgr ip source lt ip_addr gt BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Privilege 10 Level Syntax Deschiptlo Parameter Description Presence Default Possible Values n Value lt ip_addr gt Indicates the IP address of the Mandatory N A Valid IP address Trap Manager to be deleted Command Global configuration mode Modes 3 3 12 2 3 Enabling Disabling the Trap Manager Traps are sent to a particular Trap Manager only if it is enabled Run the following commands to enable disable the Trap Manager that you have created INFORMATION By default all Trap Managers are enabled y p g npu config trap mgr enable ip source lt ip_addr gt npu co
354. sed local craft terminal E Subscriber IP domain The unit supports subscriber IP domain through multiple VLAN service interfaces To enable separation of the bearer IP and NMS IP domains the following user configurable connectivity modes are defined HM Out of band connectivity mode In this connectivity mode the bearer and external NMS IP domains are separated at the Ethernet interface The DATA port and bearer VLAN is used for the bearer IP domain and the MGMT port and external management VLAN is used for external NMS connectivity The CSCD port is assigned to the local management VLAN E in band connectivity mode In this connectivity mode the VLAN is used to differentiate between the bearer and external NMS IP domains on the DATA port The bearer VLAN is used for the bearer IP domain and the external management VLAN is used for the external NMS IP domain The MGMT and CSCD ports are assigned to the local management VLAN in this connectivity mode MH Unified connectivity mode In this connectivity mode the bearer IP domain and external NMS IP domain are unified That is the same IP address and VLAN are used to connect to the NMS server AAA server HA and BS The MGMT and CSCD ports are assigned to the local management VLAN in this connectivity mode NOTE For all connectivity modes the CSCD and MGMT ports operate in VLAN transparent bridging mode untagged access mode The assigned VLANs are used only for internal communicat
355. sed within these brackets are optional However the presence of at least one parameter is required to successfully execute this command npu config limit cpu memory softlimit lt limit gt hardlimit lt limit gt This command is used for specifying the soft and hard limits for memory and CPU utilization The softlimit and hardlimit parameters are enclosed within brackets indicating that you are required to specify the value of at least one of these parameters to successfully execute this command Indicates that the parameter enclosed within these brackets is optional npu config reboot from shadow lt shadow image name gt This command is used to reboot the system with the shadow image The shadow image name parameter is enclosed with the brackets indicating that it is optional If you do not specify the value of this parameter the system automatically boots up with the last downloaded shadow image BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Using the Command Line Interface CLI Table 3 4 Conventions Used in the Command Syntax Convention Description Example lt gt Indicates that the parameter is npu config load to shadow mandatory and requires a lt shadow image name gt user defined value and not a This command is used to load the system discrete value with a parti
356. server Not applicable if SNTP is disabled Must be set to a valid IP address if SNTP is enabled Secondary The IP address of the secondary Optional 0 0 0 0 IP address lt ip address gt SNTP server Not applicable if SNTP is disabled If set to the default 0 0 0 0 it means no secondary server Command Global configuration mode Modes 3 3 12 3 3 Configuring the Date and Time The UTC time is used to configure the following BreezeMAX Mini Centralized ASN GW System Manual 33 Chapter 3 Operation and Administration Using the CLI Unit Configuration E Local time Differs from the UTC time with respect to the value you have specified for the localUTCDiff and DST parameters The local time is equal to the sum of the UTC time the value of the localUTCDiff parameter local offset from UTC time and DST daylight saving time offset You can use the CLI to display the current local time For details refer the section Displaying the Date and Time Parameters on page 337 M System time Refers to the operating system kernel time that is identical to the UTC time when the system boots up The system time is updated every hour with the time received from the SNTP server if applicable E Real Time Clock RTC time Refers to the time maintained by the board s hardware clock By default the RTC time is set to 1st January 1970 The RTC time is updated every hour with the UTC time that is received from the SNTP server or
357. settings BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration using SNTP Simple Network Time Protocol for acquiring the time from SNTP server s If SNTP is enabled and an SNTP server is available the Date and Time used by the device will be updated every 12 hours according to information acquired from the SNTP server Local setting of Date and Time parameters is applicable only if SNTP is disabled or if no SNTP server is found When SNTP is enabled the device operates as an SNTP client supporting SNTP version 4 as defined in RFC 4330 Two SNTP servers can be defined Primary and Secondary Following 3 unsuccessful attempts to connect to the Primary server the device will try connecting to the Secondary server If no server is found the device will continue using the last known local Date and Time The device will send keep alive messages every 15 minutes in order to check the status of the server s This section describes the commands to be used for Enabling Disabling SNTP on page 332 Configuring the SNTP Server s on page 333 Configuring the Date and Time on page 333 Configuring the Daylight Saving Parameters on page 335 Displaying the SNTP Configuration Parameters on page 336 Displaying the Date and Time Parameters on page 337 Displaying the Daylight Saving Parameters on page 337 3 3 12 3 1 Enabling Disablin
358. sfrule no priority iptos low iptos high iptos mask iptos enable phs rulename 10 L3 Classification rules configuration mode Managing IP Protocol Configuration for the L3 Classification Rule L3 classification rules can classify the packet based on the value of IP protocol field You can configure the value of IP protocol for a given classification rule To configure IP protocol classifier 1 Enable the IP protocol configuration mode refer to Section 3 3 9 11 4 4 1 2 Enable disable IP protocol classification refer to Section 3 3 9 11 4 4 2 and Section 3 3 9 11 4 4 3 3 Terminate the protocol configuration mode refer to Section 3 3 9 11 4 4 4 In addition you can at any time delete an existing protocol classifier refer to Section 3 3 9 11 4 4 5 The following example illustrates the sequence of commands for enabling the IP protocol configuration mode enabling IP protocol 100 and then terminating the protocol lists configuration mode npu config clsfrule ip protocol npu config clsfrule protocol protocol enable 1 100 npu config clsfrule protocol exit 3 3 9 11 4 4 1 Enabling the IP Protocol Configuration Mode Command Syntax Run the following command to enable the IP protocol configuration mode npu config clsfrule ip protocol You can now enable or disable the IP protocol I refer to Section 3 3 9 11 4 4 2 and Section 3 3 9 11 4 4 3 npu config clsfrule ip protocol BreezeMAX Mini Ce
359. sing the CLI Unit Configuration Parameter Description Presence Default Possible Value Values lt frame size 15 Indicates the MTU in bytes to mandatory For the DATA 1518 9000 18 9000 gt be configured for the physical and CSCD for the DATA interface interfacesthe interface For the DATA interface the cs 1518 1522 range is from 1518 to 9000 f 1526 1536 For all other interfaces the Parine 1P 1094 following values are supported ae ee ea interface the for all other by the hardware 1518 1522 detaili ateraco 1526 1536 1552 1664 1522 2048 9022 Interface configuration mode Managing VLAN Translation The unit supports translation of the VLAN ID for packets received and transmitted on the DATA port to a configured VLAN ID The DATA port operates in VLAN aware bridging mode tagged trunk mode The values configured for VLAN ID s used on this port are the VLAN IDs used internally These are the VLAN ID for the bearer IP interface the default is 11 and in In Band Connectivity mode the VLAN ID of the external management IP interface the default is 12 If the value of the VLAN ID s used for data and if applicable for management traffic in the backbone differs from the value configured for the bearer and if applicable external management interface the VLAN ID s configured for the IP interface s should be translated accordingly Note that the data bearer interface traffic includes
360. ssfully with few exceptions message You can then view the failed CLls using the following command npu show apply fail details According to the failures details you can perform the necessary corrective actions The intent to have this feature is to address scenarios when migration tool can not determine consistency checks rules between parameters tables Command npu show apply fail details Syntax BreezeMAX Mini Centralized ASN GW System Manual Privilege Level Command Modes 3 3 3 4 9 Command Syntax Privilege Level Display Format Command Modes 3 3 4 Chapter 3 Operation and Administration Using the CLI Unit Configuration 10 Global command mode Displaying the Currently Stored Backup Configuration Files To display a list of backup configuration files that are currently residing on the NPU flash run the following command npu show backup configuration files The three most recent backup configuration files are displayed The format of the backup configuration file name is YYYYMMDDHHMM xml gz where YYYYMMDDHHMM indicates the creation date and time of the zipped XML configuration file npu show backup configuration files 10 1 lt file name gt gz 2 lt file name gt gz 3 lt file name gt gz Global command mode Batch processing of CLI Commands You can use the CLI to batch process commands to be executed for configuring and monitoring the unit BreezeMAX Mini Cent
361. ssification rules configuration mode refer to Section 3 3 9 11 4 9 You can at any time display configuration information refer to Section 3 3 9 11 4 13 or delete an existing classification rule refer to Section 3 3 9 11 4 14 protocol lists refer to Section 3 3 9 11 4 4 5 source addresses refer to Section 3 3 9 11 4 5 5 destination addresses refer to Section 3 3 9 11 4 6 5 source ports refer to Section 3 3 9 11 4 7 5 or destination ports refer to Section 3 3 9 11 4 8 5 configured for this classification rule BreezeMAX Mini Centralized ASN GW System Manual OQ 3 3 9 11 4 1 Chapter 3 Operation and Administration Using the CLI Unit Configuration To configure one or more L2 classification rules 1 Enable the L2 classification rules configuration mode refer to Section 3 3 9 11 4 1 2 You can now execute any of the following tasks Configure the parameters for this classification rule refer to Section 3 3 9 11 4 10 Clear the configuration of this classification rule refer to Section 3 3 9 11 4 11 Terminate the L2 classification rules configuration mode refer to Section 3 3 9 11 4 12 You can at any time display configuration information refer to Section 3 3 9 11 4 13 or delete an existing classification rule refer to Section 3 3 9 11 4 14 peeing the Classification Rule Configuration Mode Creating a New Classification ule To configure the parameters for a classification rule first enabl
362. stination address configuration mode npu config clsfrule dstaddr exit Command _ npu config clsfrule dstaddr exit Syntax Privilege 10 Level Command L3 Classification rule destination address configuration mode Modes 3 3 9 11 4 6 5 Deleting Destination Address You can at any time run the following command to delete the destination address classifier npu config clsfrule no dstaddr lt ip Addr gt NOTE 7 soa eo An error may occur if you provide an invalid IP address Refer the syntax description for more tl information about the appropriate values and format for configuring this parameter Command npu config clsfrule no dstaddr lt ip Addr gt Syntax Privilege 10 Level BreezeMAX Mini Centralized ASN GW System Manual eo Chapter 3 Operation and Administration Using the CLI Unit Configuration Syntax Deschiple Parameter Description Presence Default Possible Values n Value lt ip Addr gt Denotes the IPv4 address of the Optional N A Valid IP Address destination address that you want to delete from a classification rule Command L3 Classification rules configuration mode Modes 3 3 9 11 4 7 Managing Source Ports Range Configuration for the L3 Classification Rule Classification can be based on the source port of the packet You can configure the value of a source port for a given classification rule mo To configure one or more source por
363. stration Using the CLI Unit Configuration Parameter Description Presence Default Possible Values Value acct The Accounting mode for the Optional time E none none time service interface E time none No accounting support time The ASN GW send RADIUS Accounting Start Stop Requests The ASN GW shall also send Interim Accounting requests to AAA server using RADIUS Accounting Interim messages on a preconfigured or negotiated interval AAA server can send negotiated time interval in Access Accept message If ASN GW defined value see acctInterimTmr below is zero and there is no Acct Interim Interval in Access Accept interim updates should be deactivated acctInterimTm Applicable only if acct see Optional 5 Eo r above mode is set to time The E 5 1600 lt integer 0 5 1 default interval in minutes for 600 gt Accounting Interim reports to be used if Acct Interim Interval is not received from the AAA server Value 0 means interim reports are deactivated unless Acct Interim Interval is sent by the AAA server in Access Accept messages Command _ VPWS QinQ Service group configuration mode Modes 3 3 9 10 7 Configuring the Parameters of a VPWS Mapped Service Group After enabling the service group configuration mode for a VPWS Mapped service group you can configure the following parameters for the service group Accounting parameters see Section 3 3 9 10 7 1 Breeze
364. t reserved for downlink traffic carried by the service flow used for multicasts Although available for all service flows applicable only for service flows with the appropriate data delivery type UGS NRTVR RTVR ERTVR For NRTVER RTVR and ERTVR cannot be higher than max sustained rate BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration max latency The maximum latency in ms Optional 500 0 4294967295 lt integer gt allowed in the downlink service flow used for multicasts Although available for all service flows applicable only for service flows with the appropriate uplink data delivery type UGS RTVR ERTVR If uplink data delivery type is ERTVR or UGS the default value should be 90ms max jitter the maximum delay variation Optional 0 0 4294967295 lt integer gt jitter in milliseconds for the downlink service flow used for multicasts Although available for all service flows applicable only for service flows with the appropriate uplink data delivery type UGS ERTVR media type lt string Describes the type of media Optional Null String up to 15 15 gt carried by the service flow characters Command VPLS Service group configuration mode Modes 3 3 9 10 8 3 Configuring the VLAN ID Parameter of a VPLS Service Group After enabling the service group configuration m
365. t Global command mode Managing the Session This section includes BreezeMAX Mini Centralized ASN GW System Manual eo 3 1 7 1 Command Syntax Privilege Level Command Modes 3 1 7 2 3 1 7 2 1 Chapter 3 Operation and Administration Using the CLI Using the Command Line Interface CLI M Locking the Session on page 43 HM Managing the Session Timeout on page 43 E Terminating the Session on page 46 Locking the Session To lock the session run the following commana npu lock This will prevent unauthorized persons from using the CLI without terminating the session The following message will be displayed CLI console locked Enter Password to unlock the console To resume the session you must enter the password used for initiating it npu lock 10 Global command mode Managing the Session Timeout The session timeout parameter defines the maximum allowed inactivity time after which the session will be terminated automatically The default timeout is 1800 seconds You can define a different value for the current Telnet SSH session You can also change the timeout value for the MON port sessions that will apply also to future sessions via the MON port This section includes HM Enabling the Line Configuration Mode on page 43 M Configuring the Session Timeout on page 44 M Restoring the Default Value of the Session Timeout on page 45 HM Displaying a Session
366. t TOS field to define the highest value where the range can end Cannot be lower than iptos low Can be modified only when IP TOS classification is disabled see iptos enable below If set to a value lower than iptos low IP TOS classification cannot be enabled iptos mask Denotes the mask for IP TOS Optional 0 0 63 lt value 0 63 gt value This mask is applied to the TOS field received in the IP header to be matched within the TOS range configured iptos enable Indicates whether the use of Optional By The TOS based classification is to default presence absenc be enabled the use of e of this flag TOS base indicates that d the use of classificati TOS based on is classification disabled should be enabled disable d Command L3 Classification rules configuration mode Modes 3 3 9 11 4 3 Restoring the Default Parameters for the L3 Classification Rule Run the following command to restore the default configuration for this classification rule npu config clsfrule no priority iptos low iptos high iptos mask iptos enable phs rulename INFORMATION pen Refer to Section 3 3 9 11 4 3 for a description and default values of these parameters BreezeMAX Mini Centralized ASN GW System Manual Command Syntax Privilege Level Command Modes 3 3 9 11 4 4 Chapter 3 Operation and Administration Using the CLI Unit Configuration npu config cl
367. t ul tolerated jitter lt integer gt ul unsol intrvl lt integer 0 65535 gt dl rsrv rate min lt integer 0 40000000 gt dl latency max lt integer gt dl tolerated jitter lt integer gt NOTE An error may occur if you provide an invalid value for any of these parameters Refer the syntax e description for more information about the appropriate values and format for configuring these Ul parameters Command npu config srvcprfl flow config flow type lt type 1 gt cs type lt type Syntax 1 4 gt media type lt string gt uldatadlvry type lt type 0 lt UGS gt 1 lt RTVR gt 2 lt NRTVR gt 3 lt BE gt 4 lt ERTVR gt 255 lt ANY gt gt ulgos maxsustainedrate lt value 10000 40000000 gt ulgos trafficpriority lt value 0 7 gt dldatadlvry type lt type 0 lt UGS gt 1 lt RTVR gt 2 lt NRTVR gt 3 lt BE gt 4 lt ERTVR gt 255 lt ANY gt gt dlqos maxsustainedrate lt value 10000 40000000 gt dlgos trafficpriority lt value 0 7 gt ul rsrv rate min lt integer 0 40000000 gt ul latency max lt integer gt ul tolerated jitter lt integer gt ul unsol intrvl lt integer 0 65535 gt dl rsrv rate min lt integer 0 40000000 gt dl latency max lt integer gt dl tolerated jitter lt integer gt Privilege 10 Level BreezeMAX Mini Centralized ASN GW System Manual OQ Syntax Descripti
368. t 0 65535 gt TrapCommunity lt string gt EnableFlag lt integer 1 for enable 2 for disable gt You can view configuration information for existing Trap Managers For details refer Section 3 3 12 2 4 NOTE An error may occur if E You have specified invalid values for the IP address Trap Community or port E The IP address is already configured for another Trap Manager You are trying to create more than five Trap Managers You can configure up to five Trap Managers for the system Command Syntax Privilege Level npu config trap mgr ip source lt ip_addr gt Port lt 0 65535 gt TrapCommunity lt string gt EnableFlag lt integer 1 for enable 2 for disable gt BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Syntax Descriptio parameter Description Presence Default Possible Values n Value lt ip_addr gt Indicates the IP address of the Mandatory N A Valid IP address Trap Manager to be added or modified Must be unique the same IP address cannot be assigned to more than one Manager Port Indicates the port number on Optional 162 0 65535 lt 0 65535 gt which the Trap Manager will listen for messages from the Agent TrapCommunity Indicates the name of the Optional public String up to 10 lt string gt community of the Trap characters and Manager ca
369. t Mask and Default Gateway 2 Click on Apply to accept the changes BreezeMAX Mini Centralized ASN GW System Manual O 2 2 1 2 2 2 2 2 2 3 22 3 1 2 2 3 2 2 2 3 2 Chapter 2 Commissioning Completing the Configuration Using AlvariSTAR Connectivity Management Page Management Interface Tab To support proper automatic management of IP Routes for Trap Managers TFTP Servers and SNTP Servers the External Management Next Hop Gateway must be defined not applicable in Unified Connectivity Mode 1 If applicable configure the External Management Next Hop Gateway 2 Click on Apply to accept the change Equipment Configuration GPS In the Navigation pane select the Equipment External GPS option The default GPS Type synchronization source is None If SNTP is used the SNTP option should be selected Configure also the IP address of the Primary Server and if applicable the IP address of the Secondary Server If necessary configure the Time Zone Offset From UTC and the Daylight Saving parameters Click Apply for the device to accept the changes ASNGW Configuration AAA Page 1 Configure the following mandatory parameters Primary Server IP Address RADIUS Shared Secret the same Shared Secret should also be defined in the AAA server ASNGW NAS ID 2 Click Apply for the device to accept the configuration Service Group Page Service Interfaces Tab At least one Service Interface for data
370. t dest mask gt gt lt port number 1 65535 gt It lt port number 1 65535 gt eq lt port number 1 65535 gt range lt port number 1 65535 gt lt port number 1 65535 gt npu config ext nacl deny udp any host lt src ip address gt lt src ip address gt lt src mask gt gt lt port number 1 65535 gt It lt port number 1 65535 gt eq lt port number 1 65535 gt range lt port number 1 65535 gt lt port number 1 65535 gt any host lt dest ip address gt lt dest ip address gt lt dest mask gt gt lt port number 1 65535 gt It lt port number 1 65535 gt eq lt port number 1 65535 gt range lt port number 1 65535 gt lt port number 1 65535 gt Privilege 10 Level Syntax Pescniption Parameter Description Presence Default Possible Values Value any host Indicates the source host for Mandatory N A For details refer lt src ip addres which incoming TCP UDP Table 3 20 s gt traffic is permitted denied lt src ip addres s gt lt src mask gt gt Indicates the source port from Optional 0 65535 For details refer lt port number which incoming TCP UDP Table 3 20 1 65535 gt traffic is permitted denied lt lt port number 1 65535 gt eq lt port number 1 65535 gt range lt port number 1 65535 gt lt port number 1 65535 gt BreezeMAX Mini Centralized ASN GW System Manual OQ
371. t each parameter represents Table 3 12 Parameters for Configuring the Interface Configuration Mode IP Interfaces IP Interface Parameter Example External management external mgmt npu config interface external mgmt Bearer bearer npu config interface bearer Local management local mgmt npu config interface local mgmt NOTE To enable the interface configuration mode for IP interfaces specify values for the for external mgmt bearer local mgmt only The interface type and interface id parameters are used for enabling the interface configuration mode for physical interfaces the npu host parameter is used for enabling the interface configuration mode for virtual interface For more information about configuring physical interfaces refer Section 3 3 2 1 refer Section 3 3 2 4 for configuring virtual interface Command Syntax After enabling the interface configuration mode for this interface you can M Shut down Enable the Interface refer to Section 3 3 2 3 2 E Assign an IP address to an interface refer Section 3 3 2 3 3 M Remove an IP address associated with an interface refer Section 3 3 2 3 4 M Modify the VLAN ID refer Section 3 3 2 3 5 npu config interface lt interface type gt lt interface id gt external mgmt bearer local mgmt npu host BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Confi
372. this parameter the unit de registers the MS eapCounterTransferMax The number of times the unit can retransmit the EAP ID request until it receives a EAP ID response eapCounterReAuthAttemptMax The maximum number of times the unit may handle a an MS network initiated re authentication request When the number of re authentication attempts exceeds the value of this parameter the MS is de registered BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration authTimerReauthCmpltHold The period in milliseconds within which re authentication of the MS should be complete If the MS is not authenticated within this period the unit reinitiates MS authentication eapCounterRndTripsMax The number EAP roundtrips in one authentication re authentication process authTimerPmkLifetime The period in seconds for which the MS authentication key is valid At the end of this period the unit de registers the MS authTimerPmkGaurd The duration of the guard timer for the MS authentication keys the unit initiates re authentication for the MS after the pmk guard timer has expired The value of this timer is pmk lifetime pmk guardtime If the value of this parameter is O the guard timer is not started authTimerAuthFailureHold The period in seconds for which the MS context is retained after authentication failure authCounterNtw
373. tion Rules Updated and corrected the sections related Section 3 3 9 11 4 to L2 classifiers Configuring Performance Data Updated section content updated April 2010 Collection supported counters groups Section 3 3 11 Monitoring Software Components Removed display of real time counters not supported by CLI Displaying Statistics for Physical Removed display of real time counters not and IP Interfaces supported by CLI Displaying the VLAN Translation Updated command syntax Entries Section 3 3 2 1 7 Configuring Logging Updated severity levels for module level June 2010 BreezeMAX Mini Centralized ASN GW System Manual Document History Topic Description Date Issued Configuring the Unique Identifier Section 3 3 2 3 8 Updated range for site id Resetting the system Section 3 2 2 1 Updated command syntax and command mode Testing Connectivity to an IP Interface Section 3 3 2 3 8 New command ping test Configuring Parameters for the PHS Rule Section 3 3 9 12 2 Corrected definition for verify in Possible Values June 2010 Specifying Service Flow Configuration Parameters section 2 3 9 11 3 3 2 Updated Possible Value range for media type up to 15 Version 3 0 10 December 2010 Downgrading procedure Section A 3 New section new command allow migration General Description Section 1 3 Updated Stackable solution is supported aggregate throughput up to 200Mbps is
374. tion Rules and Class Maps IP Interface Type of Traffic Protocol Source Class DSCP 802 1p Port Map Bearer RADIUS UDP 1812 1 7 7 Bearer MobilelP Agent UDP 434 2 7 7 BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Table 3 14 Pre Configured QoS Classification Rules and Class Maps IP Interface Type of Traffic Protocol Source Class DSCP 802 1p Port Map Bearer WIMAX ASN UDP 2231 3 7 7 Control Plane Protocol External Management Telnet TCP 23 6 0 0 External Management SSH Remote TCP 22 7 0 0 Login Protocol External Management SNMP UDP 161 8 0 0 NOTE e The default pre configured QoS classification rules cannot be deleted or modified After configuring QoS classification rules for this ACL enable QoS marking for this ACL By default QoS marking is disabled For details refer to Section 3 3 6 3 Run the following command to configure a QoS classification rule for this ACL npu config ext nacl qos mark host lt src ip address gt tcep udp sreport lt short 1 65535 gt qosclassifier lt short 1 65535 gt When you execute this command a new QoS classification rule is added to the ACL for which the configuration mode is enabled NOTE An error may occur if i E You have specified a source port that is not within the range 1 65535 E The h
375. tion mode refer Section 3 3 8 1 1 BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration 2 After you enter the ACL configuration mode you can Configure ACLs in the standard mode refer to Section 3 3 8 1 2 Configure ACLs in the extended mode refer to Section 3 3 8 1 3 3 Terminate the ACL configuration mode refer to Section 3 3 8 1 4 4 After you have configured the ACL you can attach the ACL to the NPU host virtual interface refer to Section 3 3 8 3 3 3 8 1 1 Enable the ACL Configuration Mode Creating an ACL To configure an ACL first enable either of the following ACL configuration modes E Standard M Extended NOTE ACL 199 is the default extended ACL that is pre configured in the system and is not attached to any e interface that is it is INACTIVE However ACL 199 is reserved for QoS classification rules You cannot configure Permit Deny rules for ACL 199 To view the default configuration information for ACL 199 you can run the following command npu show access lists 199 For details on using ACL 199 refer to Section 3 3 6 To apply this ACL to traffic destined towards the NPU you are required to activate this ACL for details refer Section 3 3 8 3 Run the following command to enable the ACL configuration mode You can also use this command to create a new ACL npu config ip access list standard lt access l
376. tly enabled BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration npu config clsfrule dstport no port enable NOTE To enable this destination port range run the following commana e npu config clsfrule dstport port enable l For details refer to Enabling the Destination Port Range on page 280 Command npu config clsfrule srcport no port enable Syntax Privilege 10 Level Command L3 Classification rules destination port configuration mode Modes 3 3 9 11 4 8 4Terminating the Destination Port Configuration Mode Run the following command to terminate the destination port configuration mode npu config clsfrule dstport exit Command npu config clsfrule dstport exit Syntax Privilege 10 Level Command L3 Classification rule destination port configuration mode Modes 3 3 9 11 4 8 5 Deleting Destination Ports Range Run the following command to delete the destination ports range npu config clsfrule no dstport lt start port gt lt end port gt NOTE An error may occur if you provide an invalid value for the start port and end port parameters Q Refer the syntax description for more information about the appropriate values and format for ll configuring these parameters BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuratio
377. tralized ASN GW System Manual e a Chapter 3 Operation and Administration Using the CLI Using the Command Line Interface CLI NOTE By default the privilege level of users logging in with admin privileges is 10 However the admin user can execute some additional commands for adding users and enabling passwords for different privilege levels You can also configure passwords for each privilege level Users with lower privilege levels can enter this password to enable higher privilege levels This section describes the commands for E Managing Users on page 32 HM Managing Privileges on page 34 E Enabling Disabling Higher Privilege Levels on page 37 HM Displaying Active Users on page 39 HM Displaying All Users on page 39 HM Displaying the Privilege Level on page 40 3 1 5 1 Managing Users You can add modify delete one or more users for accessing the CLI either through a local or remote terminal NOTE Only users who have logged in as admin can add modify delete users This section describes the commands for M Adding Modifying Users on page 32 HM Deleting a User on page 33 3 1 5 1 1 Adding Modifying Users NOTE e Only users who have logged in as admin can execute this task To add modify a user and assign a username password and privilege level run the following command npu config username lt user name gt password lt passwd gt privilege lt 1
378. ts 1 Enable the source port configuration mode refer to Section 3 3 9 11 4 7 1 2 Enable disable the source port range refer to Section 3 3 9 11 4 7 2 Section 3 3 9 11 4 7 3 3 Terminate the source port configuration mode refer to Section 3 3 9 11 4 7 4 In addition you can at any time delete an existing source port configuration refer to Section 3 3 9 11 4 7 5 The following example illustrates the sequence of commands for enabling the source port configuration mode enabling the source port range and then terminating the source port configuration mode npu config clsfrule srcport 20 50 npu config clsfrule srcport port enable npu config clsfrule srcport exit 3 3 9 11 4 7 1Enabling the Source Port Configuration Mode Creating a New Source Port To configure the parameters for a source port first enable the source port configuration mode Run the following command to enable the source port configuration mode This command also creates the new source ports range classifier npu config clsfrule srcport lt start port gt lt end port gt BreezeMAX Mini Centralized ASN GW System Manual 75 Chapter 3 Operation and Administration Using the CLI Unit Configuration NOTE An error may occur if you provide an invalid value for any of these parameters Refer the syntax e description for more information about the appropriate values and format for configuring these ll parameters The configuration
379. ty The session for which the Mandatory N A E console lt line gt timeout should be displayed E vty where console a session via the MON HS tne number of a port even if there is currently currently no active session via the MON active port Telnet SSH session vty An active Telnet SSH session number To view currently active sessions refer to Section 3 1 5 4 Display Current Session Timeout in secs lt value gt Format Command Global command mode Modes 3 1 7 3 Terminating the Session To terminate the session run the following command npu logout INFORMATION n You can terminate the session also by running the command npu exit Command npu logout Syntax BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Using the Command Line Interface CLI Privilege 0 Level Command Global command mode Modes BreezeMAX Mini Centralized ASN GW System Manual Q 3 2 Chapter 3 Operation and Administration Using the CLI Shutting Down Resetting the System Shutting Down Resetting the System This section describes the commands for E Shutting Down the System on page 48 E Managing System Reset on page 49 3 2 1 Shutting Down the System You can at any time use the CLI to shut down the system When you execute the shutdown command the system and all its processes are gracefully shut down It is also possible that the system may initi
380. ty to IP multimedia services and facilities to support lawful intercept services such as those compliant with Communications Assistance Law Enforcement Act CALEA procedures A CSN is comprised of network elements such as routers proxy servers user databases and inter working gateway devices Network Access Provider NAP An NAP is a business entity that provides WiMAX radio access infrastructure to one or more WiMAX network service providers NSPs A NAP implements this infrastructure using one or more ASNs BreezeMAX Mini Centralized ASN GW System Manual amp Q 1 2 4 1 2 5 1 2 6 Chapter 1 System Description WiMAX Network Reference Model Network Service Provider NSP An NSP is a business entity that provides IP connectivity and WiMAX services to WiMAX subscribers compliant with the established service level agreement The NSP concept is an extension of the Internet service provider ISP concept providing network services beyond Internet access To provide these services an NSP establishes contractual agreements with one or more NAPs An NSP may also establish roaming agreements with other NSPs and contractual agreements with third party application providers e g ASP ISP for the delivery of WiMAX services to subscribers From a WiMAX subscriber standpoint an NSP may be classified as a home or visited NSP Base Station BS The WiMAX BS is an entity that implements the WiMAX MAC and PHY in compliance with th
381. ue gt DstAddrenable lt 0 1 gt clsfRuleSrcPort Start lt value gt clsfRuleSrcPort End lt value gt clsfRulePortEnable lt 0 1 gt clsfRuleDstPort Start lt value gt clsfRuleDstPort End lt value gt clsfRulePortEnable lt 0 1 gt ClsfRulename lt value gt clsfRuleType L2 Cvid lt value gt Global command mode 3 3 9 11 4 14 Deleting Classification Rules Run the following command to delete one or all classification rules npu config no clsf rule lt rulename gt CAUTION Specify the rule name if you want to delete a specific classification Otherwise all the configured A classification rules are deleted Command npu config no clsf rule lt rulename gt Syntax Privilege 10 Level BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration Syntax pescnptio Parameter Description Presence Default Possible Values n Value lt rulename gt Denotes the name of the Optional N A String classification rule that you want to delete Specify this parameter only if you want to delete a specific classification rule otherwise all configured classification rules are deleted Command Global configuration mode Modes 3 3 9 12 Configuring PHS Rules Packet Header Suppression PHS is a mechanism that conserves air interface bandwidth by re
382. ule lt name gt 1 Protocol lt value gt only if defined Sro Port lt start value stop value gt only if defined Dst Port lt start value stop value gt only if defined Action lt drop pass redirect gt Direction lt uplink downlink gt Priority of looking for a match is according to the order of the displayed rules Command Global command mode Modes BreezeMAX Mini Centralized ASN GW System Manual OQ 3 3 9 13 5 Command Syntax Privilege Level Display Format Command Modes 3 3 9 14 Chapter 3 Operation and Administration Using the CLI Unit Configuration Displaying the Status of the Hot Lining Feature To display the status of the Hot Lining feature run the following command npu show hotlining status npu show hotlining status Hotlining status lt Enabled Disabled gt Global command mode Managing the ASN GW Keep Alive Functionality Once an MS enters the network its context is stored in ASN entities BS ASN GW Dynamically MS context could be transferred updated during HO and re authentication to other entities or duplicated to other entities separation between anchor functions such as Authenticator Data Path and Relay Data Path In certain cases such as entity reset other entities are not aware of service termination of an MS in that entity and keep maintaining the MS context This may result in service failure excessive consumption of memory resources a
383. ulename gt iptos low lt value 0 63 gt iptos high lt value 0 63 gt iptos mask lt value 0 63 gt iptos enable BreezeMAX Mini Centralized ASN GW System Manual CO Privilege Level Syntax Descriptio n Chapter 3 Operation and Administration Using the CLI Unit Configuration 10 Parameter Description Presence Default Possible Values Value priority Denotes the priority level to be Optional 0 0 255 lt priority 0 25 assigned to the classification 5 gt rule phs rulename Indicates the Packet Header Optional None String lt rulename gt Suppression PHS rule name to ys PP mu An existing PHS be associated with the ae rule name classification rule Specify the PHS rulename if you want to perform PHS for this flow For more information about configuring PHS rules refer Section 3 3 9 12 iptos low Denotes the value of the Optional 0 0 63 lt value 0 63 gt lowest IP TOS field to define the lowest value where the range can begin Cannot be higher than iptos high Can be modified only when IP TOS classification is disabled see iptos enable below If set to a value higher than iptos high IP TOS classification cannot be enabled BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration iptos high Denotes the value of highest IP Optional 0 0 63 lt value 0 63 g
384. up a A QinQ Service Interface cannot be deleted if it is assigned to a Service Flow with a VPWS QinQ Service Group For details refer to Configuring Service Flows on page 242 Command npu config no srvc intf lt intf alias gt Syntax Privilege 10 Level BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration Syntax DescHipten Parameter Description Presence Default Possible Values Value lt intf alias gt The alias of the Service Mandatory N A String interface which needs to be deleted Command Global configuration mode Modes 3 3 9 8 6 Displaying Configuration Information for the Service Interface To display configuration information for one or all service interfaces run the following command npu show srvc intf lt intf alias gt Specify a value for the int f alias parameter if you want to display configuration information for a particular service interface Do not specify a value for this parameter if you want to view configuration information for all service interfaces Command npu show srvc intf lt intf alias gt Syntax Privilege 1 Level Syntax Bescr tion Parameter Description Presence Default Possible Values Value lt intf alias gt The alias of the service Optional N A String interface that you want to display If you do not specify a value for this parameter all the services interf
385. vel Display Current shelf temperature lt value gt Celsius lt value gt Farenheit Format Command Global command mode Modes BreezeMAX Mini Centralized ASN GW System Manual amp e Chapter 3 Operation and Administration Using the CLI Monitoring Hardware and Software Perfor 3 5 1 3 Displaying Utilization of CPU and Memory Resources for the NPU To display the utilization of CPU and memory resources for the NPU run the following command npu show resource usage After you run this command the current CPU and memory usage is displayed INFORMATION For more information about setting thresholds for CPU and memory usage refer to Displaying CPU pa and Memory Utilization Limits on page 93 Command npu show resource usage Syntax Privilege 1 Level Display Resource Usage in Format CPU lt value gt Memory 7 lt value gt Command Global command mode Modes 3 5 1 4 Displaying Packets Discarded Via Rate Limiting To retrieve the number of packets discarded because of rate limiting for a specific or all applications pre defined user defined or all run the following command npu show rate limit counters ftp telnet tftp ssh icmp snmp R4 R6 igmp eap arp all others lt user defined app gt all INFORMATION N For more information about configuring rate limiting refer to Rate Limiting on page 93 BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter
386. vr addr2 IP Address of the second Optional 0 0 0 0 Valid IP address lt string gt DNS Server to be none provisioned to MS from this Group Command Modes Service Group DCHP server configuration mode BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration 3 3 9 10 4 2 2Restoring Configuration Parameters for the DHCP Server Run the following command to restore the default values of one or several DHCP server parameters This command can be used to delete the DNS server address configuration if specified npu config srvcgrp dhcpserver no lease interval renew interval rebind interval dnssrvr addr offerreuse holdtime dnssrvr addr2 Specify one or several parameters to restore the specified parameters to their default values Do not specify any parameter to restore all of these parameters to their default values INFORMATION j Refer to Section 3 3 9 10 4 2 1 for a description and default values of these parameters Command npu config srvcgrp dhepserver no lease interval renew interval Syntax rebind interval dnssrvr addr offerreuse holdtime dnssrvr addr2 Privilege 10 Level Command Service group DHCP server configuration mode Modes 3 3 9 10 4 2 3 Configuring Exclude IP Addresses for the DHCP Server Run the following command to configure exclude IP addresses for the DHCP server npu config srvcgrp
387. w id lt value gt flow type lt value gt srvc grp lt value gt Service If lt value or null gt CS type lt value gt edia Type lt value gt UL flowDataDeliveryType lt value gt UL flowQosMaxSustainedRate lt value gt UL flowQosTrafficPrority lt value gt DL flowDataDeliveryType lt value gt DL flowQosMaxSustainedRate lt value gt DL flowQosTrafficPrority lt value gt UL MinReservedTrafficRate lt value gt UL MaxLatencey lt value gt UL ToleratedJitter lt value gt UL UnsolicitedGrantInterval lt value gt DL MinReservedTrafficRate lt value gt DL MaxLatencey lt value gt DL ToleratedJitter lt value gt UL Rulenames lt value gt lt value gt DL Rulenames lt value gt lt value gt flow id lt value gt Global configuration mode Deleting Service Profiles Run the following command to delete one or all service profiles npu config no srvc profile lt profile name gt BreezeMAX Mini Centralized ASN GW System Manual Unit Configuration Chapter 3 Operation and Administration Using the CLI Unit Configuration INFORMATION The Default Service Profile cannot be deleted CAUTION Specify the profile name if you want to delete a specific service profile Otherwise all the configured A service profiles excluding the Default Service Profile are deleted Command npu config no srvc
388. ware Upgrade Before You Start A 1 Before You Start To load new NPU software files to the unit s flash memory you are required to execute a simple loading procedure using a TFTP application Before performing the upgrade procedure ensure that you have the most recent instructions and that the correct software files are available on your computer The NPU flash stores two software files Operational and Shadow When you download a new software file to the NPU flash the shadow file is overwritten with the newly downloaded file INFORMATION To view the current NPU software files refer to Displaying the Operational Shadow and Running Versions on page 360 BreezeMAX Mini Centralized ASN GW System Manual s5 A 2 Chapter A Software Upgrade Upgrading the NPU Upgrading the NPU To upgrade the NPU first configure the TFTP server that you want to use for the software version download and then download the image to the NPU flash You can then reboot the NPU with the downloaded image After you have tested and verified that the NPU is functioning properly with the shadow image you can make the shadow image as the operational image INFORMATION The operational image is the default image used for rebooting the NPU after system reset The shadow image is the downloaded image that you can use to boot up the NPU However the next time the system is reset it is the operational image that is used to boot
389. west and 7 this class map is the highest ip dsep Indicates the DSCP value to be Optional N A 0 63 lt new dscp 0 63 applied for this class map gt Class map configuration mode BreezeMAX Mini Centralized ASN GW System Manual eo eo 99 Chapter 3 Operation and Administration Using the CLI Unit Configuration 3 3 6 1 3 Deleting 802 1p and or DSCP Values from a Class map NOTE If you are deleting the 802 1p VLAN priority and or DSCP for a class map that is associated with a QoS classification rule first disable the QoS classification rules for that ACL For details refer to Section 3 3 6 3 Run the following command to delete the 802 1p VLAN priority and or DSCP for this class map npu config cmap no cos lt new cos 0 7 gt ip dsep lt new dscp 0 63 gt NOTE An error may occur if the 802 1p or DSCP that you have specified do not exist for this class map Command npu config cmap no cos lt new cos 0 7 gt ip dsep lt new dscp 0 63 gt Syntax Privilege 10 Level Syntax Descriptio Parameter Description Presence Default Possible Values a Value cos Indicates the 802 1p VLAN Optional N A lt new cos 0 7 gt priority to be deleted for this 0 7 class map ip dscp Indicates the DSCP to be Optional N A 0 63 lt new dscp 0 63 deleted for this class map gt Command Qos class map configuration mode Modes 3
390. when the bearer is used as the source for an IP in IP Service Interface Command npu config if no ip address Syntax Privilege 10 Level Command Interface configuration mode Modes 3 3 2 3 5 Configuring Modifying the VLAN ID for an IP Interface NOTE o If you change the VLAN ID of the bearer interface you must change the bearervlanid of all AUs served by the unit Run the following command to modify the VLAN ID for this interface npu config if if_vlan lt vlanid 9 11 100 110 4094 gt INFORMATION Refer Table 3 9 for the default VLAN IDs assigned to the bearer local management and pem external management interfaces NOTE An error may occur if ie E The VLAN ID you have specified is not within the specified range or is in use by another interface Refer the syntax description for the VLAN ID range E The VLAN ID is already used as a translated VLAN or a VLAN translation entry already exists for this VLAN BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Command npu config if if_vlan lt vlanid 9 11 100 110 4094 gt Syntax Privilege 10 Level Syntax pescHpuon Parameter Description Presence Default Possible Values Value lt vlanid 9 Indicates the VLAN ID to be Mandatory N A Ho 11 100 assigned to this interface E 11 100 110 4094 Note The VLAN IDs 1 8 10 E 110 4094 101 109 ar
391. wing command npu config if vlan mapping lt integer 9 11 100 110 4094 gt lt integer 9 11 100 110 4094 gt Specify the original VLAN ID and the translated VLAN ID NOTE An error may occur if Q E The original and or translated VLAN ID that you have specified is not within the allowed range E The translated VLAN ID that you have specified is already a member VLAN for this port E You are trying to create a VLAN translation entry for a VLAN that is not a member of DATA port E A VLAN translation mapping already exists for the original VLAN IDs that you have specified BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Command npu config if vlan mapping lt integer 9 11 100 110 4094 gt Syntax lt integer 9 11 100 110 4094 gt Privilege 10 Level Syntax Descriptio Parameter Description Presence Default Possible Values a Value lt integer 9 11 The first VLAN ID Indicates the Mandatory N A 9 11 100 100 110 4094 gt VLAN ID of the VLAN for which 110 4094 VLAN translation is required Legitimate values include E The Bearer VLAN ID default 11 E The External Management VLAN ID default 12 only in In Band Connectivity Mode lt integer 9 11 Indicates the translated VLAN Mandatory N A 9 11 100 100 110 4094 gt ID that is being mapped to the 110 4094 original VLAN ID Command Interface
392. wing command to delete an entry for a static route with the destination IP address 11 0 0 2 and the address mask 255 255 255 255 and next hop IP address 192 168 10 1 npu config no ip route 11 0 0 2 255 255 255 255 192 168 10 1 NOTE An error may occur if a route matching the specified parameters does not exist Command Syntax npu config no ip route lt ip_address gt lt ip_mask gt lt ip_nexthop gt BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration Privilege 10 Level Syntax Descriptio parameter Description Presence Default Possible Values n Value lt ip_address gt Indicates the destination host Mandatory N A Valid IP address or network IP address for which the route is to be deleted lt ip_mask gt Indicates the address mask for Mandatory N A Valid address the static route to be deleted mask lt ip_nexthop gt Indicates the next hop IP Mandatory N A Valid IP address address for the route to be deleted Must be in the subnet of one of the NPU IP interfaces Command Global configuration mode Modes 3 3 7 3 Displaying the IP Routing Table To display the IP routing table run the following command npu show ip route INFORMATION IP routes connected to an interface that is shut down are not displayed Command npu config show ip route Syntax Privilege 1 Level Breeze
393. ximum latency and minimum rate Based on certain classification rules service flows are transported over the R1 air interface in 802 16e connections identified by connection IDs and identified by GRE keys over the R6 interface in GRE tunnels In addition the ASN GW can mark outgoing traffic in the R3 interface for further QoS processing within the CSN The system supports two types of service flows according to the convergence sublayer CS type IP CS and VLAN CS An IP CS service flow can be associated only with an IP service group A VLAN CS service flow can be associated only with a VPWS Transparent QinQ Mapped service group Typically VLAN CS service flows should be managed created modified deleted only by the AAA server However to support special needs it is possible to define VLAN CS service flows for the Default Service Profile Up to 12 Service Flows can be defined for each Service Profile After enabling the service profile configuration mode execute the following tasks to configure service flows within this service profile 1 Enable the service flow configuration mode refer to Section 3 3 9 11 3 3 1 BreezeMAX Mini Centralized ASN GW System Manual OQ Chapter 3 Operation and Administration Using the CLI Unit Configuration 2 You can now execute any of the following tasks Configure the parameters for this service flow refer to Section 3 3 9 11 3 3 2 Restore the default parameters for this service flow r
394. ystem Manual OQ Chapter A Software Upgrade Upgrading the NPU Display Software version server lt Server IP Address gt Format Command Global command mode Modes A 2 4 Displaying the Download Status Information After initiating software download you can at any time view the download progress for the NPU image The progress of the image download procedure can be in any of the following stages E No Software Download has been initiated HM Downloading HM Decompressing E Validating HM Copying HM Writing to flash HM Download complete An error may occur while HM Downloading the software image from the TFTP server M Decompressing the downloaded file H Validating the downloaded file HM Copying of the software image to the NPU flash Run the following command to view the download status npu show download status npu After you run the above command the TFTP server address image name and version download status and the number of bytes that have been downloaded are displayed NOTE An error may occur if you execute this command when no download procedure is in progress Command Syntax npu show download status npu BreezeMAX Mini Centralized ASN GW System Manual Chapter A Software Upgrade Upgrading the NPU Display Mananged Object NPU Format Image Name lt Downloaded Image Name gt Software version server lt IP Address of TFTP Server gt Download Status lt Download Status gt D
395. z in the path tftpboot management performance It is recommended that you periodically make a backup of these files on an external server After you have enabled collection and storage of performance data is fetched every quarter of an hour Command npu config pm group enable npu BckhlPort CascPort ExtMgmtIf Syntax BearerIf AaaClient R6InterfaceTotal R6InterfaceBs ProvisionedQOs R3Interface InitialNe Privilege 10 Level Command Global configuration mode Modes 3 3 11 2 Disabling Collection and Storage of Performance Data To disable collection and storage of performance data for one group run the following command To disable collection and storage of performance data for a counters group BreezeMAX Mini Centralized ASN GW System Manual Chapter 3 Operation and Administration Using the CLI Unit Configuration npu config no pm group enable npu BckhlPort CascPort ExtMgmtIf BearerIf f AaaClient R6InterfaceTotal R6 InterfaceBs ProvisionedQoOs R3Interface InitialNe INFORMATION A Using this command you can disable collection of performance data for only one group at a time For example run the following command if you want to disable performance data collection and storage for the Data Backhaul Port npu config no pm group enable npu BckhlPort Command npu config no pm group enable npu BckhlPort CascPort ExtMgmtIf Syntax BearerIf AaaClient R6Inter

MC ASN-GW System Manual, Ver.3.5

Contents

Download Pdf Manuals

Related Search

Related Contents