Home
Siemens
Network Hardware
RUGGEDCOM ROX II
Siemens RUGGEDCOM ROX II User Manual
5
of 1
of 1 rating
798 pages
Give review
Manual
Specs
To Next Page
To Next Page
To Previous Page
To Previous Page
Loading...
RUGGEDCOM ROX II
v2.12
CLI User Guide
For RX5000, MX5000, MX5000RE
07/2018
RC1402-EN-02
Continued
Traffic Control and
Classification
16
Time Services
17
Applications
18
Troubleshooting
19
2
4
Table of Contents
RUGGEDCOM ROX II
1
Table of Contents
7
Preface
41
Conventions
41
Related Documents
42
System Requirements
44
Accessing Documentation
44
License Conditions
44
Training
44
Customer Support
45
1. Introduction
47
1.1. Features and Benefits
47
1.2. Feature Keys
51
1.3. Security Recommendations
52
1.4. Available Services by Port
55
1.5. User Permissions
56
1.6. Removable Memory
59
1.7. Logged Events
60
1.7.1. Structure of a Syslog Event
60
1.7.2. Syslog Event Types
61
1.7.3. Logged Security Events
61
2. Using RUGGEDCOM ROX II
65
2.1. Default User Names and Passwords
65
2.2. Logging In
65
2.3. Logging Out
66
2.4. Using Network Utilities
66
2.4.1. Pinging an IPv4 Address or Host
67
2.4.2. Pinging an IPv6 Address or Host
67
2.4.3. Pinging MPLS Endpoints
68
2.4.4. Pinging VRF Endpoints
68
2.4.5. Tracing a Route to an IPv4 Host
68
2.4.6. Tracing a Route to an IPv6 Host
69
2.4.7. Tracing a Route to an MPLS Endpoint
69
2.4.8. Tracing a Route to a VRF Endpoint
69
2.4.9. Capturing Packets from a Network Interface
70
2.4.10. Capturing Packets from a VRF Network Interface
70
2.5. Using the Command Line Interface
71
2.5.1. Accessing Different CLI Modes
71
2.5.2. Using Command Line Completion
72
2.5.3. Displaying Available Commands
72
2.5.4. Editing Commands
72
2.5.5. Using Double Quotes
74
2.5.6. Using Output Redirects
74
2.5.7. Using Regular Expressions
78
2.5.8. Using CLI Utilities
78
2.5.9. Specifying a Range
79
2.5.10. Common Commands
79
2.5.10.1. Basic CLI Commands
80
2.5.10.2. File Commands
81
2.5.10.3. Interface and Services Commands
85
2.5.10.4. Administration Commands
85
2.5.10.5. Configuration Mode General Commands
87
2.6. Configuring the CLI Interface
90
2.7. Accessing Different Modes
91
2.7.1. Accessing BIST Mode
91
2.7.2. Accessing Service Mode
93
2.7.3. Accessing Maintenance Mode
95
3. Getting Started
97
3.1. Connecting to RUGGEDCOM ROX II
97
3.1.1. Default IP Address
97
3.1.2. Connecting Directly
97
3.1.3. Connecting Remotely
98
3.2. Configuring a Basic Network
99
3.2.1. Configuring a Basic IPv4 Network
99
3.2.2. Configuring a Basic IPv6 Network
100
4. Device Management
101
4.1. Displaying Device and Software Information
101
4.2. Viewing Chassis Information and Status
102
4.2.1. Viewing the Slot Hardware
102
4.2.2. Viewing Module Information
103
4.2.3. Viewing Flash Card Storage Utilization
104
4.2.4. Viewing CPU/RAM Utilization
105
4.2.5. Viewing the Slot Status
105
4.2.6. Viewing the Slot Sensor Status
107
4.2.7. Viewing the Power Controller Status
107
4.3. Viewing the Parts List
108
4.4. Shutting Down the Device
109
4.5. Rebooting the Device
109
4.6. Restoring Factory Defaults
110
4.7. Decommissioning the Device
110
4.8. Managing Feature Keys
111
4.8.1. Viewing the Contents of a Feature Key
111
4.8.2. Installing Feature Keys
112
4.9. Managing Files
113
4.9.1. Installing Files
113
4.9.2. Backing Up Files
114
4.10. Managing Logs
115
4.10.1. Viewing Logs
116
4.10.2. Deleting Logs
116
4.10.3. Configuring Secure Remote Syslog
116
4.10.3.1. Enabling/Disabling Secure Remote Syslog
117
4.10.3.2. Viewing a List of Permitted Peers
118
4.10.3.3. Adding a Permitted Peer
118
4.10.3.4. Deleting a Permitted Peer
118
4.10.3.5. Configuring a Source IP Address for Remote Syslog Messages
119
4.10.4. Managing Diagnostic Logs
119
4.10.4.1. Enabling/Disabling the Developer's Log
120
4.10.4.2. Enabling/Disabling the SNMP Log
120
4.10.4.3. Enabling/Disabling the NETCONF Summary Log
121
4.10.4.4. Enabling/Disabling the NETCONF Trace Log
121
4.10.4.5. Enabling/Disabling the XPATH Trace Log
122
4.10.4.6. Enabling/Disabling the WebUI Trace Log
123
4.10.5. Managing Remote Syslog Servers
123
4.10.5.1. Viewing a List of Remote Servers
123
4.10.5.2. Adding a Remote Server
124
4.10.5.3. Deleting a Remote Server
125
4.10.6. Managing Remote Server Selectors
125
4.10.6.1. Viewing a List of Remote Server Selectors
125
4.10.6.2. Adding a Remote Server Selector
126
4.10.6.3. Deleting a Remote Server Selector
126
4.11. Managing the Software Configuration
127
4.11.1. Saving the Configuration
127
4.11.2. Loading a Configuration
127
4.12. Upgrading/Downgrading the RUGGEDCOM ROX II Software
128
4.12.1. Configuring the Upgrade Source
128
4.12.2. Setting Up an Upgrade Server
129
4.12.2.1. Configuring the Upgrade Server
130
4.12.2.2. Adding Software Releases to the Upgrade Server
131
4.12.3. Upgrading the RUGGEDCOM ROX II Software
131
4.12.4. Stopping/Declining a Software Upgrade
133
4.12.5. Downgrading the RUGGEDCOM ROX II Software
133
4.12.5.1. Rolling Back a Software Upgrade
133
4.12.5.2. Downgrading Using ROXflash
133
4.13. Monitoring Firmware Integrity
135
4.13.1. Enabling/Disabling the Boot Time Firmware Integrity
135
4.13.2. Checking the Firmware Integrity
136
4.13.3. Scheduling a Recurring Firmware Integrity Check
136
4.13.4. Viewing the Status of the Firmware Integrity Check
136
4.14. Managing the Fan Controller
137
4.14.1. Viewing the Fan Controller Status
137
4.14.2. Configuring the Activation Temperature
138
4.15. Managing Fixed Modules
138
4.15.1. Viewing a List of Fixed Module Configurations
138
4.15.2. Adding a Fixed Module Configuration
139
4.15.3. Deleting a Fixed Module Configuration
139
4.16. Managing Line Modules
140
4.16.1. Removing a Line Module
140
4.16.2. Installing a New Line Module
140
4.16.3. Viewing a List of Line Module Configurations
141
4.16.4. Configuring a Line Module
141
4.17. Managing SFP Transceivers (RUGGEDCOM RX5000 Only)
142
4.17.1. SFP Transceiver Support
142
4.17.2. Viewing SFP Information
143
4.17.3. Enabling/Disabling Smart SFP Mode (RUGGEDCOM RX5000 Only)
144
4.18. Managing Routable Ethernet Ports
145
4.18.1. Viewing a List of Routable Ethernet Ports
145
4.18.2. Configuring a Routable Ethernet Port
145
4.18.3. Managing VLANs for Routable Ethernet Ports
147
4.18.3.1. Viewing a List of VLANs for Routable Ethernet Ports
147
4.18.3.2. Adding a VLAN to a Routable Ethernet Port
148
4.18.3.3. Deleting a VLAN for a Routable Ethernet Port
148
5. System Administration
149
5.1. Configuring the System Name and Location
149
5.2. Configuring the Host Name
150
5.3. Customizing the Welcome Screen
150
5.4. Setting the Maximum Number of Sessions
150
5.5. Enabling and Configuring WWW Interface Sessions
151
5.6. Enabling/Disabling Remote Access Through a VRF Interface
152
5.7. Managing Alarms
153
5.7.1. Pre-Configured Alarms
154
5.7.2. Viewing a List of Active Alarms
155
5.7.3. Clearing and Acknowledging Alarms
155
5.7.3.1. Clearing Alarms
156
5.7.3.2. Acknowledging Alarms
156
5.7.4. Configuring an Alarm
156
5.8. Managing Users
157
5.8.1. Viewing a List of Users
158
5.8.2. Adding a User
158
5.8.3. Deleting a User
159
5.8.4. Monitoring Users
159
5.8.4.1. Kicking Users from the Network
159
5.8.4.2. Sending Messages to Users
160
5.9. Managing Passwords and Passphrases
160
5.9.1. Configuring Password/Passphrase Complexity Rules
161
5.9.2. Setting a User Password/Passphrase
162
5.9.3. Setting the Boot Password/Passphrase
162
5.9.4. Setting the Maintenance Password/Passphrase
163
5.9.5. Resetting the Admin Password/Passphrase
164
5.9.6. Resetting the Boot Password/Passphrase
165
5.9.7. Resetting the Maintenance Password/Passphrase
165
5.10. Scheduling Jobs
167
5.10.1. Viewing a List of Scheduled Jobs
167
5.10.2. Adding a Scheduled Job
167
5.10.3. Deleting a Scheduled Job
169
6. Security
171
6.1. Enabling and Configuring CLI Sessions
171
6.2. Enabling and Configuring SFTP Sessions
172
6.3. Enabling/Disabling Brute Force Attack Protection
173
6.4. Enabling/Disabling Compact Flash Card Removal Detection
174
6.5. Enabling/Disabling SYN Cookies
175
6.6. Managing Port Security
175
6.6.1. Port Security Concepts
176
6.6.1.1. Static MAC Address-Based Authentication
176
6.6.1.2. IEEE 802.1x Authentication
176
6.6.1.3. IEEE 802.1X Authentication with MAC Address-Based Authentication
177
6.6.1.4. Assigning VLANS with Tunnel Attributes
178
6.6.2. Configuring Port Security
178
6.6.3. Viewing the Security Status of Switched Ethernet Ports
180
6.7. Managing User Authentication
180
6.7.1. Setting the User Authentication Mode
181
6.7.2. Managing User Authentication Keys
181
6.7.2.1. Determining Which Keys are Associated to a User
182
6.7.2.2. Adding a User Authentication Key
182
6.7.2.3. Deleting a User Authentication Key
183
6.7.2.4. Associating/Disassociating a User Authentication Key
183
6.7.3. Managing RADIUS Authentication
184
6.7.3.1. Configuring RADIUS Authentication for LOGIN Services
185
6.7.3.2. Configuring RADIUS Authentication for PPP Services
186
6.7.3.3. Configuring RADIUS Authentication for Switched Ethernet Ports
187
6.7.4. Configuring TACACS+ Authentication
187
6.8. Managing Certificates and Keys
189
6.8.1. Viewing the Local Host SSH/RSA Public Key
189
6.8.2. Managing the Trusted Certificate Store
190
6.8.2.1. Configuring the Trusted Certificate Store
190
6.8.2.2. Enabling/Disabling the Trusted Certificate Store
190
6.8.2.3. List of Root Certificates in the Trusted Certificate Store
191
6.8.3. Managing CA Certificates for the Trusted Certificate Store
217
6.8.3.1. Viewing a List of CA Certificates Added to the Trusted Certificate Store
217
6.8.3.2. Adding a CA Certificate to the Trusted Certificate Store
217
6.8.3.3. Deleting a CA Certificate from the Trusted Certificate Store
218
6.8.4. Managing CA Certificates and CRLs
218
6.8.4.1. Viewing a List of CA Certificates and CRLs
218
6.8.4.2. Viewing the Status of a CA Certificate and CRL
218
6.8.4.3. Adding a CA Certificate and CRL
220
6.8.4.4. Deleting a CA Certificate and CRL
221
6.8.5. Managing Private Keys
221
6.8.5.1. Viewing a List of Private Keys
221
6.8.5.2. Adding a Private Key
222
6.8.5.3. Deleting a Private Key
222
6.8.6. Managing Public Keys
222
6.8.6.1. Viewing a List of Public Keys
223
6.8.6.2. Adding a Public Key
223
6.8.6.3. Adding an IPSec-Formatted Public Key
224
6.8.6.4. Deleting a Public Key
225
6.8.7. Managing Certificates
225
6.8.7.1. Viewing a List of Certificates
225
6.8.7.2. Viewing the Status of a Certificate
226
6.8.7.3. Adding a Certificate
226
6.8.7.4. Deleting a Certificate
227
6.8.8. Managing Known Hosts
227
6.8.8.1. Viewing a List of Known Hosts
228
6.8.8.2. Adding a Known Host
228
6.8.8.3. Deleting a Known Host
228
6.9. Managing Firewalls
229
6.9.1. Firewall Concepts
230
6.9.1.1. Stateless vs. Stateful Firewalls
230
6.9.1.2. Linux netfilter
230
6.9.1.3. Network Address Translation
231
6.9.1.4. Port Forwarding
231
6.9.1.5. Protecting Against a SYN Flood Attack
232
6.9.1.6. Protecting Against IP Spoofing
232
6.9.2. Viewing a List of Firewalls
232
6.9.3. Adding a Firewall
233
6.9.4. Deleting a Firewall
234
6.9.5. Working with Multiple Firewall Configurations
234
6.9.6. Configuring the Firewall for a VPN
234
6.9.7. Configuring the Firewall for a VPN in a DMZ
235
6.9.8. Configuring Netfilter
236
6.9.9. Managing Zones
236
6.9.9.1. Viewing a List of Zones
237
6.9.9.2. Adding a Zone
237
6.9.9.3. Deleting a Zone
238
6.9.10. Managing Interfaces
239
6.9.10.1. Viewing a List of Interfaces
239
6.9.10.2. Adding an Interface
240
6.9.10.3. Associating an Interface with a Zone
241
6.9.10.4. Configuring a Broadcast Address
241
6.9.10.5. Deleting an Interface
241
6.9.11. Managing Hosts
242
6.9.11.1. Viewing a List of Hosts
242
6.9.11.2. Adding a Host
243
6.9.11.3. Deleting a Host
243
6.9.12. Managing Policies
244
6.9.12.1. Viewing a List of Policies
245
6.9.12.2. Adding a Policy
245
6.9.12.3. Configuring the Source Zone
246
6.9.12.4. Configuring the Destination Zone
246
6.9.12.5. Deleting a Policy
246
6.9.13. Managing Network Address Translation Settings
247
6.9.13.1. Viewing a List of NAT Settings
247
6.9.13.2. Adding a NAT Setting
248
6.9.13.3. Deleting a NAT Setting
248
6.9.14. Managing Masquerade and SNAT Settings
249
6.9.14.1. Viewing a List of Masquerade and SNAT Settings
249
6.9.14.2. Adding Masquerade or SNAT Settings
250
6.9.14.3. Deleting a Masquerade or SNAT Setting
251
6.9.15. Managing Rules
251
6.9.15.1. Viewing a List of Rules
251
6.9.15.2. Adding a Rule
252
6.9.15.3. Configuring the Source Zone
253
6.9.15.4. Configuring the Destination Zone
254
6.9.15.5. Deleting a Rule
254
6.9.16. Validating a Firewall Configuration
254
6.9.17. Enabling/Disabling a Firewall
255
7. IP Address Assignment
257
7.1. Managing IP Addresses for Routable Interfaces
257
7.1.1. Configuring Costing for Routable Interfaces
257
7.1.2. Viewing Statistics for Routable Interfaces
258
7.1.3. Managing IPv4 Addresses
259
7.1.3.1. Viewing a List of IPv4 Addresses
259
7.1.3.2. Adding an IPv4 Address
260
7.1.3.3. Deleting an IPv4 Address
260
7.1.4. Managing IPv6 Addresses
261
7.1.4.1. Viewing a List of IPv6 Addresses
261
7.1.4.2. Adding an IPv6 Address
261
7.1.4.3. Deleting an IPv6 Address
262
7.1.5. Configuring IPv6 Neighbor Discovery
262
7.1.6. Managing IPv6 Network Prefixes
264
7.1.6.1. Adding an IPv6 Network Prefix
264
7.1.6.2. Deleting an IPv6 Network Prefix
265
7.2. Managing the DHCP Relay Agent
265
7.2.1. Configuring the DHCP Relay Agent
266
7.2.2. Assigning a DHCP Server Address
266
7.2.3. Viewing a List of DHCP Client Ports
266
7.2.4. Adding a DHCP Client Port
267
7.2.5. Deleting a DHCP Client Port
267
7.2.6. Example: Configuring the Device as a Relay Agent
267
7.3. Managing the DHCP Server
269
7.3.1. Viewing a List of Active Leases
269
7.3.2. Configuring the DHCP Server
270
7.3.3. Enabling/Disabling the DHCP Server
271
7.3.4. Configuring DHCP Server Options
271
7.3.5. Managing DHCP Client Configuration Options
272
7.3.5.1. Configuring Standard DHCP Client Configuration Options (IPv4)
273
7.3.5.2. Configuring Standard DHCP Client Configuration Options (IPv6)
274
7.3.5.3. Viewing a List of Custom DHCP Client Configuration Options
275
7.3.5.4. Adding a Custom DHCP Client Configuration Option
276
7.3.5.5. Deleting a Custom DHCP Client Configuration Option
276
7.3.6. Managing DHCP Listen Interfaces
277
7.3.6.1. Viewing a List of DHCP Listen Interfaces
277
7.3.6.2. Adding a DHCP Listen Interface
278
7.3.6.3. Deleting a DHCP Listen Interface
278
7.3.7. Managing Shared Networks
278
7.3.7.1. Viewing a List of Shared Networks
279
7.3.7.2. Adding a Shared Network
279
7.3.7.3. Configuring Shared Network Options
280
7.3.7.4. Deleting a Shared Network
281
7.3.8. Managing Subnets
281
7.3.8.1. Viewing a List of Subnets
282
7.3.8.2. Adding a Subnet
282
7.3.8.3. Configuring Subnet Options
283
7.3.8.4. Deleting a Subnet
285
7.3.9. Managing Host Groups
285
7.3.9.1. Viewing a List of Host Groups
285
7.3.9.2. Adding a Host Group
286
7.3.9.3. Configuring Host Group Options
286
7.3.9.4. Deleting a Host Group
288
7.3.10. Managing DHCP Hosts
288
7.3.10.1. Viewing a List of Hosts
288
7.3.10.2. Adding a Host
289
7.3.10.3. Configuring Host Options
289
7.3.10.4. Deleting Hosts
291
7.3.11. Managing Address Pools (IPv4)
292
7.3.11.1. Viewing a List of Address Pools (IPv4)
292
7.3.11.2. Adding an Address Pool (IPv4)
292
7.3.11.3. Deleting an Address Pool (IPv4)
293
7.3.12. Managing Address Pools (IPv6)
294
7.3.12.1. Viewing a List of Address Pools (IPv6)
294
7.3.12.2. Adding an Address Pool (IPv6)
294
7.3.12.3. Deleting an Address Pool (IPv6)
295
7.3.13. Managing IP Ranges (IPv4)
296
7.3.13.1. Viewing a List of IP Ranges (IPv4)
296
7.3.13.2. Adding an IP Range (IPv4)
296
7.3.13.3. Deleting an IP Range (IPv4)
297
7.3.14. Managing IP Ranges (IPv6)
297
7.3.14.1. Viewing a List of IP Ranges (IPv6)
298
7.3.14.2. Adding an IP Range (IPv6)
298
7.3.14.3. Deleting an IP Range (IPv6)
299
7.3.15. Managing IPv6 Prefixes
299
7.3.15.1. Viewing a List of IPv6 Prefixes
299
7.3.15.2. Adding an IPv6 Prefix
300
7.3.15.3. Deleting an IPv6 Prefix
300
7.3.16. Managing Temporary Subnets
301
7.3.16.1. Viewing a List of Temporary Subnets
301
7.3.16.2. Adding a Temporary Subnet
301
7.3.16.3. Deleting a Temporary Subnet
302
7.3.17. Managing IPv6 Subnets
302
7.3.17.1. Viewing a List of IPv6 Subnets
302
7.3.17.2. Adding a IPv6 Subnet
303
7.3.17.3. Deleting an IPv6 Subnet
303
7.3.18. Managing Option 82 Classes for Address Pools
304
7.3.18.1. Viewing a List of Option 82 Classes for Address Pools
304
7.3.18.2. Adding an Option 82 Class to an Address Pool
305
7.3.18.3. Deleting an Option 82 Class From an Address Pool
305
7.3.19. Example: Configuring the Device as a DHCP Server to Support a Relay Agent
306
7.4. Managing Static DNS
310
7.4.1. Managing Domain Names
310
7.4.1.1. Viewing a List of Domain Names
310
7.4.1.2. Adding a Domain Name
310
7.4.1.3. Deleting a Domain Name
311
7.4.2. Managing Domain Name Servers
311
7.4.2.1. Viewing a List of Domain Name Servers
311
7.4.2.2. Adding a Domain Name Server
312
7.4.2.3. Deleting a Domain Name Server
312
8. Layer 2
313
8.1. Managing Switched Ethernet Ports
313
8.1.1. Viewing a List of Switched Ethernet Ports
313
8.1.2. Configuring a Switched Ethernet Port
314
8.1.3. Viewing Switched Ethernet Port Statistics
318
8.1.4. Viewing the Status of a Switched Ethernet Port
319
8.1.5. Viewing RMON Port Statistics
320
8.1.6. Clearing Switched Ethernet Port Statistics
323
8.1.7. Resetting a Switched Ethernet Port
323
8.1.8. Testing Switched Ethernet Port Cables
323
8.1.8.1. Running a Cable Diagnostic Test
324
8.1.8.2. Viewing Cable Diagnostic Statistics
324
8.1.8.3. Clearing Cable Diagnostic Statistics
325
8.2. Managing Ethernet Trunk Interfaces
326
8.2.1. Viewing a List of Ethernet Trunk Interfaces
326
8.2.2. Adding an Ethernet Trunk Interface
327
8.2.3. Deleting an Ethernet Trunk Interface
329
8.2.4. Managing Ethernet Trunk Ports
329
8.2.4.1. Viewing a List of Ethernet Trunk Ports
329
8.2.4.2. Adding an Ethernet Trunk Port
330
8.2.4.3. Deleting an Ethernet Trunk Port
330
8.3. Managing MAC Addresses
330
8.3.1. Viewing a Dynamic List of MAC Addresses
331
8.3.2. Purging the Dynamic MAC Address List
332
8.3.3. Configuring MAC Address Learning Options
332
8.3.4. Managing Static MAC Addresses
332
8.3.4.1. Viewing a List of Static MAC Addresses
333
8.3.4.2. Adding a Static MAC Address
333
8.3.4.3. Deleting a Static MAC Address
334
8.4. Managing Multicast Filtering
334
8.4.1. Multicast Filtering Concepts
335
8.4.1.1. IGMP
335
8.4.1.2. GMRP (GARP Multicast Registration Protocol)
339
8.4.2. Enabling and Configuring GMRP
341
8.4.3. Managing IGMP Snooping
341
8.4.3.1. Configuring IGMP Snooping
342
8.4.3.2. Viewing a List of Router Ports
342
8.4.3.3. Adding a Router Port
343
8.4.3.4. Deleting a Router Port
343
8.4.4. Managing the Static Multicast Group Table
343
8.4.4.1. Viewing a List of Static Multicast Group Entries
343
8.4.4.2. Adding a Static Multicast Group Entry
344
8.4.4.3. Deleting a Static Multicast Group Entry
344
8.4.5. Managing Egress Ports for Multicast Groups
345
8.4.5.1. Viewing a List of Egress Ports
345
8.4.5.2. Adding an Egress Port
345
8.4.5.3. Deleting an Egress Port
346
8.4.6. Viewing a Summary of Multicast Groups
346
8.4.7. Viewing a List of IP Multicast Groups
347
8.5. Managing VLANs
347
8.5.1. VLAN Concepts
348
8.5.1.1. Tagged vs. Untagged Frames
348
8.5.1.2. Native VLAN
349
8.5.1.3. Edge and Trunk Port Types
349
8.5.1.4. Ingress Filtering
349
8.5.1.5. Forbidden Ports List
350
8.5.1.6. VLAN-Aware Mode of Operation
350
8.5.1.7. GARP VLAN Registration Protocol (GVRP)
350
8.5.1.8. PVLAN Edge
351
8.5.1.9. VLAN Advantages
352
8.5.2. Configuring the Internal VLAN Range
354
8.5.3. Enabling/Disabling Ingress Filtering
355
8.5.4. Managing VLANs for Switched Ethernet Ports
356
8.5.4.1. Viewing VLAN Assignments for Switched Ethernet Ports
356
8.5.4.2. Configuring VLANs for Switched Ethernet Ports
356
8.5.5. Managing Static VLANs
357
8.5.5.1. Viewing a List of Static VLANs
357
8.5.5.2. Adding a Static VLAN
358
8.5.5.3. Deleting a Static VLAN
358
8.5.6. Managing Forbidden Ports
359
8.5.6.1. Viewing a List of Forbidden Ports
359
8.5.6.2. Adding a Forbidden Port
359
8.5.6.3. Deleting a Forbidden Port
360
8.5.7. Managing VLANs for Interfaces and Tunnels
360
9. Layer 3
361
9.1. Layer 3 Switching Concepts
361
9.1.1. Layer 3 Switch Forwarding Table
361
9.1.2. Static Layer 3 Switching Rules
362
9.1.3. Dynamic Learning of Layer 3 Switching Rules
362
9.1.4. Layer 3 Switch ARP Table
363
9.1.5. Multicast Cross-VLAN Layer 2 Switching
363
9.1.6. Size of the Layer 3 Switch Forwarding Table
364
9.1.7. Interaction with the Firewall
364
9.2. Configuring Layer 3 Switching
364
9.3. Managing Static ARP Table Entries
366
9.3.1. Viewing a List of ARP Table Entries
366
9.3.2. Adding a Static ARP Table Entry
366
9.3.3. Deleting a Static ARP Table Entry
367
9.4. Viewing a Static and Dynamic ARP Table Summary
367
9.5. Viewing Routing Rules
368
9.6. Flushing Dynamic Hardware Routing Rules
370
10. Serial Server
371
10.1. Managing Serial Ports
371
10.1.1. Viewing Serial Port Statistics
372
10.1.2. Viewing Transport Connection Statistics
373
10.1.3. Viewing DNP Device Table Statistics
374
10.1.4. Restarting the Serial Server
375
10.1.5. Resetting a Serial Port
375
10.2. Managing Serial Port Protocols
375
10.2.1. Serial Port Protocol Concepts
375
10.2.1.1. Raw Socket Applications
376
10.2.1.2. Modbus TCP Applications
377
10.2.1.3. DNP Applications
377
10.2.1.4. Incoming/Outgoing Serial Connections
378
10.2.2. Viewing a List of Serial Port Protocols
378
10.2.3. Adding a Serial Port Protocol
379
10.2.4. Configuring the DNP Protocol
379
10.2.5. Configuring the Modbus TCP Protocol
380
10.2.6. Configuring the Raw Socket Protocol
381
10.2.7. Deleting a Serial Port Protocol
382
10.3. Managing Device Address Tables
382
10.3.1. Viewing a List of Device Address Tables
382
10.3.2. Adding a Device Address Table
383
10.3.3. Deleting a Device Address Table
383
10.4. Managing Serial Multicast Streaming
384
10.4.1. Understanding Serial Multicast Streaming
384
10.4.1.1. Sink vs. Source Ports
385
10.4.1.2. Multicast Streaming Examples
385
10.4.2. Configuring Serial Multicast Streaming
385
10.4.3. Example: Serial Interfaces Configured as a Sink for Multicast Streams
386
10.4.4. Example: Serial Interfaces Configured as a Source for Multicast Streams
388
10.4.5. Example: Serial Interfaces Configured as a Source and Sink for Multicast Streams
391
10.5. Managing Remote Hosts
393
10.5.1. Viewing a List of Remote Hosts
393
10.5.2. Adding a Remote Host
394
10.5.3. Deleting a Remote Host
395
10.6. Managing Local Hosts
395
10.6.1. Viewing a List of Local Hosts
395
10.6.2. Adding a Local Host
396
10.6.3. Deleting a Local Host
396
10.7. Managing Remote Host Interfaces
397
10.7.1. Viewing a List of Remote Host Interfaces
397
10.7.2. Adding a Remote Host Interface
398
10.7.3. Deleting a Remote Host Interface
398
10.8. Managing Local Host Interfaces
399
10.8.1. Viewing a List of Local Host Interfaces
399
10.8.2. Adding a Local Host Interface
399
10.8.3. Deleting a Local Host Interface
400
11. Wireless
401
11.1. Managing Cellular Modem Profiles
401
12. Tunneling and VPNs
403
12.1. Managing Virtual Switches
403
12.1.1. Viewing a List of Virtual Switches
404
12.1.2. Adding a Virtual Switch
405
12.1.3. Deleting a Virtual Switch
406
12.1.4. Managing Virtual Switch Interfaces
406
12.1.4.1. Viewing a List of Virtual Switch Interfaces
406
12.1.4.2. Adding a Virtual Switch Interface
407
12.1.4.3. Deleting a Virtual Switch Interface
407
12.1.5. Filtering Virtual Switch Traffic
408
12.1.5.1. Enabling/Disabling Virtual Switch Filtering
408
12.1.5.2. Viewing a List of Virtual Switch Filters
409
12.1.5.3. Adding a Virtual Switch Filter
409
12.1.5.4. Deleting a Virtual Switch Filter
410
12.1.6. Managing Filtering Rules
410
12.1.6.1. Viewing a List of Rules
410
12.1.6.2. Viewing a List of Rules Assigned to a Virtual Switch Filter
411
12.1.6.3. Adding a Rule
411
12.1.6.4. Adding a Rule to a Virtual Switch Filter
412
12.1.6.5. Deleting a Rule
412
12.1.6.6. Deleting a Rule from a Virtual Switch Filter
412
12.1.7. Managing In/Out Interfaces
413
12.1.7.1. Viewing a List of In/Out Interfaces
413
12.1.7.2. Adding an In/Out Interface
414
12.1.7.3. Deleting an In/Out Interface
414
12.1.8. Managing VLANs for Virtual Switches
414
12.1.8.1. Viewing a List of Virtual Switch VLANs
415
12.1.8.2. Adding a Virtual Switch VLAN
415
12.1.8.3. Deleting a Virtual Switch VLAN
416
12.2. Managing the Layer2 Tunnel Daemon
416
12.2.1. Viewing Round Trip Time Statistics
416
12.2.2. Configuring the Layer 2 Tunnel Daemon
417
12.3. Managing L2TP Tunnels
418
12.3.1. Configuring L2TP Tunnels
418
12.3.2. Configuring DNS Servers
419
12.3.3. Configuring PPP Options
419
12.3.4. Configuring WINS Servers
420
12.4. Managing L2TPv3 Tunnels
420
12.4.1. L2TPv3 Tunnel Scenarios
421
12.4.2. Creating an L2TPv3 Tunnel
422
12.4.3. Managing Static L2TPv3 Tunnels
423
12.4.3.1. Enabling/Disabling Static L2TPv3 Tunnels
423
12.4.3.2. Viewing a List of Static L2TPv3 Tunnels
424
12.4.3.3. Adding a Static L2TPv3 Tunnel
424
12.4.3.4. Deleting a Static L2TPv3 Tunnel
425
12.4.4. Managing Dynamic L2TPv3 Tunnels
426
12.4.4.1. Enabling and Configuring Dynamic L2TPv3 Tunnels
426
12.4.4.2. Viewing a List of Dynamic L2TPv3 Tunnels
427
12.4.4.3. Adding a Dynamic L2TPv3 Tunnel
427
12.4.4.4. Deleting a Dynamic L2TPv3 Tunnel
429
12.4.5. Managing Sessions for L2TPv3 Tunnels
429
12.4.5.1. Viewing a List of Sessions
429
12.4.5.2. Adding a Session
430
12.4.5.3. Deleting a Session
431
12.4.6. Managing VLANs for L2TPv3 Tunnels
432
12.4.6.1. Viewing a List of VLANs
432
12.4.6.2. Adding a VLAN
432
12.4.6.3. Deleting a VLAN
433
12.5. Managing GOOSE Tunnels
433
12.5.1. Viewing the GOOSE Tunnel Statistics
434
12.5.2. Viewing a List of GOOSE Tunnels
435
12.5.3. Adding a GOOSE Tunnel
435
12.5.4. Deleting a GOOSE Tunnel
436
12.5.5. Managing Remote Daemons for GOOSE Tunnels
436
12.5.5.1. Viewing a List of Remote Daemons
437
12.5.5.2. Adding a Remote Daemon
437
12.5.5.3. Deleting a Remote Daemon
437
12.6. Managing Generic Tunnels
438
12.6.1. Viewing the Generic Tunnel Statistics
438
12.6.2. Viewing a List of Generic Tunnels
439
12.6.3. Adding a Generic Tunnel
439
12.6.4. Deleting a Generic Tunnel
440
12.6.5. Managing Remote Daemon IP Addresses for Generic Tunnels
440
12.6.5.1. Viewing a List of IP Addresses
441
12.6.5.2. Adding an IP Address
441
12.6.5.3. Deleting an IP Address
441
12.6.6. Managing Remote Daemon Egress Interfaces for Generic Tunnels
442
12.6.6.1. Viewing a List of Egress Interfaces
442
12.6.6.2. Adding an Egress Interface
442
12.6.6.3. Deleting an Egress Interface
443
12.6.7. Managing Ethernet Types for Generic Tunnels
443
12.6.7.1. Viewing a List of Ethernet Types
443
12.6.7.2. Adding an Ethernet Type
443
12.6.7.3. Deleting an Ethernet Type
444
12.7. Managing Generic Routing Encapsulation Tunnels
444
12.7.1. Viewing Statistics for GRE Tunnels
445
12.7.2. Viewing a List of GRE Tunnels
446
12.7.3. Adding a GRE Tunnel
447
12.7.4. Configuring a DSCP Marking for GRE Tunnel Traffic
448
12.7.5. Enabling/Disabling Keepalive Messages
448
12.7.6. Deleting a GRE Tunnel
449
12.8. Managing IPsec Tunnels
450
12.8.1. IPsec Tunneling Concepts
450
12.8.1.1. IPsec Modes
451
12.8.1.2. Supported Encryption Protocols
451
12.8.1.3. Public and Secret Key Cryptography
451
12.8.1.4. X509 Certificates
452
12.8.1.5. NAT Traversal
452
12.8.1.6. Remote IPsec Client Support
452
12.8.1.7. IPsec and Router Interfaces
453
12.8.2. Configuring IPsec Tunnels
453
12.8.3. Configuring Certificates and Keys
454
12.8.4. Viewing the IPsec Tunnel Status
454
12.8.5. Managing Pre-Shared Keys
455
12.8.5.1. Viewing a List of Pre-Shared Keys
456
12.8.5.2. Adding a Pre-Shared Key
456
12.8.5.3. Deleting a Pre-Shared Key
456
12.8.6. Managing Connections
457
12.8.6.1. Viewing a List of Connections
457
12.8.6.2. Adding a Connection
458
12.8.6.3. Configuring Dead Peer Detection
459
12.8.6.4. Deleting a Connection
460
12.8.6.5. Viewing the Status of a Connection
460
12.8.7. Managing the Internet Key Exchange (IKE) Protocol
461
12.8.7.1. Viewing a List of IKE Algorithms
461
12.8.7.2. Adding an IKE Algorithm
462
12.8.7.3. Deleting an IKE Algorithm
462
12.8.8. Managing the Encapsulated Security Payload (ESP) Protocol
463
12.8.8.1. Configuring ESP Encryption
463
12.8.8.2. Viewing a List of ESP Algorithms
463
12.8.8.3. Adding an ESP Algorithm
464
12.8.8.4. Deleting an ESP Algorithm
464
12.8.9. Configuring the Connection Ends
465
12.8.10. Managing Private Subnets
466
12.8.10.1. Configuring Private Subnets for Connection Ends
467
12.8.10.2. Viewing a List of Addresses for Private Subnets
467
12.8.10.3. Adding an Address for a Private Subnet
467
12.8.10.4. Deleting an Address for a Private Subnet
468
12.8.11. Example: Configuring an Encrypted VPN Tunnel
468
12.9. Managing 6in4 and 4in6 Tunnels
472
12.9.1. Enabling/Disabling 6in4 or 4in6 Tunnels
473
12.9.2. Viewing a List of 6in4 or 4in6 Tunnels
473
12.9.3. Viewing the Status of 6in4/4in6 Tunnels
473
12.9.4. Adding a 6in4 or 4in6 Tunnel
474
12.9.5. Deleting a 6in4 or 4in6 Tunnel
474
12.10. Managing DMVPN
475
12.10.1. Understanding DMVPN
475
12.10.2. Configuring DMVPN
477
12.10.3. Managing DMVPN Interfaces
477
12.10.3.1. Viewing a List of DMVPN Interfaces
477
12.10.3.2. Adding a DMVPN Interface
478
12.10.3.3. Deleting a DMVPN Interface
479
12.10.4. Viewing the Status of DMVPN
479
13. Unicast and Multicast Routing
481
13.1. Viewing the Status of IPv4 Routes
481
13.2. Viewing the Status of IPv6 Routes
482
13.3. Viewing the Memory Statistics
483
13.4. Configuring ICMP
484
13.5. Managing Event Trackers
484
13.5.1. Viewing a List of Event Trackers
485
13.5.2. Viewing Event Tracker Statistics
485
13.5.3. Adding an Event Tracker
486
13.5.4. Deleting an Event Tracker
487
13.6. Managing IS-IS
487
13.6.1. IS-IS Concepts
488
13.6.1.1. IS-IS Routers
488
13.6.1.2. Network Entity Title (NET) Addresses
489
13.6.1.3. Advantages and Disadvantages of Using IS-IS
489
13.6.2. Configuring IS-IS
489
13.6.3. Viewing the Status of Neighbors
490
13.6.4. Viewing the Status of the Link-State Database
491
13.6.5. Managing Area Tags
492
13.6.5.1. Viewing a List of Area Tags
493
13.6.5.2. Adding an Area Tag
493
13.6.5.3. Deleting an Area Tag
495
13.6.6. Managing Interfaces
495
13.6.6.1. Viewing a List of Interfaces
495
13.6.6.2. Configuring an Interface
496
13.6.7. Managing LSP Generation
497
13.6.7.1. Viewing a List of LSP Generation Intervals
497
13.6.7.2. Adding an LSP Generation Interval
498
13.6.7.3. Deleting an LSP Generation Interval
498
13.6.8. Managing SPF Calculations
498
13.6.8.1. Viewing a List of SPF Calculation Intervals
499
13.6.8.2. Adding an SPF Calculation Interval
499
13.6.8.3. Deleting an SPF Calculation Interval
499
13.6.9. Managing the Lifetime of LSPs
500
13.6.9.1. Viewing a List of LSP Lifetime Intervals
500
13.6.9.2. Adding an LSP Lifetime Interval
501
13.6.9.3. Deleting an LSP Lifetime Interval
501
13.6.10. Managing LSP Refresh Intervals
501
13.6.10.1. Viewing a List of LSP Refresh Intervals
502
13.6.10.2. Adding an LSP Refresh Interval
502
13.6.10.3. Deleting an LSP Refresh Interval
503
13.6.11. Managing Network Entity Titles (NETs)
503
13.6.11.1. Viewing a List of NETs
504
13.6.11.2. Adding a NET
504
13.6.11.3. Deleting a NET
505
13.6.12. Managing Redistribution Metrics
505
13.6.12.1. Viewing a List of Redistribution Metrics
505
13.6.12.2. Adding a Redistribution Metric
506
13.6.12.3. Deleting a Redistribution Metric
506
13.7. Managing RIP
507
13.7.1. Configuring RIP
508
13.7.2. Viewing the Status of Dynamic RIP Routes
508
13.7.3. Managing Prefix Lists and Entries
510
13.7.3.1. Viewing a List of Prefix Lists
510
13.7.3.2. Viewing a List of Prefix Entries
511
13.7.3.3. Adding a Prefix List
511
13.7.3.4. Adding a Prefix Entry
511
13.7.3.5. Deleting a Prefix List
512
13.7.3.6. Deleting a Prefix Entry
512
13.7.4. Managing Networks
513
13.7.4.1. Configuring a Network
513
13.7.4.2. Tracking Commands
514
13.7.5. Managing Network IP Addresses
514
13.7.5.1. Viewing a List of Network IP Addresses
514
13.7.5.2. Adding a Network IP Address
515
13.7.5.3. Deleting a Network IP Address
515
13.7.6. Managing Network Interfaces
515
13.7.6.1. Viewing a List of Network Interfaces
516
13.7.6.2. Adding a Network Interface
516
13.7.6.3. Deleting a Network Interface
516
13.7.7. Managing Neighbors
517
13.7.7.1. Viewing a List of Neighbors
517
13.7.7.2. Adding a Neighbor
517
13.7.7.3. Deleting a Neighbor
517
13.7.8. Managing the Prefix List Distribution
518
13.7.8.1. Viewing a List of Prefix List Distribution Paths
518
13.7.8.2. Adding a Prefix List Distribution Path
518
13.7.8.3. Deleting a Prefix List Distribution Path
519
13.7.9. Managing Key Chains and Keys
519
13.7.9.1. Viewing a List of Key Chains
520
13.7.9.2. Viewing a List of Keys
520
13.7.9.3. Adding a Key Chain
520
13.7.9.4. Adding a Key
521
13.7.9.5. Deleting a Key Chain
522
13.7.9.6. Deleting a Key
522
13.7.10. Managing Redistribution Metrics
523
13.7.10.1. Viewing a List of Redistribution Metrics
523
13.7.10.2. Adding a Redistribution Metric
523
13.7.10.3. Deleting a Redistribution Metric
523
13.7.11. Managing Routing Interfaces
524
13.7.11.1. Viewing a List of Routing Interfaces
524
13.7.11.2. Configuring a Routing Interface
524
13.8. Managing BGP
525
13.8.1. Configuring BGP
526
13.8.2. Managing Route Maps
527
13.8.2.1. Viewing a List of Route Map Filters
528
13.8.2.2. Viewing a List of Route Map Filter Entries
528
13.8.2.3. Adding a Route Map Filter
528
13.8.2.4. Adding a Route Map Filter Entry
529
13.8.2.5. Deleting a Route Map Filter
529
13.8.2.6. Deleting a Route Map Filter Entry
530
13.8.2.7. Configuring Match Rules
530
13.8.2.8. Configuring a Set
531
13.8.3. Managing Prepended and Excluded Autonomous System Path Filters
531
13.8.3.1. Viewing a List of Prepended Autonomous System Path Filters
532
13.8.3.2. Viewing a List of Excluded Autonomous System Paths
532
13.8.3.3. Adding a Prepended Autonomous System Path Filter
532
13.8.3.4. Adding an Excluded Autonomous System Path filter
533
13.8.3.5. Deleting a Prepended Autonomous System Path Filter
533
13.8.3.6. Deleting an Excluded Autonomous System Path Filter
534
13.8.4. Managing Prefix Lists and Entries
534
13.8.4.1. Viewing a List of Prefix Lists
534
13.8.4.2. Viewing a List of Prefix Entries
535
13.8.4.3. Adding a Prefix List
535
13.8.4.4. Adding a Prefix Entry
536
13.8.4.5. Deleting a Prefix List
536
13.8.4.6. Deleting a Prefix Entry
537
13.8.5. Managing Autonomous System Paths and Entries
537
13.8.5.1. Viewing a List of Autonomous System Paths
537
13.8.5.2. Viewing a List of Autonomous System Path Entries
538
13.8.5.3. Adding an Autonomous System Path Filter
538
13.8.5.4. Adding an Autonomous System Path Filter Entry
538
13.8.5.5. Deleting an Autonomous System Path
539
13.8.5.6. Deleting an Autonomous System Path Filter Entry
539
13.8.6. Managing Neighbors
539
13.8.6.1. Viewing a List of Neighbors
540
13.8.6.2. Adding a Neighbor
540
13.8.6.3. Configuring the Distribution of Prefix Lists
541
13.8.6.4. Tracking Commands for BGP Neighbors
542
13.8.6.5. Deleting a Neighbor
542
13.8.7. Managing Networks
543
13.8.7.1. Viewing a List of Networks
543
13.8.7.2. Adding a Network
544
13.8.7.3. Tracking Commands for a BGP Network
544
13.8.7.4. Deleting a Network
544
13.8.8. Managing Aggregate Addresses
545
13.8.8.1. Viewing a List of Aggregate Addresses
545
13.8.8.2. Adding an Aggregate Address
545
13.8.8.3. Deleting an Aggregate Address
546
13.8.9. Managing Aggregate Address Options
546
13.8.9.1. Viewing a List of Aggregate Address Options
546
13.8.9.2. Adding an Aggregate Address Option
547
13.8.9.3. Deleting an Aggregate Address Option
547
13.8.10. Managing Redistribution Metrics
547
13.8.10.1. Viewing a List of Redistribution Metrics
547
13.8.10.2. Adding a Redistribution Metric
548
13.8.10.3. Deleting a Redistribution Metric
548
13.8.11. Managing Route Reflector Options
548
13.8.11.1. Understanding Route Reflectors
549
13.8.11.2. Configuring the Device as a Route Reflector
552
13.8.11.3. Configuring BGP Neighbors as Clients
552
13.8.11.4. Example: Basic Route Reflection
553
13.8.11.5. Example: Linking Clusters
555
13.8.11.6. Example: Clusters in Clusters
557
13.8.11.7. Example: Route Reflection in a VRF Instance
559
13.8.11.8. Example: Route Reflection with VPNv4 Clients
562
13.8.12. Viewing the Status of Dynamic BGP Routes
562
13.8.13. Resetting a BGP Session
565
13.9. Managing OSPF
566
13.9.1. OSPF Concepts
567
13.9.2. Configuring OSPF
567
13.9.3. Viewing the Status of Dynamic OSPF Routes
568
13.9.4. Managing Prefix Lists and Entries
570
13.9.4.1. Viewing a List of Prefix Lists
570
13.9.4.2. Viewing a List of Prefix Entries
571
13.9.4.3. Adding a Prefix List
571
13.9.4.4. Adding a Prefix Entry
572
13.9.4.5. Deleting a Prefix List
573
13.9.4.6. Deleting a Prefix Entry
573
13.9.5. Managing Areas
574
13.9.5.1. Viewing a List of Areas
574
13.9.5.2. Adding an Area
574
13.9.5.3. Deleting an Area
575
13.9.6. Managing Route Maps
576
13.9.6.1. Viewing a List of Route Map Filters
576
13.9.6.2. Viewing a List of Route Map Filter Entries
577
13.9.6.3. Adding a Route Map Filter
577
13.9.6.4. Adding a Route Map Filter Entry
578
13.9.6.5. Deleting a Route Map Filter
578
13.9.6.6. Deleting a Route Map Filter Entry
579
13.9.6.7. Configuring Match Rules
579
13.9.7. Managing Incoming Route Filters
580
13.9.7.1. Viewing List of Incoming Route Filters
580
13.9.7.2. Adding an Incoming Route Filter
581
13.9.7.3. Deleting an Incoming Route Filter
581
13.9.8. Managing Redistribution Metrics
582
13.9.8.1. Viewing a List of Redistribution Metrics
582
13.9.8.2. Adding a Redistribution Metric
582
13.9.8.3. Deleting a Redistribution Metric
583
13.9.9. Managing Routing Interfaces
583
13.9.9.1. Viewing a List of Routing Interfaces
584
13.9.9.2. Configuring a Routing Interface
584
13.9.10. Managing Message Digest Keys
586
13.9.10.1. Viewing a List of Message Digest Keys
587
13.9.10.2. Adding a Message Digest Key
587
13.9.10.3. Deleting a Message Digest Key
587
13.10. Managing MPLS
588
13.10.1. Viewing the Status of IP Binding
588
13.10.2. Viewing the Status of the Forwarding Table
589
13.10.3. Enabling/Disabling MPLS
590
13.10.4. Managing the MPLS Interfaces
590
13.10.4.1. Viewing the Status of MPLS Interfaces
590
13.10.4.2. Viewing a List of MPLS Interfaces
591
13.10.4.3. Enabling/Disabling an MPLS Interface
591
13.10.5. Managing Static Label Binding
592
13.10.5.1. Viewing the Status of Static Label Binding
592
13.10.5.2. Viewing a List of Static Labels
593
13.10.5.3. Adding a Static Label
593
13.10.5.4. Deleting a Static Label
594
13.10.6. Managing Static Cross-Connects
594
13.10.6.1. Viewing the Status of Static Cross-Connects
594
13.10.6.2. Viewing a List of Static Cross-Connects
595
13.10.6.3. Adding a Static Cross-Connect
595
13.10.6.4. Deleting a Static Cross-Connect
596
13.10.7. Managing LDP
596
13.10.7.1. Viewing the Status of LDP Binding
597
13.10.7.2. Viewing the Status of the LDP Discovery Interfaces
597
13.10.7.3. Viewing the Status of the LDP Neighbor Local Node Information
598
13.10.7.4. Viewing the Status of the LDP Neighbor Connection Information
599
13.10.7.5. Viewing the Status of the LDP Neighbor Discovery Information
599
13.10.7.6. Configuring LDP
600
13.10.7.7. Configuring Neighbor Discovery
601
13.10.7.8. Viewing a List of LDP Interfaces
601
13.10.7.9. Enabling/Disabling an LDP Interface
602
13.11. Managing Virtual Routing and Forwarding (VRF)
602
13.11.1. VRF Concepts
603
13.11.1.1. VRF and VRF-Lite
603
13.11.1.2. Advantages and Disadvantages of Using VRF
603
13.11.2. Viewing VRF Interface Statistics
604
13.11.3. Configuring VRF
605
13.11.4. Configuring a VRF Interface
606
13.11.5. Managing VRF Definitions
607
13.11.5.1. Viewing a List of VRF Definitions
607
13.11.5.2. Adding a VRF Definition
607
13.11.5.3. Deleting a VRF Definition
608
13.11.6. Managing Route Targets
608
13.11.6.1. Viewing a List of Route Targets
609
13.11.6.2. Adding a Route Target
609
13.11.6.3. Deleting a Route Target
610
13.11.7. Managing VRF Instances and OSPF
610
13.11.7.1. Viewing a List of VRF Instances
610
13.11.7.2. Adding a VRF Instance and Configuring OSPF
611
13.11.7.3. Deleting a VRF Instance
612
13.11.8. Managing IP/VPN Tunnels
612
13.11.8.1. Viewing a List of IP/VPN Tunnels
613
13.11.8.2. Adding an IP/VPN Tunnel
613
13.11.8.3. Deleting an IP/VPN Tunnels
614
13.11.9. Managing VPNv4 Neighbors
614
13.11.9.1. Viewing a List of Neighbors
614
13.11.9.2. Adding a Neighbor
615
13.11.9.3. Deleting a Neighbor
615
13.11.10. Managing IPv4 Address Families
615
13.11.10.1. Viewing a List of IPv4 Address Families
616
13.11.10.2. Adding an IPv4 Address Family
616
13.11.10.3. Deleting an IPv4 Address Family
616
13.11.11. Managing Redistribution for IPv4 Address Families
617
13.11.11.1. Viewing a List of Redistributions
617
13.11.11.2. Adding a Redistribution
618
13.11.11.3. Deleting a Redistribution
618
13.11.12. Managing Neighbors for IPv4 Address Families
618
13.11.12.1. Viewing a List of Neighbors
619
13.11.12.2. Adding a Neighbor
619
13.11.12.3. Configuring the Distribution of Prefix Lists
620
13.11.12.4. Tracking Commands
621
13.11.12.5. Deleting a Neighbor
621
13.11.13. Managing Static VRF Routes
622
13.11.13.1. Viewing a List of Static VRF Routes
622
13.11.13.2. Adding a Static VRF Route
622
13.11.13.3. Configuring a Black Hole Connection for a Static VRF Route
623
13.11.13.4. Deleting a Static VRF Route
623
13.11.14. Managing Gateways for Static VRF Routes
624
13.11.14.1. Viewing a List of Gateways for Static VRF Routes
624
13.11.14.2. Adding a Gateway for a Static VRF Route
624
13.11.14.3. Deleting a Gateway for a Static VRF Route
625
13.11.15. Managing Interfaces for Static VRF Routes
625
13.11.15.1. Viewing a List of Interfaces for Static VRF Routes
625
13.11.15.2. Adding a Gateway for a Static VRF Route
626
13.11.15.3. Deleting a Gateway for a Static VRF Route
626
13.12. Managing Static Routing
627
13.12.1. Viewing a List of Static Routes
627
13.12.2. Adding an IPv4 Static Route
628
13.12.3. Adding an IPv6 Static Route
628
13.12.4. Deleting a Static Route
629
13.12.5. Configuring a Black Hole Connection for an IPv4 Static Route
629
13.12.6. Managing Gateways for Static Routes
629
13.12.6.1. Configuring Gateways for IPv6 Static Routes
630
13.12.6.2. Viewing a List of Gateways for IPv4 Static Routes
630
13.12.6.3. Adding a Gateway for an IPv4 Static Route
631
13.12.6.4. Deleting a Gateway for an IPv4 Static Route
631
13.12.7. Managing Interfaces for Static Routes
631
13.12.7.1. Configuring Interfaces for IPv6 Static Routes
632
13.12.7.2. Viewing a List of Interfaces for IPv4 Static Routes
632
13.12.7.3. Adding an Interface for an IPv4 Static Route
632
13.12.7.4. Deleting an Interface for an IPv4 Static Route
633
13.13. Managing Static Multicast Routing
633
13.13.1. Enabling/Disabling Static Multicast Routing
633
13.13.2. Managing Static Multicast Groups
634
13.13.2.1. Viewing a List of Static Multicast Groups
634
13.13.2.2. Adding a Static Multicast Group
635
13.13.2.3. Deleting a Static Multicast Group
635
13.13.3. Managing Out-Interfaces
635
13.13.3.1. Viewing a List of Out-Interfaces
636
13.13.3.2. Adding an Out-Interface
636
13.13.3.3. Deleting an Out-Interface
636
13.14. Managing Dynamic Multicast Routing
637
13.14.1. PIM-SM Concepts
638
13.14.2. Viewing the Status of PIM-SM
638
13.14.3. Viewing the Status of Dynamic Multicast Routing
639
13.14.4. Configuring PIM-SM
640
13.14.5. Setting the Device as a BSR Candidate
640
13.14.6. Setting the Device as an RP Candidate
641
13.14.7. Managing PIM-SM Interfaces
641
13.14.7.1. Viewing a List of PIM-SM Interfaces
641
13.14.7.2. Enabling/Disabling a PIM-SM Interface
642
13.14.8. Managing Static RP Addresses
642
13.14.8.1. Viewing a List of Static RP Addresses
643
13.14.8.2. Adding a Static RP Address
643
13.14.8.3. Deleting a Static RP Address
643
13.14.9. Managing Multicast Group Prefixes
644
13.14.9.1. Viewing a List of Multicast Group Prefixes
644
13.14.9.2. Adding a Multicast Group Prefix
644
13.14.9.3. Deleting a Multicast Group Prefix
645
14. Network Redundancy
647
14.1. Managing VRRP
647
14.1.1. VRRP Concepts
648
14.1.1.1. Static Routing vs. VRRP
648
14.1.1.2. VRRP Terminology
648
14.1.1.3. Connection Synchronization
651
14.1.2. Viewing the Status of VRRP
651
14.1.3. Enabling/Disabling VRRP
652
14.1.4. Managing VRRP Trackers
652
14.1.4.1. Viewing a List of VRRP Trackers
653
14.1.4.2. Adding a VRRP Tracker
653
14.1.4.3. Deleting a VRRP Tracker
654
14.1.5. Managing VRRP Groups
654
14.1.5.1. Viewing a List of VRRP Groups
654
14.1.5.2. Adding a VRRP Group
655
14.1.5.3. Deleting a VRRP Group
655
14.1.6. Managing VRRP Instances
655
14.1.6.1. Viewing a List of VRRP Instances
656
14.1.6.2. Adding a VRRP Instance
656
14.1.6.3. Deleting a VRRP Instance
658
14.1.7. Managing VRRP Monitors
658
14.1.7.1. Viewing a List of VRRP Monitors
658
14.1.7.2. Adding a VRRP Monitor
659
14.1.7.3. Deleting a VRRP Monitor
659
14.1.8. Managing Track Scripts
659
14.1.8.1. Viewing a List of Track Scripts
660
14.1.8.2. Adding a Track Script
660
14.1.8.3. Deleting a Track Script
660
14.1.9. Managing Virtual IP Addresses
661
14.1.9.1. Viewing a List of Virtual IP Addresses
661
14.1.9.2. Adding a Virtual IP Address
661
14.1.9.3. Deleting a Virtual IP Address
662
14.1.10. Managing Connection Synchronization
662
14.1.10.1. Configuring Connection Synchronization
662
14.1.10.2. Enabling/Disabling Connection Synchronization
663
14.1.10.3. Viewing a List of Dedicated LInks
663
14.1.10.4. Adding a Dedicated Link
664
14.1.10.5. Deleting a Dedicated Link
664
14.1.10.6. Selecting a Default Dedicated Link
665
14.1.10.7. Viewing the Status of Each Dedicated Link
665
14.2. Managing Link Failover Protection
666
14.2.1. Viewing the Link Failover Log
667
14.2.2. Viewing the Link Failover Status
667
14.2.3. Managing Link Failover Parameters
668
14.2.3.1. Viewing a List of Link Failover Parameters
668
14.2.3.2. Adding a Link Failover Parameter
669
14.2.3.3. Deleting a Link Failover Parameter
670
14.2.4. Managing Link Failover Backup Interfaces
670
14.2.4.1. Viewing a List of Link Failover Backup Interfaces
670
14.2.4.2. Adding a Link Failover Backup Interface
671
14.2.4.3. Deleting a Link Failover Backup Interface
672
14.2.5. Managing Link Failover Ping Targets
672
14.2.5.1. Viewing a List of Link Failover Ping Targets
672
14.2.5.2. Adding a Link Failover Ping Target
673
14.2.5.3. Deleting a Link Failover Ping target
673
14.2.6. Testing Link Failover
673
14.2.7. Canceling a Link Failover Test
674
14.3. Managing Spanning Tree Protocol
674
14.3.1. RSTP Operation
675
14.3.1.1. RSTP States and Roles
675
14.3.1.2. Edge Ports
677
14.3.1.3. Point-to-Point and Multipoint Links
677
14.3.1.4. Path and Port Costs
677
14.3.1.5. Bridge Diameter
678
14.3.1.6. eRSTP
678
14.3.1.7. Fast Root Failover
679
14.3.2. RSTP Applications
680
14.3.2.1. RSTP in Structured Wiring Configurations
680
14.3.2.2. RSTP in Ring Backbone Configurations
681
14.3.2.3. RSTP Port Redundancy
683
14.3.3. MSTP Operation
683
14.3.3.1. MSTP Regions and Interoperability
684
14.3.3.2. MSTP Bridge and Port Roles
685
14.3.3.3. Benefits of MSTP
686
14.3.3.4. Implementing MSTP on a Bridged Network
687
14.3.4. Configuring STP Globally
687
14.3.5. Configuring STP for Switched Ethernet Ports and Ethernet Trunk Interfaces
690
14.3.6. Managing Multiple Spanning Tree Instances Globally
691
14.3.6.1. Viewing Statistics for Multiple Spanning Tree Instances
691
14.3.6.2. Viewing a List of Multiple Spanning Tree Instances
693
14.3.6.3. Adding a Multiple Spanning Tree Instance
693
14.3.6.4. Deleting a Multiple Spanning Tree Instance
694
14.3.7. Managing Multiple Spanning Tree Instances Per-Port
694
14.3.7.1. Viewing Per-Port Multiple Spanning Tree Instance Statistics
695
14.3.7.2. Viewing a List of Per-Port Multiple Spanning Tree Instances
696
14.3.7.3. Adding a Port-Specific Multiple Spanning Tree Instance
697
14.3.7.4. Deleting a Port-Specific Multiple Spanning Tree Instances
698
14.3.8. Viewing the Status of RSTP
699
14.3.9. Viewing RSTP Per-Port Statistics
701
14.3.10. Clearing Spanning Tree Protocol Statistics
703
14.4. Managing Redundant Network Access (RNA)
703
14.4.1. Understanding RNA
703
14.4.1.1. Parallel Redundancy Protocol (PRP)
704
14.4.1.2. Supervision Frames
705
14.4.1.3. PRP Requirements
705
14.4.2. Configuring RNA
705
14.4.3. Viewing the Proxy Nodes Table
706
14.4.4. Viewing the Nodes Table
706
14.4.5. Viewing Statistics Collected for RNA Ports
707
14.4.6. Clearing Statistics Collected for RNA Ports
708
15. Network Discovery and Management
709
15.1. Managing LLDP
709
15.1.1. Configuring LLDP
710
15.1.2. Viewing Global Statistics and Advertised System Information
711
15.1.3. Viewing Statistics for LLDP Neighbors
712
15.1.4. Viewing Statistics for LLDP Ports
714
15.2. Managing SNMP
715
15.2.1. MIB Files and SNMP Traps
716
15.2.2. Enabling and Configuring SNMP Sessions
718
15.2.3. Viewing Statistics for SNMP
719
15.2.4. Discovering SNMP Engine IDs
720
15.2.5. Managing SNMP Communities
720
15.2.5.1. Viewing a List of SNMP Communities
721
15.2.5.2. Adding an SNMP Community
721
15.2.5.3. Deleting an SNMP Community
721
15.2.6. Managing SNMP Target Addresses
722
15.2.6.1. Viewing a List of SNMP Target Addresses
722
15.2.6.2. Adding an SNMP Target Address
722
15.2.6.3. Deleting an SNMP Target Address
724
15.2.7. Managing SNMP Users
724
15.2.7.1. Viewing a List of SNMP Users
724
15.2.7.2. Adding an SNMP User
725
15.2.7.3. Deleting an SNMP User
725
15.2.8. Managing SNMP Security Model Mapping
726
15.2.8.1. Viewing a List of SNMP Security Models
726
15.2.8.2. Adding an SNMP Security Model
726
15.2.8.3. Deleting an SNMP Security Model
727
15.2.9. Managing SNMP Group Access
727
15.2.9.1. Viewing a List of SNMP Groups
727
15.2.9.2. Adding an SNMP Group
728
15.2.9.3. Deleting an SNMP Group
729
15.3. Managing NETCONF
729
15.3.1. Enabling and Configuring NETCONF Sessions
729
15.3.2. Viewing NETCONF Statistics
730
16. Traffic Control and Classification
733
16.1. Managing Port Mirroring
733
16.1.1. Configuring Port Mirroring
734
16.1.2. Managing Egress Source Ports
734
16.1.2.1. Viewing a List of Egress Source Ports
734
16.1.2.2. Adding an Egress Source Port
735
16.1.2.3. Deleting an Egress Source Port
735
16.1.3. Managing Ingress Source Ports
735
16.1.3.1. Viewing a List of Ingress Source Ports
736
16.1.3.2. Adding an Ingress Source Port
736
16.1.3.3. Deleting an Ingress Source Port
736
16.2. Managing Traffic Control
737
16.2.1. Enabling and Configuring Traffic Control
737
16.2.2. Managing Traffic Control Interfaces
739
16.2.2.1. Viewing a List of Traffic Control Interfaces
739
16.2.2.2. Adding a Traffic Control Interface
739
16.2.2.3. Deleting a Traffic Control Interface
740
16.2.3. Managing Traffic Control Priorities
741
16.2.3.1. Viewing a List of Traffic Control Priorities
741
16.2.3.2. Adding a Traffic Control Priority
741
16.2.3.3. Deleting a Traffic Control Priority
742
16.2.4. Managing Traffic Control Classes
743
16.2.4.1. Viewing a List of Traffic Control Classes
743
16.2.4.2. Adding a Traffic Control Class
744
16.2.4.3. Deleting a Traffic Control Class
745
16.2.5. Managing Traffic Control Devices
745
16.2.5.1. Viewing a List of Traffic Control Devices
746
16.2.5.2. Adding a Traffic Control Device
746
16.2.5.3. Deleting a Traffic Control Device
747
16.2.6. Managing Traffic Control Rules
747
16.2.6.1. Viewing a List of Traffic Control Rules
748
16.2.6.2. Adding a Traffic Control Rule
748
16.2.6.3. Configuring QoS Marking
749
16.2.6.4. Deleting aTraffic Control Rule
753
16.2.7. Managing QoS Mapping for VLANs
753
16.2.7.1. Viewing a List of QoS Maps for VLANs
753
16.2.7.2. Adding a QoS Map
754
16.2.7.3. Deleting a QoS Map
755
16.2.8. Managing Egress Markers for QoS Maps
756
16.2.8.1. Viewing a List of Egress Marks
756
16.2.8.2. Adding an Egress Mark
757
16.2.8.3. Deleting an Egress Mark
757
16.2.9. Viewing QoS Statistics
758
16.3. Managing Classes of Service
759
16.3.1. Configuring Classes of Service
760
16.3.2. Managing Priority-to-CoS Mapping
761
16.3.2.1. Viewing a List of Priority-to-CoS Mapping Entries
761
16.3.2.2. Adding a Priority-to-CoS Mapping Entry
761
16.3.2.3. Deleting a Priority-to-CoS Mapping Entry
762
16.3.3. Managing DSCP-to-CoS Mapping
762
16.3.3.1. Viewing a List of DSCP-to-CoS Mapping Entries
762
16.3.3.2. Adding a DSCP-to-CoS Mapping Entry
763
16.3.3.3. Deleting a DSCP-to-CoS Mapping Entry
763
16.4. Managing NetFlow Data Export
764
16.4.1. Understanding NetFlow Data Export
764
16.4.1.1. Flow Records
765
16.4.2. Configuring NetFlow Data Export
766
16.4.3. Enabling/Disabling NetFlow
766
16.4.4. Setting the NetFlow Engine ID
767
16.4.5. Controlling the NetFlow Cache
767
16.4.6. Controlling Active/Inactive Flows
767
16.4.7. Managing NetFlow Interfaces
768
16.4.7.1. Viewing a List of NetFlow Interfaces
768
16.4.7.2. Adding a NetFlow Interface
768
16.4.7.3. Deleting a NetFlow Interface
769
16.4.8. Managing NetFlow Collectors
769
16.4.8.1. Viewing a List of NetFlow Collectors
769
16.4.8.2. Adding a NetFlow Collector
770
16.4.8.3. Enabling/Disabling a NetFlow Collector
770
16.4.8.4. Deleting a NetFlow Collector
771
16.4.9. Viewing the Status of NetFlow
771
16.4.10. Example: Exporting Flows to Multiple Collectors
772
17. Time Services
775
17.1. Configuring the Time Synchronization Settings
775
17.2. Configuring the System Time and Date
776
17.3. Configuring the System Time Zone
776
17.4. Configuring the Local Time Settings
776
17.5. Enabling and Configuring the NTP Service
777
17.6. Viewing the NTP Service Status
777
17.7. Viewing the Status of Reference Clocks
779
17.8. Managing NTP Servers
780
17.8.1. Viewing a List of NTP Servers
780
17.8.2. Monitoring Subscribers
781
17.8.3. Adding an NTP Server
782
17.8.4. Deleting an NTP Server
783
17.8.5. Managing Server Keys
783
17.8.5.1. Viewing a List of Server Keys
783
17.8.5.2. Adding a Server Key
784
17.8.5.3. Deleting a Server Key
784
17.8.6. Managing Server Restrictions
784
17.8.6.1. Viewing a List of Server Restrictions
785
17.8.6.2. Adding a Server Restriction
785
17.8.6.3. Deleting a Server Restriction
786
17.9. Managing NTP Broadcast/Multicast Clients
786
17.9.1. Enabling and Configuring NTP Multicast Clients
787
17.9.2. Enabling and Configuring NTP Broadcast Clients
787
17.9.3. Managing NTP Broadcast/Multicast Addresses
787
17.9.3.1. Viewing a List of Broadcast/Multicast Addresses
788
17.9.3.2. Adding a Broadcast/Multicast Address
788
17.9.3.3. Deleting a Broadcast/Multicast Address
789
18. Applications
791
18.1. Viewing a List of Installed Applications
791
18.2. Installing an Application
791
18.3. Upgrading an Application
792
18.4. Uninstalling an Application
792
18.5. Managing Application Repositories
792
18.5.1. Viewing a List of Repositories
793
18.5.2. Checking the Repository Connection
793
18.5.3. Adding a Repository
793
18.5.4. Deleting a Repository
794
19. Troubleshooting
795
19.1. Feature Keys
795
19.2. Ethernet Ports
795
19.3. Multicast Filtering
796
19.4. Spanning Tree
797
19.5. VLANs
798
5
Based on 1 rating
Ask a question
Give review
Questions and Answers:
Need help?
Do you have a question about the Siemens RUGGEDCOM ROX II and is the answer not in the manual?
Ask a question
Siemens RUGGEDCOM ROX II Specifications
General
Brand
Siemens
Model
RUGGEDCOM ROX II
Category
Network Hardware
Language
English
Related product manuals
Siemens RUGGEDCOM RX1400
66 pages
Siemens RS-485
14 pages
Siemens ESM
98 pages
Siemens 181
73 pages
Siemens NK8232
84 pages
Siemens SANTIS-ab
28 pages
Siemens Sinumerik 810T
312 pages
Siemens SIMATIC NET S7-CPs
20 pages
Siemens SIMATIC NET S7-1500
90 pages
Siemens SIMATIC PN/CAN LINK
170 pages
Siemens SIMATIC NET PROFIBUS
490 pages
SIMATIC NET SCALANCE X-100 Series
74 pages
Need help?
General
To Next Page