FUJITSU Network SR-M　コマンドユーザーズガイド

Size: px

Start display at page:

Download "FUJITSU Network SR-M　コマンドユーザーズガイド"

よりおさどひら
7 years ago
Views:

1 SR-M P3NK Z0 FUJITSU Network SR-M V02

2 LAN Microsoft Corporation Copyright FUJITSU LIMITED

3 FTP USB

4.8...20 1.4.9...20 1.4.10...24 1.5...25 1.6...26 1.7...27 2... 28 2.1...29 2.2...30 2.3...32 2.

4 CD-ROM README 1 2 PL PL 4

5 MicrosoftMS-DOSWindowsWindows Server Windows Vista Microsoft Corporation Adobe Reader Adobe Systems Incorporated Netscape Netscape Communications Corporation UNIX Microsoft Windows XP Professional operating system Windows XP Microsoft Windows XP Home Edition operating system Microsoft Windows Server 2003, Standard Edition Windows Server 2003 Microsoft Windows Server 2003 R2, Standard Edition Microsoft Windows Server 2003, Enterprise Edition Microsoft Windows Server 2003 R2, Enterprise Edition Microsoft Windows Server 2003, Datacenter Edition Microsoft Windows Server 2003 R2, Datacenter Edition Microsoft Windows Server 2003, Web Edition Microsoft Windows Server 2003, Standard x64 Edition Microsoft Windows Server 2003 R2, Standard Edition Microsoft Windows Server 2003, Enterprise x64 Edition Microsoft Windows Server 2003 R2, Enterprise x64 Edition Microsoft Windows Server 2003, Enterprise Edition for Itanium-based systems Microsoft Windows Server 2003, Datacenter x64 Edition Microsoft Windows Server 2003 R2, Datacenter x64 Edition Microsoft Windows Vista Ultimate operating system Windows Vista Microsoft Windows Vista Business operating system Microsoft Windows Vista Home Premium operating system Microsoft Windows Vista Home Basic operating system Microsoft Windows Vista Enterprise operating system Microsoft Windows 7 64bit Home Premium Windows 7 Microsoft Windows 7 32bit Professional 5

Microsoft Windows Server 2003, Enterprise Edition Microsoft Windows Server 2003 R2, Enterprise Edition Microsoft Windows Server 2003, Datacenter Edition Microsoft Windows Server 2003 R2, Datacenter

6 SR-M20AP1 SR-M20AP2 SR-M20AC1 SR-M20AC2 Web Web SR-M20AP1 SR-M20AP2 SR-M20AC1 SR-M20AC2 MIB/Trap Web Web 6

3.3................................................. 15 1.4.................................................................. 16 1.4.1............................................................ 16 1.4.2.

8 configure 4candidate-config 5save startup-config 6commit running-config 7exit exit P P.11 user exit admin / su exit /! configure exit /! / end / quit admin exit running-config commit load candidate-config save load reset / startup-config 8

9 telnet ssh 1 Login: 1 Password: <WARNING> weak admin s password:set the password 2 # 3 adminreturn 1ssh Login: ssh 28 3 adminuser password aaa AAA aaa user id RADIUS password admin set password user set password aaa AAA aaa user password RADIUS 1.3 P.13 9

adminuser password aaa AAA aaa user id RADIUS password admin set

10 1 admin user admin su admin password aaa AAA aaa user id RADIUS RADIUS RADIUS Filter-ID RADIUS Filter-ID11 administrator user aaa user user-role admin user Return password admin set password user set user 10

Filter-ID11 administrator user aaa user user-role

11 P.10 P.10 configure configure admin configure commit candidate-config running-config commit save reset show candidate-config show running-config show startup-config delete startup-config save reset 11

12 # date 2010/01/01.12:30:00 12

13 SR-M20AP P.61 SR-M20AP2 P.72 SR-M20AC P.4 2 SR-M20AC2 P # configure pass!word! (config)# password admin set pass!word! mem123ber (config)# password user set mem123ber (config)# save (config)# exit # exit Login: user user Password: > commit 13

14 password format unique SR-M20AP1/20AC1 TCGTrusted Computing Group TPMTrusted Platform ModuleSR-M20AP2/ 20AC2 TPM SR-M20AP P.61 SR-M20AP2 P.72 SR-M20AC P.4 2 SR-M20AC2 P P.8 # configure (config)# password format unique commit 14

Group TPMTrusted Platform ModuleSR-M20AP2/ 20AC2 TPM SR-M20AP13.

15 P.13 AAA ID ID RADIUS ID 128 ASCII adminuser RADIUS ID RADIUS IP RADIUS radius-secret # configure AAA (config)# password aaa 0 RADIUS LAN lan 0 vlan 1 SR-M20AP1 / 20AP2 (config)# lan 0 vlan 1 (config)# lan 0 ip address /24 3 RADIUS AAA (config)# aaa 0 name radiusauth (config)# aaa 0 radius service client auth (config)# aaa 0 radius auth source (config)# aaa 0 radius client server-info auth 0 secret radius-secret (config)# aaa 0 radius client server-info auth 0 address (config)# save (config)# commit (config)# exit # exit 15

SR-M20AP1 / 20AP2 (config)# lan 0 vlan 1 (config)# lan 0 ip address 192.168.1.1/24 3 RADIUS AAA (config)# aaa 0 name radiusauth (config)# aaa 0 radius service client auth (config)# aaa 0 radius auth source 192.

16 ReturnEnter ASCII EUC JIS terminal charset ASCII ASCII VT100 VT terminal window P.24 16

17 TabCtrl+I TabCtrl+I Exec commands- -- Exec commands(config mode)-- --Config commands-- --Config commands(current directory)-- TabCtrl+I TabCtrl+I terminal charset Tab Ctrl+I 1 2 alias

18 Tab Ctrl+ITab Ctrl+I TabCtrl+I TabCtrl+I terminal charset Tab Ctrl+I ,-, alias 18

19 (configure)# lan 0 ip address / (configure-lan-0-ip)# terminal prompt 2 exit!endquituptopdeleteshowclearcommitdiscardsaveloadreset # (configure)# acl 0 ip (configure-acl-0-ip)# any (configure-acl-0-ip-any)# any (configure-acl-0)# show up top Ctrl+O <NOTICE> The configuration directory mode is enabled. To disable, type Ctrl+G. Ctrl+G <NOTICE> The configuration directory mode is disabled. 19

(configure-acl-0-ip-any)# any (configure-acl-0)# show up top Ctrl+O <NOTICE> The configuration directory

20 1 # configure (config)# lan 0 ip address /24 3 (config-lan-0-ip)# (config-lan-0-ip)# dhcp service server (config-lan-0-ip-dhcp)# info address /24 (config-lan-0-ip-dhcp)# up 1 (config-lan-0-ip)# show address /24 3 service server info address /24 32 (config-lan-0-ip)# save (config-lan-0-ip)# top (config)# terminal timestamp show logging terminal prompt terminal logging Ctrl+PCtrl+N P.24 20

168.1.100/24 32 (config-lan-0-ip)# save (config-lan-0-ip)# top (config)# 1.4.8 terminal timestamp show logging terminal prompt 1.

21 1 history 1!!!!-!-33!!net net # show ip route show ip route #!! all all show ip route all show ip route all :p!! :p!net:p net # show ip route show ip route #!!:p all all show ip route al #!! show ip route all show ip route all 21

22 1 ^ ABC ^A^B^ ^A^B^:p ^A^B^C ^A^B^:pC ^A^^ ^A^^:p ^A^^C ^A^^:pC A B A B A B C A B C A A A C A C # show running-config lan 0 ip address lan 0 IP # ^addr^rout^:p addr rout show running-config lan 0 ip routess # ^ess^e^ ess e show running-config lan 0 ip route lan 0 22

23 1 / ABC :s/a/b/ :ps/a/b/ :s/a/b/c :ps/a/b/c :gs/a/b/ :pgs/a/b/ :gs/a/b/c :pgs/a/b/c :s/a// :ps/a// :s/a//c :ps/a//c :gs/a// :pgs/a// :gs/a//c :pgs/a//c :s/a1/b1/:gs/a2/b2/:p A B A B A B C A B C A B A B A B C A B C A A A C A C A A A C A C A1 B1 A2 B2 # lan 0 ip address /24 3 #!!:gs/0/1/:p 0 1 lan 1 ip address /24 3 #!! lan 1 ip address /24 3 /^ :p 23

24 Ctrl+A Ctrl+B Ctrl+C Ctrl+D Ctrl+E Ctrl+F Ctrl+G Ctrl+H BS Ctrl+I Tab Ctrl+J Return Ctrl+K Ctrl+L Ctrl+M Ctrl+N Ctrl+O Ctrl+P Ctrl+R Ctrl+T Ctrl+U Ctrl+W Ctrl+X Ctrl+Y ESC Ctrl+H ESC BS ESC Ctrl+I ESC TAB ESC Ctrl+K ESC b ESC f ESC n ESC p ESC < ESC > Ctrl+Ctrlcontrol ESC ESC telnet 1 Ctrl+ telnet Ctrl+ 24

26 <ERROR> : Unknown command <ERROR> : Operation not permitted <ERROR> : 0 : argument too less <ERROR> : 0 : argument too much <ERROR> : : format error <ERROR> : : value out of range <ERROR> : : lack of table <ERROR> : : no such table <ERROR> : : duplicate value <ERROR> : : fail to request <ERROR> : : unique password <ERROR> : detected HARD ERROR, cannot execute unique 26

27 A +B +C +D +E +F 20! # $ % & ( ) * +, -. / : ; < = >? A B C D E F G H I J K L M N O 50 P Q R S T U V W X Y Z [ ( ) ] ^ _ 60 a b c d e f g h i j k l m n o 70 p q r s t u v w x y z { } ( ) WWW <>&%WWW WWW " "WWW WWW 27

28 FTP USB

29 2 2.1 SR-M20AP2 # show system information Current time : Mon Jul 1 10:53: Startup time : Mon Jul 1 10:34: System : SR-M20AP2 Serial No. : ROM Ver. : 1.0 Firm Ver. : V02.09 NY0001 Mon Jul 1 08:40:15 JST 2013 Startup-config : Mon Jul 1 10:08: config1 Running-config : Mon Jul 1 10:34: MAC : 000b5d b5d b5d b5d (2.4GHz) 000b5d b5d89002f (5GHz) Memory : 64MB # Current time 2Startup time 3System 4Serial No ROM Ver. ROM x.y 10 6Firm Ver. Vxx.yy 10 7Startup-config 8Running-config 9MAC 1 LAN MAC 2 LAN MAC Memory 29

30 2 2.2 SR-M20AP2 # show logging error Error Logs in FLASH [0] Error Log: flag=80,mode=00,unit=10,regsp= Firm information: SR-M20AP2 V02.09 PTF:NY0001 Error information: error code [ ] Logging time: Mon Jul 1 11:51: Hardware diagnostic error information: Detail [ f] [ ] Extended Error Logs: [1] Error Log: flag=80,mode=00,unit=10,regsp= Firm information: SR-M20AP2 V02.09 PTF:NY0001 Error information: error code [ ] Logging time: Mon Jul 1 11:59: Hardware diagnostic error information: Detail [ ] [ ] Error Logs in DRAM [0] Error Log: flag=80,mode=00,unit=80,regsp=01183eb0,thread=cmdexec Firm information: SR-M20AP2 V02.09 NY0001 System down information: down code [ : ] Logging time: Sat Sep 3 15:16: Register: status [1040ff0c] cause [ ] epc [ ] badva [ ] hi [ ] lo [ ] r0 [ ] r1 [ ] r2 [00000ebc] r3 [ ] 30

31 2 User Stack: C C 04ae9f60 04aea1d d58 04ae9fb8 04ae9fa0...mX... 04ae9f70 00c6fcbb fea4cebb d8c4eab7 c1bcb0a1... Interrupt Stack: C C 04ae9e aea1f0 0121ff !.t... 04ae9e ae9f `...HD # 31

32 2 2.3 # show system status Current-time : Thu Feb 19 10:53: Startup-time : Thu Feb 19 10:34: restart_cause : power on ---3 machine_state : RUNNING ---4 cpu0_state : NORMAL ---5 cpu0_temp : 40 C Current time 2Startup time 3restart_cause power on reset reset reset switch system down 4machine_state RUNNING : 5cpu0_state CPU NORMAL HIGHWARNING HIGHALARM UNKNOWN 6cpu0_temp CPU 32

33 P # reset config2 33

34 2 2.5 SR-M20AP2 # show candidate-config ether 1 vlan untag 10 ether 2 vlan untag 20 lan 0 ip address /24 3 lan 0 ip route / lan 0 vlan 10 lan 1 ip address /24 3 lan 1 vlan 20 syslog pri error,warn,notice,info syslog facility 23 time zone 0900 # 34

35 2 2.6 FTP USBSR-M20AP1 / 20AP FTP FTP SFTP UNIX ftp sftp SR-M20AP2 FTP ftp SFTP SSH 2 sftp ftp sftp FTP ftp-admin password FTP FTP 1 config1 2 config2 ftp get reset get reset1get reset2 get reset get reset1 1 get reset P.13 35

36 2 FTP ftp ftp get FTP IP ftp 1 config1-1 C:>cd C:tmp>ftp Connected to SR-M20AP2 V02.09 FTP server (config1) ready. Name( :root): ftp-admin 331 Password required for ftp-admin. Password: 230 User ftp-admin logged in. ftp>bin 200 Type set to I. ftp>get config1 config1-1 1config1 config1-1 local: config1 remote: config PORT command successful. 150 Opening BINARY mode data connection for config1(2753 bytes) 226- Transfer complete bytes received in 1.10 seconds (2.44 Kbytes/s) ftp>bye 221 Goodbye. C:tmp> 1.3 P.13 36

37 2 FTP ftp ftp put FTP IP ftp 1 config1-1 C:>cd C:tmp>ftp Connected to SR-M20AP2 V02.09 FTP server (config1) ready. Name( :root): ftp-admin 331 Password required for ftp-admin. Password: 230 User ftp-admin logged in. ftp>bin 200 Type set to I. ftp>put config1-1 config1 config1-1 1 local: config1-1 remote: config1 200 PORT command successful. 150 Opening BINARY mode data connection for config Transfer complete. update : File information check now! update : File information check ok. 226 Write complete bytes sent in 1.10 seconds (2.44 Kbytes/s) ftp>get reset local: reset remote: reset 200 PORT command successful. 421 Reset request ok. bye. ftp>bye C:tmp> ftp get reset get reset 1get reset2 get reset get reset1 1 get reset2 2 37

38 USB SR-M20AP1, 20AP2 SR-M20AP1 / 20AP2 USB USB candidate-config running-config 1 config1 2 config2 USB USB SR-M20AP1 / 20AP2 USB 1. USB SR-M20AP1 / 20AP2 USB 2. USB # usbctl enable 3. USB show usb hcd statusstatus enable # show usb hcd status [USB HCD STATUS] status : enable 4. USB 1 config1-1 # copy config1 /um0/config USB # usbctl disable 6. USB show usb hcd statusstatus disable # show usb hcd status [USB HCD STATUS] status : disable 7. SR-M20AP1 / 20AP2 USB 38

39 2 USB USB SR-M20AP1 / 20AP2 1. USB SR-M20AP1 / 20AP2 USB 2. USB # usbctl enable 3. USB show usb hcd statusstatus enable # show usb hcd status [USB HCD STATUS] status : enable 4. USB 2 config2-1 # copy /um0/config2-1 config2 # reset SR-M20AP1 / 20AP2 5. USB # usbctl disable 6. USB show usb hcd statusstatus disable # show usb hcd status [USB HCD STATUS] status : disable 7. SR-M20AP1 / 20AP2 USB SR-M20AP1 / 20AP2 39

40 F ftp...35 FTP...35 S sftp...35 SFTP...35 U USB FTP USB FTP USB

42 SR-M P3NK Z

SR-Sシリーズセキュアスイッチ　コマンドユーザーズガイド

SR-Sシリーズセキュアスイッチ　コマンドユーザーズガイド SR-S P3NK-3812-07Z0 V13 SR-S V13 2009 11 2010 7 2 2010 10 3 2011 3 4 2012 7 5 2012 9 6 2013 1 7 Microsoft Corporation Copyright FUJITSU LIMITED 2009-2013 2 SR-S V13...2...4...4...4...5...6 1... 7 1.1...8

FUJITSU Network SR-M コマンドユーザーズガイド

FUJITSU Network SR-M　コマンドユーザーズガイド