NS-2250コマンドリファレンス-03

Transcription

1 NS-2250

2 U U U U c SEIKO A VCCI-A

3 SmartCS SmartCS SmartCS

4 set hostname set ipaddr unset ipaddr set tcpkeepalive set bonding up delay enable bonding disable bonding IP create ip host delete ip host IP create ip route delete ip route DNS set dns set dns localdomain unset dns unset dns localdomain LAN set ether nego create user

5 set user password set user port set user sshkey unset user sshkey delete user SNMP set snmp location set snmp contact set snmp authentrap set snmp linktrap set snmp dsrtrap set snmp coldstarttrap set snmp powertrap set snmp bondingactswtrap unset snmp location unset snmp contact enable snmp disable snmp SNMP set trap manager unset trap manager SNMP set community unset community SYSLOG set syslog host unset syslog host enable syslog disable syslog NFS set nfs server addr set nfs server proto set nfs rotate unset nfs server addr enable nfs disable nfs SNTP set sntp server set sntp polltime unset sntp server enable sntp disable sntp tty set tty baud set tty bitchar

6 set tty parity set tty stop set tty flow set tty detect dsr logd add logd tty mail add logd tty ftp set logd output set logd tstamp set logd tty log set logd tty lstamp set logd tty syslog set logd tty sendlog set logd tty mail port set logd tty mail type set logd tty mail subject set logd tty mail sender set logd tty mail auth unset logd tty mail auth remove logd tty mail remove logd tty ftp portd set portd connect set portd menu set portd auth set portd telrw set portd telro set portd sshrw set portd sshro set portd idle timeout set portd ro timeout set portd tty session set portd tty limit set portd tty brk char set portd tty nl set portd tty cmdchar set portd tty label set portd tty timeout unset portd tty label console set console telnetd set telnetd port enable telnetd disable telnetd

7 4.19 sshd set sshd auth set sshd port set sshd host key enable sshd disable sshd ftp enable ftpd disable ftpd create allowhost delete allowhost create auth access group set auth mode set auth su cmd username set auth radius retry set auth radius server addr set auth radius server port set auth radius server key set auth radius server timeout set auth radius server portusr set auth radius server normal set auth radius server root set auth radius server nas id set auth radius server def user set auth tacacs server addr set auth tacacs server key set auth tacacs server timeout set auth tacacs def user unset auth radius server addr unset auth radius server portusr unset auth radius server normal unset auth radius server root unset auth radius server nas id unset auth tacacs server addr delete auth access group set acct mode set acct radius retry set acct radius auth deny stop set acct radius server addr set acct radius server port set acct radius server key set acct radius server timeout

8 set acct radius server nas id set acct tacacs auth deny stop set acct tacacs server addr set acct tacacs server key set acct tacacs server timeout unset acct radius server addr unset acct radius server nas id unset acct tacacs server addr set terminal default editing set terminal default height set terminal default width set terminal default page set terminal default prompt set terminal default redisp set terminal default timeout timezone set timezone set temperature adjust show version show environment show slot show cpu show memory show log show support show bonding show ether show stats ether show ip show ip host show ip route show tcp show udp show stats ip show arp show stats tcp show stats udp show dns

9 show user show user login SNMP show snmp SNTP show sntp SYSLOG show syslog NFS show nfs show portd show portd tty show portd session show tty show stats tty show logd show stats logd tty CONSOLE show console show stats console show service show allowhost show config show config startup show config info show terminal show auth show auth radius show auth tacacs show auth access group show stats auth radius show stats auth tacacs show acct show acct radius show acct tacacs show stats acct radius show stats acct tacacs timezone show timezone

10 date engineering exit logout ping reboot shutdown su telnet traceroute switch bonding hangup history logsave loginfo clear arp trace disconnect tftp setup tftp verup tftp log tftp support ftp write clear startup default startup copy startup echo copy system verup execute verup cleanup backup system-image restore system-image clear system-image show system-image console terminal timeout terminal editing terminal page

11 terminal height terminal width terminal prompt terminal redisp (return Port Select Menu) (display Port Log) (display Port Log (LAST)) (start tty connection) (close telnet/ssh session) (show all commands) (display & erase Port Log) (erase Port Log) (send Port Log) (show Port Log configuration) (send break to tty) ttyno ttynor l lttyno-ttyno d dttyno-ttyno h e

12

13 : create add (to) set unset enable disable remove (from) delete show show stats 13

14 (create) (add to) (set unset) (enable) (disable) (remove from) (delete) 1-1: 14

15 xxxlist - tty , tty 1,

16

17 : set hostname set ipaddr unset ipaddr set tcpkeepalive IP IP TCP KeepAlive IP IP DNS LAN set bonding up delay enable bonding disable bonding create ip host delete ip host create ip route delete ip route set dns set dns localdomain unset dns unset dns localdomain set ether nego create user set user password set user port set user sshkey unset user sshkey 17 IP IP DNS DNS LAN SSH SSH

18 : ( ) SNMP SNMP SNMP SYSLOG delete user set snmp location set snmp contact set snmp authentrap set snmp linktrap set snmp dsrtrap set snmp coldstarttrap set snmp powertrap set snmp bondingactswtrap unset snmp location unset snmp contact enable snmp disable snmp set trap manager unset trap manager set community unset community set syslog host unset syslog host enable syslog disable syslog syslocation( ) syscontact( ) SNMP DSR / syslocation syscontact SNMP SNMP SNMP SNMP SNMP SNMP SYSLOG SYSLOG SYSLOG SYSLOG SYSLOG SYSLOG 18

19 : ( ) NFS set nfs server addr set nfs server proto set nfs rotate NFS NFS SNTP tty unset nfs server addr enable nfs disable nfs set sntp server set sntp polltime unset sntp server enable sntp disable sntp set tty baud set tty bitchar NFS NFS NFS NTP NTP NTP SNTP SNTP logd set tty parity set tty stop set tty flow set tty detect dsr add logd tty mail add logd tty ftp set logd output set logd tstamp set logd tty log set logd tty lstamp DSR Mail FTP 19

20 : ( ) set logd tty syslog set logd tty sendlog set logd tty mail port set logd tty mail type set logd tty mail subject SYSLOG /FTP Mail set logd tty mail sender set logd tty mail auth unset logd tty mail auth remove logd tty mail remove logd tty ftp SMTP SMTP Mail FTP portd set portd connect set portd menu set portd auth set portd telrw set portd telro set portd sshrw set portd sshro set portd idle timeout Telnet Telnet Telnet SSH SSH (RW) 20

21 : ( ) console telnetd sshd ftp set portd ro timeout set portd tty session set portd tty limit set portd tty brk char set portd tty nl set portd tty cmdchar set portd tty label set portd tty timeout unset portd tty label set console set telnetd port enable telnetd disable telnetd set sshd auth set sshd port set sshd host key enable sshd disable sshd enable ftpd disable ftpd create allowhost delete allowhost create auth access group set auth mode (RO) NVT / Telnet Telnet Telnet SSH SSH SSH SSH SSH FTP FTP 21

22 : ( ) set auth su cmd username set auth radius retry set auth radius server addr set auth radius server port set auth radius server key set auth radius server timeout set auth radius server portusr set auth radius server normal set auth radius server root set auth radius server nas id set auth radius server def user set auth tacacs server addr set auth tacacs server key set auth tacacs server timeout set auth tacacs def user unset auth radius server addr unset auth radius server portusr RADIUS TACACS+ / su RADIUS RADIUS IP RADIUS RADIUS RADIUS RADIUS RADIUS RADIUS RADIUS NAS-ID TACACS+ ( / ) IP TACACS+ ( / ) TACACS+ ( / ) TACACS+ / RADIUS IP RADIUS 22

23 : ( ) unset auth radius server normal unset auth radius server root unset auth radius server nas id unset auth tacacs server addr delete auth access group set acct mode set acct radius retry set acct radius auth deny stop set acct radius server addr set acct radius server port set acct radius server key set acct radius server timeout set acct radius server nas id set acct tacacs auth deny stop set acct tacacs server addr set acct tacacs server key set acct tacacs server timeout unset acct radius server addr RADIUS RADIUS RADIUS NAS-ID TACACS+ ( / ) IP RADIUS STOP RADIUS IP RADIUS RADIUS RADIUS RADIUS NAS-ID TACACS+ / STOP TACACS+ () IP TACACS+ () TACACS+ () RADIUS IP 23

24 : ( ) unset acct radius server nas id unset acct tacacs server addr set terminal default editing set terminal default height set terminal default width set terminal default page set terminal default prompt set terminal default redisp set terminal default timeout RADIUS NAS-ID TACACS+ () IP / 1 / timezone set timezone set temperature adjust 24

25 : show version show environment show slot show cpu show memory show log show support show bonding show ether show ip show ip host show ip route show tcp show udp show stats ip show arp show stats tcp show stats udp show dns show user show user login CPU LAN IP TCP KeepAlive IP TCP UDP IP ICMP ARP TCP UDP DNS 25

26 : ( ) SNMP SNTP SYSLOG NFS CONSOLE show snmp show sntp show syslog show nfs show portd session show tty show stats tty show logd show stats logd tty show console show stats console show service show allowhost show config startup show config info show terminal show auth show auth radius show auth tacacs SNMP SNTP SYSLOG NFS logd CONSOLE CONSOLE RADIUS TACACS+ / show auth access group 26

27 : ( ) show stats auth radius RADIUS show stats auth tacacs TACACS+ show acct show acct radius RADIUS show acct tacacs TACACS+ show stats acct radius RADIUS show stats acct tacacs TACACS+ timezone show timezone 27

28 : date engineering exit logout ping reboot shutdown su telnet traceroute switch bonding hangup history logsave loginfo clear arp trace disconnect tftp setup tftp verup tftp log tftp support logout alias IP Telnet FLASH ARP TCP TFTP TFTP TFTP TFTP 28

29 : ( ) ftp FTP / / write clear startup default startup ON/ copy startup echo copy system verup execute / verup cleanup FTP TFTP / backup system-image restore system-image clear system-image show system-image / console terminal timeout terminal editing terminal page terminal height 1 terminal width 1 terminal prompt 29

30 : ( ) terminal redisp 30

31 : 0 (return Port Select Menu) 1 (display Port Log) 2 (display Port Log (LAST)) 3 (start tty connection) 4 (close telnet/ssh session) 5 (show all commands) 6 (display & erase Port Log) 7 (erase Port Log) 8 (send Port Log) FTP / 9 (show Port Log configuration) 10 (send break to tty) ttyno ttynor l lttyno-ttyno d dttyno-ttyno (telnet/ssh IP / / ) (telnet/ssh IP / / ) 31

32 : ( ) h e Telnet/SSH 32

33

34 3 command param1 param2 { param3a param3b } [ param4 param5 ] { } [ ] show / 2 34

35 4 4 35

36 IP set hostname set hostname name name NS SmartCS set hostname SmartCS 36

37 set ipaddr IP set ipaddr [{ eth1 eth2 bond1}] ipaddr/mask [{ eth1 eth2 bond1 }] IP eth1 ipaddr/mask IP / IP xxx.xxx.xxx.xxx IP eth eth /24 IP IP eth1 eth2 bond1 SNMPv1 agent-address RADIUS NAS-IP-address IP bond1 eth1 eth1 IP set ipaddr eth /24 37

38 unset ipaddr IP unset ipaddr { eth1 eth2 bond1 } { eth1 eth2 bond1 } IP IP IP eth1 eth2 bond1 SNMPv1 agent-address RADIUS NAS-IP-address IP bond1 eth1 eth1 IP unset ipaddr eth1 38

39 set tcpkeepalive TCP KeepAlive set tcpkeepalive time time TCP KeepAlive (TCP ) TCP KeepAlive 10 set tcpkeepalive

40 set bonding up delay set bonding up delay { on delay time off } { on delay time off } off on delay time off 1 60 ( ) down 30 set bonding up delay on 30 going back going back down 40

41 enable bonding enable bonding (disable) eth1 IP bond1 eth1 eth2 IP create ip route eth1 enable bonding 41

42 disable bonding disable bonding bond1 IP eth1 create ip route disable bonding 42

43 4.3. IP IP IP create ip host IP create ip host hostname ipaddr [ port port num ] hostname ipaddr IP IP xxx.xxx.xxx.xxx [ port port num ] telnet TCP telnet (ping sntp syslog ftp snmp ) 23 localhost host10 IP create ip host host

44 4.3. IP 4 delete ip host delete ip host hostname hostname host10 delete ip host host10 44

45 4.4. IP IP create ip route IP create ip route { ipaddr/mask default } gateway gwaddr [ metric metric ] { ipaddr/mask default } ipaddr/mask IP / IP xxx.xxx.xxx.xxx default /0 gateway gwaddr IP IP [ metric metric ] create ip route default gateway delete ip route create ip route 45

46 4.4. IP 4 delete ip route delete ip route { ipaddr/mask default } gateway gwaddr { ipaddr/mask default } ipaddr/mask IP / IP xxx.xxx.xxx.xxx default /0 gateway gwaddr IP delete ip route default gateway delete ip route create ip route 46

47 4.5. DNS DNS DNS 2 DNS set dns DNS set dns { 1 2 } ipaddr { 1 2 } DNS 1 2 ipaddr DNS IP IP xxx.xxx.xxx.xxx portd DNS DNS IP DNS DNS 1 set dns DNS 2 1 DNS primary 2 DNS secondary 47

48 4.5. DNS 4 set dns localdomain set dns localdomain domain name domain name portd) example.co.jp set dns localdomain example.co.jp 48

49 4.5. DNS 4 unset dns DNS unset dns { 1 2 } { 1 2 } DNS 1 2 (portd) 1 DNS unset dns 1 49

50 4.5. DNS 4 unset dns localdomain unset dns localdomain (portd) unset dns localdomain 50

51 4.6. LAN LAN LAN set ether nego LAN set ether [{ eth1 eth2 }] nego { enable disable { full-100 full-10 half-100 half-10 } } [ { mdi mdix mdi-auto } ] [{ eth1 eth2 }] eth1 nego { enable disable { full-100 full-10 half-100 half-10 } } enable enable disable { full-100 full-10 half-100 half-10 } full Mbps full-10 10Mbps half Mbps half-10 10Mbps [ { mdi mdix mdi-auto } ] nego enable mdi-auto nego disable mdi mdi MDI mdix MDIX 51

52 4.6. LAN 4 mdi-auto MDI nego disable nego disable mdi-auto eth1 LAN 100Mbps set ether eth1 nego disable full

53 create user create user username group { setup verup log normal portusr } [ uid userid ] [ port enable port list ] [ { password encrypt string } ] username - 16 group { setup verup log normal portusr } setup verup log normal portusr [ uid userid ] ID ID ID [ port enable port list ] , (group portusr ) [ { password encrypt string } ] 53

54 password Enter encrypt encrypt show config encrypt string password root portusr uid root 0 somebody 100 setup 198 verup 199 log 200 portusr 500 port set user port SSH set user sshkey SSH FTP setup FTP verup FTP/SFTP log 54

55 adm operator 91 ID ID A user1 ID 101 create user user1 group normal uid 101 password New password : Retype new password : 55

56 set user password set user username { password encrypt string } username - 16 { password encrypt string } password password Enter encrypt string encrypt create user encrypt show config (user1) set user user1 password Changing password for user user1 New password : Retype new password : Password for user1 changed set user password 2 56

57 set user port set user username port enable port list username - 16 enable port list 1 48, - (user1) 1,2,3,16,32 set user user1 port 1-3,16,32 57

58 set user sshkey SSH set user username sshkey [ public ] method public-key [ comment ] username SSH - 16 sshkey [ public ] method public-key [ comment ] SSH string SSH method SSH ssh-rsa RSA ssh-dss DSA ecdsa-sha2-nistp128 ECDSA 128bit ecdsa-sha2-nistp256 ECDSA 256bit ecdsa-sha2-nistp521 ECDSA 521bit public-key SSH [ comment ] SSH SSH user1 SSH RSA set user user1 sshkey ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAyHYtUWDRB OxfBx8Nk0PAPcOO9z07Rurqijd8CUXx6dp7w2tFanDnRdY KGkQkchZMUWkAKYl+bI9jDbePBzaK9xR0wxlv0mQ1bP6A PVAP3vqdkRxz6YFNi6pszEEdWskKe7RXmz0S+MP4Mjpvx TkwzK8FyJJy1htLTVv/sBTaudc= SSH SSH SSH 2 RSA DSA ECDSA 58

59 SSH SSH SSH SSH SSH/SFTP RSA 4096bit DSA 1024bit ECDSA 521bit SSH 59

60 unset user sshkey SSH unset user username sshkey [ public ] username SSH - 16 sshkey [ public ] SSH user1 SSH unset user user1 sshkey 60

61 delete user delete user username username - 16 (root) user1 delete user user1 61

62 4.8. SNMP SNMP set snmp location syslocation( ) set snmp location location location location 128 SNMP SNMP syslocation Server Room in TOKYO set snmp location Server Room in TOKYO 62

63 4.8. SNMP 4 set snmp contact syscontact( ) set snmp contact syscontact contact syscontact 128 SNMP SNMP syscontact Administrator set snmp contact Administrator

64 4.8. SNMP 4 set snmp authentrap SNMP SNMP SNMP SNMP IP set snmp authentrap { on off } authentrap { on off } SNMP on on off SNMP SNMP SNMP SNMP SNMP SNMP set snmp authentrap on 64

65 4.8. SNMP 4 set snmp linktrap UP linkup DOWN linkdown set snmp linktrap { on off } linktrap { on off } on on off SNMP SNMP SNMP set snmp linktrap on 65

66 4.8. SNMP 4 set snmp dsrtrap DSR DSR ON nsrs232dsrup DSR OFF nsrs232dsrdown set snmp tty ttylist dsrtrap { on off } tty ttylist tty , dsrtrap { on off } DSR off on off DSR DSR SNMP SNMP SNMP 1 DSR set snmp tty 1 dsrtrap on 66

67 4.8. SNMP 4 set snmp coldstarttrap coldstart set snmp coldstarttrap { on off } coldstarttrap { on off } on on off SNMP coldstarttrap SNMP SNMP SNMP SNMP set snmp coldstarttrap on 67

68 4.8. SNMP 4 set snmp powertrap / PowerSupplyUp PowerSupplyDown set snmp powertrap { on off } powertrap { on off } / on on off / / SNMP SNMP SNMP / set snmp powertrap on 68

69 4.8. SNMP 4 set snmp bondingactswtrap nsbondingactiveswitch set snmp bondingactswtrap { on off } bondingactswtrap { on off } on on off SNMP SNMP SNMP set snmp bondingactswtrap off 69

70 4.8. SNMP 4 unset snmp location syslocation unset snmp location SNMP SNMP syslocation unset snmp location 70

71 4.8. SNMP 4 unset snmp contact syscontact unset snmp contact SNMP SNMP syscontact unset snmp contact 71

72 4.8. SNMP 4 enable snmp SNMP enable snmp SNMP (disable) SNMP enable snmp 72

73 4.8. SNMP 4 disable snmp SNMP disable snmp SNMP disable snmp 73

74 4.9. SNMP SNMP set trap manager SNMP set trap { } manager { ipaddr hostname } [ name community name ] [ version { v1 v2 } ] { } 1 4 manager { ipaddr hostname } SNMP ipaddr SNMP IP IP xxx.xxx.xxx.xxx hostname SNMP [ name community name ] - ˆ 64 public [ version { v1 v2 } ] v1 v1 v2 SNMP Version1 SNMP Version2 1 IP public1 74

75 4.9. SNMP 4 set trap 1 manager name public1 75

76 4.9. SNMP 4 unset trap manager SNMP unset trap { } manager { } unset trap 1 manager 76

77 4.10. SNMP SNMP set community SNMP set community { } name community name [ view { ro rw } ] [ manager { ipaddr hostname } ] { } 1 4 name community name - ˆ 20 [ view { ro rw } ] ro MIB read-only rw ro [ manager { ipaddr hostname } ] SNMP IP IP xxx.xxx.xxx.xxx SNMP SNMP SNMP 1 SNMP ( ) public SNMP set community 1 name public manager SNMP SNMP SNMP 77

78 4.10. SNMP 4 SNMP SNMP Version1/Version2c Get SNMP Version1 Get Version1 Version2c Get Version2c MIB read-only SNMPSET 78

79 4.10. SNMP 4 unset community SNMP unset community { } name { } 4 SNMP SNMP 1 SNMP unset community 1 name 79

80 4.11. SYSLOG SYSLOG set syslog host SYSLOG SYSLOG set syslog host { 1 2 } { ipaddr host } [ portlog facility { local0 local1 local2 local3 local4 local5 local6 local7 } ] [ syslog facility { local0 local1 local2 local3 local4 local5 local6 local7 } ] { 1 2 } SYSLOG 1 2 { ipaddr host } SYSLOG ipaddr SYSLOG IP IP xxx.xxx.xxx.xxx host SYSLOG portlog facility { local0 local1 local2 local3 local4 local5 local6 local7 } SYSLOG local0 syslog facility { local0 local1 local2 local3 local4 local5 local6 local7 } SYSLOG syslog local1 SYSLOG 2 SYSLOG local6 SYSLOG local7 80

81 4.11. SYSLOG 4 set syslog host portlog facility local6 syslog facility local7 81

82 4.11. SYSLOG 4 unset syslog host SYSLOG SYSLOG unset syslog host { 1 2 } { 1 2 } SYSLOG SYSLOG unset syslog host 1 82

83 4.11. SYSLOG 4 enable syslog SYSLOG enable syslog SYSLOG (disable) SYSLOG enable syslog 83

84 4.11. SYSLOG 4 disable syslog SYSLOG disable syslog SYSLOG disable syslog 84

85 4.12. NFS NFS set nfs server addr NFS set nfs server { 1 2 } addr ipaddr path path-dir { 1 2 } NFS 1 2 addr ipaddr NFS IP IP xxx.xxx.xxx.xxx path path-dir NFS / -., 128 NFS /mnt/nfslog set nfs server 1 addr path /mnt/nfslog NFS Version3 NFS set logd tty nfs NFS NFS 85

86 4.12. NFS 4 set nfs server proto NFS set nfs server { 1 2 } proto { tcp udp } { 1 2 } NFS 1 2 proto { tcp udp } NFS udp tcp TCP NFS udp UDP NFS NFS 1 TCP set nfs server 1 proto tcp NFS Version3 NFS set logd tty nfs NFS NFS 86

87 4.12. NFS 4 set nfs rotate set nfs rotate { off on minite hour day month day of week } off on minite hour day month day of week minite , hour , * day , * month , * day of week , * 87

88 4.12. NFS set nfs rotate on * * OR * NFS 88

89 4.12. NFS 4 unset nfs server addr NFS unset nfs server { 1 2 } addr { 1 2 } NFS NFS unset nfs server 1 addr NFS 89

90 4.12. NFS 4 enable nfs NFS enable nfs NFS (disable) NFS enable nfs 90

91 4.12. NFS 4 disable nfs NFS disable nfs NFS disable nfs 91

92 4.13. SNTP SNTP set sntp server NTP set sntp server { ipaddr host } { ipaddr host } NTP IP ipaddr NTP IP IP xxx.xxx.xxx.xxx host NTP NTP Primary/Secondary NTP Primary NTP Secondary SNTP NTP set sntp server set sntp server

93 4.13. SNTP 4 set sntp polltime NTP set sntp polltime time time NTP NTP 300 set sntp polltime 300 SNTP NTP 93

94 4.13. SNTP 4 unset sntp server NTP unset sntp server [ { ipaddr host } ] [ { ipaddr host } ] NTP NTP ipaddr NTP IP IP xxx.xxx.xxx.xxx host NTP NTP unset sntp server SNTP 1 NTP (Primary) 2 NTP (Secondary) Primary 94

95 4.13. SNTP 4 enable sntp SNTP enable sntp SNTP (disable) SNTP enable sntp 95

96 4.13. SNTP 4 disable sntp SNTP disable sntp SNTP disable sntp 96

97 4.14. tty tty set tty baud set tty ttylist baud { } tty ttylist tty , baud { } bps set tty 1-6 baud

98 4.14. tty 4 set tty bitchar set tty ttylist bitchar { 7 8 } tty ttylist tty , bitchar { 7 8 } set tty 1 bitchar 7 98

99 4.14. tty 4 set tty parity set tty ttylist parity { even odd none } tty ttylist tty , parity { even odd none } none even odd none 1 set tty 1 parity odd 99

100 4.14. tty 4 set tty stop set tty ttylist stop { 1 2 } tty ttylist tty , stop { 1 2 } set tty 1 stop 2 100

101 4.14. tty 4 set tty flow set tty ttylist flow { xon rs none } tty ttylist tty , flow { xon rs none } none xon xon/xoff rs RTS/CTS none 8 ( ) xon 1 RTS/CTS set tty 1 flow rs 101

102 4.14. tty 4 set tty detect dsr DSR set tty ttylist detect dsr { on off } tty ttylist tty , detect dsr { on off } DSR off on off DSR DSR OFF ON ON OFF SYSLOG / set snmp tty dsrtrap on SNMP DSR DSR DSR syslog DSR DSR show stats tty DSR SNMPMIB DSR NS-RS232-MIB nsrs232portdsrstate DSR set tty 1 detect dsr on 102

103 4.15. logd logd add logd tty mail Mail add logd tty ttylist mail { 1 2 } Mail-Address { ipaddr host } ttylist tty , mail { 1 2 } Mail 1 2 Mail-Address { ipaddr host } ipaddr Mail IP IP xxx.xxx.xxx.xxx host Mail Mail DNS IP 1 Mail portlog mgr@example.co.jp add logd tty 1 mail 1 portlog mgr@example.co.jp Mail 2 103

104 4.15. logd 4 add logd tty ftp FTP add logd tty ttylist ftp { 1 2 } FTP-Account { ipaddr host } [ { password encrypt string } ] ttylist tty , ftp { 1 2 } FTP 1 2 FTP-Account FTP { ipaddr host } ipaddr FTP IP IP xxx.xxx.xxx.xxx host FTP FTP DNS IP [ { password encrypt string } ] password Enter encrypt encrypt 104

105 4.15. logd 4 encrypt string FTP 1-32 FTP portlog mgr add logd tty 1-32 ftp 1 portlog mgr FTP password Retype FTP password 1 FTP FTP 2 105

106 4.15. logd 4 set logd output set logd output { flash ram off cf } { flash ram off cf } ram flash FLASH ram RAM off cf flash FLASH set logd output flash RAM FLASH RAM FLASH 3MByte FLASH RAM FLASH RAM 500KByte set logd tty log on set logd output off set logd tty log off set logd output ram set logd output flash 106

107 4.15. logd 4 set logd tstamp set logd tstamp { on [ interval interval time ] off } { on [ interval interval time ] off } off on [interval interval time] off 30 set logd tstamp on interval

108 4.15. logd 4 set logd tty log set logd tty ttylist log { on [ size log size ] off } ttylist tty , log { on [ size log size ] off } on on [ size log size ] off (KByte) RAM : KByte FLASH : KByte RAM : 24000Kbyte FLASH : KByte RAM : 500KByte FLASH : 3000KByte KByte set logd tty 1-8 log on size

109 4.15. logd 4 set logd tty lstamp set logd tty ttylist lstamp { off on } ttylist tty , lstamp { off on } off off on 1-8 set logd tty 1-8 lstamp on login/logout login/logout 109

110 4.15. logd 4 set logd tty syslog SYSLOG set logd tty ttylist syslog { off on format { hostname { off on } label { off on } tstamp { off on } } } ttylist tty , syslog { off on format { hostname { off on } label { off on } tstamp { off on } } } SYSLOG off off SYSLOG on SYSLOG format { hostname { off on } label { off on } tstamp { off on } } } hostname { off on } off off on label { off on } TTY off off TTY on TTY off TTY tstamp { off on } off 110

111 4.15. logd 4 off on,, Jan 22 10:45: SYSLOG set logd tty 1-32 syslog on 111

112 4.15. logd 4 set logd tty sendlog /FTP set logd tty ttylist sendlog { { mail ftp } [ interval interval time ] [ ratio percent ] off } ttylist tty , { { mail ftp } [ interval interval time ] [ ratio percent ] off } Mail FTP off { mail ftp } [ interval interval time ] [ ratio percent ] mail Mail ftp FTP [ interval interval time ] Mail FTP [ ratio percent ] Mail FTP off 1-32 Mail set logd tty 1-32 sendlog mail interval time 0 112

113 4.15. logd 4 set logd tty mail port Mail set logd tty ttylist mail { 1 2 } port smtp-port ttylist tty , mail { 1 2 } Mail 1 2 port smtp-port Mail Mail set logd tty 1 mail 2 port Mail 113

114 4.15. logd 4 set logd tty mail type set logd tty ttylist mail { 1 2 } type { body attachment } ttylist tty , mail { 1 2 } Mail 1 2 type { body attachment } Mail attachment body attachment 1-32 set logd tty 1-32 mail 1 type body Mail 114

115 4.15. logd 4 set logd tty mail subject set logd tty ttylist mail { 1 2 } subject string ttylist tty , mail { 1 2 } Mail 1 2 subject string Mail 64 portlog TTY 1 1 this is a portlog. set logd tty 1 mail 1 subject this is a portlog. Mail 115

116 4.15. logd 4 set logd tty mail sender set logd tty ttylist mail { 1 2 } sender fromaddr ttylist tty , mail { 1 2 } Mail 1 2 sender fromaddr portusr@. 1 1 portlog1@example.co.jp set logd tty 1 mail 1 sender portlog1@example.co.jp Mail 116

117 4.15. logd 4 set logd tty mail auth SMTP set logd tty ttylist mail { 1 2 } auth auth-account [ { password encrypt string } ] ttylist tty , mail { 1 2 } Mail 1 2 auth auth-account SMTP SMTP [ { password encrypt string } ] Mail Mail SMTP password Enter encrypt string encrypt string SMTP SMTP (portlog2) set logd tty 1 mail 1 auth portlog2 password SNMP-Auth password Retype SNMP-Auth password Mail 117

118 4.15. logd 4 unset logd tty mail auth SMTP unset logd tty ttylist mail { 1 2 } auth ttylist tty , mail { 1 2 } Mail SMTP unset logd tty 1-32 mail 1 auth 118

119 4.15. logd 4 remove logd tty mail Mail remove logd tty ttylist mail { 1 2 } ttylist tty , mail { 1 2 } Mail Mail remove logd tty 1-32 mail 2 ( ) ( ) 119

120 4.15. logd 4 remove logd tty ftp FTP remove logd tty ttylist ftp { 1 2 } ttylist tty , ftp { 1 2 } FTP FTP 2 remove logd tty 1-32 ftp 2 120

121 4.16. portd portd set portd connect set portd connect { direct select } { direct select } direct TCP ( ) telnet TCP 8101 telnet SmartCS 8101 select ( ) Telnet/SSH (TCP:23/22) ( ) telnet TCP (23) telnet SmartCS direct set portd connect select set portd auth basic Telnet/SSH 121

122 4.16. portd 4 set portd menu set portd menu { auto on off } { auto on off } auto auto ON RW on off set portd menu off 122

123 4.16. portd 4 set portd auth Telnet set portd auth { none basic } auth { none basic } Telnet none none Telnet basic Telnet password password set portd auth basic Telnet/SSH SSH 123

124 4.16. portd 4 set portd telrw Telnet set portd telrw port num port num Telnet set portd telrw

125 4.16. portd 4 set portd telro Telnet set portd telro port num port num 10 ( ) 8201 Telnet set portd telro

126 4.16. portd 4 set portd sshrw SSH set portd sshrw port num port num SSH set portd sshrw

127 4.16. portd 4 set portd sshro SSH set portd sshro port num port num SSH set portd sshro

128 4.16. portd 4 set portd idle timeout (RW) set portd idle timeout { on [ interval time ] off } idle timeout { on [ interval time ] off } (RW) off interval time (RW) 1 60( ) 10 (RW) 20 set portd idle timeout on 20 (RW) set portd tty timeout on (RW) cmdchar (RW) 128

129 4.16. portd 4 set portd ro timeout (RO) set portd ro timeout { on [ interval time ] off } { on [ interval time ] off } (RO) off interval time (RO) ( ) 10 (RO) 60 set portd ro timeout on 60 set portd tty timeout on (RO) 129

130 4.16. portd 4 set portd tty session set portd tty ttylist session { { telnet ssh both none } { ro rw both } } tty ttylist tty , { telnet ssh both none } { ro rw both } telnet rw { telnet ssh both none } telnet Telnet ssh SSH both Telnet SSH none Telnet/SSH TCP { ro rw both } none ro rw both 1 Telnet SSH set portd tty 1 session both both 130

131 4.16. portd 4 set portd tty limit set portd tty ttylist limit rw number ro number ttylist tty , limit rw number ro number rw number ro number set portd tty 1 limit rw 2 ro 3 131

132 4.16. portd 4 set portd tty brk char NVT set portd tty ttylist brk char { none brk } tty ttylist tty , brk char { none brk } NVT none none NVT brk NVT 1 NVT set portd tty 1 brk char brk 132

133 4.16. portd 4 set portd tty nl set portd tty ttylist nl { none cr lf } tty ttylist tty , nl { none cr lf } cr none cr CR/LF CR lf CR/LF LF 1 LF set portd tty 1 nl lf Telnet 133

134 4.16. portd 4 set portd tty cmdchar set portd tty ttylist cmdchar { none char number } tty ttylist tty , cmdchar { none char number } none none char number 16 (00 1F) 00 [Ctrl-@] 0b [Ctrl-K] 16 [Ctrl-V] 01 [Ctrl-A] 0c [Ctrl-L] 17 [Ctrl-W] 02 [Ctrl-B] 0d [Ctrl-M] 18 [Ctrl-X] 03 [Ctrl-C] 0e [Ctrl-N] 19 [Ctrl-Y] 04 [Ctrl-D] 0f [Ctrl-O] 1a [Ctrl-Z] 05 [Ctrl-E] 10 [Ctrl-P] 1b [Ctrl-[] 06 [Ctrl-F] 11 [Ctrl-Q] 1c [Ctrl-\] 07 [Ctrl-G] 12 [Ctrl-R] 1d [Ctrl-]] 08 [Ctrl-H] 13 [Ctrl-S] 1e [Ctrl-ˆ] 09 [Ctrl-I] 14 [Ctrl-T] 1f [Ctrl- ] 0a [Ctrl-J] 15 [Ctrl-U] 1 01 [Ctrl-A] Press CTRL-A to return this menu set portd tty 1 cmdchar

135 4.16. portd 4 135

136 4.16. portd 4 set portd tty label set portd tty ttylist label string ttylist tty , label string 32 ( 1 L3SW No.08 set portd tty 1 label L3SW No

137 4.16. portd 4 set portd tty timeout / set portd tty ttylist timeout { on off } tty ttylist tty , timeout { on off } (RW) (RO) off (RW) (RO) set portd tty 1 timeout on set portd idle timeout on set portd ro timeout on 137

138 4.16. portd 4 unset portd tty label unset portd tty ttylist label tty ttylist tty , label 1 unset portd tty 1 label 138

139 4.17. console console set console set console { baud { } bitchar { 7 8 } parity { even odd none } stop { 1 2 } flow { xon rs none } } baud { } 9600 bitchar { 7 8 } 8 parity { even odd none } none even odd none stop { 1 2 } 1 flow { xon rs none } xon xon xon/xoff rs RTS/CTS none 139

140 4.17. console 4 CONSOLE 19200bps set console baud CONSOLE set tty 140

141 4.18. telnetd telnetd set telnetd port Telnet set telnetd port { port number default } port { port number default } Telnet default port number default Telnet 23 set portd telrw set portd telro set portd sshrw set portd sshro Telnet set telnetd port

142 4.18. telnetd 4 enable telnetd Telnet enable telnetd Telnet (enable) Telnet enable telnetd 142

143 4.18. telnetd 4 disable telnetd Telnet disable telnetd Telnet disable telnetd 143

144 4.19. sshd sshd set sshd auth SSH set sshd auth { basic public } auth { basic public } SSH public basic SSH public SSH SSH set sshd auth basic 144

145 4.19. sshd 4 set sshd port SSH set sshd port { port number default } port number default SSH 22 SSH set sshd port set portd telrw set portd telro set portd sshrw set portd sshro set telnetd port 145

146 4.19. sshd 4 set sshd host key SSH set sshd host key { number device depend } host key { number device depend } SSH device depend number device depend 256 set sshd host key 256 SSH ssh SSH 146

147 4.19. sshd 4 enable sshd SSH enable sshd SSH (disable) SSH enable sshd 147

148 4.19. sshd 4 disable sshd SSH disable sshd SSH disable sshd 148

149 4.20. ftp ftp enable ftpd FTP enable ftpd FTP (disable) FTP enable ftpd 149

150 4.20. ftp 4 disable ftpd FTP disable ftpd FTP disable ftpd 150

151 create allowhost create allowhost { all ipaddr/mask } service { all telnetd sshd ftpd portd { telrw telro sshrw sshro } { all ttylist } } { ipaddr/mask all } IP IP 32bit all /0 service { all telnetd sshd ftpd portd { telrw telro sshrw sshro } { all ttylist } } all telnetd Telnet sshd SSH SFTP ftpd FTP portd { telrw telro sshrw sshro } { all ttylist } portd telrw Telnet telro Telnet sshrw SSH sshro SSH all ttylist 151

152 tty , create allowhost all service telnetd create allowhost all service portd telrw all allowhost /24 Telnet create allowhost /24 service telnetd 152

153 delete allowhost delete allowhost { { all ipaddr/mask } service { all telnetd sshd ftpd portd { telrw telro sshrw sshro } { ttylist all } } allentry } { all ipaddr/mask } service { all telnetd sshd ftpd portd { telrw telro sshrw sshro } { ttylist all } } { all ipaddr/mask } IP IP service { all telnetd sshd ftpd portd { telrw telro sshrw sshro } { ttylist all } } telnetd Telnet sshd SSH SFTP ftpd FTP portd { telrw telro sshrw sshro } { ttylist all } portd allentry /24 Telnet delete allowhost /24 service telnetd 153

154 create auth access group set auth radius server { root normal portusr } filter id head // ( ) RADIUS/TACACS+ NS-2250 NS-2250 create auth access group { root normal portusr port enable port list } { radius filter id string tacacs attr string val string } { root normal portusr port enable port list } root normal portusr port enable port list , { radius filter id string tacacs attr string val string } 154

155 radius filter id string RADIUS Filter-Id string string 1 64 tacacs attr string val string TACACS+ attr val string 1 32 admin RADIUS create auth access group root radius filter id admin general RA- DIUS create auth access group normal radius filter id general grp1 1 5 RADIUS create auth access group portusr port 1-5 radius filter id grp1 grp1=root TACACS+ create auth access group root tacacs attr grp1 val root grp2=tech1 1 5 TACACS+ create auth access group portusr port 1-5 tacacs attr grp2 val tech1 100 create auth access group create auth access group 1 admin grp grp1 grp