FUJITSU Network Si-R Si-Rシリーズ　コマンドユーザーズガイド

Transcription

1 P3NK Z0 Si-R FUJITSU Network Si-R FUJITSU Network Si-R Si-R brin V35

2 LAN Microsoft Corporation Copyright FUJITSU LIMITED

3 LAN BGP VRRP VRRP SIM FTP/SFTP

4 2.5.1 FTP FTP USB USB USB PC PC

5 CD-ROM README 1 2 PL PL 5

6 MicrosoftWindowsWindows NTWindows Server Windows Vista Microsoft Corporation Adobe Reader Adobe Systems Incorporated UNIX Microsoft Windows XP Professional operating system Windows XP Microsoft Windows XP Home Edition operating system Microsoft Windows 2000 Server Network operating system Windows 2000 Microsoft Windows 2000 Professional operating system Microsoft Windows NT Server network operating system Version 4.0 Windows NT 4.0 Microsoft Windows NT Workstation operating system Version 4.0 Microsoft Windows Server 2003, Standard Edition Windows Server 2003 Microsoft Windows Server 2003 R2, Standard Edition Microsoft Windows Server 2003, Enterprise Edition Microsoft Windows Server 2003 R2, Enterprise Edition Microsoft Windows Server 2003, Datacenter Edition Microsoft Windows Server 2003 R2, Datacenter Edition Microsoft Windows Server 2003, Web Edition Microsoft Windows Server 2003, Standard x64 Edition Microsoft Windows Server 2003 R2, Standard Edition Microsoft Windows Server 2003, Enterprise x64 Edition Microsoft Windows Server 2003 R2, Enterprise x64 Edition Microsoft Windows Server 2003, Enterprise Edition for Itanium-based systems Microsoft Windows Server 2003, Datacenter x64 Edition Microsoft Windows Server 2003 R2, Datacenter x64 Edition Microsoft Windows Vista Ultimate operating system Windows Vista Microsoft Windows Vista Business operating system Microsoft Windows Vista Home Premium operating system Microsoft Windows Vista Home Basic operating system Microsoft Windows Vista Enterprise operating system Microsoft Windows 7 64bit Home Premium Windows 7 Microsoft Windows 7 32bit Professional 6

7 Si-R Si-R180B Si-R220C Si-R220D Si-R240B Si-R260B Si-R370 Si-R370B Si-R570 Si-R570B Web Web Web Si-R Si-R180B Si-R220C Si-R220D Si-R240B Si-R260B Si-R370 Si-R370B Si-R570 Si-R570B MIB/Trap Web Web Web 7

8

9 configure 4candidate-config 5save startup-config 6commit running-config 7exit exit P P.12 user exit admin / su exit /! configure exit /! / end / quit admin exit running-config commit / commit try / commit try load candidate-config save load / commit try reset / startup-config 9

10 telnet ssh 1 Login: 1 Password: <WARNING> weak admin's password: set the password 2 # 3 adminreturn 1 ssh Login: ssh adminuser password aaa AAA aaa user id RADIUS password admin set password user set password aaa AAA aaa user password RADIUS 1.3 P.14 10

11 1 admin user admin su admin password aaa AAA aaa user id RADIUS RADIUS RADIUS Filter-ID RADIUS Filter-ID11 administrator user aaa user user-role admin user Return password admin set password user set user 11

12 P.11 P.11 configure configure admin commit candidate-config running-config - - commit commit try time save reset show candidate-config show running-config show startup-config delete commit startup-config commit try cancel startup-config save reset 12

13 # date 2014/01/01.12:30: # configure (config)# time auto server sntp (config)# save (config)# commit (config)# exit # 13

14 P # configure pass!word! (config)# password admin set pass!word! mem123ber (config)# password user set mem123ber (config)# save (config)# exit # exit Login: user user Password: > commit 14

15 TCGTrusted Computing Group TPMTrusted Platform Module 5 P P.12 # configure (config)# password format unique commit 15

16 P.14 AAA ID ID RADIUS ID 64 ASCII adminuser RADIUS ID RADIUS IP RADIUS radius-secret # configure AAA (config)# password aaa 0 RADIUS LAN (config)# lan 1 ip address /24 3 RADIUS AAA (config)# aaa 0 name radiusauth (config)# aaa 0 radius service client auth (config)# aaa 0 radius auth source (config)# aaa 0 radius client server-info auth 0 secret radius-secret (config)# aaa 0 radius client server-info auth 0 address (config)# save (config)# commit (config)# exit # exit 16

17 ReturnEnter ASCII EUC JIS terminal charset ASCII ASCII VT100 VT terminal window P.25 17

18 TabCtrl+I TabCtrl+I Exec commands-- -- Exec commands(config mode)-- --Config commands-- --Config commands(current directory)-- TabCtrl+I TabCtrl+I terminal charset Tab Ctrl+I 1 2 alias

19 TabCtrl+I TabCtrl+I TabCtrl+I TabCtrl+I terminal charset Tab Ctrl+I , -, alias 19

20 (configure)# lan 0 ip address / (configure-lan-0-ip)# terminal prompt 2 exit!endquituptopdeleteshowclearcommitdiscardsaveloadreset # (configure)# acl 0 ip (configure-acl-0-ip)# any (configure-acl-0-ip-any)# any (configure-acl-0)# show up top Ctrl+O <NOTICE> The configuration directory mode is enabled. To disable, type Ctrl+G. Ctrl+G <NOTICE> The configuration directory mode is disabled. 20

21 1 # configure (configure)# lan 0 ip address /24 3 (configure-lan-0-ip)# (configure-lan-0-ip)# dhcp service server (configure-lan-0-ip-dhcp)# info address /24 (configure-lan-0-ip-dhcp)# up 1 (configure-lan-0-ip)# shsow address /24 3 service server info address /24 32 (configure-lan-0-ip)# save (configure-lan-0-ip)# top (configure)# terminal timestamp show logging terminal prompt terminal logging Ctrl+PCtrl+N P.25 21

22 1 show logging command 1!!!!-!-33!!net net # show ip route show ip route #!! all all show ip route all show ip route all :p!! :p!net:p net # show ip route show ip route #!!:p all all show ip route all #!! show ip route all show ip route all 22

23 1 ^ ABC ^A^B^ ^A^B^:p ^A^B^C ^A^B^:pC ^A^^ ^A^^:p ^A^^C ^A^^:pC A B A B A B C A B C A A A C A C # show running-config lan 0 ip address lan0 IP # ^addre^alia^:p addre alia show running-config lan 0 ip aliass # ^ss^s^ ss s show running-config lan 0 ip alias lan0 IP 23

24 1 / ABC :s/a/b/ :ps/a/b/ :s/a/b/c :ps/a/b/c :gs/a/b/ :pgs/a/b/ :gs/a/b/c :pgs/a/b/c :s/a// :ps/a// :s/a//c :ps/a//c :gs/a// :pgs/a// :gs/a//c :pgs/a//c :s/a1/b1/:gs/a2/b2/:p A B A B A B C A B C A B A B A B C A B C A A A C A C A A A C A C A1 B1 A2 B2 # remote 0 ip address local #!!:gs/0/1/:p 0 1 remote 1 ip address local #!! remote 1 ip address local /^ :p 24

25 Ctrl+A Ctrl+B Ctrl+C Ctrl+D Ctrl+E Ctrl+F Ctrl+G Ctrl+H BS Ctrl+I Tab Ctrl+J Return Ctrl+K Ctrl+L Ctrl+M Ctrl+N Ctrl+O Ctrl+P Ctrl+R Ctrl+T Ctrl+U Ctrl+W Ctrl+X Ctrl+Y ESC Ctrl+H ESC BS ESC Ctrl+I ESC TAB ESC Ctrl+K ESC b ESC f ESC n ESC p ESC < ESC > Ctrl+α Ctrlcontrolα ESC α ESCα telnet 1 Ctrl+α telnet Ctrl+α 25

26 P.11 2 P P.11 2 P.75 IP IP telnet IP IP 26

27 <ERROR> : Unknown command <ERROR> : Permission denied <ERROR> : 0 : argument too less <ERROR> : 0 : argument too much <ERROR> : : format error <ERROR> : : value out of range <ERROR> : : lack of table <ERROR> : : no such table <ERROR> : : duplicate value <ERROR> : : fail to request <ERROR> : : unique password <ERROR> : detected HARD ERROR, cannot execute unique 27

28 A +B +C +D +E +F 20! # $ %( ) &( ) ( ) * +, -. / : ; <( ) = >( )? A B C D E F G H I J K L M N O 50 P Q R S T U V W X Y Z [ ( ) ] ^ _ 60 a b c d e f g h i j k l m n o 70 p q r s t u v w x y z { } ( ) WWW <>&%WWW WWW " "WWW WWW 28

29 LAN BGP VRRP VRRP SIM FTP/SFTP FTP FTP USB USB USB PC PC

30 tokyo # online access-point tokyo tokyo # offline access-point tokyo 30

31 LAN LAN LAN LAN lan0 # online lan 0 LAN LAN lan0 # offline lan 0 31

32 Si-R180B SW1 4 SW1 SW1 SW1 # online switch 0 port 1 SW1 SW1 SW1 # offline switch 0 port 1 # online switch # offline switch 32

33 # online policy-group # offline policy-group 0 # online policy-group # offline policy-group 33

34 BGP BGP IPv6 Si-R180B220C220D240B570570B IPv6 Si-R570570B 512M IPv4 IPv4 IPv4 # clear ip bgp neighbors IPv4 UPDATE IPv4 IPv4 UPDATE # clear ip bgp neighbors address soft out IPv6 ROUTE REFRESH 2001:db8:1000::1 IPv6 IPv6 ROUTE REFRESH # clear ipv6 bgp neighbors address 2001:db8:1000::1 soft in 34

35 2 IPv6 UPDATEROUTE REFRESH 2001:db8:1000::1 IPv6 IPv6 UPDATEROUTE REFRESH # clear ipv6 bgp neighbors address 2001:db8:1000::1 soft both ping IP # ping is alive # # rpon all 2 # rpon 2 35

36 VRRP VRRP ON OFF VRRP VRRP ON lan0 VRID 10 VRRP # vrrp preempt-permit interface lan0 vrid 10 vrrp: command accepted vrid10 # VRRP VRRP VRRP VRRP VRRP LAN VRRP VRRP VRRP lan0 VRID 10 VRRP # vrrp action interface lan0 vrid 10 disable vrrp: command accepted vrid10 # VRRP VRRP lan0 VRID 10 VRRP # vrrp action interface lan0 vrid 10 enable vrrp: command accepted vrid10 # 36

37 SIM Si-R240B PIN PIN SIM PIN PIN PIN 3 PIN PIN SIM PIN 3 PIN wan 0 PIN 9999 PIN # cardmodem pin enable slot 0 PIN: 9999 # PIN 9999 PIN # cardmodem pin disable slot 0 PIN: 9999 # 37

38 2 PIN SIM PIN PIN PIN PIN PIN SIM PIN SIM PIN WAN - PIN PIN 3 PIN PIN SIM PIN 3 PIN wan PIN 9999 PIN # cardmodem pin change slot 0 old PIN: 9999 new PIN: new PIN(again): # PIN SIM PIN PIN PIN PUK SIM PIN WAN - PIN PUK 10 PUK SIM PUK 10 wan PUK PIN 9999 # cardmodem pin unlock slot 0 PUK: new PIN: 9999 new PIN(again): 9999 # 38

39 show system information show system status show logging error show logging syslog show date Ethernet show ether show ether statistics ISDN show isdn show isdn statistics circuit show isdn account PIAFS show isdn statistics piafs show fr show fr statistics circuit PVC show fr statistics vc show hsd show hsd statistics circuit ATM show atm show atm statistics circuit PVC show atm statistics vc LLC SNAP show atm statistics llc-snap show modem show modem account show cardmodem show cardmodem account LAN show wlan status show wlan sta show wlan statistics WPA show wlan wpa status WPA show wlan wpa statistics show interface show interface statistics show access-point show template show template statistics ARP ARP show arp Neighbor Cache show ndp IP show ip route kernel ECMP show ip route kernel ecmp statistics IPv6 show ipv6 route kernel 39

40 2 VPNv4 show ip vpnv4 route show ip traffic IPv6 show ipv6 traffic show ip filter show ip filter statistics IPv6 show ipv6 filter IPv6 show ipv6 filter statistics IDS show ip ids statistics NAT show ip nat show ip nat statistics show ip multicast group show ip multicast interface show ip multicast interface statistics PIM-SM show ip multicast pimsm rp show ip multicast protocol show ip multicast route show ip multicast route kernel show ip multicast statistics show ip multicast route kernel statistics DHCP IPv4 show ip dhcp IPv6 show ipv6 dhcp VPN show dvpn client user show dvpn client session show dvpn server show dvpn server user show dvpn server session IPsec/IKE IPsec SA show ipsec sa IKE show ike statistics show ike statistics interface VRRP VRRP show vrrp show bridge status show bridge show spanning-tree MPLS FTN show mpls ftn detail ILM show mpls ilm detail LDP show mpls ldp detail LDP show mpls ldp adjacency LDP FEC show mpls ldp fec LDP show mpls ldp session detail LDP show mpls ldp summary LDP VC show mpls ldp vc show mpls statistics VC show mpls vc detail VRF show mpls vrf detail 40

41 2 LLDP show lldp show lldp summary show lldp neighbors detail show lldp statistics detail MAC show macauth IEEE802.1X show dot1x lan show dot1x statistics ARP show arpauth lan show arpauth statistics SNMP show snmp statistics NETTIME show nettime statistics UPnP show upnp show upnp statistic show upnp portmapping SSH DSA show ssh server key dsa RSA show ssh server key rsa SIP-SIP show sipgw show sipgw statistics AAA RADIUS show aaa radius client server-info PPP show trace ppp PPPoE show trace pppoe IKE show trace ike SSH show trace ssh show trace modem show trace cardmodem show policy-group show crypto certificate Base64 show crypto certificate base64 LAN show nodemanager node brief show nodemanager node LAN show nodemanager logging wlan scan managed brief LAN show nodemanager logging wlan scan managed LAN show nodemanager logging wlan scan unmanaged LAN show nodemanager logging wlan scan unknown LAN RSSI / show nodemanager logging wlan sta rssi LAN LAN show nodemanager logging wlan sta LAN show nodemanager logging wlan trace LAN show nodemanager logging wlan reject 41

42 P # reset config2 42

43 2 2.4 # show candidate-config wan 0 bind 0 wan 0 line isdn lan 0 ip address /24 3 lan 0 ip route / lan 0 ip rip use v2m v2 0 off remote 0 name net1 remote 0 ip rip use v2 v2 0 off remote 0 ap 0 name test0 remote 0 ap 0 dial 0 number remote 0 ap 0 ppp auth send sendid CQ9JxbkNgwzvP9nsA encrypted remote 0 ap 0 ppp auth receive encrypted remote 0 ap 0 idle 1m syslog pri error,warn,notice,info syslog facility 23 time zone 0900 # 43

44 2 2.5 FTP/SFTP FTP SFTP UNIX ftp sftp Si-R370 FTP ftp SFTP SSH 2 sftp ftp sftp FTP Si-R FTP ftp-admin password FTP FTP 1 config1 2 config2 firmware ftp get reset get reset1get reset2 get reset get reset1 get reset P FTP/SFTP

45 FTP ftp FTP FTP ftp ftp get FTP Si-R ISDN IP ftp 1 config1-1 C: >cd C: tmp>ftp Connected to Si-R370 V35.00 FTP server (config1) ready. Name( :root): ftp-admin 331 Password required for ftp-admin. Password: 230 User ftp-admin logged in. ftp>bin 200 Type set to I. ftp>get config1 config1-1 1config1 config1-1 local: config1 remote: config PORT command successful. 150 Opening BINARY mode data connection for config1 (2753 bytes) Transfer complete bytes received in 1.10 seconds (2.44 Kbytes/s) ftp>bye 221 Goodbye. C: tmp> 1.3 P FTP/SFTP

46 2 FTP ftp ftp put FTP Si-R ISDN IP WWW ftp 1 config1-1 C: >cd C: tmp>ftp Connected to Si-R370 V35.00 FTP server (config1) ready. Name( :root): ftp-admin 331 Password required for ftp-admin. Password: 230 User ftp-admin logged in. ftp>bin 200 Type set to I. ftp>put config1-1 config1 config1-1 1config1 local: config1-1 remote: config1 200 PORT command successful. 150 Opening BINARY mode data connection for config Transfer complete. update : File information check now! update : File information check ok. 226 Write complete bytes sent in 1.10 seconds (2.44 Kbytes/s) ftp>get reset local: reset remote: reset 200 PORT command successful. 421 Reset request ok. bye. ftp>bye C: tmp> ftp get reset get reset1get reset2 get reset get reset1 1 get reset FTP/SFTP

47 FTP ftp ftp put FTP Si-R LAN ftp C: > cd C: tmp> ftp Connected to Si-R370 V35.00 FTP server (config1) ready. Name( :root): ftp-admin 331 Password required for ftp-admin. Password: 230 User ftp-admin logged in. ftp>bin 200 Type set to I. ftp>put Si-R370SOFT.ftp firmware local: Si-R370SOFT.ftp remote: firmware 200 PORT command successful. 150 Opening BINARY mode data connection for firmware Transfer complete. update : Transfer file check now! update : Transfer file check ok. 226 Write complete bytes sent in seconds (6.31 Kbytes/s) ftp>get reset local: reset remote: reset 200 PORT command successful. 421 Reset request ok. bye. ftp>bye C: tmp> IP P.14 ftp get reset 47 FTP/SFTP

48 2 2.6 USB Si-R180B,220C,220D,240B USB USB USB USB candidate-config running-config 1 config1 2 config2 USB USB USB 1. USB USB 2. USB # usbctl enable 3. USB show usb hcd status status enable # show usb hcd status [USB HCD STATUS] status : enable 4. USB 1 config1-1 # copy config1 /um0/config USB # usbctl disable 48 USB

49 2 6. USB show usb hcd status status disable # show usb hcd status [USB HCD STATUS] status : disable 7. USB USB USB 1. USB USB 2. USB # usbctl enable 3. USB show usb hcd status status enable # show usb hcd status [USB HCD STATUS] status : enable 4. USB 2 config2-1 # copy /um0/config2-1 config2 # reset 5. USB # usbctl disable 6. USB show usb hcd status status disable # show usb hcd status [USB HCD STATUS] status : disable 7. USB 49 USB

50 USB USB telnet Si-R240B 1. USB USB 2. admin 3. USB # usbctl enable 4. USB show usb hcd status status enable # show usb hcd status [USB HCD STATUS] status : enable 5. USB <filename> USB # copy /um0/<filename> firmware USB # usbctl disable 8. USB show usb hcd status status disable # show usb hcd status [USB HCD STATUS] status : disable 9. USB telnet show system information # show system information System : Si-R240B Firm Ver. : V USB

51 PC PC 1. USB Si-R240B SIR240BSOFT.ftp SOFT.ftp 2. USB Si-R240B SIR240B_ _1.cfg _< >_< >.cfg - USB USB USB 4. USB 2 USB - Si-R180B CHECK LAN0 100M FULL - Si-R220C LAN0 3 - Si-R220D LAN0 3 - Si-R240B LAN0 1 SLOT0 SLOT1 USB output.txt 5. 2 USB CHECK 6. USB USB P.53 storage setup mode LF 51 USB

52 PC PC 1. USB USB USB < >SOFT.ftp Si-R240B SIR240BSOFT.ftp < >_< >.cfg Si-R240B SIR240B_1.cfg PC P USB CHECK 3. USB 4. USB USB 5. USB 2 USB - Si-R180B CHECK LAN0 100M FULL - Si-R220C LAN0 3 - Si-R220D LAN0 3 - Si-R240B LAN0 1 SLOT0 SLOT1 USB output.txt 6. 2 USB CHECK 7. USB USB P.53 storage setup mode 52 USB

53 PC USB password.txt PASSWORD [< > [< >]] < > PASSWORD PASSWORD USB storage setup machine show system information 8 show running-config password admin set < > encrypted USB 1 # password file sample PASSWORD < > # password file sample PASSWORD Si-R240B < > PASSWORD Si-R240B < > PASSWORD Si-R240B < > PASSWORD Si-R240B < > PASSWORD Si-R240B < > 53 USB

54 A admin...11 B BGP...34 C configure...12 F ftp...44 FTP...44 P ping...35 PIN...37 PIN...38 PIN...38 S sftp...44 SFTP...44 U USB...48 user...11 V VRRP...36 VRRP FTP... 45, 46 USB.48, LAN

55 FTP...47 USB

56 Si-R P3NK Z